Skip to content

chore(deps): bump the github-actions-dependencies group across 1 directory with 7 updates#35435

Merged
asukaminato0721 merged 1 commit intomainfrom
dependabot/github_actions/github-actions-dependencies-a3fae1843d
Apr 20, 2026
Merged

chore(deps): bump the github-actions-dependencies group across 1 directory with 7 updates#35435
asukaminato0721 merged 1 commit intomainfrom
dependabot/github_actions/github-actions-dependencies-a3fae1843d

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 20, 2026

Bumps the github-actions-dependencies group with 7 updates in the / directory:

Package From To
astral-sh/setup-uv 8.0.0 8.1.0
hoverkraft-tech/compose-action 2.5.0 2.6.0
tj-actions/changed-files 47.0.5 47.0.6
autofix-ci/action 1.3.3 1.3.4
actions/cache 5.0.4 5.0.5
actions/setup-node 6.3.0 6.4.0
anthropics/claude-code-action 1.0.93 1.0.101

Updates astral-sh/setup-uv from 8.0.0 to 8.1.0

Release notes

Sourced from astral-sh/setup-uv's releases.

v8.1.0 🌈 New input no-project

Changes

This add the a new boolean input no-project. It only makes sense to use in combination with activate-environment: true and will append --no project to the uv venv call. This is for example useful if you have a pyproject.toml file with parts unparseable by uv

🚀 Enhancements

  • Add input no-project in combination with activate-environment @​eifinger (#856)

🧰 Maintenance

📚 Documentation

⬆️ Dependency updates

  • chore(deps): bump release-drafter/release-drafter from 7.1.1 to 7.2.0 @dependabot[bot] (#855)
Commits
  • 0880764 fix: grant contents:write to validate-release job (#860)
  • 717d6ab Add a release-gate step to the release workflow (#859)
  • 5a911eb Draft commitish releases (#858)
  • 080c31e Add action-types.yml to instructions (#857)
  • b3e97d2 Add input no-project in combination with activate-environment (#856)
  • 7dd591d chore(deps): bump release-drafter/release-drafter from 7.1.1 to 7.2.0 (#855)
  • 1541b77 chore: update known checksums for 0.11.7 (#853)
  • cdfb2ee Refactor version resolving (#852)
  • cb84d12 chore: update known checksums for 0.11.6 (#850)
  • 1912cc6 chore: update known checksums for 0.11.5 (#845)
  • Additional commits viewable in compare view

Updates hoverkraft-tech/compose-action from 2.5.0 to 2.6.0

Release notes

Sourced from hoverkraft-tech/compose-action's releases.

v2.6.0

Release Summary

This release improves user-facing compose-file handling by adding support for oci:// compose-file inputs, so OCI artifact references now pass through correctly instead of failing local file validation, and the related documentation has been updated accordingly.

Internal changes are limited to dependency and development tooling maintenance, including GitHub Actions, npm production and development packages, and CI-related updates, with no other clear end-user feature changes in the provided pull requests.

Breaking change(s)

There is no breaking change.

What's Changed

Full Changelog: hoverkraft-tech/compose-action@v2...v2.6.0

Commits
  • d2bee4f feat: support OCI artifact compose-file inputs
  • b542f02 chore(deps): bump the github-actions-dependencies group with 2 updates:
  • 506c87e chore(deps): bump @​actions/github in the npm-actions-dependencies group
  • 3c795f9 chore(deps): bump docker-compose
  • 5e4714c chore(deps-dev): bump @​ts-dev-tools/core
  • 510dc5b chore(deps): bump the github-actions-dependencies group with 6 updates
  • ee4dc33 chore(deps-dev): bump handlebars from 4.7.8 to 4.7.9
  • 9c2d0a1 chore(deps): bump picomatch
  • de5c13d chore(deps): bump actions/create-github-app-token
  • 0d09b4e chore(deps-dev): bump flatted from 3.4.1 to 3.4.2
  • Additional commits viewable in compare view

Updates tj-actions/changed-files from 47.0.5 to 47.0.6

Release notes

Sourced from tj-actions/changed-files's releases.

v47.0.6

What's Changed

Full Changelog: tj-actions/changed-files@v47.0.5...v47.0.6

Changelog

Sourced from tj-actions/changed-files's changelog.

Changelog

47.0.6 - (2026-04-18)

🔄 Update

  • Updated README.md (#2817)

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@​users.noreply.github.com> Co-authored-by: Tonye Jack jtonye@ymail.com (c23d52b) - (github-actions[bot])

⚙️ Miscellaneous Tasks

  • deps: Bump lodash from 4.17.23 to 4.18.1 (#2837) (9426d40) - (dependabot[bot])
  • deps: Bump peter-evans/create-pull-request from 8.1.0 to 8.1.1 (#2843) (32de080) - (dependabot[bot])
  • deps: Bump actions/upload-artifact from 7.0.0 to 7.0.1 (#2844) (2487d12) - (dependabot[bot])
  • deps-dev: Bump @​types/node from 25.5.0 to 25.6.0 (#2846) (cef85a3) - (dependabot[bot])
  • deps-dev: Bump prettier from 3.8.1 to 3.8.3 (#2848) (7b082de) - (dependabot[bot])
  • deps: Bump github/codeql-action from 4.35.1 to 4.35.2 (#2849) (07224ca) - (dependabot[bot])
  • deps-dev: Bump jest from 30.2.0 to 30.3.0 (#2822) (2bb1357) - (dependabot[bot])
  • deps: Bump nrwl/nx-set-shas from 4.4.0 to 5.0.1 (#2829) (cc98117) - (dependabot[bot])
  • deps: Bump yaml from 2.8.2 to 2.8.3 (#2830) (786e421) - (dependabot[bot])
  • deps-dev: Bump eslint-plugin-jest from 29.15.0 to 29.15.1 (#2831) (726b41b) - (dependabot[bot])
  • deps: Bump github/codeql-action from 4.32.6 to 4.35.1 (#2834) (2c3585e) - (dependabot[bot])
  • deps: Bump actions/download-artifact from 8.0.0 to 8.0.1 (#2824) (3d37a7f) - (dependabot[bot])
  • deps-dev: Bump @​types/node from 25.3.5 to 25.5.0 (#2825) (445b0eb) - (dependabot[bot])
  • deps: Bump github/codeql-action from 4.32.5 to 4.32.6 (#2819) (4f892cd) - (dependabot[bot])
  • deps-dev: Bump @​types/node from 25.3.3 to 25.3.5 (#2820) (6118651) - (dependabot[bot])
  • deps: Bump actions/setup-node from 6.2.0 to 6.3.0 (#2818) (e517d7a) - (dependabot[bot])

⬆️ Upgrades

  • Upgraded to v47.0.5 (#2816)

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@​users.noreply.github.com> Co-authored-by: Tonye Jack jtonye@ymail.com (4750530) - (github-actions[bot])

47.0.5 - (2026-03-03)

🔄 Update

  • Updated README.md (#2805)

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@​users.noreply.github.com> (35dace0) - (github-actions[bot])

  • Updated README.md (#2803)

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@​users.noreply.github.com> Co-authored-by: Tonye Jack jtonye@ymail.com (9ee99eb) - (github-actions[bot])

⚙️ Miscellaneous Tasks

... (truncated)

Commits
  • 9426d40 chore(deps): bump lodash from 4.17.23 to 4.18.1 (#2837)
  • 32de080 chore(deps): bump peter-evans/create-pull-request from 8.1.0 to 8.1.1 (#2843)
  • 2487d12 chore(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (#2844)
  • cef85a3 chore(deps-dev): bump @​types/node from 25.5.0 to 25.6.0 (#2846)
  • 7b082de chore(deps-dev): bump prettier from 3.8.1 to 3.8.3 (#2848)
  • 07224ca chore(deps): bump github/codeql-action from 4.35.1 to 4.35.2 (#2849)
  • 2bb1357 chore(deps-dev): bump jest from 30.2.0 to 30.3.0 (#2822)
  • cc98117 chore(deps): bump nrwl/nx-set-shas from 4.4.0 to 5.0.1 (#2829)
  • 786e421 chore(deps): bump yaml from 2.8.2 to 2.8.3 (#2830)
  • 726b41b chore(deps-dev): bump eslint-plugin-jest from 29.15.0 to 29.15.1 (#2831)
  • Additional commits viewable in compare view

Updates autofix-ci/action from 1.3.3 to 1.3.4

Release notes

Sourced from autofix-ci/action's releases.

autofix-ci/action 1.3.4

What's Changed

  • Update action to use Node 24

Full Changelog: autofix-ci/action@v1...v1.3.4

Commits

Updates actions/cache from 5.0.4 to 5.0.5

Release notes

Sourced from actions/cache's releases.

v5.0.5

What's Changed

Full Changelog: actions/cache@v5...v5.0.5

Changelog

Sourced from actions/cache's changelog.

Releases

How to prepare a release

[!NOTE]
Relevant for maintainers with write access only.

  1. Switch to a new branch from main.
  2. Run npm test to ensure all tests are passing.
  3. Update the version in https://github.com/actions/cache/blob/main/package.json.
  4. Run npm run build to update the compiled files.
  5. Update this https://github.com/actions/cache/blob/main/RELEASES.md with the new version and changes in the ## Changelog section.
  6. Run licensed cache to update the license report.
  7. Run licensed status and resolve any warnings by updating the https://github.com/actions/cache/blob/main/.licensed.yml file with the exceptions.
  8. Commit your changes and push your branch upstream.
  9. Open a pull request against main and get it reviewed and merged.
  10. Draft a new release https://github.com/actions/cache/releases use the same version number used in package.json
    1. Create a new tag with the version number.
    2. Auto generate release notes and update them to match the changes you made in RELEASES.md.
    3. Toggle the set as the latest release option.
    4. Publish the release.
  11. Navigate to https://github.com/actions/cache/actions/workflows/release-new-action-version.yml
    1. There should be a workflow run queued with the same version number.
    2. Approve the run to publish the new version and update the major tags for this action.

Changelog

5.0.4

  • Bump minimatch to v3.1.5 (fixes ReDoS via globstar patterns)
  • Bump undici to v6.24.1 (WebSocket decompression bomb protection, header validation fixes)
  • Bump fast-xml-parser to v5.5.6

5.0.3

5.0.2

  • Bump @actions/cache to v5.0.3 #1692

5.0.1

  • Update @azure/storage-blob to ^12.29.1 via @actions/cache@5.0.1 #1685

5.0.0

[!IMPORTANT] actions/cache@v5 runs on the Node.js 24 runtime and requires a minimum Actions Runner version of 2.327.1.

... (truncated)

Commits

Updates actions/setup-node from 6.3.0 to 6.4.0

Release notes

Sourced from actions/setup-node's releases.

v6.4.0

What's Changed

Dependency updates:

New Contributors

Full Changelog: actions/setup-node@v6...v6.4.0

Commits

Updates anthropics/claude-code-action from 1.0.93 to 1.0.101

Release notes

Sourced from anthropics/claude-code-action's releases.

v1.0.101

Full Changelog: anthropics/claude-code-action@v1...v1.0.101

v1.0.100

What's Changed

Full Changelog: anthropics/claude-code-action@v1...v1.0.100

v1.0.99

Full Changelog: anthropics/claude-code-action@v1...v1.0.99

v1.0.98

Full Changelog: anthropics/claude-code-action@v1...v1.0.98

v1.0.97

Full Changelog: anthropics/claude-code-action@v1...v1.0.97

v1.0.96

What's Changed

New Contributors

Full Changelog: anthropics/claude-code-action@v1...v1.0.96

v1.0.95

Full Changelog: anthropics/claude-code-action@v1...v1.0.95

v1.0.94

What's Changed

Full Changelog: anthropics/claude-code-action@v1...v1.0.94

Commits
  • 38ec876 chore: bump Claude Code to 2.1.114 and Agent SDK to 0.2.114
  • 0d2971c fix: pass install.sh binary path explicitly to Agent SDK (#1235)
  • c68f82c chore: bump Claude Code to 2.1.113 and Agent SDK to 0.2.113
  • 78758ed chore: bump model version in workflows (#1227)
  • c3d45e8 chore: bump Claude Code to 2.1.112 and Agent SDK to 0.2.112
  • 931e620 chore: bump Claude Code to 2.1.111 and Agent SDK to 0.2.111
  • 905d4eb chore: bump Claude Code to 2.1.110 and Agent SDK to 0.2.110
  • 5fb8995 chore: bump Claude Code to 2.1.109 and Agent SDK to 0.2.109
  • c3bf66d fix: handle fork PRs by fetching via refs/pull/N/head (#962) (#963)
  • 3943183 chore: bump Claude Code to 2.1.108 and Agent SDK to 0.2.108
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…ctory with 7 updates

Bumps the github-actions-dependencies group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) | `8.0.0` | `8.1.0` |
| [hoverkraft-tech/compose-action](https://github.com/hoverkraft-tech/compose-action) | `2.5.0` | `2.6.0` |
| [tj-actions/changed-files](https://github.com/tj-actions/changed-files) | `47.0.5` | `47.0.6` |
| [autofix-ci/action](https://github.com/autofix-ci/action) | `1.3.3` | `1.3.4` |
| [actions/cache](https://github.com/actions/cache) | `5.0.4` | `5.0.5` |
| [actions/setup-node](https://github.com/actions/setup-node) | `6.3.0` | `6.4.0` |
| [anthropics/claude-code-action](https://github.com/anthropics/claude-code-action) | `1.0.93` | `1.0.101` |



Updates `astral-sh/setup-uv` from 8.0.0 to 8.1.0
- [Release notes](https://github.com/astral-sh/setup-uv/releases)
- [Commits](astral-sh/setup-uv@cec2083...0880764)

Updates `hoverkraft-tech/compose-action` from 2.5.0 to 2.6.0
- [Release notes](https://github.com/hoverkraft-tech/compose-action/releases)
- [Commits](hoverkraft-tech/compose-action@4894d24...d2bee4f)

Updates `tj-actions/changed-files` from 47.0.5 to 47.0.6
- [Release notes](https://github.com/tj-actions/changed-files/releases)
- [Changelog](https://github.com/tj-actions/changed-files/blob/main/HISTORY.md)
- [Commits](tj-actions/changed-files@22103cc...9426d40)

Updates `autofix-ci/action` from 1.3.3 to 1.3.4
- [Release notes](https://github.com/autofix-ci/action/releases)
- [Commits](autofix-ci/action@7a166d7...c5b2d67)

Updates `actions/cache` from 5.0.4 to 5.0.5
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](actions/cache@6682284...27d5ce7)

Updates `actions/setup-node` from 6.3.0 to 6.4.0
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@53b8394...48b55a0)

Updates `anthropics/claude-code-action` from 1.0.93 to 1.0.101
- [Release notes](https://github.com/anthropics/claude-code-action/releases)
- [Commits](anthropics/claude-code-action@b47fd72...38ec876)

---
updated-dependencies:
- dependency-name: astral-sh/setup-uv
  dependency-version: 8.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/compose-action
  dependency-version: 2.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: tj-actions/changed-files
  dependency-version: 47.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions-dependencies
- dependency-name: autofix-ci/action
  dependency-version: 1.3.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions-dependencies
- dependency-name: actions/cache
  dependency-version: 5.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions-dependencies
- dependency-name: actions/setup-node
  dependency-version: 6.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: anthropics/claude-code-action
  dependency-version: 1.0.101
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Apr 20, 2026
@dosubot dosubot Bot added the size:XS This PR changes 0-9 lines, ignoring generated files. label Apr 20, 2026
@dosubot dosubot Bot added the lgtm This PR has been approved by a maintainer label Apr 20, 2026
@asukaminato0721 asukaminato0721 added this pull request to the merge queue Apr 20, 2026
Merged via the queue into main with commit df389eb Apr 20, 2026
28 checks passed
@asukaminato0721 asukaminato0721 deleted the dependabot/github_actions/github-actions-dependencies-a3fae1843d branch April 20, 2026 11:09
HanqingZ pushed a commit to HanqingZ/dify that referenced this pull request Apr 23, 2026
…ctory with 7 updates (langgenius#35435)

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
asukaminato0721 pushed a commit to asukaminato0721/dify that referenced this pull request Apr 24, 2026
…ctory with 7 updates (langgenius#35435)

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code lgtm This PR has been approved by a maintainer size:XS This PR changes 0-9 lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant