Skip to content

build(deps): bump the all-github-actions group across 1 directory with 8 updates#413

Merged
MichaelHatherly merged 1 commit intomainfrom
dependabot/github_actions/all-github-actions-32b3505104
May 1, 2026
Merged

build(deps): bump the all-github-actions group across 1 directory with 8 updates#413
MichaelHatherly merged 1 commit intomainfrom
dependabot/github_actions/all-github-actions-32b3505104

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 1, 2026

Bumps the all-github-actions group with 8 updates in the / directory:

Package From To
julia-actions/install-juliaup 3.0.0 3.1.3
julia-actions/cache 2.1.0 3.0.2
r-lib/actions 2.11.4 2.12.0
codecov/codecov-action 5.5.2 6.0.0
julia-actions/setup-julia 2.6.1 3.0.1
dangoslen/changelog-enforcer 3.6.1 3.7.0
JuliaRegistries/TagBot 1.24.5 1.25.7
peter-evans/create-pull-request 8.1.0 8.1.1

Updates julia-actions/install-juliaup from 3.0.0 to 3.1.3

Release notes

Sourced from julia-actions/install-juliaup's releases.

v3.1.3

What's Changed

We updated some dependencies.

Full Changelog

Full Changelog: julia-actions/install-juliaup@v3.1.2...v3.1.3

v3.1.2

What's Changed

We updated some dependencies.

Full Changelog

Full Changelog: julia-actions/install-juliaup@v3.1.1...v3.1.2

v3.1.1

What's Changed

Full Changelog: julia-actions/install-juliaup@v3...v3.1.1

v3.1.0

What's Changed

User-facing changes

None.

Documentation changes

Internal changes

... (truncated)

Commits

Updates julia-actions/cache from 2.1.0 to 3.0.2

Release notes

Sourced from julia-actions/cache's releases.

v3.0.2

What's Changed

Fixes

Maintenance

Full Changelog: julia-actions/cache@v3.0.1...v3.0.2

v3.0.1

What's Changed

Fixes

Maintenance

Full Changelog: julia-actions/cache@v3.0.0...v3.0.1

v3.0.0 - Cache on failure (with override)

What's Changed

Breaking Changes

  • Caching will now happen when the job fails, with an override to restore the previous behavior via save-always: false

Changes

Maintenance

... (truncated)

Commits
  • 9a93c5f chore: bump @actions/* deps to latest and convert source to ESM (#218)
  • c3e92b0 Bump actions/setup-node from 6.1.0 to 6.3.0 (#211)
  • 2d4cffa Bump brace-expansion from 1.1.12 to 1.1.13 (#217)
  • e882f3e Bump actions/checkout from 6.0.1 to 6.0.2 (#212)
  • 7eb2283 chore: add npm ecosystem to dependabot (#213)
  • 851ab02 Fix pidfile exclusion: split brace expansion into separate globs (#210)
  • e97f6fc Delete pidfiles. Skip Pkg.gc when not saving. Don't delete old caches if no n...
  • 09b9b25 Bump fast-xml-parser from 5.5.6 to 5.5.7 (#208)
  • b56ac81 Add instructions for LLM coding agents (AGENTS.md and CLAUDE.md) (#206)
  • 98ad0c9 Bump fast-xml-parser from 5.4.2 to 5.5.6 (#205)
  • Additional commits viewable in compare view

Updates r-lib/actions from 2.11.4 to 2.12.0

Changelog

Sourced from r-lib/actions's changelog.

v2.12.0 (2026-04-29)

  • All node.js actions use node 24 now. Relatedly, all example workflows use recent versions of actions that use node 24.

  • [setup-r] now uses use-public-rspm: true by default on Linux and Windows. macOS binaries require further opt-in with use-public-rspm: always.

  • It is now possible to require actions to be pinned to a full-length commit SHA in repositories using r-lib/actions (#1070).

  • [setup-pandoc][setup-r-dependencies] now default to Pandoc version 3.8.3.

  • [setup-r-dependencies] now includes the R architecture in the cache key, so caches for macos-15 (Apple Silicon) and macos-15-intel (Rosetta/x86_64) no longer collide (#1035).

  • [setup-r] run apt-get update without -qq on Linux, to make debugging update failures easier (#1058).

v2.11.4 (2025-10-08)

  • [setup-r] correctly installs Rtools again on aarch64 Windows, as needed.

v2.11.3 (2025-03-24)

  • [setup-r] now supports Rtools45, and installs it by default for R >= 4.5.0.

v2.11.2 (2025-02-19)

  • [setup-r] now installs gfortran 14.2 for R 4.5.0 and later (#965).

  • [setup-r] now does not use PPM on aarch64 Linux, because PPM does not have binary packages for aarch64 Linux, and it would send x86_64 binarires for aarch64 systems as well.

  • [setup-r] now unlinks [email protected] on macOS silently, to avoid an error from the problem matchers (#973).

  • [setup-r-dependencies] now supports dependencies: FALSE (@​eitsupi, #961).

  • [setup-r-dependencies] now creates the R_LIBS_USER and R_LIBS_SITE library directories (#974).

  • [setup-r-dependencies] now prints the R repo status (#975).

... (truncated)

Commits

Updates codecov/codecov-action from 5.5.2 to 6.0.0

Release notes

Sourced from codecov/codecov-action's releases.

v6.0.0

⚠️ This version introduces support for node24 which make cause breaking changes for systems that do not currently support node24. ⚠️

What's Changed

Full Changelog: codecov/codecov-action@v5.5.4...v6.0.0

v5.5.4

This is a mirror of v5.5.2. v6 will be released which requires node24

What's Changed

Full Changelog: codecov/codecov-action@v5.5.3...v5.5.4

v5.5.3

What's Changed

Full Changelog: codecov/codecov-action@v5.5.2...v5.5.3

Changelog

Sourced from codecov/codecov-action's changelog.

v5.5.2

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.5.1..v5.5.2

v5.5.1

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.5.0..v5.5.1

v5.5.0

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.3..v5.5.0

v5.4.3

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.2..v5.4.3

v5.4.2

... (truncated)

Commits

Updates julia-actions/setup-julia from 2.6.1 to 3.0.1

Release notes

Sourced from julia-actions/setup-julia's releases.

v3.0.1

What's Changed

This is a bugfix release that fixes an error seen when using min-minor or min-patch.

Full Changelog

Full Changelog: julia-actions/setup-julia@v3.0.0...v3.0.1

v3.0.0

⚠️ Breaking Changes, and Migration Guide for v2 ⟶ v3

  1. v3 requires Node 24 (compared to v2, which required Node 20).
  2. The behavior of version: min has changed between v2 and v3.
    • In v2, version: min would resolve to the minimum major/minor/patch, e.g. 1.10.0.
    • In v3, version: min resolves to the minimum major/minor but the latest patch, e.g. 1.10.11.
    • If you specifically want the minimum major/minor/patch under v3, you should specify version: min-patch. Note: v3 also adds the alias version: min-minor, which is equivalent to version: min.
  3. v3 will throw an error if x86_64 Julia binaries are requested on Apple Silicon macOS. (Under v2, this was a warning.) Under v3, if you specifically want to run x86_64 Julia binaries on Apple Silicon (under Rosetta 2), you must now opt-in by specifying the force-arch: true input.

Other Changes

We updated some dependencies, and we improved and updated the CI tooling on this repo.

Full Changelog

Full Changelog: julia-actions/setup-julia@v2.7.0...v3.0.0

v2.7.0

Documentation

Dependencies

... (truncated)

Commits
  • f6f565d Bugfix: Fix an error seen when using min-minor or min-patch (#387)
  • 4a12c5f Breaking: Change min to return the latest patch (but still the minimum majo...
  • a8c65a2 Bump the all-github-actions group across 1 directory with 2 updates (#381)
  • 92d77f5 Bump picomatch from 2.3.1 to 2.3.2 (#379)
  • 679f144 Bump handlebars from 4.7.8 to 4.7.9 (#377)
  • 7c976c8 Add workflow to run make everything-from-scratch (#378)
  • 101e139 Breaking: Migrate from Node 20 to Node 24 (#374)
  • 44a615a Require opt-in via force-arch to run x86 on macOS arm (#352)
  • 4c0cb0f Bump actions/checkout from 6.0.1 to 6.0.2 in the all-github-actions group (#370)
  • 7fe7427 Bump minimatch (#368)
  • Additional commits viewable in compare view

Updates dangoslen/changelog-enforcer from 3.6.1 to 3.7.0

Release notes

Sourced from dangoslen/changelog-enforcer's releases.

Changelog Enforcer 3.7.0

Changed

  • Now runs on Node 24
    • Updates .nvmrc to set the version
    • Updates node version in action.yml

Dependencies

  • Bump stefanzweifel/git-auto-commit-action from 5.0.0 to 5.0.1 (#287)
  • Bump eslint from 8.57.0 to 9.7.0 (#288)
  • Bump thollander/actions-comment-pull-request from 2 to 3 (#303)
  • Bump actions/checkout from 4.1.2 to 6.0.2 (#302)
Changelog

Sourced from dangoslen/changelog-enforcer's changelog.

CHANGELOG

Inspired from Keep a Changelog

[UNRELEASED]

[v3.7.0]

Changed

  • Now runs on Node 24
    • Updates .nvmrc to set the version
    • Updates node version in action.yml

Dependencies

  • Bump stefanzweifel/git-auto-commit-action from 5.0.0 to 5.0.1 (#287)
  • Bump eslint from 8.57.0 to 9.7.0 (#288)
  • Bump thollander/actions-comment-pull-request from 2 to 3 (#303)
  • Bump actions/checkout from 4.1.2 to 6.0.2 (#302)

[v3.6.1]

Changed

  • Fix Github Actions Annotations (#281)

Fixed

  • Handle skipLabels that contains emojis by properly looking for : characters in the label extractor regex (fixes #284)

Dependencies

  • Bump eslint from 8.56.0 to 8.57.0 (#282)
  • Bump actions/checkout from 4.1.1 to 4.1.2 (#283)

[v3.6.0]

Changed

  • Now runs on Node 20
    • Updates .nvmrc to set the version
    • Updates node version in action.yml

Dependencies

  • Bump node-fetch from 2.6.12 to 2.7.0 (#264, #270)
  • Bump actions/checkout from 3.5.3 to 4.1.1 (#266, #267, #271, #275)
  • Bump @vercel/ncc from 0.36.1 to 0.38.1 (#268, #276)
  • Bump jest from 29.6.2 to 29.7.0 (#269)
  • Bump stefanzweifel/git-auto-commit-action from 4.16.0 to 5.0.0 (#272)
  • Bump @actions/github from 5.1.1 to 6.0.0 (#273)
  • Bump @actions/core from 1.10.0 to 1.10.1 (#274)
  • Bump eslint from 8.46.0 to 8.56.0 (#279)

[v3.5.1]

Security

  • Removes uglify-js and dist packages

Dependencies

... (truncated)

Commits

Updates JuliaRegistries/TagBot from 1.24.5 to 1.25.7

Release notes

Sourced from JuliaRegistries/TagBot's releases.

v1.25.7

What's Changed

Full Changelog: JuliaRegistries/TagBot@v1.25.6...v1.25.7

v1.25.6

What's Changed

Full Changelog: JuliaRegistries/TagBot@v1.25.5...v1.25.6

v1.25.5

What's Changed

Full Changelog: JuliaRegistries/TagBot@v1.25.4...v1.25.5

v1.25.4

What's Changed

Full Changelog: JuliaRegistries/TagBot@v1.25.2...v1.25.4

v1.25.1

What's Changed

... (truncated)

Commits
  • 6b7c22e Release 1.25.7
  • f6a1119 Fix false backport detection for non-default branch workflows (#568)
  • 91e6323 Handle resource-not-accessible 403 as non-internal (#569)
  • ed1dbfc Report server: Reduce duplicate search window to prevent timeout (#567)
  • 5dac09e Bump pytest from 9.0.1 to 9.0.3 (#565)
  • a5bb5b6 Include pyproject.toml in Lambda package (#564)
  • 939da8b Fix Lambda deployment: SSM permissions, cross-platform builds (#563)
  • 2681a46 Bump requests from 2.33.0 to 2.33.1 in the all-pip-packages group across 1 di...
  • 4231705 Generate requirements.txt at build time via SAM Makefile method (#561)
  • 46f2703 Migrate web service from Serverless Framework to AWS SAM (#559)
  • Additional commits viewable in compare view

Updates peter-evans/create-pull-request from 8.1.0 to 8.1.1

Release notes

Sourced from peter-evans/create-pull-request's releases.

Create Pull Request v8.1.1

What's Changed

Full Changelog: peter-evans/create-pull-request@v8.1.0...v8.1.1

Commits
  • 5f6978f fix: retry post-creation API calls on 422 eventual consistency errors (#4356)
  • d32e88d build(deps-dev): bump the npm group with 3 updates (#4349)
  • 8170bcc build(deps-dev): bump handlebars from 4.7.8 to 4.7.9 (#4344)
  • 0041819 build(deps): bump picomatch (#4339)
  • b993918 build(deps-dev): bump flatted from 3.3.1 to 3.4.2 (#4334)
  • 36d7c84 build(deps-dev): bump undici from 6.23.0 to 6.24.0 (#4328)
  • a45d1fb build(deps): bump @​tootallnate/once and jest-environment-jsdom (#4323)
  • 3499eb6 build(deps): bump the github-actions group with 2 updates (#4316)
  • 3f3b473 build(deps): bump minimatch (#4311)
  • 6699836 build(deps-dev): bump the npm group with 2 updates (#4305)
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • `@dependabot ignore minor vers...

Description has been truncated

@dependabot
build(deps): bump the all-github-actions group across 1 directory wit…
bc7873b 
…h 8 updates

Bumps the all-github-actions group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [julia-actions/install-juliaup](https://github.com/julia-actions/install-juliaup) | `3.0.0` | `3.1.3` |
| [julia-actions/cache](https://github.com/julia-actions/cache) | `2.1.0` | `3.0.2` |
| [r-lib/actions](https://github.com/r-lib/actions) | `2.11.4` | `2.12.0` |
| [codecov/codecov-action](https://github.com/codecov/codecov-action) | `5.5.2` | `6.0.0` |
| [julia-actions/setup-julia](https://github.com/julia-actions/setup-julia) | `2.6.1` | `3.0.1` |
| [dangoslen/changelog-enforcer](https://github.com/dangoslen/changelog-enforcer) | `3.6.1` | `3.7.0` |
| [JuliaRegistries/TagBot](https://github.com/juliaregistries/tagbot) | `1.24.5` | `1.25.7` |
| [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) | `8.1.0` | `8.1.1` |



Updates `julia-actions/install-juliaup` from 3.0.0 to 3.1.3
- [Release notes](https://github.com/julia-actions/install-juliaup/releases)
- [Commits](julia-actions/install-juliaup@853f07d...849bf99)

Updates `julia-actions/cache` from 2.1.0 to 3.0.2
- [Release notes](https://github.com/julia-actions/cache/releases)
- [Commits](julia-actions/cache@d10a6fd...9a93c5f)

Updates `r-lib/actions` from 2.11.4 to 2.12.0
- [Release notes](https://github.com/r-lib/actions/releases)
- [Changelog](https://github.com/r-lib/actions/blob/v2-branch/NEWS.md)
- [Commits](r-lib/actions@6f6e5bc...a51a801)

Updates `codecov/codecov-action` from 5.5.2 to 6.0.0
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](codecov/codecov-action@671740a...57e3a13)

Updates `julia-actions/setup-julia` from 2.6.1 to 3.0.1
- [Release notes](https://github.com/julia-actions/setup-julia/releases)
- [Commits](julia-actions/setup-julia@5c9647d...f6f565d)

Updates `dangoslen/changelog-enforcer` from 3.6.1 to 3.7.0
- [Release notes](https://github.com/dangoslen/changelog-enforcer/releases)
- [Changelog](https://github.com/dangoslen/changelog-enforcer/blob/main/CHANGELOG.md)
- [Commits](dangoslen/changelog-enforcer@204e7d3...8b5e9dc)

Updates `JuliaRegistries/TagBot` from 1.24.5 to 1.25.7
- [Release notes](https://github.com/juliaregistries/tagbot/releases)
- [Commits](JuliaRegistries/TagBot@f2ffb6d...6b7c22e)

Updates `peter-evans/create-pull-request` from 8.1.0 to 8.1.1
- [Release notes](https://github.com/peter-evans/create-pull-request/releases)
- [Commits](peter-evans/create-pull-request@c0f553f...5f6978f)

---
updated-dependencies:
- dependency-name: julia-actions/install-juliaup
  dependency-version: 3.1.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-github-actions
- dependency-name: julia-actions/cache
  dependency-version: 3.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-github-actions
- dependency-name: r-lib/actions
  dependency-version: 2.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-github-actions
- dependency-name: codecov/codecov-action
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-github-actions
- dependency-name: julia-actions/setup-julia
  dependency-version: 3.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-github-actions
- dependency-name: dangoslen/changelog-enforcer
  dependency-version: 3.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-github-actions
- dependency-name: JuliaRegistries/TagBot
  dependency-version: 1.25.7
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-github-actions
- dependency-name: peter-evans/create-pull-request
  dependency-version: 8.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-github-actions
...

Signed-off-by: dependabot[bot] <[email protected]>
@MichaelHatherly MichaelHatherly merged commit 77d4b3b into main May 1, 2026
9 of 12 checks passed
@MichaelHatherly MichaelHatherly deleted the dependabot/github_actions/all-github-actions-32b3505104 branch May 1, 2026 07:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies github-actions

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@MichaelHatherly