Skip to content

chore(deps): bump the github-actions group with 2 updates - #46

Merged
NullSablex merged 1 commit into
masterfrom
dependabot/github_actions/github-actions-f4a26c8c06
Nov 11, 2026
Merged

NullSablex merged 1 commit into
masterfrom
dependabot/github_actions/github-actions-f4a26c8c06

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 11, 2026

Copy link
Copy Markdown
Contributor

Bumps the github-actions group with 2 updates: softprops/action-gh-release and taiki-e/install-action.

Updates softprops/action-gh-release from 3.0.3 to 3.0.4

Release notes

Sourced from softprops/action-gh-release's releases.

v3.0.4

  • maintenance release with updated dependencies
Changelog

Sourced from softprops/action-gh-release's changelog.

3.0.4

  • maintenance release with updated dependencies

3.0.3

3.0.3 is a maintenance release with updated dependencies. It also safely classifies malformed GitHub API errors to avoid secondary failures (#822).

What's Changed

Bug fixes 🐛

Other Changes 🔄

  • dependency updates

3.0.2

3.0.2 is a patch release focused on release reliability and compatibility. It reuses existing draft releases when publishing prereleases, supports replacing release assets on Gitea, hardens streamed asset uploads, and provides clearer release-creation diagnostics. It also includes TypeScript, coverage, and tooling maintenance merged since 3.0.1.

This release fixes #795, #438, and #803. The upload transport hardening covers the historical failure reported in #790, although current hosted Node 24 runners did not reproduce it naturally. The diagnostics work is related to #786 and does not claim a reproducible release-creation fix.

What's Changed

Exciting New Features 🎉

Bug fixes 🐛

Other Changes 🔄

... (truncated)

Commits
  • 8a0cd65 release 3.0.4 (#865)
  • ac01154 chore(deps): bump the npm group across 1 directory with 4 updates (#864)
  • ca4c9d5 chore(deps): bump minimatch and glob (#862)
  • e4a57ae chore(deps): bump undici from 6.29.0 to 6.29.1 (#859)
  • ee55a0e chore(deps): bump vite from 8.3.2 to 8.3.5 (#855)
  • 8d42b22 chore(deps): bump actions/setup-node (#853)
  • 6680cc0 chore(deps): bump the npm group with 3 updates (#851)
  • 4a050ba chore(deps): bump source-map-js from 1.2.1 to 1.2.2 (#850)
  • b5a645e chore(deps): bump the npm group with 4 updates (#848)
  • d99a5de chore(deps): bump brace-expansion from 5.0.9 to 5.0.12 (#846)
  • Additional commits viewable in compare view

Updates taiki-e/install-action from 2.89.0 to 2.90.3

Release notes

Sourced from taiki-e/install-action's releases.

2.90.3

  • Update yq@latest to 4.54.2.

  • Update vacuum@latest to 0.39.3.

  • Update syft@latest to 1.57.0.

  • Update rclone@latest to 1.76.0.

  • Update protoc-gen-connect-openapi@latest to 0.30.0.

  • Update mise@latest to 2026.11.3.

  • Update kingfisher@latest to 2.17.0.

  • Update biome@latest to 2.6.6.

2.90.2

  • Update trivy@latest to 0.76.2.

  • Update tombi@latest to 1.10.0.

  • Update prek@latest to 0.5.10.

  • Update mise@latest to 2026.11.2.

  • Update mdbook-d2@latest to 0.3.10.

  • Update cargo-zigbuild@latest to 0.24.1.

  • Update cargo-tarpaulin@latest to 0.37.6.

  • Update biome@latest to 2.6.5.

2.90.1

  • Update zizmor@latest to 1.32.0.

  • Update uv@latest to 0.13.7.

  • Update typos@latest to 1.52.0.

  • Update tombi@latest to 1.9.9.

  • Update syft@latest to 1.56.0.

  • Update mise@latest to 2026.11.0.

  • Update kache@latest to 2.0.0.

  • Update cargo-nextest@latest to 0.9.151.

... (truncated)

Changelog

Sourced from taiki-e/install-action's changelog.

Changelog

All notable changes to this project will be documented in this file.

This project adheres to Semantic Versioning.

[Unreleased]

[2.90.3] - 2026-11-08

  • Update yq@latest to 4.54.2.

  • Update vacuum@latest to 0.39.3.

  • Update syft@latest to 1.57.0.

  • Update rclone@latest to 1.76.0.

  • Update protoc-gen-connect-openapi@latest to 0.30.0.

  • Update mise@latest to 2026.11.3.

  • Update kingfisher@latest to 2.17.0.

  • Update biome@latest to 2.6.6.

[2.90.2] - 2026-11-06

  • Update trivy@latest to 0.76.2.

  • Update tombi@latest to 1.10.0.

  • Update prek@latest to 0.5.10.

  • Update mise@latest to 2026.11.2.

  • Update mdbook-d2@latest to 0.3.10.

  • Update cargo-zigbuild@latest to 0.24.1.

  • Update cargo-tarpaulin@latest to 0.37.6.

  • Update biome@latest to 2.6.5.

[2.90.1] - 2026-11-04

... (truncated)

Commits
  • cfdb7ed Release 2.90.3
  • 0a71219 Update yq@latest to 4.54.2
  • 4072c98 Update vacuum@latest to 0.39.3
  • d429e9b Update syft@latest to 1.57.0
  • 24c2628 Update rclone@latest to 1.76.0
  • ab9bbc8 Update protoc-gen-connect-openapi@latest to 0.30.0
  • 4bff33f Update mise@latest to 2026.11.3
  • cdf8dc3 Update kingfisher@latest to 2.17.0
  • b8b14a4 Update biome@latest to 2.6.6
  • 3a3daaf Release 2.90.2
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the github-actions group with 2 updates: [softprops/action-gh-release](https://github.com/softprops/action-gh-release) and [taiki-e/install-action](https://github.com/taiki-e/install-action).


Updates `softprops/action-gh-release` from 3.0.3 to 3.0.4
- [Release notes](https://github.com/softprops/action-gh-release/releases)
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md)
- [Commits](softprops/action-gh-release@efb3536...8a0cd65)

Updates `taiki-e/install-action` from 2.89.0 to 2.90.3
- [Release notes](https://github.com/taiki-e/install-action/releases)
- [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md)
- [Commits](taiki-e/install-action@1919c4a...cfdb7ed)

---
updated-dependencies:
- dependency-name: softprops/action-gh-release
  dependency-version: 3.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: taiki-e/install-action
  dependency-version: 2.90.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from NullSablex as a code owner November 11, 2026 06:54
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Nov 11, 2026
@NullSablex
NullSablex merged commit 0f99859 into master Nov 11, 2026
7 checks passed
@NullSablex
NullSablex deleted the dependabot/github_actions/github-actions-f4a26c8c06 branch November 11, 2026 07:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant