Skip to content

Bump the github-actions group across 1 directory with 8 updates - #1657

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-ca33cd1b29
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-ca33cd1b29

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 9, 2026

Copy link
Copy Markdown
Contributor

Bumps the github-actions group with 8 updates in the / directory:

Package From To
docker/setup-buildx-action 4.2.0 4.4.1
docker/login-action 4.5.1 4.6.0
docker/build-push-action 7.3.0 7.4.0
azure/setup-kubectl 5.1.0 5.2.0
Azure/k8s-deploy 7.0.0 7.0.1
astral-sh/setup-uv 9.0.0 10.2.0
coverallsapp/github-action 2.3.7 2.3.8
getsentry/action-release 3.7.0 3.7.1

Updates docker/setup-buildx-action from 4.2.0 to 4.4.1

Release notes

Sourced from docker/setup-buildx-action's releases.

v4.4.1

Full Changelog: docker/setup-buildx-action@v4.4.0...v4.4.1

v4.4.0

Full Changelog: docker/setup-buildx-action@v4.3.0...v4.4.0

v4.3.0

Full Changelog: docker/setup-buildx-action@v4.2.0...v4.3.0

Commits
  • f87e599 Merge pull request #624 from crazy-max/skip-pull-with-endpoint
  • e700274 chore: update generated content
  • 3061c91 skip BuildKit image pre-pulls for explicit endpoints
  • 594f3bf Merge pull request #609 from crazy-max/pull-buildkit-image-before-create
  • bd6e702 chore: update generated content
  • 6268c9d pull BuildKit image before builder creation
  • e823525 Merge pull request #621 from docker/dependabot/github_actions/codeql-actions-...
  • 533ed8e build(deps): bump the codeql-actions group with 2 updates
  • bedaf13 Merge pull request #620 from crazy-max/shared-error-helpers
  • d5079fb chore: update generated content
  • Additional commits viewable in compare view

Updates docker/login-action from 4.5.1 to 4.6.0

Release notes

Sourced from docker/login-action's releases.

v4.6.0

Full Changelog: docker/login-action@v4.5.2...v4.6.0

v4.5.2

Full Changelog: docker/login-action@v4.5.1...v4.5.2

Commits
  • dbcb813 Merge pull request #1051 from docker/dependabot/npm_and_yarn/aws-sdk-dependen...
  • 5bcb015 [dependabot skip] chore: update generated content
  • b30b2f2 build(deps): bump the aws-sdk-dependencies group across 1 directory with 2 up...
  • 9087f1e Merge pull request #1057 from docker/dependabot/npm_and_yarn/js-yaml-5.2.2
  • 0009830 [dependabot skip] chore: update generated content
  • 2325523 build(deps): bump js-yaml from 5.2.1 to 5.2.2
  • 4ec1d4a Merge pull request #1056 from docker/dependabot/npm_and_yarn/postcss-8.5.22
  • 5fc99ba Merge pull request #1053 from docker/dependabot/github_actions/aws-actions/co...
  • e512bd5 Merge pull request #1052 from docker/dependabot/github_actions/codeql-actions...
  • a146c91 Merge pull request #1059 from crazy-max/harden-buildx-scope-paths
  • Additional commits viewable in compare view

Updates docker/build-push-action from 7.3.0 to 7.4.0

Release notes

Sourced from docker/build-push-action's releases.

v7.4.0

Full Changelog: docker/build-push-action@v7.3.0...v7.4.0

Commits
  • c3c9e26 Merge pull request #1621 from docker/dependabot/npm_and_yarn/docker/actions-t...
  • 459b674 [dependabot skip] chore: update generated content
  • 4dedcb2 chore(deps): Bump @​docker/actions-toolkit from 0.99.0 to 0.100.0
  • 379bf63 Merge pull request #1620 from crazy-max/buildx-error-message
  • 9877975 chore: update generated content
  • 7ed0556 use the shared Buildx error summary helper
  • 91670ba Merge pull request #1618 from docker/dependabot/npm_and_yarn/docker/actions-t...
  • 80dbc86 [dependabot skip] chore: update generated content
  • 50cac3a chore(deps): Bump @​docker/actions-toolkit from 0.98.0 to 0.99.0
  • 03b4d6c Merge pull request #1617 from crazy-max/fix-metadata-workflow-commands
  • Additional commits viewable in compare view

Updates azure/setup-kubectl from 5.1.0 to 5.2.0

Release notes

Sourced from azure/setup-kubectl's releases.

v5.2.0

Added

Fixed

Changed

Security

Changelog

Sourced from azure/setup-kubectl's changelog.

Changelog

[5.2.0] - 2026-10-05

Added

Fixed

Changed

Security

[5.1.0] - 2026-04-11

... (truncated)

Commits
  • bda439f build
  • 8641ff5 release: prepare v5.2.0 (#301)
  • 3d292a7 Bump the actions group across 1 directory with 3 updates (#299)
  • c269e61 Bump the actions group with 2 updates (#294)
  • 11acd8e Bump the actions group in /.github/workflows with 2 updates (#295)
  • 645066c Bump postcss from 8.5.19 to 8.5.26 (#290)
  • 97176cf Bump undici from 6.27.0 to 6.28.0 (#289)
  • ee889ef Bump the actions group across 1 directory with 4 updates (#293)
  • fc0afe1 Bump the actions group in /.github/workflows with 4 updates (#287)
  • ea75f07 Bump the actions group across 1 directory with 5 updates (#285)
  • Additional commits viewable in compare view

Updates Azure/k8s-deploy from 7.0.0 to 7.0.1

Release notes

Sourced from Azure/k8s-deploy's releases.

v7.0.1

Security

Fixed

Changed

Changelog

Sourced from Azure/k8s-deploy's changelog.

Changelog

[7.0.1] - 2026-08-31

Security

Fixed

Changed

[7.0.0] - 2026-06-23

Changed

Security

[6.0.0] - 2026-04-17

Changed

... (truncated)

Commits
  • bf1ec05 build
  • b5ce824 release: v7.0.1 (#562)
  • 0fc36d5 fix az aks private cluster command args (#560)
  • 75a6f52 docs: require k8s-bake v4.1.1+ in the bake example (#555)
  • 4fa6d56 chore(deps): bump js-yaml from 5.2.1 to 5.2.2 (#552)
  • 13a4861 chore(deps): bump the actions group across 1 directory with 5 updates (#547)
  • b36de25 chore(deps-dev): bump postcss from 8.5.15 to 8.5.25 (#551)
  • 31e169e chore(deps): bump js-yaml from 4.2.0 to 4.3.0 (#550)
  • 109ba6e chore(deps): bump the actions group across 1 directory with 6 updates (#548)
  • df63ede fix: strip colon from parsed NewReplicaSet name (#543)
  • See full diff in compare view

Updates astral-sh/setup-uv from 9.0.0 to 10.2.0

Release notes

Sourced from astral-sh/setup-uv's releases.

v10.2.0 🌈 Disable automatic cache saves for merge queues

Changes

This release contains the known-checksum of the most recent uv releases and also disabled the uploading(saving) of the cache when in a merge queue since theses caches would almost never be used.

🚀 Enhancements

🧰 Maintenance

📚 Documentation

⬆️ Dependency updates

v10.1.0 🌈 New output python-runtime-idand respect NO_PROXY

Changes

This release adds more bheind the scene security improvements and also 2 small improvements.

NO_PROXY

This action now respects no_proxy/NO_PROXY environment variables which were previously ignored.

New output python-runtime-id

The new output python-runtime-id can be used to know which python version exactly was installed if you use activate-environment. See pyca/cryptography#15572 for details on why this can be useful.

🐛 Bug fixes

🚀 Enhancements

🧰 Maintenance

... (truncated)

Commits

Updates coverallsapp/github-action from 2.3.7 to 2.3.8

Release notes

Sourced from coverallsapp/github-action's releases.

v2.3.8

What's Changed

New Contributors

Full Changelog: coverallsapp/github-action@v2...v2.3.8

Commits
  • 8d6379e Fix macOS install for Homebrew 6.0.0 tap trust requirement (#265)
  • 0a51d2e Spelling (#258)
  • dc7137b README.md: Update GitHub Actions (#259)
  • ba6dae8 Revise README for clarity on integrations and support
  • a5a505e Update README with new sections and information
  • See full diff in compare view

Updates getsentry/action-release from 3.7.0 to 3.7.1

Release notes

Sourced from getsentry/action-release's releases.

3.7.1

New Features ✨

Bug Fixes 🐛

Deps

Internal Changes 🔧

Deps

Deps Dev

Other

Other

Changelog

Sourced from getsentry/action-release's changelog.

Changelog

3.7.1

New Features ✨

Bug Fixes 🐛

Deps

Internal Changes 🔧

Deps

Deps Dev

Other

Other

3.7.0

New Features ✨

3.6.1

Bug Fixes 🐛

... (truncated)

Commits
  • 6fb9aea release: 3.7.1
  • db070d0 chore(deps): bump brace-expansion from 1.1.16 to 1.1.21 (#338)
  • 61bedc1 chore(deps): Bump undici from 6.28.0 to 6.29.0 (#339)
  • 63e3dae ci: Build arm64 Docker images on native runners (#337)
  • e3d3f79 chore(deps-dev): bump js-yaml from 4.3.1 to 4.3.2 (#334)
  • c06833a chore(deps): bump browserslist from 4.22.1 to 4.28.8 (#333)
  • 2d535e1 ci: limit GITHUB_TOKEN permissions for lint and check-dist (#332)
  • 4d7b8c4 Fix handling of INPUT_URL_PREFIX in test (#203)
  • 099ec8c feat(deps): bump @​sentry/node to 10.71.0 (#331)
  • 5e103f7 fix(deps): pin transitive js-yaml 3.x to 3.15.2 (#329)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the sp...

Description has been truncated

Bumps the github-actions group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `4.2.0` | `4.4.1` |
| [docker/login-action](https://github.com/docker/login-action) | `4.5.1` | `4.6.0` |
| [docker/build-push-action](https://github.com/docker/build-push-action) | `7.3.0` | `7.4.0` |
| [azure/setup-kubectl](https://github.com/azure/setup-kubectl) | `5.1.0` | `5.2.0` |
| [Azure/k8s-deploy](https://github.com/azure/k8s-deploy) | `7.0.0` | `7.0.1` |
| [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) | `9.0.0` | `10.2.0` |
| [coverallsapp/github-action](https://github.com/coverallsapp/github-action) | `2.3.7` | `2.3.8` |
| [getsentry/action-release](https://github.com/getsentry/action-release) | `3.7.0` | `3.7.1` |



Updates `docker/setup-buildx-action` from 4.2.0 to 4.4.1
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](docker/setup-buildx-action@bb05f3f...f87e599)

Updates `docker/login-action` from 4.5.1 to 4.6.0
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](docker/login-action@abd2ef4...dbcb813)

Updates `docker/build-push-action` from 7.3.0 to 7.4.0
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](docker/build-push-action@53b7df9...c3c9e26)

Updates `azure/setup-kubectl` from 5.1.0 to 5.2.0
- [Release notes](https://github.com/azure/setup-kubectl/releases)
- [Changelog](https://github.com/Azure/setup-kubectl/blob/main/CHANGELOG.md)
- [Commits](Azure/setup-kubectl@8293235...bda439f)

Updates `Azure/k8s-deploy` from 7.0.0 to 7.0.1
- [Release notes](https://github.com/azure/k8s-deploy/releases)
- [Changelog](https://github.com/Azure/k8s-deploy/blob/main/CHANGELOG.md)
- [Commits](Azure/k8s-deploy@51ca02a...bf1ec05)

Updates `astral-sh/setup-uv` from 9.0.0 to 10.2.0
- [Release notes](https://github.com/astral-sh/setup-uv/releases)
- [Commits](astral-sh/setup-uv@c771a70...c18668a)

Updates `coverallsapp/github-action` from 2.3.7 to 2.3.8
- [Release notes](https://github.com/coverallsapp/github-action/releases)
- [Commits](coverallsapp/github-action@5cbfd81...8d6379e)

Updates `getsentry/action-release` from 3.7.0 to 3.7.1
- [Release notes](https://github.com/getsentry/action-release/releases)
- [Changelog](https://github.com/getsentry/action-release/blob/master/CHANGELOG.md)
- [Commits](getsentry/action-release@ff07929...6fb9aea)

---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
  dependency-version: 4.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: docker/login-action
  dependency-version: 4.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: docker/build-push-action
  dependency-version: 7.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: azure/setup-kubectl
  dependency-version: 5.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: Azure/k8s-deploy
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: astral-sh/setup-uv
  dependency-version: 10.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: coverallsapp/github-action
  dependency-version: 2.3.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: getsentry/action-release
  dependency-version: 3.7.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from MarkKoz as a code owner October 9, 2026 05:53
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Oct 9, 2026
@netlify

netlify Bot commented Oct 9, 2026 •

Copy link
Copy Markdown

❌ Deploy Preview for pydis-static failed. Why did it fail? →

Name Link
🔨 Latest commit bc36915
🔍 Latest deploy log https://app.netlify.com/projects/pydis-static/deploys/6ac88173165f1b0008c367f5

@python-discord-policy-bot
python-discord-policy-bot Bot requested a review from a team October 9, 2026 05:54
@coveralls

Copy link
Copy Markdown

Coverage Status

coverage: 100.0%. remained the same — dependabot/github_actions/github-actions-ca33cd1b29 into main

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant