Skip to content

build(deps): Bump the all-actions group across 1 directory with 6 updates - #2049

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/all-actions-b612bf5a23
Open

build(deps): Bump the all-actions group across 1 directory with 6 updates#2049
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/all-actions-b612bf5a23

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 3, 2026

Copy link
Copy Markdown
Contributor

Bumps the all-actions group with 6 updates in the / directory:

Package From To
actions/checkout 6.0.3 7.0.1
azure/setup-helm 5.0.0 5.0.1
redhat-actions/oc-login 1.3 2.0
actions/stale 10.3.0 11.0.0
actions/setup-python 6.2.0 7.0.0
actions/setup-node 6.4.0 7.0.0

Updates actions/checkout from 6.0.3 to 7.0.1

Release notes

Sourced from actions/checkout's releases.

v7.0.1

What's Changed

Full Changelog: actions/checkout@v7...v7.0.1

v7.0.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v6.0.3...v7.0.0

v6.1.0

What's Changed

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: actions/checkout@v6.0.3...v6.1.0

Changelog

Sourced from actions/checkout's changelog.

Changelog

v7.0.1

v7.0.0

v6.0.3

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

... (truncated)

Commits

Updates azure/setup-helm from 5.0.0 to 5.0.1

Release notes

Sourced from azure/setup-helm's releases.

v5.0.1

Fixed

Changed

Changelog

Sourced from azure/setup-helm's changelog.

Change Log

[5.0.1] - 2026-06-23

Fixed

Changed

[5.0.0] - 2026-03-23

Changed

... (truncated)

Commits
  • 9bc31f4 build
  • 95ecf49 Bump version to 5.0.1 and update CHANGELOG with recent changes (#287)
  • 4180b1c Bump the actions group with 2 updates (#285)
  • 6949b7f Bump undici (#284)
  • 51ce767 Bump actions/checkout in /.github/workflows in the actions group (#286)
  • d6da4f4 Bump the actions group with 5 updates (#283)
  • 7e2bc10 Bump actions/checkout in /.github/workflows in the actions group (#280)
  • 64d6be9 Bump the actions group with 2 updates (#279)
  • 69214f9 fix: use chmod 755 instead of 777 for downloaded helm binary and folder (#278)
  • 9dad99f Bump vitest from 4.1.7 to 4.1.8 in the actions group (#277)
  • Additional commits viewable in compare view

Updates redhat-actions/oc-login from 1.3 to 2.0

Release notes

Sourced from redhat-actions/oc-login's releases.

v2.0

Breaking Changes

  • Node.js 24 runtime: The action now runs on Node.js 24. GitHub runners must support node24 actions.
  • KUBECONFIG set before login: The action now sets KUBECONFIG to $GITHUB_WORKSPACE/kubeconfig.yaml before running oc login, so oc writes directly to an isolated file instead of ~/.kube/config. This fixes race conditions on self-hosted runners but may affect workflows that depend on the previous behavior of writing to ~/.kube/config first.
  • Post-step logout: The action now logs out of OpenShift and removes the kubeconfig file at the end of the job by default. Set logout: false to preserve the previous behavior.

Features

  • OIDC authentication (#42): New use_oidc and oidc_audience inputs enable authentication using GitHub's OIDC tokens for workload identity federation. Requires the cluster's API server to be configured with GitHub as an OIDC provider.
  • Optional server URL (#24): openshift_server_url is no longer required. When omitted, oc login uses the existing kubeconfig context on the runner.
  • Post-step logout (#2): New logout input (default: true) controls whether the action logs out and cleans up the kubeconfig at the end of the job. Recommended for self-hosted runners.
  • Race condition fix (#41): Concurrent jobs on self-hosted runners no longer clobber each other's kubeconfig by writing to a shared ~/.kube/config.

Dependencies

  • Upgraded @actions/core to v3.0.1, @actions/exec to v3.0.0, js-yaml to v5.2.1
  • Upgraded TypeScript to 6.x, ESLint to 10.x with flat config
  • Upgraded @vercel/ncc to 0.44.x
  • Bundle size reduced from 539kB to 86kB

CI & Infrastructure

  • Migrated all workflows to ubuntu-24.04 with actions/checkout@v7 and actions/setup-node@v7
  • Added permissions: contents: read and concurrency groups to all workflows
  • Added path filters to avoid unnecessary CI runs
  • Replaced archived gaurav-nelson/github-action-markdown-link-check with lycheeverse/lychee-action@v2
  • Removed dead workflows: CRDA vulnerability scan, OpenShift 3 tests, broken multiplatform and OpenShift cron jobs
  • Added Dependabot configuration for npm and GitHub Actions dependencies
  • Added .github/CODEOWNERS
  • Enabled secret scanning and push protection

Tests

  • Added unit tests for auth and kubeconfig modules (29 -> 52 tests)
  • Added inputs-outputs.test.ts to verify action.yml and TypeScript enum consistency

See CHANGELOG.md for full details.

Changelog

Sourced from redhat-actions/oc-login's changelog.

oc-login Changelog

v2.0.1

Fixes

  • Replaced @vercel/ncc with esbuild: ncc cannot bundle ESM-only @actions/core v3 and @actions/exec v3 dependencies, producing a broken bundle that crashes at runtime with Cannot find module '@actions/core'. esbuild handles ESM-to-CJS bundling natively.

Dependencies

  • Bumped js-yaml from ^5.2.1 to ^5.2.2 (resolves high severity Dependabot alert)

Tests

  • Added bundle integrity test to catch unresolved module stubs in the distribution
  • Added bundle loadability integration test to verify the bundle loads without MODULE_NOT_FOUND errors
  • Enabled the test suite in CI (ci-checks.yml)

v2.0

Breaking Changes

  • Node.js 24 runtime: The action now runs on Node.js 24. GitHub runners must support node24 actions.
  • KUBECONFIG set before login: The action now sets KUBECONFIG to $GITHUB_WORKSPACE/kubeconfig.yaml before running oc login, so oc writes directly to an isolated file instead of ~/.kube/config. This fixes race conditions on self-hosted runners but may affect workflows that depend on the previous behavior of writing to ~/.kube/config first.
  • Post-step logout: The action now logs out of OpenShift and removes the kubeconfig file at the end of the job by default. Set logout: false to preserve the previous behavior.

Features

  • OIDC authentication (#42): New use_oidc and oidc_audience inputs enable authentication using GitHub's OIDC tokens for workload identity federation. Requires the cluster's API server to be configured with GitHub as an OIDC provider.
  • Optional server URL (#24): openshift_server_url is no longer required. When omitted, oc login uses the existing kubeconfig context on the runner.
  • Post-step logout (#2): New logout input (default: true) controls whether the action logs out and cleans up the kubeconfig at the end of the job. Recommended for self-hosted runners.
  • Race condition fix (#41): Concurrent jobs on self-hosted runners no longer clobber each other's kubeconfig by writing to a shared ~/.kube/config.

Dependencies

  • Upgraded @actions/core to v3.0.1, @actions/exec to v3.0.0, js-yaml to v5.2.1
  • Upgraded TypeScript to 6.x, ESLint to 10.x with flat config
  • Replaced @vercel/ncc with esbuild (see v2.0.1)

CI & Infrastructure

  • Migrated all workflows to ubuntu-24.04 with actions/checkout@v7 and actions/setup-node@v7
  • Added permissions: contents: read and concurrency groups to all workflows
  • Added path filters to avoid unnecessary CI runs
  • Replaced archived gaurav-nelson/github-action-markdown-link-check with lycheeverse/lychee-action@v2
  • Removed dead workflows: CRDA vulnerability scan, OpenShift 3 tests, broken multiplatform and OpenShift cron jobs
  • Added Dependabot configuration for npm and GitHub Actions dependencies
  • Added .github/CODEOWNERS
  • Enabled secret scanning and push protection

Tests

  • Added unit tests for auth and kubeconfig modules (29 -> 52 tests)
  • Added inputs-outputs.test.ts to verify action.yml and TypeScript enum consistency

v1.3

... (truncated)

Commits
  • f19c5f4 Merge pull request #65 from redhat-actions/chore/changelog-v2
  • 20060b1 chore: update changelog and bump version to 2.0.0
  • 217904c Merge pull request #64 from redhat-actions/test/auth-kubeconfig-unit-tests
  • 5aacaf1 test: add unit tests for auth and kubeconfig modules
  • c2f14a3 Merge pull request #63 from redhat-actions/feat/race-condition-oidc-optional-...
  • 4b3ccf3 fix: race condition, optional server URL, and OIDC support
  • 003762b Merge pull request #62 from redhat-actions/chore/cleanup-workflows-readme
  • 37dbe2b chore: remove dead workflows, disable broken crons, fix README badges
  • 232fca5 Merge pull request #61 from redhat-actions/chore/remove-crda-workflow
  • c3987b7 chore: remove CRDA vulnerability scan workflow
  • Additional commits viewable in compare view

Updates actions/stale from 10.3.0 to 11.0.0

Release notes

Sourced from actions/stale's releases.

v11.0.0

What's Changed

Enhancement

Dependency Update

Full Changelog: actions/stale@v10...v11.0.0

v10.4.0

What's Changed

Bug Fix

Dependency Updates

New Contributors

Full Changelog: actions/stale@v10.3.0...v10.4.0

Commits
  • 4391f3d Fix 24 high severity vulnerabilities by overriding brace-expansion to 5.0.8 (...
  • eaf9131 refactor: update imports to use ES module syntax and improve test structure (...
  • 1e223db Bump undici to 6.27.0 via override, clean up stale license files, and version...
  • 9461cb1 fix: only-issue-types does not affect PRs (#1338)
  • See full diff in compare view

Updates actions/setup-python from 6.2.0 to 7.0.0

Release notes

Sourced from actions/setup-python's releases.

v7.0.0

What's Changed

Enhancements

Bug Fix

Dependency Upgrade

New Contributors

Full Changelog: actions/setup-python@v6...v7.0.0

v6.3.0

What's Changed

Enhancement

Dependency update

Documentation

New Contributors

Full Changelog: actions/setup-python@v6.2.0...v6.3.0

Commits

Updates actions/setup-node from 6.4.0 to 7.0.0

Release notes

Sourced from actions/setup-node's releases.

v7.0.0

What's Changed

Enhancements:

Bug fixes:

Documentation updates:

Dependency update:

New Contributors

Full Changelog: actions/setup-node@v6...v7.0.0

v6.5.0

What's Changed

Full Changelog: actions/setup-node@v6.4.0...v6.5.0

Commits
  • 8207627 Migrate to ESM and upgrade dependencies (#1574)
  • 04be95c Add cache-primary-key and cache-matched-key as outputs (#1577)
  • 7c2c68d docs: Update caching recommendations to mitigate cache poisoning risks (#1567)
  • 6a61c03 Merge pull request #1569 from jasongin/update-actions-cache-5.1.0
  • 30eb73b Resolve high-severity audit issues
  • 4e1a87a Update dist
  • 360237f Strict equality
  • 4f8aac5 Bump @​actions/cache to 5.1.0, log cache write denied
  • f4a67bb Only use mirrorToken in getManifest if it's provided (#1548)
  • 0355742 Remove dummy NODE_AUTH_TOKEN export (#1558)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…ates

Bumps the all-actions group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `6.0.3` | `7.0.1` |
| [azure/setup-helm](https://github.com/azure/setup-helm) | `5.0.0` | `5.0.1` |
| [redhat-actions/oc-login](https://github.com/redhat-actions/oc-login) | `1.3` | `2.0` |
| [actions/stale](https://github.com/actions/stale) | `10.3.0` | `11.0.0` |
| [actions/setup-python](https://github.com/actions/setup-python) | `6.2.0` | `7.0.0` |
| [actions/setup-node](https://github.com/actions/setup-node) | `6.4.0` | `7.0.0` |



Updates `actions/checkout` from 6.0.3 to 7.0.1
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@df4cb1c...3d3c42e)

Updates `azure/setup-helm` from 5.0.0 to 5.0.1
- [Release notes](https://github.com/azure/setup-helm/releases)
- [Changelog](https://github.com/Azure/setup-helm/blob/main/CHANGELOG.md)
- [Commits](Azure/setup-helm@dda3372...9bc31f4)

Updates `redhat-actions/oc-login` from 1.3 to 2.0
- [Release notes](https://github.com/redhat-actions/oc-login/releases)
- [Changelog](https://github.com/redhat-actions/oc-login/blob/main/CHANGELOG.md)
- [Commits](redhat-actions/oc-login@5eb45e8...f19c5f4)

Updates `actions/stale` from 10.3.0 to 11.0.0
- [Release notes](https://github.com/actions/stale/releases)
- [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md)
- [Commits](actions/stale@eb5cf3a...4391f3d)

Updates `actions/setup-python` from 6.2.0 to 7.0.0
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](actions/setup-python@a309ff8...5fda3b9)

Updates `actions/setup-node` from 6.4.0 to 7.0.0
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@48b55a0...8207627)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-actions
- dependency-name: azure/setup-helm
  dependency-version: 5.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-actions
- dependency-name: redhat-actions/oc-login
  dependency-version: '2.0'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-actions
- dependency-name: actions/stale
  dependency-version: 11.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-actions
- dependency-name: actions/setup-python
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-actions
- dependency-name: actions/setup-node
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Aug 3, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

Status: No status

Development

Successfully merging this pull request may close these issues.

0 participants