Skip to content

Bump oras-project/setup-oras from 1.2.4 to 2.0.1 - #19

Merged
avrabe merged 1 commit into
mainfrom
dependabot/github_actions/oras-project/setup-oras-2.0.1
Sep 25, 2026
Merged

avrabe merged 1 commit into
mainfrom
dependabot/github_actions/oras-project/setup-oras-2.0.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 25, 2026 •

Copy link
Copy Markdown
Contributor

Bumps oras-project/setup-oras from 1.2.4 to 2.0.1.

Release notes

Sourced from oras-project/setup-oras's releases.

v2.0.1

Highlights

What's Changed

  • chore: update releases.json for 1.3.2 (#167)
  • chore: update releases.json for 1.3.3 (#182)
  • feat: automate releases.json updates via GitHub Actions workflow (#171)
  • fix: retry post-creation API calls on 422 eventual consistency errors
  • ci: sign automated release-update commits (#183)
  • chore(deps): Bump @​actions/core to 3.0.1, esbuild to 0.28.1, typescript to 6.0.3, actions/checkout to v7, and @​types/node

Full Changelog: oras-project/setup-oras@v2.0.0...v2.0.1

v2.0.0

Highlights

What's Changed

  • Add version 1.3.1 with checksums (#150)
  • feat: migrate action runtime from node20 to node24 (#153)
  • fix: pin undici to >=6.24.1 to address CVEs (#157)
  • chore(deps): bump @​actions/core to 3.x and @​actions/tool-cache to 4.x (#159)
  • chore(deps): Bump @​actions/core from 1.11.1 to 2.0.1 (#130)
  • chore(deps): Bump typescript from 5.9.2 to 6.0.2 (#151)
  • chore(deps): Bump actions/checkout from 5 to 6 (#128)
  • chore(deps): Bump actions/setup-node from 5 to 6 (#123)
  • chore(deps): Bump @​types/node from 24.12.0 to 25.5.2 (multiple PRs)

Full Changelog: oras-project/setup-oras@v1.2.4...v2.0.0

Commits
  • 1d808f7 chore: update releases.json for 1.3.3 (#182)
  • b38537d ci: sign automated release-update commits (#183)
  • 6f3b32c chore(deps): Bump @​types/node from 26.0.1 to 26.1.0 (#181)
  • fb503f0 chore(deps): Bump @​types/node from 26.0.0 to 26.0.1 (#180)
  • 4aa197c chore(deps): Bump @​types/node from 25.9.3 to 26.0.0 (#178)
  • 0c499ae chore(deps): Bump actions/checkout from 6 to 7 (#179)
  • 82faa22 chore(deps): Bump @​types/node from 25.9.2 to 25.9.3 (#177)
  • f8710a5 chore(deps): Bump esbuild from 0.28.0 to 0.28.1 (#176)
  • ce8d0d5 chore(deps): Bump @​types/node from 25.9.1 to 25.9.2 (#175)
  • ae76689 chore(deps): Bump peter-evans/create-pull-request from 7 to 8 (#173)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added the dependencies Dependency updates label Sep 25, 2026
Bumps [oras-project/setup-oras](https://github.com/oras-project/setup-oras) from 1.2.4 to 2.0.1.
- [Release notes](https://github.com/oras-project/setup-oras/releases)
- [Commits](oras-project/setup-oras@22ce207...1d808f7)

---
updated-dependencies:
- dependency-name: oras-project/setup-oras
  dependency-version: 2.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/oras-project/setup-oras-2.0.1 branch from e8f6816 to 7863547 Compare September 25, 2026 15:57
@avrabe
avrabe merged commit 5153dcc into main Sep 25, 2026
1 check passed
@avrabe
avrabe deleted the dependabot/github_actions/oras-project/setup-oras-2.0.1 branch September 25, 2026 16:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Dependency updates

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant