Skip to content

build(deps): Bump the actions group across 1 directory with 4 updates - #6

Merged
gricha merged 2 commits into
mainfrom
dependabot/github_actions/actions-b42c3db023
Oct 23, 2026
Merged

gricha merged 2 commits into
mainfrom
dependabot/github_actions/actions-b42c3db023

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 23, 2026

Copy link
Copy Markdown
Contributor

Bumps the actions group with 4 updates in the / directory: actions/checkout, actions/upload-artifact, actions/create-github-app-token and getsentry/craft.

Updates actions/checkout from 5.0.0 to 7.0.1

Release notes

Sourced from actions/checkout's releases.

v7.0.1

What's Changed

Full Changelog: actions/checkout@v7...v7.0.1

v7.0.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v6.0.3...v7.0.0

v6.1.0

What's Changed

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: actions/checkout@v6.0.3...v6.1.0

v6.0.3

What's Changed

New Contributors

Full Changelog: actions/checkout@v6...v6.0.3

v6.0.2

What's Changed

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

v7.0.1

v7.0.0

v6.0.3

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

... (truncated)

Commits

Updates actions/upload-artifact from 6.0.0 to 7.0.2

Release notes

Sourced from actions/upload-artifact's releases.

v7.0.2

What's Changed

  • Improves artifact download retries when the service returns HTTP 429 (rate limiting), including honoring valid Retry-After headers.
  • Updates @​actions/artifact to v6.3.1.

New Contributors

Full Changelog: actions/upload-artifact@v7.0.1...v7.0.2

v7.0.1

What's Changed

Full Changelog: actions/upload-artifact@v7...v7.0.1

v7.0.0

v7 What's new

Direct Uploads

Adds support for uploading single files directly (unzipped). Callers can set the new archive parameter to false to skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. The name parameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.

ESM

To support new versions of the @actions/* packages, we've upgraded the package to ESM.

What's Changed

New Contributors

Full Changelog: actions/upload-artifact@v6...v7.0.0

Commits
  • cf430e0 Merge pull request #822 from actions/tunc-d-prepare-upload-v7-0-2
  • c2acded chore: prepare v7.0.2 release
  • 4687c1b Merge pull request #821 from actions/tunc-d-upload-artifact-package-bump
  • 8cbe1be Bump @​actions/artifact to 6.3.1
  • 043fb46 Merge pull request #797 from actions/yacaovsnc/update-dependency
  • 634250c Include changes in typespec/ts-http-runtime 0.3.5
  • e454baa Readme: bump all the example versions to v7 (#796)
  • 74fad66 Update the readme with direct upload details (#795)
  • bbbca2d Support direct file uploads (#764)
  • 589182c Upgrade the module to ESM and bump dependencies (#762)
  • Additional commits viewable in compare view

Updates actions/create-github-app-token from 2.0.6 to 3.3.0

Release notes

Sourced from actions/create-github-app-token's releases.

v3.3.0

3.3.0 (2026-10-12)

Features

Bug Fixes

  • deps: bump nested undici from 6.24.0 to 6.29.0 (#403) (12461a3)
  • deps: bump the production-dependencies group across 1 directory with 3 updates (#395) (a69c19d)

v3.2.0

3.2.0 (2026-05-12)

Features

  • add support for enterprise-level GitHub Apps (#263) (952a2a7)
  • support full repository names in repositories input (#372) (85eb8dd)

Bug Fixes

  • deps: bump @​actions/core from 3.0.0 to 3.0.1 in the production-dependencies group (#364) (43e5c34)
  • validate private-key input (#376) (f24bbd8)

v3.1.1

3.1.1 (2026-04-11)

Bug Fixes

  • improve error message when app identifier is empty (#362) (07e2b76), closes #249

v3.1.0

3.1.0 (2026-04-11)

Bug Fixes

  • deps: bump p-retry from 7.1.1 to 8.0.0 (#357) (3bbe07d)

Features

... (truncated)

Changelog

Sourced from actions/create-github-app-token's changelog.

Changelog

3.3.0 (2026-10-12)

Features

Bug Fixes

  • deps: bump nested undici from 6.24.0 to 6.29.0 (#403) (12461a3)
  • deps: bump the production-dependencies group across 1 directory with 3 updates (#395) (a69c19d)

3.2.0 (2026-05-12)

Features

  • add support for enterprise-level GitHub Apps (#263) (952a2a7)
  • support full repository names in repositories input (#372) (85eb8dd)

Bug Fixes

  • deps: bump @​actions/core from 3.0.0 to 3.0.1 in the production-dependencies group (#364) (43e5c34)
  • validate private-key input (#376) (f24bbd8)
Commits
  • 64ab729 chore(main): release 3.3.0 (#402)
  • f3a828e ci: create signed dist commits in release workflow (#404)
  • 655017f docs: clarify when owner grants access to all repositories (#378)
  • 12461a3 fix(deps): bump nested undici from 6.24.0 to 6.29.0 (#403)
  • a47236f feat: update permission inputs (#399)
  • a69c19d fix(deps): bump the production-dependencies group across 1 directory with 3 u...
  • d5cb7ae build(deps): bump actions/checkout from 6 to 7 (#384)
  • 575da86 build(deps): bump stefanzweifel/git-auto-commit-action from 7.1.0 to 7.2.0 in...
  • e85f677 test: omit stack traces from snapshots (#401)
  • 9419396 build(deps-dev): bump c8 from 11.0.0 to 12.0.0 (#400)
  • Additional commits viewable in compare view

Updates getsentry/craft from 2.19.0 to 2.35.1

Release notes

Sourced from getsentry/craft's releases.

2.35.1

Bug Fixes 🐛

Deps

Internal Changes 🔧

2.35.0

New Features ✨

Bug Fixes 🐛

Internal Changes 🔧

2.34.1

Bug Fixes 🐛

  • Archive Craft documentation in GCS by @​BYK in #899

2.34.0

New Features ✨

  • (action) Publish commit-pinned Craft nightlies to GHCR by @​BYK in #897

Bug Fixes 🐛

  • Allow release build to validate nightly jobs by @​BYK in #898

2.33.3

Bug Fixes 🐛

  • (deps) Remediate open security alerts by @​BYK in #894
  • Allow Git identity environment for commits by @​BYK in #896
  • Pass Git actor name to release workflow by @​BYK in #895

2.33.2

Bug Fixes 🐛

... (truncated)

Changelog

Sourced from getsentry/craft's changelog.

Changelog

3.0.0

Breaking Changes 🛠

  • (config) Reject changelog path settings without workspaces by @​sentry-junior in #922
  • (nuget) Add workspaces support for dependency-ordered publishing by @​BYK in #686
  • (prepare) Fail when no target bumps the version, and bump nuget VersionPrefix by @​sentry-junior in #923

New Features ✨

Changelog

  • Let workspaces own or exclude unowned paths by @​sentry-junior in #921

  • Ground AI summaries in PR descriptions by @​sentry-junior in #918 Category summaries in the 3.0.0 release preview were vague ("Release communication…", "Internal maintenance…"), and the breaking-change summary didn't say why the change was breaking. The model only had PR titles to work with, and the prompt pushed category summaries toward abstract themes.

  • Each changelog entry now goes to the model with a condensed copy of its PR description: HTML comments and code blocks are removed, whitespace is collapsed, and it's capped at 600 characters. The description is context only and never shows up in the rendered changelog. Entries that come from a Changelog Entry section or `` don't get one, since their curated text is already the entry.

  • The prompt now asks scope and category summaries to name the specific features, targets and options that changed, bans vague umbrella phrases, and asks breaking-change summaries to say what users must change when the data says so. It also tells the model not to guess when the data doesn't say. The top-level release overview instructions are unchanged because that output was already good.

  • serializeChangelog now passes each group's source PRs alongside its rendered items. The important-title and description lookups both come from that one list, so there's no more index-offset merging.

I left reasoning level / model settings alone. Whether those need tuning is easier to judge once a real release has run with the richer input.

Closes #917

via adm.

--

View Junior Session [Sentry]

Bug Fixes 🐛

Changelog

Other

... (truncated)

Commits
  • 0ff7589 release: 2.35.1
  • ddd9ad0 fix(deps): Mitigate brace recursion and shared-cache disclosure (#912)
  • c4d85a4 fix(deps): Upgrade Sentry to fix telemetry exit loop (#911)
  • 009b210 ci(release): Use native Craft binaries and separate AI credentials (#910)
  • 9a205d1 meta: Bump new development version
  • ddf3b19 Merge commit '7a7857552e2cdc08b502de96e6076849c01fba32'
  • 7a78575 release: 2.35.0
  • 2c680a1 feat(distribution): Release native Craft with install and setup tools (#904)
  • aaddaa4 feat(changelog): Add configurable AI summaries for CLI and Actions (#902)
  • d87d294 build: Add standalone Fossilize binaries and native smoke tests (#903)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the actions group with 4 updates in the / directory: [actions/checkout](https://github.com/actions/checkout), [actions/upload-artifact](https://github.com/actions/upload-artifact), [actions/create-github-app-token](https://github.com/actions/create-github-app-token) and [getsentry/craft](https://github.com/getsentry/craft).


Updates `actions/checkout` from 5.0.0 to 7.0.1
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@08c6903...3d3c42e)

Updates `actions/upload-artifact` from 6.0.0 to 7.0.2
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@b7c566a...cf430e0)

Updates `actions/create-github-app-token` from 2.0.6 to 3.3.0
- [Release notes](https://github.com/actions/create-github-app-token/releases)
- [Changelog](https://github.com/actions/create-github-app-token/blob/main/CHANGELOG.md)
- [Commits](actions/create-github-app-token@df432ce...64ab729)

Updates `getsentry/craft` from 2.19.0 to 2.35.1
- [Release notes](https://github.com/getsentry/craft/releases)
- [Changelog](https://github.com/getsentry/craft/blob/master/CHANGELOG.md)
- [Commits](getsentry/craft@c6e2f04...0ff7589)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: actions/upload-artifact
  dependency-version: 7.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: actions/create-github-app-token
  dependency-version: 3.3.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: getsentry/craft
  dependency-version: 2.35.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from a team as a code owner October 23, 2026 03:29
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Oct 23, 2026
@gricha
gricha merged commit 8f0119d into main Oct 23, 2026
18 checks passed
@gricha
gricha deleted the dependabot/github_actions/actions-b42c3db023 branch October 23, 2026 17:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant