Skip to content

build(deps): bump the actions group across 1 directory with 5 updates#46

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions-237dad7bfc
Closed

build(deps): bump the actions group across 1 directory with 5 updates#46
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions-237dad7bfc

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 11, 2026

Copy link
Copy Markdown

Bumps the actions group with 5 updates in the / directory:

Package From To
actions/checkout 5 6
docker/login-action 3 4
azure/login 2 3
super-linter/super-linter 7 8
gitleaks/gitleaks-action 2 3

Updates actions/checkout from 5 to 6

Release notes

Sourced from actions/checkout's releases.

v6.0.0

What's Changed

Full Changelog: actions/checkout@v5.0.0...v6.0.0

v6-beta

What's Changed

Updated persist-credentials to store the credentials under $RUNNER_TEMP instead of directly in the local git config.

This requires a minimum Actions Runner version of v2.329.0 to access the persisted credentials for Docker container action scenarios.

v5.0.1

What's Changed

Full Changelog: actions/checkout@v5...v5.0.1

Changelog

Sourced from actions/checkout's changelog.

Changelog

v6.0.3

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

v4.2.0

v4.1.7

... (truncated)

Commits
  • df4cb1c Update changelog for v6.0.3 (#2446)
  • 1cce339 Fix checkout init for SHA-256 repositories (#2439)
  • 900f221 fix: expand merge commit SHA regex and add SHA-256 test cases (#2414)
  • 0c366fd Update changelog (#2357)
  • de0fac2 Fix tag handling: preserve annotations and explicit fetch-tags (#2356)
  • 064fe7f Add orchestration_id to git user-agent when ACTIONS_ORCHESTRATION_ID is set (...
  • 8e8c483 Clarify v6 README (#2328)
  • 033fa0d Add worktree support for persist-credentials includeIf (#2327)
  • c2d88d3 Update all references from v5 and v4 to v6 (#2314)
  • 1af3b93 update readme/changelog for v6 (#2311)
  • Additional commits viewable in compare view

Updates docker/login-action from 3 to 4

Release notes

Sourced from docker/login-action's releases.

v4.0.0

Full Changelog: docker/login-action@v3.7.0...v4.0.0

v3.7.0

Full Changelog: docker/login-action@v3.6.0...v3.7.0

v3.6.0

Full Changelog: docker/login-action@v3.5.0...v3.6.0

v3.5.0

Full Changelog: docker/login-action@v3.4.0...v3.5.0

v3.4.0

Full Changelog: docker/login-action@v3.3.0...v3.4.0

... (truncated)

Commits
  • 650006c Merge pull request #960 from docker/dependabot/npm_and_yarn/aws-sdk-dependenc...
  • 99df1a3 chore: update generated content
  • 3ab375f build(deps): bump the aws-sdk-dependencies group across 1 directory with 2 up...
  • 39d8580 Merge pull request #970 from docker/dependabot/npm_and_yarn/docker/actions-to...
  • 4eefcd3 chore: update generated content
  • 56d092c build(deps): bump @​docker/actions-toolkit from 0.86.0 to 0.90.0
  • e2e31ca Merge pull request #976 from docker/dependabot/npm_and_yarn/actions/core-3.0.1
  • 0bced94 chore: update generated content
  • 3e75a0f build(deps): bump @​actions/core from 3.0.0 to 3.0.1
  • 365bebd Merge pull request #984 from docker/dependabot/github_actions/aws-actions/con...
  • Additional commits viewable in compare view

Updates azure/login from 2 to 3

Release notes

Sourced from azure/login's releases.

Azure Login Action v3

What's Changed

Full Changelog: Azure/login@v2.3.0...v3

Azure Login Action v3.0.0

What's Changed

Full Changelog: Azure/login@v2.3.0...v3.0.0

Azure Login Action v2.3.0

What's Changed

Full Changelog: Azure/login@v2.2.0...v2.3.0

Azure Login Action v2.2.0

What's Changed

New Contributors

Full Changelog: Azure/login@v2.1.1...v2.2.0

v2.1.1

What's Changed

New Contributors

Full Changelog: Azure/login@v2.1.0...v2.1.1

... (truncated)

Commits

Updates super-linter/super-linter from 7 to 8

Release notes

Sourced from super-linter/super-linter's releases.

v8.0.0

8.0.0 (2025-07-17)

⚠ BREAKING CHANGES

  • migrate to the latest eslint configuration (#6814)
  • remove unmaintained node packages (#6848)
  • remove unmaintained linters and formatters (#6773)

🚀 Features

🐛 Bugfixes

⬆️ Dependency updates

  • bundler: bump rubocop in /dependencies in the rubocop group (#6875) (e0f760c)
  • bundler: bump the rubocop group across 1 directory with 4 updates (#6820) (4cabfd6)
  • docker: bump the docker group across 1 directory with 16 updates (#6864) (1879b46)
  • java: bump the java-gradle group across 2 directories with 2 updates (#6810) (b900e08)
  • java: bump the java-gradle group across 2 directories with 2 updates (#6880) (4d267db)
  • npm: bump @​babel/eslint-parser in /dependencies (#6865) (5a39b53)
  • npm: bump @​typescript-eslint/eslint-plugin (#6872) (4099a2f)
  • npm: bump asl-validator from 3.15.0 to 4.0.0 in /dependencies (#6845) (27e1d3b)
  • npm: bump eslint from 9.29.0 to 9.31.0 in /dependencies (#6878) (c1b79c2)
  • npm: bump markdownlint-cli from 0.44.0 to 0.45.0 in /dependencies (#6796) (cbafd4a)
  • npm: bump next (#6869) (a0f6e7d)
  • npm: bump prettier from 3.5.3 to 3.6.2 in /dependencies (#6857) (53ab6bb)
  • npm: bump react-router-dom (#6871) (4258001)
  • npm: bump renovate from 40.11.8 to 40.28.0 in /dependencies (#6807) (66b6cb3)
  • npm: bump renovate from 40.62.1 to 41.32.2 in /dependencies (#6876) (b67cd44)
  • npm: bump stylelint (#6867) (9572e8f)
  • npm: bump textlint (#6868) (05919fd)
  • npm: bump textlint-rule-terminology (#6877) (e2ac8dd)
  • npm: bump the eslint-plugins-configs group across 1 directory with 4 updates (#6870) (301a807)
  • python: bump the pip group across 1 directory with 4 updates (#6879) (8735a57)
  • python: bump the pip group across 1 directory with 6 updates (#6851) (a659e7d)

... (truncated)

Changelog

Sourced from super-linter/super-linter's changelog.

8.4.0 (2026-01-28)

🚀 Features

🐛 Bugfixes

⬆️ Dependency updates

  • bundler: bump rubocop in /dependencies in the rubocop group (#7332) (612347c)
  • bundler: bump rubocop in /dependencies in the rubocop group (#7451) (f17c26b)
  • bundler: bump rubocop-rails in /dependencies in the rubocop group (#7356) (e7abb06)
  • bundler: bump rubocop-rspec in /dependencies in the rubocop group (#7367) (cee7c26)
  • docker: bump golangci/golangci-lint in the docker group (#7365) (149226b)
  • docker: bump the docker group across 1 directory with 2 updates (#7336) (9d05e2a)
  • docker: bump the docker group across 1 directory with 2 updates (#7440) (806ddf4)
  • docker: bump the docker group across 1 directory with 5 updates (#7388) (89c80ac)
  • docker: bump the docker group with 2 updates (#7343) (4d1a380)
  • docker: bump the docker group with 3 updates (#7412) (fa07160)
  • java: bump com.puppycrawl.tools:checkstyle (#7348) (3bc0dc2)
  • npm: bump @​modelcontextprotocol/sdk in /dependencies (#7364) (898760f)
  • npm: bump diff from 5.2.0 to 5.2.2 in /dependencies (#7425) (ee62ba3)
  • npm: bump hono from 4.11.3 to 4.11.4 in /dependencies (#7379) (ca2821d)
  • npm: bump lodash from 4.17.21 to 4.17.23 in /dependencies (#7433) (be94292)
  • npm: bump qs from 6.14.0 to 6.14.1 in /dependencies (#7350) (64969c4)
  • npm: bump the npm group across 1 directory with 16 updates (#7411) (644fff4)
  • npm: bump the npm group across 1 directory with 2 updates (#7438) (c501415)
  • npm: bump the npm group across 1 directory with 3 updates (#7341) (62ebdce)
  • npm: bump the npm group across 1 directory with 3 updates (#7371) (5112c87)
  • npm: bump the npm group across 1 directory with 4 updates (#7338) (07b91bc)
  • npm: bump the npm group across 1 directory with 4 updates (#7366) (13ced20)
  • npm: bump the npm group across 1 directory with 4 updates (#7418) (ec5d03f)
  • npm: bump the npm group across 1 directory with 8 updates (#7355) (1b38ef9)
  • npm: bump the npm group across 1 directory with 8 updates (#7452) (4347691)
  • python: bump checkov (#7337) (d070c07)

... (truncated)

Commits
  • 9e86335 chore(main): release 8.6.0 (#7512)
  • b91627f deps(npm): bump renovate (#7699)
  • 11c750e deps(docker): bump the docker group across 1 directory with 4 updates (#7698)
  • 4c66d9d deps(java): bump com.puppycrawl.tools:checkstyle (#7689)
  • cb17f60 deps(python): bump the pip group across 1 directory with 5 updates (#7684)
  • 6a65d3a feat: improve zsh scripts support (#7674)
  • eb8ddc7 chore: update ruby and npm deps (#7694)
  • db85efc deps(npm): bump the npm group across 1 directory with 9 updates (#7690)
  • c5ec78d ci(dev-npm): bump the npm_and_yarn group across 1 directory with 1 update (#7...
  • f35a407 ci(dev-docker): bump node in /dev-dependencies (#7678)
  • Additional commits viewable in compare view

Updates gitleaks/gitleaks-action from 2 to 3

Release notes

Sourced from gitleaks/gitleaks-action's releases.

v3.0.0

What's changed

gitleaks-action v3 migrates the runtime from Node 20 to Node 24. No changes to inputs, outputs, or behavior. Update your workflow from gitleaks/gitleaks-action@v2 to gitleaks/gitleaks-action@v3.

Migration

# Before
- uses: gitleaks/gitleaks-action@v2
After

uses: gitleaks/gitleaks-action@v3

Why

GitHub is deprecating the Node 20 runtime for Actions:

  • June 2, 2026: GitHub flips the runner default to Node 24. Workflows using gitleaks-action@v2 (Node 20) will still run, but only if ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true is set as an environment variable.
  • September 16, 2026: Node 20 is removed from GitHub-hosted runners entirely. gitleaks-action@v2 stops working regardless of any opt-out flag.

Changes

  • action.yml: runtime node20node24
  • @actions/core: 1.10.0 → 1.11.1
  • dist/ rebuilt
  • Example workflows updated to actions/checkout@v6 and gitleaks-action@v3
  • README updated with v3 migration guide

Self-hosted runners

If you use self-hosted runners, ensure your runner version is >= v2.327.1 (required for Node 24 support).

v2.3.9

What's Changed

Full Changelog: gitleaks/gitleaks-action@v2.3.8...v2.3.9

v2.3.8

What's Changed

New Contributors

Full Changelog: gitleaks/gitleaks-action@v2.3.7...v2.3.8

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jun 11, 2026
@dependabot dependabot Bot changed the title build(deps): bump the actions group with 5 updates build(deps): bump the actions group across 1 directory with 5 updates Jun 11, 2026
@dependabot dependabot Bot force-pushed the dependabot/github_actions/actions-237dad7bfc branch 5 times, most recently from e789ce9 to 05e5b4c Compare June 15, 2026 07:29
Bumps the actions group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `5` | `6` |
| [docker/login-action](https://github.com/docker/login-action) | `3` | `4` |
| [azure/login](https://github.com/azure/login) | `2` | `3` |
| [super-linter/super-linter](https://github.com/super-linter/super-linter) | `7` | `8` |
| [gitleaks/gitleaks-action](https://github.com/gitleaks/gitleaks-action) | `2` | `3` |



Updates `actions/checkout` from 5 to 6
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v5...v6)

Updates `docker/login-action` from 3 to 4
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](docker/login-action@v3...v4)

Updates `azure/login` from 2 to 3
- [Release notes](https://github.com/azure/login/releases)
- [Commits](Azure/login@v2...v3)

Updates `super-linter/super-linter` from 7 to 8
- [Release notes](https://github.com/super-linter/super-linter/releases)
- [Changelog](https://github.com/super-linter/super-linter/blob/main/CHANGELOG.md)
- [Commits](super-linter/super-linter@v7...v8)

Updates `gitleaks/gitleaks-action` from 2 to 3
- [Release notes](https://github.com/gitleaks/gitleaks-action/releases)
- [Commits](gitleaks/gitleaks-action@v2...v3)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: azure/login
  dependency-version: '3'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: docker/login-action
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: gitleaks/gitleaks-action
  dependency-version: '3'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: super-linter/super-linter
  dependency-version: '8'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/github_actions/actions-237dad7bfc branch from 05e5b4c to 05d09d1 Compare June 15, 2026 12:01
@dependabot @github

dependabot Bot commented on behalf of github Jun 15, 2026

Copy link
Copy Markdown
Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot dependabot Bot deleted the dependabot/github_actions/actions-237dad7bfc branch June 15, 2026 12:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant