Skip to content

Bump the github-dependencies group across 1 directory with 4 updates#1036

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-dependencies-92fb16e7e8
Closed

Bump the github-dependencies group across 1 directory with 4 updates#1036
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-dependencies-92fb16e7e8

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 27, 2026

Bumps the github-dependencies group with 4 updates in the / directory: actions/setup-node, codecov/codecov-action, actions/cache and super-linter/super-linter.

Updates actions/setup-node from 6.3.0 to 6.4.0

Release notes

Sourced from actions/setup-node's releases.

v6.4.0

What's Changed

Dependency updates:

New Contributors

Full Changelog: actions/setup-node@v6...v6.4.0

Commits

Updates codecov/codecov-action from 5.5.2 to 6.0.0

Release notes

Sourced from codecov/codecov-action's releases.

v6.0.0

⚠️ This version introduces support for node24 which make cause breaking changes for systems that do not currently support node24. ⚠️

What's Changed

Full Changelog: codecov/codecov-action@v5.5.4...v6.0.0

v5.5.4

This is a mirror of v5.5.2. v6 will be released which requires node24

What's Changed

Full Changelog: codecov/codecov-action@v5.5.3...v5.5.4

v5.5.3

What's Changed

Full Changelog: codecov/codecov-action@v5.5.2...v5.5.3

Changelog

Sourced from codecov/codecov-action's changelog.

v5.5.2

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.5.1..v5.5.2

v5.5.1

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.5.0..v5.5.1

v5.5.0

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.3..v5.5.0

v5.4.3

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.2..v5.4.3

v5.4.2

... (truncated)

Commits

Updates actions/cache from 5.0.3 to 5.0.5

Release notes

Sourced from actions/cache's releases.

v5.0.5

What's Changed

Full Changelog: actions/cache@v5...v5.0.5

v5.0.4

What's Changed

New Contributors

Full Changelog: actions/cache@v5...v5.0.4

Changelog

Sourced from actions/cache's changelog.

Releases

How to prepare a release

[!NOTE]
Relevant for maintainers with write access only.

  1. Switch to a new branch from main.
  2. Run npm test to ensure all tests are passing.
  3. Update the version in https://github.com/actions/cache/blob/main/package.json.
  4. Run npm run build to update the compiled files.
  5. Update this https://github.com/actions/cache/blob/main/RELEASES.md with the new version and changes in the ## Changelog section.
  6. Run licensed cache to update the license report.
  7. Run licensed status and resolve any warnings by updating the https://github.com/actions/cache/blob/main/.licensed.yml file with the exceptions.
  8. Commit your changes and push your branch upstream.
  9. Open a pull request against main and get it reviewed and merged.
  10. Draft a new release https://github.com/actions/cache/releases use the same version number used in package.json
    1. Create a new tag with the version number.
    2. Auto generate release notes and update them to match the changes you made in RELEASES.md.
    3. Toggle the set as the latest release option.
    4. Publish the release.
  11. Navigate to https://github.com/actions/cache/actions/workflows/release-new-action-version.yml
    1. There should be a workflow run queued with the same version number.
    2. Approve the run to publish the new version and update the major tags for this action.

Changelog

5.0.4

  • Bump minimatch to v3.1.5 (fixes ReDoS via globstar patterns)
  • Bump undici to v6.24.1 (WebSocket decompression bomb protection, header validation fixes)
  • Bump fast-xml-parser to v5.5.6

5.0.3

5.0.2

  • Bump @actions/cache to v5.0.3 #1692

5.0.1

  • Update @azure/storage-blob to ^12.29.1 via @actions/cache@5.0.1 #1685

5.0.0

[!IMPORTANT] actions/cache@v5 runs on the Node.js 24 runtime and requires a minimum Actions Runner version of 2.327.1.

... (truncated)

Commits
  • 27d5ce7 Merge pull request #1747 from actions/yacaovsnc/update-dependency
  • f280785 licensed changes
  • 619aeb1 npm run build generated dist files
  • bcf16c2 Update ts-http-runtime to 0.3.5
  • 6682284 Merge pull request #1738 from actions/prepare-v5.0.4
  • e340396 Update RELEASES
  • 8a67110 Add licenses
  • 1865903 Update dependencies & patch security vulnerabilities
  • 5656298 Merge pull request #1722 from RyPeck/patch-1
  • 4e380d1 Fix cache key in examples.md for bun.lock
  • Additional commits viewable in compare view

Updates super-linter/super-linter from 8.5.0 to 8.6.0

Release notes

Sourced from super-linter/super-linter's releases.

v8.6.0

8.6.0 (2026-03-31)

🚀 Features

🐛 Bugfixes

⬆️ Dependency updates

  • bundler: bump rubocop in /dependencies in the rubocop group (#7514) (f2264d2)
  • bundler: bump rubocop in /dependencies in the rubocop group (#7604) (c929dc3)
  • bundler: bump rubocop in /dependencies in the rubocop group (#7662) (bfb2fd9)
  • bundler: bump rubocop-github in /dependencies in the rubocop group (#7640) (a88d75e)
  • bundler: bump the rubocop group across 1 directory with 2 updates (#7565) (56ae6b3)
  • docker: bump python in the docker-base-images group (#7319) (717c087)
  • docker: bump the docker group across 1 directory with 4 updates (#7698) (11c750e)
  • docker: bump the docker group across 1 directory with 5 updates (#7615) (d7e1bd8)
  • docker: bump the docker group across 1 directory with 6 updates (#7566) (0f9cf19)
  • docker: bump the docker group across 1 directory with 6 updates (#7631) (ad7f508)
  • docker: bump the docker group across 1 directory with 9 updates (#7513) (89e3725)
  • docker: bump the docker group with 2 updates (#7577) (8b2f0c0)
  • docker: bump the docker group with 2 updates (#7641) (7293e37)
  • docker: bump the docker group with 2 updates (#7663) (eabfa25)
  • java: bump com.puppycrawl.tools:checkstyle (#7689) (4c66d9d)
  • java: bump the java-gradle group across 2 directories with 2 updates (#7581) (51af5a0)
  • npm: bump ajv from 6.12.6 to 6.14.0 in /dependencies (#7550) (7f00eb7)
  • npm: bump axios from 1.12.2 to 1.13.5 in /dependencies (#7510) (a891169)
  • npm: bump brace-expansion from 1.1.12 to 1.1.13 in /dependencies (#7685) (92c4cea)
  • npm: bump express-rate-limit from 8.2.1 to 8.3.0 in /dependencies (#7613) (c184a25)
  • npm: bump flatted from 3.3.3 to 3.4.1 in /dependencies (#7636) (013d8a7)
  • npm: bump hono from 4.11.7 to 4.12.2 in /dependencies (#7559) (5c3679f)
  • npm: bump hono from 4.12.5 to 4.12.7 in /dependencies (#7624) (c31d9ad)
  • npm: bump markdown-it and renovate in /dependencies (#7529) (9b794c2)
  • npm: bump path-to-regexp from 8.3.0 to 8.4.0 in /dependencies (#7687) (309fb55)
  • npm: bump picomatch in /dependencies (#7675) (df4f15e)
  • npm: bump qs from 6.14.1 to 6.14.2 in /dependencies (#7520) (a9e6534)
  • npm: bump renovate (#7699) (b91627f)
  • npm: bump renovate from 43.4.0 to 43.4.4 in /dependencies (#7524) (2ab5b9c)
  • npm: bump smol-toml from 1.6.0 to 1.6.1 in /dependencies (#7676) (d015498)
  • npm: bump the npm group across 1 directory with 15 updates (#7595) (58ee821)
  • npm: bump the npm group across 1 directory with 2 updates (#7623) (ddb4fbb)

... (truncated)

Changelog

Sourced from super-linter/super-linter's changelog.

Changelog

8.6.0 (2026-03-31)

🚀 Features

🐛 Bugfixes

⬆️ Dependency updates

  • bundler: bump rubocop in /dependencies in the rubocop group (#7514) (f2264d2)
  • bundler: bump rubocop in /dependencies in the rubocop group (#7604) (c929dc3)
  • bundler: bump rubocop in /dependencies in the rubocop group (#7662) (bfb2fd9)
  • bundler: bump rubocop-github in /dependencies in the rubocop group (#7640) (a88d75e)
  • bundler: bump the rubocop group across 1 directory with 2 updates (#7565) (56ae6b3)
  • docker: bump python in the docker-base-images group (#7319) (717c087)
  • docker: bump the docker group across 1 directory with 4 updates (#7698) (11c750e)
  • docker: bump the docker group across 1 directory with 5 updates (#7615) (d7e1bd8)
  • docker: bump the docker group across 1 directory with 6 updates (#7566) (0f9cf19)
  • docker: bump the docker group across 1 directory with 6 updates (#7631) (ad7f508)
  • docker: bump the docker group across 1 directory with 9 updates (#7513) (89e3725)
  • docker: bump the docker group with 2 updates (#7577) (8b2f0c0)
  • docker: bump the docker group with 2 updates (#7641) (7293e37)
  • docker: bump the docker group with 2 updates (#7663) (eabfa25)
  • java: bump com.puppycrawl.tools:checkstyle (#7689) (4c66d9d)
  • java: bump the java-gradle group across 2 directories with 2 updates (#7581) (51af5a0)
  • npm: bump ajv from 6.12.6 to 6.14.0 in /dependencies (#7550) (7f00eb7)
  • npm: bump axios from 1.12.2 to 1.13.5 in /dependencies (#7510) (a891169)
  • npm: bump brace-expansion from 1.1.12 to 1.1.13 in /dependencies (#7685) (92c4cea)
  • npm: bump express-rate-limit from 8.2.1 to 8.3.0 in /dependencies (#7613) (c184a25)
  • npm: bump flatted from 3.3.3 to 3.4.1 in /dependencies (#7636) (013d8a7)
  • npm: bump hono from 4.11.7 to 4.12.2 in /dependencies (#7559) (5c3679f)
  • npm: bump hono from 4.12.5 to 4.12.7 in /dependencies (#7624) (c31d9ad)
  • npm: bump markdown-it and renovate in /dependencies (#7529) (9b794c2)
  • npm: bump path-to-regexp from 8.3.0 to 8.4.0 in /dependencies (#7687) (309fb55)
  • npm: bump picomatch in /dependencies (#7675) (df4f15e)
  • npm: bump qs from 6.14.1 to 6.14.2 in /dependencies (#7520) (a9e6534)
  • npm: bump renovate (#7699) (b91627f)
  • npm: bump renovate from 43.4.0 to 43.4.4 in /dependencies (#7524) (2ab5b9c)
  • npm: bump smol-toml from 1.6.0 to 1.6.1 in /dependencies (#7676) (d015498)
  • npm: bump the npm group across 1 directory with 15 updates (#7595) (58ee821)

... (truncated)

Commits
  • 9e86335 chore(main): release 8.6.0 (#7512)
  • b91627f deps(npm): bump renovate (#7699)
  • 11c750e deps(docker): bump the docker group across 1 directory with 4 updates (#7698)
  • 4c66d9d deps(java): bump com.puppycrawl.tools:checkstyle (#7689)
  • cb17f60 deps(python): bump the pip group across 1 directory with 5 updates (#7684)
  • 6a65d3a feat: improve zsh scripts support (#7674)
  • eb8ddc7 chore: update ruby and npm deps (#7694)
  • db85efc deps(npm): bump the npm group across 1 directory with 9 updates (#7690)
  • c5ec78d ci(dev-npm): bump the npm_and_yarn group across 1 directory with 1 update (#7...
  • f35a407 ci(dev-docker): bump node in /dev-dependencies (#7678)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the github-dependencies group with 4 updates in the / directory: [actions/setup-node](https://github.com/actions/setup-node), [codecov/codecov-action](https://github.com/codecov/codecov-action), [actions/cache](https://github.com/actions/cache) and [super-linter/super-linter](https://github.com/super-linter/super-linter).


Updates `actions/setup-node` from 6.3.0 to 6.4.0
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@53b8394...48b55a0)

Updates `codecov/codecov-action` from 5.5.2 to 6.0.0
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](codecov/codecov-action@671740a...57e3a13)

Updates `actions/cache` from 5.0.3 to 5.0.5
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](actions/cache@cdf6c1f...27d5ce7)

Updates `super-linter/super-linter` from 8.5.0 to 8.6.0
- [Release notes](https://github.com/super-linter/super-linter/releases)
- [Changelog](https://github.com/super-linter/super-linter/blob/main/CHANGELOG.md)
- [Commits](super-linter/super-linter@61abc07...9e86335)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: 6.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: codecov/codecov-action
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-dependencies
- dependency-name: actions/cache
  dependency-version: 5.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-dependencies
- dependency-name: super-linter/super-linter
  dependency-version: 8.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Apr 27, 2026
@dependabot dependabot Bot requested a review from jbampton as a code owner April 27, 2026 02:48
@cloudflare-workers-and-pages
Copy link
Copy Markdown

cloudflare-workers-and-pages Bot commented Apr 27, 2026

Deploying brisbanesocialchess with  Cloudflare Pages  Cloudflare Pages

Latest commit: 95f8e69
Status: ✅  Deploy successful!
Preview URL: https://cd44ba9e.brisbanesocialchess.pages.dev
Branch Preview URL: https://dependabot-github-actions-gi-apmj.brisbanesocialchess.pages.dev

View logs

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Apr 27, 2026
@github-project-automation github-project-automation Bot moved this to Backlog in Chess Apr 27, 2026
@github-actions
Copy link
Copy Markdown
Contributor

Thanks for your first pull request! We appreciate your contribution.

@github-actions github-actions Bot added ci infra and removed dependencies Pull requests that update a dependency file labels Apr 27, 2026
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github May 12, 2026

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this May 12, 2026
@dependabot dependabot Bot deleted the dependabot/github_actions/github-dependencies-92fb16e7e8 branch May 12, 2026 07:41
@github-project-automation github-project-automation Bot moved this from Backlog to Done in Chess May 12, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

ci github_actions Pull requests that update GitHub Actions code infra

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants