Skip to content

build(deps): bump the github-actions group across 1 directory with 9 updates - #27958

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-35affe04dd
Open

build(deps): bump the github-actions group across 1 directory with 9 updates#27958
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-35affe04dd

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 13, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the github-actions group with 9 updates in the / directory:

Package From To
github/gh-aw/actions/setup 0.68.3 0.86.2
actions/checkout 6.0.0 7.0.1
github/gh-aw/actions/setup-cli 0.68.3 0.86.2
dawidd6/action-download-artifact 20 21
marocchino/sticky-pull-request-comment 3.0.4 3.0.5
pnpm/action-setup 5.0.0 6.0.10
actions/setup-node 6.3.0 7.0.0
actions/labeler 6.0.1 7.0.0
actions-cool/check-user-permission 2.3.0 2.4.0

Updates github/gh-aw/actions/setup from 0.68.3 to 0.86.2

Release notes

Sourced from github/gh-aw/actions/setup's releases.

v0.86.2

🌟 Release Highlights

This release focuses on hardening the sandbox and MCP gateway, smoothing out safe-output and threat-detection reliability, and shipping a steady stream of security and quality fixes across the compiler and CLI.

✨ What's New

  • Docker sandbox (docker-sbx) rollout continues — the sandboxed execution environment now runs for a larger share of agentic workflows, with fixes for pre-flight step naming, gVisor false positives, and Docker Hub secret handling (#51264, #51294, #51341, #51439, #51949). See the sandbox reference.
  • Agent runtime tracking — sandbox.agent.runtime is now stored in aw_info.json, and gh aw logs/gh aw audit gained a --runtime filter for easier debugging across engines (#51465, #52076). See agent runtimes.
  • MCP gateway hardening — explicit mount policy allowlisting for the safeoutputs backend server, plus a bump to gh-aw-mcpg v0.4.9 and github-mcp-server v1.9.0 (#51870, #51828).
  • Skills frontmatter flexibility — non-SHA refs are now allowed in skills frontmatter and pinned automatically at compile time, and an explicit end-marker syntax was added for inline skills/sub-agents (#51455, #51446).
  • Threat detection improvements — inline threat detection for Code Scanning Fixer, rendered detection logs with group/mask macros, and gh-aw's own <system> prompt block is no longer flagged as prompt injection (#51277, #51255, #51818). See threat detection.

🐛 Bug Fixes & Improvements

  • Fixed silent failures in the Copilot session data fetcher and in gh aw mcp inspect pagination (#51195, #51193).
  • Fixed Claude harness retrying invalid-JSON body errors with --continue instead of starting a fresh run (#51793).
  • Fixed a CGO/CJS workflow cache key collision that caused widespread job failures (#51342).
  • Fixed recurring gh-aw-firewall digest-pin loss on default firewall version bumps (#51423).
  • Fixed Windows MCP server timeouts by propagating context through GitHub CLI subprocess calls (#51426).
  • Fixed retry handling and denials in the Contribution Check proxy (#51631).
  • Added support for HEAD-only bundles when pushing to pull request branches (#51833).
  • Fixed safe-output run summary classification so entries are always linked and correctly attributed (#51484, #51478).

📚 Documentation

  • Documented the --runtime flag for gh aw logs/gh aw audit, agent runtime selection/troubleshooting, and clarified Claude engine selection in automated bootstrap (#52076, #51427, #52099).
  • Improved overall documentation discoverability and trimmed troubleshooting guides (#52065, #51251).

🔧 Internal

A large batch of custom-linter hardening, dependency bumps, test-parallelization, and dependency vulnerability remediations (container image pinning, ip-address patch, deprecated MCP container replacements) round out this release — thanks to the automated maintenance workflows keeping the codebase clean and secure.> Generated by 🚀 Release · auto · 20.7 AIC · ⊞ 11.3K

What's Changed

... (truncated)

Commits
  • 48e5fa3 Clarify Claude engine selection in automated bootstrap (#52099)
  • 9699516 Fix inverted strict: mode documentation in frontmatter reference (#52100)
  • fa5e232 Improve GitHub Agentic Workflows documentation discoverability (#52065)
  • 85f9048 Normalize report formatting in video-analyzer, plan, and centralization-drill...
  • 1dd49c6 Suppress benign workflow exfiltration findings (#52083)
  • c636d5f docs: document --runtime flag for gh aw logs and gh aw audit (#52076)
  • 62647ef Harden scanner/relaunch exec trust boundaries and argument validation (#52032)
  • 9922b2f Harden remote workflow import fallbacks to prevent cross-host downgrade to pu...
  • 81a1321 Remediate dynamic regexp pattern findings (#51941)
  • 485f970 [aw] Reduce Daily PR review tool-denial failures in Copilot SDK runs (#52060)
  • Additional commits viewable in compare view

Updates actions/checkout from 6.0.0 to 7.0.1

Release notes

Sourced from actions/checkout's releases.

v7.0.1

What's Changed

Full Changelog: actions/checkout@v7...v7.0.1

v7.0.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v6.0.3...v7.0.0

v6.1.0

What's Changed

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: actions/checkout@v6.0.3...v6.1.0

v6.0.3

What's Changed

New Contributors

Full Changelog: actions/checkout@v6...v6.0.3

v6.0.2

What's Changed

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

v7.0.1

v7.0.0

v6.0.3

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

... (truncated)

Commits

Updates github/gh-aw/actions/setup-cli from 0.68.3 to 0.86.2

Release notes

Sourced from github/gh-aw/actions/setup-cli's releases.

v0.86.2

🌟 Release Highlights

This release focuses on hardening the sandbox and MCP gateway, smoothing out safe-output and threat-detection reliability, and shipping a steady stream of security and quality fixes across the compiler and CLI.

✨ What's New

  • Docker sandbox (docker-sbx) rollout continues — the sandboxed execution environment now runs for a larger share of agentic workflows, with fixes for pre-flight step naming, gVisor false positives, and Docker Hub secret handling (#51264, #51294, #51341, #51439, #51949). See the sandbox reference.
  • Agent runtime tracking — sandbox.agent.runtime is now stored in aw_info.json, and gh aw logs/gh aw audit gained a --runtime filter for easier debugging across engines (#51465, #52076). See agent runtimes.
  • MCP gateway hardening — explicit mount policy allowlisting for the safeoutputs backend server, plus a bump to gh-aw-mcpg v0.4.9 and github-mcp-server v1.9.0 (#51870, #51828).
  • Skills frontmatter flexibility — non-SHA refs are now allowed in skills frontmatter and pinned automatically at compile time, and an explicit end-marker syntax was added for inline skills/sub-agents (#51455, #51446).
  • Threat detection improvements — inline threat detection for Code Scanning Fixer, rendered detection logs with group/mask macros, and gh-aw's own <system> prompt block is no longer flagged as prompt injection (#51277, #51255, #51818). See threat detection.

🐛 Bug Fixes & Improvements

  • Fixed silent failures in the Copilot session data fetcher and in gh aw mcp inspect pagination (#51195, #51193).
  • Fixed Claude harness retrying invalid-JSON body errors with --continue instead of starting a fresh run (#51793).
  • Fixed a CGO/CJS workflow cache key collision that caused widespread job failures (#51342).
  • Fixed recurring gh-aw-firewall digest-pin loss on default firewall version bumps (#51423).
  • Fixed Windows MCP server timeouts by propagating context through GitHub CLI subprocess calls (#51426).
  • Fixed retry handling and denials in the Contribution Check proxy (#51631).
  • Added support for HEAD-only bundles when pushing to pull request branches (#51833).
  • Fixed safe-output run summary classification so entries are always linked and correctly attributed (#51484, #51478).

📚 Documentation

  • Documented the --runtime flag for gh aw logs/gh aw audit, agent runtime selection/troubleshooting, and clarified Claude engine selection in automated bootstrap (#52076, #51427, #52099).
  • Improved overall documentation discoverability and trimmed troubleshooting guides (#52065, #51251).

🔧 Internal

A large batch of custom-linter hardening, dependency bumps, test-parallelization, and dependency vulnerability remediations (container image pinning, ip-address patch, deprecated MCP container replacements) round out this release — thanks to the automated maintenance workflows keeping the codebase clean and secure.> Generated by 🚀 Release · auto · 20.7 AIC · ⊞ 11.3K

What's Changed

... (truncated)

Commits
  • 48e5fa3 Clarify Claude engine selection in automated bootstrap (#52099)
  • 9699516 Fix inverted strict: mode documentation in frontmatter reference (#52100)
  • fa5e232 Improve GitHub Agentic Workflows documentation discoverability (#52065)
  • 85f9048 Normalize report formatting in video-analyzer, plan, and centralization-drill...
  • 1dd49c6 Suppress benign workflow exfiltration findings (#52083)
  • c636d5f docs: document --runtime flag for gh aw logs and gh aw audit (#52076)
  • 62647ef Harden scanner/relaunch exec trust boundaries and argument validation (#52032)
  • 9922b2f Harden remote workflow import fallbacks to prevent cross-host downgrade to pu...
  • 81a1321 Remediate dynamic regexp pattern findings (#51941)
  • 485f970 [aw] Reduce Daily PR review tool-denial failures in Copilot SDK runs (#52060)
  • Additional commits viewable in compare view

Updates dawidd6/action-download-artifact from 20 to 21

Release notes

Sourced from dawidd6/action-download-artifact's releases.

v21

What's Changed

New Contributors

Full Changelog: dawidd6/action-download-artifact@v20...v21

Commits
  • b6e2e70 node_modules: update (#405)
  • 1708cb3 Download artifacts in creation order (#398)
  • 00b585a build(deps): bump filesize from 11.0.16 to 11.0.17 (#404)
  • 0414c42 build(deps): bump @​actions/core from 3.0.0 to 3.0.1 (#401)
  • c802aad build(deps): bump @​actions/github from 9.1.0 to 9.1.1 (#400)
  • ef06691 build(deps): bump fast-xml-parser from 5.5.7 to 5.7.1 (#402)
  • 026702e build(deps): bump filesize from 11.0.15 to 11.0.16 (#399)
  • 09d0677 build(deps): bump @​actions/github from 9.0.0 to 9.1.0 (#396)
  • See full diff in compare view

Updates marocchino/sticky-pull-request-comment from 3.0.4 to 3.0.5

Release notes

Sourced from marocchino/sticky-pull-request-comment's releases.

v3.0.5

What's Changed

Full Changelog: marocchino/sticky-pull-request-comment@v3.0.4...v3.0.5

Commits
  • 5770ad5 📦️ Build
  • 2c19060 build(deps-dev): Bump @​biomejs/biome from 2.4.14 to 2.5.2 (#1730)
  • 3d24e5a build(deps-dev): Bump js-yaml from 4.1.1 to 5.2.1 (#1732)
  • 3604821 build(deps-dev): Bump @​rollup/plugin-commonjs from 29.0.2 to 29.0.3 (#1710)
  • a4d9c0f build(deps-dev): Bump @​types/node from 25.9.1 to 26.1.0 (#1731)
  • ae65a58 build(deps-dev): Bump vitest from 4.1.7 to 4.1.9 (#1719)
  • 8680321 build(deps-dev): Bump vite from 8.0.13 to 8.0.16 (#1720)
  • 5d40239 build(deps): Bump actions/checkout from 6 to 7 (#1721)
  • 39ab01d build(deps-dev): Bump rollup from 4.60.4 to 4.62.2 (#1722)
  • b2660f1 build(deps): Bump undici from 6.24.0 to 6.27.0 (#1725)
  • Additional commits viewable in compare view

Updates pnpm/action-setup from 5.0.0 to 6.0.10

Release notes

Sourced from pnpm/action-setup's releases.

v6.0.10

What's Changed

New Contributors

Full Changelog: pnpm/action-setup@v6...v6.0.10

v6.0.9

What's Changed

Full Changelog: pnpm/action-setup@v6...v6.0.9

v6.0.8

What's Changed

New Contributors

Full Changelog: pnpm/action-setup@v6.0.7...v6.0.8

v6.0.7

What's Changed

New Contributors

Full Changelog: pnpm/action-setup@v6.0.6...v6.0.7

v6.0.6

What's Changed

Full Changelog: pnpm/action-setup@v6.0.5...v6.0.6

... (truncated)

Commits
  • 0977fd9 docs: Update README to include devEngines.packageManager (#273)
  • 48261ac fix: update pnpm to v11.19.0 (#283)

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Aug 13, 2026
Copilot AI lite review requested due to automatic review settings August 13, 2026 20:19
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Aug 13, 2026
@azure-pipelines

azure-pipelines Bot commented Aug 13, 2026

Copy link
Copy Markdown
Azure Pipelines:
1 pipeline(s) were filtered out due to trigger conditions.
There may be pipelines that require an authorized user to comment /azp run to run.

@github-actions github-actions Bot added area: tools area: build Build related issues area: repo Repo related work area: website base: main PRs targeted against main branch and removed dependencies Pull requests that update a dependency file base: main PRs targeted against main branch labels Aug 13, 2026
@github-actions

github-actions Bot commented Aug 13, 2026

Copy link
Copy Markdown
Contributor

Hi! Thank you for opening this PR. Want me to review it?

Based on the diff (120 lines, 17 files), I've queued these reviewers:

  • Correctness — logic errors, race conditions, lifecycle issues
  • Security — vulnerabilities, secret exposure, injection
  • API Compatibility — breaking changes, release tags, type design
  • Performance — algorithmic regressions, memory leaks
  • Testing — coverage gaps, hollow tests

How this works

  • Adjust the reviewer set by ticking/unticking boxes above. Reviewer toggles alone don't trigger anything.

  • Tick Start review below to dispatch the review fleet.

  • After review finishes, tick Start review again to request another run — it auto-resets after each dispatch.

  • This comment updates as new commits land; your reviewer selections are preserved.

  • Start review

Copilot AI reviewed Aug 13, 2026
View reviewed changes

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Note

Copilot could not run the full agentic suite for this review because it was automatically requested on a bot-authored pull request. Request a review from Copilot under Reviewers to retry with the full agentic suite. Improved support for bot-authored pull requests is coming soon.

Updates GitHub Actions workflow dependencies by bumping pinned action SHAs/versions across CI and automation workflows.

Changes:

  • Bump actions/checkout, actions/setup-node, and pnpm/action-setup pins across multiple workflows.
  • Update comment-posting and artifact-download actions (marocchino/sticky-pull-request-comment, dawidd6/action-download-artifact) to newer versions.
  • Update github/gh-aw action pins used in agent maintenance automation.

Reviewed changes

Copilot reviewed 17 out of 17 changed files in this pull request and generated 4 comments.

Show a summary per file
File Description
.github/workflows/website-validation.yml Updates checkout/node/pnpm action pins used for site build + validations.
.github/workflows/stale-branches.yml Updates checkout pin for branch cleanup workflow.
.github/workflows/release-notes-issue.yml Updates checkout/node/pnpm action pins for release notes issue automation.
.github/workflows/release-approval.yml Updates artifact download + checkout/node/pnpm pins in release approval workflow.
.github/workflows/push-tag-create-release.yml Updates checkout/node/pnpm pins for tag-driven release creation.
.github/workflows/pr-validation.yml Updates checkout pin for PR validation workflow.
.github/workflows/pr-review-fleet.yml Updates checkout/node pins and sticky comment action version.
.github/workflows/pr-review-confirm.yml Updates permission-check + checkout pins.
.github/workflows/pr-review-auto-route.yml Updates checkout pin and sticky comment action version.
.github/workflows/pr-release-branch-warning.yml Updates checkout pin and sticky comment action version.
.github/workflows/pr-labeler.yml Updates actions/labeler pin for PR labeling.
.github/workflows/pr-check-changeset.yml Updates checkout/node/pnpm pins for changeset verification.
.github/workflows/pr-bundle-size-comments.yml Updates checkout/node/pnpm pins and sticky comment action version for bundle size reporting.
.github/workflows/linkcheck-reporter.yml Updates artifact download pin and sticky comment action version for linkcheck reporting.
.github/workflows/devcontainer-prebuild-check.yml Updates checkout pin for devcontainer prebuild checks.
.github/workflows/changeset-reporter.yml Updates checkout/artifact download pins and sticky comment action version for changeset reporting.
.github/workflows/agentics-maintenance.yml Updates gh-aw setup/setup-cli pins and checkout pin for maintenance automation.

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

Comment thread .github/workflows/agentics-maintenance.yml
uses: github/gh-aw/actions/setup-cli@ce1794953e0ec42adc41b6fca05e02ab49ee21c3 # v0.68.3
uses: github/gh-aw/actions/setup-cli@53843da968225dc56e1590978a7ed6407a8438ac # v0.85.4
with:
version: v0.68.3
Comment thread .github/workflows/website-validation.yml
Comment on lines 29 to +30
# release notes: https://github.com/actions/checkout/releases/tag/v6.0.2
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
Comment thread .github/workflows/website-validation.yml
steps:
# release notes: https://github.com/actions/checkout/releases/tag/v6.0.2
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
Comment thread .github/workflows/website-validation.yml
Comment on lines +35 to +38
- uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6.0.10

# release notes: https://github.com/actions/setup-node/releases/tag/v6.3.0
- uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
- uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/github-actions-35affe04dd branch from 08f8deb to 1614427 Compare August 14, 2026 17:44
@github-actions

github-actions Bot commented Aug 14, 2026

Copy link
Copy Markdown
Contributor

Bundle size comparison

Base commit: unresolved
Head commit: 1614427151d829accba5067e3075304528b0bc5c

⚠️ Comparison unavailable.

No CI build was found for the PR HEAD commit. This shouldn't happen — the workflow only runs after the PR's Build - client packages check completes. Please report.

@dependabot
dependabot Bot force-pushed the dependabot/github_actions/github-actions-35affe04dd branch from 1614427 to 4152f63 Compare August 19, 2026 09:42
@dependabot
build(deps): bump the github-actions group across 1 directory with 9 …
d84d6d3 
…updates

Bumps the github-actions group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github/gh-aw/actions/setup](https://github.com/github/gh-aw) | `0.68.3` | `0.86.2` |
| [actions/checkout](https://github.com/actions/checkout) | `6.0.0` | `7.0.1` |
| [github/gh-aw/actions/setup-cli](https://github.com/github/gh-aw) | `0.68.3` | `0.86.2` |
| [dawidd6/action-download-artifact](https://github.com/dawidd6/action-download-artifact) | `20` | `21` |
| [marocchino/sticky-pull-request-comment](https://github.com/marocchino/sticky-pull-request-comment) | `3.0.4` | `3.0.5` |
| [pnpm/action-setup](https://github.com/pnpm/action-setup) | `5.0.0` | `6.0.10` |
| [actions/setup-node](https://github.com/actions/setup-node) | `6.3.0` | `7.0.0` |
| [actions/labeler](https://github.com/actions/labeler) | `6.0.1` | `7.0.0` |
| [actions-cool/check-user-permission](https://github.com/actions-cool/check-user-permission) | `2.3.0` | `2.4.0` |



Updates `github/gh-aw/actions/setup` from 0.68.3 to 0.86.2
- [Release notes](https://github.com/github/gh-aw/releases)
- [Changelog](https://github.com/github/gh-aw/blob/main/CHANGELOG.md)
- [Commits](github/gh-aw@ce17949...48e5fa3)

Updates `actions/checkout` from 6.0.0 to 7.0.1
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v6...3d3c42e)

Updates `github/gh-aw/actions/setup-cli` from 0.68.3 to 0.86.2
- [Release notes](https://github.com/github/gh-aw/releases)
- [Changelog](https://github.com/github/gh-aw/blob/main/CHANGELOG.md)
- [Commits](github/gh-aw@ce17949...48e5fa3)

Updates `dawidd6/action-download-artifact` from 20 to 21
- [Release notes](https://github.com/dawidd6/action-download-artifact/releases)
- [Commits](dawidd6/action-download-artifact@8305c0f...b6e2e70)

Updates `marocchino/sticky-pull-request-comment` from 3.0.4 to 3.0.5
- [Release notes](https://github.com/marocchino/sticky-pull-request-comment/releases)
- [Commits](marocchino/sticky-pull-request-comment@0ea0beb...5770ad5)

Updates `pnpm/action-setup` from 5.0.0 to 6.0.10
- [Release notes](https://github.com/pnpm/action-setup/releases)
- [Commits](pnpm/action-setup@fc06bc1...0977fd9)

Updates `actions/setup-node` from 6.3.0 to 7.0.0
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@53b8394...8207627)

Updates `actions/labeler` from 6.0.1 to 7.0.0
- [Release notes](https://github.com/actions/labeler/releases)
- [Commits](actions/labeler@634933e...bf12e9b)

Updates `actions-cool/check-user-permission` from 2.3.0 to 2.4.0
- [Release notes](https://github.com/actions-cool/check-user-permission/releases)
- [Changelog](https://github.com/actions-cool/check-user-permission/blob/main/CHANGELOG.md)
- [Commits](actions-cool/check-user-permission@7b90a27...c21884f)

---
updated-dependencies:
- dependency-name: actions-cool/check-user-permission
  dependency-version: 2.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: actions/checkout
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/labeler
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/setup-node
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: dawidd6/action-download-artifact
  dependency-version: '21'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: github/gh-aw/actions/setup
  dependency-version: 0.85.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: github/gh-aw/actions/setup-cli
  dependency-version: 0.85.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: marocchino/sticky-pull-request-comment
  dependency-version: 3.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: pnpm/action-setup
  dependency-version: 6.0.10
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/github-actions-35affe04dd branch from 4152f63 to d84d6d3 Compare August 19, 2026 22:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

Copilot code review Copilot
Copilot review effort
Applies to this pull request for everyone.Learn more about Copilot code review.
Copilot left review comments

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

area: build Build related issues area: repo Repo related work area: tools area: website base: main PRs targeted against main branch github_actions Pull requests that update GitHub Actions code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant