Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 10, 2025

Updates the requirements on actions/checkout, actions/setup-java, docker/setup-qemu-action, docker/setup-buildx-action, aws-actions/configure-aws-credentials, aws-actions/amazon-ecr-login, peter-evans/create-or-update-comment, github/codeql-action, aquasecurity/trivy-action, actions/download-artifact, docker/setup-docker-action, actions/upload-artifact, docker/login-action, actions/setup-node, pnpm/action-setup, Ilshidur/action-discord, svenstaro/upload-release-action, peter-evans/repository-dispatch and actions/first-interaction to permit the latest version.
Updates actions/checkout from 4.0.0 to 6.0.1

Release notes

Sourced from actions/checkout's releases.

v6.0.1

What's Changed

Full Changelog: actions/checkout@v6...v6.0.1

v6.0.0

What's Changed

Full Changelog: actions/checkout@v5.0.0...v6.0.0

v6-beta

What's Changed

Updated persist-credentials to store the credentials under $RUNNER_TEMP instead of directly in the local git config.

This requires a minimum Actions Runner version of v2.329.0 to access the persisted credentials for Docker container action scenarios.

v5.0.1

What's Changed

Full Changelog: actions/checkout@v5...v5.0.1

v5.0.0

What's Changed

⚠️ Minimum Compatible Runner Version

v2.327.1
Release Notes

Make sure your runner is updated to this version or newer to use this release.

Full Changelog: actions/checkout@v4...v5.0.0

v4.3.1

What's Changed

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

v4.2.0

v4.1.7

v4.1.6

v4.1.5

... (truncated)

Commits

Updates actions/setup-java from 4.7.0 to 5.1.0

Release notes

Sourced from actions/setup-java's releases.

v5.1.0

What's Changed

New Features

Bug Fixes & Improvements

Documentation changes

Dependency updates

New Contributors

Full Changelog: actions/setup-java@v5...v5.1.0

v5.0.0

What's Changed

Breaking Changes

Make sure your runner is updated to this version or newer to use this release. v2.327.1 Release Notes

Dependency Upgrades

Bug Fixes

... (truncated)

Commits
  • f2beeb2 Bump actions/publish-action from 0.3.0 to 0.4.0 (#912)
  • 4e7e684 feat: Add support for .sdkmanrc file in java-version-file parameter (#736)
  • 46c56d6 Add GitHub Token Support for GraalVM and Refactor Code (#849)
  • 66b9457 Update SapMachine URLs (#955)
  • 6ba5449 Enhance error logging for network failures to include endpoint/IP details, ad...
  • de5a937 adds microsoft openjdk25 builds (#927)
  • ead9eaa Update Regex to Support All ASDF Versions for the supported distributions in ...
  • 8c57fa3 Clarify JAVA_HOME and PATH setup in README (#841)
  • a7ab372 Bump prettier from 2.8.8 to 3.6.2 (#873)
  • d0351b4 Update documentation to use checkout and Java v5 (#903)
  • Additional commits viewable in compare view

Updates docker/setup-qemu-action from 3.6.0 to 3.7.0

Release notes

Sourced from docker/setup-qemu-action's releases.

v3.7.0

Full Changelog: docker/setup-qemu-action@v3.6.0...v3.7.0

Commits
  • c7c5346 Merge pull request #230 from docker/dependabot/npm_and_yarn/docker/actions-to...
  • 3a517a1 chore: update generated content
  • a5b45ed build(deps): bump @​docker/actions-toolkit from 0.62.1 to 0.67.0
  • 3a64278 Merge pull request #220 from docker/dependabot/npm_and_yarn/brace-expansion-1...
  • 94906ba chore: update generated content
  • 4027abf build(deps): bump brace-expansion from 1.1.11 to 1.1.12
  • bee0aaa Merge pull request #221 from docker/dependabot/npm_and_yarn/tmp-0.2.4
  • 0d7e257 chore: update generated content
  • b869601 build(deps): bump tmp from 0.2.3 to 0.2.4
  • 3a043ed Merge pull request #219 from docker/dependabot/npm_and_yarn/undici-5.29.0
  • Additional commits viewable in compare view

Updates docker/setup-buildx-action from 3.10.0 to 3.11.1

Release notes

Sourced from docker/setup-buildx-action's releases.

v3.11.1

Full Changelog: docker/setup-buildx-action@v3.11.0...v3.11.1

v3.11.0

Full Changelog: docker/setup-buildx-action@v3.10.0...v3.11.0

Commits
  • e468171 Merge pull request #429 from crazy-max/fix-keep-state
  • a3e7502 chore: update generated content
  • b145473 fix keep-state not being respected
  • 18ce135 Merge pull request #425 from docker/dependabot/npm_and_yarn/docker/actions-to...
  • 0e198e9 chore: update generated content
  • 05f3f3a build(deps): bump @​docker/actions-toolkit from 0.61.0 to 0.62.1
  • 6229134 Merge pull request #427 from crazy-max/keep-state
  • c6f6a07 chore: update generated content
  • 6c5e29d skip builder creation if one already exists with the same name
  • 548b297 ci: keep-state check
  • Additional commits viewable in compare view

Updates aws-actions/configure-aws-credentials from 4.0.2 to 5.1.1

Release notes

Sourced from aws-actions/configure-aws-credentials's releases.

v5.1.1

5.1.1 (2025-11-24)

Miscellaneous Chores

  • release 5.1.1 (56d6a58)
  • various dependency updates

v5.1.0

5.1.0 (2025-10-06)

Features

Bug Fixes

v5.0.0

5.0.0 (2025-09-03)

⚠ BREAKING CHANGES

  • Cleanup input handling. Changes invalid boolean input behavior (see #1445)

Features

v4.3.1

4.3.1 (2025-08-04)

Bug Fixes

v4.3.0

4.3.0 (2025-08-04)

NOTE: This release tag originally pointed to 59b441846ad109fa4a1549b73ef4e149c4bfb53b, but a critical bug was discovered shortly after publishing. We updated this tag to d0834ad3a60a024346910e522a81b0002bd37fea to prevent anyone using the 4.3.0 tag from encountering the bug, and we published 4.3.1 to allow workflows to auto update correctly.

... (truncated)

Changelog

Sourced from aws-actions/configure-aws-credentials's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

5.1.1 (2025-11-24)

Miscellaneous Chores

5.1.0 (2025-10-06)

Features

Bug Fixes

5.0.0 (2025-09-03)

⚠ BREAKING CHANGES

  • Cleanup input handling. Changes invalid boolean input behavior (see #1445)

Features

4.3.1 (2025-08-04)

Bug Fixes

4.3.0 (2025-08-04)

Features

... (truncated)

Commits
  • 61815dc chore(main): release 5.1.1 (#1564)
  • 56d6a58 chore: release 5.1.1
  • 4a54c24 chore(deps-dev): bump glob from 10.4.5 to 10.5.0 (#1563)
  • b2793c9 chore(deps-dev): bump @​types/node from 24.10.0 to 24.10.1 (#1559)
  • 8c230bf chore: Update dist
  • f7a5b07 chore(deps): bump @​aws-sdk/client-sts from 3.928.0 to 3.933.0 (#1558)
  • 730fc04 chore(deps-dev): bump @​biomejs/biome from 2.3.4 to 2.3.6 (#1555)
  • bc0dd36 chore(deps-dev): bump memfs from 4.50.0 to 4.51.0 (#1556)
  • f2964c7 chore: Update dist
  • cf46495 chore(deps): bump @​aws-sdk/client-sts from 3.922.0 to 3.928.0 (#1548)
  • Additional commits viewable in compare view

Updates aws-actions/amazon-ecr-login from 9238dd443b7a5941caf19ffbe68be34d4dbd61df to d63b14614fe5d7fc5e5e52c523dea4e876816cc4

Changelog

Sourced from aws-actions/amazon-ecr-login's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

2.0.1 (2023-10-02)

2.0.0 (2023-10-02)

⚠ BREAKING CHANGES

  • The default value of the 'mask-password' input has been updated from false to true.

  • Treat maskPassword as false only if explicitly set to false

  • Add new-v2-release to README

Features

1.7.0 (2023-08-09)

Features

  • provide input to optionally mask output docker password (#491) (98f33d2)

1.6.2 (2023-06-26)

Bug Fixes

  • fix and upgrade https proxy agent (a3dee4b)

1.6.1 (2023-06-20)

Bug Fixes

1.6.0 (2023-03-29)

Features

  • add support for HTTP(s) proxy (454a99d)

... (truncated)

Commits
  • d63b146 chore(deps): bump @​aws-sdk/client-ecr from 3.823.0 to 3.830.0 (#783)
  • f06dab2 chore(deps): bump @​aws-sdk/client-ecr-public from 3.823.0 to 3.830.0 (#781)
  • a5bbe73 chore(deps-dev): bump jest from 29.7.0 to 30.0.0 (#777)
  • 95069fc chore(deps): bump @​aws-sdk/client-ecr from 3.817.0 to 3.823.0 (#776)
  • 8054539 chore(deps): bump @​aws-sdk/client-ecr-public from 3.817.0 to 3.823.0 (#774)
  • 0a67558 chore(deps): bump @​aws-sdk/client-ecr-public from 3.812.0 to 3.817.0 (#773)
  • e995b3a chore(deps): bump @​aws-sdk/client-ecr from 3.812.0 to 3.817.0 (#772)
  • 27f0358 chore(deps): bump @​aws-sdk/client-ecr from 3.808.0 to 3.812.0 (#771)
  • 491a406 chore(deps): bump @​aws-sdk/client-ecr-public from 3.808.0 to 3.812.0 (#770)
  • 0c34de4 chore(deps): bump @​aws-sdk/client-ecr from 3.804.0 to 3.808.0 (#768)
  • Additional commits viewable in compare view

Updates peter-evans/create-or-update-comment from 4.0.0 to 5.0.0

Release notes

Sourced from peter-evans/create-or-update-comment's releases.

Create or Update Comment v5.0.0

⚙️ Requires Actions Runner v2.327.1 or later if you are using a self-hosted runner for Node 24 support.

What's Changed

... (truncated)

Commits
  • e8674b0 feat: v5 (#439)
  • fffe59e build(deps-dev): bump @​types/node from 18.19.127 to 18.19.129 (#438)
  • 076d572 build(deps-dev): bump @​types/node from 18.19.126 to 18.19.127 (#437)
  • 86a2645 build(deps-dev): bump @​vercel/ncc from 0.38.3 to 0.38.4 (#436)
  • be17e0c build(deps-dev): bump @​types/node from 18.19.124 to 18.19.126 (#435)
  • ef75eae build(deps-dev): bump @​types/node from 18.19.123 to 18.19.124 (#433)
  • 82a7ad0 build(deps): bump actions/setup-node from 4 to 5 (#432)
  • f7c845d build(deps-dev): bump @​types/node from 18.19.122 to 18.19.123 (#430)
  • 5da8e07 build(deps-dev): bump eslint-plugin-prettier from 5.5.3 to 5.5.4 (#428)
  • 2de7f66Description has been truncated

Updates the requirements on [actions/checkout](https://github.com/actions/checkout), [actions/setup-java](https://github.com/actions/setup-java), [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action), [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action), [aws-actions/configure-aws-credentials](https://github.com/aws-actions/configure-aws-credentials), [aws-actions/amazon-ecr-login](https://github.com/aws-actions/amazon-ecr-login), [peter-evans/create-or-update-comment](https://github.com/peter-evans/create-or-update-comment), [github/codeql-action](https://github.com/github/codeql-action), [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action), [actions/download-artifact](https://github.com/actions/download-artifact), [docker/setup-docker-action](https://github.com/docker/setup-docker-action), [actions/upload-artifact](https://github.com/actions/upload-artifact), [docker/login-action](https://github.com/docker/login-action), [actions/setup-node](https://github.com/actions/setup-node), [pnpm/action-setup](https://github.com/pnpm/action-setup), [Ilshidur/action-discord](https://github.com/ilshidur/action-discord), [svenstaro/upload-release-action](https://github.com/svenstaro/upload-release-action), [peter-evans/repository-dispatch](https://github.com/peter-evans/repository-dispatch) and [actions/first-interaction](https://github.com/actions/first-interaction) to permit the latest version.

Updates `actions/checkout` from 4.0.0 to 6.0.1
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v4...8e8c483)

Updates `actions/setup-java` from 4.7.0 to 5.1.0
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](actions/setup-java@3a4f6e1...f2beeb2)

Updates `docker/setup-qemu-action` from 3.6.0 to 3.7.0
- [Release notes](https://github.com/docker/setup-qemu-action/releases)
- [Commits](docker/setup-qemu-action@2910929...c7c5346)

Updates `docker/setup-buildx-action` from 3.10.0 to 3.11.1
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](docker/setup-buildx-action@b5ca514...e468171)

Updates `aws-actions/configure-aws-credentials` from 4.0.2 to 5.1.1
- [Release notes](https://github.com/aws-actions/configure-aws-credentials/releases)
- [Changelog](https://github.com/aws-actions/configure-aws-credentials/blob/main/CHANGELOG.md)
- [Commits](aws-actions/configure-aws-credentials@e3dd6a4...61815dc)

Updates `aws-actions/amazon-ecr-login` from 9238dd443b7a5941caf19ffbe68be34d4dbd61df to d63b14614fe5d7fc5e5e52c523dea4e876816cc4
- [Release notes](https://github.com/aws-actions/amazon-ecr-login/releases)
- [Changelog](https://github.com/aws-actions/amazon-ecr-login/blob/main/CHANGELOG.md)
- [Commits](aws-actions/amazon-ecr-login@9238dd4...d63b146)

Updates `peter-evans/create-or-update-comment` from 4.0.0 to 5.0.0
- [Release notes](https://github.com/peter-evans/create-or-update-comment/releases)
- [Commits](peter-evans/create-or-update-comment@71345be...e8674b0)

Updates `github/codeql-action` to c43362b91a940600cde2ebae39ec7a35ad66bdc0
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/commits/c43362b91a940600cde2ebae39ec7a35ad66bdc0)

Updates `aquasecurity/trivy-action` from 0.32.0 to 0.33.1
- [Release notes](https://github.com/aquasecurity/trivy-action/releases)
- [Commits](aquasecurity/trivy-action@dc5a429...b6643a2)

Updates `actions/download-artifact` from 4.1.9 to 6.0.0
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](actions/download-artifact@cc20338...018cc2c)

Updates `docker/setup-docker-action` from 4.5.0 to 4.6.0
- [Release notes](https://github.com/docker/setup-docker-action/releases)
- [Commits](docker/setup-docker-action@efe9e38...e61617a)

Updates `actions/upload-artifact` from 4.6.1 to 5.0.0
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@4cec3d8...330a01c)

Updates `docker/login-action` from 3.4.0 to 3.6.0
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](docker/login-action@74a5d14...5e57cd1)

Updates `actions/setup-node` from 3 to 6
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@v3...v6)

Updates `pnpm/action-setup` from 4.1.0 to 4.2.0
- [Release notes](https://github.com/pnpm/action-setup/releases)
- [Commits](pnpm/action-setup@a7487c7...41ff726)

Updates `Ilshidur/action-discord` from 0.3.2 to 0.4.0
- [Release notes](https://github.com/ilshidur/action-discord/releases)
- [Commits](Ilshidur/action-discord@0c4b278...d259407)

Updates `svenstaro/upload-release-action` from 2.9.0 to 2.11.3
- [Release notes](https://github.com/svenstaro/upload-release-action/releases)
- [Changelog](https://github.com/svenstaro/upload-release-action/blob/master/CHANGELOG.md)
- [Commits](svenstaro/upload-release-action@04733e0...6b7fa9f)

Updates `peter-evans/repository-dispatch` from 3.0.0 to 4.0.1
- [Release notes](https://github.com/peter-evans/repository-dispatch/releases)
- [Commits](peter-evans/repository-dispatch@ff45666...28959ce)

Updates `actions/first-interaction` from 1 to 3
- [Release notes](https://github.com/actions/first-interaction/releases)
- [Commits](actions/first-interaction@3c71ce7...1c46889)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 6.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/setup-java
  dependency-version: 5.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: docker/setup-qemu-action
  dependency-version: 3.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: docker/setup-buildx-action
  dependency-version: 3.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: aws-actions/configure-aws-credentials
  dependency-version: 5.1.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: aws-actions/amazon-ecr-login
  dependency-version: d63b14614fe5d7fc5e5e52c523dea4e876816cc4
  dependency-type: direct:production
  dependency-group: github-actions
- dependency-name: peter-evans/create-or-update-comment
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: github/codeql-action
  dependency-version: c43362b91a940600cde2ebae39ec7a35ad66bdc0
  dependency-type: direct:production
  dependency-group: github-actions
- dependency-name: aquasecurity/trivy-action
  dependency-version: 0.33.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: actions/download-artifact
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: docker/setup-docker-action
  dependency-version: 4.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: actions/upload-artifact
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: docker/login-action
  dependency-version: 3.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: actions/setup-node
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: pnpm/action-setup
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: Ilshidur/action-discord
  dependency-version: 0.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: svenstaro/upload-release-action
  dependency-version: 2.11.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: peter-evans/repository-dispatch
  dependency-version: 4.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/first-interaction
  dependency-version: '3'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/github_actions/github-actions-58b1413f5e branch from fc30eb1 to 5c74e12 Compare December 11, 2025 19:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

scope/infra CI, CD, dev. env, etc. status/triage Issues pending maintainers triage type/dependencies A pull request/issue dedicated to updating the dependency(-ies)

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant