Skip to content

chore(deps): bump the github-actions group across 1 directory with 6 updates - #34

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-4e476e5b93
Open

chore(deps): bump the github-actions group across 1 directory with 6 updates#34
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-4e476e5b93

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 10, 2026 •
edited
Loading

Copy link
Copy Markdown

Bumps the github-actions group with 6 updates in the / directory:

Package From To
actions/checkout 7.0.0 7.0.1
dorny/paths-filter 4.0.1 4.0.3
dprint/check 2.3 2.5
vale-cli/vale-action 2.1.2 3.0.0
orhun/git-cliff-action 4.8.0 4.9.0
softprops/action-gh-release 3.0.1 3.0.3

Updates actions/checkout from 7.0.0 to 7.0.1

Release notes

Sourced from actions/checkout's releases.

v7.0.1

What's Changed

Full Changelog: actions/checkout@v7...v7.0.1

Changelog

Sourced from actions/checkout's changelog.

Changelog

v7.0.1

v7.0.0

v6.0.3

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

... (truncated)

Commits

Updates dorny/paths-filter from 4.0.1 to 4.0.3

Release notes

Sourced from dorny/paths-filter's releases.

v4.0.3

What's Changed

Security

New Contributors

Full Changelog: dorny/paths-filter@v4...v4.0.3

v4.0.2

What's Changed

New Contributors

Full Changelog: dorny/paths-filter@v4.0.1...v4.0.2

Changelog

Sourced from dorny/paths-filter's changelog.

Changelog

v4.0.3

v4.0.2

v4.0.1

v4.0.0

v3.0.4

v3.0.3

v3.0.2

v3.0.1

v3.0.0

v2.11.1

v2.11.0

v2.10.2

... (truncated)

Commits
  • ceb8a2b Update CHANGELOG.md for v4.0.3 and v3.0.4 (#327)
  • ef09b88 Document safe handling of file list outputs in workflows (#326)
  • 44adc5b Merge commit from fork
  • 4711b7a feat: add 'some-with-excludes' predicate quantifier (#322)
  • 93c889f fix: escape multi-line filenames in list-files shell and csv output
  • b41dfa9 docs: add contents permission to PR example (#248)
  • 9af6e5a fix: scope base-ignored warning to API path (#319)
  • cae9006 docs: update outputs in readme to account for the 'every' predicate-quantifie...
  • 7b450ff docs: update changelog for v4.0.2 (#318)
  • 9280377 fix: work around git dubious ownership errors in container jobs (#317)
  • Additional commits viewable in compare view

Updates dprint/check from 2.3 to 2.5

Release notes

Sourced from dprint/check's releases.

v2.5

What's Changed

Full Changelog: dprint/check@v2.4...v2.5

v2.4

What's Changed

  • feat: add opt-in cache input for caching plugins and incremental state dprint/check#23
  • feat: only save the cache when the check changed it dprint/check#25
  • feat: emit an annotation for each file that isn't formatted dprint/check#26
  • feat: download dprint from GitHub releases and verify its attestation dprint/check#27
  • feat: cache the verified dprint download when caching is enabled dprint/check#28
  • feat: summarize diffs that only change line endings dprint/check#29
  • Releases are now immutable.

Full Changelog: dprint/check@v2.3...v2.4

Commits
  • 7dc032d feat: add working-directory input (#34)
  • 7c97667 feat: add unformatted-count and unformatted-files outputs (#33)
  • e2de17c fix: list the remaining files when there are more than GitHub's annotation li...
  • de1d638 fix: annotate only the changed lines (#31)
  • 06e1a58 docs: update README.md for latest version (#30)
  • fe900a7 feat: summarize diffs that only change line endings (#29)
  • d833cf2 feat: cache the verified dprint download when caching is enabled (#28)
  • 5f069db feat: download dprint from GitHub releases and verify its attestation (#27)
  • 510eb9c feat: emit an annotation for each file that isn't formatted (#26)
  • 3c88cd7 feat: only save the cache when the check changed it (#25)
  • Additional commits viewable in compare view

Updates vale-cli/vale-action from 2.1.2 to 3.0.0

Release notes

Sourced from vale-cli/vale-action's releases.

v3.0.0

Breaking

Nothing was renamed or removed, but several behaviors changed. Each has a way back.

  • reviewdog 0.17.0 → 0.21.0. Workflows triggered on push using a github-pr-* reporter previously reported nothing (this is not PullRequest build, exit 0). They now lint, and can fail. Pin reviewdog_version: 0.17.0 to keep the old behavior.
  • The level input is honored. It was read from action.yml and never used. Checks that concluded neutral can now conclude failure. Leave level unset for the previous behavior.
  • fail_on_error: true fails on errors only. It previously failed on a finding of any severity for every reporter except the check ones, so a lone suggestion ended the run. Use fail_level: any to restore that.
  • GitHub's 10-annotation limit no longer fails the job when fail_on_error: false. You get a warning naming how many alerts went unshown.
  • Pinning @reviewdog tracks the branch, which is now v3. Pin @v3, or @v2 to stay put.

Added

  • Suggested fixes. Alerts that Vale knows how to resolve are posted as suggested changes you can commit from the pull request — the same replacements the language server offers. Requires reporter: github-pr-review.
  • macOS, Windows, and ARM runners. The action previously only ran on Linux x86-64.
  • New inputs: config, filter, glob, min_alert_level, fail_level, sync, reviewdog_version. workdir is now declared and documented.
  • Caching. Binaries go in the runner's tool cache, and sync: false lets you restore a cached StylesPath instead of re-downloading every package each run.
  • Downloads are verified against each release's published checksums.

Fixed

  • Crash on large output — write EPIPE when reviewdog exited before reading it all (#122)
  • An empty files list failing with lstat : no such file or directory (#141)
  • Pull requests whose diff exceeds 20,000 lines (#153)
  • The annotation limit failing runs regardless of fail_on_error (#89, #150)
  • A warning failing the workflow under fail_on_error: true (#84)
  • Nothing reported on push events (#103)
  • The level input being ignored (#106)
  • Wildcards in files — use the glob input; the warning now says so (#123)
  • Scheduled runs on runners that write a thin event payload (#69)
  • vale_flags splitting on whitespace, which broke --filter='.Level == "error"'
  • Vale's own error is reported when it exits with a runtime error, instead of an exit code

Internal

The action now ships as a single bundled dist/index.js; node_modules is no longer committed, taking the repository from 1,035 tracked files to 23. CI fails if the bundle is out of date with the source.

Full Changelog: vale-cli/vale-action@2.1.2...v3.0.0

Commits
  • 518a913 Point the README at v3
  • dca64de Backtick reviewdog in the README
  • 4063152 Add a fail_level input
  • 1ef5a5f Move the major tag ourselves, whatever the release is called
  • 00a15b5 Treat an empty file list as nothing to lint
  • 40967b1 Point wildcard paths at the glob input
  • d4af982 Survive reviewdog closing its input early
  • febea0f Fail on errors, not on any finding
  • b1d1c1f Give reviewdog a repository when the event payload omits one
  • 6b637c5 Note what a fork's read-only token can't do
  • Additional commits viewable in compare view

Updates orhun/git-cliff-action from 4.8.0 to 4.9.0

Release notes

Sourced from orhun/git-cliff-action's releases.

v4.9.0

[4.9.0] - 2026-09-01

🐛 Bug Fixes

  • Use BSD-compatible stat format on macOS (#80)
  • (action) Terminate content output with a newline (#81)

⚙️ Miscellaneous Tasks

  • (sync) Resolve github cli login (#79)
  • Bump git-cliff to v2.14.1 (#85)
Commits
  • 3d96a18 chore: bump git-cliff to v2.14.1 (#85)
  • 7be73ff chore(deps): bump actions/checkout in the patch group (#84)
  • 4d0efd7 chore(deps): bump actions/checkout from 6.0.2 to 7.0.0 (#83)
  • 11ab60a fix(action): terminate content output with a newline (#81)
  • bd36f27 fix: use BSD-compatible stat format on macOS (#80)
  • 61c9254 ci(sync): resolve github cli login (#79)
  • See full diff in compare view

Updates softprops/action-gh-release from 3.0.1 to 3.0.3

Release notes

Sourced from softprops/action-gh-release's releases.

v3.0.3

3.0.3 is a maintenance release with updated dependencies. It also safely classifies malformed GitHub API errors to avoid secondary failures (#822).

What's Changed

Bug fixes 🐛

Other Changes 🔄

  • dependency updates

v3.0.2

3.0.2 is a patch release focused on release reliability and compatibility. It reuses existing draft releases when publishing prereleases, supports replacing release assets on Gitea, hardens streamed asset uploads, and provides clearer release-creation diagnostics. It also includes TypeScript, coverage, and tooling maintenance merged since 3.0.1.

This release fixes #795, #438, and #803. The upload transport hardening covers the historical failure reported in #790, although current hosted Node 24 runners did not reproduce it naturally. The diagnostics work is related to #786 and does not claim a reproducible release-creation fix.

What's Changed

Exciting New Features 🎉

Bug fixes 🐛

Other Changes 🔄

Changelog

Sourced from softprops/action-gh-release's changelog.

3.0.3

3.0.3 is a maintenance release with updated dependencies. It also safely classifies malformed GitHub API errors to avoid secondary failures (#822).

What's Changed

Bug fixes 🐛

Other Changes 🔄

  • dependency updates

3.0.2

3.0.2 is a patch release focused on release reliability and compatibility. It reuses existing draft releases when publishing prereleases, supports replacing release assets on Gitea, hardens streamed asset uploads, and provides clearer release-creation diagnostics. It also includes TypeScript, coverage, and tooling maintenance merged since 3.0.1.

This release fixes #795, #438, and #803. The upload transport hardening covers the historical failure reported in #790, although current hosted Node 24 runners did not reproduce it naturally. The diagnostics work is related to #786 and does not claim a reproducible release-creation fix.

What's Changed

Exciting New Features 🎉

Bug fixes 🐛

Other Changes 🔄

3.0.1

  • maintenance release with updated dependencies

... (truncated)

Commits
  • efb3536 release 3.0.3 (#840)
  • 6441963 chore(deps): bump the npm group with 2 updates (#839)
  • e5ee6bc chore(deps): bump esbuild from 0.28.1 to 0.28.2 in the npm group (#837)
  • d1e6617 chore(deps): bump undici from 6.27.0 to 6.28.0 (#831)
  • 6403751 chore(deps): bump the npm group with 2 updates (#835)
  • 7c7184b chore(deps): bump postcss from 8.5.19 to 8.5.25 (#833)
  • 0f3f0d2 chore(deps): bump brace-expansion from 5.0.8 to 5.0.9 (#832)
  • 77fb938 chore(deps): bump prettier from 3.9.5 to 3.9.6 in the npm group (#830)
  • 5a6f517 chore(deps): bump brace-expansion from 5.0.7 to 5.0.8 (#828)
  • a3c91c9 chore(deps): bump the github-actions group with 2 updates (#825)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the github-actions group across 1 directory with 6 …
00f786c 
…updates

Bumps the github-actions group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `7.0.0` | `7.0.1` |
| [dorny/paths-filter](https://github.com/dorny/paths-filter) | `4.0.1` | `4.0.3` |
| [dprint/check](https://github.com/dprint/check) | `2.3` | `2.5` |
| [vale-cli/vale-action](https://github.com/vale-cli/vale-action) | `2.1.2` | `3.0.0` |
| [orhun/git-cliff-action](https://github.com/orhun/git-cliff-action) | `4.8.0` | `4.9.0` |
| [softprops/action-gh-release](https://github.com/softprops/action-gh-release) | `3.0.1` | `3.0.3` |



Updates `actions/checkout` from 7.0.0 to 7.0.1
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@9c091bb...3d3c42e)

Updates `dorny/paths-filter` from 4.0.1 to 4.0.3
- [Release notes](https://github.com/dorny/paths-filter/releases)
- [Changelog](https://github.com/dorny/paths-filter/blob/master/CHANGELOG.md)
- [Commits](dorny/paths-filter@fbd0ab8...ceb8a2b)

Updates `dprint/check` from 2.3 to 2.5
- [Release notes](https://github.com/dprint/check/releases)
- [Commits](dprint/check@9cb3a2b...7dc032d)

Updates `vale-cli/vale-action` from 2.1.2 to 3.0.0
- [Release notes](https://github.com/vale-cli/vale-action/releases)
- [Commits](vale-cli/vale-action@85f9f7f...518a913)

Updates `orhun/git-cliff-action` from 4.8.0 to 4.9.0
- [Release notes](https://github.com/orhun/git-cliff-action/releases)
- [Commits](orhun/git-cliff-action@f50e115...3d96a18)

Updates `softprops/action-gh-release` from 3.0.1 to 3.0.3
- [Release notes](https://github.com/softprops/action-gh-release/releases)
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md)
- [Commits](softprops/action-gh-release@718ea10...efb3536)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: dorny/paths-filter
  dependency-version: 4.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: dprint/check
  dependency-version: '2.5'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: vale-cli/vale-action
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: orhun/git-cliff-action
  dependency-version: 4.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: softprops/action-gh-release
  dependency-version: 3.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Sep 10, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants