Skip to content
This repository was archived by the owner on Jul 26, 2026. It is now read-only.

deps: Bump the all group across 1 directory with 7 updates - #290

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/all-4d1c50bb07
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/all-4d1c50bb07

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 26, 2026

Copy link
Copy Markdown
Contributor

Bumps the all group with 7 updates in the / directory:

Package From To
step-security/harden-runner 2.13.1 2.20.0
erlef/setup-beam 1.20.4 1.24.1
ruby/setup-ruby 1.267.0 1.321.0
reviewdog/action-actionlint 1.68.0 1.73.0
reviewdog/action-setup 1.4.0 1.5.0
mongolyy/reviewdog-action-biome 2.5.0 2.11.2
zizmorcore/zizmor-action 0.2.0 0.6.1

Updates step-security/harden-runner from 2.13.1 to 2.20.0

Release notes

Sourced from step-security/harden-runner's releases.

v2.20.0

What's Changed

  • Support for block policy for MacOS and Windows GitHub-hosted runners
  • Support for Bitrise MacOS GitHub Actions runners
  • HTTPS monitoring support for Bun for Linux runners (enterprise tier)

Full Changelog: step-security/harden-runner@v2.19.4...v2.20.0

v2.19.4

What's Changed

  • Improvements for HTTPS Monitoring for the Enterprise tier of Harden Runner

Full Changelog: step-security/harden-runner@v2.19.3...v2.19.4

v2.19.3

What's Changed

Full Changelog: step-security/harden-runner@v2.19.2...v2.19.3

v2.19.2

What's Changed

  • Update the Harden Runner agent for enterprise tier to use go 1.26 and fix minor bugs.

Full Changelog: step-security/harden-runner@v2.19.1...v2.19.2

v2.19.1

What's Changed

What the fix changes

  • Harden-Runner will detect ubuntu-slim runners and exit cleanly with an informational log message, instead of post harden runner step failing on chown: invalid user: 'undefined'.

What the fix does not do

  • Jobs running on ubuntu-slim will not be monitored by Harden-Runner. The agent relies on kernel-level features (that require elevated capabilities).
  • Per GitHub's docs on single-CPU runners: "The container for ubuntu-slim runners runs in unprivileged mode. This means that some operations requiring elevated privileges such as mounting file systems, using Docker-in-Docker, or accessing low-level kernel features are not supported." Those low-level kernel features are what the agent needs, so monitoring inside the unprivileged container is not feasible today.

For StepSecurity enterprise customers If your security posture requires that workflows are always monitored, you can block the use of ubuntu-slim via workflow run policies see the Runner Label Policy docs. This lets you enforce that jobs only run on monitored runner types.

New Contributors

Full Changelog: step-security/harden-runner@v2.19.0...v2.19.1

v2.19.0

What's Changed

New Runner Support

... (truncated)

Commits
  • bf7454d Merge pull request #673 from step-security/fix/aggregate-error-startup-hang
  • 1188420 Update non-TLS agent to v0.16.2
  • 162cfea Update non-TLS agent to v0.16.1
  • eb9e1f4 Bring macOS runner updates from PR 674
  • 1a10b01 Update Windows agent to v1.0.7
  • 8b4a105 Apply npm audit fixes with release-age cooldown
  • 3626e03 Default TLS status check failures to enabled
  • 100e08b Update agent-ebpf to v1.8.12
  • 774f75f Update agent to v1.8.9
  • f312657 Extend missing-agent-dir guard to Linux and macOS cleanup paths
  • Additional commits viewable in compare view

Updates erlef/setup-beam from 1.20.4 to 1.24.1

Release notes

Sourced from erlef/setup-beam's releases.

v1.24.1

What's Changed

Full Changelog: erlef/setup-beam@v1...v1.24.1

v1.24.0

⚠️ Potentially breaking changes

Since GitHub is phasing out Node 20 runners, the erlef/setup-beam action has updated its requirements ([see PR #426](erlef/setup-beam#426)). Please ensure your workflow files are updated to align with the latest GitHub Actions standards to avoid execution failures.

What's Changed

New Contributors

Full Changelog: erlef/setup-beam@v1...v1.24.0

v1.23.0

What's Changed

Features

Fixes

... (truncated)

Commits
  • 54075bc Automation: update setup-beam version output to ea45c80
  • ea45c80 Remove lodash Dependency (#457)
  • b4b8d85 Automation: update setup-beam version output to 20df794
  • 20df794 Bump globals from 17.4.0 to 17.7.0 (#452)
  • 9d5c5ca Automation: update setup-beam version output to ad42943
  • ad42943 Bump prettier from 3.8.1 to 3.9.1 (#454)
  • 135c095 Automation: update setup-beam version output to a04cfbb
  • a04cfbb Bump eslint from 10.1.0 to 10.6.0 (#453)
  • cd1472f Automation: update setup-beam version output to c80fdc9
  • c80fdc9 Bump actions/checkout from 6.0.2 to 7.0.0 (#467)
  • Additional commits viewable in compare view

Updates ruby/setup-ruby from 1.267.0 to 1.321.0

Release notes

Sourced from ruby/setup-ruby's releases.

v1.321.0

What's Changed

Full Changelog: ruby/setup-ruby@v1.320.0...v1.321.0

v1.320.0

What's Changed

Full Changelog: ruby/setup-ruby@v1.319.0...v1.320.0

v1.319.0

What's Changed

Full Changelog: ruby/setup-ruby@v1.318.0...v1.319.0

v1.318.0

What's Changed

Full Changelog: ruby/setup-ruby@v1.317.0...v1.318.0

v1.317.0

What's Changed

Full Changelog: ruby/setup-ruby@v1.316.0...v1.317.0

v1.316.0

What's Changed

Full Changelog: ruby/setup-ruby@v1.315.0...v1.316.0

v1.315.0

What's Changed

Full Changelog: ruby/setup-ruby@v1.314.0...v1.315.0

... (truncated)

Commits
  • 95ef2b0 Add jruby-10.1.1.0
  • a30dfa4 Update CRuby releases on Windows
  • 003a5c4 Add ruby-3.3.12
  • 8e41b36 Update CRuby releases on Windows
  • 6e5d382 Add ruby-4.0.6
  • d45b1a4 Update CRuby releases on Windows
  • 0dafeac Add ruby-3.4.10
  • bf35c27 Bump actions/checkout from 6 to 7
  • 9eb537c Add support for ubuntu-26.04 and ubuntu-26.04-arm
  • e1a3b10 Improve versions-strings-for-builder.rb
  • Additional commits viewable in compare view

Updates reviewdog/action-actionlint from 1.68.0 to 1.73.0

Release notes

Sourced from reviewdog/action-actionlint's releases.

Release v1.73.0

What's Changed

New Contributors

Full Changelog: reviewdog/action-actionlint@v1.72.1...v1.73.0

Release v1.72.1

v1.72.1: PR #211 - fix: include digest in Docker image reference for action.yml

Release v1.72.0

v1.72.0: PR #196 - chore(deps): update actionlint to 1.7.12

Release v1.71.0

v1.71.0: PR #193 - chore(deps): update actionlint to 1.7.11

Release v1.70.0

v1.70.0: PR #191 - chore(deps): update actionlint to 1.7.10

Release v1.69.1

v1.69.1: PR #185 - feat: update action.yml

Release v1.69.0

v1.69.0: PR #183 - chore(deps): update actionlint to 1.7.9

Commits
  • 5084226 bump v1.73.0
  • 70f2164 Merge branch 'main' into releases/v1
  • a499b80 Merge pull request #221 from reviewdog/pin-install-script
  • b9330b9 chore: update download URLs for actionlint and reviewdog to specific commits
  • e32ed54 Merge pull request #220 from reviewdog/github-native-release-note
  • ae14c28 chore: enable generation of release notes in the release workflow
  • 992e934 chore: remove tag trigger from release workflow
  • f9adc3a Merge pull request #219 from reviewdog/depup/shellcheck
  • 8295541 chore(deps): update shellcheck to 0.11.0
  • f96c3f1 Merge pull request #218 from reviewdog/correct-version-name-typo
  • Additional commits viewable in compare view

Updates reviewdog/action-setup from 1.4.0 to 1.5.0

Release notes

Sourced from reviewdog/action-setup's releases.

Release v1.5.0

What's Changed

Full Changelog: reviewdog/action-setup@v1.4.0...v1.5.0

Commits
  • d8a7baa Merge pull request #74 from reviewdog/depup/reviewdog
  • b041f0d Merge pull request #75 from reviewdog/renovate/reviewdog-action-misspell-1.x
  • 05dc1a3 Merge pull request #73 from reviewdog/renovate/chainguard-dev-actions-digest
  • f2ffb34 Merge pull request #68 from reviewdog/renovate/reviewdog-action-shellcheck-1.x
  • 28695c5 Merge pull request #67 from reviewdog/renovate/reviewdog-action-actionlint-1.x
  • 65d14e0 chore(deps): update reviewdog/action-misspell action to v1.27.0
  • f3a4e22 Merge pull request #64 from reviewdog/renovate/haya14busa-action-bumpr-1.x
  • f257542 chore(deps): update reviewdog/action-actionlint action to v1.68.0
  • 78083cb chore(deps): update chainguard-dev/actions digest to 4aa3402
  • 0eb086b Merge pull request #76 from reviewdog/renovate/actions-checkout-5.x
  • Additional commits viewable in compare view

Updates mongolyy/reviewdog-action-biome from 2.5.0 to 2.11.2

Release notes

Sourced from mongolyy/reviewdog-action-biome's releases.

Release v2.11.2

What's Changed

Full Changelog: mongolyy/reviewdog-action-biome@v2.11.1...v2.11.2

Release v2.11.1

What's Changed

Full Changelog: mongolyy/reviewdog-action-biome@v2.11.0...v2.11.1

Release v2.11.0

What's Changed

Full Changelog: mongolyy/reviewdog-action-biome@v2.10...v2.11.0

Release v2.10.0

v2.10.0: PR #141 - chore(deps): update reviewdog/action-actionlint action to v1.71.0

Release v2.9.0

What's Changed

Full Changelog: mongolyy/reviewdog-action-biome@v2.8...v2.9.0

Release v2.8.1

... (truncated)

Commits
  • c49bee5 Merge pull request #157 from mongolyy/renovate/reviewdog-action-suggester-1.x
  • 9a63665 chore(deps): update reviewdog/action-suggester action to v1.24.3
  • 4c26d8b Merge pull request #159 from mongolyy/renovate/reviewdog-action-shfmt-1.x
  • fa5f657 chore(deps): update reviewdog/action-shfmt action to v1.1.0
  • 06ce6e2 Merge pull request #158 from mongolyy/renovate/reviewdog-action-alex-1.x
  • b9df1a1 chore(deps): update reviewdog/action-alex action to v1.17.0
  • b1286cc Merge pull request #156 from mongolyy/renovate/reviewdog-action-depup-1.x
  • f6279cc chore(deps): update reviewdog/action-depup action to v1.6.5
  • 7d12e19 Merge pull request #155 from mongolyy/renovate/actions-checkout-7.x
  • cb4601f chore(deps): update actions/checkout action to v7
  • Additional commits viewable in compare view

Updates zizmorcore/zizmor-action from 0.2.0 to 0.6.1

Release notes

Sourced from zizmorcore/zizmor-action's releases.

v0.6.1

zizmor 1.28.0 is now the default version used by the action.

v0.6.0

zizmor 1.27.0 is now the default version used by the action.

What's Changed

New Contributors

Full Changelog: zizmorcore/zizmor-action@v0.5.7...v0.6.0

v0.5.7

1.26.1 is now available via the action 1.26.1 is now the default version of zizmor used by the action

v0.5.6

  • 1.25.2 is now available via the action
  • 1.25.2 is now the default version of zizmor used by the action

v0.5.5

This is a no-op release.

v0.5.4

  • 1.25.0 is now available via the action
  • 1.25.0 is now the default version of zizmor used by the action

v0.5.3

What's Changed

  • 1.24.0 and 1.24.1 are now available via the action
  • 1.24.1 is now the default version of zizmor used by the action

Full Changelog: zizmorcore/zizmor-action@v0.5.2...v0.5.3

v0.5.2

What's Changed

  • zizmor 1.23.1 is now the default used by this action.

Full Changelog: zizmorcore/zizmor-action@v0.5.1...v0.5.2

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the all group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [step-security/harden-runner](https://github.com/step-security/harden-runner) | `2.13.1` | `2.20.0` |
| [erlef/setup-beam](https://github.com/erlef/setup-beam) | `1.20.4` | `1.24.1` |
| [ruby/setup-ruby](https://github.com/ruby/setup-ruby) | `1.267.0` | `1.321.0` |
| [reviewdog/action-actionlint](https://github.com/reviewdog/action-actionlint) | `1.68.0` | `1.73.0` |
| [reviewdog/action-setup](https://github.com/reviewdog/action-setup) | `1.4.0` | `1.5.0` |
| [mongolyy/reviewdog-action-biome](https://github.com/mongolyy/reviewdog-action-biome) | `2.5.0` | `2.11.2` |
| [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action) | `0.2.0` | `0.6.1` |



Updates `step-security/harden-runner` from 2.13.1 to 2.20.0
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](step-security/harden-runner@f4a75cf...bf7454d)

Updates `erlef/setup-beam` from 1.20.4 to 1.24.1
- [Release notes](https://github.com/erlef/setup-beam/releases)
- [Commits](erlef/setup-beam@e6d7c94...54075bc)

Updates `ruby/setup-ruby` from 1.267.0 to 1.321.0
- [Release notes](https://github.com/ruby/setup-ruby/releases)
- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)
- [Commits](ruby/setup-ruby@d5126b9...95ef2b0)

Updates `reviewdog/action-actionlint` from 1.68.0 to 1.73.0
- [Release notes](https://github.com/reviewdog/action-actionlint/releases)
- [Commits](reviewdog/action-actionlint@f00ad06...5084226)

Updates `reviewdog/action-setup` from 1.4.0 to 1.5.0
- [Release notes](https://github.com/reviewdog/action-setup/releases)
- [Commits](reviewdog/action-setup@d8edfce...d8a7baa)

Updates `mongolyy/reviewdog-action-biome` from 2.5.0 to 2.11.2
- [Release notes](https://github.com/mongolyy/reviewdog-action-biome/releases)
- [Commits](mongolyy/reviewdog-action-biome@dbe7192...c49bee5)

Updates `zizmorcore/zizmor-action` from 0.2.0 to 0.6.1
- [Release notes](https://github.com/zizmorcore/zizmor-action/releases)
- [Commits](zizmorcore/zizmor-action@e673c39...6fc4b00)

---
updated-dependencies:
- dependency-name: step-security/harden-runner
  dependency-version: 2.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: erlef/setup-beam
  dependency-version: 1.24.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: ruby/setup-ruby
  dependency-version: 1.321.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: reviewdog/action-actionlint
  dependency-version: 1.73.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: reviewdog/action-setup
  dependency-version: 1.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: mongolyy/reviewdog-action-biome
  dependency-version: 2.11.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: zizmorcore/zizmor-action
  dependency-version: 0.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jul 26, 2026

This branch has not been deployed

No deployments
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants