Skip to content

build(deps): Bump the github-actions group across 3 directories with 7 updates - #769

Open
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/github_actions/dev/github-actions-ed16579d0c
Open

dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/github_actions/dev/github-actions-ed16579d0c

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 12, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the github-actions group with 6 updates in the / directory:

Package From To
elixir-cloud-aai/.github/actions/pr-title 1.0.0 1.1.0
docker/login-action 4.7.0 4.8.0
elixir-cloud-aai/.github/actions/scan-image 1.0.0 1.1.0
sigstore/cosign-installer 4.1.2 4.1.3
elixir-cloud-aai/.github/actions/gate 1.0.0 1.1.0
azure/setup-helm 5.0.1 5.1.0
azure/setup-helm 5.0.1 5.1.0
azure/setup-helm 5.0.1 5.1.0

Bumps the github-actions group with 2 updates in the /.github/actions/install-chart directory: azure/setup-helm and helm/kind-action.
Bumps the github-actions group with 1 update in the /.github/actions/test-chart directory: azure/setup-helm.

Updates elixir-cloud-aai/.github/actions/pr-title from 1.0.0 to 1.1.0

Release notes

Sourced from elixir-cloud-aai/.github/actions/pr-title's releases.

v1.1.0

Release v1.1.0 of the shared actions of ELIXIR On-Cloud adds the action publish-release, which creates the GitHub release of a tag from a repository's release workflow, with the curated notes followed by GitHub's generated notes (the organisation's release notes format), and checks in the prepare job that the release can be created. The actions gate, pr-title and scan-image are unchanged. Callers pin elixir-cloud-aai/.github/actions/<name>@<commit> # v1.1.0; Dependabot proposes the update.

Features

  • Add a shared publish-release action (#66, #67).
  • Keep the organisation's labels in a file, with a sync script (#60, #61).
  • Add discussion forms and contact links (#43, #53).

Documentation

  • Add an organization profile README (#28, #29).
  • Replace the README logo (#32, #34).
  • Streamline the README (#33, #35).
  • Drop the README license section (#36, #37).
  • Make the security policy org-wide (#40, #48).
  • Make the contributing guide org-wide (#39, #47).
  • Add an org-wide support guide (#44, #52).
  • Add an org-wide governance document (#46, #57).
  • State that repos do not override org files (#59, #58).

Maintenance

  • Pin the PR title template to v1.0.0 (#26, #27).
  • Release from signed version tags (#30, #31).
  • Drop the deprecated org name (#42, #56).
  • Label Dependabot PRs (#62, #63).

Commits

... (truncated)

Commits
  • 31f22fc docs: add notes of v1.1.0 (#69)
  • e1bbeba feat: add a shared publish-release action (#67)
  • b190f19 ci: label Dependabot PRs (#63)
  • 71f19a7 feat: keep the organisation's labels in a file (#61)
  • d5dcd7c docs: state that repos do not override org files (#58)
  • 1dd4da5 docs: add an org-wide governance document (#57)
  • d2a8ba6 chore: drop the deprecated org name (#56)
  • b695aa0 feat: add discussion forms and contact links (#53)
  • 35f05b8 docs: add an org-wide support guide (#52)
  • 5a21052 docs: make the contributing guide org-wide (#47)
  • Additional commits viewable in compare view

Updates docker/login-action from 4.7.0 to 4.8.0

Release notes

Sourced from docker/login-action's releases.

v4.8.0

Full Changelog: docker/login-action@v4.7.0...v4.8.0

Commits
  • 8aa5831 Merge pull request #1105 from docker/dependabot/npm_and_yarn/docker/actions-t...
  • 043f81d [dependabot skip] chore: update generated content
  • 3ff6998 build(deps): bump @​docker/actions-toolkit from 0.107.0 to 0.109.0
  • 694ef6a Merge pull request #1103 from docker/dependabot/npm_and_yarn/aws-sdk-dependen...
  • 7c6e412 [dependabot skip] chore: update generated content
  • aa2441f build(deps): bump the aws-sdk-dependencies group across 1 directory with 2 up...
  • d6c10b0 Merge pull request #1106 from docker/dependabot/github_actions/codeql-actions...
  • 319f1ee Merge pull request #1104 from docker/dependabot/github_actions/actions/setup-...
  • b483b7f Merge pull request #1101 from docker/dependabot/npm_and_yarn/vite-7.3.7
  • dc7d67c Merge pull request #1070 from crazy-max/increase-oidc-default-expiry
  • Additional commits viewable in compare view

Updates elixir-cloud-aai/.github/actions/scan-image from 1.0.0 to 1.1.0

Release notes

Sourced from elixir-cloud-aai/.github/actions/scan-image's releases.

v1.1.0

Release v1.1.0 of the shared actions of ELIXIR On-Cloud adds the action publish-release, which creates the GitHub release of a tag from a repository's release workflow, with the curated notes followed by GitHub's generated notes (the organisation's release notes format), and checks in the prepare job that the release can be created. The actions gate, pr-title and scan-image are unchanged. Callers pin elixir-cloud-aai/.github/actions/<name>@<commit> # v1.1.0; Dependabot proposes the update.

Features

  • Add a shared publish-release action (#66, #67).
  • Keep the organisation's labels in a file, with a sync script (#60, #61).
  • Add discussion forms and contact links (#43, #53).

Documentation

  • Add an organization profile README (#28, #29).
  • Replace the README logo (#32, #34).
  • Streamline the README (#33, #35).
  • Drop the README license section (#36, #37).
  • Make the security policy org-wide (#40, #48).
  • Make the contributing guide org-wide (#39, #47).
  • Add an org-wide support guide (#44, #52).
  • Add an org-wide governance document (#46, #57).
  • State that repos do not override org files (#59, #58).

Maintenance

  • Pin the PR title template to v1.0.0 (#26, #27).
  • Release from signed version tags (#30, #31).
  • Drop the deprecated org name (#42, #56).
  • Label Dependabot PRs (#62, #63).

Commits

... (truncated)

Commits
  • 31f22fc docs: add notes of v1.1.0 (#69)
  • e1bbeba feat: add a shared publish-release action (#67)
  • b190f19 ci: label Dependabot PRs (#63)
  • 71f19a7 feat: keep the organisation's labels in a file (#61)
  • d5dcd7c docs: state that repos do not override org files (#58)
  • 1dd4da5 docs: add an org-wide governance document (#57)
  • d2a8ba6 chore: drop the deprecated org name (#56)
  • b695aa0 feat: add discussion forms and contact links (#53)
  • 35f05b8 docs: add an org-wide support guide (#52)
  • 5a21052 docs: make the contributing guide org-wide (#47)
  • Additional commits viewable in compare view

Updates sigstore/cosign-installer from 4.1.2 to 4.1.3

Release notes

Sourced from sigstore/cosign-installer's releases.

v4.1.3

What's Changed

Full Changelog: sigstore/cosign-installer@v4.1.2...v4.1.3

Commits

Updates elixir-cloud-aai/.github/actions/gate from 1.0.0 to 1.1.0

Release notes

Sourced from elixir-cloud-aai/.github/actions/gate's releases.

v1.1.0

Release v1.1.0 of the shared actions of ELIXIR On-Cloud adds the action publish-release, which creates the GitHub release of a tag from a repository's release workflow, with the curated notes followed by GitHub's generated notes (the organisation's release notes format), and checks in the prepare job that the release can be created. The actions gate, pr-title and scan-image are unchanged. Callers pin elixir-cloud-aai/.github/actions/<name>@<commit> # v1.1.0; Dependabot proposes the update.

Features

  • Add a shared publish-release action (#66, #67).
  • Keep the organisation's labels in a file, with a sync script (#60, #61).
  • Add discussion forms and contact links (#43, #53).

Documentation

  • Add an organization profile README (#28, #29).
  • Replace the README logo (#32, #34).
  • Streamline the README (#33, #35).
  • Drop the README license section (#36, #37).
  • Make the security policy org-wide (#40, #48).
  • Make the contributing guide org-wide (#39, #47).
  • Add an org-wide support guide (#44, #52).
  • Add an org-wide governance document (#46, #57).
  • State that repos do not override org files (#59, #58).

Maintenance

  • Pin the PR title template to v1.0.0 (#26, #27).
  • Release from signed version tags (#30, #31).
  • Drop the deprecated org name (#42, #56).
  • Label Dependabot PRs (#62, #63).

Commits

... (truncated)

Commits
  • 31f22fc docs: add notes of v1.1.0 (#69)
  • e1bbeba feat: add a shared publish-release action (#67)
  • b190f19 ci: label Dependabot PRs (#63)
  • 71f19a7 feat: keep the organisation's labels in a file (#61)
  • d5dcd7c docs: state that repos do not override org files (#58)
  • 1dd4da5 docs: add an org-wide governance document (#57)
  • d2a8ba6 chore: drop the deprecated org name (#56)
  • b695aa0 feat: add discussion forms and contact links (#53)
  • 35f05b8 docs: add an org-wide support guide (#52)
  • 5a21052 docs: make the contributing guide org-wide (#47)
  • Additional commits viewable in compare view

Updates azure/setup-helm from 5.0.1 to 5.1.0

Release notes

Sourced from azure/setup-helm's releases.

v5.1.0

Added

Fixed

Security

Changed

Changelog

Sourced from azure/setup-helm's changelog.

Change Log

[5.1.0] - 2026-11-09

Added

Fixed

Security

Changed

[5.0.1] - 2026-06-23

Fixed

Changed

... (truncated)

Commits
  • 2f5e7bc build
  • 206711c release: prepare v5.1.0 (#317)
  • b14f402 chore(deps): bump the actions group with 3 updates (#316)
  • bd99bd2 fix: enable stale cleanup after 74 inactive days (#311)
  • 4339b0e feat: verify Helm downloads and support fallback mirrors (#315)
  • 1548e57 fix: update Helm fallback to v4.3.1 (#314)
  • 531fb92 fix: retry latest version lookup and add latest-fallback opt-out (#303)
  • b7cb6a4 chore(deps): bump undici (#313)
  • c30b203 chore(deps-dev): bump the actions group with 3 updates (#309)
  • 5dad9f3 chore(deps-dev): bump source-map-js from 1.2.1 to 1.2.2 (#308)
  • Additional commits viewable in compare view

Updates azure/setup-helm from 5.0.1 to 5.1.0

Release notes

Sourced from azure/setup-helm's releases.

v5.1.0

Added

Fixed

Security

Changed

Changelog

Sourced from azure/setup-helm's changelog.

Change Log

[5.1.0] - 2026-11-09

Added

Fixed

Security

Changed

[5.0.1] - 2026-06-23

Fixed

Changed

... (truncated)

Commits
  • 2f5e7bc build
  • 206711c release: prepare v5.1.0 (#317)
  • b14f402 chore(deps): bump the actions group with 3 updates (#316)
  • bd99bd2 fix: enable stale cleanup after 74 inactive days (#311)
  • 4339b0e feat: verify Helm downloads and support fallback mirrors (#315)
  • 1548e57 fix: update Helm fallback to v4.3.1 (#314)
  • 531fb92 fix: retry latest version lookup and add latest-fallback opt-out (#303)
  • b7cb6a4 chore(deps): bump undici (#313)
  • c30b203 chore(deps-dev): bump the actions group with 3 updates (#309)
  • 5dad9f3 chore(deps-dev): bump source-map-js from 1.2.1 to 1.2.2 (#308)
  • Additional commits viewable in compare view

Updates azure/setup-helm from 5.0.1 to 5.1.0

Release notes

Sourced from azure/setup-helm's releases.

v5.1.0

Added

Fixed

@dependabot
dependabot Bot requested a review from uniqueg as a code owner November 12, 2026 10:26
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Nov 12, 2026
@codecov

codecov Bot commented Nov 12, 2026 •

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 100.00%. Comparing base (34348ef) to head (0821c20).

Additional details and impacted files
@@            Coverage Diff            @@
##               dev      #769   +/-   ##
=========================================
  Coverage   100.00%   100.00%           
=========================================
  Files           74        74           
  Lines         9651      9651           
=========================================
  Hits          9651      9651           
Flag Coverage Δ
test_unit 100.00% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@dependabot
dependabot Bot force-pushed the dependabot/github_actions/dev/github-actions-ed16579d0c branch from 2b9405d to d17fde8 Compare November 12, 2026 17:25
…7 updates

Bumps the github-actions group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [elixir-cloud-aai/.github/actions/pr-title](https://github.com/elixir-cloud-aai/.github) | `1.0.0` | `1.1.0` |
| [docker/login-action](https://github.com/docker/login-action) | `4.7.0` | `4.8.0` |
| [elixir-cloud-aai/.github/actions/scan-image](https://github.com/elixir-cloud-aai/.github) | `1.0.0` | `1.1.0` |
| [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) | `4.1.2` | `4.1.3` |
| [elixir-cloud-aai/.github/actions/gate](https://github.com/elixir-cloud-aai/.github) | `1.0.0` | `1.1.0` |
| [azure/setup-helm](https://github.com/azure/setup-helm) | `5.0.1` | `5.1.0` |
| [azure/setup-helm](https://github.com/azure/setup-helm) | `5.0.1` | `5.1.0` |
| [azure/setup-helm](https://github.com/azure/setup-helm) | `5.0.1` | `5.1.0` |

Bumps the github-actions group with 2 updates in the /.github/actions/install-chart directory: [azure/setup-helm](https://github.com/azure/setup-helm) and [helm/kind-action](https://github.com/helm/kind-action).
Bumps the github-actions group with 1 update in the /.github/actions/test-chart directory: [azure/setup-helm](https://github.com/azure/setup-helm).


Updates `elixir-cloud-aai/.github/actions/pr-title` from 1.0.0 to 1.1.0
- [Release notes](https://github.com/elixir-cloud-aai/.github/releases)
- [Commits](elixir-cloud-aai/.github@743e82d...31f22fc)

Updates `docker/login-action` from 4.7.0 to 4.8.0
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](docker/login-action@81c6f93...8aa5831)

Updates `elixir-cloud-aai/.github/actions/scan-image` from 1.0.0 to 1.1.0
- [Release notes](https://github.com/elixir-cloud-aai/.github/releases)
- [Commits](elixir-cloud-aai/.github@743e82d...31f22fc)

Updates `sigstore/cosign-installer` from 4.1.2 to 4.1.3
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](sigstore/cosign-installer@6f9f177...756fe2d)

Updates `elixir-cloud-aai/.github/actions/gate` from 1.0.0 to 1.1.0
- [Release notes](https://github.com/elixir-cloud-aai/.github/releases)
- [Commits](elixir-cloud-aai/.github@743e82d...31f22fc)

Updates `azure/setup-helm` from 5.0.1 to 5.1.0
- [Release notes](https://github.com/azure/setup-helm/releases)
- [Changelog](https://github.com/Azure/setup-helm/blob/main/CHANGELOG.md)
- [Commits](Azure/setup-helm@9bc31f4...2f5e7bc)

Updates `azure/setup-helm` from 5.0.1 to 5.1.0
- [Release notes](https://github.com/azure/setup-helm/releases)
- [Changelog](https://github.com/Azure/setup-helm/blob/main/CHANGELOG.md)
- [Commits](Azure/setup-helm@9bc31f4...2f5e7bc)

Updates `azure/setup-helm` from 5.0.1 to 5.1.0
- [Release notes](https://github.com/azure/setup-helm/releases)
- [Changelog](https://github.com/Azure/setup-helm/blob/main/CHANGELOG.md)
- [Commits](Azure/setup-helm@9bc31f4...2f5e7bc)

Updates `azure/setup-helm` from 5.0.1 to 5.1.0
- [Release notes](https://github.com/azure/setup-helm/releases)
- [Changelog](https://github.com/Azure/setup-helm/blob/main/CHANGELOG.md)
- [Commits](Azure/setup-helm@9bc31f4...2f5e7bc)

Updates `azure/setup-helm` from 5.0.1 to 5.1.0
- [Release notes](https://github.com/azure/setup-helm/releases)
- [Changelog](https://github.com/Azure/setup-helm/blob/main/CHANGELOG.md)
- [Commits](Azure/setup-helm@9bc31f4...2f5e7bc)

Updates `helm/kind-action` from 1.15.1 to 1.15.2
- [Release notes](https://github.com/helm/kind-action/releases)
- [Commits](helm/kind-action@1544676...ea822c7)

Updates `azure/setup-helm` from 5.0.1 to 5.1.0
- [Release notes](https://github.com/azure/setup-helm/releases)
- [Changelog](https://github.com/Azure/setup-helm/blob/main/CHANGELOG.md)
- [Commits](Azure/setup-helm@9bc31f4...2f5e7bc)

Updates `azure/setup-helm` from 5.0.1 to 5.1.0
- [Release notes](https://github.com/azure/setup-helm/releases)
- [Changelog](https://github.com/Azure/setup-helm/blob/main/CHANGELOG.md)
- [Commits](Azure/setup-helm@9bc31f4...2f5e7bc)

Updates `azure/setup-helm` from 5.0.1 to 5.1.0
- [Release notes](https://github.com/azure/setup-helm/releases)
- [Changelog](https://github.com/Azure/setup-helm/blob/main/CHANGELOG.md)
- [Commits](Azure/setup-helm@9bc31f4...2f5e7bc)

Updates `azure/setup-helm` from 5.0.1 to 5.1.0
- [Release notes](https://github.com/azure/setup-helm/releases)
- [Changelog](https://github.com/Azure/setup-helm/blob/main/CHANGELOG.md)
- [Commits](Azure/setup-helm@9bc31f4...2f5e7bc)

---
updated-dependencies:
- dependency-name: azure/setup-helm
  dependency-version: 5.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: azure/setup-helm
  dependency-version: 5.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: azure/setup-helm
  dependency-version: 5.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: docker/login-action
  dependency-version: 4.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: elixir-cloud-aai/.github/actions/gate
  dependency-version: 1.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: elixir-cloud-aai/.github/actions/pr-title
  dependency-version: 1.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: elixir-cloud-aai/.github/actions/scan-image
  dependency-version: 1.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: helm/kind-action
  dependency-version: 1.15.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: sigstore/cosign-installer
  dependency-version: 4.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/dev/github-actions-ed16579d0c branch from d17fde8 to 0821c20 Compare November 14, 2026 20:11

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants