Skip to content

ci(deps): bump the github-actions group with 4 updates - #559

Merged
github-actions[bot] merged 1 commit into
mainfrom
dependabot/github_actions/github-actions-6d918f2ea1
Aug 15, 2026
Merged

ci(deps): bump the github-actions group with 4 updates#559
github-actions[bot] merged 1 commit into
mainfrom
dependabot/github_actions/github-actions-6d918f2ea1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 15, 2026

Copy link
Copy Markdown
Contributor

Bumps the github-actions group with 4 updates: anomalyco/opencode/github, google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml, google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml and swatinem/rust-cache.

Updates anomalyco/opencode/github from 1.18.14 to 1.18.17

Release notes

Sourced from anomalyco/opencode/github's releases.

v1.18.17

Core

Bugfixes

  • Made session compaction keep complete recent turns and produce clearer summaries for smaller models.
  • Added MERGE Gateway reasoning variants so those model options work correctly. (@​MatthewFeroz)
  • Capped automatic session retries and added jitter to reduce repeated retry storms.
  • Enabled PDF attachments for GitHub Copilot models that advertise PDF vision support. (@​stevenao)
  • Applied the correct sampling defaults to DeepSeek V4 Flash on supported providers.
  • Routed all Muse family models to the correct Meta system prompt. (@​mreso)

Desktop

Bugfixes

  • Updated Chinese developer terminology to use more widely recognized translations.
  • Used the server's current default model instead of stale local config when choosing the default model.

Thank you to 6 community contributors:

v1.18.16

Core

Bugfixes

  • Ignore unknown top-level config fields instead of failing config parsing
  • Register projects opened from Home so they are available to the rest of the app

Desktop

Improvements

  • Open the project menu with a right-click in Home

Bugfixes

... (truncated)

Commits
  • 02546df release: v1.18.17
  • dab2637 fix(compaction): adjust instructions and structure to be more clear to smalle...
  • 39fb919 chore: add neriousy to team members (#42107)
  • 999be62 chore: generate
  • 521906f docs(go): clarify DeepSeek ZDR coverage (#42085)
  • 069165e Merge branch 'dev' of github.com:anomalyco/opencode into dev
  • df09c3e update ds v4 pro
  • 6d3ae4d chore: generate
  • 284187a fix(ci): authenticate pulumi downloads
  • 7e0353c fix(stats): correct r2 daily totals
  • Additional commits viewable in compare view

Updates google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml from 2.3.8 to 2.5.0

Release notes

Sourced from google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml's releases.

v2.5.0

This updates OSV-Scanner to v2.5.0 as well as:

What's Changed

New Contributors

Full Changelog: google/osv-scanner-action@v2.3.8...v2.5.0

Commits
  • 8deb546 Merge pull request #140 from google/update-to-v2.5.0
  • 8fb3f8c Update unified workflow example to point to v2.5.0 reusable workflows
  • 0c58c54 Update reusable workflows to point to v2.5.0 actions
  • 06b2ab4 "Update actions to use v2.5.0 osv-scanner image"
  • 9fd1bcc Merge pull request #138 from google/fix/gotoolchain-auto
  • 01a87d5 fix: add GOTOOLCHAIN=auto env to osv-scanner calls
  • a82132c Merge pull request #135 from google/fix-zizmor-excessive-permissions
  • 272ff57 fix: address zizmor template injection warnings
  • 10621fb refactor: move permissions to job level to satisfy zizmor
  • fa4ff67 Merge pull request #131 from BeyondEvil/feat/add-runs-on-input
  • Additional commits viewable in compare view

Updates google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml from 2.3.8 to 2.5.0

Release notes

Sourced from google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml's releases.

v2.5.0

This updates OSV-Scanner to v2.5.0 as well as:

What's Changed

New Contributors

Full Changelog: google/osv-scanner-action@v2.3.8...v2.5.0

Commits
  • 8deb546 Merge pull request #140 from google/update-to-v2.5.0
  • 8fb3f8c Update unified workflow example to point to v2.5.0 reusable workflows
  • 0c58c54 Update reusable workflows to point to v2.5.0 actions
  • 06b2ab4 "Update actions to use v2.5.0 osv-scanner image"
  • 9fd1bcc Merge pull request #138 from google/fix/gotoolchain-auto
  • 01a87d5 fix: add GOTOOLCHAIN=auto env to osv-scanner calls
  • a82132c Merge pull request #135 from google/fix-zizmor-excessive-permissions
  • 272ff57 fix: address zizmor template injection warnings
  • 10621fb refactor: move permissions to job level to satisfy zizmor
  • fa4ff67 Merge pull request #131 from BeyondEvil/feat/add-runs-on-input
  • Additional commits viewable in compare view

Updates swatinem/rust-cache from 2.9.1 to 2.9.2

Release notes

Sourced from swatinem/rust-cache's releases.

v2.9.2

What's Changed

New Contributors

Full Changelog: Swatinem/rust-cache@v2.9.1...v2.9.2

Changelog

Sourced from swatinem/rust-cache's changelog.

Changelog

2.9.2

  • Fix credentials.toml cleanup
  • Improvements to cleanup, preserving more valid targets
  • Improvements to cargo install handling
  • Correctly sort/dedupe Rust versions

2.9.1

  • Fix regression in hash calculation

2.9.0

  • Update to node24
  • Support running from within a nix shell
  • Consider all installed toolchains for cache key
  • Use case-insensitive comparison to determine exact cache hit

2.8.2

  • Don't overwrite env for cargo-metadata call

2.8.1

  • Set empty CARGO_ENCODED_RUSTFLAGS when retrieving metadata
  • Various dependency updates

2.8.0

  • Add support for warpbuild cache provider
  • Add new cache-workspace-crates feature

2.7.8

  • Include CPU arch in the cache key

2.7.7

  • Also cache cargo install metadata

2.7.6

  • Allow opting out of caching $CARGO_HOME/bin
  • Add runner OS in cache key
  • Adds an option to do lookup-only of the cache

2.7.5

... (truncated)

Commits
  • 6323deb 2.9.2
  • b16e8d7 bump rollup and rebuild
  • 3bf42ac invert target/profile check in cleanup
  • 6e5b278 correctly sort and dedupe Rust versions
  • 5adc05f Bump the actions group across 1 directory with 3 updates (#368)
  • 66b1e95 fix: support Cargo V2 build dir layout (#371)
  • 72d126e Merge pull request #367 from Swatinem/dependabot/npm_and_yarn/dev-patch-2b495...
  • 48968d2 Bump the dev-patch group with 2 updates
  • 9f151ac update dependencies, rebuild
  • 0e24e5d Bump the actions group across 1 directory with 6 updates (#364)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the github-actions group with 4 updates: [anomalyco/opencode/github](https://github.com/anomalyco/opencode), [google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml](https://github.com/google/osv-scanner-action), [google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml](https://github.com/google/osv-scanner-action) and [swatinem/rust-cache](https://github.com/swatinem/rust-cache).


Updates `anomalyco/opencode/github` from 1.18.14 to 1.18.17
- [Release notes](https://github.com/anomalyco/opencode/releases)
- [Commits](anomalyco/opencode@65cf14d...02546df)

Updates `google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml` from 2.3.8 to 2.5.0
- [Release notes](https://github.com/google/osv-scanner-action/releases)
- [Commits](google/osv-scanner-action@9a49870...8deb546)

Updates `google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml` from 2.3.8 to 2.5.0
- [Release notes](https://github.com/google/osv-scanner-action/releases)
- [Commits](google/osv-scanner-action@9a49870...8deb546)

Updates `swatinem/rust-cache` from 2.9.1 to 2.9.2
- [Release notes](https://github.com/swatinem/rust-cache/releases)
- [Changelog](https://github.com/Swatinem/rust-cache/blob/master/CHANGELOG.md)
- [Commits](Swatinem/rust-cache@c193711...6323deb)

---
updated-dependencies:
- dependency-name: anomalyco/opencode/github
  dependency-version: 1.18.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml
  dependency-version: 2.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml
  dependency-version: 2.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: swatinem/rust-cache
  dependency-version: 2.9.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Aug 15, 2026
@github-actions
github-actions Bot merged commit c07039e into main Aug 15, 2026
18 of 19 checks passed
@github-actions
github-actions Bot deleted the dependabot/github_actions/github-actions-6d918f2ea1 branch August 15, 2026 09:08
bigSmooth7867 pushed a commit to bigSmooth7867/swarm that referenced this pull request Aug 16, 2026
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [donutbrowser/donut-sync](https://github.com/zhom/donutbrowser) | patch | `v0.29.3` → `v0.29.4` |

[Release notes](https://github.com/zhom/donutbrowser/releases)

---

### Release Notes

<details>
<summary>zhom/donutbrowser (donutbrowser/donut-sync)</summary>

### [`v0.29.4`](https://github.com/zhom/donutbrowser/blob/HEAD/CHANGELOG.md#v0294-2026-08-15)

[Compare Source](zhom/donutbrowser@v0.29.3...v0.29.4)

##### Refactoring

- cleanup

##### Documentation

- update CHANGELOG.md and README.md for v0.29.3 \[skip ci] ([#&#8203;556](zhom/donutbrowser#556))

##### Maintenance

- chore: version bump
- ci(deps): bump the github-actions group with 4 updates ([#&#8203;559](zhom/donutbrowser#559))
- chore: update flake.nix for v0.29.3 \[skip ci] ([#&#8203;557](zhom/donutbrowser#557))

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4yNi4yIiwidXBkYXRlZEluVmVyIjoiNDQuMTQuNSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsicGF0Y2giLCJyZW5vdmF0ZSJdfQ==-->

Reviewed-on: https://gitea.vcasaserver.com/omar/swarm/pulls/718
Co-authored-by: Renovate Bot <renovate-bot@vcasaserver.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants