Bump the github-actions group with 6 updates by dependabot[bot] · Pull Request #8011 · mitmproxy/mitmproxy

dependabot · 2025-12-02T01:59:40Z

Bumps the github-actions group with 6 updates:

Package	From	To
mhils/workflows	`481eaf3cc2ad8eb664a4c9a20cc635d46e02b5c6`	`af886cbabab992a8e7db75c6af3516af2b1f5a1c`
mhils/workflows/.github/workflows/python-build.yml	`481eaf3cc2ad8eb664a4c9a20cc635d46e02b5c6`	`af886cbabab992a8e7db75c6af3516af2b1f5a1c`
mhils/workflows/.github/workflows/alls-green.yml	`481eaf3cc2ad8eb664a4c9a20cc635d46e02b5c6`	`af886cbabab992a8e7db75c6af3516af2b1f5a1c`
docker/setup-qemu-action	`3.6.0`	`3.7.0`
docker/metadata-action	`5.8.0`	`5.10.0`
actions/checkout	`5`	`6`

Updates mhils/workflows from 481eaf3cc2ad8eb664a4c9a20cc635d46e02b5c6 to af886cbabab992a8e7db75c6af3516af2b1f5a1c

Commits

af886cb Bump the dependencies group across 5 directories with 5 updates (#60)
See full diff in compare view

Updates mhils/workflows/.github/workflows/python-build.yml from 481eaf3cc2ad8eb664a4c9a20cc635d46e02b5c6 to af886cbabab992a8e7db75c6af3516af2b1f5a1c

Commits

af886cb Bump the dependencies group across 5 directories with 5 updates (#60)
See full diff in compare view

Updates mhils/workflows/.github/workflows/alls-green.yml from 481eaf3cc2ad8eb664a4c9a20cc635d46e02b5c6 to af886cbabab992a8e7db75c6af3516af2b1f5a1c

Commits

af886cb Bump the dependencies group across 5 directories with 5 updates (#60)
See full diff in compare view

Updates docker/setup-qemu-action from 3.6.0 to 3.7.0

Release notes

Sourced from docker/setup-qemu-action's releases.

v3.7.0

Bump @docker/actions-toolkit from 0.56.0 to 0.67.0 in docker/setup-qemu-action#217 docker/setup-qemu-action#230

Bump brace-expansion from 1.1.11 to 1.1.12 in docker/setup-qemu-action#220

Bump form-data from 2.5.1 to 2.5.5 in docker/setup-qemu-action#218

Bump tmp from 0.2.3 to 0.2.4 in docker/setup-qemu-action#221

Bump undici from 5.28.4 to 5.29.0 in docker/setup-qemu-action#219

Full Changelog: docker/setup-qemu-action@v3.6.0...v3.7.0

Commits

c7c5346 Merge pull request #230 from docker/dependabot/npm_and_yarn/docker/actions-to...
3a517a1 chore: update generated content
a5b45ed build(deps): bump @docker/actions-toolkit from 0.62.1 to 0.67.0
3a64278 Merge pull request #220 from docker/dependabot/npm_and_yarn/brace-expansion-1...
94906ba chore: update generated content
4027abf build(deps): bump brace-expansion from 1.1.11 to 1.1.12
bee0aaa Merge pull request #221 from docker/dependabot/npm_and_yarn/tmp-0.2.4
0d7e257 chore: update generated content
b869601 build(deps): bump tmp from 0.2.3 to 0.2.4
3a043ed Merge pull request #219 from docker/dependabot/npm_and_yarn/undici-5.29.0
Additional commits viewable in compare view

Updates docker/metadata-action from 5.8.0 to 5.10.0

Release notes

Sourced from docker/metadata-action's releases.

v5.10.0

Bump @docker/actions-toolkit from 0.66.0 to 0.68.0 in docker/metadata-action#559 docker/metadata-action#569

Bump js-yaml from 3.14.1 to 3.14.2 in docker/metadata-action#564

Full Changelog: docker/metadata-action@v5.9.0...v5.10.0

v5.9.0

Add tag-names output to return tag names without image base name by @crazy-max in docker/metadata-action#553

Bump @babel/runtime-corejs3 from 7.14.7 to 7.28.2 in docker/metadata-action#539

Bump @docker/actions-toolkit from 0.62.1 to 0.66.0 in docker/metadata-action#555

Bump brace-expansion from 1.1.11 to 1.1.12 in docker/metadata-action#540

Bump csv-parse from 5.6.0 to 6.1.0 in docker/metadata-action#532

Bump semver from 7.7.2 to 7.7.3 in in docker/metadata-action#554

Bump tmp from 0.2.3 to 0.2.5 in docker/metadata-action#541

Full Changelog: docker/metadata-action@v5.8.0...v5.9.0

Commits

c299e40 Merge pull request #569 from docker/dependabot/npm_and_yarn/docker/actions-to...
f015d79 chore: update generated content
121bcc2 chore(deps): Bump @docker/actions-toolkit from 0.67.0 to 0.68.0
f7b6bf4 Merge pull request #564 from docker/dependabot/npm_and_yarn/js-yaml-3.14.2
0b95c6b Merge pull request #565 from docker/dependabot/github_actions/actions/checkout-6
17f70d7 Merge pull request #568 from motoki317/docs/fix-to-24h-schedule-pattern
afd7e6d docs(README): Fix date format from 12h to 24h in schedule pattern
602aff8 chore(deps): Bump actions/checkout from 5 to 6
aecb1a4 chore(deps): Bump js-yaml from 3.14.1 to 3.14.2
8d8c7c1 Merge pull request #559 from docker/dependabot/npm_and_yarn/docker/actions-to...
Additional commits viewable in compare view

Updates actions/checkout from 5 to 6

Release notes

Sourced from actions/checkout's releases.

v6.0.0

What's Changed

Update README to include Node.js 24 support details and requirements by @salmanmkc in actions/checkout#2248

Persist creds to a separate file by @ericsciple in actions/checkout#2286

v6-beta by @ericsciple in actions/checkout#2298

update readme/changelog for v6 by @ericsciple in actions/checkout#2311

Full Changelog: actions/checkout@v5.0.0...v6.0.0

v6-beta

What's Changed

Updated persist-credentials to store the credentials under $RUNNER_TEMP instead of directly in the local git config.

This requires a minimum Actions Runner version of v2.329.0 to access the persisted credentials for Docker container action scenarios.

v5.0.1

What's Changed

Port v6 cleanup to v5 by @ericsciple in actions/checkout#2301

Full Changelog: actions/checkout@v5...v5.0.1

Changelog

Sourced from actions/checkout's changelog.

Changelog

V6.0.0

Persist creds to a separate file by @ericsciple in actions/checkout#2286

Update README to include Node.js 24 support details and requirements by @salmanmkc in actions/checkout#2248

V5.0.1

Port v6 cleanup to v5 by @ericsciple in actions/checkout#2301

V5.0.0

Update actions checkout to use node 24 by @salmanmkc in actions/checkout#2226

V4.3.1

Port v6 cleanup to v4 by @ericsciple in actions/checkout#2305

V4.3.0

docs: update README.md by @motss in actions/checkout#1971

Add internal repos for checking out multiple repositories by @mouismail in actions/checkout#1977

Documentation update - add recommended permissions to Readme by @benwells in actions/checkout#2043

Adjust positioning of user email note and permissions heading by @joshmgross in actions/checkout#2044

Update README.md by @nebuk89 in actions/checkout#2194

Update CODEOWNERS for actions by @TingluoHuang in actions/checkout#2224

Update package dependencies by @salmanmkc in actions/checkout#2236

v4.2.2

url-helper.ts now leverages well-known environment variables by @jww3 in actions/checkout#1941

Expand unit test coverage for isGhes by @jww3 in actions/checkout#1946

v4.2.1

Check out other refs/* by commit if provided, fall back to ref by @orhantoy in actions/checkout#1924

v4.2.0

Add Ref and Commit outputs by @lucacome in actions/checkout#1180

Dependency updates by @dependabot- actions/checkout#1777, actions/checkout#1872

v4.1.7

Bump the minor-npm-dependencies group across 1 directory with 4 updates by @dependabot in actions/checkout#1739

Bump actions/checkout from 3 to 4 by @dependabot in actions/checkout#1697

Check out other refs/* by commit by @orhantoy in actions/checkout#1774

Pin actions/checkout's own workflows to a known, good, stable version. by @jww3 in actions/checkout#1776

v4.1.6

Check platform to set archive extension appropriately by @cory-miller in actions/checkout#1732

v4.1.5

Update NPM dependencies by @cory-miller in actions/checkout#1703

Bump github/codeql-action from 2 to 3 by @dependabot in actions/checkout#1694

Bump actions/setup-node from 1 to 4 by @dependabot in actions/checkout#1696

Bump actions/upload-artifact from 2 to 4 by @dependabot in actions/checkout#1695

... (truncated)

Commits

1af3b93 update readme/changelog for v6 (#2311)
71cf226 v6-beta (#2298)
069c695 Persist creds to a separate file (#2286)
ff7abcd Update README to include Node.js 24 support details and requirements (#2248)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the github-actions group with 6 updates: | Package | From | To | | --- | --- | --- | | [mhils/workflows](https://github.com/mhils/workflows) | `481eaf3cc2ad8eb664a4c9a20cc635d46e02b5c6` | `af886cbabab992a8e7db75c6af3516af2b1f5a1c` | | [mhils/workflows/.github/workflows/python-build.yml](https://github.com/mhils/workflows) | `481eaf3cc2ad8eb664a4c9a20cc635d46e02b5c6` | `af886cbabab992a8e7db75c6af3516af2b1f5a1c` | | [mhils/workflows/.github/workflows/alls-green.yml](https://github.com/mhils/workflows) | `481eaf3cc2ad8eb664a4c9a20cc635d46e02b5c6` | `af886cbabab992a8e7db75c6af3516af2b1f5a1c` | | [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) | `3.6.0` | `3.7.0` | | [docker/metadata-action](https://github.com/docker/metadata-action) | `5.8.0` | `5.10.0` | | [actions/checkout](https://github.com/actions/checkout) | `5` | `6` | Updates `mhils/workflows` from 481eaf3cc2ad8eb664a4c9a20cc635d46e02b5c6 to af886cbabab992a8e7db75c6af3516af2b1f5a1c - [Release notes](https://github.com/mhils/workflows/releases) - [Commits](mhils/workflows@481eaf3...af886cb) Updates `mhils/workflows/.github/workflows/python-build.yml` from 481eaf3cc2ad8eb664a4c9a20cc635d46e02b5c6 to af886cbabab992a8e7db75c6af3516af2b1f5a1c - [Release notes](https://github.com/mhils/workflows/releases) - [Commits](mhils/workflows@481eaf3...af886cb) Updates `mhils/workflows/.github/workflows/alls-green.yml` from 481eaf3cc2ad8eb664a4c9a20cc635d46e02b5c6 to af886cbabab992a8e7db75c6af3516af2b1f5a1c - [Release notes](https://github.com/mhils/workflows/releases) - [Commits](mhils/workflows@481eaf3...af886cb) Updates `docker/setup-qemu-action` from 3.6.0 to 3.7.0 - [Release notes](https://github.com/docker/setup-qemu-action/releases) - [Commits](docker/setup-qemu-action@2910929...c7c5346) Updates `docker/metadata-action` from 5.8.0 to 5.10.0 - [Release notes](https://github.com/docker/metadata-action/releases) - [Commits](docker/metadata-action@c1e5197...c299e40) Updates `actions/checkout` from 5 to 6 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@v5...v6) --- updated-dependencies: - dependency-name: mhils/workflows dependency-version: af886cbabab992a8e7db75c6af3516af2b1f5a1c dependency-type: direct:production dependency-group: github-actions - dependency-name: mhils/workflows/.github/workflows/python-build.yml dependency-version: af886cbabab992a8e7db75c6af3516af2b1f5a1c dependency-type: direct:production dependency-group: github-actions - dependency-name: mhils/workflows/.github/workflows/alls-green.yml dependency-version: af886cbabab992a8e7db75c6af3516af2b1f5a1c dependency-type: direct:production dependency-group: github-actions - dependency-name: docker/setup-qemu-action dependency-version: 3.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: docker/metadata-action dependency-version: 5.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: actions/checkout dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Dec 2, 2025

mhils merged commit b28d621 into main Dec 2, 2025
29 checks passed

mhils deleted the dependabot/github_actions/github-actions-4d335fcc53 branch December 2, 2025 09:32

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the github-actions group with 6 updates#8011

Bump the github-actions group with 6 updates#8011
mhils merged 1 commit intomainfrom
dependabot/github_actions/github-actions-4d335fcc53

dependabot bot commented on behalf of github Dec 2, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot bot commented on behalf of github Dec 2, 2025

v3.7.0

v5.10.0

v5.9.0

v6.0.0

What's Changed

v6-beta

What's Changed

v5.0.1

What's Changed

Changelog

V6.0.0

V5.0.1

V5.0.0

V4.3.1

V4.3.0

v4.2.2

v4.2.1

v4.2.0

v4.1.7

v4.1.6

v4.1.5

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant