build(deps): bump the github-actions group across 3 directories with 4 updates by dependabot[bot] · Pull Request #304 · elixir-cloud-aai/TESK

dependabot · 2026-11-14T20:12:52Z

Bumps the github-actions group with 3 updates in the / directory: elixir-cloud-aai/.github/actions/pr-title, elixir-cloud-aai/.github/actions/gate and sigstore/cosign-installer.
Bumps the github-actions group with 1 update in the /.github/actions/install-chart directory: azure/setup-helm.
Bumps the github-actions group with 1 update in the /.github/actions/test-chart directory: azure/setup-helm.

Updates elixir-cloud-aai/.github/actions/pr-title from 1.0.0 to 1.1.0

Release notes

Sourced from elixir-cloud-aai/.github/actions/pr-title's releases.

v1.1.0

Release v1.1.0 of the shared actions of ELIXIR On-Cloud adds the action publish-release, which creates the GitHub release of a tag from a repository's release workflow, with the curated notes followed by GitHub's generated notes (the organisation's release notes format), and checks in the prepare job that the release can be created. The actions gate, pr-title and scan-image are unchanged. Callers pin elixir-cloud-aai/.github/actions/<name>@<commit> # v1.1.0; Dependabot proposes the update.

Features

Add a shared publish-release action (#66, #67).

Keep the organisation's labels in a file, with a sync script (#60, #61).

Add discussion forms and contact links (#43, #53).

Documentation

Add an organization profile README (#28, #29).

Replace the README logo (#32, #34).

Streamline the README (#33, #35).

Drop the README license section (#36, #37).

Make the security policy org-wide (#40, #48).

Make the contributing guide org-wide (#39, #47).

Add an org-wide support guide (#44, #52).

Add an org-wide governance document (#46, #57).

State that repos do not override org files (#59, #58).

Maintenance

Pin the PR title template to v1.0.0 (#26, #27).

Release from signed version tags (#30, #31).

Drop the deprecated org name (#42, #56).

Label Dependabot PRs (#62, #63).

Commits

ci: pin the PR title template to v1.0.0 by @uniqueg in elixir-cloud-aai/.github#27

docs: add an organization profile README by @uniqueg in elixir-cloud-aai/.github#29

ci: release from signed version tags by @uniqueg in elixir-cloud-aai/.github#31

docs: replace the README logo by @uniqueg in elixir-cloud-aai/.github#34

docs: streamline the README by @uniqueg in elixir-cloud-aai/.github#35

docs: drop the README license section by @uniqueg in elixir-cloud-aai/.github#37

docs: make the security policy org-wide by @uniqueg in elixir-cloud-aai/.github#48

docs: make the contributing guide org-wide by @uniqueg in elixir-cloud-aai/.github#47

docs: add an org-wide support guide by @uniqueg in elixir-cloud-aai/.github#52

feat: add discussion forms and contact links by @uniqueg in elixir-cloud-aai/.github#53

chore: drop the deprecated org name by @uniqueg in elixir-cloud-aai/.github#56

docs: add an org-wide governance document by @uniqueg in elixir-cloud-aai/.github#57

docs: state that repos do not override org files by @uniqueg in elixir-cloud-aai/.github#58

... (truncated)

Commits

31f22fc docs: add notes of v1.1.0 (#69)
e1bbeba feat: add a shared publish-release action (#67)
b190f19 ci: label Dependabot PRs (#63)
71f19a7 feat: keep the organisation's labels in a file (#61)
d5dcd7c docs: state that repos do not override org files (#58)
1dd4da5 docs: add an org-wide governance document (#57)
d2a8ba6 chore: drop the deprecated org name (#56)
b695aa0 feat: add discussion forms and contact links (#53)
35f05b8 docs: add an org-wide support guide (#52)
5a21052 docs: make the contributing guide org-wide (#47)
Additional commits viewable in compare view

Updates elixir-cloud-aai/.github/actions/gate from 1.0.0 to 1.1.0

Release notes

Sourced from elixir-cloud-aai/.github/actions/gate's releases.

v1.1.0

Release v1.1.0 of the shared actions of ELIXIR On-Cloud adds the action publish-release, which creates the GitHub release of a tag from a repository's release workflow, with the curated notes followed by GitHub's generated notes (the organisation's release notes format), and checks in the prepare job that the release can be created. The actions gate, pr-title and scan-image are unchanged. Callers pin elixir-cloud-aai/.github/actions/<name>@<commit> # v1.1.0; Dependabot proposes the update.

Features

Add a shared publish-release action (#66, #67).

Keep the organisation's labels in a file, with a sync script (#60, #61).

Add discussion forms and contact links (#43, #53).

Documentation

Add an organization profile README (#28, #29).

Replace the README logo (#32, #34).

Streamline the README (#33, #35).

Drop the README license section (#36, #37).

Make the security policy org-wide (#40, #48).

Make the contributing guide org-wide (#39, #47).

Add an org-wide support guide (#44, #52).

Add an org-wide governance document (#46, #57).

State that repos do not override org files (#59, #58).

Maintenance

Pin the PR title template to v1.0.0 (#26, #27).

Release from signed version tags (#30, #31).

Drop the deprecated org name (#42, #56).

Label Dependabot PRs (#62, #63).

Commits

ci: pin the PR title template to v1.0.0 by @uniqueg in elixir-cloud-aai/.github#27

docs: add an organization profile README by @uniqueg in elixir-cloud-aai/.github#29

ci: release from signed version tags by @uniqueg in elixir-cloud-aai/.github#31

docs: replace the README logo by @uniqueg in elixir-cloud-aai/.github#34

docs: streamline the README by @uniqueg in elixir-cloud-aai/.github#35

docs: drop the README license section by @uniqueg in elixir-cloud-aai/.github#37

docs: make the security policy org-wide by @uniqueg in elixir-cloud-aai/.github#48

docs: make the contributing guide org-wide by @uniqueg in elixir-cloud-aai/.github#47

docs: add an org-wide support guide by @uniqueg in elixir-cloud-aai/.github#52

feat: add discussion forms and contact links by @uniqueg in elixir-cloud-aai/.github#53

chore: drop the deprecated org name by @uniqueg in elixir-cloud-aai/.github#56

docs: add an org-wide governance document by @uniqueg in elixir-cloud-aai/.github#57

docs: state that repos do not override org files by @uniqueg in elixir-cloud-aai/.github#58

... (truncated)

Commits

31f22fc docs: add notes of v1.1.0 (#69)
e1bbeba feat: add a shared publish-release action (#67)
b190f19 ci: label Dependabot PRs (#63)
71f19a7 feat: keep the organisation's labels in a file (#61)
d5dcd7c docs: state that repos do not override org files (#58)
1dd4da5 docs: add an org-wide governance document (#57)
d2a8ba6 chore: drop the deprecated org name (#56)
b695aa0 feat: add discussion forms and contact links (#53)
35f05b8 docs: add an org-wide support guide (#52)
5a21052 docs: make the contributing guide org-wide (#47)
Additional commits viewable in compare view

Updates sigstore/cosign-installer from 4.1.2 to 4.1.3

Release notes

Sourced from sigstore/cosign-installer's releases.

v4.1.3

What's Changed

Bump Cosign to v3.1.4 (latest release) in sigstore/cosign-installer#257

Full Changelog: sigstore/cosign-installer@v4.1.2...v4.1.3

Commits

756fe2d Bump Cosign to v3.1.4 (latest release) (#257)
b9c3539 Bump actions/setup-go from 6.4.0 to 7.0.0 (#249)
84205a0 close race on windows due to reusing filename (#253)
af595e6 Bump cosign to 3.1.3 (#252)
828df1e fix: harden curl download retries against transient GitHub CDN 504s (#240)
874852d Bump actions/checkout from 6.0.2 to 7.0.1 (#250)
3094a48 wrap path in quotes for powershell (#246)
e246ae3 test minimum of 1.26 given cosign requirement (#247)
See full diff in compare view

Updates azure/setup-helm from 5.0.1 to 5.1.0

Release notes

Sourced from azure/setup-helm's releases.

v5.1.0

Added

#281 Read the Helm version from a .tool-versions file with the version-file input

#293 Resolve the latest patch for a major.minor version

#315 Add configurable checksum verification and fallback download mirrors

Fixed

#292 Preserve subpath base URLs when constructing Helm download URLs

#303 Retry latest-version lookups and add the latest-fallback opt-out

Security

#313 Update Undici security fixes

#307 Update Undici

#298 Update Undici

Changed

#314 Update the built-in Helm fallback from v3.18.4 to v4.3.1

#311 Enable stale cleanup after 74 inactive days

#306 Update the shared release workflow

Update remaining dependency groups, development tools, and workflow actions (#290, #291, #294, #295, #297, #299, #301, #305, #308, #309, #316)

Changelog

Sourced from azure/setup-helm's changelog.

Change Log

[5.1.0] - 2026-11-09

Added

#281 Read the Helm version from a .tool-versions file with the version-file input

#293 Resolve the latest patch for a major.minor version

#315 Add configurable checksum verification and fallback download mirrors

Fixed

#292 Preserve subpath base URLs when constructing Helm download URLs

#303 Retry latest-version lookups and add the latest-fallback opt-out

Security

#313 Update Undici security fixes

#307 Update Undici

#298 Update Undici

Changed

#314 Update the built-in Helm fallback from v3.18.4 to v4.3.1

#311 Enable stale cleanup after 74 inactive days

#306 Update the shared release workflow

Update remaining dependency groups, development tools, and workflow actions (#290, #291, #294, #295, #297, #299, #301, #305, #308, #309, #316)

[5.0.1] - 2026-06-23

Fixed

#271 Fix TypeScript 6.0 compatibility errors in run.ts

#278 fix: use chmod 755 instead of 777 for downloaded helm binary and folder

Changed

#286 Bump actions/checkout from 6.0.3 to 7.0.0 in /.github/workflows in the actions group

#285 Bump the actions group with 2 updates

#284 Bump undici

#283 Bump the actions group with 5 updates

#280 Bump actions/checkout from 6.0.2 to 6.0.3 in /.github/workflows in the actions group

#279 Bump the actions group with 2 updates

#277 Bump vitest from 4.1.7 to 4.1.8 in the actions group

#276 chore: remove deprecated OliverMKing release workflow, pin to SHA

#275 Bump actions/stale from 10.2.0 to 10.3.0 in /.github/workflows in the actions group

#274 Bump the actions group with 3 updates

#273 Bump the actions group with 2 updates

#269 Bump the actions group across 1 directory with 7 updates

#268 Bump vite from 8.0.0 to 8.0.5

... (truncated)

Commits

2f5e7bc build
206711c release: prepare v5.1.0 (#317)
b14f402 chore(deps): bump the actions group with 3 updates (#316)
bd99bd2 fix: enable stale cleanup after 74 inactive days (#311)
4339b0e feat: verify Helm downloads and support fallback mirrors (#315)
1548e57 fix: update Helm fallback to v4.3.1 (#314)
531fb92 fix: retry latest version lookup and add latest-fallback opt-out (#303)
b7cb6a4 chore(deps): bump undici (#313)
c30b203 chore(deps-dev): bump the actions group with 3 updates (#309)
5dad9f3 chore(deps-dev): bump source-map-js from 1.2.1 to 1.2.2 (#308)
Additional commits viewable in compare view

Updates azure/setup-helm from 5.0.1 to 5.1.0

Release notes

Sourced from azure/setup-helm's releases.

v5.1.0

Added

#281 Read the Helm version from a .tool-versions file with the version-file input

#293 Resolve the latest patch for a major.minor version

#315 Add configurable checksum verification and fallback download mirrors

Fixed

#292 Preserve subpath base URLs when constructing Helm download URLs

#303 Retry latest-version lookups and add the latest-fallback opt-out

Security

#313 Update Undici security fixes

#307 Update Undici

#298 Update Undici

Changed

#314 Update the built-in Helm fallback from v3.18.4 to v4.3.1

#311 Enable stale cleanup after 74 inactive days

#306 Update the shared release workflow

Update remaining dependency groups, development tools, and workflow actions (#290, #291, #294, #295, #297, #299, #301, #305, #308, #309, #316)

Changelog

Sourced from azure/setup-helm's changelog.

Change Log

[5.1.0] - 2026-11-09

Added

#281 Read the Helm version from a .tool-versions file with the version-file input

#293 Resolve the latest patch for a major.minor version

#315 Add configurable checksum verification and fallback download mirrors

Fixed

#292 Preserve subpath base URLs when constructing Helm download URLs

#303 Retry latest-version lookups and add the latest-fallback opt-out

Security

#313 Update Undici security fixes

#307 Update Undici

#298 Update Undici

Changed

#314 Update the built-in Helm fallback from v3.18.4 to v4.3.1

#311 Enable stale cleanup after 74 inactive days

#306 Update the shared release workflow

Update remaining dependency groups, development tools, and workflow actions (#290, #291, #294, #295, #297, #299, #301, #305, #308, #309, #316)

[5.0.1] - 2026-06-23

Fixed

#271 Fix TypeScript 6.0 compatibility errors in run.ts

#278 fix: use chmod 755 instead of 777 for downloaded helm binary and folder

Changed

#286 Bump actions/checkout from 6.0.3 to 7.0.0 in /.github/workflows in the actions group

#285 Bump the actions group with 2 updates

#284 Bump undici

#283 Bump the actions group with 5 updates

#280 Bump actions/checkout from 6.0.2 to 6.0.3 in /.github/workflows in the actions group

#279 Bump the actions group with 2 updates

#277 Bump vitest from 4.1.7 to 4.1.8 in the actions group

#276 chore: remove deprecated OliverMKing release workflow, pin to SHA

#275 Bump actions/stale from 10.2.0 to 10.3.0 in /.github/workflows in the actions group

#274 Bump the actions group with 3 updates

#273 Bump the actions group with 2 updates

#269 Bump the actions group across 1 directory with 7 updates

#268 Bump vite from 8.0.0 to 8.0.5

... (truncated)

Commits

2f5e7bc build
206711c release: prepare v5.1.0 (#317)
b14f402 chore(deps): bump the actions group with 3 updates (#316)
bd99bd2 fix: enable stale cleanup after 74 inactive days (#311)
4339b0e feat: verify Helm downloads and support fallback mirrors (#315)
1548e57 fix: update Helm fallback to v4.3.1 (#314)
531fb92 fix: retry latest version lookup and add latest-fallback opt-out (#303)
b7cb6a4 chore(deps): bump undici (#313)
c30b203 chore(deps-dev): bump the actions group with 3 updates (#309)
5dad9f3 chore(deps-dev): bump source-map-js from 1.2.1 to 1.2.2 (#308)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…4 updates Bumps the github-actions group with 3 updates in the / directory: [elixir-cloud-aai/.github/actions/pr-title](https://github.com/elixir-cloud-aai/.github), [elixir-cloud-aai/.github/actions/gate](https://github.com/elixir-cloud-aai/.github) and [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer). Bumps the github-actions group with 1 update in the /.github/actions/install-chart directory: [azure/setup-helm](https://github.com/azure/setup-helm). Bumps the github-actions group with 1 update in the /.github/actions/test-chart directory: [azure/setup-helm](https://github.com/azure/setup-helm). Updates `elixir-cloud-aai/.github/actions/pr-title` from 1.0.0 to 1.1.0 - [Release notes](https://github.com/elixir-cloud-aai/.github/releases) - [Commits](elixir-cloud-aai/.github@743e82d...31f22fc) Updates `elixir-cloud-aai/.github/actions/gate` from 1.0.0 to 1.1.0 - [Release notes](https://github.com/elixir-cloud-aai/.github/releases) - [Commits](elixir-cloud-aai/.github@743e82d...31f22fc) Updates `sigstore/cosign-installer` from 4.1.2 to 4.1.3 - [Release notes](https://github.com/sigstore/cosign-installer/releases) - [Commits](sigstore/cosign-installer@6f9f177...756fe2d) Updates `azure/setup-helm` from 5.0.1 to 5.1.0 - [Release notes](https://github.com/azure/setup-helm/releases) - [Changelog](https://github.com/Azure/setup-helm/blob/main/CHANGELOG.md) - [Commits](Azure/setup-helm@9bc31f4...2f5e7bc) Updates `azure/setup-helm` from 5.0.1 to 5.1.0 - [Release notes](https://github.com/azure/setup-helm/releases) - [Changelog](https://github.com/Azure/setup-helm/blob/main/CHANGELOG.md) - [Commits](Azure/setup-helm@9bc31f4...2f5e7bc) --- updated-dependencies: - dependency-name: elixir-cloud-aai/.github/actions/pr-title dependency-version: 1.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: elixir-cloud-aai/.github/actions/gate dependency-version: 1.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: sigstore/cosign-installer dependency-version: 4.1.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: azure/setup-helm dependency-version: 5.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: azure/setup-helm dependency-version: 5.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com>

codecov · 2026-11-14T20:20:20Z

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 100.00%. Comparing base (65628d9) to head (5190ad9).

Additional details and impacted files

@@            Coverage Diff            @@
##               dev      #304   +/-   ##
=========================================
  Coverage   100.00%   100.00%           
=========================================
  Files            2         2           
  Lines          422       422           
=========================================
  Hits           422       422

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

dependabot Bot requested a review from uniqueg as a code owner November 14, 2026 20:12

dependabot Bot added the type: dependencies Related to managing upstream dependencies label Nov 14, 2026

Navigation Menu

Repository navigation

build(deps): bump the github-actions group across 3 directories with 4 updates - #304

build(deps): bump the github-actions group across 3 directories with 4 updates#304
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/github_actions/github-actions-2304de7f2d

dependabot Bot commented on behalf of github Nov 14, 2026

Uh oh!

codecov Bot commented Nov 14, 2026

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Nov 14, 2026

v1.1.0

Features

Documentation

Maintenance

Commits

v1.1.0

Features

Documentation

Maintenance

Commits

v4.1.3

What's Changed

v5.1.0

Added

Fixed

Security

Changed

Change Log

[5.1.0] - 2026-11-09

Added

Fixed

Security

Changed

[5.0.1] - 2026-06-23

Fixed

Changed

v5.1.0

Added

Fixed

Security

Changed

Change Log

[5.1.0] - 2026-11-09

Added

Fixed

Security

Changed

[5.0.1] - 2026-06-23

Fixed

Changed

Uh oh!

codecov Bot commented Nov 14, 2026

Codecov Report

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants