Skip to content

Bump the actions group across 2 directories with 8 updates#22

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/github_actions/actions-8c7592ee23
Closed

Bump the actions group across 2 directories with 8 updates#22
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/github_actions/actions-8c7592ee23

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 23, 2026

Bumps the actions group with 8 updates in the / directory:

Package From To
actions/checkout 6.0.0 6.0.2
korthout/backport-action 3.4.1 4.0.1
actions/setup-go 6.1.0 6.2.0
github/codeql-action 4.31.5 4.31.10
fluxcd/pkg 1.24.0 1.25.0
docker/setup-buildx-action 3.11.1 3.12.0
docker/metadata-action 5.9.0 5.10.0
anchore/sbom-action 0.20.10 0.22.0

Bumps the actions group with 3 updates in the /.github/actions/setup-kubernetes directory: actions/checkout, actions/setup-go and fluxcd/pkg.

Updates actions/checkout from 6.0.0 to 6.0.2

Release notes

Sourced from actions/checkout's releases.

v6.0.2

What's Changed

Full Changelog: actions/checkout@v6.0.1...v6.0.2

v6.0.1

What's Changed

Full Changelog: actions/checkout@v6...v6.0.1

Changelog

Sourced from actions/checkout's changelog.

Changelog

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

v4.2.0

v4.1.7

v4.1.6

... (truncated)

Commits
  • de0fac2 Fix tag handling: preserve annotations and explicit fetch-tags (#2356)
  • 064fe7f Add orchestration_id to git user-agent when ACTIONS_ORCHESTRATION_ID is set (...
  • 8e8c483 Clarify v6 README (#2328)
  • 033fa0d Add worktree support for persist-credentials includeIf (#2327)
  • c2d88d3 Update all references from v5 and v4 to v6 (#2314)
  • See full diff in compare view

Updates korthout/backport-action from 3.4.1 to 4.0.1

Release notes

Sourced from korthout/backport-action's releases.

Backport-action v4.0.1

What's Changed

This patch fixes a bug where environment variables were no longer passed to git since v4.0.0. For instance, this prevented the action to sign commits with GPG using variables like GNUPGHOME. With this fix, environment variables are provided to git again.

Full Changelog: korthout/backport-action@v4.0.0...v4.0.1

Backport-action v4.0.0

What's Changed

The action now requires Node 24 to run, which is a breaking change. Runner version 2.327.1 or higher is required from now on.

Other changes

Updated dependencies

Full Changelog: korthout/backport-action@v3.4.1...v4.0.0

Commits
  • c656f5d dist: release 4.0.1
  • 3202288 Merge pull request #527 from yafanasiev/fix-git-command-env
  • 386e43b fix: pass existing environment variables when executing git
  • 2e1ecda Merge pull request #525 from korthout/renovate/korthout-backport-action-4.x
  • 2c7404d Update korthout/backport-action action to v4
  • cb62ed3 dist: release 4.1.0-SNAPSHOT
  • 3634249 dist: release 4.0.0
  • e2a0749 Merge pull request #524 from korthout/korthout-release-v4
  • 3781259 docs: prepare for v4
  • d85d794 Merge pull request #523 from korthout/korthout-501-node-24
  • Additional commits viewable in compare view

Updates actions/setup-go from 6.1.0 to 6.2.0

Release notes

Sourced from actions/setup-go's releases.

v6.2.0

What's Changed

Enhancements

Dependency updates

New Contributors

Full Changelog: actions/setup-go@v6...v6.2.0

Commits

Updates github/codeql-action from 4.31.5 to 4.31.10

Release notes

Sourced from github/codeql-action's releases.

v4.31.10

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.10 - 12 Jan 2026

  • Update default CodeQL bundle version to 2.23.9. #3393

See the full CHANGELOG.md for more information.

v4.31.9

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.9 - 16 Dec 2025

No user facing changes.

See the full CHANGELOG.md for more information.

v4.31.8

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.8 - 11 Dec 2025

  • Update default CodeQL bundle version to 2.23.8. #3354

See the full CHANGELOG.md for more information.

v4.31.7

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.7 - 05 Dec 2025

  • Update default CodeQL bundle version to 2.23.7. #3343

See the full CHANGELOG.md for more information.

v4.31.6

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.6 - 01 Dec 2025

... (truncated)

Changelog

Sourced from github/codeql-action's changelog.

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

[UNRELEASED]

No user facing changes.

4.31.10 - 12 Jan 2026

  • Update default CodeQL bundle version to 2.23.9. #3393

4.31.9 - 16 Dec 2025

No user facing changes.

4.31.8 - 11 Dec 2025

  • Update default CodeQL bundle version to 2.23.8. #3354

4.31.7 - 05 Dec 2025

  • Update default CodeQL bundle version to 2.23.7. #3343

4.31.6 - 01 Dec 2025

No user facing changes.

4.31.5 - 24 Nov 2025

  • Update default CodeQL bundle version to 2.23.6. #3321

4.31.4 - 18 Nov 2025

No user facing changes.

4.31.3 - 13 Nov 2025

  • CodeQL Action v3 will be deprecated in December 2026. The Action now logs a warning for customers who are running v3 but could be running v4. For more information, see Upcoming deprecation of CodeQL Action v3.
  • Update default CodeQL bundle version to 2.23.5. #3288

4.31.2 - 30 Oct 2025

No user facing changes.

4.31.1 - 30 Oct 2025

  • The add-snippets input has been removed from the analyze action. This input has been deprecated since CodeQL Action 3.26.4 in August 2024 when this removal was announced.

4.31.0 - 24 Oct 2025

... (truncated)

Commits
  • cdefb33 Merge pull request #3394 from github/update-v4.31.10-0fa411efd
  • cfa77c6 Update changelog for v4.31.10
  • 0fa411e Merge pull request #3393 from github/update-bundle/codeql-bundle-v2.23.9
  • c284324 Add changelog note
  • 83e7d00 Update default bundle to codeql-bundle-v2.23.9
  • f6a16be Merge pull request #3391 from github/dependabot/npm_and_yarn/npm-minor-f1cdf5...
  • c1f5f1a Rebuild
  • 1805d8d Bump the npm-minor group with 2 updates
  • b2951d2 Merge pull request #3353 from github/kaspersv/bump-min-cli-v-for-overlay
  • 41448d9 Merge pull request #3287 from github/henrymercer/generate-mergeback-last
  • Additional commits viewable in compare view

Updates fluxcd/pkg from 1.24.0 to 1.25.0

Commits
  • cde06a5 Merge pull request #1079 from fluxcd/kube-v0.35.0
  • 21a1946 auth: Fix Azure auth test for China and US Gov clouds
  • 125d607 Prepare for release
  • 4f26e76 Update dependencies to Kubernetes v0.35.0
  • 98667f8 Merge pull request #1069 from fluxcd/helm-4.1
  • 2aea89f Upgrade Helm to v4.1.0
  • 4895944 Merge pull request #1077 from fluxcd/ssa-custom-stage
  • 8a98478 ssa: introduce custom apply stage
  • 2818265 Merge pull request #1076 from fluxcd/gh-app-owner-helpers
  • b5e6bdd Prepare for release
  • Additional commits viewable in compare view

Updates docker/setup-buildx-action from 3.11.1 to 3.12.0

Release notes

Sourced from docker/setup-buildx-action's releases.

v3.12.0

Full Changelog: docker/setup-buildx-action@v3.11.1...v3.12.0

Commits
  • 8d2750c Merge pull request #455 from crazy-max/install-deprecated
  • e81846b deprecate install input
  • 65d18f8 Merge pull request #454 from docker/dependabot/github_actions/actions/checkout-6
  • 000d75d build(deps): bump actions/checkout from 5 to 6
  • 1583c0f Merge pull request #443 from nicolasleger/patch-1
  • ed158e7 doc: bump actions/checkout from 4 to 5
  • 4cc794f Merge pull request #441 from docker/dependabot/github_actions/actions/checkout-5
  • 4dfc3d6 build(deps): bump actions/checkout from 4 to 5
  • af1b253 Merge pull request #440 from crazy-max/k3s-build
  • 3c6ab92 ci: k3s test with latest buildx
  • Additional commits viewable in compare view

Updates docker/metadata-action from 5.9.0 to 5.10.0

Release notes

Sourced from docker/metadata-action's releases.

v5.10.0

Full Changelog: docker/metadata-action@v5.9.0...v5.10.0

Commits
  • c299e40 Merge pull request #569 from docker/dependabot/npm_and_yarn/docker/actions-to...
  • f015d79 chore: update generated content
  • 121bcc2 chore(deps): Bump @​docker/actions-toolkit from 0.67.0 to 0.68.0
  • f7b6bf4 Merge pull request #564 from docker/dependabot/npm_and_yarn/js-yaml-3.14.2
  • 0b95c6b Merge pull request #565 from docker/dependabot/github_actions/actions/checkout-6
  • 17f70d7 Merge pull request #568 from motoki317/docs/fix-to-24h-schedule-pattern
  • afd7e6d docs(README): Fix date format from 12h to 24h in schedule pattern
  • 602aff8 chore(deps): Bump actions/checkout from 5 to 6
  • aecb1a4 chore(deps): Bump js-yaml from 3.14.1 to 3.14.2
  • 8d8c7c1 Merge pull request #559 from docker/dependabot/npm_and_yarn/docker/actions-to...
  • Additional commits viewable in compare view

Updates anchore/sbom-action from 0.20.10 to 0.22.0

Release notes

Sourced from anchore/sbom-action's releases.

v0.22.0

Changes in v0.22.0

⬆️ Dependencies

v0.21.1

Changes in v0.21.1

v0.21.0

  • chore(deps): update Syft to v1.39.0 (#561)
  • chore(deps): bump @​octokit/request-error, @​octokit/core and @​octokit/webhooks (#560)
  • chore(deps): bump peter-evans/create-pull-request from 7.0.11 to 8.0.0 (#558)

v0.20.11

Changes in v0.20.11

Commits
  • 62ad528 chore: update release-drafter, dependencies (#571)
  • 2657179 chore(deps-dev): bump the dev-dependencies group with 19 updates (#566)
  • 61140b1 chore(deps): bump npm-check-updates from 17.1.3 to 19.3.1 (#567)
  • f99cf3e ci: enable dependabot with groups (#565)
  • 28b3d8f Chore better zizmor (#564)
  • 3363a57 chore(deps): update Syft to v1.40.1 (#563)
  • 0b82b0b chore(deps): update Syft to v1.40.0 (#562)
  • a930d0a chore(deps): update Syft to v1.39.0 (#561)
  • e4b2532 chore(deps): bump @​octokit/request-error, @​octokit/core and @​octokit/webhooks...
  • 481b254 chore(deps): bump peter-evans/create-pull-request from 7.0.11 to 8.0.0 (#558)
  • Additional commits viewable in compare view

Updates actions/checkout from 6.0.1 to 6.0.2

Release notes

Sourced from actions/checkout's releases.

v6.0.2

What's Changed

Full Changelog: actions/checkout@v6.0.1...v6.0.2

v6.0.1

What's Changed

Full Changelog: actions/checkout@v6...v6.0.1

Changelog

Sourced from actions/checkout's changelog.

Changelog

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

v4.2.0

v4.1.7

v4.1.6

... (truncated)

Commits
  • de0fac2 Fix tag handling: preserve annotations and explicit fetch-tags (#2356)
  • 064fe7f Add orchestration_id to git user-agent when ACTIONS_ORCHESTRATION_ID is set (...
  • 8e8c483 Clarify v6 README (#2328)
  • 033fa0d Add worktree support for persist-credentials includeIf (#2327)
  • c2d88d3 Update all references from v5 and v4 to v6 (#2314)
  • See full diff in compare view

Updates actions/setup-go from 6.1.0 to 6.2.0

Release notes

Sourced from actions/setup-go's releases.

v6.2.0

What's Changed

Enhancements

Dependency updates

New Contributors

Full Changelog: actions/setup-go@v6...v6.2.0

Commits

Updates fluxcd/pkg from 1.24.0 to 1.25.0

Commits
  • cde06a5 Merge pull request #1079 from fluxcd/kube-v0.35.0
  • 21a1946 auth: Fix Azure auth test for China and US Gov clouds
  • 125d607 Prepare for release
  • 4f26e76 Update dependencies to Kubernetes v0.35.0
  • 98667f8 Merge pull request #1069 from fluxcd/helm-4.1
  • 2aea89f Upgrade Helm to v4.1.0
  • 4895944 Merge pull request #1077 from fluxcd/ssa-custom-stage
  • 8a98478 ssa: introduce custom apply stage
  • 2818265 Merge pull request #1076 from fluxcd/gh-app-owner-helpers
  • b5e6bdd Prepare for release
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the actions group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `6.0.0` | `6.0.2` |
| [korthout/backport-action](https://github.com/korthout/backport-action) | `3.4.1` | `4.0.1` |
| [actions/setup-go](https://github.com/actions/setup-go) | `6.1.0` | `6.2.0` |
| [github/codeql-action](https://github.com/github/codeql-action) | `4.31.5` | `4.31.10` |
| [fluxcd/pkg](https://github.com/fluxcd/pkg) | `1.24.0` | `1.25.0` |
| [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `3.11.1` | `3.12.0` |
| [docker/metadata-action](https://github.com/docker/metadata-action) | `5.9.0` | `5.10.0` |
| [anchore/sbom-action](https://github.com/anchore/sbom-action) | `0.20.10` | `0.22.0` |

Bumps the actions group with 3 updates in the /.github/actions/setup-kubernetes directory: [actions/checkout](https://github.com/actions/checkout), [actions/setup-go](https://github.com/actions/setup-go) and [fluxcd/pkg](https://github.com/fluxcd/pkg).


Updates `actions/checkout` from 6.0.0 to 6.0.2
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@1af3b93...de0fac2)

Updates `korthout/backport-action` from 3.4.1 to 4.0.1
- [Release notes](https://github.com/korthout/backport-action/releases)
- [Commits](korthout/backport-action@d074166...c656f5d)

Updates `actions/setup-go` from 6.1.0 to 6.2.0
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](actions/setup-go@4dc6199...7a3fe6c)

Updates `github/codeql-action` from 4.31.5 to 4.31.10
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@fdbfb4d...cdefb33)

Updates `fluxcd/pkg` from 1.24.0 to 1.25.0
- [Commits](fluxcd/pkg@62ddfc1...cde06a5)

Updates `docker/setup-buildx-action` from 3.11.1 to 3.12.0
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](docker/setup-buildx-action@e468171...8d2750c)

Updates `docker/metadata-action` from 5.9.0 to 5.10.0
- [Release notes](https://github.com/docker/metadata-action/releases)
- [Commits](docker/metadata-action@318604b...c299e40)

Updates `anchore/sbom-action` from 0.20.10 to 0.22.0
- [Release notes](https://github.com/anchore/sbom-action/releases)
- [Changelog](https://github.com/anchore/sbom-action/blob/main/RELEASE.md)
- [Commits](anchore/sbom-action@fbfd9c6...62ad528)

Updates `actions/checkout` from 6.0.1 to 6.0.2
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@1af3b93...de0fac2)

Updates `actions/setup-go` from 6.1.0 to 6.2.0
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](actions/setup-go@4dc6199...7a3fe6c)

Updates `fluxcd/pkg` from 1.24.0 to 1.25.0
- [Commits](fluxcd/pkg@62ddfc1...cde06a5)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 6.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: korthout/backport-action
  dependency-version: 4.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: actions/setup-go
  dependency-version: 6.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: github/codeql-action
  dependency-version: 4.31.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: fluxcd/pkg
  dependency-version: 1.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: docker/setup-buildx-action
  dependency-version: 3.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: docker/metadata-action
  dependency-version: 5.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: anchore/sbom-action
  dependency-version: 0.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: actions/checkout
  dependency-version: 6.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: actions/setup-go
  dependency-version: 6.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: fluxcd/pkg
  dependency-version: 1.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jan 23, 2026
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Jan 26, 2026

Superseded by #23.

@dependabot dependabot bot closed this Jan 26, 2026
@dependabot dependabot bot deleted the dependabot/github_actions/actions-8c7592ee23 branch January 26, 2026 05:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants