build(deps): bump the actions group across 1 directory with 9 updates - #5243
Open
dependabot[bot] wants to merge 1 commit into
Open
build(deps): bump the actions group across 1 directory with 9 updates#5243dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
dependabot
Bot
requested review from
Mark Cowlishaw (markcowl),
Timothee Guerin (timotheeguerin) and
Jeff Fisher (xirzec)
as code owners
August 17, 2026 14:11
Contributor
📦 Package size report✅ No notable package size changes compared to the base branch. 13 package(s) with no notable change
Packed = gzipped |
|
Azure Pipelines: 1 pipeline(s) were filtered out due to trigger conditions. There may be pipelines that require an authorized user to comment /azp run to run. |
Bumps the actions group with 9 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github/gh-aw-actions/setup](https://github.com/github/gh-aw-actions) | `0.86.2` | `0.87.0` | | [actions/github-script](https://github.com/actions/github-script) | `7` | `9` | | [github/gh-aw-actions/setup-cli](https://github.com/github/gh-aw-actions) | `0.86.2` | `0.87.0` | | [actions/download-artifact](https://github.com/actions/download-artifact) | `4` | `8` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4` | `7` | | [actions/setup-dotnet](https://github.com/actions/setup-dotnet) | `5` | `6` | | [github/codeql-action](https://github.com/github/codeql-action) | `4.37.4` | `4.37.7` | | [github/gh-aw](https://github.com/github/gh-aw) | `0.83.4` | `0.86.2` | | [jdx/mise-action](https://github.com/jdx/mise-action) | `4.2.4` | `4.2.5` | Updates `github/gh-aw-actions/setup` from 0.86.2 to 0.87.0 - [Release notes](https://github.com/github/gh-aw-actions/releases) - [Changelog](https://github.com/github/gh-aw-actions/blob/main/CHANGELOG.md) - [Commits](github/gh-aw-actions@6aab9e5...b77e0d5) Updates `actions/github-script` from 7 to 9 - [Release notes](https://github.com/actions/github-script/releases) - [Commits](actions/github-script@v7...v9) Updates `github/gh-aw-actions/setup-cli` from 0.86.2 to 0.87.0 - [Release notes](https://github.com/github/gh-aw-actions/releases) - [Changelog](https://github.com/github/gh-aw-actions/blob/main/CHANGELOG.md) - [Commits](github/gh-aw-actions@6aab9e5...b77e0d5) Updates `actions/download-artifact` from 4 to 8 - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](actions/download-artifact@v4...v8) Updates `actions/upload-artifact` from 4 to 7 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@v4...v7) Updates `actions/setup-dotnet` from 5 to 6 - [Release notes](https://github.com/actions/setup-dotnet/releases) - [Commits](actions/setup-dotnet@v5...v6) Updates `github/codeql-action` from 4.37.4 to 4.37.7 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@v4.37.4...v4.37.7) Updates `github/gh-aw` from 0.83.4 to 0.86.2 - [Release notes](https://github.com/github/gh-aw/releases) - [Changelog](https://github.com/github/gh-aw/blob/main/CHANGELOG.md) - [Commits](github/gh-aw@v0.83.4...v0.86.2) Updates `jdx/mise-action` from 4.2.4 to 4.2.5 - [Release notes](https://github.com/jdx/mise-action/releases) - [Changelog](https://github.com/jdx/mise-action/blob/main/CHANGELOG.md) - [Commits](jdx/mise-action@7e36c90...3c2e0cf) --- updated-dependencies: - dependency-name: actions/download-artifact dependency-version: '8' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/github-script dependency-version: '9' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/setup-dotnet dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/upload-artifact dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: github/codeql-action dependency-version: 4.37.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: github/gh-aw dependency-version: 0.86.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: github/gh-aw-actions/setup dependency-version: 0.86.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: github/gh-aw-actions/setup-cli dependency-version: 0.86.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: jdx/mise-action dependency-version: 4.2.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
force-pushed
the
dependabot/github_actions/actions-c26ec2d97c
branch
from
August 20, 2026 05:20
f263efb to
98e412b
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the actions group with 9 updates in the / directory:
0.86.20.87.0790.86.20.87.04847564.37.44.37.70.83.40.86.24.2.44.2.5Updates
github/gh-aw-actions/setupfrom 0.86.2 to 0.87.0Release notes
Sourced from github/gh-aw-actions/setup's releases.
Commits
b77e0d5chore: sync actions from gh-aw@v0.87.0 (#214)30aadb1chore: sync actions from gh-aw@v0.86.3 (#213)Updates
actions/github-scriptfrom 7 to 9Release notes
Sourced from actions/github-script's releases.
... (truncated)
Commits
3a2844bMerge pull request #700 from actions/salmanmkc/expose-getoctokit + prepare re...ca10bbdfix: use@octokit/core/types import for v7 compatibility86e48e2merge: incorporate main branch changesc108472chore: rebuild dist for v9 upgrade and getOctokit factoryafff112Merge pull request #712 from actions/salmanmkc/deployment-false + fix user-ag...ff8117eci: fix user-agent test to handle orchestration ID81c6b78ci: use deployment: false to suppress deployment noise from integration tests3953cafdocs: update README examples from@v8to@v9, add getOctokit docs and v9 brea...c17d55bci: add getOctokit integration test joba047196test: add getOctokit integration tests via callAsyncFunctionUpdates
github/gh-aw-actions/setup-clifrom 0.86.2 to 0.87.0Release notes
Sourced from github/gh-aw-actions/setup-cli's releases.
Commits
b77e0d5chore: sync actions from gh-aw@v0.87.0 (#214)30aadb1chore: sync actions from gh-aw@v0.86.3 (#213)Updates
actions/download-artifactfrom 4 to 8Release notes
Sourced from actions/download-artifact's releases.
... (truncated)
Commits
3e5f45bAdd regression tests for CJK characters (#471)e6d03f6Add a regression test for artifact name + content-type mismatches (#472)70fc10cMerge pull request #461 from actions/danwkennedy/digest-mismatch-behaviorf258da9Add change docsccc058eFix linting issuesbd7976bAdd a setting to specify what to do on hash mismatch and default it toerrorac21fcfMerge pull request #460 from actions/danwkennedy/download-no-unzip15999bfAdd note about package bumps974686eBump the version tov8and add release notesfbe48b1Update test names to make it clearer what they doUpdates
actions/upload-artifactfrom 4 to 7Release notes
Sourced from actions/upload-artifact's releases.
... (truncated)
Commits
043fb46Merge pull request #797 from actions/yacaovsnc/update-dependency634250cInclude changes in typespec/ts-http-runtime 0.3.5e454baaReadme: bump all the example versions to v7 (#796)74fad66Update the readme with direct upload details (#795)bbbca2dSupport direct file uploads (#764)589182cUpgrade the module to ESM and bump dependencies (#762)47309c9Merge pull request #754 from actions/Link-/add-proxy-integration-tests02a8460Add proxy integration testb7c566aMerge pull request #745 from actions/upload-artifact-v6-releasee516bc8docs: correct description of Node.js 24 support in READMEUpdates
actions/setup-dotnetfrom 5 to 6Release notes
Sourced from actions/setup-dotnet's releases.
... (truncated)
Commits
a98b568chore(deps): bump@actions/cacheto 6.2.0 (#756)afb2931Bump actions/checkout from 6.0.3 to 7.0.0 (#751)6df8cefMigrate to ESM and upgrade dependencies (#752)Updates
github/codeql-actionfrom 4.37.4 to 4.37.7Release notes
Sourced from github/codeql-action's releases.
Changelog
Sourced from github/codeql-action's changelog.
Commits
ff2f1c6Merge pull request #4093 from github/update-v4.37.7-be7a3dbb8951a133Update changelog for v4.37.7be7a3dbMerge pull request #4087 from github/dependabot/npm_and_yarn/npm-minor-0aa561...9310334Merge pull request #4086 from github/mbg/thread-action-state-to-codeqlb4d8a54Rebuildab5db25Bump the npm-minor group across 1 directory with 8 updates38055a3DroploggerfromdatabaseInitClusterin interface1f87aedMerge pull request #4085 from github/update-bundle/codeql-bundle-v2.26.3dc1b98aMakeloggeravailable togetCodeQLForCmd6f0220eMerge pull request #4084 from github/navntoft/bump-undiciUpdates
github/gh-awfrom 0.83.4 to 0.86.2Release notes
Sourced from github/gh-aw's releases.
... (truncated)
Commits
48e5fa3Clarify Claude engine selection in automated bootstrap (#52099)9699516Fix inverted strict: mode documentation in frontmatter reference (#52100)fa5e232Improve GitHub Agentic Workflows documentation discoverability (#52065)85f9048Normalize report formatting in video-analyzer, plan, and centralization-drill...1dd49c6Suppress benign workflow exfiltration findings (#52083)c636d5fdocs: document--runtimeflag forgh aw logsandgh aw audit(#52076)62647efHarden scanner/relaunch exec trust boundaries and argument validation (#52032)9922b2fHarden remote workflow import fallbacks to prevent cross-host downgrade to pu...81a1321Remediate dynamic regexp pattern findings (#51941)485f970[aw] Reduce Daily PR review tool-denial failures in Copilot SDK runs (#52060)Updates
jdx/mise-actionfrom 4.2.4 to 4.2.5Release notes
Sourced from jdx/mise-action's releases.
Changelog
Sourced from jdx/mise-action's changelog.
... (truncated)
Commits
3c2e0cfchore: release v4.2.5 (#598)9dda395fix: retry mise downloads after transient failures (#597)9d2b311chore(deps): update github/codeql-action action to v4.37.6 (#593)4213fbbchore(deps): update jdx/mise-action action to v4.2.4 (#594)672dbd2chore(deps): update zizmorcore/zizmor-action action to v0.6.2 (#595)5159765chore(deps): lock file maintenance (#592)c75b4f6chore(deps): update jdx/mise-action action to v4.2.3 (#590)367cc0dchore(deps): update github/codeql-action action to v4.37.3 (#589)90e6e66chore(deps): update zizmorcore/zizmor-action action to v0.6.1 (#591)7350bb8chore(deps): lock file maintenance (#588)