Bump the github-actions-updates group across 1 directory with 8 updates by dependabot[bot] · Pull Request #71302 · apache/airflow

dependabot · 2026-08-07T17:06:16Z

Bumps the github-actions-updates group with 8 updates in the / directory:

Package	From	To
actions/setup-java	`5.6.0`	`5.7.0`
pnpm/action-setup	`6.0.9`	`6.0.10`
apache/infrastructure-actions/allowlist-check	`0ff9972b5872e19c9f4555c9159c2fea4f794355`	`b69225a81154602226df0f441cf23b95a55cf4f8`
apache/infrastructure-actions/stash/restore	`0ff9972b5872e19c9f4555c9159c2fea4f794355`	`b69225a81154602226df0f441cf23b95a55cf4f8`
apache/infrastructure-actions/stash/save	`0ff9972b5872e19c9f4555c9159c2fea4f794355`	`b69225a81154602226df0f441cf23b95a55cf4f8`
github/codeql-action/init	`4.37.3`	`4.37.5`
github/codeql-action/autobuild	`4.37.3`	`4.37.5`
github/codeql-action/analyze	`4.37.3`	`4.37.5`

Updates actions/setup-java from 5.6.0 to 5.7.0

Release notes

Sourced from actions/setup-java's releases.

v5.7.0

What's Changed

Fix npm audit failures on releases/v5 by @brunoborges in actions/setup-java#1154

Backport #1151: Fix missing wrapper cache distributions by @brunoborges in actions/setup-java#1153

Deprecate legacy Adopt distributions in v5 by @brunoborges in actions/setup-java#1186

Full Changelog: actions/setup-java@v5.6.0...v5.7.0

Commits

b6effb0 Deprecate legacy Adopt distributions in v5 (#1186)
e498d2a Backport #1151: Fix missing wrapper cache distributions (#1153)
6a3384d Fix npm audit failures on releases/v5 (#1154)
See full diff in compare view

Updates pnpm/action-setup from 6.0.9 to 6.0.10

Release notes

Sourced from pnpm/action-setup's releases.

v6.0.10

What's Changed

docs(README): point users to the successor pnpm/setup action by @BlackHole1 in pnpm/action-setup#282

refactor: introduce restore keys for cache by @SukkaW in pnpm/action-setup#280

ci: use pnpm 11 for pr-check by @jamietanna in pnpm/action-setup#284

fix: update pnpm to v11.19.0 by @jamietanna in pnpm/action-setup#283

docs: update README to include devEngines.packageManager by @nemchik in pnpm/action-setup#273

New Contributors

@jamietanna made their first contribution in pnpm/action-setup#284

@nemchik made their first contribution in pnpm/action-setup#273

Full Changelog: pnpm/action-setup@v6...v6.0.10

Commits

0977fd9 docs: Update README to include devEngines.packageManager (#273)
48261ac fix: update pnpm to v11.19.0 (#283)
75677f7 ci: use pnpm 11 for pr-check (#284)
769ae71 refactor: introduce restore keys for cache (#280)
6fed91f docs(README): point users to the successor pnpm/setup action (#282)
See full diff in compare view

Updates apache/infrastructure-actions/allowlist-check from 0ff9972b5872e19c9f4555c9159c2fea4f794355 to b69225a81154602226df0f441cf23b95a55cf4f8

Commits

b69225a Sync actions.yml, composite action, and approved_patterns.yml
c121089 action-allowlist-review: bump 1Password/load-secrets-action (#1141)
880e798 Bump actions/setup-java from 5.6.0 to 5.7.0 in /.github/workflows (#1159)
ac357c3 action-allowlist-review: bump gradle/actions/wrapper-validation (#1149)
324fd97 action-allowlist-review: bump gradle/actions/setup-gradle (#1146)
f321860 action-allowlist-review: bump coursier/setup-action (#1151)
cdff76b Bump the codeql-action group across 1 directory with 3 updates (#1152)
6a8cc44 Remove Expired Refs
8f52420 Sync actions.yml, composite action, and approved_patterns.yml
df67ef1 action-allowlist-review: bump matlab-actions/setup-matlab (#1140)
Additional commits viewable in compare view

Updates apache/infrastructure-actions/stash/restore from 0ff9972b5872e19c9f4555c9159c2fea4f794355 to b69225a81154602226df0f441cf23b95a55cf4f8

Commits

b69225a Sync actions.yml, composite action, and approved_patterns.yml
c121089 action-allowlist-review: bump 1Password/load-secrets-action (#1141)
880e798 Bump actions/setup-java from 5.6.0 to 5.7.0 in /.github/workflows (#1159)
ac357c3 action-allowlist-review: bump gradle/actions/wrapper-validation (#1149)
324fd97 action-allowlist-review: bump gradle/actions/setup-gradle (#1146)
f321860 action-allowlist-review: bump coursier/setup-action (#1151)
cdff76b Bump the codeql-action group across 1 directory with 3 updates (#1152)
6a8cc44 Remove Expired Refs
8f52420 Sync actions.yml, composite action, and approved_patterns.yml
df67ef1 action-allowlist-review: bump matlab-actions/setup-matlab (#1140)
Additional commits viewable in compare view

Updates apache/infrastructure-actions/stash/save from 0ff9972b5872e19c9f4555c9159c2fea4f794355 to b69225a81154602226df0f441cf23b95a55cf4f8

Commits

b69225a Sync actions.yml, composite action, and approved_patterns.yml
c121089 action-allowlist-review: bump 1Password/load-secrets-action (#1141)
880e798 Bump actions/setup-java from 5.6.0 to 5.7.0 in /.github/workflows (#1159)
ac357c3 action-allowlist-review: bump gradle/actions/wrapper-validation (#1149)
324fd97 action-allowlist-review: bump gradle/actions/setup-gradle (#1146)
f321860 action-allowlist-review: bump coursier/setup-action (#1151)
cdff76b Bump the codeql-action group across 1 directory with 3 updates (#1152)
6a8cc44 Remove Expired Refs
8f52420 Sync actions.yml, composite action, and approved_patterns.yml
df67ef1 action-allowlist-review: bump matlab-actions/setup-matlab (#1140)
Additional commits viewable in compare view

Updates github/codeql-action/init from 4.37.3 to 4.37.5

Release notes

Sourced from github/codeql-action/init's releases.

v4.37.5

Fixed a bug where a network error while streaming the download of the CodeQL bundle could terminate the init Action instead of falling back to downloading the bundle before extracting it. #4061

v4.37.4

This version of the CodeQL Action adds support for the tools input for the codeql-action/init step to be specified using a github-codeql-tools repository property. This feature will gradually be rolled out following the release of this version. Once rolled out, this allows for the CodeQL CLI version that is used in GitHub-managed workflows, such as Default Setup, to be set to a custom value. For example, customers who run into issues with rate limits when a new CodeQL CLI version is released can set the value to toolcache to always use the CodeQL CLI version that is available in the runner toolcache. For Advanced Setup workflows, the value provided for tools in the workflow definition always takes precedence unless the value of the repository property starts with !. #4037

Update default CodeQL bundle version to 2.26.2. #4051

Changelog

Sourced from github/codeql-action/init's changelog.

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

[UNRELEASED]

No user facing changes.

4.37.6 - 04 Aug 2026

Changed the default filepath for the new remote file address format that was introduced in CodeQL Action 4.37.0 / 3.37.0 to .github/codeql-config.yml to align it with the suggested path that is used elsewhere. #4070

4.37.5 - 03 Aug 2026

Fixed a bug where a network error while streaming the download of the CodeQL bundle could terminate the init Action instead of falling back to downloading the bundle before extracting it. #4061

4.37.4 - 29 Jul 2026

This version of the CodeQL Action adds support for the tools input for the codeql-action/init step to be specified using a github-codeql-tools repository property. This feature will gradually be rolled out following the release of this version. Once rolled out, this allows for the CodeQL CLI version that is used in GitHub-managed workflows, such as Default Setup, to be set to a custom value. For example, customers who run into issues with rate limits when a new CodeQL CLI version is released can set the value to toolcache to always use the CodeQL CLI version that is available in the runner toolcache. For Advanced Setup workflows, the value provided for tools in the workflow definition always takes precedence unless the value of the repository property starts with !. #4037

Update default CodeQL bundle version to 2.26.2. #4051

4.37.3 - 22 Jul 2026

No user facing changes.

4.37.2 - 21 Jul 2026

The new address format for the config-file input that was introduced in CodeQL Action 4.37.0 is now enabled by default. In addition to the format described there, the remote= prefix can now be used to explicitly indicate that the input refers to a remote file. All previous input formats continue to be accepted as well. #4023

The CodeQL Action can now make use of configured private registries in Default Setup to retrieve CodeQL configuration files from remote repositories that require authentication. This will allow customers to store their CodeQL configuration in a single repository that can then be referenced by Default Setup workflows in other repositories. We expect to roll this and other, related changes out to everyone in July. #4007

4.37.1 - 16 Jul 2026

Upcoming breaking change: Add a deprecation warning for customers using CodeQL version 2.20.6 and earlier. These versions of CodeQL were discontinued on 1 July 2026 alongside GitHub Enterprise Server 3.16, and will be unsupported by the next minor release of the CodeQL Action. #3956

Update default CodeQL bundle version to 2.26.1. #4019

4.37.0 - 08 Jul 2026

Update default CodeQL bundle version to 2.26.0. #3995

In addition to the existing input format, the config-file input for the codeql-action/init step will soon support a new [owner/]repo[@ref][:path] format. All components except the repository name are optional. If omitted, owner defaults to the same owner as the repository the analysis is running for, ref to main, and path to .github/codeql-action.yaml. Support for this format ships in this version of the CodeQL Action, but will only be enabled over the coming weeks. #3973

4.36.3 - 01 Jul 2026

No user facing changes.

4.36.2 - 04 Jun 2026

Cache CodeQL CLI version information across Actions steps. #3943

Reduce requests while waiting for analysis processing by using exponential backoff when polling SARIF processing status. #3937

Update default CodeQL bundle version to 2.25.6. #3948

... (truncated)

Commits

d1ba80a Merge pull request #4067 from github/update-v4.37.5-1cd4d01d5
e74600b Update changelog for v4.37.5
1cd4d01 Merge pull request #4061 from github/henrymercer/turbo-system
d2bfc30 Merge pull request #4050 from github/mbg/status/registries
68028fc Merge pull request #4062 from github/sam-robson/migrate-enterprise-release-pat
c29563e ci: use federated enterprise release PAT
155e522 Link the PR from the changelog entry
2d3b351 Handle network errors when streaming the CodeQL bundle download
5d3eb98 Merge pull request #4055 from github/dependabot/npm_and_yarn/npm-minor-203262...
c5f739b Merge branch 'main' into dependabot/npm_and_yarn/npm-minor-2032624187
Additional commits viewable in compare view

Updates github/codeql-action/autobuild from 4.37.3 to 4.37.5

Release notes

Sourced from github/codeql-action/autobuild's releases.

v4.37.5

Fixed a bug where a network error while streaming the download of the CodeQL bundle could terminate the init Action instead of falling back to downloading the bundle before extracting it. #4061

v4.37.4

This version of the CodeQL Action adds support for the tools input for the codeql-action/init step to be specified using a github-codeql-tools repository property. This feature will gradually be rolled out following the release of this version. Once rolled out, this allows for the CodeQL CLI version that is used in GitHub-managed workflows, such as Default Setup, to be set to a custom value. For example, customers who run into issues with rate limits when a new CodeQL CLI version is released can set the value to toolcache to always use the CodeQL CLI version that is available in the runner toolcache. For Advanced Setup workflows, the value provided for tools in the workflow definition always takes precedence unless the value of the repository property starts with !. #4037

Update default CodeQL bundle version to 2.26.2. #4051

Changelog

Sourced from github/codeql-action/autobuild's changelog.

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

[UNRELEASED]

No user facing changes.

4.37.6 - 04 Aug 2026

Changed the default filepath for the new remote file address format that was introduced in CodeQL Action 4.37.0 / 3.37.0 to .github/codeql-config.yml to align it with the suggested path that is used elsewhere. #4070

4.37.5 - 03 Aug 2026

Fixed a bug where a network error while streaming the download of the CodeQL bundle could terminate the init Action instead of falling back to downloading the bundle before extracting it. #4061

4.37.4 - 29 Jul 2026

This version of the CodeQL Action adds support for the tools input for the codeql-action/init step to be specified using a github-codeql-tools repository property. This feature will gradually be rolled out following the release of this version. Once rolled out, this allows for the CodeQL CLI version that is used in GitHub-managed workflows, such as Default Setup, to be set to a custom value. For example, customers who run into issues with rate limits when a new CodeQL CLI version is released can set the value to toolcache to always use the CodeQL CLI version that is available in the runner toolcache. For Advanced Setup workflows, the value provided for tools in the workflow definition always takes precedence unless the value of the repository property starts with !. #4037

Update default CodeQL bundle version to 2.26.2. #4051

4.37.3 - 22 Jul 2026

No user facing changes.

4.37.2 - 21 Jul 2026

The new address format for the config-file input that was introduced in CodeQL Action 4.37.0 is now enabled by default. In addition to the format described there, the remote= prefix can now be used to explicitly indicate that the input refers to a remote file. All previous input formats continue to be accepted as well. #4023

The CodeQL Action can now make use of configured private registries in Default Setup to retrieve CodeQL configuration files from remote repositories that require authentication. This will allow customers to store their CodeQL configuration in a single repository that can then be referenced by Default Setup workflows in other repositories. We expect to roll this and other, related changes out to everyone in July. #4007

4.37.1 - 16 Jul 2026

Upcoming breaking change: Add a deprecation warning for customers using CodeQL version 2.20.6 and earlier. These versions of CodeQL were discontinued on 1 July 2026 alongside GitHub Enterprise Server 3.16, and will be unsupported by the next minor release of the CodeQL Action. #3956

Update default CodeQL bundle version to 2.26.1. #4019

4.37.0 - 08 Jul 2026

Update default CodeQL bundle version to 2.26.0. #3995

In addition to the existing input format, the config-file input for the codeql-action/init step will soon support a new [owner/]repo[@ref][:path] format. All components except the repository name are optional. If omitted, owner defaults to the same owner as the repository the analysis is running for, ref to main, and path to .github/codeql-action.yaml. Support for this format ships in this version of the CodeQL Action, but will only be enabled over the coming weeks. #3973

4.36.3 - 01 Jul 2026

No user facing changes.

4.36.2 - 04 Jun 2026

Cache CodeQL CLI version information across Actions steps. #3943

Reduce requests while waiting for analysis processing by using exponential backoff when polling SARIF processing status. #3937

Update default CodeQL bundle version to 2.25.6. #3948

... (truncated)

Commits

d1ba80a Merge pull request #4067 from github/update-v4.37.5-1cd4d01d5
e74600b Update changelog for v4.37.5
1cd4d01 Merge pull request #4061 from github/henrymercer/turbo-system
d2bfc30 Merge pull request #4050 from github/mbg/status/registries
68028fc Merge pull request #4062 from github/sam-robson/migrate-enterprise-release-pat
c29563e ci: use federated enterprise release PAT
155e522 Link the PR from the changelog entry
2d3b351 Handle network errors when streaming the CodeQL bundle download
5d3eb98 Merge pull request #4055 from github/dependabot/npm_and_yarn/npm-minor-203262...
c5f739b Merge branch 'main' into dependabot/npm_and_yarn/npm-minor-2032624187
Additional commits viewable in compare view

Updates github/codeql-action/analyze from 4.37.3 to 4.37.5

Release notes

Sourced from github/codeql-action/analyze's releases.

v4.37.5

Fixed a bug where a network error while streaming the download of the CodeQL bundle could terminate the init Action instead of falling back to downloading the bundle before extracting it. #4061

v4.37.4

This version of the CodeQL Action adds support for the tools input for the codeql-action/init step to be specified using a github-codeql-tools repository property. This feature will gradually be rolled out following the release of this version. Once rolled out, this allows for the CodeQL CLI version that is used in GitHub-managed workflows, such as Default Setup, to be set to a custom value. For example, customers who run into issues with rate limits when a new CodeQL CLI version is released can set the value to toolcache to always use the CodeQL CLI version that is available in the runner toolcache. For Advanced Setup workflows, the value provided for tools in the workflow definition always takes precedence unless the value of the repository property starts with !. #4037

Update default CodeQL bundle version to 2.26.2. #4051

Changelog

Sourced from github/codeql-action/analyze's changelog.

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

[UNRELEASED]

No user facing changes.

4.37.6 - 04 Aug 2026

Changed the default filepath for the new remote file address format that was introduced in CodeQL Action 4.37.0 / 3.37.0 to .github/codeql-config.yml to align it with the suggested path that is used elsewhere. #4070

4.37.5 - 03 Aug 2026

Fixed a bug where a network error while streaming the download of the CodeQL bundle could terminate the init Action instead of falling back to downloading the bundle before extracting it. #4061

4.37.4 - 29 Jul 2026

This version of the CodeQL Action adds support for the tools input for the codeql-action/init step to be specified using a github-codeql-tools repository property. This feature will gradually be rolled out following the release of this version. Once rolled out, this allows for the CodeQL CLI version that is used in GitHub-managed workflows, such as Default Setup, to be set to a custom value. For example, customers who run into issues with rate limits when a new CodeQL CLI version is released can set the value to toolcache to always use the CodeQL CLI version that is available in the runner toolcache. For Advanced Setup workflows, the value provided for tools in the workflow definition always takes precedence unless the value of the repository property starts with !. #4037

Update default CodeQL bundle version to 2.26.2. #4051

4.37.3 - 22 Jul 2026

No user facing changes.

4.37.2 - 21 Jul 2026

The new address format for the config-file input that was introduced in CodeQL Action 4.37.0 is now enabled by default. In addition to the format described there, the remote= prefix can now be used to explicitly indicate that the input refers to a remote file. All previous input formats continue to be accepted as well. #4023

The CodeQL Action can now make use of configured private registries in Default Setup to retrieve CodeQL configuration files from remote repositories that require authentication. This will allow customers to store their CodeQL configuration in a single repository that can then be referenced by Default Setup workflows in other repositories. We expect to roll this and other, related changes out to everyone in July. #4007

4.37.1 - 16 Jul 2026

Upcoming breaking change: Add a deprecation warning for customers using CodeQL version 2.20.6 and earlier. These versions of CodeQL were discontinued on 1 July 2026 alongside GitHub Enterprise Server 3.16, and will be unsupported by the next minor release of the CodeQL Action. #3956

Update default CodeQL bundle version to 2.26.1. #4019

4.37.0 - 08 Jul 2026

Update default CodeQL bundle version to 2.26.0. #3995

In addition to the existing input format, the config-file input for the codeql-action/init step will soon support a new [owner/]repo[@ref][:path] format. All components except the repository name are optional. If omitted, owner defaults to the same owner as the repository the analysis is running for, ref to main, and path to .github/codeql-action.yaml. Support for this format ships in this version of the CodeQL Action, but will only be enabled over the coming weeks. #3973

4.36.3 - 01 Jul 2026

No user facing changes.

4.36.2 - 04 Jun 2026

Cache CodeQL CLI version information across Actions steps. #3943

Reduce requests while waiting for analysis processing by using exponential backoff when polling SARIF processing status. #3937

Update default CodeQL bundle version to 2.25.6. #3948

... (truncated)

Commits

d1ba80a Merge pull request #4067 from github/update-v4.37.5-1cd4d01d5
e74600b Update changelog for v4.37.5
1cd4d01 Merge pull request #4061 from github/henrymercer/turbo-system
d2bfc30 Merge pull request #4050 from github/mbg/status/registries
68028fc Merge pull request #4062 from github/sam-robson/migrate-enterprise-release-pat
c29563e ci: use federated enterprise release PAT
155e522 Link the PR from the changelog entry
2d3b351 Handle network errors when streaming the CodeQL bundle download
5d3eb98 Merge pull request #4055 from github/dependabot/npm_and_yarn/npm-minor-203262...
c5f739b Merge branch 'main' into dependabot/npm_and_yarn/npm-minor-2032624187
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the github-actions-updates group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/setup-java](https://github.com/actions/setup-java) | `5.6.0` | `5.7.0` | | [pnpm/action-setup](https://github.com/pnpm/action-setup) | `6.0.9` | `6.0.10` | | [apache/infrastructure-actions/allowlist-check](https://github.com/apache/infrastructure-actions) | `0ff9972b5872e19c9f4555c9159c2fea4f794355` | `b69225a81154602226df0f441cf23b95a55cf4f8` | | [apache/infrastructure-actions/stash/restore](https://github.com/apache/infrastructure-actions) | `0ff9972b5872e19c9f4555c9159c2fea4f794355` | `b69225a81154602226df0f441cf23b95a55cf4f8` | | [apache/infrastructure-actions/stash/save](https://github.com/apache/infrastructure-actions) | `0ff9972b5872e19c9f4555c9159c2fea4f794355` | `b69225a81154602226df0f441cf23b95a55cf4f8` | | [github/codeql-action/init](https://github.com/github/codeql-action) | `4.37.3` | `4.37.5` | | [github/codeql-action/autobuild](https://github.com/github/codeql-action) | `4.37.3` | `4.37.5` | | [github/codeql-action/analyze](https://github.com/github/codeql-action) | `4.37.3` | `4.37.5` | Updates `actions/setup-java` from 5.6.0 to 5.7.0 - [Release notes](https://github.com/actions/setup-java/releases) - [Commits](actions/setup-java@03ad4de...b6effb0) Updates `pnpm/action-setup` from 6.0.9 to 6.0.10 - [Release notes](https://github.com/pnpm/action-setup/releases) - [Commits](pnpm/action-setup@0ebf471...0977fd9) Updates `apache/infrastructure-actions/allowlist-check` from 0ff9972b5872e19c9f4555c9159c2fea4f794355 to b69225a81154602226df0f441cf23b95a55cf4f8 - [Commits](apache/infrastructure-actions@0ff9972...b69225a) Updates `apache/infrastructure-actions/stash/restore` from 0ff9972b5872e19c9f4555c9159c2fea4f794355 to b69225a81154602226df0f441cf23b95a55cf4f8 - [Commits](apache/infrastructure-actions@0ff9972...b69225a) Updates `apache/infrastructure-actions/stash/save` from 0ff9972b5872e19c9f4555c9159c2fea4f794355 to b69225a81154602226df0f441cf23b95a55cf4f8 - [Commits](apache/infrastructure-actions@0ff9972...b69225a) Updates `github/codeql-action/init` from 4.37.3 to 4.37.5 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@e4fba86...d1ba80a) Updates `github/codeql-action/autobuild` from 4.37.3 to 4.37.5 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@e4fba86...d1ba80a) Updates `github/codeql-action/analyze` from 4.37.3 to 4.37.5 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@e4fba86...d1ba80a) --- updated-dependencies: - dependency-name: actions/setup-java dependency-version: 5.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions-updates - dependency-name: pnpm/action-setup dependency-version: 6.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-updates - dependency-name: apache/infrastructure-actions/allowlist-check dependency-version: b69225a81154602226df0f441cf23b95a55cf4f8 dependency-type: direct:production dependency-group: github-actions-updates - dependency-name: apache/infrastructure-actions/stash/restore dependency-version: b69225a81154602226df0f441cf23b95a55cf4f8 dependency-type: direct:production dependency-group: github-actions-updates - dependency-name: apache/infrastructure-actions/stash/save dependency-version: b69225a81154602226df0f441cf23b95a55cf4f8 dependency-type: direct:production dependency-group: github-actions-updates - dependency-name: github/codeql-action/init dependency-version: 4.37.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-updates - dependency-name: github/codeql-action/autobuild dependency-version: 4.37.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-updates - dependency-name: github/codeql-action/analyze dependency-version: 4.37.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-updates ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Aug 7, 2026

dependabot Bot requested review from amoghrajesh, ashb, bugraoz93, gopidesupavan, jason810496, jscheffl and potiuk as code owners August 7, 2026 17:06

dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Aug 7, 2026

boring-cyborg Bot added area:dev-tools area:registry backport-to-v3-3-test Backport to v3-3-test labels Aug 7, 2026

github-project-automation Bot added this to Airflow Registry Aug 7, 2026

github-project-automation Bot moved this to Backlog in Airflow Registry Aug 7, 2026

Navigation Menu

Uh oh!

Bump the github-actions-updates group across 1 directory with 8 updates - #71302

Bump the github-actions-updates group across 1 directory with 8 updates#71302
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-updates-5a7bca2f10

dependabot Bot commented on behalf of github Aug 7, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Aug 7, 2026

v5.7.0

What's Changed

v6.0.10

What's Changed

New Contributors

v4.37.5

v4.37.4

CodeQL Action Changelog

[UNRELEASED]

4.37.6 - 04 Aug 2026

4.37.5 - 03 Aug 2026

4.37.4 - 29 Jul 2026

4.37.3 - 22 Jul 2026

4.37.2 - 21 Jul 2026

4.37.1 - 16 Jul 2026

4.37.0 - 08 Jul 2026

4.36.3 - 01 Jul 2026

4.36.2 - 04 Jun 2026

v4.37.5

v4.37.4

CodeQL Action Changelog

[UNRELEASED]

4.37.6 - 04 Aug 2026

4.37.5 - 03 Aug 2026

4.37.4 - 29 Jul 2026

4.37.3 - 22 Jul 2026

4.37.2 - 21 Jul 2026

4.37.1 - 16 Jul 2026

4.37.0 - 08 Jul 2026

4.36.3 - 01 Jul 2026

4.36.2 - 04 Jun 2026

v4.37.5

v4.37.4

CodeQL Action Changelog

[UNRELEASED]

4.37.6 - 04 Aug 2026

4.37.5 - 03 Aug 2026

4.37.4 - 29 Jul 2026

4.37.3 - 22 Jul 2026

4.37.2 - 21 Jul 2026

4.37.1 - 16 Jul 2026

4.37.0 - 08 Jul 2026

4.36.3 - 01 Jul 2026

4.36.2 - 04 Jun 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants