Bump the actions group with 2 updates by dependabot[bot] · Pull Request #112 · lando/node

dependabot · 2026-02-19T22:11:07Z

Bumps the actions group with 2 updates: actions/add-to-project and actions/cache.

Updates actions/add-to-project from 1.0.0 to 1.0.2

Release notes

Sourced from actions/add-to-project's releases.

v1.0.2

What's Changed

build(deps-dev): bump braces from 3.0.2 to 3.0.3 by @dependabot in actions/add-to-project#583

build(deps-dev): bump @types/node from 16.18.96 to 16.18.101 by @dependabot in actions/add-to-project#588

build(deps-dev): bump ts-jest from 29.1.2 to 29.1.5 by @dependabot in actions/add-to-project#582

build(deps-dev): bump @typescript-eslint/parser from 7.6.0 to 7.14.1 by @dependabot in actions/add-to-project#589

build(deps-dev): bump @typescript-eslint/eslint-plugin from 7.6.0 to 7.14.1 by @dependabot in actions/add-to-project#590

build(deps-dev): bump eslint-plugin-jest from 27.9.0 to 28.6.0 by @dependabot in actions/add-to-project#578

Dependabot/npm and yarn/eslint plugin jest 28.6.0 fixes by @talune in actions/add-to-project#591

Full Changelog: actions/add-to-project@v1.0.1...v1.0.2

v1.0.1

Summary

This release includes dependency updates, including security fix to undici.

What's Changed

Dependabot/npm and yarn/undici 5.28.4 fixes by @skw in actions/add-to-project#550

build(deps-dev): bump @typescript-eslint/parser from 7.4.0 to 7.6.0 by @dependabot in actions/add-to-project#546

build(deps-dev): bump @typescript-eslint/eslint-plugin from 7.4.0 to 7.6.0 by @dependabot in actions/add-to-project#547

build(deps-dev): bump typescript from 5.4.3 to 5.4.5 by @dependabot in actions/add-to-project#549

build(deps-dev): bump @types/node from 16.18.91 to 16.18.96 by @dependabot in actions/add-to-project#548

build(deps): bump undici from 5.28.3 to 5.28.4 by @dependabot in actions/add-to-project#542

Full Changelog: actions/add-to-project@v1.0.0...v1.0.1

Commits

244f685 Merge pull request #591 from actions/dependabot/npm_and_yarn/eslint-plugin-je...
2a5ef71 Build and package
8c11461 Update license for json-schema.dep.yml
66f6cff Merge pull request #578 from actions/dependabot/npm_and_yarn/eslint-plugin-je...
ddf5099 Merge pull request #590 from actions/dependabot/npm_and_yarn/typescript-eslin...
da1ae5b build(deps-dev): bump @typescript-eslint/eslint-plugin
ced87c7 Merge pull request #589 from actions/dependabot/npm_and_yarn/typescript-eslin...
c78e6a1 Merge pull request #582 from actions/dependabot/npm_and_yarn/ts-jest-29.1.5
267a19f build(deps-dev): bump @typescript-eslint/parser from 7.6.0 to 7.14.1
e005a86 Merge pull request #588 from actions/dependabot/npm_and_yarn/types/node-16.18...
Additional commits viewable in compare view

Updates actions/cache from 4 to 5

Release notes

Sourced from actions/cache's releases.

v5.0.0

[!IMPORTANT] actions/cache@v5 runs on the Node.js 24 runtime and requires a minimum Actions Runner version of 2.327.1.

If you are using self-hosted runners, ensure they are updated before upgrading.

What's Changed

Upgrade to use node24 by @salmanmkc in actions/cache#1630

Prepare v5.0.0 release by @salmanmkc in actions/cache#1684

Full Changelog: actions/cache@v4.3.0...v5.0.0

v4.3.0

What's Changed

Add note on runner versions by @GhadimiR in actions/cache#1642

Prepare v4.3.0 release by @Link- in actions/cache#1655

New Contributors

@GhadimiR made their first contribution in actions/cache#1642

Full Changelog: actions/cache@v4...v4.3.0

v4.2.4

What's Changed

Update README.md by @nebuk89 in actions/cache#1620

Upgrade @actions/cache to 4.0.5 and move @protobuf-ts/plugin to dev depdencies by @Link- in actions/cache#1634

Prepare release 4.2.4 by @Link- in actions/cache#1636

New Contributors

@nebuk89 made their first contribution in actions/cache#1620

Full Changelog: actions/cache@v4...v4.2.4

v4.2.3

What's Changed

Update to use @actions/cache 4.0.3 package & prepare for new release by @salmanmkc in actions/cache#1577 (SAS tokens for cache entries are now masked in debug logs)

New Contributors

@salmanmkc made their first contribution in actions/cache#1577

Full Changelog: actions/cache@v4.2.2...v4.2.3

... (truncated)

Changelog

Sourced from actions/cache's changelog.

Releases

How to prepare a release

[!NOTE]
Relevant for maintainers with write access only.

Switch to a new branch from main.

Run npm test to ensure all tests are passing.

Update the version in https://github.com/actions/cache/blob/main/package.json.

Run npm run build to update the compiled files.

Update this https://github.com/actions/cache/blob/main/RELEASES.md with the new version and changes in the ## Changelog section.

Run licensed cache to update the license report.

Run licensed status and resolve any warnings by updating the https://github.com/actions/cache/blob/main/.licensed.yml file with the exceptions.

Commit your changes and push your branch upstream.

Open a pull request against main and get it reviewed and merged.

Draft a new release https://github.com/actions/cache/releases use the same version number used in package.json

Create a new tag with the version number.

Auto generate release notes and update them to match the changes you made in RELEASES.md.

Toggle the set as the latest release option.

Publish the release.

Navigate to https://github.com/actions/cache/actions/workflows/release-new-action-version.yml

There should be a workflow run queued with the same version number.

Approve the run to publish the new version and update the major tags for this action.

Changelog

5.0.3

Bump @actions/cache to v5.0.5 (Resolves: https://github.com/actions/cache/security/dependabot/33)

Bump @actions/core to v2.0.3

5.0.2

Bump @actions/cache to v5.0.3 #1692

5.0.1

Update @azure/storage-blob to ^12.29.1 via @actions/cache@5.0.1 #1685

5.0.0

[!IMPORTANT] actions/cache@v5 runs on the Node.js 24 runtime and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading.

4.3.0

Bump @actions/cache to v4.1.0

... (truncated)

Commits

cdf6c1f Merge pull request #1695 from actions/Link-/prepare-5.0.3
a1bee22 Add review for the @actions/http-client license
4695763 Add licensed output
dc73bb9 Upgrade dependencies and address security warnings
345d5c2 Add 5.0.3 builds
8b402f5 Merge pull request #1692 from GhadimiR/main
304ab5a license for httpclient
609fc19 Update licensed record for cache
b22231e Build
93150cd Add PR link to releases
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

netlify · 2026-02-19T22:53:33Z

✅ Deploy Preview for lando-node ready!

Name	Link
🔨 Latest commit	`9455803`
🔍 Latest deploy log	https://app.netlify.com/projects/lando-node/deploys/699fee5c0c12bb0008f2ad75
😎 Deploy Preview	https://deploy-preview-112--lando-node.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.
Lighthouse	1 paths audited Performance: 89 (🔴 down 4 from production) Accessibility: 98 (no change from production) Best Practices: 100 (no change from production) SEO: 100 (no change from production) PWA: - View the detailed breakdown and full score reports

To edit notification comments on pull requests, go to your Netlify project configuration.

Bumps the actions group with 2 updates: [actions/add-to-project](https://github.com/actions/add-to-project) and [actions/cache](https://github.com/actions/cache). Updates `actions/add-to-project` from 1.0.0 to 1.0.2 - [Release notes](https://github.com/actions/add-to-project/releases) - [Commits](actions/add-to-project@v1.0.0...v1.0.2) Updates `actions/cache` from 4 to 5 - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](actions/cache@v4...v5) --- updated-dependencies: - dependency-name: actions/add-to-project dependency-version: 1.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: actions/cache dependency-version: '5' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions ... Signed-off-by: dependabot[bot] <support@github.com>

AaronFeledy

Dependency bump, CI passes (Node 19/21 failures are pre-existing flakes on main). LGTM.

dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Feb 19, 2026

dependabot bot force-pushed the dependabot/github_actions/actions-231b866e92 branch from fa11e6e to 9455803 Compare February 26, 2026 06:55

AaronFeledy approved these changes Feb 27, 2026

View reviewed changes

AaronFeledy merged commit 5fd32cc into main Feb 27, 2026
19 of 20 checks passed

AaronFeledy deleted the dependabot/github_actions/actions-231b866e92 branch February 27, 2026 05:53

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the actions group with 2 updates#112

Bump the actions group with 2 updates#112
AaronFeledy merged 1 commit intomainfrom
dependabot/github_actions/actions-231b866e92

dependabot bot commented on behalf of github Feb 19, 2026 •

edited

Loading

Uh oh!

netlify bot commented Feb 19, 2026 •

edited

Loading

Uh oh!

AaronFeledy left a comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot bot commented on behalf of github Feb 19, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v1.0.2

What's Changed

v1.0.1

Summary

What's Changed

v5.0.0

What's Changed

v4.3.0

What's Changed

New Contributors

v4.2.4

What's Changed

New Contributors

v4.2.3

What's Changed

New Contributors

Releases

How to prepare a release

Changelog

5.0.3

5.0.2

5.0.1

5.0.0

4.3.0

Uh oh!

netlify bot commented Feb 19, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

✅ Deploy Preview for lando-node ready!

Uh oh!

AaronFeledy left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot bot commented on behalf of github Feb 19, 2026 •

edited

Loading

netlify bot commented Feb 19, 2026 •

edited

Loading