Skip to content

Bump the github-actions group with 6 updates - #4561

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-db28427e78
Open

Bump the github-actions group with 6 updates#4561
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-db28427e78

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 8, 2026

Copy link
Copy Markdown

Bumps the github-actions group with 6 updates:

Package From To
actions/checkout 4.4.0 7.0.1
Azure/login 1.6.1 3.0.2
kentaro-m/auto-assign-action 1.2.4 2.0.2
azure/powershell 1.4.0 3.0.0
microsoft/ps-rule 2.4.0 2.9.0
lycheeverse/lychee-action 1.5.4 2.9.0

Updates actions/checkout from 4.4.0 to 7.0.1

Release notes

Sourced from actions/checkout's releases.

v7.0.1

What's Changed

Full Changelog: actions/checkout@v7...v7.0.1

v7.0.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v6.0.3...v7.0.0

v6.1.0

What's Changed

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: actions/checkout@v6.0.3...v6.1.0

v6.0.3

What's Changed

New Contributors

Full Changelog: actions/checkout@v6...v6.0.3

v6.0.2

What's Changed

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

v7.0.1

v7.0.0

v6.0.3

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

... (truncated)

Commits

Updates Azure/login from 1.6.1 to 3.0.2

Release notes

Sourced from Azure/login's releases.

Azure Login Action v3.0.2

What's Changed

Security & hardening

  • Refactor PowerShell login to a static param()-bound script — eliminates string-interpolation in the AzPS login path so credential/config values can never be re-parsed as PowerShell (injection-safe by construction) by @​MaddyMicrosoft in Azure/login#607
  • Pin third-party GitHub Actions to commit SHAs — supply-chain hardening for the CI/release workflows by @​MaddyMicrosoft in Azure/login#615
  • Add admin-gated Release workflow — reproducible, approval-gated release + rollback pipeline by @​MaddyMicrosoft in Azure/login#610

Telemetry

  • Emit the real action ref in telemetry via GITHUB_ACTION_REF — corrects the previously stale hard-coded value so usage reports the version consumers actually pin by @​MaddyMicrosoft in Azure/login#614

Dependencies

Maintenance & docs

Full Changelog: Azure/login@v3.0.1...v3.1.0

Azure Login Action v3.0.1

What's Changed

Full Changelog: https://github.com/Azure/login/commits/v3.0.1

Azure Login Action v3.0.0

What's Changed

Full Changelog: Azure/login@v2.3.0...v3.0.0

Azure Login Action v3

What's Changed

Full Changelog: Azure/login@v2.3.0...v3

Azure Login Action v2.3.1

What's Changed

... (truncated)

Commits
  • 7ddb5af prepare release v3.0.2
  • d90bae5 Cap @​actions/exec and @​actions/core below the ESM-only 3.x majors (#628)
  • ff48d59 Bump uuid and @​actions/core (#589)
  • a26a331 Bump brace-expansion from 1.1.12 to 1.1.18 (#616)
  • ca06f43 Refactor PS login to use a static param()-bound script (#607)
  • 905554e Add admin-gated Release workflow (#610)
  • 1029b1a Bump the github-actions group across 1 directory with 7 updates (#621)
  • ae37a0d Harden Dependabot config for the CommonJS ncc build (#622)
  • 43c6847 Docs uplift (#620)
  • cf887bb Bump picomatch from 2.3.1 to 2.3.2 (#582)
  • Additional commits viewable in compare view

Updates kentaro-m/auto-assign-action from 1.2.4 to 2.0.2

Release notes

Sourced from kentaro-m/auto-assign-action's releases.

v2.0.2

What's Changed

Full Changelog: kentaro-m/auto-assign-action@v2.0.1...v2.0.2

v2.0.1

What's Changed

... (truncated)

Commits

Updates azure/powershell from 1.4.0 to 3.0.0

Release notes

Sourced from azure/powershell's releases.

Azure PowerShell Action v3.0.0

What's Changed

Full Changelog: Azure/powershell@v2.0.0...v3.0.0

Azure PowerShell Action v2

What's Changed

Commits

Updates microsoft/ps-rule from 2.4.0 to 2.9.0

Release notes

Sourced from microsoft/ps-rule's releases.

v2.9.0

What's changed since v2.8.1:

  • Engineering:

See change log.

v2.8.1

What's changed since v2.8.1:

  • Engineering:

See change log.

v2.8.0

What's changed since v2.7.0:

  • New features:
    • Added job summaries to each run by @​BernieWhite. #218
      • Set the summary input to false to skip generating a job summary.
  • General improvements:
  • Engineering:
  • Bug fixes:

See change log.

v2.7.0

What's changed since v2.6.0:

See change log.

v2.6.0

What's changed since v2.5.2:

... (truncated)

Changelog

Sourced from microsoft/ps-rule's changelog.

Change log

See upgrade notes for helpful information when upgrading from previous versions.

Unreleased

v2.9.0

What's changed since v2.8.1:

  • Engineering:

v2.8.1

What's changed since v2.8.0:

  • Engineering:

v2.8.0

What's changed since v2.7.0:

  • New features:
    • Added job summaries to each run by @​BernieWhite. #218
      • Set the summary input to false to skip generating a job summary.
  • General improvements:
  • Engineering:
  • Bug fixes:

v2.7.0

What's changed since v2.6.0:

... (truncated)

Commits

Updates lycheeverse/lychee-action from 1.5.4 to 2.9.0

Release notes

Sourced from lycheeverse/lychee-action's releases.

v2.9.0

Summary

This release updates the default lychee version from v0.23.0 to v0.24.2.

The main reason for this release is compatibility with the new lychee 0.24.x release artifacts. Starting with lychee v0.24.0, the archive layout changed, and the lychee binary may now be packaged inside a subdirectory. lychee-action now detects that layout automatically, so users can upgrade without changing their workflows.

If you use:

uses: lycheeverse/lychee-action@v2

you will get the new version once the floating v2 tag has been updated. If you pin exact versions, update to:

uses: lycheeverse/lychee-action@v2.9.0

What’s new from lychee v0.24.x

Better diagnostics

lychee now reports line and column numbers for detected links. This makes broken link reports easier to act on, especially in larger documentation sites or generated reports.

Text fragment checking

lychee can now check URL text fragments, such as links containing #:~:text=.... This helps catch links that point to a valid page but no longer points to the intended highlighted text.

Sitemap support

lychee can now read sitemap.xml inputs. This is useful for checking published websites or generated documentation sites where the sitemap is the easiest source of URLs to validate.

JUnit output

lychee now supports JUnit output. This makes it easier to integrate link checking results with CI systems and test reporting tools that understand JUnit XML.

Redirect and remap visibility

lychee can now show redirects and remaps more clearly. This helps explain why a URL was checked as a different final URL and makes debugging link-checking behavior easier.

Multiple config files

lychee now supports multiple configuration files and expanded config handling. This is useful for repositories that split documentation, website, or package-specific link-checking settings.

Timeout handling

lychee can now accept timeouts explicitly. This gives users more control over how strict their link checks should be for flaky or slow endpoints.

Fixes and reliability improvements

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the github-actions group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `4.4.0` | `7.0.1` |
| [Azure/login](https://github.com/azure/login) | `1.6.1` | `3.0.2` |
| [kentaro-m/auto-assign-action](https://github.com/kentaro-m/auto-assign-action) | `1.2.4` | `2.0.2` |
| [azure/powershell](https://github.com/azure/powershell) | `1.4.0` | `3.0.0` |
| [microsoft/ps-rule](https://github.com/microsoft/ps-rule) | `2.4.0` | `2.9.0` |
| [lycheeverse/lychee-action](https://github.com/lycheeverse/lychee-action) | `1.5.4` | `2.9.0` |


Updates `actions/checkout` from 4.4.0 to 7.0.1
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@11d5960...3d3c42e)

Updates `Azure/login` from 1.6.1 to 3.0.2
- [Release notes](https://github.com/azure/login/releases)
- [Commits](Azure/login@cb79c77...7ddb5af)

Updates `kentaro-m/auto-assign-action` from 1.2.4 to 2.0.2
- [Release notes](https://github.com/kentaro-m/auto-assign-action/releases)
- [Commits](kentaro-m/auto-assign-action@6d966a1...0a2c53d)

Updates `azure/powershell` from 1.4.0 to 3.0.0
- [Release notes](https://github.com/azure/powershell/releases)
- [Commits](Azure/powershell@1300bbd...f5b8adc)

Updates `microsoft/ps-rule` from 2.4.0 to 2.9.0
- [Release notes](https://github.com/microsoft/ps-rule/releases)
- [Changelog](https://github.com/microsoft/ps-rule/blob/main/docs/CHANGELOG-v2.md)
- [Commits](microsoft/ps-rule@8b19f88...46451b8)

Updates `lycheeverse/lychee-action` from 1.5.4 to 2.9.0
- [Release notes](https://github.com/lycheeverse/lychee-action/releases)
- [Commits](lycheeverse/lychee-action@4dcb8be...e747777)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: Azure/login
  dependency-version: 3.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: kentaro-m/auto-assign-action
  dependency-version: 2.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: azure/powershell
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: microsoft/ps-rule
  dependency-version: 2.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: lycheeverse/lychee-action
  dependency-version: 2.9.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Sep 8, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner September 8, 2026 10:23
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Sep 8, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants