Skip to content

chore(deps): bump the github-actions group with 18 updates#309

Merged
Nick2bad4u merged 1 commit intomainfrom
dependabot/github_actions/github-actions-9edd8e3b6e
Dec 1, 2025
Merged

chore(deps): bump the github-actions group with 18 updates#309
Nick2bad4u merged 1 commit intomainfrom
dependabot/github_actions/github-actions-9edd8e3b6e

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Dec 1, 2025

Bumps the github-actions group with 18 updates:

Package From To
step-security/harden-runner 2.13.1 2.13.2
actions/checkout 5.0.0 6.0.0
devops-actions/actionlint 0.1.9 0.1.10
Platane/snk 3.3.0 3.4.1
psf/black 25.9.0 25.11.0
github/codeql-action 4.31.2 4.31.6
actions/dependency-review-action 4.8.1 4.8.2
actions/setup-python 6.0.0 6.1.0
nick2bad4u/generate-repo-file-list 6de1b736f4684d3a8a4260f0bc3aea4ce1493f3f 4b742561166c6eafcf23fbb0c79ff8869bbceb27
oxsecurity/megalinter 9.1.0 9.2.0
google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml 2.2.4 2.3.0
google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml 2.2.4 2.3.0
peter-evans/create-pull-request 7.0.8 7.0.9
rojopolis/spellcheck-github-actions 0.53.0 0.55.0
actions/ai-inference 2.0.1 2.0.4
super-linter/super-linter 8.2.1 8.3.0
trufflesecurity/trufflehog 3.90.12 3.91.1
crate-ci/typos 1.39.0 1.40.0

Updates step-security/harden-runner from 2.13.1 to 2.13.2

Release notes

Sourced from step-security/harden-runner's releases.

v2.13.2

What's Changed

  • Fixed an issue where there was a limit of 512 allowed endpoints when using block egress policy. This restriction has been removed, allowing for an unlimited number of endpoints to be configured.
  • Harden Runner now automatically detects if the agent is already pre-installed on a custom VM image used by a GitHub-hosted runner. When detected, the action will skip reinstallation and use the existing agent.

Full Changelog: step-security/harden-runner@v2.13.1...v2.13.2

Commits

Updates actions/checkout from 5.0.0 to 6.0.0

Release notes

Sourced from actions/checkout's releases.

v6.0.0

What's Changed

Full Changelog: actions/checkout@v5.0.0...v6.0.0

v6-beta

What's Changed

Updated persist-credentials to store the credentials under $RUNNER_TEMP instead of directly in the local git config.

This requires a minimum Actions Runner version of v2.329.0 to access the persisted credentials for Docker container action scenarios.

v5.0.1

What's Changed

Full Changelog: actions/checkout@v5...v5.0.1

Changelog

Sourced from actions/checkout's changelog.

Changelog

V6.0.0

V5.0.1

V5.0.0

V4.3.1

V4.3.0

v4.2.2

v4.2.1

v4.2.0

v4.1.7

v4.1.6

v4.1.5

... (truncated)

Commits

Updates devops-actions/actionlint from 0.1.9 to 0.1.10

Release notes

Sourced from devops-actions/actionlint's releases.

Release v0.1.10

What's Changed

New Contributors

... (truncated)

Commits
  • 467e2ce Update actionlint version to 1.7.9 (#121)
  • 5e11a36 Bump step-security/harden-runner from 2.13.1 to 2.13.2 (#119)
  • 666c887 Bump ossf/scorecard-action from 2.4.2 to 2.4.3 (#113)
  • a17659a Bump actions/checkout from 4.2.2 to 5.0.0 (#101)
  • 21c0ee2 Update actionlint version to 1.7.8 (#114)
  • 78d8915 Bump actions/dependency-review-action from 4.8.0 to 4.8.1 (#115)
  • 6b74735 Bump github/codeql-action from 3.30.5 to 4.31.2 (#120)
  • b37d855 Bump github/codeql-action from 3.30.3 to 3.30.5 (#110)
  • ecd00d8 Bump actions/dependency-review-action from 4.7.3 to 4.8.0 (#111)
  • a923f5d Bump github/codeql-action from 3.29.8 to 3.30.3 (#108)
  • Additional commits viewable in compare view

Updates Platane/snk from 3.3.0 to 3.4.1

Release notes

Sourced from Platane/snk's releases.

v3.4.1

  • fix gif color palette

v3.4.0

  • add option for gif background
Commits

Updates psf/black from 25.9.0 to 25.11.0

Release notes

Sourced from psf/black's releases.

25.11.0

Highlights

  • Enable base 3.14 support (#4804)
  • Add support for the new Python 3.14 t-string syntax introduced by PEP 750 (#4805)

Stable style

  • Fix bug where comments between # fmt: off and # fmt: on were reformatted (#4811)
  • Comments containing fmt directives now preserve their exact formatting instead of being normalized (#4811)

Preview style

  • Move multiline_string_handling from --unstable to --preview (#4760)
  • Fix bug where module docstrings would be treated as normal strings if preceded by comments (#4764)
  • Fix bug where python 3.12 generics syntax split line happens weirdly (#4777)
  • Standardize type comments to form # type: <value> (#4645)
  • Fix fix_fmt_skip_in_one_liners preview feature to respect # fmt: skip for compound statements with semicolon-separated bodies (#4800)

Configuration

  • Add no_cache option to control caching behavior. (#4803)

Packaging

  • Releases now include arm64 Linux binaries (#4773)

Output

  • Write unchanged content to stdout when excluding formatting from stdin using pipes (#4610)

Blackd

  • Implemented BlackDClient. This simple python client allows to easily send formatting requests to blackd (#4774)

Integrations

  • Enable 3.14 base CI (#4804)
  • Enhance GitHub Action psf/black to support the required-version major-version-only "stability" format when using pyproject.toml (#4770)
  • Improve error message for vim plugin users. It now handles independently vim version
  • Vim: Warn on unsupported Vim and Python versions independently (#4772)
  • Vim: Print the import paths when importing black fails (#4675)
  • Vim: Fix handling of virtualenvs that have a different Python version (#4675)
Changelog

Sourced from psf/black's changelog.

Change Log

Unreleased

Highlights

  • Black no longer supports running with Python 3.9 (#4842)

Stable style

  • Fix bug where comments preceding # fmt: off/# fmt: on blocks were incorrectly removed, particularly affecting Jupytext's # %% [markdown] comments (#4845)
  • Fix possible crash when fmt: directives aren't on the top level (#4856)

Preview style

  • Fix fmt: skip skipping the line after instead of the line it's on (#4855)
  • Remove unnecessary parentheses from the left-hand side of assignments while preserving magic trailing commas and intentional multiline formatting (#4865)
  • Fix fix_fmt_skip_in_one_liners crashing on with statements (#4853)
  • Fix fix_fmt_skip_in_one_liners crashing on annotated parameters (#4854)

Configuration

Packaging

Parser

Performance

Output

... (truncated)

Commits

Updates github/codeql-action from 4.31.2 to 4.31.6

Release notes

Sourced from github/codeql-action's releases.

v4.31.6

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.6 - 01 Dec 2025

No user facing changes.

See the full CHANGELOG.md for more information.

v4.31.5

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.5 - 24 Nov 2025

  • Update default CodeQL bundle version to 2.23.6. #3321

See the full CHANGELOG.md for more information.

v4.31.4

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.4 - 18 Nov 2025

No user facing changes.

See the full CHANGELOG.md for more information.

v4.31.3

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.3 - 13 Nov 2025

  • CodeQL Action v3 will be deprecated in December 2026. The Action now logs a warning for customers who are running v3 but could be running v4. For more information, see Upcoming deprecation of CodeQL Action v3.
  • Update default CodeQL bundle version to 2.23.5. #3288

See the full CHANGELOG.md for more information.

Changelog

Sourced from github/codeql-action's changelog.

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

[UNRELEASED]

No user facing changes.

4.31.6 - 01 Dec 2025

No user facing changes.

4.31.5 - 24 Nov 2025

  • Update default CodeQL bundle version to 2.23.6. #3321

4.31.4 - 18 Nov 2025

No user facing changes.

4.31.3 - 13 Nov 2025

  • CodeQL Action v3 will be deprecated in December 2026. The Action now logs a warning for customers who are running v3 but could be running v4. For more information, see Upcoming deprecation of CodeQL Action v3.
  • Update default CodeQL bundle version to 2.23.5. #3288

4.31.2 - 30 Oct 2025

No user facing changes.

4.31.1 - 30 Oct 2025

  • The add-snippets input has been removed from the analyze action. This input has been deprecated since CodeQL Action 3.26.4 in August 2024 when this removal was announced.

4.31.0 - 24 Oct 2025

  • Bump minimum CodeQL bundle version to 2.17.6. #3223
  • When SARIF files are uploaded by the analyze or upload-sarif actions, the CodeQL Action automatically performs post-processing steps to prepare the data for the upload. Previously, these post-processing steps were only performed before an upload took place. We are now changing this so that the post-processing steps will always be performed, even when the SARIF files are not uploaded. This does not change anything for the upload-sarif action. For analyze, this may affect Advanced Setup for CodeQL users who specify a value other than always for the upload input. #3222

4.30.9 - 17 Oct 2025

  • Update default CodeQL bundle version to 2.23.3. #3205
  • Experimental: A new setup-codeql action has been added which is similar to init, except it only installs the CodeQL CLI and does not initialize a database. Do not use this in production as it is part of an internal experiment and subject to change at any time. #3204

4.30.8 - 10 Oct 2025

No user facing changes.

4.30.7 - 06 Oct 2025

  • [v4+ only] The CodeQL Action now runs on Node.js v24. #3169

... (truncated)

Commits
  • fe4161a Merge pull request #3336 from github/update-v4.31.6-ecec1f887
  • 88c2ab5 Update changelog for v4.31.6
  • ecec1f8 Merge pull request #3335 from github/mbg/ci/run-codeql-on-all-prs
  • 23da732 Merge pull request #3334 from github/kaspersv/overlay-minor-comments
  • f7abc74 Remove branch filter for PR event in CodeQL workflow
  • 32ada5e Merge branch 'main' into kaspersv/overlay-minor-comments
  • 75b2f49 Merge pull request #3333 from github/kaspersv/overlay-no-resource-checks-option
  • f036b1c Merge branch 'main' into kaspersv/overlay-no-resource-checks-option
  • 58c5954 Add comment to runnerSupportsOverlayAnalysis
  • b02fa13 Order feature flags alphabetically
  • Additional commits viewable in compare view

Updates actions/dependency-review-action from 4.8.1 to 4.8.2

Release notes

Sourced from actions/dependency-review-action's releases.

v4.8.2

Minor fixes:

Commits
  • 3c4e3dc Merge pull request #1016 from actions/dra-release
  • 02930b2 Update CONTRIBUTING to reflect new guidelines
  • 49ffd9f Update CONTRIBUTING to reflect the need to build
  • 70cb25e 4.8.2 release
  • ebabd31 Merge pull request #1008 from danielhardej/danielhardej-patch-20251023
  • 19f9360 Update package-lock.json
  • 5fd2f98 Bump @​types/jest to version 29.5.14
  • 28647f4 Fix PURL parsing by removing encodeURI
  • f620fd1 Merge pull request #1013 from actions/dangoor/token-fix
  • 9b42b7e Remove bad token reference
  • Additional commits viewable in compare view

Updates actions/setup-python from 6.0.0 to 6.1.0

Release notes

Sourced from actions/setup-python's releases.

v6.1.0

What's Changed

Enhancements:

Dependency and Documentation updates:

New Contributors

Full Changelog: actions/setup-python@v6...v6.1.0

Commits
  • 83679a8 Bump @​types/node from 24.1.0 to 24.9.1 and update macos-13 to macos-15-intel ...
  • bfc4944 Bump prettier from 3.5.3 to 3.6.2 (#1234)
  • 97aeb3e Bump requests from 2.32.2 to 2.32.4 in /tests/data (#1130)
  • 443da59 Bump actions/publish-action from 0.3.0 to 0.4.0 & Documentation update for pi...
  • cfd55ca graalpy: add graalpy early-access and windows builds (#880)
  • bba65e5 Bump typescript from 5.4.2 to 5.9.3 and update docs/advanced-usage.md (#1094)
  • 18566f8 Improve wording and "fix example" (remove 3.13) on testing against pre-releas...
  • 2e3e4b1 Add support for pip-install input (#1201)
  • 4267e28 Bump urllib3 from 1.26.19 to 2.5.0 in /tests/data and document breaking c...
  • See full diff in compare view

Updates nick2bad4u/generate-repo-file-list from 6de1b736f4684d3a8a4260f0bc3aea4ce1493f3f to 4b742561166c6eafcf23fbb0c79ff8869bbceb27

Commits
  • 4b74256 📝 [docs] Update CODE_OF_CONDUCT and add LICENSE file
  • ea827ac Merge pull request #36 from Nick2bad4u/dependabot/pip/github-actions-85b6f7c93c
  • 78c63b7 Merge pull request #37 from Nick2bad4u/dependabot/github_actions/github-actio...
  • 06f2895 🎨 [style] Remove unnecessary blank line in auto-release workflow
  • 0a319d8 ✨ [feat] Enable manual triggering of auto-release workflow
  • 9423e43 ✨ [feat] Enhance auto-release workflow for version bumping and changelog gene...
  • 625f8cf Bump the github-actions group with 2 updates
  • 8ca785b Update pytest requirement in the github-actions group
  • de6e8c4 🧪 [test] Add comprehensive tests for file list generation and configuration
  • ac06e0a Merge pull request #35 from Nick2bad4u/dependabot/github_actions/github-actio...
  • Additional commits viewable in compare view

Updates oxsecurity/megalinter from 9.1.0 to 9.2.0

Release notes

Sourced from oxsecurity/megalinter's releases.

v9.2.0

What's Changed

... (truncated)

Changelog

Sourced from oxsecurity/megalinter's changelog.

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[Unreleased] (beta, main branch content)

Note: Can be used with oxsecurity/megalinter@beta in your GitHub Action mega-linter.yml file, or with oxsecurity/megalinter:beta docker image

  • Core

  • New linters

  • Disabled linters

  • Deprecated linters

  • Removed linters

  • Media

  • Linters enhancements

  • Fixes

  • Reporters

  • Doc

  • Flavors

  • CI

    • Free disk space on GitHub actions runner when releasing a new flavor

  • mega-linter-runner

  • Linter versions upgrades (N)

[v9.2.0]...

Description has been truncated

@dependabot
chore(deps): bump the github-actions group with 18 updates
1bd85e9 
Bumps the github-actions group with 18 updates:

| Package | From | To |
| --- | --- | --- |
| [step-security/harden-runner](https://github.com/step-security/harden-runner) | `2.13.1` | `2.13.2` |
| [actions/checkout](https://github.com/actions/checkout) | `5.0.0` | `6.0.0` |
| [devops-actions/actionlint](https://github.com/devops-actions/actionlint) | `0.1.9` | `0.1.10` |
| [Platane/snk](https://github.com/platane/snk) | `3.3.0` | `3.4.1` |
| [psf/black](https://github.com/psf/black) | `25.9.0` | `25.11.0` |
| [github/codeql-action](https://github.com/github/codeql-action) | `4.31.2` | `4.31.6` |
| [actions/dependency-review-action](https://github.com/actions/dependency-review-action) | `4.8.1` | `4.8.2` |
| [actions/setup-python](https://github.com/actions/setup-python) | `6.0.0` | `6.1.0` |
| [nick2bad4u/generate-repo-file-list](https://github.com/nick2bad4u/generate-repo-file-list) | `6de1b736f4684d3a8a4260f0bc3aea4ce1493f3f` | `4b742561166c6eafcf23fbb0c79ff8869bbceb27` |
| [oxsecurity/megalinter](https://github.com/oxsecurity/megalinter) | `9.1.0` | `9.2.0` |
| [google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml](https://github.com/google/osv-scanner-action) | `2.2.4` | `2.3.0` |
| [google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml](https://github.com/google/osv-scanner-action) | `2.2.4` | `2.3.0` |
| [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) | `7.0.8` | `7.0.9` |
| [rojopolis/spellcheck-github-actions](https://github.com/rojopolis/spellcheck-github-actions) | `0.53.0` | `0.55.0` |
| [actions/ai-inference](https://github.com/actions/ai-inference) | `2.0.1` | `2.0.4` |
| [super-linter/super-linter](https://github.com/super-linter/super-linter) | `8.2.1` | `8.3.0` |
| [trufflesecurity/trufflehog](https://github.com/trufflesecurity/trufflehog) | `3.90.12` | `3.91.1` |
| [crate-ci/typos](https://github.com/crate-ci/typos) | `1.39.0` | `1.40.0` |


Updates `step-security/harden-runner` from 2.13.1 to 2.13.2
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](step-security/harden-runner@f4a75cf...95d9a5d)

Updates `actions/checkout` from 5.0.0 to 6.0.0
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@08c6903...1af3b93)

Updates `devops-actions/actionlint` from 0.1.9 to 0.1.10
- [Release notes](https://github.com/devops-actions/actionlint/releases)
- [Commits](devops-actions/actionlint@c6744a3...467e2ce)

Updates `Platane/snk` from 3.3.0 to 3.4.1
- [Release notes](https://github.com/platane/snk/releases)
- [Commits](Platane/snk@a69d1db...e2cedf7)

Updates `psf/black` from 25.9.0 to 25.11.0
- [Release notes](https://github.com/psf/black/releases)
- [Changelog](https://github.com/psf/black/blob/main/CHANGES.md)
- [Commits](psf/black@af0ba72...05f0a8c)

Updates `github/codeql-action` from 4.31.2 to 4.31.6
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@0499de3...fe4161a)

Updates `actions/dependency-review-action` from 4.8.1 to 4.8.2
- [Release notes](https://github.com/actions/dependency-review-action/releases)
- [Commits](actions/dependency-review-action@40c09b7...3c4e3dc)

Updates `actions/setup-python` from 6.0.0 to 6.1.0
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](actions/setup-python@e797f83...83679a8)

Updates `nick2bad4u/generate-repo-file-list` from 6de1b736f4684d3a8a4260f0bc3aea4ce1493f3f to 4b742561166c6eafcf23fbb0c79ff8869bbceb27
- [Release notes](https://github.com/nick2bad4u/generate-repo-file-list/releases)
- [Commits](Nick2bad4u/Generate-Repo-File-List@6de1b73...4b74256)

Updates `oxsecurity/megalinter` from 9.1.0 to 9.2.0
- [Release notes](https://github.com/oxsecurity/megalinter/releases)
- [Changelog](https://github.com/oxsecurity/megalinter/blob/main/CHANGELOG.md)
- [Commits](oxsecurity/megalinter@62c799d...55a59b2)

Updates `google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml` from 2.2.4 to 2.3.0
- [Release notes](https://github.com/google/osv-scanner-action/releases)
- [Commits](google/osv-scanner-action@9bb6957...b77c075)

Updates `google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml` from 2.2.4 to 2.3.0
- [Release notes](https://github.com/google/osv-scanner-action/releases)
- [Commits](google/osv-scanner-action@9bb6957...b77c075)

Updates `peter-evans/create-pull-request` from 7.0.8 to 7.0.9
- [Release notes](https://github.com/peter-evans/create-pull-request/releases)
- [Commits](peter-evans/create-pull-request@271a8d0...84ae59a)

Updates `rojopolis/spellcheck-github-actions` from 0.53.0 to 0.55.0
- [Release notes](https://github.com/rojopolis/spellcheck-github-actions/releases)
- [Changelog](https://github.com/rojopolis/spellcheck-github-actions/blob/master/CHANGELOG.md)
- [Commits](rojopolis/spellcheck-github-actions@336d2b4...16d0338)

Updates `actions/ai-inference` from 2.0.1 to 2.0.4
- [Release notes](https://github.com/actions/ai-inference/releases)
- [Commits](actions/ai-inference@a1c1182...334892b)

Updates `super-linter/super-linter` from 8.2.1 to 8.3.0
- [Release notes](https://github.com/super-linter/super-linter/releases)
- [Changelog](https://github.com/super-linter/super-linter/blob/main/CHANGELOG.md)
- [Commits](super-linter/super-linter@2bdd90e...502f4fe)

Updates `trufflesecurity/trufflehog` from 3.90.12 to 3.91.1
- [Release notes](https://github.com/trufflesecurity/trufflehog/releases)
- [Commits](trufflesecurity/trufflehog@b84c3d1...aade3bf)

Updates `crate-ci/typos` from 1.39.0 to 1.40.0
- [Release notes](https://github.com/crate-ci/typos/releases)
- [Changelog](https://github.com/crate-ci/typos/blob/master/CHANGELOG.md)
- [Commits](crate-ci/typos@07d900b...2d0ce56)

---
updated-dependencies:
- dependency-name: step-security/harden-runner
  dependency-version: 2.13.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: actions/checkout
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: devops-actions/actionlint
  dependency-version: 0.1.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: Platane/snk
  dependency-version: 3.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: psf/black
  dependency-version: 25.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: github/codeql-action
  dependency-version: 4.31.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: actions/dependency-review-action
  dependency-version: 4.8.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: actions/setup-python
  dependency-version: 6.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: nick2bad4u/generate-repo-file-list
  dependency-version: 4b742561166c6eafcf23fbb0c79ff8869bbceb27
  dependency-type: direct:production
  dependency-group: github-actions
- dependency-name: oxsecurity/megalinter
  dependency-version: 9.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: peter-evans/create-pull-request
  dependency-version: 7.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: rojopolis/spellcheck-github-actions
  dependency-version: 0.55.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: actions/ai-inference
  dependency-version: 2.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: super-linter/super-linter
  dependency-version: 8.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: trufflesecurity/trufflehog
  dependency-version: 3.91.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: crate-ci/typos
  dependency-version: 1.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Dec 1, 2025

Labels

The following labels could not be found: github-actions. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@Nick2bad4u
Copy link
Copy Markdown
Owner

Nick2bad4u commented Dec 1, 2025 •
edited
Loading

✅ Snyk checks have passed. No issues have been found so far.

Status Scanner Critical High Medium Low Total (0)
✅ Open Source Security 0 0 0 0 0 issues
✅ Code Security 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

@github-actions github-actions Bot added AnyChange Assigned to any repo file change GitHub release New Release labels Dec 1, 2025
@sonarqubecloud
Copy link
Copy Markdown

sonarqubecloud Bot commented Dec 1, 2025

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

@Nick2bad4u Nick2bad4u merged commit c16c5de into main Dec 1, 2025
82 of 86 checks passed
@Nick2bad4u Nick2bad4u deleted the dependabot/github_actions/github-actions-9edd8e3b6e branch December 1, 2025 19:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

AnyChange Assigned to any repo file change GitHub release New Release

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@Nick2bad4u