Skip to content

chore(deps): bump the actions group across 1 directory with 6 updates - #1071

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions-b2a6f14850
Closed

chore(deps): bump the actions group across 1 directory with 6 updates#1071
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions-b2a6f14850

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 4, 2026

Copy link
Copy Markdown
Contributor

Bumps the actions group with 6 updates in the / directory:

Package From To
actions/checkout 6.0.2 7.0.0
DavidAnson/markdownlint-cli2-action 23.2.0 24.0.0
gitleaks/gitleaks-action 2.3.9 3.0.0
actions/cache 5.0.5 6.1.0
anthropics/claude-code-action 1.0.148 1.0.172
actions/setup-java 5.2.0 5.5.0

Updates actions/checkout from 6.0.2 to 7.0.0

Release notes

Sourced from actions/checkout's releases.

v7.0.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v6.0.3...v7.0.0

v6.0.3

What's Changed

New Contributors

Full Changelog: actions/checkout@v6...v6.0.3

Changelog

Sourced from actions/checkout's changelog.

Changelog

v7.0.0

v6.0.3

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

... (truncated)

Commits

Updates DavidAnson/markdownlint-cli2-action from 23.2.0 to 24.0.0

Commits
  • 8de2aa0 Update to version 24.0.0.
  • 982cff1 Freshen generated package-lock.json file.
  • 2e007a0 Freshen generated index.js file.
  • b25b041 Freshen generated index.js file.
  • d9ad570 Bump markdownlint-cli2 from 0.22.1 to 0.23.0
  • 2d0ebec Address new lint error from previous commit, freshen generated index.js file.
  • fcff116 Bump eslint-plugin-unicorn from 66.0.0 to 68.0.0
  • 7c80680 Bump actions/checkout from 6 to 7
  • 501326c Freshen generated index.js file.
  • 2bfaeca Address new lint error from previous commit, freshen generated index.js file.
  • Additional commits viewable in compare view

Updates gitleaks/gitleaks-action from 2.3.9 to 3.0.0

Release notes

Sourced from gitleaks/gitleaks-action's releases.

v3.0.0

What's changed

gitleaks-action v3 migrates the runtime from Node 20 to Node 24. No changes to inputs, outputs, or behavior. Update your workflow from gitleaks/gitleaks-action@v2 to gitleaks/gitleaks-action@v3.

Migration

# Before
- uses: gitleaks/gitleaks-action@v2
After

uses: gitleaks/gitleaks-action@v3

Why

GitHub is deprecating the Node 20 runtime for Actions:

  • June 2, 2026: GitHub flips the runner default to Node 24. Workflows using gitleaks-action@v2 (Node 20) will still run, but only if ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true is set as an environment variable.
  • September 16, 2026: Node 20 is removed from GitHub-hosted runners entirely. gitleaks-action@v2 stops working regardless of any opt-out flag.

Changes

  • action.yml: runtime node20node24
  • @actions/core: 1.10.0 → 1.11.1
  • dist/ rebuilt
  • Example workflows updated to actions/checkout@v6 and gitleaks-action@v3
  • README updated with v3 migration guide

Self-hosted runners

If you use self-hosted runners, ensure your runner version is >= v2.327.1 (required for Node 24 support).

Commits

Updates actions/cache from 5.0.5 to 6.1.0

Release notes

Sourced from actions/cache's releases.

v6.1.0

What's Changed

Full Changelog: actions/cache@v6...v6.1.0

v6.0.0

What's Changed

Full Changelog: actions/cache@v5...v6.0.0

v5.1.0

What's Changed

Full Changelog: actions/cache@v5...v5.1.0

Changelog

Sourced from actions/cache's changelog.

Releases

How to prepare a release

[!NOTE] Relevant for maintainers with write access only.

  1. Switch to a new branch from main.
  2. Run npm test to ensure all tests are passing.
  3. Update the version in https://github.com/actions/cache/blob/main/package.json.
  4. Run npm run build to update the compiled files.
  5. Update this https://github.com/actions/cache/blob/main/RELEASES.md with the new version and changes in the ## Changelog section.
  6. Run licensed cache to update the license report.
  7. Run licensed status and resolve any warnings by updating the https://github.com/actions/cache/blob/main/.licensed.yml file with the exceptions.
  8. Commit your changes and push your branch upstream.
  9. Open a pull request against main and get it reviewed and merged.
  10. Draft a new release https://github.com/actions/cache/releases use the same version number used in package.json
    1. Create a new tag with the version number.
    2. Auto generate release notes and update them to match the changes you made in RELEASES.md.
    3. Toggle the set as the latest release option.
    4. Publish the release.
  11. Navigate to https://github.com/actions/cache/actions/workflows/release-new-action-version.yml
    1. There should be a workflow run queued with the same version number.
    2. Approve the run to publish the new version and update the major tags for this action.

Changelog

6.1.0

6.0.0

  • Updated @actions/cache to ^6.0.1, @actions/core to ^3.0.1, @actions/exec to ^3.0.0, @actions/io to ^3.0.2
  • Migrated to ESM module system
  • Upgraded Jest to v30 and test infrastructure to be ESM compatible

5.0.4

  • Bump minimatch to v3.1.5 (fixes ReDoS via globstar patterns)
  • Bump undici to v6.24.1 (WebSocket decompression bomb protection, header validation fixes)
  • Bump fast-xml-parser to v5.5.6

5.0.3

5.0.2

... (truncated)

Commits
  • 55cc834 Merge pull request #1768 from jasongin/readonly-cache
  • d8cd72f Bump @​actions/cache to v6.1.0 - handle cache write error due to RO token
  • 2c8a9bd Merge pull request #1760 from actions/samirat/esm_migration_and_package_update
  • e9b91fd Prettier fixes
  • e4884b8 Rebuild dist
  • 10baf01 Fixed licenses
  • e39b386 Fix test mock return order
  • b692820 PR feedback
  • 6074912 Rebuild dist bundles as ESM to match type:module
  • 5a912e8 Fix lint and jest issues
  • Additional commits viewable in compare view

Updates anthropics/claude-code-action from 1.0.148 to 1.0.172

Release notes

Sourced from anthropics/claude-code-action's releases.

v1.0.172

What's Changed

Full Changelog: anthropics/claude-code-action@v1...v1.0.172

v1.0.171

Full Changelog: anthropics/claude-code-action@v1...v1.0.171

v1.0.170

Full Changelog: anthropics/claude-code-action@v1...v1.0.170

v1.0.169

Full Changelog: anthropics/claude-code-action@v1...v1.0.169

v1.0.168

Full Changelog: anthropics/claude-code-action@v1...v1.0.168

v1.0.167

Full Changelog: anthropics/claude-code-action@v1...v1.0.167

v1.0.166

What's Changed

New Contributors

Full Changelog: anthropics/claude-code-action@v1...v1.0.166

v1.0.165

Full Changelog: anthropics/claude-code-action@v1...v1.0.165

v1.0.164

Full Changelog: anthropics/claude-code-action@v1...v1.0.164

v1.0.163

Full Changelog: anthropics/claude-code-action@v1...v1.0.163

v1.0.162

What's Changed

... (truncated)

Commits
  • a08f891 chore: bump Claude Code to 2.1.208 and Agent SDK to 0.3.208
  • 972a512 fix(sdk): fail step when result has is_error:true despite success subtype (#1...
  • e90deca chore: bump Claude Code to 2.1.207 and Agent SDK to 0.3.207
  • 536f2c3 chore: bump Claude Code to 2.1.206 and Agent SDK to 0.3.206
  • 37b464c chore: bump Claude Code to 2.1.205 and Agent SDK to 0.3.205
  • ba0aafd chore: bump Claude Code to 2.1.204 and Agent SDK to 0.3.204
  • 0fe28cd chore: bump Claude Code to 2.1.203 and Agent SDK to 0.3.203
  • f87768c chore: bump Claude Code to 2.1.202 and Agent SDK to 0.3.202
  • 58a2944 chore: fix prettier formatting (#1463)
  • beb753e fix: propagate curl failures in install pipeline (#1241)
  • Additional commits viewable in compare view

Updates actions/setup-java from 5.2.0 to 5.5.0

Release notes

Sourced from actions/setup-java's releases.

v5.5.0

What's Changed

New Contributors

Full Changelog: actions/setup-java@v5...v5.5.0

v5.4.0

What's Changed

... (truncated)

Commits
  • 0f481fc feat: Add distribution detection support to .sdkmanrc file (#975)
  • c4922bf docs: document problem matcher (and how to disable it), Maven Wrapper caching...
  • 6657b99 feat: Add set-default option (#1017)
  • a50fdcc dist: Support Tencent Kona JDK (#672)
  • 77ee41d fix: Maven Toolchains grows unexpectedly (#534)
  • 0765b15 chore(deps-dev): bump eslint-plugin-jest from 29.0.1 to 29.15.4 (#1074)
  • c712b2f Bump prettier from 3.6.2 to 3.9.1 (#1066)
  • 733efae feat: Disable interactiveMode in generated Maven settings.xml (#1052)
  • 6c4d4a5 feat: suppress Maven transfer progress via MAVEN_ARGS by default (add show-do...
  • 324b333 Fix arm64 e2e workflow tests mislabeled as x64 (#1073)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Dependency update PRs security Security-related PRs and issues labels Jul 4, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner July 4, 2026 04:46
@dependabot dependabot Bot added security Security-related PRs and issues dependencies Dependency update PRs labels Jul 4, 2026
@petry-projects-dependabot-automrg
petry-projects-dependabot-automrg Bot enabled auto-merge (squash) July 4, 2026 04:46
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions-b2a6f14850 branch from 495f47d to 95dd00d Compare July 4, 2026 15:24
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions-b2a6f14850 branch from 95dd00d to f239767 Compare July 4, 2026 20:10
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions-b2a6f14850 branch from f239767 to bcdf7b5 Compare July 4, 2026 20:15
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions-b2a6f14850 branch from bcdf7b5 to a4f8021 Compare July 4, 2026 21:05
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions-b2a6f14850 branch from a4f8021 to 2eadd1d Compare July 4, 2026 21:13
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions-b2a6f14850 branch from 2eadd1d to 201e2c9 Compare July 9, 2026 03:19
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions-b2a6f14850 branch from 4f54949 to 92e7130 Compare July 10, 2026 12:19
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions-b2a6f14850 branch from 92e7130 to dee8c9c Compare July 10, 2026 12:51
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions-b2a6f14850 branch from dee8c9c to c25cbc4 Compare July 10, 2026 12:55
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions-b2a6f14850 branch from c25cbc4 to 860db18 Compare July 10, 2026 15:16
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions-b2a6f14850 branch from 860db18 to b7d9214 Compare July 10, 2026 17:21
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions-b2a6f14850 branch from 3beea83 to 01b116c Compare July 13, 2026 05:24
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions-b2a6f14850 branch from 01b116c to 82e3f49 Compare July 13, 2026 11:53
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions-b2a6f14850 branch from 82e3f49 to 298657b Compare July 14, 2026 01:08
Bumps the actions group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `6.0.2` | `7.0.0` |
| [DavidAnson/markdownlint-cli2-action](https://github.com/davidanson/markdownlint-cli2-action) | `23.2.0` | `24.0.0` |
| [gitleaks/gitleaks-action](https://github.com/gitleaks/gitleaks-action) | `2.3.9` | `3.0.0` |
| [actions/cache](https://github.com/actions/cache) | `5.0.5` | `6.1.0` |
| [anthropics/claude-code-action](https://github.com/anthropics/claude-code-action) | `1.0.148` | `1.0.172` |
| [actions/setup-java](https://github.com/actions/setup-java) | `5.2.0` | `5.5.0` |



Updates `actions/checkout` from 6.0.2 to 7.0.0
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v6.0.2...9c091bb)

Updates `DavidAnson/markdownlint-cli2-action` from 23.2.0 to 24.0.0
- [Release notes](https://github.com/davidanson/markdownlint-cli2-action/releases)
- [Commits](DavidAnson/markdownlint-cli2-action@ded1f94...8de2aa0)

Updates `gitleaks/gitleaks-action` from 2.3.9 to 3.0.0
- [Release notes](https://github.com/gitleaks/gitleaks-action/releases)
- [Commits](gitleaks/gitleaks-action@ff98106...e0c47f4)

Updates `actions/cache` from 5.0.5 to 6.1.0
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](actions/cache@27d5ce7...55cc834)

Updates `anthropics/claude-code-action` from 1.0.148 to 1.0.172
- [Release notes](https://github.com/anthropics/claude-code-action/releases)
- [Commits](anthropics/claude-code-action@d5726de...a08f891)

Updates `actions/setup-java` from 5.2.0 to 5.5.0
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](actions/setup-java@be666c2...0f481fc)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-version: 6.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: actions/checkout
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: actions/setup-java
  dependency-version: 5.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: anthropics/claude-code-action
  dependency-version: 1.0.165
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: DavidAnson/markdownlint-cli2-action
  dependency-version: 24.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: gitleaks/gitleaks-action
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions-b2a6f14850 branch from 298657b to 4e84bc3 Compare July 14, 2026 01:23
@dependabot @github

dependabot Bot commented on behalf of github Jul 14, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Jul 14, 2026
auto-merge was automatically disabled July 14, 2026 03:14

Pull request was closed

@dependabot
dependabot Bot deleted the dependabot/github_actions/actions-b2a6f14850 branch July 14, 2026 03:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Dependency update PRs security Security-related PRs and issues

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants