Skip to content

ci(deps): bump the all-actions group with 3 updates - #2603

Merged
dyoshikawa merged 1 commit into
mainfrom
dependabot/github_actions/all-actions-4c32f8a646
Aug 7, 2026
Merged

ci(deps): bump the all-actions group with 3 updates#2603
dyoshikawa merged 1 commit into
mainfrom
dependabot/github_actions/all-actions-4c32f8a646

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 7, 2026

Copy link
Copy Markdown
Contributor

Bumps the all-actions group with 3 updates: jdx/mise-action, anomalyco/opencode/github and actions/attest.

Updates jdx/mise-action from 4.2.3 to 4.2.4

Release notes

Sourced from jdx/mise-action's releases.

v4.2.4: Reliable locking detection under forced color

A small patch release that fixes locking-support detection when workflows force colored output.

Fixed

Detect mise install --locked reliably under forced color (#580 by @​scop)

When colored output was forced globally (for example via CLICOLOR_FORCE=1), ANSI escape codes in mise install --help prevented the action from matching --locked in the help text, so locking support was reported as unavailable even on versions of mise that supported it.

The help probe now runs with NO_COLOR=1 in its environment, which overrides CLICOLOR_FORCE and guarantees plain-text output for the feature detection — regardless of the surrounding workflow's color settings.

Full Changelog: jdx/mise-action@v4.2.3...v4.2.4

Changelog

Sourced from jdx/mise-action's changelog.

Changelog


4.2.4 - 2026-07-28

🐛 Bug Fixes

  • locking support detection with force-colored output (#580) by @​scop in #580

4.2.3 - 2026-07-24

🐛 Bug Fixes


4.2.2 - 2026-07-24

🐛 Bug Fixes

📚 Documentation

New Contributors


4.2.1 - 2026-07-16

🐛 Bug Fixes

🔍 Other Changes

⚙️ Miscellaneous Tasks

... (truncated)

Commits
  • 7e36c90 chore: release v4.2.4 (#581)
  • 493a5fd chore(deps): update jdx/renovate-config digest to d4f71e1 (#585)
  • 4f79861 chore(deps): update github/codeql-action action to v4.37.2 (#586)
  • 3fb09b2 chore(deps): update jdx/pr-closer action to v1.2.0 (#584)
  • 4606f11 chore(deps): update jdx/renovate-config digest to aa7a43b (#582)
  • 2319179 chore(deps): update actions/checkout action to v7.0.1 (#583)
  • b4fa3f8 fix: locking support detection with force-colored output (#580)
  • c3c9861 chore(deps): lock file maintenance (#579)
  • See full diff in compare view

Updates anomalyco/opencode/github from 1.18.10 to 1.18.14

Release notes

Sourced from anomalyco/opencode/github's releases.

v1.18.14

Core

Improvements

  • Simplified xAI login to a single device-code flow that works better in headless and remote environments.

Bugfixes

  • Preserved structured mid-stream provider errors so compatible providers can retry failed responses.
  • Retried more transient provider and network errors instead of failing immediately.
  • Counted cache writes in ACP usage totals.
  • Logged remote workspace 5xx response bodies in the host logs to make proxy failures easier to debug. (@​jamesmurdza)
  • Stopped sending the host directory path to remote workspaces so prompts resolve from the remote project root. (@​jamesmurdza)
  • Waited for queued ACP session updates before ending a turn.

Thank you to 1 community contributor:

  • @​jamesmurdza:
    • fix(server): don't forward host directory to remote workspace (#40136)
    • fix(server): log upstream 5xx bodies from proxied workspace requests (#40135)

v1.18.13

TUI

Bugfixes

  • GitHub pull request reviews now include the pull request number and URL in context.

Desktop

Bugfixes

  • Fixed several right-to-left layout issues across tabs, drawers, resizing, and titlebar interactions.
  • Fixed shared right-to-left UI behavior such as directional icons and drawer placement.
  • Sessions without titles now fall back to generated names instead of appearing blank.
  • Moved markdown parsing off the main thread to keep the app more responsive while rendering messages.

Improvements

  • Localized more desktop UI copy, including native menus, update dialogs, and help content.
  • Added early right-to-left layout support across the app and session views.
  • Added locale-aware plural rules so translated counts and summaries read correctly.
  • Expanded translation coverage and added more supported desktop languages.

Thank you to 1 community contributor:

v1.18.12

Core

Bugfixes

  • Fixed Azure GPT-5.5+ completion requests failing when reasoning is enabled. (@​frederiknsgo)

Desktop

Bugfixes

... (truncated)

Commits

Updates actions/attest from 4.2.1 to 4.2.2

Release notes

Sourced from actions/attest's releases.

v4.2.2

What's Changed

Full Changelog: actions/attest@v4.2.1...v4.2.2

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the all-actions group with 3 updates: [jdx/mise-action](https://github.com/jdx/mise-action), [anomalyco/opencode/github](https://github.com/anomalyco/opencode) and [actions/attest](https://github.com/actions/attest).


Updates `jdx/mise-action` from 4.2.3 to 4.2.4
- [Release notes](https://github.com/jdx/mise-action/releases)
- [Changelog](https://github.com/jdx/mise-action/blob/main/CHANGELOG.md)
- [Commits](jdx/mise-action@9e7f763...7e36c90)

Updates `anomalyco/opencode/github` from 1.18.10 to 1.18.14
- [Release notes](https://github.com/anomalyco/opencode/releases)
- [Commits](anomalyco/opencode@7902e04...65cf14d)

Updates `actions/attest` from 4.2.1 to 4.2.2
- [Release notes](https://github.com/actions/attest/releases)
- [Changelog](https://github.com/actions/attest/blob/main/RELEASE.md)
- [Commits](actions/attest@508db95...1e69f48)

---
updated-dependencies:
- dependency-name: jdx/mise-action
  dependency-version: 4.2.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-actions
- dependency-name: anomalyco/opencode/github
  dependency-version: 1.18.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-actions
- dependency-name: actions/attest
  dependency-version: 4.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Aug 7, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: automated, ci. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dyoshikawa
dyoshikawa merged commit de5a857 into main Aug 7, 2026
9 checks passed
@dyoshikawa

Copy link
Copy Markdown
Owner

@dependabot Thank you!

@dyoshikawa
dyoshikawa deleted the dependabot/github_actions/all-actions-4c32f8a646 branch August 7, 2026 06:19
This was referenced Aug 8, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants