[dependabot]

Bumps the github-actions group with 4 updates in the / directory: dotnet/arcade/.github/workflows/backport-base.yml, dotnet/arcade/.github/workflows/inter-branch-merge-base.yml, peter-evans/create-pull-request and actions/setup-dotnet.

Updates dotnet/arcade/.github/workflows/backport-base.yml from 25a7bbd6d67312a4e8ac898e99d6a01a74ff1cd9 to 305558e284ce35e7b35ac9ebd75802915394fd3e

Commits

• 305558e Add Roslyn PR tagger GitHub App secret (#17783)
• 8231dc4 Bump Microsoft.OpenApi and Microsoft.OpenApi.YamlReader (#17781)
• ac48b19 Bump Azure.Storage.Blobs from 12.29.2 to 12.30.1 (#17690)
• 48ee46d Group Microsoft.Diagnostics Dependabot updates (#17779)
• ded3d27 [main] Source code updates from dotnet/dotnet (#17778)
• 1f49e39 Bump Microsoft.Identity.Client from 4.90.0 to 4.91.0 (#17694)
• 4517a24 [main] Update dependencies from dotnet/arcade, dotnet/arcade-services, dotnet...
• b12bfba Let an explicit OptProf drop override the source branch (#17757)
• c510e63 Pass publishing version through promotion and skip V3 downloads for V4 builds...
• bd945b4 Support SDK-version-specific internal release publishing channels (#17772)
• Additional commits viewable in compare view

Updates dotnet/arcade/.github/workflows/inter-branch-merge-base.yml from 25a7bbd6d67312a4e8ac898e99d6a01a74ff1cd9 to 305558e284ce35e7b35ac9ebd75802915394fd3e

Commits

• 305558e Add Roslyn PR tagger GitHub App secret (#17783)
• 8231dc4 Bump Microsoft.OpenApi and Microsoft.OpenApi.YamlReader (#17781)
• ac48b19 Bump Azure.Storage.Blobs from 12.29.2 to 12.30.1 (#17690)
• 48ee46d Group Microsoft.Diagnostics Dependabot updates (#17779)
• ded3d27 [main] Source code updates from dotnet/dotnet (#17778)
• 1f49e39 Bump Microsoft.Identity.Client from 4.90.0 to 4.91.0 (#17694)
• 4517a24 [main] Update dependencies from dotnet/arcade, dotnet/arcade-services, dotnet...
• b12bfba Let an explicit OptProf drop override the source branch (#17757)
• c510e63 Pass publishing version through promotion and skip V3 downloads for V4 builds...
• bd945b4 Support SDK-version-specific internal release publishing channels (#17772)
• Additional commits viewable in compare view

Updates peter-evans/create-pull-request from 8.1.1 to 8.1.2

Release notes

Sourced from peter-evans/create-pull-request's releases.

Create Pull Request v8.1.2

What's Changed

• Update distribution by @​actions-bot in peter-evans/create-pull-request#4361
• build(deps-dev): bump the npm group with 2 updates by @​dependabot[bot] in peter-evans/create-pull-request#4372
• refactor: replace uuid dep with Node.js built-in crypto.randomUUID by @​peter-evans in peter-evans/create-pull-request#4377
• build(deps): update to jest 30 by @​peter-evans in peter-evans/create-pull-request#4388
• build(deps-dev): bump the npm group across 1 directory with 7 updates by @​dependabot[bot] in peter-evans/create-pull-request#4391
• build(deps-dev): bump undici from 6.25.0 to 6.27.0 by @​dependabot[bot] in peter-evans/create-pull-request#4386
• build(deps-dev): bump js-yaml from 4.2.0 to 5.0.0 by @​dependabot[bot] in peter-evans/create-pull-request#4387
• chore: pin actions to commit shas by @​peter-evans in peter-evans/create-pull-request#4406
• build(deps): bump actions/checkout from 6.0.3 to 7.0.0 in the github-actions group by @​dependabot[bot] in peter-evans/create-pull-request#4411
• build(deps-dev): bump the npm group with 2 updates by @​dependabot[bot] in peter-evans/create-pull-request#4418
• build(deps-dev): bump js-yaml from 5.2.0 to 5.2.1 by @​dependabot[bot] in peter-evans/create-pull-request#4423
• build(deps-dev): bump js-yaml from 5.2.1 to 5.2.2 by @​dependabot[bot] in peter-evans/create-pull-request#4430
• build(deps-dev): bump the npm group with 4 updates by @​dependabot[bot] in peter-evans/create-pull-request#4436
• build(deps): bump the github-actions group with 2 updates by @​dependabot[bot] in peter-evans/create-pull-request#4435
• build(deps): bump brace-expansion by @​dependabot[bot] in peter-evans/create-pull-request#4446
• build(deps-dev): bump the npm group with 4 updates by @​dependabot[bot] in peter-evans/create-pull-request#4452
• Update distribution by @​actions-bot in peter-evans/create-pull-request#4457
• build(deps-dev): bump browserslist from 4.28.4 to 4.28.8 by @​dependabot[bot] in peter-evans/create-pull-request#4462
• build(deps-dev): bump js-yaml from 4.2.0 to 5.4.2 by @​dependabot[bot] in peter-evans/create-pull-request#4468
• build(deps-dev): bump undici from 6.28.0 to 6.29.0 by @​dependabot[bot] in peter-evans/create-pull-request#4478
• build(deps-dev): bump the npm group with 4 updates by @​dependabot[bot] in peter-evans/create-pull-request#4483
• build(deps): bump brace-expansion by @​dependabot[bot] in peter-evans/create-pull-request#4486
• build(deps-dev): bump handlebars from 4.7.9 to 4.7.10 by @​dependabot[bot] in peter-evans/create-pull-request#4494
• build(deps-dev): bump undici from 6.29.0 to 6.29.1 by @​dependabot[bot] in peter-evans/create-pull-request#4504
• build(deps): bump the github-actions group with 3 updates by @​dependabot[bot] in peter-evans/create-pull-request#4510
• build(deps-dev): bump the npm group with 4 updates by @​dependabot[bot] in peter-evans/create-pull-request#4509
• Fix submodule deletion with sign-commits by @​MrSubidubi in peter-evans/create-pull-request#4473

New Contributors

• @​MrSubidubi made their first contribution in peter-evans/create-pull-request#4473

Full Changelog: peter-evans/create-pull-request@v8.1.1...v8.1.2

Commits

• 15733db fix: submodule deletion with sign-commits (#4473)
• 3afad46 build(deps-dev): bump the npm group with 4 updates (#4509)
• aee70be build(deps): bump the github-actions group with 3 updates (#4510)
• 86c87cf build(deps-dev): bump undici from 6.29.0 to 6.29.1 (#4504)
• bd09a93 build(deps-dev): bump handlebars from 4.7.9 to 4.7.10 (#4494)
• 59910dc build(deps): bump brace-expansion (#4486)
• 753b437 build(deps-dev): bump the npm group with 4 updates (#4483)
• abadea5 build(deps-dev): bump undici from 6.28.0 to 6.29.0 (#4478)
• 11e8dc7 build(deps-dev): bump js-yaml from 4.2.0 to 5.4.2 (#4468)
• c9f8b51 build(deps-dev): bump browserslist from 4.28.4 to 4.28.8 (#4462)
• Additional commits viewable in compare view

Updates actions/setup-dotnet from 6.0.0 to 6.1.0

Release notes

Sourced from actions/setup-dotnet's releases.

v6.1.0

What's Changed

Enhancements

• Add check-latest input to reuse a locally installed .NET SDK and skip network calls by @​v-mahabaleshwars in actions/setup-dotnet#774
• Add skip-lts-prepass input to optimize .NET SDK installation process by @​v-chiranjib-swain in actions/setup-dotnet#791
• Add fallback install directory when default is not writable by @​v-priyagupta108 in actions/setup-dotnet#785

Documentation

• Document sdk.version validation for rollForward in global.json by @​v-priyagupta108 in actions/setup-dotnet#763
• Docs: Add Microsoft docs link for dotnet-quality options by @​v-priyagupta108 in actions/setup-dotnet#773
• Docs: Updating Documentation in README by @​v-lmvysakh in actions/setup-dotnet#776
• Clarify dotnet-quality behavior for multiple SDK versions by @​v-mahabaleshwars in actions/setup-dotnet#780

Dependency Updates

• Fix security vulnerabilities by @​v-HarithaVattikuti in actions/setup-dotnet#767
• ci: make validation caches read-only by @​philip-gai in actions/setup-dotnet#777
• Bump actions/checkout from 7.0.0 to 7.0.1 by @​dependabot in actions/setup-dotnet#764
• Bump browserslist from 4.28.2 to 4.28.8 by @​dependabot in actions/setup-dotnet#781
• Bump eslint from 10.5.0 to 10.11.0 by @​dependabot in actions/setup-dotnet#772
• Bump eslint-plugin-jest from 29.15.2 to 29.16.6 by @​dependabot in actions/setup-dotnet#771
• Bump undici from 6.28.0 to 6.29.1 by @​dependabot in actions/setup-dotnet#784
• Bump actions/checkout from 7.0.0 to 7.0.1 by @​dependabot in actions/setup-dotnet#788
• Bump handlebars from 4.7.9 to 4.7.10 by @​dependabot in actions/setup-dotnet#792
• Bump brace-expansion by @​dependabot in actions/setup-dotnet#790
• Prepare v6.1.0 release with updated cache dependency by @​v-HarithaVattikuti in actions/setup-dotnet#798

New Contributors

• @​v-lmvysakh made their first contribution in actions/setup-dotnet#776
• @​v-chiranjib-swain made their first contribution in actions/setup-dotnet#791

Full Changelog: actions/setup-dotnet@v6.0.0...v6.1.0

Commits

• 0f4a354 Prepare v6.1.0 release with updated cache dependency (#798)
• 6ec5c6b Add fallback install directory when default is not writable (#785)
• 62573f4 Bump brace-expansion (#790)
• 67290a9 Bump handlebars from 4.7.9 to 4.7.10 (#792)
• 0072421 Bump actions/checkout from 7.0.0 to 7.0.1 (#788)
• 9ead317 Bump undici from 6.28.0 to 6.29.1 (#784)
• 349aa19 Add skip-lts-prepass input to optimize .NET SDK installation process (#791)
• e2cf7c6 Bump eslint-plugin-jest from 29.15.2 to 29.16.6 (#771)
• 7576362 Bump eslint from 10.5.0 to 10.11.0 (#772)
• 074373f Add check-latest input to reuse a locally installed .NET SDK and skip network...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions