ci(deps)(deps): bump the github-actions group across 1 directory with 10 updates by dependabot[bot] · Pull Request #314 · RAprogramm/entity-derive

dependabot · 2026-10-12T07:41:47Z

Bumps the github-actions group with 10 updates in the / directory:

Package	From	To
taiki-e/install-action	`2.86.5`	`2.87.27`
actions/upload-artifact	`7.0.1`	`7.0.2`
codecov/codecov-action	`7.0.0`	`7.1.1`
github/codeql-action/init	`4.37.8`	`4.38.3`
github/codeql-action/autobuild	`4.37.8`	`4.38.3`
github/codeql-action/analyze	`4.37.8`	`4.38.3`
anchore/sbom-action	`0.24.0`	`0.24.3`
release-plz/action	`0.5.131`	`0.5.140`
github/codeql-action/upload-sarif	`4.37.8`	`4.38.3`
actions/deploy-pages	`5.0.0`	`5.0.1`

Updates taiki-e/install-action from 2.86.5 to 2.87.27

Release notes

Sourced from taiki-e/install-action's releases.

2.87.27

Update vacuum@latest to 0.32.0.

Update uv@latest to 0.12.24.

Update typos@latest to 1.51.1.

Update tombi@latest to 1.7.3.

Update syft@latest to 1.54.1.

Update release-plz@latest to 0.3.170.

Update mise@latest to 2026.10.4.

Update kingfisher@latest to 2.11.1.

Update hyperfine@latest to 2.0.0.

Update dprint@latest to 0.61.1.

Update cargo-nextest@latest to 0.9.148.

Update cargo-neat@latest to 0.6.0.

Update cargo-binstall@latest to 1.25.2.

2.87.26

Update tombi@latest to 1.7.2.

Update prek@latest to 0.5.5.

Update mise@latest to 2026.10.3.

Update kache@latest to 1.0.0.

Update hyperfine@latest to 1.21.0.

2.87.25

Update uv@latest to 0.12.23.

Update mise@latest to 2026.10.2.

Update kingfisher@latest to 2.10.0.

Update dprint@latest to 0.60.1.

Update cargo-semver-checks@latest to 0.51.0.

Update cargo-binstall@latest to 1.25.1.

... (truncated)

Changelog

Sourced from taiki-e/install-action's changelog.

Changelog

All notable changes to this project will be documented in this file.

This project adheres to Semantic Versioning.

[Unreleased]

[2.87.28] - 2026-10-12

Update dprint@latest to 0.62.0.

Update vacuum@latest to 0.33.0.

Update uv@latest to 0.13.0.

Update tombi@latest to 1.8.1.

Update release-plz@latest to 0.3.171.

Update rclone@latest to 1.75.2.

Update mise@latest to 2026.10.7.

Update cargo-binstall@latest to 1.25.3.

[2.87.27] - 2026-10-09

Update vacuum@latest to 0.32.0.

Update uv@latest to 0.12.24.

Update typos@latest to 1.51.1.

Update tombi@latest to 1.7.3.

Update syft@latest to 1.54.1.

Update release-plz@latest to 0.3.170.

Update mise@latest to 2026.10.4.

Update kingfisher@latest to 2.11.1.

Update hyperfine@latest to 2.0.0.

... (truncated)

Commits

ab68953 Release 2.87.27
62530fd Update vacuum@latest to 0.32.0
f684ea4 Update uv@latest to 0.12.24
8aa87a0 Update typos@latest to 1.51.1
5ffcf43 Update tombi@latest to 1.7.3
9926636 Update syft@latest to 1.54.1
4647f42 Update release-plz@latest to 0.3.170
df02560 Update rclone manifest
d7c82f4 Update mise@latest to 2026.10.4
a6142d0 Update kingfisher@latest to 2.11.1
Additional commits viewable in compare view

Updates actions/upload-artifact from 7.0.1 to 7.0.2

Release notes

Sourced from actions/upload-artifact's releases.

v7.0.2

What's Changed

Improves artifact download retries when the service returns HTTP 429 (rate limiting), including honoring valid Retry-After headers.

Updates @actions/artifact to v6.3.1.

New Contributors

@tunc-d made their first contribution in actions/upload-artifact#821

Full Changelog: actions/upload-artifact@v7.0.1...v7.0.2

Commits

cf430e0 Merge pull request #822 from actions/tunc-d-prepare-upload-v7-0-2
c2acded chore: prepare v7.0.2 release
4687c1b Merge pull request #821 from actions/tunc-d-upload-artifact-package-bump
8cbe1be Bump @actions/artifact to 6.3.1
See full diff in compare view

Updates codecov/codecov-action from 7.0.0 to 7.1.1

Release notes

Sourced from codecov/codecov-action's releases.

v7.1.1

What's Changed

chore(release): 7.1.1 by @thomasrockhu-codecov in codecov/codecov-action#1973

Full Changelog: codecov/codecov-action@v7.1.0...v7.1.1

v7.1.0

What's Changed

chore(release): 7.1.0 by @thomasrockhu-codecov in codecov/codecov-action#1971

Full Changelog: codecov/codecov-action@v7.0.0...v7.1.0

Commits

303a32d chore(release): 7.1.1 (#1973)
0b35c9e chore(release): 7.1.0 (#1971)
See full diff in compare view

Updates github/codeql-action/init from 4.37.8 to 4.38.3

Release notes

Sourced from github/codeql-action/init's releases.

v4.38.3

Upcoming breaking change: CodeQL version 2.21.2 and earlier were discontinued on 24 September 2026 alongside GitHub Enterprise Server 3.17, and will be unsupported by the next minor release of the CodeQL Action. Added a deprecation warning for customers using these versions of CodeQL. #4188

Update default CodeQL bundle version to 2.27.2. #4203

Fixed a bug where the decision of whether to use a per-language bundle did not account for custom configurations that reference queries outside of compiled CodeQL packs. This issue was caught during internal testing and did not affect any customer repositories. We will resume the roll out of per-language bundles in the coming weeks. #4184

v4.38.2

Update default CodeQL bundle version to 2.27.1. #4160

v4.38.1

The CodeQL Action now has experimental support for CodeQL releases for which per-language bundles are available. Per-language bundles support analysis for a single language and are therefore smaller than the combined bundles that allow analysis for all supported languages. As a result, per-language bundles take up less space on disk and are faster to download. We expect to roll this change out to everyone in the coming weeks. #4146

v4.38.0

On GitHub-hosted runners, the CodeQL Action now deletes unused CodeQL bundles from the toolcache before downloading a different bundle, which frees up disk space for the analysis. We expect to roll this change out to everyone in September. #4124

The CodeQL Action now supports CodeQL releases that are compatible with Linux Arm64 and downloads the native linux-arm64 CodeQL bundle when available. #4072

Update default CodeQL bundle version to 2.27.0. #4129

v4.37.9

Update default CodeQL bundle version to 2.26.4. #4106

Changelog

Sourced from github/codeql-action/init's changelog.

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

[UNRELEASED]

No user facing changes.

4.38.3 - 08 Oct 2026

Upcoming breaking change: CodeQL version 2.21.2 and earlier were discontinued on 24 September 2026 alongside GitHub Enterprise Server 3.17, and will be unsupported by the next minor release of the CodeQL Action. Added a deprecation warning for customers using these versions of CodeQL. #4188

Update default CodeQL bundle version to 2.27.2. #4203

Fixed a bug where the decision of whether to use a per-language bundle did not account for custom configurations that reference queries outside of compiled CodeQL packs. This issue was caught during internal testing and did not affect any customer repositories. We will resume the roll out of per-language bundles in the coming weeks. #4184

4.38.2 - 24 Sept 2026

Update default CodeQL bundle version to 2.27.1. #4160

4.38.1 - 18 Sept 2026

The CodeQL Action now has experimental support for CodeQL releases for which per-language bundles are available. Per-language bundles support analysis for a single language and are therefore smaller than the combined bundles that allow analysis for all supported languages. As a result, per-language bundles take up less space on disk and are faster to download. We expect to roll this change out to everyone in the coming weeks. #4146

4.38.0 - 09 Sept 2026

On GitHub-hosted runners, the CodeQL Action now deletes unused CodeQL bundles from the toolcache before downloading a different bundle, which frees up disk space for the analysis. We expect to roll this change out to everyone in September. #4124

The CodeQL Action now supports CodeQL releases that are compatible with Linux Arm64 and downloads the native linux-arm64 CodeQL bundle when available. #4072

Update default CodeQL bundle version to 2.27.0. #4129

4.37.9 - 26 Aug 2026

Update default CodeQL bundle version to 2.26.4. #4106

4.37.8 - 21 Aug 2026

No user facing changes.

4.37.7 - 13 Aug 2026

Update default CodeQL bundle version to 2.26.3. #4085

4.37.6 - 04 Aug 2026

Changed the default filepath for the new remote file address format that was introduced in CodeQL Action 4.37.0 / 3.37.0 to .github/codeql-config.yml to align it with the suggested path that is used elsewhere. #4070

4.37.5 - 03 Aug 2026

Fixed a bug where a network error while streaming the download of the CodeQL bundle could terminate the init Action instead of falling back to downloading the bundle before extracting it. #4061

4.37.4 - 29 Jul 2026

... (truncated)

Commits

24c5418 Merge pull request #4214 from github/update-v4.38.3-e0b52dbdc
69e87c5 Add changelog note for #4184
23b6828 Update changelog for v4.38.3
e0b52db Merge pull request #4210 from github/henrymercer/pin-python-for-older-clis-in-ci
6b99698 Pin Python 3.13.15 for older CLI versions in multi-language check
63d3d63 Merge pull request #4203 from github/update-bundle/codeql-bundle-v2.27.2
7377a10 Add changelog note
c1a30cd Update default bundle to codeql-bundle-v2.27.2
d208ec7 Merge pull request #4200 from github/mbg/esm/migrate-pr-checks
a71b0c6 Replace __dirname in sync.ts
Additional commits viewable in compare view

Updates github/codeql-action/autobuild from 4.37.8 to 4.38.3

Release notes

Sourced from github/codeql-action/autobuild's releases.

v4.38.3

Upcoming breaking change: CodeQL version 2.21.2 and earlier were discontinued on 24 September 2026 alongside GitHub Enterprise Server 3.17, and will be unsupported by the next minor release of the CodeQL Action. Added a deprecation warning for customers using these versions of CodeQL. #4188

Update default CodeQL bundle version to 2.27.2. #4203

Fixed a bug where the decision of whether to use a per-language bundle did not account for custom configurations that reference queries outside of compiled CodeQL packs. This issue was caught during internal testing and did not affect any customer repositories. We will resume the roll out of per-language bundles in the coming weeks. #4184

v4.38.2

Update default CodeQL bundle version to 2.27.1. #4160

v4.38.1

The CodeQL Action now has experimental support for CodeQL releases for which per-language bundles are available. Per-language bundles support analysis for a single language and are therefore smaller than the combined bundles that allow analysis for all supported languages. As a result, per-language bundles take up less space on disk and are faster to download. We expect to roll this change out to everyone in the coming weeks. #4146

v4.38.0

On GitHub-hosted runners, the CodeQL Action now deletes unused CodeQL bundles from the toolcache before downloading a different bundle, which frees up disk space for the analysis. We expect to roll this change out to everyone in September. #4124

The CodeQL Action now supports CodeQL releases that are compatible with Linux Arm64 and downloads the native linux-arm64 CodeQL bundle when available. #4072

Update default CodeQL bundle version to 2.27.0. #4129

v4.37.9

Update default CodeQL bundle version to 2.26.4. #4106

Changelog

Sourced from github/codeql-action/autobuild's changelog.

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

[UNRELEASED]

No user facing changes.

4.38.3 - 08 Oct 2026

Upcoming breaking change: CodeQL version 2.21.2 and earlier were discontinued on 24 September 2026 alongside GitHub Enterprise Server 3.17, and will be unsupported by the next minor release of the CodeQL Action. Added a deprecation warning for customers using these versions of CodeQL. #4188

Update default CodeQL bundle version to 2.27.2. #4203

Fixed a bug where the decision of whether to use a per-language bundle did not account for custom configurations that reference queries outside of compiled CodeQL packs. This issue was caught during internal testing and did not affect any customer repositories. We will resume the roll out of per-language bundles in the coming weeks. #4184

4.38.2 - 24 Sept 2026

Update default CodeQL bundle version to 2.27.1. #4160

4.38.1 - 18 Sept 2026

The CodeQL Action now has experimental support for CodeQL releases for which per-language bundles are available. Per-language bundles support analysis for a single language and are therefore smaller than the combined bundles that allow analysis for all supported languages. As a result, per-language bundles take up less space on disk and are faster to download. We expect to roll this change out to everyone in the coming weeks. #4146

4.38.0 - 09 Sept 2026

On GitHub-hosted runners, the CodeQL Action now deletes unused CodeQL bundles from the toolcache before downloading a different bundle, which frees up disk space for the analysis. We expect to roll this change out to everyone in September. #4124

The CodeQL Action now supports CodeQL releases that are compatible with Linux Arm64 and downloads the native linux-arm64 CodeQL bundle when available. #4072

Update default CodeQL bundle version to 2.27.0. #4129

4.37.9 - 26 Aug 2026

Update default CodeQL bundle version to 2.26.4. #4106

4.37.8 - 21 Aug 2026

No user facing changes.

4.37.7 - 13 Aug 2026

Update default CodeQL bundle version to 2.26.3. #4085

4.37.6 - 04 Aug 2026

Changed the default filepath for the new remote file address format that was introduced in CodeQL Action 4.37.0 / 3.37.0 to .github/codeql-config.yml to align it with the suggested path that is used elsewhere. #4070

4.37.5 - 03 Aug 2026

Fixed a bug where a network error while streaming the download of the CodeQL bundle could terminate the init Action instead of falling back to downloading the bundle before extracting it. #4061

4.37.4 - 29 Jul 2026

... (truncated)

Commits

24c5418 Merge pull request #4214 from github/update-v4.38.3-e0b52dbdc
69e87c5 Add changelog note for #4184
23b6828 Update changelog for v4.38.3
e0b52db Merge pull request #4210 from github/henrymercer/pin-python-for-older-clis-in-ci
6b99698 Pin Python 3.13.15 for older CLI versions in multi-language check
63d3d63 Merge pull request #4203 from github/update-bundle/codeql-bundle-v2.27.2
7377a10 Add changelog note
c1a30cd Update default bundle to codeql-bundle-v2.27.2
d208ec7 Merge pull request #4200 from github/mbg/esm/migrate-pr-checks
a71b0c6 Replace __dirname in sync.ts
Additional commits viewable in compare view

Updates github/codeql-action/analyze from 4.37.8 to 4.38.3

Release notes

Sourced from github/codeql-action/analyze's releases.

v4.38.3

Upcoming breaking change: CodeQL version 2.21.2 and earlier were discontinued on 24 September 2026 alongside GitHub Enterprise Server 3.17, and will be unsupported by the next minor release of the CodeQL Action. Added a deprecation warning for customers using these versions of CodeQL. #4188

Update default CodeQL bundle version to 2.27.2. #4203

Fixed a bug where the decision of whether to use a per-language bundle did not account for custom configurations that reference queries outside of compiled CodeQL packs. This issue was caught during internal testing and did not affect any customer repositories. We will resume the roll out of per-language bundles in the coming weeks. #4184

v4.38.2

Update default CodeQL bundle version to 2.27.1. #4160

v4.38.1

The CodeQL Action now has experimental support for CodeQL releases for which per-language bundles are available. Per-language bundles support analysis for a single language and are therefore smaller than the combined bundles that allow analysis for all supported languages. As a result, per-language bundles take up less space on disk and are faster to download. We expect to roll this change out to everyone in the coming weeks. #4146

v4.38.0

On GitHub-hosted runners, the CodeQL Action now deletes unused CodeQL bundles from the toolcache before downloading a different bundle, which frees up disk space for the analysis. We expect to roll this change out to everyone in September. #4124

The CodeQL Action now supports CodeQL releases that are compatible with Linux Arm64 and downloads the native linux-arm64 CodeQL bundle when available. #4072

Update default CodeQL bundle version to 2.27.0. #4129

v4.37.9

Update default CodeQL bundle version to 2.26.4. #4106

Changelog

Sourced from github/codeql-action/analyze's changelog.

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

[UNRELEASED]

No user facing changes.

4.38.3 - 08 Oct 2026

Upcoming breaking change: CodeQL version 2.21.2 and earlier were discontinued on 24 September 2026 alongside GitHub Enterprise Server 3.17, and will be unsupported by the next minor release of the CodeQL Action. Added a deprecation warning for customers using these versions of CodeQL. #4188

Update default CodeQL bundle version to 2.27.2. #4203

Fixed a bug where the decision of whether to use a per-language bundle did not account for custom configurations that reference queries outside of compiled CodeQL packs. This issue was caught during internal testing and did not affect any customer repositories. We will resume the roll out of per-language bundles in the coming weeks. #4184

4.38.2 - 24 Sept 2026

Update default CodeQL bundle version to 2.27.1. #4160

4.38.1 - 18 Sept 2026

The CodeQL Action now has experimental support for CodeQL releases for which per-language bundles are available. Per-language bundles support analysis for a single language and are therefore smaller than the combined bundles that allow analysis for all supported languages. As a result, per-language bundles take up less space on disk and are faster to download. We expect to roll this change out to everyone in the coming weeks. #4146

4.38.0 - 09 Sept 2026

On GitHub-hosted runners, the CodeQL Action now deletes unused CodeQL bundles from the toolcache before downloading a different bundle, which frees up disk space for the analysis. We expect to roll this change out to everyone in September. #4124

The CodeQL Action now supports CodeQL releases that are compatible with Linux Arm64 and downloads the native linux-arm64 CodeQL bundle when available. #4072

Update default CodeQL bundle version to 2.27.0. #4129

4.37.9 - 26 Aug 2026

Update default CodeQL bundle version to 2.26.4. #4106

4.37.8 - 21 Aug 2026

No user facing changes.

4.37.7 - 13 Aug 2026

Update default CodeQL bundle version to 2.26.3. #4085

4.37.6 - 04 Aug 2026

Changed the default filepath for the new remote file address format that was introduced in CodeQL Action 4.37.0 / 3.37.0 to .github/codeql-config.yml to align it with the suggested path that is used elsewhere. #4070

4.37.5 - 03 Aug 2026

Fixed a bug where a network error while streaming the download of the CodeQL bundle could terminate the init Action instead of falling back to downloading the bundle before extracting it. #4061

4.37.4 - 29 Jul 2026

... (truncated)

Commits

24c5418 Merge pull request #4214 from github/update-v4.38.3-e0b52dbdc
69e87c5 Add changelog note for #4184
23b6828 Update changelog for v4.38.3
e0b52db Merge pull request #4210 from github/henrymercer/pin-python-for-older-clis-in-ci
6b99698 Pin Python 3.13.15 for older CLI versions in multi-language check
63d3d63 Merge pull request #4203 from github/update-bundle/codeql-bundle-v2.27.2
7377a10 Add changelog note
c1a30cd Update default bundle to codeql-bundle-v2.27.2
d208ec7 Merge pull request #4200 from github/mbg/esm/migrate-pr-checks
a71b0c6 Replace __dirname in sync.ts
Additional commits viewable in compare view

Updates anchore/sbom-action from 0.24.0 to 0.24.3

Release notes

Sourced from anchore/sbom-action's releases.

v0.24.3

Added Features

bump type-fest from 5.9.0 to 5.10.0 [PR #742 @dependabot]

bump @types/node from 26.5.1 to 26.6.1 [PR #741 @dependabot]

bump @types/node from 26.4.1 to 26.5.1 [PR #737 @dependabot]

bump typescript-eslint from 8.69.0 to 8.70.0 [PR #736 @dependabot]

bump type-fest from 5.8.0 to 5.9.0 [PR #732 @dependabot]

bump eslint from 10.9.1 to 10.10.0 [PR #733 @dependabot]

bump typescript-eslint from 8.68.0 to 8.69.0 [PR #730 @dependabot]

bump @types/node from 26.2.0 to 26.4.0 [PR #727 @dependabot]

bump typescript-eslint from 8.67.0 to 8.68.0 [PR #726 @dependabot]

Bug Fixes

bump github.com/anchore/go-make from 0.8.0 to 0.8.1 in /.make [PR #738 @dependabot]

bump anchore/go-make/.github/actions/setup from 0.8.0 to 0.8.1 in /.github/actions/bootstrap [PR #740 @dependabot]

bump zizmorcore/zizmor-action from 0.6.3 to 0.6.4 [PR #739 @dependabot]

bump zizmorcore/zizmor-action from 0.6.2 to 0.6.3 [PR #734 @dependabot]

bump @types/node from 26.4.0 to 26.4.1 [PR #731 @dependabot]

bump tsx from 4.23.12 to 4.23.13 [PR #729 @dependabot]

bump eslint from 10.9.0 to 10.9.1 [PR #728 @dependabot]

bump @humanfs/node from 0.16.7 to 0.16.8 [PR #725 @dependabot]

(Full Changelog)

v0.24.2

Added Features

bump eslint from 10.8.1 to 10.9.0 [#724 @dependabot]

Additional Changes

add makefile target to bump syft [#620 @willmurphyscode]

update zizmor workflow triggers [#624 @wagoodman]

require zizmor security events [#621 @wagoodman]

(Full Changelog)

Commits

66cbf4b chore(deps): update Syft to latest release (#735)
6b31fa7 chore(deps-dev): bump type-fest from 5.9.0 to 5.10.0 (#742)
85bda36 chore(deps-dev): bump @types/node from 26.5.1 to 26.6.1 (#741)
7b97c1e chore(deps): bump github.com/anchore/go-make in /.make (#738)
891b055 chore(deps): bump anchore/go-make/.github/actions/setup (#740)
f73cf48 chore(deps): bump zizmorcore/zizmor-action from 0.6.3 to 0.6.4 (#739)
13576db chore(deps-dev): bump @types/node from 26.4.1 to 26.5.1 (#737)
924e83b chore(deps-dev): bump typescript-eslint from 8.69.0 to 8.70.0 (#736)
274555f chore(deps-dev): bump type-fest from 5.8.0 to 5.9.0 (#732)
48fb538 chore(deps): bump zizmorcore/zizmor-action from 0.6.2 to 0.6.3 (#734)
Additional commits viewable in compare view

Updates release-plz/action from 0.5.131 to 0.5.140

Release notes

Sourced from release-plz/action's releases.

v0.5.140

What's Changed

fix(deps): update rust crate git_cmd to 0.7.0 by @renovate[bot] in release-plz/action#539

chore(deps): update dependency taiki-e/install-action to v2.87.17 by @renovate[bot] in release-plz/action#541

chore(deps): lock file maintenance by @renovate[bot] in release-plz/action#542

chore(deps): update dependency taiki-e/install-action to v2.87.18 by @renovate[bot] in release-plz/action#543

chore(deps): update dependency taiki-e/install-action to v2.87.19 by @renovate[bot] in release-plz/action#544

chore(deps): update dependency taiki-e/install-action to v2.87.20 by @renovate[bot] in release-plz/action#545

chore(deps): update dependency cargo-bins/cargo-binstall to v1.24.0 by @renovate[bot] in release-plz/action#546

chore(deps): update dependency taiki-e/install-action to v2.87.21 by @renovate[bot] in release-plz/action#547

docs: document the default config search order by @marcoienibot in release-plz/action#548

chore(deps): lock file maintenance by @renovate[bot] in release-plz/action#549

chore(deps): update dependency taiki-e/install-action to v2.87.22 by @renovate[bot] in release-plz/action#550

chore(deps): update dependency cargo-bins/cargo-binstall to v1.25.0 by @renovate[bot] in release-plz/action#551

chore(deps): update dependency cargo-bins/cargo-binstall to v1.25.1 by @renovate[bot] in release-plz/action#552

chore(deps): update dependency taiki-e/install-action to v2.87.23 by @renovate[bot] in release-plz/action#553

chore(deps): update dependency obi1kenobi/cargo-semver-checks to v0.51 by @renovate[bot] in release-plz/action#554

chore(deps): update dependency taiki-e/install-action to v2.87.24 by @renovate[bot] in release-plz/action#555

update github actions weekly by @marcoieni in release-plz/action#556

chore(deps): lock file maintenance by @renovate[bot] in release-plz/action#557

chore(deps): update dependency taiki-e/install-action to v2.87.25 by @renovate[bot] in release-plz/action#558

chore(deps): update dependency cargo-bins/cargo-binstall to v1.25.2 by @renovate[bot] in release-plz/action#559

chore(deps): update dependency taiki-e/install-action to v2.87.26 by @renovate[bot] in release-plz/action#560

Update to 0.3.170 by @marcoieni in release-plz/action#561

Full Changelog: release-plz/action@v0.5.139...v0.5.140

v0.5.139

What's Changed

chore(deps): update dependency taiki-e/install-action to v2.87.14 by @renovate[bot] in release-plz/action#536

chore(deps): update dependency taiki-e/install-action to v2.87.15 by @renovate[bot] in release-plz/action#537

chore(deps): update dependency taiki-e/install-action to v2.87.16 by @renovate[bot] in release-plz/action#538

Update to 0.3.169 by @marcoieni in release-plz/action#540

Full Changelog: release-plz/action@v0.5.138...v0.5.139

v0.5.138

What's Changed

chore(deps): lock file maintenance by @renovate[bot] in release-plz/action#532

chore(deps): update dependency taiki-e/install-action to v2.87.13 by @renovate[bot] in release-plz/action#534

Update to 0.3.168 by @marcoieni in release-plz/action#535

Full Changelog: release-plz/action@v0.5.137...v0.5.138

v0.5.137

What's Changed

chore(deps): update dependency taiki-e/install-action to v2.87.10 by @renovate[bot] in release-plz/action#526

... (truncated)

Commits

18641b6 Update to 0.3.170 (#561)
ff20e36 chore(deps): update dependency taiki-e/install-action to v2.87.26 (#560)
7a48fcf chore(deps): update dependency cargo-bins/cargo-binstall to v1.25.2 (#559)
3491eb1 chore(deps): update dependency taiki-e/install-action to v2.87.25 (#558)
b143bef chore(deps): lock file maintenance (#557)
11586b6 update github actions weekly (#556)
8402dc2 chore(deps): update dependency taiki-e/install-action to v2.87.24 (#555)
f9a4b7e chore(deps): update dependency obi1kenobi/cargo-semver-checks to v0.51 (#554)
eeb8829 chore(deps): update dependency taiki-e/install-action to v2.87.23 (#553)
3999d03 chore(deps): update dependency cargo-bins/cargo-binstall to v1.25.1 (#552)
Additional commits viewable in compare view

Updates github/codeql-action/upload-sarif from 4.37.8 to 4.38.3

Release notes

Sourced from github/codeql-action/upload-sarif's releases.

v4.38.3

Upcoming breaking change: CodeQL version 2.21.2 and earlier were discontinued on 24 September 2026 alongside GitHub Enterprise Server 3.17, and will be unsupported by the next minor release of the CodeQL Action. Added a deprecation warning for customers using these versions of CodeQL. #4188

Update default CodeQL bundle version to 2.27.2. #4203

Fixed a bug where the decision of whether to use a per-language bundle did not account for custom configurations that reference queries outside of compiled CodeQL packs. This issue was caught during internal testing and did not affect any customer repositories. We will resume the roll out of per-language bundles in the coming weeks. #4184

v4.38.2

Update default CodeQL bundle version to 2.27.1. #4160

v4.38.1

The CodeQL Action now has experimental support for CodeQL releases for which per-language bundles are available. Per-language bundles support analysis for a single language and are therefore smaller than the combined bundles that allow analysis for all supported languages. As a result, per-language bundles take up less space on disk and are faster to download. We expect to roll this change out to everyone in the coming weeks. #4146

v4.38.0

On GitHub-hosted runners, the CodeQL Action now deletes unused CodeQL bundles from the toolcache before downloading a different bundle, which frees up disk space for the analysis. We expect to roll this change out to everyone in September. #4124

The CodeQL Action now supports CodeQL releases that are compatible with Linux Arm64 and downloads the native linux-arm64 CodeQL bundle when available. #4072

Update default CodeQL bundle version to 2.27.0. #4129

v4.37.9

Update default CodeQL bundle version to 2.26.4. #4106

Changelog

Sourced from github/codeql-action/upload-sarif's changelog.

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

[UNRELEASED]

No user facing changes.

4.38.3 - 08 Oct 2026

Upcoming breaking change: CodeQL version 2.21.2 and earlier were discontinued on 24 September 2026 alongside GitHub Enterprise Server 3.17, and will be unsupported by the next minor release of the CodeQL Action. Added a deprecation warning for customers using these versions of CodeQL. #4188

Update default CodeQL bundle version to 2.27.2. #4203

Fixed a bug where the decision of whether to use a per-language bundle did not account for custom configurations that reference queries outside of compiled CodeQL packs. This issue was caught during internal testing and did not affect any customer repositories. We will resume the roll out of per-language bundles in the coming weeks. #4184

4.38.2 - 24 Sept 2026

Update default CodeQL bundle version to 2.27.1. #4160

4.38.1 - ...
Description has been truncated

… 10 updates Bumps the github-actions group with 10 updates in the / directory: | Package | From | To | | --- | --- | --- | | [taiki-e/install-action](https://github.com/taiki-e/install-action) | `2.86.5` | `2.87.27` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `7.0.1` | `7.0.2` | | [codecov/codecov-action](https://github.com/codecov/codecov-action) | `7.0.0` | `7.1.1` | | [github/codeql-action/init](https://github.com/github/codeql-action) | `4.37.8` | `4.38.3` | | [github/codeql-action/autobuild](https://github.com/github/codeql-action) | `4.37.8` | `4.38.3` | | [github/codeql-action/analyze](https://github.com/github/codeql-action) | `4.37.8` | `4.38.3` | | [anchore/sbom-action](https://github.com/anchore/sbom-action) | `0.24.0` | `0.24.3` | | [release-plz/action](https://github.com/release-plz/action) | `0.5.131` | `0.5.140` | | [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) | `4.37.8` | `4.38.3` | | [actions/deploy-pages](https://github.com/actions/deploy-pages) | `5.0.0` | `5.0.1` | Updates `taiki-e/install-action` from 2.86.5 to 2.87.27 - [Release notes](https://github.com/taiki-e/install-action/releases) - [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md) - [Commits](taiki-e/install-action@ba47c86...ab68953) Updates `actions/upload-artifact` from 7.0.1 to 7.0.2 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@043fb46...cf430e0) Updates `codecov/codecov-action` from 7.0.0 to 7.1.1 - [Release notes](https://github.com/codecov/codecov-action/releases) - [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md) - [Commits](codecov/codecov-action@fb8b358...303a32d) Updates `github/codeql-action/init` from 4.37.8 to 4.38.3 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@db488dd...24c5418) Updates `github/codeql-action/autobuild` from 4.37.8 to 4.38.3 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@db488dd...24c5418) Updates `github/codeql-action/analyze` from 4.37.8 to 4.38.3 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@db488dd...24c5418) Updates `anchore/sbom-action` from 0.24.0 to 0.24.3 - [Release notes](https://github.com/anchore/sbom-action/releases) - [Changelog](https://github.com/anchore/sbom-action/blob/main/RELEASE.md) - [Commits](anchore/sbom-action@e22c389...66cbf4b) Updates `release-plz/action` from 0.5.131 to 0.5.140 - [Release notes](https://github.com/release-plz/action/releases) - [Commits](release-plz/action@2eb1d8b...18641b6) Updates `github/codeql-action/upload-sarif` from 4.37.8 to 4.38.3 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@db488dd...24c5418) Updates `actions/deploy-pages` from 5.0.0 to 5.0.1 - [Release notes](https://github.com/actions/deploy-pages/releases) - [Commits](actions/deploy-pages@cd2ce8f...368f825) --- updated-dependencies: - dependency-name: taiki-e/install-action dependency-version: 2.87.27 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: actions/upload-artifact dependency-version: 7.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: codecov/codecov-action dependency-version: 7.1.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: github/codeql-action/init dependency-version: 4.38.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: github/codeql-action/autobuild dependency-version: 4.38.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: github/codeql-action/analyze dependency-version: 4.38.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: anchore/sbom-action dependency-version: 0.24.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: release-plz/action dependency-version: 0.5.140 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: github/codeql-action/upload-sarif dependency-version: 4.38.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: actions/deploy-pages dependency-version: 5.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-10-12T07:41:50Z

Labels

The following labels could not be found: ci, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

coderabbitai · 2026-10-12T07:41:56Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults
Review profile: CHILL
Plan: Advanced
Run ID: 8b7b1d77-012d-4ee9-b509-773cc49879dd

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

dependabot · 2026-10-19T03:10:50Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot requested a review from RAprogramm as a code owner October 12, 2026 07:41

github-actions Bot enabled auto-merge (squash) October 12, 2026 07:41

dependabot Bot closed this Oct 19, 2026

auto-merge was automatically disabled October 19, 2026 03:10
Pull request was closed

dependabot Bot deleted the dependabot/github_actions/github-actions-dd8ab1565f branch October 19, 2026 03:10

Navigation Menu

Repository navigation

ci(deps)(deps): bump the github-actions group across 1 directory with 10 updates - #314

ci(deps)(deps): bump the github-actions group across 1 directory with 10 updates#314
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-dd8ab1565f

dependabot Bot commented on behalf of github Oct 12, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Oct 12, 2026

Uh oh!

coderabbitai Bot commented Oct 12, 2026

Review skipped

Uh oh!

dependabot Bot commented on behalf of github Oct 19, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

2.87.27

2.87.26

2.87.25

Changelog

[Unreleased]

[2.87.28] - 2026-10-12

[2.87.27] - 2026-10-09

v7.0.2

What's Changed

New Contributors

v7.1.1

What's Changed

v7.1.0

What's Changed

v4.38.3

v4.38.2

v4.38.1

v4.38.0

v4.37.9

CodeQL Action Changelog

[UNRELEASED]

4.38.3 - 08 Oct 2026

4.38.2 - 24 Sept 2026

4.38.1 - 18 Sept 2026

4.38.0 - 09 Sept 2026

4.37.9 - 26 Aug 2026

4.37.8 - 21 Aug 2026

4.37.7 - 13 Aug 2026

4.37.6 - 04 Aug 2026

4.37.5 - 03 Aug 2026

4.37.4 - 29 Jul 2026

v4.38.3

v4.38.2

v4.38.1

v4.38.0

v4.37.9

CodeQL Action Changelog

[UNRELEASED]

4.38.3 - 08 Oct 2026

4.38.2 - 24 Sept 2026

4.38.1 - 18 Sept 2026

4.38.0 - 09 Sept 2026

4.37.9 - 26 Aug 2026

4.37.8 - 21 Aug 2026

4.37.7 - 13 Aug 2026

4.37.6 - 04 Aug 2026

4.37.5 - 03 Aug 2026

4.37.4 - 29 Jul 2026

v4.38.3

v4.38.2

v4.38.1

v4.38.0

v4.37.9

CodeQL Action Changelog

[UNRELEASED]

4.38.3 - 08 Oct 2026

4.38.2 - 24 Sept 2026

4.38.1 - 18 Sept 2026

4.38.0 - 09 Sept 2026

4.37.9 - 26 Aug 2026

4.37.8 - 21 Aug 2026

4.37.7 - 13 Aug 2026

4.37.6 - 04 Aug 2026

4.37.5 - 03 Aug 2026

4.37.4 - 29 Jul 2026

v0.24.3

Added Features

Bug Fixes

v0.24.2

Added Features

Additional Changes

v0.5.140

What's Changed

v0.5.139

What's Changed

v0.5.138

What's Changed

dependabot Bot commented on behalf of github Oct 12, 2026 •

edited

Loading

4.38.1 - ...
Description has been truncated