Skip to content

build(deps): combine four green bumps (2026-11-01) - #7290

Merged
compwron merged 4 commits into
mainfrom
combined-deps-2026-11-01
Nov 1, 2026
Merged

compwron merged 4 commits into
mainfrom
combined-deps-2026-11-01

Conversation

@compwron

@compwron compwron commented Nov 1, 2026

Copy link
Copy Markdown
Collaborator

Combines four dependency PRs that were green on their own, so they're tested together in one CI run (same approach as #7261). Dependabot and Renovate should close the originals after this merges.

PR Bump Files
#7245 view_component 4.16.0 → 4.19.0 Gemfile.lock
#7255 actions/cache 4.2.4 → 6.1.0 rspec.yml
#7259 actions/upload-artifact 7.0.1 → 7.0.2 codeql-analysis.yml, docker.yml, rspec.yml
#7244 actions/download-artifact digest combine_and_report.yml

Cherry-picked with -x, with no conflicts. Locally, spec/components passes (27 examples, 2 pending) on view_component 4.19.0.

Not included: #7158 (tom-select 2.6.2, CI failing), #7209 (Ruby docker tag, CI failing), and the bumps already tracked in #7275–#7278.

Note: this touches .github/workflows/, so merging with gh needs a token with the workflow scope (gh auth refresh -s workflow), or merge from the web UI.

🤖 Generated with Claude Code

dependabot Bot and others added 4 commits October 31, 2026 23:50
Bumps [view_component](https://github.com/viewcomponent/view_component) from 4.16.0 to 4.19.0.
- [Release notes](https://github.com/viewcomponent/view_component/releases)
- [Changelog](https://github.com/ViewComponent/view_component/blob/main/docs/CHANGELOG.md)
- [Commits](ViewComponent/view_component@v4.16.0...v4.19.0)

---
updated-dependencies:
- dependency-name: view_component
  dependency-version: 4.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
(cherry picked from commit f4b1f49)
Bumps [actions/cache](https://github.com/actions/cache) from 4.2.4 to 6.1.0.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](actions/cache@0400d5f...55cc834)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-version: 6.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
(cherry picked from commit c32ff51)
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 7.0.1 to 7.0.2.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@043fb46...cf430e0)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: 7.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
(cherry picked from commit a8ee9e2)
@github-actions github-actions Bot added the dependencies Touches dependency files label Nov 1, 2026
@compwron
compwron merged commit 380477a into main Nov 1, 2026
13 checks passed
@compwron
compwron deleted the combined-deps-2026-11-01 branch November 1, 2026 06:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Touches dependency files

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant