Skip to content

chore(deps): bump the actions-dependencies group across 1 directory with 10 updates - #776

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions-dependencies-bb4c7149be
Open

chore(deps): bump the actions-dependencies group across 1 directory with 10 updates#776
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions-dependencies-bb4c7149be

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 29, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the actions-dependencies group with 10 updates in the / directory:

Package From To
actions/checkout 6.0.2 7.0.1
bluefireteam/melos-action 6085791af7036f6366c9a4b9d55105c0ef9c6388 0b6c80d9846e6b1841c97d527ceb37e17db23f56
actions/setup-java 4 6
actions/cache 4 6
actions/setup-go 6.1.0 7.0.0
dart-lang/setup-dart/.github/workflows/publish.yml 1.7.2 1.8.1
googleapis/release-please-action 4.4.0 5.0.0
actions/upload-artifact 4 7
actions/download-artifact 4 8
android-actions/setup-android 3 4

Updates actions/checkout from 6.0.2 to 7.0.1

Release notes

Sourced from actions/checkout's releases.

v7.0.1

What's Changed

Full Changelog: actions/checkout@v7...v7.0.1

v7.0.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v6.0.3...v7.0.0

v6.1.0

What's Changed

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: actions/checkout@v6.0.3...v6.1.0

v6.0.3

What's Changed

New Contributors

Full Changelog: actions/checkout@v6...v6.0.3

Changelog

Sourced from actions/checkout's changelog.

Changelog

v7.0.1

v7.0.0

v6.0.3

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

... (truncated)

Commits

Updates bluefireteam/melos-action from 6085791af7036f6366c9a4b9d55105c0ef9c6388 to 0b6c80d9846e6b1841c97d527ceb37e17db23f56

Commits
  • 0b6c80d deps(deps): bump the github-actions group across 1 directory with 2 updates (...
  • b79b63b fix: Disable the setup-dart problem matcher when publishing (#49)
  • 22709d7 feat: close previous release PRs when a new release PR is created (#48)
  • 70965d0 feat: support plain vX.Y.Z tags for root packages and lockstep workspaces (#47)
  • 2f17dbe deps(deps): bump dart-lang/setup-dart from 1.7.2 to 1.8.0 in the github-actio...
  • 9e4dd82 deps(deps): bump softprops/action-gh-release from 3.0.1 to 3.0.2 in the githu...
  • 32cdd07 deps(deps): bump softprops/action-gh-release from 3.0.0 to 3.0.1 in the githu...
  • 2982f8e feat: automatically create GitHub releases after publishing (#43)
  • ef13f68 feat: allow customizing the release PR title and body (#42)
  • 62e2570 deps(deps): bump peter-evans/create-pull-request from 8.1.0 to 8.1.1 in the g...
  • Additional commits viewable in compare view

Updates actions/setup-java from 4 to 6

Release notes

Sourced from actions/setup-java's releases.

v6.0.0

What's Changed

... (truncated)

Commits
  • de7274f Avoid macOS GPG socket overflow on long runner paths (#1266)
  • 134912a Fix import-safe checks when scripts are run from a path with symlinks (#1265)
  • 0781fc6 Fix alpine failures by switching default back to only warn on verification fa...
  • 4889c4a Fix Temurin EA E2E signature verification (#1260)
  • 8fd3240 [WIP] Fix failing GitHub Actions job for temurin 17 (#1259)
  • 2732291 chore(deps-dev): update eslint and globals (#1256)
  • 1a8f22b chore: streamline Dependabot updates (#1255)
  • 85030b7 docs: complete v6 release highlights (#1254)
  • dd06d9c Prepare documentation for v6 release (#1253)
  • 59b3450 chore(deps): combine open Dependabot npm updates (#1252)
  • Additional commits viewable in compare view

Updates actions/cache from 4 to 6

Release notes

Sourced from actions/cache's releases.

v6.0.0

What's Changed

Full Changelog: actions/cache@v5...v6.0.0

v5.1.0

What's Changed

Full Changelog: actions/cache@v5...v5.1.0

v5.0.5

What's Changed

Full Changelog: actions/cache@v5...v5.0.5

v5.0.4

What's Changed

New Contributors

Full Changelog: actions/cache@v5...v5.0.4

v5.0.3

What's Changed

Full Changelog: actions/cache@v5...v5.0.3

v.5.0.2

v5.0.2

What's Changed

... (truncated)

Changelog

Sourced from actions/cache's changelog.

Releases

How to prepare a release

[!NOTE] Relevant for maintainers with write access only.

  1. Switch to a new branch from main.
  2. Run npm test to ensure all tests are passing.
  3. Update the version in https://github.com/actions/cache/blob/main/package.json.
  4. Run npm run build to update the compiled files.
  5. Update this https://github.com/actions/cache/blob/main/RELEASES.md with the new version and changes in the ## Changelog section.
  6. Run licensed cache to update the license report.
  7. Run licensed status and resolve any warnings by updating the https://github.com/actions/cache/blob/main/.licensed.yml file with the exceptions.
  8. Commit your changes and push your branch upstream.
  9. Open a pull request against main and get it reviewed and merged.
  10. Draft a new release https://github.com/actions/cache/releases use the same version number used in package.json
    1. Create a new tag with the version number.
    2. Auto generate release notes and update them to match the changes you made in RELEASES.md.
    3. Toggle the set as the latest release option.
    4. Publish the release.
  11. Navigate to https://github.com/actions/cache/actions/workflows/release-new-action-version.yml
    1. There should be a workflow run queued with the same version number.
    2. Approve the run to publish the new version and update the major tags for this action.

Changelog

6.1.0

6.0.0

  • Updated @actions/cache to ^6.0.1, @actions/core to ^3.0.1, @actions/exec to ^3.0.0, @actions/io to ^3.0.2
  • Migrated to ESM module system
  • Upgraded Jest to v30 and test infrastructure to be ESM compatible

5.0.4

  • Bump minimatch to v3.1.5 (fixes ReDoS via globstar patterns)
  • Bump undici to v6.24.1 (WebSocket decompression bomb protection, header validation fixes)
  • Bump fast-xml-parser to v5.5.6

5.0.3

5.0.2

... (truncated)

Commits
  • 55cc834 Merge pull request #1768 from jasongin/readonly-cache
  • d8cd72f Bump @​actions/cache to v6.1.0 - handle cache write error due to RO token
  • 2c8a9bd Merge pull request #1760 from actions/samirat/esm_migration_and_package_update
  • e9b91fd Prettier fixes
  • e4884b8 Rebuild dist
  • 10baf01 Fixed licenses
  • e39b386 Fix test mock return order
  • b692820 PR feedback
  • 6074912 Rebuild dist bundles as ESM to match type:module
  • 5a912e8 Fix lint and jest issues
  • Additional commits viewable in compare view

Updates actions/setup-go from 6.1.0 to 7.0.0

Release notes

Sourced from actions/setup-go's releases.

v7.0.0

What's Changed

New Contributors

Full Changelog: actions/setup-go@v6...v7.0.0

v6.5.0

What's Changed

Dependency update

New Contributors

Full Changelog: actions/setup-go@v6...v6.5.0

v6.4.0

What's Changed

Enhancement

Dependency update

Documentation update

New Contributors

Full Changelog: actions/setup-go@v6...v6.4.0

v6.3.0

What's Changed

Full Changelog: actions/setup-go@v6...v6.3.0

v6.2.0

What's Changed

... (truncated)

Commits

Updates dart-lang/setup-dart/.github/workflows/publish.yml from 1.7.2 to 1.8.1

Release notes

Sourced from dart-lang/setup-dart/.github/workflows/publish.yml's releases.

v1.8.1

  • Update workflows to pin actions/checkout to a commit SHA.
  • Harden workflow permissions to contents: read.
  • Update publish.yml reusable workflow to reference setup-dart@v1.8.0 and latest setup-flutter.
  • Bump undici to 6.28.0 and @vercel/ncc to 0.44.1.

v1.8.0

  • Add a problem matcher for dart analyze to automatically create inline annotations on GitHub pull requests.
  • Update publish.yml reusable workflow to reference setup-dart@v1.7.2 (running on Node 24) (#188[]).
  • Update GitHub Action dependencies (actions/checkout v7).
  • Bump undici to 6.27.0 and update npm dependencies.

#188: dart-lang/setup-dart#188

Changelog

Sourced from dart-lang/setup-dart/.github/workflows/publish.yml's changelog.

v1.8.1

  • Update workflows to pin actions/checkout to a commit SHA.
  • Harden workflow permissions to contents: read.
  • Update publish.yml reusable workflow to reference setup-dart@v1.8.0 and latest setup-flutter.
  • Bump undici to 6.28.0 and @vercel/ncc to 0.44.1.

v1.8.0

  • Add a problem matcher for dart analyze to automatically create inline annotations on GitHub pull requests.
  • Update publish.yml reusable workflow to reference setup-dart@v1.7.2 (running on Node 24) (#188[]).
  • Update GitHub Action dependencies (actions/checkout v7).
  • Bump undici to 6.27.0 and update npm dependencies.

#188: dart-lang/setup-dart#188

v1.7.2

  • Update Node.js requirement to Node 24.
  • Fix open Dependabot alerts by bumping undici to >=6.24.0.
  • Update GitHub Action dependencies (@actions/core, @actions/exec, @actions/tool-cache, @actions/http-client).
  • Update workflow actions to their latest versions (actions/checkout v6, setup-flutter).

v1.7.1

  • Roll undici dependency to address CVE-2025-22150.
  • Update to the latest npm dependencies.
  • Recompile the action using the new Dart / JavaScript interop.

v1.7.0

v1.6.5

  • Fix zip path handling on Windows 11 (#118[])

#118: dart-lang/setup-dart#118

v1.6.4

  • Rebuild JS code.

v1.6.3

... (truncated)

Commits
  • 6afc89d Pin actions/checkout to a commit SHA and harden workflow permissions (#196)
  • b653b3c Prepare v1.8.1 release (#195)
  • 45165d2 Bump the github-actions group across 1 directory with 2 updates (#194)
  • 9af6bba Pin actions/checkout to a commit SHA in publish.yml (#193)
  • ddca5d2 Bump @​vercel/ncc in the npm-dependencies group across 1 directory (#185)
  • 5c116a3 Bump undici from 6.27.0 to 6.28.0 (#190)
  • 7654d45 chore: prepare v1.8.0 release (#188) (#189)
  • 43c102f Bump actions/checkout from 6 to 7 in the github-actions group (#184)
  • 10b57ef Bump the npm-dependencies group across 1 directory with 2 updates (#179)
  • a73965b Bump undici from 6.24.1 to 6.27.0 (#182)
  • Additional commits viewable in compare view

Updates googleapis/release-please-action from 4.4.0 to 5.0.0

Release notes

Sourced from googleapis/release-please-action's releases.

v5.0.0

5.0.0 (2026-04-22)

⚠ BREAKING CHANGES

  • upgrade to node24 (#1188)

Features

Bug Fixes

  • bump release-please from 17.3.0 to 17.6.0 (#1199) (f533c26)

v4.4.1

4.4.1 (2026-02-20)

Bug Fixes

  • bump release-please from 17.1.3 to 17.3.0 (#1183) (ef9c274)
Changelog

Sourced from googleapis/release-please-action's changelog.

Changelog

5.0.0 (2026-04-22)

⚠ BREAKING CHANGES

  • upgrade to node24 (#1188)

Features

Bug Fixes

  • bump release-please from 17.3.0 to 17.6.0 (#1199) (f533c26)

4.4.1 (2026-02-20)

Bug Fixes

  • bump release-please from 17.1.3 to 17.3.0 (#1183) (ef9c274)

4.4.0 (2025-10-09)

Features

  • add ability to select versioning-strategy and release-as (#1121) (ee0f5ba)

Bug Fixes

  • changelog-host parameter ignored when using manifest configuration (#1151) (535c413)
  • bump mocha from 11.7.1 to 11.7.2 in the npm_and_yarn group across 1 directory (#1149) (3612a99)
  • bump release-please from 17.1.2 to 17.1.3 (#1158) (66fbfe9)

4.3.0 (2025-08-20)

Features

  • deps: update release-please to 17.1.2 (f07192c)

4.2.0 (2025-03-07)

Features

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Sep 29, 2026
@dependabot
chore(deps): bump the actions-dependencies group across 1 directory w…
5e8b736 
…ith 10 updates

Bumps the actions-dependencies group with 10 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `6.0.2` | `7.0.1` |
| [bluefireteam/melos-action](https://github.com/bluefireteam/melos-action) | `6085791af7036f6366c9a4b9d55105c0ef9c6388` | `0b6c80d9846e6b1841c97d527ceb37e17db23f56` |
| [actions/setup-java](https://github.com/actions/setup-java) | `4` | `6` |
| [actions/cache](https://github.com/actions/cache) | `4` | `6` |
| [actions/setup-go](https://github.com/actions/setup-go) | `6.1.0` | `7.0.0` |
| [dart-lang/setup-dart/.github/workflows/publish.yml](https://github.com/dart-lang/setup-dart) | `1.7.2` | `1.8.1` |
| [googleapis/release-please-action](https://github.com/googleapis/release-please-action) | `4.4.0` | `5.0.0` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4` | `7` |
| [actions/download-artifact](https://github.com/actions/download-artifact) | `4` | `8` |
| [android-actions/setup-android](https://github.com/android-actions/setup-android) | `3` | `4` |



Updates `actions/checkout` from 6.0.2 to 7.0.1
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@de0fac2...3d3c42e)

Updates `bluefireteam/melos-action` from 6085791af7036f6366c9a4b9d55105c0ef9c6388 to 0b6c80d9846e6b1841c97d527ceb37e17db23f56
- [Release notes](https://github.com/bluefireteam/melos-action/releases)
- [Commits](bluefireteam/melos-action@6085791...0b6c80d)

Updates `actions/setup-java` from 4 to 6
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](actions/setup-java@v4...v6)

Updates `actions/cache` from 4 to 6
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](actions/cache@v4...v6)

Updates `actions/setup-go` from 6.1.0 to 7.0.0
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](actions/setup-go@4dc6199...b7ad1da)

Updates `dart-lang/setup-dart/.github/workflows/publish.yml` from 1.7.2 to 1.8.1
- [Release notes](https://github.com/dart-lang/setup-dart/releases)
- [Changelog](https://github.com/dart-lang/setup-dart/blob/main/CHANGELOG.md)
- [Commits](dart-lang/setup-dart@65eb853...6afc89d)

Updates `googleapis/release-please-action` from 4.4.0 to 5.0.0
- [Release notes](https://github.com/googleapis/release-please-action/releases)
- [Changelog](https://github.com/googleapis/release-please-action/blob/main/CHANGELOG.md)
- [Commits](googleapis/release-please-action@16a9c90...45996ed)

Updates `actions/upload-artifact` from 4 to 7
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@v4...v7)

Updates `actions/download-artifact` from 4 to 8
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](actions/download-artifact@v4...v8)

Updates `android-actions/setup-android` from 3 to 4
- [Release notes](https://github.com/android-actions/setup-android/releases)
- [Commits](android-actions/setup-android@v3...v4)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions-dependencies
- dependency-name: actions/checkout
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions-dependencies
- dependency-name: actions/download-artifact
  dependency-version: '8'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions-dependencies
- dependency-name: actions/setup-go
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions-dependencies
- dependency-name: actions/setup-java
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions-dependencies
- dependency-name: actions/upload-artifact
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions-dependencies
- dependency-name: android-actions/setup-android
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions-dependencies
- dependency-name: bluefireteam/melos-action
  dependency-version: 0b6c80d9846e6b1841c97d527ceb37e17db23f56
  dependency-type: direct:production
  dependency-group: actions-dependencies
- dependency-name: dart-lang/setup-dart/.github/workflows/publish.yml
  dependency-version: 1.8.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-dependencies
- dependency-name: googleapis/release-please-action
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions-dependencies-bb4c7149be branch from 436ffc3 to 5e8b736 Compare October 14, 2026 18:49

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

@caio1985 caio1985

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@caio1985