Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 8, 2025

Bumps the github-actions group with 14 updates in the / directory:

Package From To
actions/checkout 4 5
crate-ci/typos 1.19.0 1.36.2
codecov/codecov-action 4 5
chromaui/action 10 13
google-github-actions/auth 2 3
google-github-actions/setup-gcloud 2 3
google-github-actions/get-gke-credentials 2 3
contributor-assistant/github-action 2.3.2 2.6.1
actions/github-script 7 8
tj-actions/branch-names 8 9
toshimaru/auto-author-assign 2.1.0 2.1.1
aquasecurity/trivy-action 0.18.0 0.33.1
actions/stale 9.0.0 10.0.0
beatlabs/delete-old-branches-action 0.0.10 0.0.11

Updates actions/checkout from 4 to 5

Release notes

Sourced from actions/checkout's releases.

v5.0.0

What's Changed

⚠️ Minimum Compatible Runner Version

v2.327.1
Release Notes

Make sure your runner is updated to this version or newer to use this release.

Full Changelog: actions/checkout@v4...v5.0.0

v4.3.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v4...v4.3.0

v4.2.2

What's Changed

Full Changelog: actions/checkout@v4.2.1...v4.2.2

v4.2.1

What's Changed

New Contributors

Full Changelog: actions/checkout@v4.2.0...v4.2.1

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

V5.0.0

V4.3.0

v4.2.2

v4.2.1

v4.2.0

v4.1.7

v4.1.6

v4.1.5

v4.1.4

v4.1.3

... (truncated)

Commits

Updates crate-ci/typos from 1.19.0 to 1.36.2

Release notes

Sourced from crate-ci/typos's releases.

v1.36.2

[1.36.2] - 2025-09-04

Fixes

  • Fix regression from 1.36.1 when rendering an error for a line with invalid UTF-8

v1.36.1

[1.36.1] - 2025-09-03

Fixes

  • Replaced the error rendering for various quality of life improvements

v1.36.0

[1.36.0] - 2025-09-02

Features

v1.35.8

[1.35.8] - 2025-09-02

v1.35.7

[1.35.7] - 2025-08-29

Documentation

  • Expand PyPI metadata

v1.35.6

[1.35.6] - 2025-08-28

Fixes

  • Track go.mod as a golang file (regression from 1.13.21)

v1.35.5

[1.35.5] - 2025-08-18

Fixes

  • Fix typo in correction to accidently
  • Fix typo in correction to dynamincally
  • Fix typo in correction to interruptability
  • Fix typo in correction to interruptability
  • Fix typo in correction to messager
  • Fix typo in correction to preferables
  • Fix typo in correction to producibles

... (truncated)

Changelog

Sourced from crate-ci/typos's changelog.

[1.36.2] - 2025-09-04

Fixes

  • Fix regression from 1.36.1 when rendering an error for a line with invalid UTF-8

[1.36.1] - 2025-09-03

Fixes

  • Replaced the error rendering for various quality of life improvements

[1.36.0] - 2025-09-02

Features

[1.35.8] - 2025-09-02

[1.35.7] - 2025-08-29

Documentation

  • Expand PyPI metadata

[1.35.6] - 2025-08-28

Fixes

  • Track go.mod as a golang file (regression from 1.13.21)

[1.35.5] - 2025-08-18

Fixes

  • Fix typo in correction to accidently
  • Fix typo in correction to dynamincally
  • Fix typo in correction to interruptability
  • Fix typo in correction to interruptability
  • Fix typo in correction to messager
  • Fix typo in correction to preferables
  • Fix typo in correction to producibles
  • Fix typo in correction to restauranteur
  • Fix typo in correction to restauranteurs
  • Fix typo in correction to searialize
  • Fix typo in correction to somethin
  • Fix typo in correction to unaccessible
  • Fix typo in correction to unnesessarily

... (truncated)

Commits

Updates codecov/codecov-action from 4 to 5

Release notes

Sourced from codecov/codecov-action's releases.

v5.0.0

v5 Release

v5 of the Codecov GitHub Action will use the Codecov Wrapper to encapsulate the CLI. This will help ensure that the Action gets updates quicker.

Migration Guide

The v5 release also coincides with the opt-out feature for tokens for public repositories. In the Global Upload Token section of the settings page of an organization in codecov.io, you can set the ability for Codecov to receive a coverage reports from any source. This will allow contributors or other members of a repository to upload without needing access to the Codecov token. For more details see how to upload without a token.

[!WARNING]
The following arguments have been changed

  • file (this has been deprecated in favor of files)
  • plugin (this has been deprecated in favor of plugins)

The following arguments have been added:

  • binary
  • gcov_args
  • gcov_executable
  • gcov_ignore
  • gcov_include
  • report_type
  • skip_validation
  • swift_project

You can see their usage in the action.yml file.

What's Changed

... (truncated)

Changelog

Sourced from codecov/codecov-action's changelog.

v5 Release

v5 of the Codecov GitHub Action will use the Codecov Wrapper to encapsulate the CLI. This will help ensure that the Action gets updates quicker.

Migration Guide

The v5 release also coincides with the opt-out feature for tokens for public repositories. In the Global Upload Token section of the settings page of an organization in codecov.io, you can set the ability for Codecov to receive a coverage reports from any source. This will allow contributors or other members of a repository to upload without needing access to the Codecov token. For more details see how to upload without a token.

[!WARNING] The following arguments have been changed

  • file (this has been deprecated in favor of files)
  • plugin (this has been deprecated in favor of plugins)

The following arguments have been added:

  • binary
  • gcov_args
  • gcov_executable
  • gcov_ignore
  • gcov_include
  • report_type
  • skip_validation
  • swift_project

You can see their usage in the action.yml file.

What's Changed

... (truncated)

Commits

Updates chromaui/action from 10 to 13

Commits

Updates google-github-actions/auth from 2 to 3

Release notes

Sourced from google-github-actions/auth's releases.

v3

Floating v3 tag

v3.0.0

What's Changed

Full Changelog: google-github-actions/auth@v2...v3.0.0

v2.1.13

What's Changed

Full Changelog: google-github-actions/auth@v2.1.12...v2.1.13

v2.1.12

What's Changed

Full Changelog: google-github-actions/auth@v2.1.11...v2.1.12

v2.1.11

What's Changed

Full Changelog: google-github-actions/auth@v2.1.10...v2.1.11

v2.1.10

What's Changed

Full Changelog: google-github-actions/auth@v2.1.9...v2.1.10

v2.1.9

What's Changed

... (truncated)

Commits

Updates google-github-actions/setup-gcloud from 2 to 3

Release notes

Sourced from google-github-actions/setup-gcloud's releases.

v3

Floating v3 tag

v2.2.1

What's Changed

Full Changelog: google-github-actions/setup-gcloud@v2...v2.2.1

v2.2.0

What's Changed

Full Changelog: google-github-actions/setup-gcloud@v2.1.5...v2.2.0

v2.1.5

What's Changed

Full Changelog: google-github-actions/setup-gcloud@v2.1.4...v2.1.5

v2.1.4

What's Changed

Full Changelog: google-github-actions/setup-gcloud@v2.1.3...v2.1.4

v2.1.3

What's Changed

Full Changelog: google-github-actions/setup-gcloud@v2...v2.1.3

v2.1.2

What's Changed

... (truncated)

Commits

Updates google-github-actions/get-gke-credentials from 2 to 3

Release notes

Sourced from google-github-actions/get-gke-credentials's releases.

v3.0.0

What's Changed

Full Changelog: google-github-actions/get-gke-credentials@v2...v3.0.0

v2.3.5

What's Changed

Full Changelog: google-github-actions/get-gke-credentials@v2.3.4...v2.3.5

v2.3.4

What's Changed

Full Changelog: google-github-actions/get-gke-credentials@v2.3.3...v2.3.4

v2.3.3

What's Changed

Full Changelog: google-github-actions/get-gke-credentials@v2.3.2...v2.3.3

v2.3.2

What's Changed

Full Changelog: google-github-actions/get-gke-credentials@v2.3.1...v2.3.2

v2.3.1

What's Changed

... (truncated)

Commits

Updates contributor-assistant/github-action from 2.3.2 to 2.6.1

Release notes

Sourced from contributor-assistant/github-action's releases.

v2.6.1

What's Changed

Full Changelog: contributor-assistant/github-action@v2.6.0...v2.6.1

v2.6.0

What's Changed

New Contributors

Full Changelog: contributor-assistant/github-action@v2.5.2...v2.6.0

v2.5.2

What's Changed

New Contributors

Full Changelog: contributor-assistant/github-action@v2.5.1...v2.5.2

v2.5.1

What's Changed

Full Changelog: contributor-assistant/github-action@v2.5.0...v2.5.1

v2.5.0

What's Changed

New Contributors

Full Changelog: contributor-assistant/github-action@v2.4.0...v2.5.0

v2.4.0

What's Changed

New Contributors

Bumps the github-actions group with 14 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `4` | `5` |
| [crate-ci/typos](https://github.com/crate-ci/typos) | `1.19.0` | `1.36.2` |
| [codecov/codecov-action](https://github.com/codecov/codecov-action) | `4` | `5` |
| [chromaui/action](https://github.com/chromaui/action) | `10` | `13` |
| [google-github-actions/auth](https://github.com/google-github-actions/auth) | `2` | `3` |
| [google-github-actions/setup-gcloud](https://github.com/google-github-actions/setup-gcloud) | `2` | `3` |
| [google-github-actions/get-gke-credentials](https://github.com/google-github-actions/get-gke-credentials) | `2` | `3` |
| [contributor-assistant/github-action](https://github.com/contributor-assistant/github-action) | `2.3.2` | `2.6.1` |
| [actions/github-script](https://github.com/actions/github-script) | `7` | `8` |
| [tj-actions/branch-names](https://github.com/tj-actions/branch-names) | `8` | `9` |
| [toshimaru/auto-author-assign](https://github.com/toshimaru/auto-author-assign) | `2.1.0` | `2.1.1` |
| [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) | `0.18.0` | `0.33.1` |
| [actions/stale](https://github.com/actions/stale) | `9.0.0` | `10.0.0` |
| [beatlabs/delete-old-branches-action](https://github.com/beatlabs/delete-old-branches-action) | `0.0.10` | `0.0.11` |



Updates `actions/checkout` from 4 to 5
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v4...v5)

Updates `crate-ci/typos` from 1.19.0 to 1.36.2
- [Release notes](https://github.com/crate-ci/typos/releases)
- [Changelog](https://github.com/crate-ci/typos/blob/master/CHANGELOG.md)
- [Commits](crate-ci/typos@v1.19.0...v1.36.2)

Updates `codecov/codecov-action` from 4 to 5
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](codecov/codecov-action@v4...v5)

Updates `chromaui/action` from 10 to 13
- [Release notes](https://github.com/chromaui/action/releases)
- [Commits](chromaui/action@v10...v13)

Updates `google-github-actions/auth` from 2 to 3
- [Release notes](https://github.com/google-github-actions/auth/releases)
- [Changelog](https://github.com/google-github-actions/auth/blob/main/CHANGELOG.md)
- [Commits](google-github-actions/auth@v2...v3)

Updates `google-github-actions/setup-gcloud` from 2 to 3
- [Release notes](https://github.com/google-github-actions/setup-gcloud/releases)
- [Changelog](https://github.com/google-github-actions/setup-gcloud/blob/main/CHANGELOG.md)
- [Commits](google-github-actions/setup-gcloud@v2...v3)

Updates `google-github-actions/get-gke-credentials` from 2 to 3
- [Release notes](https://github.com/google-github-actions/get-gke-credentials/releases)
- [Changelog](https://github.com/google-github-actions/get-gke-credentials/blob/main/CHANGELOG.md)
- [Commits](google-github-actions/get-gke-credentials@v2...v3)

Updates `contributor-assistant/github-action` from 2.3.2 to 2.6.1
- [Release notes](https://github.com/contributor-assistant/github-action/releases)
- [Commits](contributor-assistant/github-action@v2.3.2...v2.6.1)

Updates `actions/github-script` from 7 to 8
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](actions/github-script@v7...v8)

Updates `tj-actions/branch-names` from 8 to 9
- [Release notes](https://github.com/tj-actions/branch-names/releases)
- [Changelog](https://github.com/tj-actions/branch-names/blob/main/HISTORY.md)
- [Commits](tj-actions/branch-names@v8...v9)

Updates `toshimaru/auto-author-assign` from 2.1.0 to 2.1.1
- [Release notes](https://github.com/toshimaru/auto-author-assign/releases)
- [Changelog](https://github.com/toshimaru/auto-author-assign/blob/main/CHANGELOG.md)
- [Commits](toshimaru/auto-author-assign@v2.1.0...v2.1.1)

Updates `aquasecurity/trivy-action` from 0.18.0 to 0.33.1
- [Release notes](https://github.com/aquasecurity/trivy-action/releases)
- [Commits](aquasecurity/trivy-action@062f259...b6643a2)

Updates `actions/stale` from 9.0.0 to 10.0.0
- [Release notes](https://github.com/actions/stale/releases)
- [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md)
- [Commits](actions/stale@v9.0.0...v10.0.0)

Updates `beatlabs/delete-old-branches-action` from 0.0.10 to 0.0.11
- [Release notes](https://github.com/beatlabs/delete-old-branches-action/releases)
- [Commits](beatlabs/delete-old-branches-action@v0.0.10...v0.0.11)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: crate-ci/typos
  dependency-version: 1.36.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: codecov/codecov-action
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: chromaui/action
  dependency-version: '13'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: google-github-actions/auth
  dependency-version: '3'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: google-github-actions/setup-gcloud
  dependency-version: '3'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: google-github-actions/get-gke-credentials
  dependency-version: '3'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: contributor-assistant/github-action
  dependency-version: 2.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: actions/github-script
  dependency-version: '8'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: tj-actions/branch-names
  dependency-version: '9'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: toshimaru/auto-author-assign
  dependency-version: 2.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: aquasecurity/trivy-action
  dependency-version: 0.33.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: actions/stale
  dependency-version: 10.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: beatlabs/delete-old-branches-action
  dependency-version: 0.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Sep 8, 2025
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Oct 6, 2025

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Oct 6, 2025
@dependabot dependabot bot deleted the dependabot/github_actions/github-actions-fb5a20c8a8 branch October 6, 2025 11:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants