chore(deps): Bump the github-actions group with 6 updates by dependabot[bot] · Pull Request #3723 · apache/iggy

dependabot · 2026-07-21T10:47:43Z

Bumps the github-actions group with 6 updates:

Package	From	To
actions/setup-python	`6`	`6.3.0`
actions/setup-node	`6.4.0`	`7.0.0`
astral-sh/setup-uv	`8.3.1`	`8.3.2`
taiki-e/install-action	`2.82.10`	`2.83.2`
softprops/action-gh-release	`3.0.1`	`3.0.2`
actions/stale	`10.3.0`	`10.4.0`

Updates actions/setup-python from 6 to 6.3.0

Release notes

Sourced from actions/setup-python's releases.

v6.3.0

What's Changed

Enhancement

Add RHEL support and include Linux distro in cache keys by @priyagupta108 in actions/setup-python#1323

Fix pip cache error handling on Windows by @priyagupta108 in actions/setup-python#1040

Dependency update

Upgrade minimatch from 3.1.2 to 3.1.5 by @dependabot in actions/setup-python#1281

Upgrade actions dependencies by @gowridurgad with @Copilot in actions/setup-python#1303

Upgrade @actions/cache to 5.1.0, log cache write denied by @jasongin in actions/setup-python#1324

Upgrade dependency versions and test workflow configuration by @HarithaVattikuti in actions/setup-python#1322

Documentation

Update advanced-usage.md by @Dunky-Z in actions/setup-python#811

New Contributors

@gowridurgad with @Copilot made their first contribution in actions/setup-python#1303

@jasongin made their first contribution in actions/setup-python#1324

@Dunky-Z made their first contribution in actions/setup-python#811

Full Changelog: actions/setup-python@v6.2.0...v6.3.0

v6.2.0

What's Changed

Dependency Upgrades

Upgrade dependencies to Node 24 compatible versions by @salmanmkc in actions/setup-python#1259

Upgrade urllib3 from 2.5.0 to 2.6.3 in /__tests__/data by @dependabot in actions/setup-python#1253 and actions/setup-python#1264

Full Changelog: actions/setup-python@v6...v6.2.0

v6.1.0

What's Changed

Enhancements:

Add support for pip-install input by @gowridurgad in actions/setup-python#1201

Add graalpy early-access and windows builds by @timfel in actions/setup-python#880

Dependency and Documentation updates:

Enhanced wording and updated example usage for allow-prereleases by @yarikoptic in actions/setup-python#979

Upgrade urllib3 from 1.26.19 to 2.5.0 and document breaking changes in v6 by @dependabot in actions/setup-python#1139

Upgrade typescript from 5.4.2 to 5.9.3 and Documentation update by @dependabot in actions/setup-python#1094

Upgrade actions/publish-action from 0.3.0 to 0.4.0 & Documentation update for pip-install input by @dependabot in actions/setup-python#1199

Upgrade requests from 2.32.2 to 2.32.4 by @dependabot in actions/setup-python#1130

Upgrade prettier from 3.5.3 to 3.6.2 by @dependabot in actions/setup-python#1234

Upgrade @types/node from 24.1.0 to 24.9.1 and update macos-13 to macos-15-intel by @dependabot in actions/setup-python#1235

New Contributors

@yarikoptic made their first contribution in actions/setup-python#979

Full Changelog: actions/setup-python@v6...v6.1.0

Commits

See full diff in compare view

Updates actions/setup-node from 6.4.0 to 7.0.0

Release notes

Sourced from actions/setup-node's releases.

v7.0.0

What's Changed

Enhancements:

Add cache-primary-key and cache-matched-key as outputs by @gowridurgad in actions/setup-node#1577

Migrate to ESM and upgrade dependencies by @gowridurgad in actions/setup-node#1574

Bug fixes:

Remove dummy NODE_AUTH_TOKEN export by @gowridurgad in actions/setup-node#1558

Only use mirrorToken in getManifest if it's provided by @deiga in actions/setup-node#1548

Documentation updates:

Add documentation for publishing to npm with Trusted Publisher (OIDC) by @chiranjib-swain in actions/setup-node#1536

docs: Update restore-only cache documentation by @priya-kinthali in actions/setup-node#1550

docs: Update caching recommendations to mitigate cache poisoning risks by @chiranjib-swain in actions/setup-node#1567

Dependency update:

Upgrade @actions/cache to 5.1.0, log cache write denied by @jasongin in actions/setup-node#1569

New Contributors

@chiranjib-swain made their first contribution in actions/setup-node#1536

@deiga made their first contribution in actions/setup-node#1548

@jasongin made their first contribution in actions/setup-node#1569

Full Changelog: actions/setup-node@v6...v7.0.0

v6.5.0

What's Changed

Update @actions/cache to 5.1.0 and add security overrides for undici and fast-xml-parser by @HarithaVattikuti in actions/setup-node#1579

Full Changelog: actions/setup-node@v6.4.0...v6.5.0

Commits

8207627 Migrate to ESM and upgrade dependencies (#1574)
04be95c Add cache-primary-key and cache-matched-key as outputs (#1577)
7c2c68d docs: Update caching recommendations to mitigate cache poisoning risks (#1567)
6a61c03 Merge pull request #1569 from jasongin/update-actions-cache-5.1.0
30eb73b Resolve high-severity audit issues
4e1a87a Update dist
360237f Strict equality
4f8aac5 Bump @actions/cache to 5.1.0, log cache write denied
f4a67bb Only use mirrorToken in getManifest if it's provided (#1548)
0355742 Remove dummy NODE_AUTH_TOKEN export (#1558)
Additional commits viewable in compare view

Updates astral-sh/setup-uv from 8.3.1 to 8.3.2

Commits

11f9893 chore: roll up Dependabot updates (#948)
f798556 docs: update version references to v8.3.1 (#946)
e80544d chore: update known checksums for 0.11.28 (#947)
See full diff in compare view

Updates taiki-e/install-action from 2.82.10 to 2.83.2

Release notes

Sourced from taiki-e/install-action's releases.

2.83.2

Update parse-dockerfile@latest to 0.1.8.

Update mise@latest to 2026.7.5.

Update just@latest to 1.56.0.

Update gungraun-runner@latest to 0.19.4.

Update cargo-neat@latest to 0.4.1.

2.83.1

Update rclone@latest to 1.74.4.

Update mise@latest to 2026.7.4.

Update cargo-deny@latest to 0.20.2.

2.83.0

Support cargo-about. (#1924, thanks @ruffsl)

Update uv@latest to 0.11.28.

Update martin@latest to 1.12.0.

Update kingfisher@latest to 1.106.0.

Update biome@latest to 2.5.3.

2.82.11

Update wasm-tools@latest to 1.253.0.

Update uv@latest to 0.11.27.

Update mise@latest to 2026.7.2.

Update mdbook@latest to 0.5.4.

Changelog

Sourced from taiki-e/install-action's changelog.

[2.83.2] - 2026-07-12

Update parse-dockerfile@latest to 0.1.8.

Update mise@latest to 2026.7.5.

Update just@latest to 1.56.0.

Update gungraun-runner@latest to 0.19.4.

Update cargo-neat@latest to 0.4.1.

[2.83.1] - 2026-07-10

Update rclone@latest to 1.74.4.

Update mise@latest to 2026.7.4.

Update cargo-deny@latest to 0.20.2.

[2.83.0] - 2026-07-09

Support cargo-about. (#1924, thanks @ruffsl)

Update uv@latest to 0.11.28.

Update martin@latest to 1.12.0.

Update kingfisher@latest to 1.106.0.

Update biome@latest to 2.5.3.

[2.82.11] - 2026-07-08

Update wasm-tools@latest to 1.253.0.

Update uv@latest to 0.11.27.

Update mise@latest to 2026.7.2.

Update mdbook@latest to 0.5.4.

Commits

43aecc8 Release 2.83.2
fca4789 Update prek manifest
b41cc1f Update parse-dockerfile@latest to 0.1.8
8d866f8 Update mise@latest to 2026.7.5
7ebe462 Update just@latest to 1.56.0
01ab563 Update gungraun-runner@latest to 0.19.4
f164a68 Update cargo-neat@latest to 0.4.1
2ca9b94 Release 2.83.1
8598f86 Update parse-dockerfile manifest
76cfe4d Update rclone@latest to 1.74.4
Additional commits viewable in compare view

Updates softprops/action-gh-release from 3.0.1 to 3.0.2

Release notes

Sourced from softprops/action-gh-release's releases.

v3.0.2

3.0.2 is a patch release focused on release reliability and compatibility. It reuses existing draft releases when publishing prereleases, supports replacing release assets on Gitea, hardens streamed asset uploads, and provides clearer release-creation diagnostics. It also includes TypeScript, coverage, and tooling maintenance merged since 3.0.1.

This release fixes #795, #438, and #803. The upload transport hardening covers the historical failure reported in #790, although current hosted Node 24 runners did not reproduce it naturally. The diagnostics work is related to #786 and does not claim a reproducible release-creation fix.

What's Changed

Exciting New Features 🎉

feat: improve release error reporting and test coverage by @chenrui333 in softprops/action-gh-release#813

Bug fixes 🐛

fix: publish existing draft releases as prereleases by @godfengliang in softprops/action-gh-release#801

fix: upload small checksum assets reliably by @chenrui333 in softprops/action-gh-release#815

fix: replace existing release assets on Gitea by @chenrui333 in softprops/action-gh-release#816

fix: clarify release creation 404 errors by @chenrui333 in softprops/action-gh-release#817

Other Changes 🔄

chore(deps): upgrade TypeScript to 7 by @chenrui333 in softprops/action-gh-release#812

chore(deps): remove unused TypeScript tooling by @chenrui333 in softprops/action-gh-release#814

dependency, Node 24 pin, and CI maintenance merged since 3.0.1

Changelog

Sourced from softprops/action-gh-release's changelog.

3.0.2

3.0.2 is a patch release focused on release reliability and compatibility. It reuses existing draft releases when publishing prereleases, supports replacing release assets on Gitea, hardens streamed asset uploads, and provides clearer release-creation diagnostics. It also includes TypeScript, coverage, and tooling maintenance merged since 3.0.1.

This release fixes #795, #438, and #803. The upload transport hardening covers the historical failure reported in #790, although current hosted Node 24 runners did not reproduce it naturally. The diagnostics work is related to #786 and does not claim a reproducible release-creation fix.

What's Changed

Exciting New Features 🎉

feat: improve release error reporting and test coverage by @chenrui333 in softprops/action-gh-release#813

Bug fixes 🐛

fix: publish existing draft releases as prereleases by @godfengliang in softprops/action-gh-release#801

fix: upload small checksum assets reliably by @chenrui333 in softprops/action-gh-release#815

fix: replace existing release assets on Gitea by @chenrui333 in softprops/action-gh-release#816

fix: clarify release creation 404 errors by @chenrui333 in softprops/action-gh-release#817

Other Changes 🔄

chore(deps): upgrade TypeScript to 7 by @chenrui333 in softprops/action-gh-release#812

chore(deps): remove unused TypeScript tooling by @chenrui333 in softprops/action-gh-release#814

dependency, Node 24 pin, and CI maintenance merged since 3.0.1

Commits

3d0d988 release 3.0.2 (#818)
7e13ed4 fix: clarify release creation 404 errors (#817)
e6c70a5 fix: replace existing release assets on Gitea (#816)
f345337 fix: publish existing draft releases as prereleases (#801)
d8a89a2 fix: upload small checksum assets reliably (#815)
45ece40 chore(deps): remove unused TypeScript tooling (#814)
f6b913c feat: improve release error reporting and test coverage (#813)
15f193d chore(deps): upgrade TypeScript to 7 (#812)
cc8268d chore(deps): bump actions/checkout in the github-actions group (#810)
fd0ed1e chore(deps): bump the npm group with 3 updates (#811)
Additional commits viewable in compare view

Updates actions/stale from 10.3.0 to 10.4.0

Release notes

Sourced from actions/stale's releases.

v10.4.0

What's Changed

Bug Fix

Fixed only-issue-types validation by @trueberryless in actions/stale#1338

Dependency Updates

Bump undici to 6.27.0 via override, clean up stale license files, and version to 10.4.0. by @dependabot in actions/stale#1342

New Contributors

@trueberryless made their first contribution in actions/stale#1338

Full Changelog: actions/stale@v10.3.0...v10.4.0

Commits

1e223db Bump undici to 6.27.0 via override, clean up stale license files, and version...
9461cb1 fix: only-issue-types does not affect PRs (#1338)
See full diff in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the github-actions group with 6 updates: | Package | From | To | | --- | --- | --- | | [actions/setup-python](https://github.com/actions/setup-python) | `6` | `6.3.0` | | [actions/setup-node](https://github.com/actions/setup-node) | `6.4.0` | `7.0.0` | | [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) | `8.3.1` | `8.3.2` | | [taiki-e/install-action](https://github.com/taiki-e/install-action) | `2.82.10` | `2.83.2` | | [softprops/action-gh-release](https://github.com/softprops/action-gh-release) | `3.0.1` | `3.0.2` | | [actions/stale](https://github.com/actions/stale) | `10.3.0` | `10.4.0` | Updates `actions/setup-python` from 6 to 6.3.0 - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](actions/setup-python@v6...v6.3.0) Updates `actions/setup-node` from 6.4.0 to 7.0.0 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](actions/setup-node@v6.4.0...v7.0.0) Updates `astral-sh/setup-uv` from 8.3.1 to 8.3.2 - [Release notes](https://github.com/astral-sh/setup-uv/releases) - [Commits](astral-sh/setup-uv@f98e069...11f9893) Updates `taiki-e/install-action` from 2.82.10 to 2.83.2 - [Release notes](https://github.com/taiki-e/install-action/releases) - [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md) - [Commits](taiki-e/install-action@v2.82.10...v2.83.2) Updates `softprops/action-gh-release` from 3.0.1 to 3.0.2 - [Release notes](https://github.com/softprops/action-gh-release/releases) - [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md) - [Commits](softprops/action-gh-release@v3.0.1...v3.0.2) Updates `actions/stale` from 10.3.0 to 10.4.0 - [Release notes](https://github.com/actions/stale/releases) - [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md) - [Commits](actions/stale@v10.3.0...v10.4.0) --- updated-dependencies: - dependency-name: actions/setup-python dependency-version: 6.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: actions/setup-node dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: astral-sh/setup-uv dependency-version: 8.3.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: taiki-e/install-action dependency-version: 2.83.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: softprops/action-gh-release dependency-version: 3.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: actions/stale dependency-version: 10.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com>

…53ba4b46b

codecov · 2026-07-21T14:13:25Z

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 74.30%. Comparing base (a5001d3) to head (7ec04da).
⚠️ Report is 1 commits behind head on master.

Additional details and impacted files

@@             Coverage Diff              @@
##             master    #3723      +/-   ##
============================================
- Coverage     74.34%   74.30%   -0.05%     
  Complexity      950      950              
============================================
  Files          1303     1303              
  Lines        148712   148712              
  Branches     124225   124297      +72     
============================================
- Hits         110562   110502      -60     
+ Misses        34673    34650      -23     
- Partials       3477     3560      +83

Components	Coverage Δ
Rust Core	`74.57% <ø> (+<0.01%)`	⬆️
Java SDK	`62.64% <ø> (ø)`
C# SDK	`71.16% <ø> (-1.13%)`	⬇️
Python SDK	`92.27% <ø> (ø)`
PHP SDK	`84.52% <ø> (ø)`
Node SDK	`92.83% <ø> (+0.12%)`	⬆️
Go SDK	`43.08% <ø> (ø)`
see 47 files with indirect coverage changes

🚀 New features to boost your workflow:

❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

…53ba4b46b

dependabot Bot added CI/CD Continuous integration and deployment dependencies Pull requests that update a dependency file github-actions Pull requests that update GitHub Actions code labels Jul 21, 2026

github-actions Bot added the S-waiting-on-review PR is waiting on a reviewer label Jul 21, 2026

hubcio approved these changes Jul 21, 2026

View reviewed changes

Merge branch 'master' into dependabot/github_actions/github-actions-9…

fc161d1

…53ba4b46b

Merge branch 'master' into dependabot/github_actions/github-actions-9…

7ec04da

…53ba4b46b

numinnex approved these changes Jul 22, 2026

View reviewed changes

mmodzelewski approved these changes Jul 22, 2026

View reviewed changes

hubcio merged commit 226d99d into master Jul 22, 2026
79 checks passed

hubcio deleted the dependabot/github_actions/github-actions-953ba4b46b branch July 22, 2026 08:04

github-actions Bot removed the S-waiting-on-review PR is waiting on a reviewer label Jul 22, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): Bump the github-actions group with 6 updates#3723

chore(deps): Bump the github-actions group with 6 updates#3723
hubcio merged 3 commits into
masterfrom
dependabot/github_actions/github-actions-953ba4b46b

dependabot Bot commented on behalf of github Jul 21, 2026 •

edited

Loading

Uh oh!

codecov Bot commented Jul 21, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 21, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v6.3.0

What's Changed

Enhancement

Dependency update

Documentation

New Contributors

v6.2.0

What's Changed

Dependency Upgrades

v6.1.0

What's Changed

Enhancements:

Dependency and Documentation updates:

New Contributors

v7.0.0

What's Changed

Enhancements:

Bug fixes:

Documentation updates:

Dependency update:

New Contributors

v6.5.0

What's Changed

2.83.2

2.83.1

2.83.0

2.82.11

[2.83.2] - 2026-07-12

[2.83.1] - 2026-07-10

[2.83.0] - 2026-07-09

[2.82.11] - 2026-07-08

v3.0.2

What's Changed

Exciting New Features 🎉

Bug fixes 🐛

Other Changes 🔄

3.0.2

What's Changed

Exciting New Features 🎉

Bug fixes 🐛

Other Changes 🔄

v10.4.0

What's Changed

Bug Fix

Dependency Updates

New Contributors

Uh oh!

codecov Bot commented Jul 21, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codecov Report

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

dependabot Bot commented on behalf of github Jul 21, 2026 •

edited

Loading

codecov Bot commented Jul 21, 2026 •

edited

Loading