build(deps): bump the actions-updates group across 1 directory with 10 updates by dependabot[bot] · Pull Request #286 · edera-dev/linux-kernel-oci

dependabot · 2026-10-15T16:39:08Z

Bumps the actions-updates group with 10 updates in the / directory:

Package	From	To
step-security/harden-runner	`2.20.1`	`2.22.2`
docker/setup-buildx-action	`4.2.0`	`4.4.1`
actions/upload-artifact	`7.0.1`	`7.0.2`
actions/download-artifact	`8.0.1`	`8.0.2`
astral-sh/setup-uv	`10.1.0`	`10.3.2`
edera-dev/actions/report-disk-space	`0.0.17`	`0.0.19`
edera-dev/actions/reclaim-disk-space	`0.0.17`	`0.0.19`
edera-dev/actions/configure-azure-sccache	`0.0.17`	`0.0.19`
edera-dev/actions/.github/workflows/advisory-review.yml	`0c15ad17d0b4e52af066d268a249d6ac3c7ce3b8`	`72785a27a033e2a64c53d9d55c88253fa174cc16`
actions/create-github-app-token	`3.2.0`	`3.3.0`

Updates step-security/harden-runner from 2.20.1 to 2.22.2

Release notes

Sourced from step-security/harden-runner's releases.

v2.22.2

What's Changed

Fixed inbound (ingress) network traffic being incorrectly classified as outbound (egress) traffic on macOS

Fixed implicit endpoints intended for self-hosted runners being applied to custom VM environments on Linux (enterprise tier)

Improved network and DNS tracing, enforcement logic, and process information correlation on Linux (enterprise tier)

Full Changelog: step-security/harden-runner@v2.22.1...v2.22.2

v2.22.1

What's Changed

Fixed security rules not initializing on GHES self-hosted runners

Fixed GHES connectivity in block mode by implicitly allowing the GHES hostname

Full Changelog: step-security/harden-runner@v2.22.0...v2.22.1

v2.22.0

What's Changed

Linux ARM64 support for community tier

GHES support for self-hosted VMs (enterprise tier)

MacOS and Windows runner deny list support for block policy (enterprise tier).

Full Changelog: step-security/harden-runner@v2.21.1...v2.22.0

v2.21.1

What's Changed

Improved performance of the disable-sudo feature.

Fixed an issue in the Community tier where new endpoints required by the GitHub Actions runner were not being implicitly allowed in block mode.

Fixed the Harden-Runner post step failing on Linux distributions that do not have a merged /usr filesystem layout (for example Debian 11), where /usr/bin/echo does not exist. This mainly affected self-hosted runners.

Documentation updates: clarified which features are in the Community (free) vs Enterprise tier.

Full Changelog: step-security/harden-runner@v2.21.0...v2.21.1

v2.21.0

What's Changed

Support for denied endpoints in block mode. This is included in the enterprise tier. Customers can deny outbound calls, for example, to public package registries.

Improved Support for AWS CodeBuild GitHub Actions Runners.

Bug fixes.

Full Changelog: step-security/harden-runner@v2.20.1...v2.21.0

Commits

dc2769a Merge pull request #707 from step-security/rc-45
ab0b273 Merge pull request #706 from h0x0er/rc-45
03ccff8 Remove agent-preinstalled skip for third-party runners
815e48d Skip agent install and post-step cleanup when agent is already installed
ccd8616 Merge pull request #704 from h0x0er/jatin/ghes-endp
037ccfd implicitly add ghes endpoint in allowList
e7438c7 Merge pull request #703 from h0x0er/jatin/ghes-codebuild-fixes
afb0b33 fixes for armour rules not getting initialised
351661c Merge pull request #701 from step-security/rc-44
1dc7f2e Merge pull request #702 from h0x0er/jatin/ghes-changes-up
Additional commits viewable in compare view

Updates docker/setup-buildx-action from 4.2.0 to 4.4.1

Release notes

Sourced from docker/setup-buildx-action's releases.

v4.4.1

Skip BuildKit image pre-pulls for explicit endpoints by @crazy-max in docker/setup-buildx-action#624

Full Changelog: docker/setup-buildx-action@v4.4.0...v4.4.1

v4.4.0

Use official Buildx releases for cloud driver by @crazy-max in docker/setup-buildx-action#606

Pull BuildKit image before builder creation by @crazy-max in docker/setup-buildx-action#609

Use shared error helpers for Buildx and Docker commands by @crazy-max in docker/setup-buildx-action#620

Bump @docker/actions-toolkit from 0.95.0 to 0.100.0 in docker/setup-buildx-action#610 docker/setup-buildx-action#618 docker/setup-buildx-action#619

Bump @humanfs/node from 0.16.7 to 0.16.8 in docker/setup-buildx-action#614

Bump js-yaml from 5.3.0 to 5.4.2 in docker/setup-buildx-action#608 docker/setup-buildx-action#617

Bump postcss-selector-parser from 7.1.1 to 7.1.5 in docker/setup-buildx-action#611

Full Changelog: docker/setup-buildx-action@v4.3.0...v4.4.0

v4.3.0

Bump @docker/actions-toolkit from 0.92.0 to 0.95.0 in docker/setup-buildx-action#595

Bump brace-expansion from 1.1.13 to 1.1.18 in docker/setup-buildx-action#600

Bump js-yaml from 5.2.0 to 5.3.0 in docker/setup-buildx-action#585

Bump postcss from 8.5.10 to 8.5.25 in docker/setup-buildx-action#598

Bump undici from 6.27.0 to 6.28.0 in docker/setup-buildx-action#601

Full Changelog: docker/setup-buildx-action@v4.2.0...v4.3.0

Commits

f87e599 Merge pull request #624 from crazy-max/skip-pull-with-endpoint
e700274 chore: update generated content
3061c91 skip BuildKit image pre-pulls for explicit endpoints
594f3bf Merge pull request #609 from crazy-max/pull-buildkit-image-before-create
bd6e702 chore: update generated content
6268c9d pull BuildKit image before builder creation
e823525 Merge pull request #621 from docker/dependabot/github_actions/codeql-actions-...
533ed8e build(deps): bump the codeql-actions group with 2 updates
bedaf13 Merge pull request #620 from crazy-max/shared-error-helpers
d5079fb chore: update generated content
Additional commits viewable in compare view

Updates actions/upload-artifact from 7.0.1 to 7.0.2

Release notes

Sourced from actions/upload-artifact's releases.

v7.0.2

What's Changed

Improves artifact download retries when the service returns HTTP 429 (rate limiting), including honoring valid Retry-After headers.

Updates @actions/artifact to v6.3.1.

New Contributors

@tunc-d made their first contribution in actions/upload-artifact#821

Full Changelog: actions/upload-artifact@v7.0.1...v7.0.2

Commits

cf430e0 Merge pull request #822 from actions/tunc-d-prepare-upload-v7-0-2
c2acded chore: prepare v7.0.2 release
4687c1b Merge pull request #821 from actions/tunc-d-upload-artifact-package-bump
8cbe1be Bump @actions/artifact to 6.3.1
See full diff in compare view

Updates actions/download-artifact from 8.0.1 to 8.0.2

Release notes

Sourced from actions/download-artifact's releases.

v8.0.2

What's Changed

Update the readme by @danwkennedy in actions/download-artifact#473

Improves artifact download retries when the service returns HTTP 429 (rate limiting), including honoring valid Retry-After headers.

Update @actions/artifact to 6.3.1 by @tunc-d in actions/download-artifact#492

Prepare download-artifact v8.0.2 by @tunc-d in actions/download-artifact#493

New Contributors

@tunc-d made their first contribution in actions/download-artifact#492

Full Changelog: actions/download-artifact@v8.0.1...v8.0.2

Commits

9000827 Merge pull request #493 from actions/tunc-d-prepare-download-v8-0-2
e455989 Prepare download-artifact v8.0.2
a00b90c Merge pull request #492 from actions/tunc-d-download-artifact-package-bump
29bb7ce Update @actions/artifact to 6.3.1
484a0b5 Update the readme (#473)
See full diff in compare view

Updates astral-sh/setup-uv from 10.1.0 to 10.3.2

Release notes

Sourced from astral-sh/setup-uv's releases.

v10.3.2 🌈 update known checksums for 0.13.5

Changes

🧰 Maintenance

chore: update known checksums for 0.13.5 @github-actions[bot] (#1103)

📚 Documentation

docs: update version references to v10.3.1 @github-actions[bot] (#1102)

v10.3.1 🌈 preserve cache error class names in save-cache bundle

Changes

This release includes a fix so that multiple concurrent workflows trying to upload the same cache no longer warn

##[warning]Failed to save: Unable to reserve cache with key ..., another job may be creating this cache.

🐛 Bug fixes

fix: preserve cache error class names in save-cache bundle @dannyward630 (#1093)

🧰 Maintenance

chore: update known checksums for 0.13.4 @github-actions[bot] (#1099)

chore: update known checksums for 0.13.2/0.13.3 @github-actions[bot] (#1098)

chore: update known checksums for 0.13.1 @github-actions[bot] (#1094)

Verify npm dependency signatures before builds @zaniebot (#1027)

📚 Documentation

docs: cache-dependency-glob matches relative to the working directory @flange-ipb (#1092)

docs: update version references to v10.3.0 @github-actions[bot] (#1090)

⬆️ Dependency updates

chore(deps): roll up Dependabot updates @eifinger (#1101)

v10.3.0 🌈 Add Python architecture selection

Changes

This release adds the python-arch input to select a Python architecture independently of the Python version. With uv 0.13.0 or later, set python-arch: x86_64 to use x64 Python on Windows ARM64 runners.

It also includes embedded checksums for uv releases through 0.13.0.

Use macOS 15 runners for tests @charliermarsh (#1081)

🚀 Enhancements

Add python-arch support @zanieb (#1079)

... (truncated)

Commits

07a047e chore: update known checksums for 0.13.5 (#1103)
e1b8536 docs: update version references to v10.3.1 (#1102)
18d369b chore(deps): roll up Dependabot updates (#1101)
4ad2329 chore: update known checksums for 0.13.4 (#1099)
4bc6759 chore: update known checksums for 0.13.2/0.13.3 (#1098)
c97f06e fix: preserve cache error class names in save-cache bundle (#1093)
8ca4be0 chore: update known checksums for 0.13.1 (#1094)
b627d85 docs: cache-dependency-glob matches relative to the working directory (#1092)
f8c8897 Verify npm dependency signatures before builds (#1027)
f64d32b docs: update version references to v10.3.0 (#1090)
Additional commits viewable in compare view

Updates edera-dev/actions/report-disk-space from 0.0.17 to 0.0.19

Commits

faf6053 feat(push-metrics): switch from Pushgateway to Prometheus remote_write (#32)
d72451e feat: add push-metrics action (#30)
f516281 feat(notify-slack): add resolve mode to auto-close tracking issues on recover...
See full diff in compare view

Updates edera-dev/actions/reclaim-disk-space from 0.0.17 to 0.0.19

Commits

faf6053 feat(push-metrics): switch from Pushgateway to Prometheus remote_write (#32)
d72451e feat: add push-metrics action (#30)
f516281 feat(notify-slack): add resolve mode to auto-close tracking issues on recover...
See full diff in compare view

Updates edera-dev/actions/configure-azure-sccache from 0.0.17 to 0.0.19

Commits

faf6053 feat(push-metrics): switch from Pushgateway to Prometheus remote_write (#32)
d72451e feat: add push-metrics action (#30)
f516281 feat(notify-slack): add resolve mode to auto-close tracking issues on recover...
See full diff in compare view

Updates edera-dev/actions/.github/workflows/advisory-review.yml from 0c15ad17d0b4e52af066d268a249d6ac3c7ce3b8 to 72785a27a033e2a64c53d9d55c88253fa174cc16

Commits

72785a2 feat(advisory-review): run the checks on Opus 5.5 at max effort
3bb6513 test(advisory-review): mark the literal backticks in the link pattern
f9f8d3a test(advisory-review): stop the contract checks racing their own pipes
See full diff in compare view

Updates actions/create-github-app-token from 3.2.0 to 3.3.0

Release notes

Sourced from actions/create-github-app-token's releases.

v3.3.0

3.3.0 (2026-10-12)

Features

update permission inputs (#399) (a47236f)

Bug Fixes

deps: bump nested undici from 6.24.0 to 6.29.0 (#403) (12461a3)

deps: bump the production-dependencies group across 1 directory with 3 updates (#395) (a69c19d)

Changelog

Sourced from actions/create-github-app-token's changelog.

Changelog

3.3.0 (2026-10-12)

Features

update permission inputs (#399) (a47236f)

Bug Fixes

deps: bump nested undici from 6.24.0 to 6.29.0 (#403) (12461a3)

deps: bump the production-dependencies group across 1 directory with 3 updates (#395) (a69c19d)

3.2.0 (2026-05-12)

Features

add support for enterprise-level GitHub Apps (#263) (952a2a7)

support full repository names in repositories input (#372) (85eb8dd)

Bug Fixes

deps: bump @actions/core from 3.0.0 to 3.0.1 in the production-dependencies group (#364) (43e5c34)

validate private-key input (#376) (f24bbd8)

Commits

64ab729 chore(main): release 3.3.0 (#402)
f3a828e ci: create signed dist commits in release workflow (#404)
655017f docs: clarify when owner grants access to all repositories (#378)
12461a3 fix(deps): bump nested undici from 6.24.0 to 6.29.0 (#403)
a47236f feat: update permission inputs (#399)
a69c19d fix(deps): bump the production-dependencies group across 1 directory with 3 u...
d5cb7ae build(deps): bump actions/checkout from 6 to 7 (#384)
575da86 build(deps): bump stefanzweifel/git-auto-commit-action from 7.1.0 to 7.2.0 in...
e85f677 test: omit stack traces from snapshots (#401)
9419396 build(deps-dev): bump c8 from 11.0.0 to 12.0.0 (#400)
Additional commits viewable in compare view

…0 updates Bumps the actions-updates group with 10 updates in the / directory: | Package | From | To | | --- | --- | --- | | [step-security/harden-runner](https://github.com/step-security/harden-runner) | `2.20.1` | `2.22.2` | | [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `4.2.0` | `4.4.1` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `7.0.1` | `7.0.2` | | [actions/download-artifact](https://github.com/actions/download-artifact) | `8.0.1` | `8.0.2` | | [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) | `10.1.0` | `10.3.2` | | [edera-dev/actions/report-disk-space](https://github.com/edera-dev/actions) | `0.0.17` | `0.0.19` | | [edera-dev/actions/reclaim-disk-space](https://github.com/edera-dev/actions) | `0.0.17` | `0.0.19` | | [edera-dev/actions/configure-azure-sccache](https://github.com/edera-dev/actions) | `0.0.17` | `0.0.19` | | [edera-dev/actions/.github/workflows/advisory-review.yml](https://github.com/edera-dev/actions) | `0c15ad17d0b4e52af066d268a249d6ac3c7ce3b8` | `72785a27a033e2a64c53d9d55c88253fa174cc16` | | [actions/create-github-app-token](https://github.com/actions/create-github-app-token) | `3.2.0` | `3.3.0` | Updates `step-security/harden-runner` from 2.20.1 to 2.22.2 - [Release notes](https://github.com/step-security/harden-runner/releases) - [Commits](step-security/harden-runner@b09bb98...dc2769a) Updates `docker/setup-buildx-action` from 4.2.0 to 4.4.1 - [Release notes](https://github.com/docker/setup-buildx-action/releases) - [Commits](docker/setup-buildx-action@bb05f3f...f87e599) Updates `actions/upload-artifact` from 7.0.1 to 7.0.2 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@043fb46...cf430e0) Updates `actions/download-artifact` from 8.0.1 to 8.0.2 - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](actions/download-artifact@3e5f45b...9000827) Updates `astral-sh/setup-uv` from 10.1.0 to 10.3.2 - [Release notes](https://github.com/astral-sh/setup-uv/releases) - [Commits](astral-sh/setup-uv@bec219d...07a047e) Updates `edera-dev/actions/report-disk-space` from 0.0.17 to 0.0.19 - [Release notes](https://github.com/edera-dev/actions/releases) - [Commits](edera-dev/actions@6e6996f...faf6053) Updates `edera-dev/actions/reclaim-disk-space` from 0.0.17 to 0.0.19 - [Release notes](https://github.com/edera-dev/actions/releases) - [Commits](edera-dev/actions@6e6996f...faf6053) Updates `edera-dev/actions/configure-azure-sccache` from 0.0.17 to 0.0.19 - [Release notes](https://github.com/edera-dev/actions/releases) - [Commits](edera-dev/actions@6e6996f...faf6053) Updates `edera-dev/actions/.github/workflows/advisory-review.yml` from 0c15ad17d0b4e52af066d268a249d6ac3c7ce3b8 to 72785a27a033e2a64c53d9d55c88253fa174cc16 - [Release notes](https://github.com/edera-dev/actions/releases) - [Commits](edera-dev/actions@0c15ad1...72785a2) Updates `actions/create-github-app-token` from 3.2.0 to 3.3.0 - [Release notes](https://github.com/actions/create-github-app-token/releases) - [Changelog](https://github.com/actions/create-github-app-token/blob/main/CHANGELOG.md) - [Commits](actions/create-github-app-token@bcd2ba4...64ab729) --- updated-dependencies: - dependency-name: actions/create-github-app-token dependency-version: 3.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-updates - dependency-name: actions/download-artifact dependency-version: 8.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-updates - dependency-name: actions/upload-artifact dependency-version: 7.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-updates - dependency-name: astral-sh/setup-uv dependency-version: 10.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-updates - dependency-name: docker/setup-buildx-action dependency-version: 4.4.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-updates - dependency-name: edera-dev/actions/.github/workflows/advisory-review.yml dependency-version: 72785a27a033e2a64c53d9d55c88253fa174cc16 dependency-type: direct:production dependency-group: actions-updates - dependency-name: edera-dev/actions/configure-azure-sccache dependency-version: 0.0.19 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-updates - dependency-name: edera-dev/actions/reclaim-disk-space dependency-version: 0.0.19 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-updates - dependency-name: edera-dev/actions/report-disk-space dependency-version: 0.0.19 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-updates - dependency-name: step-security/harden-runner dependency-version: 2.22.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-updates ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot requested a review from kaniini as a code owner October 15, 2026 16:39

dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 15, 2026

dependabot Bot requested review from alexandermerritt, azenla, bleggett and tycho as code owners October 15, 2026 16:39

dependabot Bot added the github_actions Pull requests that update GitHub Actions code label Oct 15, 2026

dependabot Bot force-pushed the dependabot/github_actions/actions-updates-e471990e80 branch 2 times, most recently from f542832 to 4e5c6e1 Compare October 21, 2026 00:44

dependabot Bot force-pushed the dependabot/github_actions/actions-updates-e471990e80 branch from 4e5c6e1 to 1ec95cf Compare October 26, 2026 17:00

bleggett force-pushed the dependabot/github_actions/actions-updates-e471990e80 branch from 1ec95cf to f97c312 Compare October 26, 2026 20:42

bleggett approved these changes Oct 26, 2026

View reviewed changes

bleggett force-pushed the dependabot/github_actions/actions-updates-e471990e80 branch from f97c312 to b65e722 Compare October 26, 2026 23:18

Navigation Menu

Repository navigation

build(deps): bump the actions-updates group across 1 directory with 10 updates - #286

build(deps): bump the actions-updates group across 1 directory with 10 updates#286
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions-updates-e471990e80

dependabot Bot commented on behalf of github Oct 15, 2026 •

edited

Loading

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Oct 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v2.22.2

What's Changed

v2.22.1

What's Changed

v2.22.0

What's Changed

v2.21.1

What's Changed

v2.21.0

What's Changed

v4.4.1

v4.4.0

v4.3.0

v7.0.2

What's Changed

New Contributors

v8.0.2

What's Changed

New Contributors

v10.3.2 🌈 update known checksums for 0.13.5

Changes

🧰 Maintenance

📚 Documentation

v10.3.1 🌈 preserve cache error class names in save-cache bundle

Changes

🐛 Bug fixes

🧰 Maintenance

📚 Documentation

⬆️ Dependency updates

v10.3.0 🌈 Add Python architecture selection

Changes

🚀 Enhancements

v3.3.0

3.3.0 (2026-10-12)

Features

Bug Fixes

Changelog

3.3.0 (2026-10-12)

Features

Bug Fixes

3.2.0 (2026-05-12)

Features

Bug Fixes

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Oct 15, 2026 •

edited

Loading