Skip to content

Bump redhat-actions/openshift-tools-installer from 1 to 3 in the actions group across 1 directory - #73

Open
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/github_actions/actions-c335696782
Open

dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/github_actions/actions-c335696782

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the actions group with 1 update in the / directory: redhat-actions/openshift-tools-installer.

Updates redhat-actions/openshift-tools-installer from 1 to 3

Release notes

Sourced from redhat-actions/openshift-tools-installer's releases.

v3.0

Breaking Changes

  • Removed kam client — the redhat-developer/kam project is abandoned (last release Oct 2023) #169
  • Switched kamel and operator-sdk to GitHub-only sources — the OpenShift mirror versions are significantly behind upstream. Using source: mirror with these clients will now produce an error #170
  • Switched tkn from the stale v4 clients mirror to the CGW pipelines mirror — versions prior to 1.15.4 are no longer available via mirror #161

Features

Bug Fixes

  • Fix isHashMissing check to short-circuit before fetching hash files — previously it only applied when no hash file existed in the directory, but CGW pipelines has an incompatible hash file format #168
  • Fix js-yaml CVE-2026-59870 via npm override #167
  • Fix octokit openapi-types 28.x type compatibility #167
  • Fix Dependabot PR CI failures #156
  • Fix npm audit vulnerabilities and simplify security scan #160

Dependencies

  • Bump @octokit/openapi-types from 27.0.0 to 28.0.0 #163
  • Bump @octokit/plugin-paginate-rest from 14.0.0 to 15.0.0 #165
  • Bump brace-expansion to 5.0.8 and js-yaml to 5.2.2 #151
  • Bump dev-dependencies group #158

v2.0

Breaking Changes

  • Action runtime upgraded from Node.js 16 to Node.js 24 (runs.using: node24). Requires GitHub Actions runner v2.320.0+ or GHES 3.12+.
  • Removed odo tool (archived upstream)

Features

  • Add butane tool support (OpenShift mirror) (#100, #148)
  • Add ocm CLI tool support (GitHub) (#115, #148)
  • Add skip_cache_for input for per-client cache skipping (#2, #150)
  • Enable caching on GHES 3.5+ — removed the hardcoded GHES cache skip (#111, #148)
  • Add arm64 Linux support for OCP tools (#139)

Bug Fixes

  • Fix arm64 OCP installs and mirror URL resolution (#139)
  • Fix macOS arm64 CI failures for tools lacking arm64 builds (#139)
  • Change warning to info for multiple file notice (#121)

Dependencies & Infrastructure

  • Upgrade to TypeScript 6, ESLint 10 with flat config (#134)
  • Upgrade @octokit/core 5→7, @octokit/plugin-paginate-rest 9→14, @octokit/openapi-types 22→27 (#149)
  • Upgrade webpack-cli 6→7 (#149)
  • Upgrade redhat-actions/common 1→2 (#141)
  • Upgrade @types/node to 26.x (#144)
  • Replace dead CRDA vulnerability scan with npm audit (#140)
  • Reduce CI matrix from ~53 to ~28 jobs

... (truncated)

Changelog

Sourced from redhat-actions/openshift-tools-installer's changelog.

v1.13

v1.12

  • Update action/core dependency to 1.10.0
Commits
  • 37eb3cf Update changelog for v3.1 release
  • eddf8f8 Fix 3-minute hang after action completion by restoring keepAlive: false (#174)
  • e943ebb deps(dev): bump the dev-dependencies group with 3 updates (#172)
  • e3b32c2 Update changelog for v3.0 release (#171)
  • 3000953 Switch kamel and operator-sdk to GitHub-only sources (#170)
  • 8826c0f Remove kam (GitOps Application Manager) client (#169)
  • d173de3 Fix hash verification for clients with incompatible hash files (#168)
  • 07487a0 Add CGW mirror support for Helm 4, argocd, and tkn (#161)
  • fcf47d0 deps: bump @​octokit/plugin-paginate-rest from 14.0.0 to 15.0.0 (#165)
  • ad975af deps: bump @​octokit/openapi-types from 27.0.0 to 28.0.0 (#163)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the actions group with 1 update in the / directory: [redhat-actions/openshift-tools-installer](https://github.com/redhat-actions/openshift-tools-installer).


Updates `redhat-actions/openshift-tools-installer` from 1 to 3
- [Release notes](https://github.com/redhat-actions/openshift-tools-installer/releases)
- [Changelog](https://github.com/redhat-actions/openshift-tools-installer/blob/main/CHANGELOG.md)
- [Commits](redhat-actions/openshift-tools-installer@v1...v3)

---
updated-dependencies:
- dependency-name: redhat-actions/openshift-tools-installer
  dependency-version: '3'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Sep 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant