Skip to content

chore(deps): bump the github-actions-dependencies group across 1 directory with 12 updates - #549

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-dependencies-2ed2d80da8
Open

chore(deps): bump the github-actions-dependencies group across 1 directory with 12 updates#549
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-dependencies-2ed2d80da8

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 23, 2026

Copy link
Copy Markdown
Contributor

Bumps the github-actions-dependencies group with 12 updates in the / directory:

Package From To
hoverkraft-tech/ci-github-common/.github/workflows/greetings.yml 0.38.0 0.39.0
hoverkraft-tech/ci-github-common/.github/workflows/need-fix-to-issue.yml 0.38.0 0.39.0
hoverkraft-tech/ci-github-common/.github/workflows/semantic-pull-request.yml 0.38.0 0.39.0
hoverkraft-tech/ci-github-common/.github/workflows/linter.yml 0.38.0 0.39.0
hoverkraft-tech/ci-github-common/.github/workflows/stale.yml 0.38.0 0.39.0
actions/download-artifact 8.0.1 8.0.2
hoverkraft-tech/ci-github-container/.github/workflows/docker-build-images.yml 0.38.0 0.39.0
hoverkraft-tech/ci-github-common/actions/checkout 0.38.0 0.39.0
github/codeql-action/init 4.38.2 4.39.0
github/codeql-action/analyze 4.38.2 4.39.0
hoverkraft-tech/ci-github-common/actions/working-directory 0.38.0 0.39.0
hoverkraft-tech/ci-github-common/actions/local-workflow-actions 0.38.0 0.39.0

Updates hoverkraft-tech/ci-github-common/.github/workflows/greetings.yml from 0.38.0 to 0.39.0

Release notes

Sourced from hoverkraft-tech/ci-github-common/.github/workflows/greetings.yml's releases.

0.39.0

Release Summary

Linting now shares Super-Linter defaults across local and CI runs for consistent configuration. Super-Linter summaries are enabled by default, with fallback Conventional Commits rules when commitlint is enabled without a project configuration.

Internal updates refresh documentation, GitHub Actions dependencies, and fast-xml-parser.

Breaking changes

The actions/local-actions and actions/local-workflow-actions helpers have been removed; migrate to direct $/ action references and remove dependencies on the helpers’ exposed paths or outputs. These references require GitHub.com and GitHub Actions runner 2.336.0 or newer.

What's Changed

Full Changelog: hoverkraft-tech/ci-github-common@0.38.0...0.39.0

Commits
  • ab69f41 docs: update actions and workflows documentation
  • a3ee349 fix(ci): pin shared super-linter image by digest
  • 467cdd3 feat: share linting defaults and remove local action helpers
  • 46b37cf chore: bump the github-actions-dependencies group across 2 directories with 2...
  • d6339c7 chore: bump the github-actions-dependencies group across 1 directory with 4 u...
  • 7c8a12e chore: bump fast-xml-parser
  • d470912 chore: bump the github-actions-dependencies group across 1 directory with 3 u...
  • 546a624 chore: bump the github-actions-dependencies group across 1 directory with 2 u...
  • b6dd60c chore: bump fast-xml-parser
  • efc2024 feat(linter): align Super-Linter defaults with workflow behavior
  • Additional commits viewable in compare view

Updates hoverkraft-tech/ci-github-common/.github/workflows/need-fix-to-issue.yml from 0.38.0 to 0.39.0

Release notes

Sourced from hoverkraft-tech/ci-github-common/.github/workflows/need-fix-to-issue.yml's releases.

0.39.0

Release Summary

Linting now shares Super-Linter defaults across local and CI runs for consistent configuration. Super-Linter summaries are enabled by default, with fallback Conventional Commits rules when commitlint is enabled without a project configuration.

Internal updates refresh documentation, GitHub Actions dependencies, and fast-xml-parser.

Breaking changes

The actions/local-actions and actions/local-workflow-actions helpers have been removed; migrate to direct $/ action references and remove dependencies on the helpers’ exposed paths or outputs. These references require GitHub.com and GitHub Actions runner 2.336.0 or newer.

What's Changed

Full Changelog: hoverkraft-tech/ci-github-common@0.38.0...0.39.0

Commits
  • ab69f41 docs: update actions and workflows documentation
  • a3ee349 fix(ci): pin shared super-linter image by digest
  • 467cdd3 feat: share linting defaults and remove local action helpers
  • 46b37cf chore: bump the github-actions-dependencies group across 2 directories with 2...
  • d6339c7 chore: bump the github-actions-dependencies group across 1 directory with 4 u...
  • 7c8a12e chore: bump fast-xml-parser
  • d470912 chore: bump the github-actions-dependencies group across 1 directory with 3 u...
  • 546a624 chore: bump the github-actions-dependencies group across 1 directory with 2 u...
  • b6dd60c chore: bump fast-xml-parser
  • efc2024 feat(linter): align Super-Linter defaults with workflow behavior
  • Additional commits viewable in compare view

Updates hoverkraft-tech/ci-github-common/.github/workflows/semantic-pull-request.yml from 0.38.0 to 0.39.0

Release notes

Sourced from hoverkraft-tech/ci-github-common/.github/workflows/semantic-pull-request.yml's releases.

0.39.0

Release Summary

Linting now shares Super-Linter defaults across local and CI runs for consistent configuration. Super-Linter summaries are enabled by default, with fallback Conventional Commits rules when commitlint is enabled without a project configuration.

Internal updates refresh documentation, GitHub Actions dependencies, and fast-xml-parser.

Breaking changes

The actions/local-actions and actions/local-workflow-actions helpers have been removed; migrate to direct $/ action references and remove dependencies on the helpers’ exposed paths or outputs. These references require GitHub.com and GitHub Actions runner 2.336.0 or newer.

What's Changed

Full Changelog: hoverkraft-tech/ci-github-common@0.38.0...0.39.0

Commits
  • ab69f41 docs: update actions and workflows documentation
  • a3ee349 fix(ci): pin shared super-linter image by digest
  • 467cdd3 feat: share linting defaults and remove local action helpers
  • 46b37cf chore: bump the github-actions-dependencies group across 2 directories with 2...
  • d6339c7 chore: bump the github-actions-dependencies group across 1 directory with 4 u...
  • 7c8a12e chore: bump fast-xml-parser
  • d470912 chore: bump the github-actions-dependencies group across 1 directory with 3 u...
  • 546a624 chore: bump the github-actions-dependencies group across 1 directory with 2 u...
  • b6dd60c chore: bump fast-xml-parser
  • efc2024 feat(linter): align Super-Linter defaults with workflow behavior
  • Additional commits viewable in compare view

Updates hoverkraft-tech/ci-github-common/.github/workflows/linter.yml from 0.38.0 to 0.39.0

Release notes

Sourced from hoverkraft-tech/ci-github-common/.github/workflows/linter.yml's releases.

0.39.0

Release Summary

Linting now shares Super-Linter defaults across local and CI runs for consistent configuration. Super-Linter summaries are enabled by default, with fallback Conventional Commits rules when commitlint is enabled without a project configuration.

Internal updates refresh documentation, GitHub Actions dependencies, and fast-xml-parser.

Breaking changes

The actions/local-actions and actions/local-workflow-actions helpers have been removed; migrate to direct $/ action references and remove dependencies on the helpers’ exposed paths or outputs. These references require GitHub.com and GitHub Actions runner 2.336.0 or newer.

What's Changed

Full Changelog: hoverkraft-tech/ci-github-common@0.38.0...0.39.0

Commits
  • ab69f41 docs: update actions and workflows documentation
  • a3ee349 fix(ci): pin shared super-linter image by digest
  • 467cdd3 feat: share linting defaults and remove local action helpers
  • 46b37cf chore: bump the github-actions-dependencies group across 2 directories with 2...
  • d6339c7 chore: bump the github-actions-dependencies group across 1 directory with 4 u...
  • 7c8a12e chore: bump fast-xml-parser
  • d470912 chore: bump the github-actions-dependencies group across 1 directory with 3 u...
  • 546a624 chore: bump the github-actions-dependencies group across 1 directory with 2 u...
  • b6dd60c chore: bump fast-xml-parser
  • efc2024 feat(linter): align Super-Linter defaults with workflow behavior
  • Additional commits viewable in compare view

Updates hoverkraft-tech/ci-github-common/.github/workflows/stale.yml from 0.38.0 to 0.39.0

Release notes

Sourced from hoverkraft-tech/ci-github-common/.github/workflows/stale.yml's releases.

0.39.0

Release Summary

Linting now shares Super-Linter defaults across local and CI runs for consistent configuration. Super-Linter summaries are enabled by default, with fallback Conventional Commits rules when commitlint is enabled without a project configuration.

Internal updates refresh documentation, GitHub Actions dependencies, and fast-xml-parser.

Breaking changes

The actions/local-actions and actions/local-workflow-actions helpers have been removed; migrate to direct $/ action references and remove dependencies on the helpers’ exposed paths or outputs. These references require GitHub.com and GitHub Actions runner 2.336.0 or newer.

What's Changed

Full Changelog: hoverkraft-tech/ci-github-common@0.38.0...0.39.0

Commits
  • ab69f41 docs: update actions and workflows documentation
  • a3ee349 fix(ci): pin shared super-linter image by digest
  • 467cdd3 feat: share linting defaults and remove local action helpers
  • 46b37cf chore: bump the github-actions-dependencies group across 2 directories with 2...
  • d6339c7 chore: bump the github-actions-dependencies group across 1 directory with 4 u...
  • 7c8a12e chore: bump fast-xml-parser
  • d470912 chore: bump the github-actions-dependencies group across 1 directory with 3 u...
  • 546a624 chore: bump the github-actions-dependencies group across 1 directory with 2 u...
  • b6dd60c chore: bump fast-xml-parser
  • efc2024 feat(linter): align Super-Linter defaults with workflow behavior
  • Additional commits viewable in compare view

Updates actions/download-artifact from 8.0.1 to 8.0.2

Release notes

Sourced from actions/download-artifact's releases.

v8.0.2

What's Changed

New Contributors

Full Changelog: actions/download-artifact@v8.0.1...v8.0.2

Commits
  • 9000827 Merge pull request #493 from actions/tunc-d-prepare-download-v8-0-2
  • e455989 Prepare download-artifact v8.0.2
  • a00b90c Merge pull request #492 from actions/tunc-d-download-artifact-package-bump
  • 29bb7ce Update @​actions/artifact to 6.3.1
  • 484a0b5 Update the readme (#473)
  • See full diff in compare view

Updates hoverkraft-tech/ci-github-container/.github/workflows/docker-build-images.yml from 0.38.0 to 0.39.0

Release notes

Sourced from hoverkraft-tech/ci-github-container/.github/workflows/docker-build-images.yml's releases.

0.39.0

Release Summary

Docker adds image build-provenance attestations, pins the installed Docker version, updates BuildKit and Buildx, and supports pull-request image-tag cleanup for user-owned packages.

Helm adds a dedicated chart-signing action and configurable test namespaces, while fixing dependency vulnerabilities in documentation generation.

Internal maintenance refreshes dependencies, development tooling, and documentation, and fixes CI linting and Helm fixture security failures.

Breaking changes

docker-build-images now requires attestations: write, and build-secret GitHub App tokens are restricted to contents: read on the calling repository by default; configure build-secret-github-app-repositories for additional repositories and supply separately scoped credentials through build-secrets for broader permissions.

helm/release-chart now signs charts by default: callers must grant id-token: write or explicitly set sign: "false".

What's Changed

... (truncated)

Commits
  • 5ffc3c8 chore(deps): bump the devcontainers-dependencies group with 3 updates
  • 6981397 chore(deps): bump prettier
  • aa754a8 docs: update actions and workflows documentation
  • 2bb5633 fix(ci): pass keyless flags in helm sign-chart test
  • a326cd2 feat(helm): add sign-chart action
  • 2b1e7fc docs: update actions and workflows documentation
  • fa8235e docs: update Helm chart documentation for charts
  • ad60282 fix(docker-build-images)!: restrict build-secret GitHub App tokens
  • 7120ed3 fix(ci): resolve lint and Helm fixture security failures
  • 448f911 chore(deps): bump prettier
  • Additional commits viewable in compare view

Updates hoverkraft-tech/ci-github-common/actions/checkout from 0.38.0 to 0.39.0

Release notes

Sourced from hoverkraft-tech/ci-github-common/actions/checkout's releases.

0.39.0

Release Summary

Linting now shares Super-Linter defaults across local and CI runs for consistent configuration. Super-Linter summaries are enabled by default, with fallback Conventional Commits rules when commitlint is enabled without a project configuration.

Internal updates refresh documentation, GitHub Actions dependencies, and fast-xml-parser.

Breaking changes

The actions/local-actions and actions/local-workflow-actions helpers have been removed; migrate to direct $/ action references and remove dependencies on the helpers’ exposed paths or outputs. These references require GitHub.com and GitHub Actions runner 2.336.0 or newer.

What's Changed

Full Changelog: hoverkraft-tech/ci-github-common@0.38.0...0.39.0

Commits
  • ab69f41 docs: update actions and workflows documentation
  • a3ee349 fix(ci): pin shared super-linter image by digest
  • 467cdd3 feat: share linting defaults and remove local action helpers
  • 46b37cf chore: bump the github-actions-dependencies group across 2 directories with 2...
  • d6339c7 chore: bump the github-actions-dependencies group across 1 directory with 4 u...
  • 7c8a12e chore: bump fast-xml-parser
  • d470912 chore: bump the github-actions-dependencies group across 1 directory with 3 u...
  • 546a624 chore: bump the github-actions-dependencies group across 1 directory with 2 u...
  • b6dd60c chore: bump fast-xml-parser
  • efc2024 feat(linter): align Super-Linter defaults with workflow behavior
  • Additional commits viewable in compare view

Updates github/codeql-action/init from 4.38.2 to 4.39.0

Release notes

Sourced from github/codeql-action/init's releases.

v4.39.0

  • Breaking change: Bump the minimum required CodeQL bundle version to 2.20.7. #4205
  • The codeql-action/analyze step now validates that a correct argument for the checkout_path input has been provided. The checkout_path input must be set to the path where the repository that is being analyzed is checked out at on the runner, if that path is something other than the workspace root. If the path does not point to a repository checkout or is different from the path that was used by codeql-action/init, then the CodeQL Action now produces a warning. #4148
  • Resolved an issue with third-party caching implementations that prevented caches from being restored correctly. #4206
  • The codeql-action/start-proxy step that is used in Code Scanning Default Setup now finds CodeQL releases using the same logic as codeql-action/init. This primarily benefits customers who are using GitHub instances other than github.com where the codeql-action/start-proxy step may previously have been unable to locate recent releases and ended up using outdated versions of the private registry authentication proxy as a result. #4198

v4.38.3

  • Upcoming breaking change: CodeQL version 2.21.2 and earlier were discontinued on 24 September 2026 alongside GitHub Enterprise Server 3.17, and will be unsupported by the next minor release of the CodeQL Action. Added a deprecation warning for customers us...

    Description has been truncated

@dependabot
chore(deps): bump the github-actions-dependencies group across 1 dire…
36ecdea 
…ctory with 12 updates

Bumps the github-actions-dependencies group with 12 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [hoverkraft-tech/ci-github-common/.github/workflows/greetings.yml](https://github.com/hoverkraft-tech/ci-github-common) | `0.38.0` | `0.39.0` |
| [hoverkraft-tech/ci-github-common/.github/workflows/need-fix-to-issue.yml](https://github.com/hoverkraft-tech/ci-github-common) | `0.38.0` | `0.39.0` |
| [hoverkraft-tech/ci-github-common/.github/workflows/semantic-pull-request.yml](https://github.com/hoverkraft-tech/ci-github-common) | `0.38.0` | `0.39.0` |
| [hoverkraft-tech/ci-github-common/.github/workflows/linter.yml](https://github.com/hoverkraft-tech/ci-github-common) | `0.38.0` | `0.39.0` |
| [hoverkraft-tech/ci-github-common/.github/workflows/stale.yml](https://github.com/hoverkraft-tech/ci-github-common) | `0.38.0` | `0.39.0` |
| [actions/download-artifact](https://github.com/actions/download-artifact) | `8.0.1` | `8.0.2` |
| [hoverkraft-tech/ci-github-container/.github/workflows/docker-build-images.yml](https://github.com/hoverkraft-tech/ci-github-container) | `0.38.0` | `0.39.0` |
| [hoverkraft-tech/ci-github-common/actions/checkout](https://github.com/hoverkraft-tech/ci-github-common) | `0.38.0` | `0.39.0` |
| [github/codeql-action/init](https://github.com/github/codeql-action) | `4.38.2` | `4.39.0` |
| [github/codeql-action/analyze](https://github.com/github/codeql-action) | `4.38.2` | `4.39.0` |
| [hoverkraft-tech/ci-github-common/actions/working-directory](https://github.com/hoverkraft-tech/ci-github-common) | `0.38.0` | `0.39.0` |
| [hoverkraft-tech/ci-github-common/actions/local-workflow-actions](https://github.com/hoverkraft-tech/ci-github-common) | `0.38.0` | `0.39.0` |



Updates `hoverkraft-tech/ci-github-common/.github/workflows/greetings.yml` from 0.38.0 to 0.39.0
- [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases)
- [Commits](hoverkraft-tech/ci-github-common@3a27d31...ab69f41)

Updates `hoverkraft-tech/ci-github-common/.github/workflows/need-fix-to-issue.yml` from 0.38.0 to 0.39.0
- [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases)
- [Commits](hoverkraft-tech/ci-github-common@3a27d31...ab69f41)

Updates `hoverkraft-tech/ci-github-common/.github/workflows/semantic-pull-request.yml` from 0.38.0 to 0.39.0
- [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases)
- [Commits](hoverkraft-tech/ci-github-common@3a27d31...ab69f41)

Updates `hoverkraft-tech/ci-github-common/.github/workflows/linter.yml` from 0.38.0 to 0.39.0
- [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases)
- [Commits](hoverkraft-tech/ci-github-common@3a27d31...ab69f41)

Updates `hoverkraft-tech/ci-github-common/.github/workflows/stale.yml` from 0.38.0 to 0.39.0
- [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases)
- [Commits](hoverkraft-tech/ci-github-common@3a27d31...ab69f41)

Updates `actions/download-artifact` from 8.0.1 to 8.0.2
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](actions/download-artifact@3e5f45b...9000827)

Updates `hoverkraft-tech/ci-github-container/.github/workflows/docker-build-images.yml` from 0.38.0 to 0.39.0
- [Release notes](https://github.com/hoverkraft-tech/ci-github-container/releases)
- [Commits](hoverkraft-tech/ci-github-container@f8255a6...5ffc3c8)

Updates `hoverkraft-tech/ci-github-common/actions/checkout` from 0.38.0 to 0.39.0
- [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases)
- [Commits](hoverkraft-tech/ci-github-common@3a27d31...ab69f41)

Updates `github/codeql-action/init` from 4.38.2 to 4.39.0
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@2892aa5...6f2ac81)

Updates `github/codeql-action/analyze` from 4.38.2 to 4.39.0
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@2892aa5...6f2ac81)

Updates `hoverkraft-tech/ci-github-common/actions/working-directory` from 0.38.0 to 0.39.0
- [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases)
- [Commits](hoverkraft-tech/ci-github-common@3a27d31...ab69f41)

Updates `hoverkraft-tech/ci-github-common/actions/local-workflow-actions` from 0.38.0 to 0.39.0
- [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases)
- [Commits](hoverkraft-tech/ci-github-common@3a27d31...ab69f41)

---
updated-dependencies:
- dependency-name: hoverkraft-tech/ci-github-common/.github/workflows/greetings.yml
  dependency-version: 0.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-common/.github/workflows/need-fix-to-issue.yml
  dependency-version: 0.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-common/.github/workflows/semantic-pull-request.yml
  dependency-version: 0.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-common/.github/workflows/linter.yml
  dependency-version: 0.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-common/.github/workflows/stale.yml
  dependency-version: 0.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: actions/download-artifact
  dependency-version: 8.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-container/.github/workflows/docker-build-images.yml
  dependency-version: 0.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-common/actions/checkout
  dependency-version: 0.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: github/codeql-action/init
  dependency-version: 4.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: github/codeql-action/analyze
  dependency-version: 4.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-common/actions/working-directory
  dependency-version: 0.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-common/actions/local-workflow-actions
  dependency-version: 0.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Oct 23, 2026
@github-actions

github-actions Bot commented Oct 23, 2026

Copy link
Copy Markdown
Contributor

Hi, thank you for creating your PR, we will check it out very soon

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants