Skip to content

[GITHUB-ACTIONS] bump the github-actions group with 3 updates#298

Merged
andreclc merged 1 commit into
mainfrom
dependabot/github_actions/github-actions-76b9330de1
Jul 13, 2025
Merged

[GITHUB-ACTIONS] bump the github-actions group with 3 updates#298
andreclc merged 1 commit into
mainfrom
dependabot/github_actions/github-actions-76b9330de1

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Jul 13, 2025

Bumps the github-actions group with 3 updates: slackapi/slack-github-action, crs-k/stale-branches and bridgecrewio/checkov-action.

Updates slackapi/slack-github-action from 2.1.0 to 2.1.1

Release notes

Sourced from slackapi/slack-github-action's releases.

Slack Send v2.1.1

What's Changed

This release fixes an issue where substituted variables might've broken valid JSON or YAML parsings when using the payload-file-path input option.

🐛 Bug fixes

📚 Documentation

🤖 Dependencies

🧰 Maintenance

Full Changelog: slackapi/slack-github-action@v2.1.0...v2.1.1

Commits
  • 91efab1 Release
  • b6f4640 chore(release): tag version 2.1.1 (#474)
  • d3dc61e build(deps-dev): bump @​biomejs/biome from 1.9.4 to 2.0.6 (#470)
  • f647c89 build(deps-dev): bump @​types/node from 24.0.3 to 24.0.8 (#472)
  • e6fa633 build(deps-dev): bump sinon from 20.0.0 to 21.0.0 (#471)
  • 75b7822 build(deps-dev): bump mocha-suppress-logs from 0.5.1 to 0.6.0 (#469)
  • d7b6150 build(deps-dev): bump mocha from 11.5.0 to 11.7.1 (#468)
  • a7f5b68 build: clone repository "docs" and configuration when syncing project docs (#...
  • c69deab build(deps-dev): bump @​types/node from 22.15.29 to 24.0.3 (#466)
  • 1d0943c build(deps): bump axios from 1.9.0 to 1.10.0 (#465)
  • Additional commits viewable in compare view

Updates crs-k/stale-branches from 8.2.0 to 8.2.1

Release notes

Sourced from crs-k/stale-branches's releases.

v8.2.1

What's Changed

🧰 Maintenance

... (truncated)

Commits
  • de68d93 Fix PR check bug: prevent deletion of branches with active PRs (#1510)
  • c446e97 chore(deps-dev): bump eslint from 9.30.1 to 9.31.0 (#1513)
  • e1b826b chore(deps-dev): bump @​eslint/js from 9.30.1 to 9.31.0 (#1512)
  • 3d99c64 chore(deps-dev): bump @​types/node from 24.0.12 to 24.0.13 (#1511)
  • ce98187 chore(deps-dev): bump npm-package-json-lint from 8.0.0 to 9.0.0 (#1502)
  • a19a9ab chore(deps-dev): bump @​types/node from 24.0.10 to 24.0.12 (#1509)
  • 7bd81ad chore(deps-dev): bump @​typescript-eslint/eslint-plugin (#1508)
  • bda3564 chore(deps-dev): bump @​typescript-eslint/parser from 8.35.1 to 8.36.0 (#1507)
  • c82de86 chore(deps-dev): bump globals from 16.2.0 to 16.3.0 (#1506)
  • 10de260 chore(deps-dev): bump @​eslint/js from 9.30.0 to 9.30.1 (#1505)
  • Additional commits viewable in compare view

Updates bridgecrewio/checkov-action from 12.3036.0 to 12.3039.0

Commits
  • 6375fb7 Bump checkov container version to 3.2.450
  • 414cfde Bump checkov container version to 3.2.449
  • f55786e Bump checkov container version to 3.2.448
  • See full diff in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
[GITHUB-ACTIONS] bump the github-actions group with 3 updates
2950dec 
Bumps the github-actions group with 3 updates: [slackapi/slack-github-action](https://github.com/slackapi/slack-github-action), [crs-k/stale-branches](https://github.com/crs-k/stale-branches) and [bridgecrewio/checkov-action](https://github.com/bridgecrewio/checkov-action).


Updates `slackapi/slack-github-action` from 2.1.0 to 2.1.1
- [Release notes](https://github.com/slackapi/slack-github-action/releases)
- [Commits](slackapi/slack-github-action@b0fa283...91efab1)

Updates `crs-k/stale-branches` from 8.2.0 to 8.2.1
- [Release notes](https://github.com/crs-k/stale-branches/releases)
- [Commits](crs-k/stale-branches@1b1680a...de68d93)

Updates `bridgecrewio/checkov-action` from 12.3036.0 to 12.3039.0
- [Release notes](https://github.com/bridgecrewio/checkov-action/releases)
- [Commits](bridgecrewio/checkov-action@d1ecbbd...6375fb7)

---
updated-dependencies:
- dependency-name: slackapi/slack-github-action
  dependency-version: 2.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: crs-k/stale-branches
  dependency-version: 8.2.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: bridgecrewio/checkov-action
  dependency-version: 12.3039.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jul 13, 2025
@dependabot dependabot Bot requested a review from a team as a code owner July 13, 2025 02:54
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jul 13, 2025
@dependabot dependabot Bot requested a review from tagdots-owner July 13, 2025 02:54
andreclc
andreclc approved these changes Jul 13, 2025
View reviewed changes
Copy link
Copy Markdown
Contributor

@andreclc andreclc left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@andreclc andreclc merged commit 1fa4468 into main Jul 13, 2025
1 check passed
@andreclc andreclc deleted the dependabot/github_actions/github-actions-76b9330de1 branch July 13, 2025 15:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@andreclc andreclc andreclc approved these changes

@tagdots-owner tagdots-owner Awaiting requested review from tagdots-owner tagdots-owner is a code owner automatically assigned from tagdots-dev/admins

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@andreclc