Skip to content

chore(deps): bump the actions group across 1 directory with 6 updates - #921

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions-b434826032
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions-b434826032

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 14, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the actions group with 6 updates in the / directory:

Package From To
actions/setup-node 7.0.0 7.1.0
taiki-e/install-action 2.87.24 2.87.27
actions/upload-artifact 7.0.1 7.0.2
ruby/setup-ruby 1.327.0 1.328.0
actions/download-artifact 8.0.1 8.0.2
trufflesecurity/trufflehog 3.97.9 3.99.2

Updates actions/setup-node from 7.0.0 to 7.1.0

Release notes

Sourced from actions/setup-node's releases.

v7.1.0

What's Changed

Enhancements:

Bug fixes:

Documentation updates:

Dependency updates:

New Contributors

Full Changelog: actions/setup-node@v7.0.0...v7.1.0

Commits
  • 949feb2 Bump eslint from 10.5.0 to 10.11.0 and package.json from 7.0.0 to 7.1.0 (#1635)
  • 7207c4f chore: update dependencies and add license files (#1642)
  • 54337e0 Bump eslint-plugin-n from 18.1.0 to 18.3.0 (#1638)
  • fb54fa8 Bump jest-each from 30.4.1 to 30.5.2 (#1636)
  • 7f84f1d Bump pnpm/action-setup from 6.0.10 to 6.1.0 (#1631)
  • 0c54c7b Bump @​typescript-eslint/parser from 8.62.0 to 8.70.0 (#1615)
  • a829419 Bump @​types/semver from 7.7.1 to 7.8.0 (#1616)
  • 680d1e4 Support absolute paths in node-version-file (#1633)
  • db0fb3a Bump baseline-browser-mapping from 2.10.38 to 2.11.22 (#1629)
  • 94196ee Bump pnpm/action-setup from 6.0.9 to 6.0.10 (#1602)
  • Additional commits viewable in compare view

Updates taiki-e/install-action from 2.87.24 to 2.87.27

Release notes

Sourced from taiki-e/install-action's releases.

2.87.27

  • Update vacuum@latest to 0.32.0.

  • Update uv@latest to 0.12.24.

  • Update typos@latest to 1.51.1.

  • Update tombi@latest to 1.7.3.

  • Update syft@latest to 1.54.1.

  • Update release-plz@latest to 0.3.170.

  • Update mise@latest to 2026.10.4.

  • Update kingfisher@latest to 2.11.1.

  • Update hyperfine@latest to 2.0.0.

  • Update dprint@latest to 0.61.1.

  • Update cargo-nextest@latest to 0.9.148.

  • Update cargo-neat@latest to 0.6.0.

  • Update cargo-binstall@latest to 1.25.2.

2.87.26

  • Update tombi@latest to 1.7.2.

  • Update prek@latest to 0.5.5.

  • Update mise@latest to 2026.10.3.

  • Update kache@latest to 1.0.0.

  • Update hyperfine@latest to 1.21.0.

2.87.25

  • Update uv@latest to 0.12.23.

  • Update mise@latest to 2026.10.2.

  • Update kingfisher@latest to 2.10.0.

  • Update dprint@latest to 0.60.1.

  • Update cargo-semver-checks@latest to 0.51.0.

  • Update cargo-binstall@latest to 1.25.1.

Changelog

Sourced from taiki-e/install-action's changelog.

[2.87.27] - 2026-10-09

  • Update vacuum@latest to 0.32.0.

  • Update uv@latest to 0.12.24.

  • Update typos@latest to 1.51.1.

  • Update tombi@latest to 1.7.3.

  • Update syft@latest to 1.54.1.

  • Update release-plz@latest to 0.3.170.

  • Update mise@latest to 2026.10.4.

  • Update kingfisher@latest to 2.11.1.

  • Update hyperfine@latest to 2.0.0.

  • Update dprint@latest to 0.61.1.

  • Update cargo-nextest@latest to 0.9.148.

  • Update cargo-neat@latest to 0.6.0.

  • Update cargo-binstall@latest to 1.25.2.

[2.87.26] - 2026-10-06

  • Update tombi@latest to 1.7.2.

  • Update prek@latest to 0.5.5.

  • Update mise@latest to 2026.10.3.

  • Update kache@latest to 1.0.0.

  • Update hyperfine@latest to 1.21.0.

[2.87.25] - 2026-10-05

  • Update uv@latest to 0.12.23.

  • Update mise@latest to 2026.10.2.

  • Update kingfisher@latest to 2.10.0.

  • Update dprint@latest to 0.60.1.

... (truncated)

Commits
  • ab68953 Release 2.87.27
  • 62530fd Update vacuum@latest to 0.32.0
  • f684ea4 Update uv@latest to 0.12.24
  • 8aa87a0 Update typos@latest to 1.51.1
  • 5ffcf43 Update tombi@latest to 1.7.3
  • 9926636 Update syft@latest to 1.54.1
  • 4647f42 Update release-plz@latest to 0.3.170
  • df02560 Update rclone manifest
  • d7c82f4 Update mise@latest to 2026.10.4
  • a6142d0 Update kingfisher@latest to 2.11.1
  • Additional commits viewable in compare view

Updates actions/upload-artifact from 7.0.1 to 7.0.2

Release notes

Sourced from actions/upload-artifact's releases.

v7.0.2

What's Changed

  • Improves artifact download retries when the service returns HTTP 429 (rate limiting), including honoring valid Retry-After headers.
  • Updates @​actions/artifact to v6.3.1.

New Contributors

Full Changelog: actions/upload-artifact@v7.0.1...v7.0.2

Commits
  • cf430e0 Merge pull request #822 from actions/tunc-d-prepare-upload-v7-0-2
  • c2acded chore: prepare v7.0.2 release
  • 4687c1b Merge pull request #821 from actions/tunc-d-upload-artifact-package-bump
  • 8cbe1be Bump @​actions/artifact to 6.3.1
  • See full diff in compare view

Updates ruby/setup-ruby from 1.327.0 to 1.328.0

Release notes

Sourced from ruby/setup-ruby's releases.

v1.328.0

What's Changed

Full Changelog: ruby/setup-ruby@v1.327.0...v1.328.0

Commits

Updates actions/download-artifact from 8.0.1 to 8.0.2

Release notes

Sourced from actions/download-artifact's releases.

v8.0.2

What's Changed

New Contributors

Full Changelog: actions/download-artifact@v8.0.1...v8.0.2

Commits
  • 9000827 Merge pull request #493 from actions/tunc-d-prepare-download-v8-0-2
  • e455989 Prepare download-artifact v8.0.2
  • a00b90c Merge pull request #492 from actions/tunc-d-download-artifact-package-bump
  • 29bb7ce Update @​actions/artifact to 6.3.1
  • 484a0b5 Update the readme (#473)
  • See full diff in compare view

Updates trufflesecurity/trufflehog from 3.97.9 to 3.99.2

Release notes

Sourced from trufflesecurity/trufflehog's releases.

v3.99.2

What's Changed

Full Changelog: trufflesecurity/trufflehog@v3.99.1...v3.99.2

v3.99.1

What's Changed

Full Changelog: trufflesecurity/trufflehog@v3.99.0...v3.99.1

v3.99.0

What's Changed

Full Changelog: trufflesecurity/trufflehog@v3.98.1...v3.99.0

v3.98.1

What's Changed

New Contributors

Full Changelog: trufflesecurity/trufflehog@v3.98.0...v3.98.1

v3.98.0

What's Changed

... (truncated)

Commits
  • e76dff8 Somehow forgot to pull the config value into the engine (#5402)
  • 005b692 [INT-1084] Make the results deduplication cache size configurable (#5399)
  • f6499ff Update github-actions (#5363)
  • b2b0a92 Add OAuth2 (ROPC) auth for verification requests (#5392)
  • ab5ee07 Fix Sumo Logic detector ignoring configured verifier endpoints (#5395)
  • 4c282f5 Add api_timeout_seconds to Gerrit source proto (#5394)
  • c95844e Add a TruffleHog dectector for Kong Konnect Platform (#5305)
  • cc79781 Add postman source documentation (#5389)
  • 0186870 Add pkg/ssrf shared egress guard; use it for WithNoLocalIP and analyzer clien...
  • bb9ed13 docs: point five internal links at files that exist (#5375)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Oct 14, 2026
@coderabbitai

coderabbitai Bot commented Oct 14, 2026 •

Copy link
Copy Markdown
Contributor

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration
  • Configuration used: Organization UI
  • Review profile: ASSERTIVE
  • Plan: Advanced
  • Run ID: 8c612f37-ac51-4069-ab65-4afd4f624a0e

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions-b434826032 branch from 8367af0 to c09a919 Compare October 14, 2026 01:54
Bumps the actions group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [actions/setup-node](https://github.com/actions/setup-node) | `7.0.0` | `7.1.0` |
| [taiki-e/install-action](https://github.com/taiki-e/install-action) | `2.87.24` | `2.87.27` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact) | `7.0.1` | `7.0.2` |
| [ruby/setup-ruby](https://github.com/ruby/setup-ruby) | `1.327.0` | `1.328.0` |
| [actions/download-artifact](https://github.com/actions/download-artifact) | `8.0.1` | `8.0.2` |
| [trufflesecurity/trufflehog](https://github.com/trufflesecurity/trufflehog) | `3.97.9` | `3.99.2` |



Updates `actions/setup-node` from 7.0.0 to 7.1.0
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@v7.0.0...v7.1.0)

Updates `taiki-e/install-action` from 2.87.24 to 2.87.27
- [Release notes](https://github.com/taiki-e/install-action/releases)
- [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md)
- [Commits](taiki-e/install-action@v2.87.24...v2.87.27)

Updates `actions/upload-artifact` from 7.0.1 to 7.0.2
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@v7.0.1...v7.0.2)

Updates `ruby/setup-ruby` from 1.327.0 to 1.328.0
- [Release notes](https://github.com/ruby/setup-ruby/releases)
- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)
- [Commits](ruby/setup-ruby@v1.327.0...v1.328.0)

Updates `actions/download-artifact` from 8.0.1 to 8.0.2
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](actions/download-artifact@v8.0.1...v8.0.2)

Updates `trufflesecurity/trufflehog` from 3.97.9 to 3.99.2
- [Release notes](https://github.com/trufflesecurity/trufflehog/releases)
- [Commits](trufflesecurity/trufflehog@v3.97.9...v3.99.2)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: 8.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: actions/setup-node
  dependency-version: 7.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: actions/upload-artifact
  dependency-version: 7.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: ruby/setup-ruby
  dependency-version: 1.328.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: taiki-e/install-action
  dependency-version: 2.87.27
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: trufflesecurity/trufflehog
  dependency-version: 3.99.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions-b434826032 branch from c09a919 to 5c7077a Compare October 14, 2026 04:51
@dependabot @github

dependabot Bot commented on behalf of github Oct 15, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 15, 2026
@dependabot
dependabot Bot deleted the dependabot/github_actions/actions-b434826032 branch October 15, 2026 21:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants