Skip to content

build(deps): bump the actions group across 1 directory with 4 updates - #8805

Open
dependabot[bot] wants to merge 3 commits into
mainfrom
dependabot/github_actions/actions-2da0d8560b
Open

build(deps): bump the actions group across 1 directory with 4 updates#8805
dependabot[bot] wants to merge 3 commits into
mainfrom
dependabot/github_actions/actions-2da0d8560b

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 23, 2026

Copy link
Copy Markdown
Contributor

Bumps the actions group with 4 updates in the / directory: actions/checkout, actions/github-script, actions/setup-node and actions/setup-python.

Updates actions/checkout from 6 to 7

Release notes

Sourced from actions/checkout's releases.

v7.0.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v6.0.3...v7.0.0

v6.1.0

What's Changed

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: actions/checkout@v6.0.3...v6.1.0

v6.0.3

What's Changed

New Contributors

Full Changelog: actions/checkout@v6...v6.0.3

v6.0.2

What's Changed

Full Changelog: actions/checkout@v6.0.1...v6.0.2

v6.0.1

What's Changed

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

v7.0.1

v7.0.0

v6.0.3

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

... (truncated)

Commits

Updates actions/github-script from 8 to 9

Release notes

Sourced from actions/github-script's releases.

v9.0.0

New features:

  • getOctokit factory function — Available directly in the script context. Create additional authenticated Octokit clients with different tokens for multi-token workflows, GitHub App tokens, and cross-org access. See Creating additional clients with getOctokit for details and examples.
  • Orchestration ID in user-agent — The ACTIONS_ORCHESTRATION_ID environment variable is automatically appended to the user-agent string for request tracing.

Breaking changes:

  • require('@actions/github') no longer works in scripts. The upgrade to @actions/github v9 (ESM-only) means require('@actions/github') will fail at runtime. If you previously used patterns like const { getOctokit } = require('@actions/github') to create secondary clients, use the new injected getOctokit function instead — it's available directly in the script context with no imports needed.
  • getOctokit is now an injected function parameter. Scripts that declare const getOctokit = ... or let getOctokit = ... will get a SyntaxError because JavaScript does not allow const/let redeclaration of function parameters. Use the injected getOctokit directly, or use var getOctokit = ... if you need to redeclare it.
  • If your script accesses other @actions/github internals beyond the standard github/octokit client, you may need to update those references for v9 compatibility.

What's Changed

New Contributors

Full Changelog: actions/github-script@v8.0.0...v9.0.0

Commits
  • 3a2844b Merge pull request #700 from actions/salmanmkc/expose-getoctokit + prepare re...
  • ca10bbd fix: use @​octokit/core/types import for v7 compatibility
  • 86e48e2 merge: incorporate main branch changes
  • c108472 chore: rebuild dist for v9 upgrade and getOctokit factory
  • afff112 Merge pull request #712 from actions/salmanmkc/deployment-false + fix user-ag...
  • ff8117e ci: fix user-agent test to handle orchestration ID
  • 81c6b78 ci: use deployment: false to suppress deployment noise from integration tests
  • 3953caf docs: update README examples from @​v8 to @​v9, add getOctokit docs and v9 brea...
  • c17d55b ci: add getOctokit integration test job
  • a047196 test: add getOctokit integration tests via callAsyncFunction
  • Additional commits viewable in compare view

Updates actions/setup-node from 6 to 7

Release notes

Sourced from actions/setup-node's releases.

v7.0.0

What's Changed

Enhancements:

Bug fixes:

Documentation updates:

Dependency update:

New Contributors

Full Changelog: actions/setup-node@v6...v7.0.0

v6.5.0

What's Changed

Full Changelog: actions/setup-node@v6.4.0...v6.5.0

v6.4.0

What's Changed

Dependency updates:

New Contributors

Full Changelog: actions/setup-node@v6...v6.4.0

v6.3.0

What's Changed

Enhancements:

... (truncated)

Commits
  • 8207627 Migrate to ESM and upgrade dependencies (#1574)
  • 04be95c Add cache-primary-key and cache-matched-key as outputs (#1577)
  • 7c2c68d docs: Update caching recommendations to mitigate cache poisoning risks (#1567)
  • 6a61c03 Merge pull request #1569 from jasongin/update-actions-cache-5.1.0
  • 30eb73b Resolve high-severity audit issues
  • 4e1a87a Update dist
  • 360237f Strict equality
  • 4f8aac5 Bump @​actions/cache to 5.1.0, log cache write denied
  • f4a67bb Only use mirrorToken in getManifest if it's provided (#1548)
  • 0355742 Remove dummy NODE_AUTH_TOKEN export (#1558)
  • Additional commits viewable in compare view

Updates actions/setup-python from 6 to 7

Release notes

Sourced from actions/setup-python's releases.

v7.0.0

What's Changed

Enhancements

Bug Fix

Dependency Upgrade

New Contributors

Full Changelog: actions/setup-python@v6...v7.0.0

v6.3.0

What's Changed

Enhancement

Dependency update

Documentation

New Contributors

Full Changelog: actions/setup-python@v6.2.0...v6.3.0

v6.2.0

What's Changed

Dependency Upgrades

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the actions group with 4 updates in the / directory: [actions/checkout](https://github.com/actions/checkout), [actions/github-script](https://github.com/actions/github-script), [actions/setup-node](https://github.com/actions/setup-node) and [actions/setup-python](https://github.com/actions/setup-python).


Updates `actions/checkout` from 6 to 7
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v6...v7)

Updates `actions/github-script` from 8 to 9
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](actions/github-script@v8...v9)

Updates `actions/setup-node` from 6 to 7
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@v6...v7)

Updates `actions/setup-python` from 6 to 7
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](actions/setup-python@v6...v7)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: actions/github-script
  dependency-version: '9'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: actions/setup-node
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: actions/setup-python
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jul 23, 2026
@agoose77 agoose77 added the deployer:skip-deploy Skips deployment of anything (support, staging, prod) label Jul 23, 2026
@github-actions

github-actions Bot commented Jul 23, 2026

Copy link
Copy Markdown
Contributor

Merging this PR will trigger the following deployment actions.

Support deployments

Cloud Provider Cluster Name Reason for Redeploy
gcp hhmi Support helm chart has been modified
gcp awi-ciroh Support helm chart has been modified
aws aimatx-2i2c-hub Support helm chart has been modified
aws victor Support helm chart has been modified
aws opensci Support helm chart has been modified
aws uw-escience Support helm chart has been modified
aws 2i2c-aws-us Support helm chart has been modified
gcp dubois Support helm chart has been modified
aws earthscope Support helm chart has been modified
gcp cloudbank Support helm chart has been modified
aws nasa-ghg-hub Support helm chart has been modified
kubeconfig utoronto Support helm chart has been modified
aws ucmerced Support helm chart has been modified
aws jupyter-health Support helm chart has been modified
aws nasa-veda Support helm chart has been modified
aws projectpythia Support helm chart has been modified
aws bnext-bio Support helm chart has been modified
gcp leap Support helm chart has been modified
gcp 2i2c-uk Support helm chart has been modified
aws nmfs-openscapes Support helm chart has been modified
aws maap Support helm chart has been modified
gcp 2i2c Support helm chart has been modified
aws disasters Support helm chart has been modified
aws reflective Support helm chart has been modified
aws neurohackademy Support helm chart has been modified
aws nasa-cryo Support helm chart has been modified
aws openscapeshub Support helm chart has been modified
kubeconfig projectpythia-binder Support helm chart has been modified
aws temple Support helm chart has been modified

Staging deployments

Cloud Provider Cluster Name Hub Name Reason for Redeploy
gcp hhmi staging Core infrastructure has been modified
gcp awi-ciroh staging Core infrastructure has been modified
aws aimatx-2i2c-hub staging Core infrastructure has been modified
aws victor staging Core infrastructure has been modified
aws opensci staging Core infrastructure has been modified
aws uw-escience staging Core infrastructure has been modified
aws 2i2c-aws-us staging Core infrastructure has been modified
aws earthscope staging Core infrastructure has been modified
gcp cloudbank staging Core infrastructure has been modified
aws nasa-ghg-hub staging Core infrastructure has been modified
kubeconfig utoronto staging Core infrastructure has been modified
kubeconfig utoronto r-staging Core infrastructure has been modified
aws ucmerced staging Core infrastructure has been modified
aws jupyter-health staging Core infrastructure has been modified
aws nasa-veda staging Core infrastructure has been modified
aws projectpythia staging Core infrastructure has been modified
aws bnext-bio staging Core infrastructure has been modified
gcp leap staging Core infrastructure has been modified
gcp 2i2c-uk staging Core infrastructure has been modified
aws nmfs-openscapes staging Core infrastructure has been modified
aws maap staging Core infrastructure has been modified
gcp 2i2c staging Core infrastructure has been modified
aws disasters staging Core infrastructure has been modified
aws reflective staging Core infrastructure has been modified
aws neurohackademy staging Core infrastructure has been modified
aws nasa-cryo staging Core infrastructure has been modified
aws openscapeshub staging Core infrastructure has been modified
aws temple staging Core infrastructure has been modified

Production deployments

Cloud Provider Cluster Name Hub Name Reason for Redeploy
gcp hhmi spyglass Core infrastructure has been modified
gcp hhmi binder Core infrastructure has been modified
gcp awi-ciroh prod Core infrastructure has been modified
aws aimatx-2i2c-hub prod Core infrastructure has been modified
aws victor prod Core infrastructure has been modified
aws opensci sciencecore Core infrastructure has been modified
aws opensci climaterisk Core infrastructure has been modified
aws opensci small-binder Core infrastructure has been modified
aws opensci big-binder Core infrastructure has been modified
aws uw-escience prod Core infrastructure has been modified
aws 2i2c-aws-us showcase Core infrastructure has been modified
aws 2i2c-aws-us orcid-demo Core infrastructure has been modified
gcp dubois ephemeral Core infrastructure has been modified
aws earthscope prod Core infrastructure has been modified
aws earthscope binder Core infrastructure has been modified
gcp cloudbank ahs Core infrastructure has been modified
gcp cloudbank authoring Core infrastructure has been modified
gcp cloudbank bcc Core infrastructure has been modified
gcp cloudbank boise Core infrastructure has been modified
gcp cloudbank bmcc Core infrastructure has been modified
gcp cloudbank chaffey Core infrastructure has been modified
gcp cloudbank cau Core infrastructure has been modified
gcp cloudbank ccsf Core infrastructure has been modified
gcp cloudbank chabot Core infrastructure has been modified
gcp cloudbank chicagostate Core infrastructure has been modified
gcp cloudbank clarku Core infrastructure has been modified
gcp cloudbank cloud-county Core infrastructure has been modified
gcp cloudbank cmu Core infrastructure has been modified
gcp cloudbank cra Core infrastructure has been modified
gcp cloudbank csm Core infrastructure has been modified
gcp cloudbank deanza Core infrastructure has been modified
gcp cloudbank demo Core infrastructure has been modified
gcp cloudbank dvc Core infrastructure has been modified
gcp cloudbank elac Core infrastructure has been modified
gcp cloudbank elcamino Core infrastructure has been modified
gcp cloudbank evc Core infrastructure has been modified
gcp cloudbank etsu Core infrastructure has been modified
gcp cloudbank fresno Core infrastructure has been modified
gcp cloudbank foothill Core infrastructure has been modified
gcp cloudbank fullertoncc Core infrastructure has been modified
gcp cloudbank georgetown Core infrastructure has been modified
gcp cloudbank glendale Core infrastructure has been modified
gcp cloudbank golden Core infrastructure has been modified
gcp cloudbank gssm Core infrastructure has been modified
gcp cloudbank gwu Core infrastructure has been modified
gcp cloudbank gpu-demo Core infrastructure has been modified
gcp cloudbank high Core infrastructure has been modified
gcp cloudbank hmc Core infrastructure has been modified
gcp cloudbank humboldt Core infrastructure has been modified
gcp cloudbank iit Core infrastructure has been modified
gcp cloudbank kean Core infrastructure has been modified
gcp cloudbank lacc Core infrastructure has been modified
gcp cloudbank lahc Core infrastructure has been modified
gcp cloudbank laney Core infrastructure has been modified
gcp cloudbank lavc Core infrastructure has been modified
gcp cloudbank lbcc Core infrastructure has been modified
gcp cloudbank mendocino Core infrastructure has been modified
gcp cloudbank merced Core infrastructure has been modified
gcp cloudbank merritt Core infrastructure has been modified
gcp cloudbank mmc Core infrastructure has been modified
gcp cloudbank miracosta Core infrastructure has been modified
gcp cloudbank mission Core infrastructure has been modified
gcp cloudbank moreno Core infrastructure has been modified
gcp cloudbank nicc Core infrastructure has been modified
gcp cloudbank norco Core infrastructure has been modified
gcp cloudbank nova Core infrastructure has been modified
gcp cloudbank ocu Core infrastructure has been modified
gcp cloudbank oit Core infrastructure has been modified
gcp cloudbank orangecoast Core infrastructure has been modified
gcp cloudbank palomar Core infrastructure has been modified
gcp cloudbank pasadena Core infrastructure has been modified
gcp cloudbank redwoods Core infrastructure has been modified
gcp cloudbank reedley Core infrastructure has been modified
gcp cloudbank riohondo Core infrastructure has been modified
gcp cloudbank saddleback Core infrastructure has been modified
gcp cloudbank santiago Core infrastructure has been modified
gcp cloudbank sbcc Core infrastructure has been modified
gcp cloudbank shasta Core infrastructure has been modified
gcp cloudbank sierra Core infrastructure has been modified
gcp cloudbank sjcc Core infrastructure has been modified
gcp cloudbank skyline Core infrastructure has been modified
gcp cloudbank sou Core infrastructure has been modified
gcp cloudbank stanford Core infrastructure has been modified
gcp cloudbank spelman Core infrastructure has been modified
gcp cloudbank srjc Core infrastructure has been modified
gcp cloudbank toledo Core infrastructure has been modified
gcp cloudbank tuskegee Core infrastructure has been modified
gcp cloudbank umd Core infrastructure has been modified
gcp cloudbank unc-chapel-hill Core infrastructure has been modified
gcp cloudbank uncw Core infrastructure has been modified
gcp cloudbank und Core infrastructure has been modified
gcp cloudbank utpb Core infrastructure has been modified
gcp cloudbank uwyo Core infrastructure has been modified
gcp cloudbank virginia Core infrastructure has been modified
gcp cloudbank weber Core infrastructure has been modified
gcp cloudbank willamette Core infrastructure has been modified
gcp cloudbank wlac Core infrastructure has been modified
gcp cloudbank york Core infrastructure has been modified
aws nasa-ghg-hub prod Core infrastructure has been modified
aws nasa-ghg-hub binder Core infrastructure has been modified
kubeconfig utoronto prod Core infrastructure has been modified
kubeconfig utoronto r-prod Core infrastructure has been modified
kubeconfig utoronto highmem Core infrastructure has been modified
aws ucmerced prod Core infrastructure has been modified
aws jupyter-health prod Core infrastructure has been modified
aws nasa-veda prod Core infrastructure has been modified
aws nasa-veda binder Core infrastructure has been modified
aws projectpythia prod Core infrastructure has been modified
aws projectpythia pythia-binder Core infrastructure has been modified
aws bnext-bio prod Core infrastructure has been modified
gcp leap prod Core infrastructure has been modified
gcp leap public Core infrastructure has been modified
gcp 2i2c-uk lis Core infrastructure has been modified
aws nmfs-openscapes prod Core infrastructure has been modified
aws nmfs-openscapes workshop Core infrastructure has been modified
aws nmfs-openscapes noaa-only Core infrastructure has been modified
aws maap prod Core infrastructure has been modified
gcp 2i2c mtu Core infrastructure has been modified
aws disasters prod Core infrastructure has been modified
aws reflective prod Core infrastructure has been modified
aws reflective workshop Core infrastructure has been modified
aws neurohackademy prod Core infrastructure has been modified
aws nasa-cryo prod Core infrastructure has been modified
aws openscapeshub prod Core infrastructure has been modified
aws openscapeshub workshop Core infrastructure has been modified
kubeconfig projectpythia-binder binderhub Core infrastructure has been modified
aws temple prod Core infrastructure has been modified
aws temple advanced Core infrastructure has been modified
aws temple research Core infrastructure has been modified

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file deployer:skip-deploy Skips deployment of anything (support, staging, prod) github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant