Skip to content

chore: bump the actions group with 5 updates - #2

Merged
joshdougall merged 1 commit into
mainfrom
dependabot/github_actions/actions-70199e1cc0
Sep 2, 2026
Merged

chore: bump the actions group with 5 updates#2
joshdougall merged 1 commit into
mainfrom
dependabot/github_actions/actions-70199e1cc0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 15, 2026

Copy link
Copy Markdown
Contributor

Bumps the actions group with 5 updates:

Package From To
actions/checkout 4.2.2 7.0.0
azure/setup-helm 4.3.0 5.0.1
helm/chart-releaser-action 1.6.0 1.7.0
actions/setup-python 5.3.0 6.3.0
helm/chart-testing-action 2.7.0 2.8.0

Updates actions/checkout from 4.2.2 to 7.0.0

Release notes

Sourced from actions/checkout's releases.

v7.0.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v6.0.3...v7.0.0

v6.0.3

What's Changed

New Contributors

Full Changelog: actions/checkout@v6...v6.0.3

v6.0.2

What's Changed

Full Changelog: actions/checkout@v6.0.1...v6.0.2

v6.0.1

What's Changed

Full Changelog: actions/checkout@v6...v6.0.1

v6.0.0

What's Changed

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

v7.0.0

v6.0.3

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

... (truncated)

Commits

Updates azure/setup-helm from 4.3.0 to 5.0.1

Release notes

Sourced from azure/setup-helm's releases.

v5.0.1

Fixed

Changed

v5.0.0

Changed

v4.3.1

Changed

... (truncated)

Changelog

Sourced from azure/setup-helm's changelog.

Change Log

[5.0.1] - 2026-06-23

Fixed

Changed

[5.0.0] - 2026-03-23

Changed

... (truncated)

Commits
  • 9bc31f4 build
  • 95ecf49 Bump version to 5.0.1 and update CHANGELOG with recent changes (#287)
  • 4180b1c Bump the actions group with 2 updates (#285)
  • 6949b7f Bump undici (#284)
  • 51ce767 Bump actions/checkout in /.github/workflows in the actions group (#286)
  • d6da4f4 Bump the actions group with 5 updates (#283)
  • 7e2bc10 Bump actions/checkout in /.github/workflows in the actions group (#280)
  • 64d6be9 Bump the actions group with 2 updates (#279)
  • 69214f9 fix: use chmod 755 instead of 777 for downloaded helm binary and folder (#278)
  • 9dad99f Bump vitest from 4.1.7 to 4.1.8 in the actions group (#277)
  • Additional commits viewable in compare view

Updates helm/chart-releaser-action from 1.6.0 to 1.7.0

Release notes

Sourced from helm/chart-releaser-action's releases.

v1.7.0

For cr changes see https://github.com/helm/chart-releaser/releases/tag/v1.7.0

What's Changed

New Contributors

Full Changelog: helm/chart-releaser-action@v1...v1.7.0

Commits
  • cae68fe update cr to v1.7.0 (#220)
  • d1e09fd Fix indention (#203)
  • 653ba94 Bump actions/checkout in the actions group across 1 directory (#201)
  • 45af99f Bump actions/checkout from 4.1.4 to 4.1.5 in the actions group (#192)
  • 95930dc Update checkout action to v4 tag in README.md (#187)
  • 0eba7f5 Bump actions/checkout from 4.1.3 to 4.1.4 in the actions group (#190)
  • 09492f4 Bump actions/checkout from 4.1.2 to 4.1.3 in the actions group (#189)
  • 13fe82a Bump the actions group with 1 update (#182)
  • 6203d70 Add --skip-upload input with latest helm/chart-releaser-action (#143)
  • See full diff in compare view

Updates actions/setup-python from 5.3.0 to 6.3.0

Release notes

Sourced from actions/setup-python's releases.

v6.3.0

What's Changed

Enhancement

Dependency update

Documentation

New Contributors

Full Changelog: actions/setup-python@v6.2.0...v6.3.0

v6.2.0

What's Changed

Dependency Upgrades

Full Changelog: actions/setup-python@v6...v6.2.0

v6.1.0

What's Changed

Enhancements:

Dependency and Documentation updates:

New Contributors

Full Changelog: actions/setup-python@v6...v6.1.0

... (truncated)

Commits

Updates helm/chart-testing-action from 2.7.0 to 2.8.0

Release notes

Sourced from helm/chart-testing-action's releases.

v2.8.0

What's Changed

New Contributors

Full Changelog: helm/chart-testing-action@v2...v2.8.0

Commits
  • 6ec842c Bump sigstore/cosign-installer from 3.8.1 to 4.0.0 (#184)
  • 4ea74f6 Use uv instead of python venv (#172)
  • b0c0606 Bump the actions group across 1 directory with 2 updates (#183)
  • 0bfa5c0 Bump actions/setup-python from 5.4.0 to 6.0.0 (#179)
  • e27de75 Bump actions/checkout from 4.2.2 to 5.0.0 (#181)
  • 2fe8321 bump ct and yamale version (#178)
  • 0941a6b Fix the broken link for GitHub Help Documentation (#174)
  • c71c0c7 Bump the actions group across 1 directory with 4 updates (#171)
  • See full diff in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

Bumps the actions group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `4.2.2` | `7.0.0` |
| [azure/setup-helm](https://github.com/azure/setup-helm) | `4.3.0` | `5.0.1` |
| [helm/chart-releaser-action](https://github.com/helm/chart-releaser-action) | `1.6.0` | `1.7.0` |
| [actions/setup-python](https://github.com/actions/setup-python) | `5.3.0` | `6.3.0` |
| [helm/chart-testing-action](https://github.com/helm/chart-testing-action) | `2.7.0` | `2.8.0` |


Updates `actions/checkout` from 4.2.2 to 7.0.0
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@11bd719...9c091bb)

Updates `azure/setup-helm` from 4.3.0 to 5.0.1
- [Release notes](https://github.com/azure/setup-helm/releases)
- [Changelog](https://github.com/Azure/setup-helm/blob/main/CHANGELOG.md)
- [Commits](Azure/setup-helm@b9e5190...9bc31f4)

Updates `helm/chart-releaser-action` from 1.6.0 to 1.7.0
- [Release notes](https://github.com/helm/chart-releaser-action/releases)
- [Commits](helm/chart-releaser-action@a917fd1...cae68fe)

Updates `actions/setup-python` from 5.3.0 to 6.3.0
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](actions/setup-python@0b93645...ece7cb0)

Updates `helm/chart-testing-action` from 2.7.0 to 2.8.0
- [Release notes](https://github.com/helm/chart-testing-action/releases)
- [Commits](helm/chart-testing-action@0d28d31...6ec842c)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: azure/setup-helm
  dependency-version: 5.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: helm/chart-releaser-action
  dependency-version: 1.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: actions/setup-python
  dependency-version: 6.3.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: helm/chart-testing-action
  dependency-version: 2.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Jul 15, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot
dependabot Bot requested a review from a team as a code owner July 15, 2026 10:45
@dependabot
dependabot Bot requested review from guglez and majidkhan07 July 15, 2026 10:45

@joshdougall joshdougall left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

approving.

I went through the three majors rather than just trusting the green check. checkout v4 to v7, setup-helm v4 to v5 and setup-python v5 to v6 are all the same thing, they move from node20 to node24. that needs runner 2.327.1 or newer. every job in here is ubuntu-latest github hosted, so that is fine. none of the action inputs changed either.

checkout v7.0.0 does have one real behaviour change. it blocks fork pr checkout under pull_request_target and workflow_run. neither of those triggers is used in this repo, so it does not apply here.

one thing to flag for after merge. chart-releaser-action v1.6.0 to v1.7.0 is the only bump that pr ci does not exercise, because that job only runs on push to main. checkout v6.0.0 also moved the persisted git credentials into a separate file, and chart-releaser needs those for the gh-pages push. I think both are fine and they are supported paths. it is just the one bit we cannot confirm until this lands, so can someone keep an eye on the first release run.

small nit, this has been open a month, and checkout v7.0.1 and setup-python v7.0.0 both shipped on july 20th. happy either way, we can rebase to pick those up or close it and let dependabot open a fresh one.

@joshdougall
joshdougall merged commit 2a47bde into main Sep 2, 2026
6 checks passed
@joshdougall
joshdougall deleted the dependabot/github_actions/actions-70199e1cc0 branch September 2, 2026 17:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant