Skip to content

chore(deps): bump the actions group across 1 directory with 8 updates - #382

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions-086b0c5153
Open

chore(deps): bump the actions group across 1 directory with 8 updates#382
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions-086b0c5153

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 24, 2026

Copy link
Copy Markdown
Contributor

Bumps the actions group with 8 updates in the / directory:

Package From To
actions/checkout 6 7
docker/setup-qemu-action 3.6.0 4.2.0
docker/setup-buildx-action 4.1.0 4.3.0
docker/build-push-action 7.2.0 7.3.0
aws-actions/configure-aws-credentials 6.2.0 6.2.3
aws-actions/amazon-ecr-login 2.1.5 2.1.7
astral-sh/setup-uv 7.6.0 10.0.1
actions/setup-python 6 7

Updates actions/checkout from 6 to 7

Release notes

Sourced from actions/checkout's releases.

v7.0.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v6.0.3...v7.0.0

v6.1.0

What's Changed

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: actions/checkout@v6.0.3...v6.1.0

v6.0.3

What's Changed

New Contributors

Full Changelog: actions/checkout@v6...v6.0.3

v6.0.2

What's Changed

Full Changelog: actions/checkout@v6.0.1...v6.0.2

v6.0.1

What's Changed

... (truncated)

Commits

Updates docker/setup-qemu-action from 3.6.0 to 4.2.0

Release notes

Sourced from docker/setup-qemu-action's releases.

v4.2.0

Full Changelog: docker/setup-qemu-action@v4.1.0...v4.2.0

v4.1.0

Full Changelog: docker/setup-qemu-action@v4.0.0...v4.1.0

v4.0.0

Full Changelog: docker/setup-qemu-action@v3.7.0...v4.0.0

v3.7.0

Full Changelog: docker/setup-qemu-action@v3.6.0...v3.7.0

Commits
  • 96fe6ef Merge pull request #315 from docker/dependabot/npm_and_yarn/docker/actions-to...
  • 31f08d3 [dependabot skip] chore: update generated content
  • 4e7017a build(deps): bump @​docker/actions-toolkit from 0.91.0 to 0.92.0
  • 0eca235 Merge pull request #314 from crazy-max/fix-yarn-preapprove-actions-toolkit
  • ea66a41 chore: allow actions-toolkit to bypass yarn age gate
  • 451542b Merge pull request #308 from docker/dependabot/npm_and_yarn/undici-6.27.0
  • 532ae00 [dependabot skip] chore: update generated content
  • b6f5af6 build(deps): bump undici from 6.26.0 to 6.27.0
  • cf96b86 Merge pull request #304 from docker/dependabot/npm_and_yarn/tmp-0.2.7
  • f0ba643 [dependabot skip] chore: update generated content
  • Additional commits viewable in compare view

Updates docker/setup-buildx-action from 4.1.0 to 4.3.0

Release notes

Sourced from docker/setup-buildx-action's releases.

v4.3.0

Full Changelog: docker/setup-buildx-action@v4.2.0...v4.3.0

v4.2.0

Full Changelog: docker/setup-buildx-action@v4.1.0...v4.2.0

Commits
  • 37fe631 Merge pull request #595 from docker/dependabot/npm_and_yarn/docker/actions-to...
  • b5c4f91 [dependabot skip] chore: update generated content
  • 3e93b63 build(deps): bump @​docker/actions-toolkit from 0.92.0 to 0.95.0
  • e527031 Merge pull request #600 from docker/dependabot/npm_and_yarn/brace-expansion-1...
  • c68814b [dependabot skip] chore: update generated content
  • 3f891b0 build(deps): bump brace-expansion from 1.1.13 to 1.1.18
  • 787db26 Merge pull request #585 from docker/dependabot/npm_and_yarn/js-yaml-5.2.1
  • f779368 [dependabot skip] chore: update generated content
  • 7d5e604 build(deps): bump js-yaml from 5.2.0 to 5.3.0
  • 292c2fb Merge pull request #590 from docker/dependabot/github_actions/actions/setup-n...
  • Additional commits viewable in compare view

Updates docker/build-push-action from 7.2.0 to 7.3.0

Release notes

Sourced from docker/build-push-action's releases.

v7.3.0

Full Changelog: docker/build-push-action@v7.2.0...v7.3.0

Commits
  • 53b7df9 Merge pull request #1572 from docker/dependabot/npm_and_yarn/docker/actions-t...
  • 154298c [dependabot skip] chore: update generated content
  • cb1238b chore(deps): Bump @​docker/actions-toolkit from 0.91.0 to 0.92.0
  • 24f845d Merge pull request #1566 from docker/dependabot/npm_and_yarn/js-yaml-4.2.0
  • 9c69730 [dependabot skip] chore: update generated content
  • bc3a3a5 Merge pull request #1574 from docker/dependabot/github_actions/aws-actions/co...
  • a82c504 chore(deps): Bump js-yaml from 4.1.1 to 4.3.0
  • 0285a75 Merge pull request #1573 from docker/dependabot/github_actions/actions/cache-...
  • c6ad2a3 Merge pull request #1575 from docker/dependabot/github_actions/actions/checko...
  • d37484f Merge pull request #1564 from docker/dependabot/npm_and_yarn/undici-6.27.0
  • Additional commits viewable in compare view

Updates aws-actions/configure-aws-credentials from 6.2.0 to 6.2.3

Release notes

Sourced from aws-actions/configure-aws-credentials's releases.

v6.2.3

6.2.3 (2026-07-22)

Bug Fixes

  • attach git credentials before Tag Major Version push (#1877) (9ae780b)
  • PackedPolicyTooLarge detection in STS tags (#1899) (fa8d6a5)

v6.2.2

6.2.2 (2026-07-07)

Miscellaneous Chores

v6.2.1

6.2.1 (2026-06-26)

Bug Fixes

  • enforce allowed-account-ids on all auth paths (#1847) (4d281fb)
Changelog

Sourced from aws-actions/configure-aws-credentials's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

6.2.3 (2026-07-22)

Bug Fixes

  • attach git credentials before Tag Major Version push (#1877) (9ae780b)
  • PackedPolicyTooLarge detection in STS tags (#1899) (fa8d6a5)

6.2.2 (2026-07-07)

Miscellaneous Chores

6.2.1 (2026-06-26)

Bug Fixes

  • enforce allowed-account-ids on all auth paths (#1847) (4d281fb)

6.2.0 (2026-06-01)

Features

Bug Fixes

  • skip credential check on output-env-credentials: false (#1778) (58e7c47)
  • assumeRole failing from session tag size too large (#1808) (d6f5dc3)

6.1.3 (2026-05-28)

Bug Fixes

  • fix: allow kubelet token symlink in #1805

6.1.2 (2026-05-26)

... (truncated)

Commits
  • e6de054 chore(main): release 6.2.3 (#1878)
  • ab3b2ba chore: Update dist
  • fa8d6a5 fix: PackedPolicyTooLarge detection in STS tags (#1899)
  • 42e118a chore(deps-dev): bump markdownlint-cli from 0.49.0 to 0.49.1 (#1896)
  • d86ddfc chore: Update dist
  • 874aaac chore(deps): bump @​aws-sdk/client-sts from 3.1086.0 to 3.1091.0 (#1892)
  • d4341b6 chore: Update dist
  • fe51823 chore(deps-dev): bump @​aws-sdk/credential-provider-env (#1894)
  • a8be382 chore(deps-dev): bump @​biomejs/biome from 2.5.3 to 2.5.4 (#1893)
  • e000376 chore: Update dist
  • Additional commits viewable in compare view

Updates aws-actions/amazon-ecr-login from 2.1.5 to 2.1.7

Release notes

Sourced from aws-actions/amazon-ecr-login's releases.

v2.1.7

See the changelog for details about the changes included in this release.

v2.1.6

See the changelog for details about the changes included in this release.

Changelog

Sourced from aws-actions/amazon-ecr-login's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

2.1.7 (2026-08-19)

Dependency Updates

  • deps: bump @​aws-sdk/client-ecr from 3.1065.0 to 3.1070.0 (#1126) (6b86bc4)
  • deps: bump @​aws-sdk/client-ecr from 3.1070.0 to 3.1075.0 (#1143) (03af930)
  • deps: bump @​aws-sdk/client-ecr from 3.1075.0 to 3.1077.0 (#1157) (bb421a1)
  • deps: bump @​aws-sdk/client-ecr from 3.1077.0 to 3.1081.0 (#1168) (d919116)
  • deps: bump @​aws-sdk/client-ecr from 3.1081.0 to 3.1087.0 (#1178) (614e36e)
  • deps: bump @​aws-sdk/client-ecr from 3.1087.0 to 3.1092.0 (#1188) (3b6f0a0)
  • deps: bump @​aws-sdk/client-ecr from 3.1092.0 to 3.1097.0 (#1201) (4500b38)
  • deps: bump @​aws-sdk/client-ecr from 3.1097.0 to 3.1101.0 (#1213) (aae720d)
  • deps: bump @​aws-sdk/client-ecr from 3.1101.0 to 3.1106.0 (#1227) (9af171f)
  • deps: bump @​aws-sdk/client-ecr from 3.1106.0 to 3.1111.0 (#1242) (824b400)
  • deps: bump @​aws-sdk/client-ecr-public from 3.1065.0 to 3.1070.0 (#1128) (11c47d5)
  • deps: bump @​aws-sdk/client-ecr-public from 3.1070.0 to 3.1077.0 (#1153) (8ec6197)
  • deps: bump @​aws-sdk/client-ecr-public from 3.1077.0 to 3.1087.0 (#1177) (59fc7b6)
  • deps: bump @​aws-sdk/client-ecr-public from 3.1087.0 to 3.1092.0 (#1190) (9371741)
  • deps: bump @​aws-sdk/client-ecr-public from 3.1092.0 to 3.1097.0 (#1202) (75acf21)
  • deps: bump @​aws-sdk/client-ecr-public from 3.1097.0 to 3.1106.0 (#1226) (b4eaaad)
  • deps: bump @​aws-sdk/client-ecr-public from 3.1106.0 to 3.1111.0 (#1238) (c2241b0)
  • deps: bump @​aws-sdk/credential-providers (#1127) (256282f)
  • deps: bump @​aws-sdk/credential-providers (#1141) (2568748)
  • deps: bump @​aws-sdk/credential-providers (#1155) (087c584)
  • deps: bump @​aws-sdk/credential-providers (#1170) (492cea5)
  • deps: bump @​aws-sdk/credential-providers (#1176) (441c5b0)
  • deps: bump @​aws-sdk/credential-providers (#1189) (73db547)
  • deps: bump @​aws-sdk/credential-providers (#1199) (eab2273)
  • deps: bump @​aws-sdk/credential-providers (#1215) (ed3f169)
  • deps: bump @​aws-sdk/credential-providers (#1228) (f66571e)
  • deps: bump @​aws-sdk/credential-providers (#1241) (12a27d2)
  • deps: bump actions/checkout from 6 to 7 (#1142) (18d03b5)
  • deps: bump undici from 6.24.0 to 6.27.0 (#1137) (8838183)
  • deps: bump undici from 6.27.0 to 6.28.0 (#1219) (ea87948)

2.1.6 (2026-06-10)

Bug Fixes

  • use realpathSync for main module check (#955) (ba52b8c)

Dependency Updates

... (truncated)

Commits
  • 03f1aad chore(release): 2.1.7
  • af990da chore: Update dist (#1250)
  • 824b400 chore(deps): bump @​aws-sdk/client-ecr from 3.1106.0 to 3.1111.0 (#1242)
  • 12a27d2 chore(deps): bump @​aws-sdk/credential-providers (#1241)
  • 606a5e3 chore: Update dist (#1246)
  • 7e05aff chore(deps-dev): bump @​vercel/ncc from 0.44.1 to 0.45.0 (#1239)
  • b342b60 chore(deps-dev): bump globals from 17.9.0 to 17.11.0 (#1240)
  • c2241b0 chore(deps): bump @​aws-sdk/client-ecr-public from 3.1106.0 to 3.1111.0 (#1238)
  • 7fd27f2 chore: Update dist (#1236)
  • b4eaaad chore(deps): bump @​aws-sdk/client-ecr-public from 3.1097.0 to 3.1106.0 (#1226)
  • Additional commits viewable in compare view

Updates astral-sh/setup-uv from 7.6.0 to 10.0.1

Release notes

Sourced from astral-sh/setup-uv's releases.

v10.0.1 🌈 Tolerate transient manifest timeouts

Changes

Thank you @​arguile- for making this action more resilient.

🐛 Bug fixes

🧰 Maintenance

📚 Documentation

v10.0.0 🌈 Disable automatic caching for sensitive events and new QOL features

Changes

Another breaking release, directly after v9.0.0 but we think the added security justifies that.

Extra security by default

If you use the default enable-cache: auto this will now DISABLE THE CACHE to protect against cache poisoning for the following events:

  • pull_request_target
  • workflow_run
  • release

You can read the full reasoning in astral-sh/setup-uv#984

version: latest-known

- name: Install the latest version of uv known to setup-uv
  uses: astral-sh/setup-uv@v10.0.0
  with:
    version: "latest-known"

This will now install the latest version with a checksum that is known by this action. The known uv checksums are automatically updated but will take a release of this action to take effect. You won't be always using the latest & greatest but you will have an extra level of security.

Read python version from .tool-versions

- name: Install uv based on the version defined in .tool-versions and also set python
  uses: astral-sh/setup-uv@v10.0.0
  with:
    version-file: "pyproject.toml"
</tr></table> 

... (truncated)

Commits

Updates actions/setup-python from 6 to 7

Release notes

Sourced from actions/setup-python's releases.

v7.0.0

What's Changed

Enhancements

Bug Fix

Dependency Upgrade

New Contributors

Full Changelog: actions/setup-python@v6...v7.0.0

v6.3.0

What's Changed

Enhancement

Dependency update

Documentation

New Contributors

Full Changelog: actions/setup-python@v6.2.0...v6.3.0

v6.2.0

What's Changed

Dependency Upgrades

... (truncated)

Commits
  • 5fda3b9 Pin SHA commits and update docs with latest versions (#1338)

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jul 24, 2026
@dependabot
dependabot Bot requested a review from nogueiraanderson as a code owner July 24, 2026 11:03
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jul 24, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions-086b0c5153 branch 2 times, most recently from ef834ec to ef7ee3e Compare July 30, 2026 09:41
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions-086b0c5153 branch from ef7ee3e to 2851acc Compare August 3, 2026 00:37
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions-086b0c5153 branch 2 times, most recently from a8297b6 to 62872c7 Compare August 17, 2026 00:37
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions-086b0c5153 branch from 62872c7 to ae46b01 Compare August 20, 2026 10:50
Bumps the actions group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `6` | `7` |
| [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) | `3.6.0` | `4.2.0` |
| [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `4.1.0` | `4.3.0` |
| [docker/build-push-action](https://github.com/docker/build-push-action) | `7.2.0` | `7.3.0` |
| [aws-actions/configure-aws-credentials](https://github.com/aws-actions/configure-aws-credentials) | `6.2.0` | `6.2.3` |
| [aws-actions/amazon-ecr-login](https://github.com/aws-actions/amazon-ecr-login) | `2.1.5` | `2.1.7` |
| [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) | `7.6.0` | `10.0.1` |
| [actions/setup-python](https://github.com/actions/setup-python) | `6` | `7` |



Updates `actions/checkout` from 6 to 7
- [Release notes](https://github.com/actions/checkout/releases)
- [Commits](actions/checkout@v6...v7)

Updates `docker/setup-qemu-action` from 3.6.0 to 4.2.0
- [Release notes](https://github.com/docker/setup-qemu-action/releases)
- [Commits](docker/setup-qemu-action@2910929...96fe6ef)

Updates `docker/setup-buildx-action` from 4.1.0 to 4.3.0
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](docker/setup-buildx-action@d7f5e7f...37fe631)

Updates `docker/build-push-action` from 7.2.0 to 7.3.0
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](docker/build-push-action@f9f3042...53b7df9)

Updates `aws-actions/configure-aws-credentials` from 6.2.0 to 6.2.3
- [Release notes](https://github.com/aws-actions/configure-aws-credentials/releases)
- [Changelog](https://github.com/aws-actions/configure-aws-credentials/blob/main/CHANGELOG.md)
- [Commits](aws-actions/configure-aws-credentials@e7f100c...e6de054)

Updates `aws-actions/amazon-ecr-login` from 2.1.5 to 2.1.7
- [Release notes](https://github.com/aws-actions/amazon-ecr-login/releases)
- [Changelog](https://github.com/aws-actions/amazon-ecr-login/blob/main/CHANGELOG.md)
- [Commits](aws-actions/amazon-ecr-login@fa648b4...03f1aad)

Updates `astral-sh/setup-uv` from 7.6.0 to 10.0.1
- [Release notes](https://github.com/astral-sh/setup-uv/releases)
- [Commits](astral-sh/setup-uv@37802ad...20cfd1b)

Updates `actions/setup-python` from 6 to 7
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](actions/setup-python@v6...v7)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: actions/setup-python
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: astral-sh/setup-uv
  dependency-version: 9.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: aws-actions/amazon-ecr-login
  dependency-version: 2.1.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: aws-actions/configure-aws-credentials
  dependency-version: 6.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: docker/build-push-action
  dependency-version: 7.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: docker/setup-buildx-action
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: docker/setup-qemu-action
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions-086b0c5153 branch from ae46b01 to 15dcef9 Compare August 24, 2026 00:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants