Skip to content

Bump the github-actions group across 1 directory with 4 updates#40

Merged
titanh3art merged 1 commit intomainfrom
dependabot/github_actions/github-actions-fa7c754ebc
Apr 4, 2026
Merged

Bump the github-actions group across 1 directory with 4 updates#40
titanh3art merged 1 commit intomainfrom
dependabot/github_actions/github-actions-fa7c754ebc

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Mar 26, 2026 •
edited
Loading

Bumps the github-actions group with 4 updates in the / directory: actions/checkout, actions/setup-node, martinbeentjes/npm-get-version-action and schwma/parse-changelog-action.

Updates actions/checkout from 4 to 6

Release notes

Sourced from actions/checkout's releases.

v6.0.0

What's Changed

Full Changelog: actions/checkout@v5.0.0...v6.0.0

v6-beta

What's Changed

Updated persist-credentials to store the credentials under $RUNNER_TEMP instead of directly in the local git config.

This requires a minimum Actions Runner version of v2.329.0 to access the persisted credentials for Docker container action scenarios.

v5.0.1

What's Changed

Full Changelog: actions/checkout@v5...v5.0.1

v5.0.0

What's Changed

⚠️ Minimum Compatible Runner Version

v2.327.1
Release Notes

Make sure your runner is updated to this version or newer to use this release.

Full Changelog: actions/checkout@v4...v5.0.0

v4.3.1

What's Changed

Full Changelog: actions/checkout@v4...v4.3.1

v4.3.0

What's Changed

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

v4.2.0

v4.1.7

v4.1.6

... (truncated)

Commits

Updates actions/setup-node from 4 to 6

Release notes

Sourced from actions/setup-node's releases.

v6.0.0

What's Changed

Breaking Changes

Dependency Upgrades

Full Changelog: actions/setup-node@v5...v6.0.0

v5.0.0

What's Changed

Breaking Changes

This update, introduces automatic caching when a valid packageManager field is present in your package.json. This aims to improve workflow performance and make dependency management more seamless. To disable this automatic caching, set package-manager-cache: false

steps:
- uses: actions/checkout@v5
- uses: actions/setup-node@v5
  with:
    package-manager-cache: false

Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. See Release Notes

Dependency Upgrades

New Contributors

Full Changelog: actions/setup-node@v4...v5.0.0

v4.4.0

... (truncated)

Commits

Updates martinbeentjes/npm-get-version-action from 1.2.3 to 1.3.1

Release notes

Sourced from martinbeentjes/npm-get-version-action's releases.

v1.3.1

What's Changed

Full Changelog: martinbeentjes/npm-get-version-action@v1.3.0...v1.3.1

Remove deprecations

What's Changed

New Contributors

Full Changelog: martinbeentjes/npm-get-version-action@v1.2.3...v1.3.0

Commits

Updates schwma/parse-changelog-action from 1.0.0 to 1.2.0

Release notes

Sourced from schwma/parse-changelog-action's releases.

v1.2.0

Changed

  • Workflow now uses node20 for execution since node22 isn't supported yet
Changelog

Sourced from schwma/parse-changelog-action's changelog.

Version 1.2.0 - 2024-06-25

Changed

  • Workflow now uses node20 for execution since node22 isn't supported yet

Version 1.1.0 - 2024-06-25

Changed

  • Workflow now uses node22 for execution.
Commits
  • 1c2b200 Bump version in package.json and package-lock.json
  • 27fa79d Use Actions-R-Us/actions-tagger@v2.1.0-rc5 to allow tagging on push tag event
  • 13fb9a9 Lower workflow node version to node20 since node22 isn't supported
  • 251c7fe Prepare release v1.1.0
  • 29cb6d9 ci: Use Node 22 for action (#1)
  • f4cb4fa Add husky to build staged index on commit
  • 827ad31 Fix default version-regex value in README
  • 3d23e6e Prepare next release
  • 51d7488 Move create major and latest tags to release steps
  • See full diff in compare view

@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Mar 26, 2026
@dependabot dependabot bot requested a review from a team as a code owner March 26, 2026 08:11
@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Mar 26, 2026
@github-actions
Copy link
Copy Markdown

github-actions bot commented Mar 26, 2026 •
edited
Loading

Dependency Review

The following issues were found:
  • ✅ 0 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ⚠️ 2 package(s) with unknown licenses.
See the Details below.

Snapshot Warnings

⚠️: No snapshots were found for the head SHA 1a21d5e.
Ensure that dependencies are being submitted on PR branches and consider enabling retry-on-snapshot-warnings. See the documentation for more information and troubleshooting advice.

License Issues

.github/workflows/test.yml

PackageVersionLicenseIssue Type
actions/checkout6.*.*NullUnknown License
actions/setup-node6.*.*NullUnknown License

OpenSSF Scorecard

PackageVersionScoreDetails
actions/actions/checkout 6.*.* 🟢 6
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Maintained⚠️ 23 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 2
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Binary-Artifacts🟢 10no binaries found in the repo
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
Packaging⚠️ -1packaging workflow not detected
Signed-Releases⚠️ -1no releases found
Pinned-Dependencies🟢 3dependency not pinned by hash detected -- score normalized to 3
Security-Policy🟢 9security policy file detected
Branch-Protection🟢 6branch protection is not maximal on development and all release branches
SAST🟢 8SAST tool detected but not run on all commits
actions/actions/setup-node 6.*.* 🟢 6
Details
CheckScoreReason
Maintained🟢 911 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 9
Code-Review🟢 10all changesets reviewed
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Binary-Artifacts🟢 9binaries present in source code
Packaging⚠️ -1packaging workflow not detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
Signed-Releases⚠️ -1no releases found
Security-Policy🟢 9security policy file detected
Branch-Protection⚠️ 1branch protection is not maximal on development and all release branches
SAST🟢 9SAST tool is not run on all commits -- score normalized to 9

Scanned Files

  • .github/workflows/test.yml

@chgeo
Copy link
Copy Markdown
Member

chgeo commented Mar 26, 2026

@dependabot rebase

@dependabot dependabot bot force-pushed the dependabot/github_actions/github-actions-fa7c754ebc branch from 9ef11cc to fffc29d Compare March 26, 2026 08:54
@dependabot
Bump the github-actions group across 1 directory with 4 updates
1a21d5e 
Bumps the github-actions group with 4 updates in the / directory: [actions/checkout](https://github.com/actions/checkout), [actions/setup-node](https://github.com/actions/setup-node), [martinbeentjes/npm-get-version-action](https://github.com/martinbeentjes/npm-get-version-action) and [schwma/parse-changelog-action](https://github.com/schwma/parse-changelog-action).


Updates `actions/checkout` from 4 to 6
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v4...v6)

Updates `actions/setup-node` from 4 to 6
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@v4...v6)

Updates `martinbeentjes/npm-get-version-action` from 1.2.3 to 1.3.1
- [Release notes](https://github.com/martinbeentjes/npm-get-version-action/releases)
- [Commits](martinbeentjes/npm-get-version-action@v1.2.3...v1.3.1)

Updates `schwma/parse-changelog-action` from 1.0.0 to 1.2.0
- [Release notes](https://github.com/schwma/parse-changelog-action/releases)
- [Changelog](https://github.com/schwma/parse-changelog-action/blob/main/CHANGELOG.md)
- [Commits](schwma/parse-changelog-action@v1.0.0...v1.2.0)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/setup-node
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: martinbeentjes/npm-get-version-action
  dependency-version: 1.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: schwma/parse-changelog-action
  dependency-version: 1.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/github_actions/github-actions-fa7c754ebc branch from fffc29d to 1a21d5e Compare March 30, 2026 19:14
@chgeo
Copy link
Copy Markdown
Member

chgeo commented Apr 1, 2026

@cap-js/data-inspector-team please review and merge.

titanh3art
titanh3art approved these changes Apr 4, 2026
View reviewed changes
Copy link
Copy Markdown
Contributor

@titanh3art titanh3art left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

looks good to me

@titanh3art titanh3art merged commit a143ac9 into main Apr 4, 2026
8 of 9 checks passed
@titanh3art titanh3art deleted the dependabot/github_actions/github-actions-fa7c754ebc branch April 4, 2026 14:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@titanh3art titanh3art titanh3art approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code no changelog

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@chgeo @titanh3art