Skip to content

chore(deps): bump the actions-version-updates group across 1 directory with 11 updates - #42329

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/github_actions/dot-github/workflows/actions-version-updates-6472be5d5e
Open

chore(deps): bump the actions-version-updates group across 1 directory with 11 updates#42329
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/github_actions/dot-github/workflows/actions-version-updates-6472be5d5e

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the actions-version-updates group with 11 updates in the /.github/workflows directory:

Package From To
actions/checkout 6.0.3 7.0.1
actions/setup-python 6.3.0 7.0.0
reviewdog/action-actionlint 1.72.0 1.73.0
GrantBirki/comment 3.0.0 3.0.3
marocchino/sticky-pull-request-comment 3.0.4 3.0.5
zulip/github-actions-zulip/send-message 2.0.1 2.0.2
docker/login-action 4.2.0 4.6.0
docker/metadata-action 6.1.0 6.2.0
docker/build-push-action 7.2.0 7.3.0
corentinmusard/otel-cicd-action 4.0.1 4.1.0
softprops/action-gh-release 3.0.1 3.0.2

Updates actions/checkout from 6.0.3 to 7.0.1

Release notes

Sourced from actions/checkout's releases.

v7.0.1

What's Changed

Full Changelog: actions/checkout@v7...v7.0.1

v7.0.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v6.0.3...v7.0.0

v6.1.0

What's Changed

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: actions/checkout@v6.0.3...v6.1.0

Changelog

Sourced from actions/checkout's changelog.

Changelog

v7.0.1

v7.0.0

v6.0.3

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

... (truncated)

Commits

Updates actions/setup-python from 6.3.0 to 7.0.0

Release notes

Sourced from actions/setup-python's releases.

v7.0.0

What's Changed

Enhancements

Bug Fix

Dependency Upgrade

New Contributors

Full Changelog: actions/setup-python@v6...v7.0.0

Commits

Updates reviewdog/action-actionlint from 1.72.0 to 1.73.0

Release notes

Sourced from reviewdog/action-actionlint's releases.

Release v1.73.0

What's Changed

New Contributors

Full Changelog: reviewdog/action-actionlint@v1.72.1...v1.73.0

Release v1.72.1

v1.72.1: PR #211 - fix: include digest in Docker image reference for action.yml

Commits
  • 5084226 bump v1.73.0
  • 70f2164 Merge branch 'main' into releases/v1
  • a499b80 Merge pull request #221 from reviewdog/pin-install-script
  • b9330b9 chore: update download URLs for actionlint and reviewdog to specific commits
  • e32ed54 Merge pull request #220 from reviewdog/github-native-release-note
  • ae14c28 chore: enable generation of release notes in the release workflow
  • 992e934 chore: remove tag trigger from release workflow
  • f9adc3a Merge pull request #219 from reviewdog/depup/shellcheck
  • 8295541 chore(deps): update shellcheck to 0.11.0
  • f96c3f1 Merge pull request #218 from reviewdog/correct-version-name-typo
  • Additional commits viewable in compare view

Updates GrantBirki/comment from 3.0.0 to 3.0.3

Release notes

Sourced from GrantBirki/comment's releases.

v3.0.3

What's Changed

Full Changelog: GrantBirki/comment@v3...v3.0.3

v3.0.2

What's Changed

Full Changelog: GrantBirki/comment@v3...v3.0.2

v3.0.1

What's Changed

Full Changelog: GrantBirki/comment@v3...v3.0.1

Commits
  • 937820f Merge pull request #48 from GrantBirki/add-release-attestations
  • 5661723 Bump version to v3.0.3
  • 245ea8d Add release bundle attestations
  • 93a7ff5 Merge pull request #47 from GrantBirki/bump-v3.0.2
  • 44e0f6f Bump version to v3.0.2
  • b23dd77 Merge pull request #46 from GrantBirki/versioned-auto-release
  • 53e38fc Make release workflow reruns resumable
  • b95b12a Disable persisted checkout credentials
  • a56acd4 Remove release workflow npm cache
  • f802ba8 Rename action version export
  • Additional commits viewable in compare view

Updates marocchino/sticky-pull-request-comment from 3.0.4 to 3.0.5

Release notes

Sourced from marocchino/sticky-pull-request-comment's releases.

v3.0.5

What's Changed

Full Changelog: marocchino/sticky-pull-request-comment@v3.0.4...v3.0.5

Commits
  • 5770ad5 📦️ Build
  • 2c19060 build(deps-dev): Bump @​biomejs/biome from 2.4.14 to 2.5.2 (#1730)
  • 3d24e5a build(deps-dev): Bump js-yaml from 4.1.1 to 5.2.1 (#1732)
  • 3604821 build(deps-dev): Bump @​rollup/plugin-commonjs from 29.0.2 to 29.0.3 (#1710)
  • a4d9c0f build(deps-dev): Bump @​types/node from 25.9.1 to 26.1.0 (#1731)
  • ae65a58 build(deps-dev): Bump vitest from 4.1.7 to 4.1.9 (#1719)
  • 8680321 build(deps-dev): Bump vite from 8.0.13 to 8.0.16 (#1720)
  • 5d40239 build(deps): Bump actions/checkout from 6 to 7 (#1721)
  • 39ab01d build(deps-dev): Bump rollup from 4.60.4 to 4.62.2 (#1722)
  • b2660f1 build(deps): Bump undici from 6.24.0 to 6.27.0 (#1725)
  • Additional commits viewable in compare view

Updates zulip/github-actions-zulip/send-message from 2.0.1 to 2.0.2

Release notes

Sourced from zulip/github-actions-zulip/send-message's releases.

v2.0.2

What's Changed

Full Changelog: zulip/github-actions-zulip@v2.0.1...v2.0.2

Changelog

Sourced from zulip/github-actions-zulip/send-message's changelog.

Zulip GitHub Action Changelog

2.0.2 (2026-06-16)

Infrastructure

  • Upgrade dependencies.

2.0.1 (2026-05-21)

Fixes

  • Add missing tslib dependency.

2.0.0 (2026-05-20)

Breaking changes

  • Switch from deprecated Node 20 to Node 24.

Infrastructure

  • Upgrade dependencies.

1.0.0 (2021-08-14)

Breaking changes

⚠️ Please use zulip/github-actions-zulip/send-message@v1 instead of yuzutech/zulip-send-message-action@v0.1.2.
If you were using password as authentification method, please get an API key through Zulip's web interface and use api-key instead. Finally, username field was renamed to email to be consistent with Zulip API naming.

Before

- name: Send a stream message
  uses: yuzutech/zulip-send-message-action@v0.1.0
  with:
    username: "username@example.com"
    api-key: "abcd1234"
    organization-url: "https://org.zulipchat.com"
    to: "social"
    type: "stream"
    topic: "Castle"
    content: "I come not, friends, to steal away your hearts."

After

</tr></table> 

... (truncated)

Commits

Updates docker/login-action from 4.2.0 to 4.6.0

Release notes

Sourced from docker/login-action's releases.

v4.6.0

Full Changelog: docker/login-action@v4.5.2...v4.6.0

v4.5.2

Full Changelog: docker/login-action@v4.5.1...v4.5.2

v4.5.1

Full Changelog: docker/login-action@v4.5.0...v4.5.1

v4.5.0

Full Changelog: docker/login-action@v4.4.0...v4.5.0

v4.4.0

Full Changelog: docker/login-action@v4.3.0...v4.4.0

v4.3.0

Full Changelog: docker/login-action@v4.2.0...v4.3.0

Commits
  • dbcb813 Merge pull request #1051 from docker/dependabot/npm_and_yarn/aws-sdk-dependen...
  • 5bcb015 [dependabot skip] chore: update generated content
  • b30b2f2 build(deps): bump the aws-sdk-dependencies group across 1 directory with 2 up...
  • 9087f1e Merge pull request #1057 from docker/dependabot/npm_and_yarn/js-yaml-5.2.2
  • 0009830 [dependabot skip] chore: update generated content
  • 2325523 build(deps): bump js-yaml from 5.2.1 to 5.2.2
  • 4ec1d4a Merge pull request #1056 from docker/dependabot/npm_and_yarn/postcss-8.5.22
  • 5fc99ba Merge pull request #1053 from docker/dependabot/github_actions/aws-actions/co...
  • e512bd5 Merge pull request #1052 from docker/dependabot/github_actions/codeql-actions...
  • a146c91 Merge pull request #1059 from crazy-max/harden-buildx-scope-paths
  • Additional commits viewable in compare view

Updates docker/metadata-action from 6.1.0 to 6.2.0

Release notes

Sourced from docker/metadata-action's releases.

v6.2.0

Full Changelog: docker/metadata-action@v6.1.0...v6.2.0

Commits
  • dc80280 Merge pull request #696 from docker/dependabot/npm_and_yarn/docker/actions-to...
  • 2b9fe83 [dependabot skip] chore: update generated content
  • 8128ce3 chore(deps): Bump @​docker/actions-toolkit from 0.91.0 to 0.92.0
  • 1d1c895 Merge pull request #695 from docker/dependabot/npm_and_yarn/semver-7.8.5
  • 7f0c2dd Merge pull request #694 from docker/dependabot/npm_and_yarn/sigstore-4.1.1
  • 025f8c5 [dependabot skip] chore: update generated content
  • e98d63c chore(deps): Bump semver from 7.8.1 to 7.8.5
  • 37d9379 chore(deps): Bump sigstore from 4.1.0 to 4.1.1
  • a1b8072 Merge pull request #690 from docker/dependabot/npm_and_yarn/sigstore/core-3.2.1
  • e0e3381 [dependabot skip] chore: update generated content
  • Additional commits viewable in compare view

Updates docker/build-push-action from 7.2.0 to 7.3.0

Release notes

Sourced from docker/build-push-action's releases.

v7.3.0

Full Changelog: docker/build-push-action@v7.2.0...v7.3.0

Commits
  • 53b7df9 Merge pull request #1572 from docker/dependabot/npm_and_yarn/docker/actions-t...
  • 154298c [dependabot skip] chore: update generated content
  • cb1238b chore(deps): Bump @​docker/actions-toolkit from 0.91.0 to 0.92.0
  • 24f845d Merge pull request #1566 from docker/dependabot/npm_and_yarn/js-yaml-4.2.0
  • 9c69730 [dependabot skip] chore: update generated content
  • bc3a3a5 Merge pull request #1574 from docker/dependabot/github_actions/aws-actions/co...
  • a82c504 chore(deps): Bump js-yaml from 4.1.1 to 4.3.0
  • 0285a75 Merge pull request #1573 from docker/dependabot/github_actions/actions/cache-...
  • c6ad2a3 Merge pull request #1575 from docker/dependabot/github_actions/actions/checko...
  • d37484f Merge pull request #1564 from docker/dependabot/npm_and_yarn/undici-6.27.0
  • Additional commits viewable in compare view

Updates corentinmusard/otel-cicd-action from 4.0.1 to 4.1.0

Release notes

Sourced from corentinmusard/otel-cicd-action's releases.

v4.1.0

Added

  • Added the otlpInsecureSkipVerify input for exp...

    Description has been truncated

…y with 11 updates

Bumps the actions-version-updates group with 11 updates in the /.github/workflows directory:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `6.0.3` | `7.0.1` |
| [actions/setup-python](https://github.com/actions/setup-python) | `6.3.0` | `7.0.0` |
| [reviewdog/action-actionlint](https://github.com/reviewdog/action-actionlint) | `1.72.0` | `1.73.0` |
| [GrantBirki/comment](https://github.com/grantbirki/comment) | `3.0.0` | `3.0.3` |
| [marocchino/sticky-pull-request-comment](https://github.com/marocchino/sticky-pull-request-comment) | `3.0.4` | `3.0.5` |
| [zulip/github-actions-zulip/send-message](https://github.com/zulip/github-actions-zulip) | `2.0.1` | `2.0.2` |
| [docker/login-action](https://github.com/docker/login-action) | `4.2.0` | `4.6.0` |
| [docker/metadata-action](https://github.com/docker/metadata-action) | `6.1.0` | `6.2.0` |
| [docker/build-push-action](https://github.com/docker/build-push-action) | `7.2.0` | `7.3.0` |
| [corentinmusard/otel-cicd-action](https://github.com/corentinmusard/otel-cicd-action) | `4.0.1` | `4.1.0` |
| [softprops/action-gh-release](https://github.com/softprops/action-gh-release) | `3.0.1` | `3.0.2` |



Updates `actions/checkout` from 6.0.3 to 7.0.1
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v6.0.3...3d3c42e)

Updates `actions/setup-python` from 6.3.0 to 7.0.0
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](actions/setup-python@ece7cb0...5fda3b9)

Updates `reviewdog/action-actionlint` from 1.72.0 to 1.73.0
- [Release notes](https://github.com/reviewdog/action-actionlint/releases)
- [Commits](reviewdog/action-actionlint@6fb7acc...5084226)

Updates `GrantBirki/comment` from 3.0.0 to 3.0.3
- [Release notes](https://github.com/grantbirki/comment/releases)
- [Commits](GrantBirki/comment@3439715...937820f)

Updates `marocchino/sticky-pull-request-comment` from 3.0.4 to 3.0.5
- [Release notes](https://github.com/marocchino/sticky-pull-request-comment/releases)
- [Commits](marocchino/sticky-pull-request-comment@0ea0beb...5770ad5)

Updates `zulip/github-actions-zulip/send-message` from 2.0.1 to 2.0.2
- [Release notes](https://github.com/zulip/github-actions-zulip/releases)
- [Changelog](https://github.com/zulip/github-actions-zulip/blob/main/CHANGELOG.md)
- [Commits](zulip/github-actions-zulip@v2.0.1...f675f2b)

Updates `docker/login-action` from 4.2.0 to 4.6.0
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](docker/login-action@650006c...dbcb813)

Updates `docker/metadata-action` from 6.1.0 to 6.2.0
- [Release notes](https://github.com/docker/metadata-action/releases)
- [Commits](docker/metadata-action@80c7e94...dc80280)

Updates `docker/build-push-action` from 7.2.0 to 7.3.0
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](docker/build-push-action@f9f3042...53b7df9)

Updates `corentinmusard/otel-cicd-action` from 4.0.1 to 4.1.0
- [Release notes](https://github.com/corentinmusard/otel-cicd-action/releases)
- [Changelog](https://github.com/dash0hq/otel-cicd-action/blob/main/CHANGELOG.md)
- [Commits](dash0hq/otel-cicd-action@f2d88ec...6022e68)

Updates `softprops/action-gh-release` from 3.0.1 to 3.0.2
- [Release notes](https://github.com/softprops/action-gh-release/releases)
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md)
- [Commits](softprops/action-gh-release@718ea10...3d0d988)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions-version-updates
- dependency-name: actions/setup-python
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions-version-updates
- dependency-name: reviewdog/action-actionlint
  dependency-version: 1.73.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-version-updates
- dependency-name: GrantBirki/comment
  dependency-version: 3.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-version-updates
- dependency-name: marocchino/sticky-pull-request-comment
  dependency-version: 3.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-version-updates
- dependency-name: zulip/github-actions-zulip/send-message
  dependency-version: 2.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-version-updates
- dependency-name: docker/login-action
  dependency-version: 4.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-version-updates
- dependency-name: docker/metadata-action
  dependency-version: 6.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-version-updates
- dependency-name: docker/build-push-action
  dependency-version: 7.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-version-updates
- dependency-name: corentinmusard/otel-cicd-action
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-version-updates
- dependency-name: softprops/action-gh-release
  dependency-version: 3.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-version-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Aug 1, 2026
@github-actions

github-actions Bot commented Aug 1, 2026

Copy link
Copy Markdown

PR summary ab8be91aee

Import changes for modified files

No significant changes to the import graph

Import changes for all files
Files Import difference

Declarations diff (regex)

No declarations were harmed in the making of this PR! 🐙

You can run this locally as follows
## from your `mathlib4` directory:
git clone https://github.com/leanprover-community/mathlib-ci.git ../mathlib-ci

## summary with just the declaration names:
../mathlib-ci/scripts/pr_summary/declarations_diff.sh <optional_commit>

## more verbose report:
../mathlib-ci/scripts/pr_summary/declarations_diff.sh long <optional_commit>

The doc-module for scripts/pr_summary/declarations_diff.sh in the mathlib-ci repository contains some details about this script.

Declarations diff (Lean)

Lean-aware diff — post-build, computed from the Lean environment (commit ab8be91).

  • +0 new declarations
  • −0 removed declarations

No declaration differences.


No changes to strong technical debt.

No changes to weak technical debt.

Current commit ab8be91aee
Reference commit f4f85c2fcf

This script lives in the mathlib-ci repository. To run it locally, from your mathlib4 directory:

git clone https://github.com/leanprover-community/mathlib-ci.git ../mathlib-ci
../mathlib-ci/scripts/reporting/technical-debt-metrics.sh pr_summary
  • The relative value is the weighted sum of the differences with weight given by the inverse of the current value of the statistic.
  • The absolute value is the relative value divided by the total sum of the inverses of the current values (i.e. the weighted average of the differences).

⚠️ Workflow documentation reminder

This PR modifies files under .github/workflows/.
Please update docs/workflows.md if the workflow inventory, triggers, or behavior changed.

Modified workflow files:

  • .github/workflows/PR_summary.yml
  • .github/workflows/actionlint.yml
  • .github/workflows/add_label_from_diff.yaml
  • .github/workflows/build_template.yml
  • .github/workflows/cache_test.yml
  • .github/workflows/check_pr_titles.yaml
  • .github/workflows/commit_verification.yml
  • .github/workflows/daily-master-tag.yml
  • .github/workflows/daily.yml
  • .github/workflows/decls-diff.yml
  • .github/workflows/docker_build.yml
  • .github/workflows/export_crossrefs.yml
  • .github/workflows/export_telemetry.yaml
  • .github/workflows/label_new_contributor.yml
  • .github/workflows/lake_cache_shadow.yml
  • .github/workflows/latest_import.yml
  • .github/workflows/long_file_report.yml
  • .github/workflows/maintainer_bors_wf_run.yml
  • .github/workflows/maintainer_merge_wf_run.yml
  • .github/workflows/nightly_bump_and_merge.yml
  • .github/workflows/nightly_detect_failure.yml
  • .github/workflows/nightly_merge_master.yml
  • .github/workflows/nolints.yml
  • .github/workflows/olean_report.yaml
  • .github/workflows/pr_check_downstream.yml
  • .github/workflows/pre-commit.yml
  • .github/workflows/publish_tools.yml
  • .github/workflows/release.yml
  • .github/workflows/release_cache.yml
  • .github/workflows/remove_deprecated_decls.yml
  • .github/workflows/rm_set_option.yml
  • .github/workflows/shake.yaml
  • .github/workflows/technical_debt_metrics.yml
  • .github/workflows/update_dependencies.yml
  • .github/workflows/update_dependencies_zulip.yml
  • .github/workflows/validate_mathlib_ci_paths.yml
  • .github/workflows/weekly-lints.yml
  • .github/workflows/zulip_emoji_ci_status.yaml
  • .github/workflows/zulip_emoji_closed_pr.yaml
  • .github/workflows/zulip_emoji_labelling.yaml
  • .github/workflows/zulip_emoji_merge_delegate.yaml
  • .github/workflows/zulip_emoji_reconcile.yml

@github-actions github-actions Bot added the CI Modifies the continuous integration setup or other automation label Aug 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

CI Modifies the continuous integration setup or other automation dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants