Skip to content

chore(deps): bump the actions group across 1 directory with 3 updates - #292

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions-b95e6c6d9f
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions-b95e6c6d9f

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 14, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the actions group with 3 updates in the / directory: reviewdog/action-actionlint, actions/upload-artifact and actions/download-artifact.

Updates reviewdog/action-actionlint from 1.78.0 to 1.79.1

Release notes

Sourced from reviewdog/action-actionlint's releases.

Release v1.79.1

What's Changed

Full Changelog: reviewdog/action-actionlint@v1.79.0...v1.79.1

Release v1.79.0

What's Changed

Full Changelog: reviewdog/action-actionlint@v1.78.1...v1.79.0

Release v1.78.1

What's Changed

Full Changelog: reviewdog/action-actionlint@v1.78.0...v1.78.1

Commits
  • 1758727 bump v1.79.1
  • 835705a Merge branch 'main' into releases/v1
  • 2b6687f Merge pull request #249 from reviewdog/renovate/python-3.14.8-alpine3.24
  • 91d36b3 chore(deps): update python:3.14.8-alpine3.24 docker digest to f6a589d
  • a1e3e7f bump v1.79.0
  • 0a63bd8 Merge branch 'main' into releases/v1
  • e3350d1 Merge pull request #248 from reviewdog/renovate/pyflakes-4.x
  • 063aab8 chore(deps): update dependency pyflakes to v4.0.2
  • 13465d0 bump v1.78.1
  • b1c48c4 Merge branch 'main' into releases/v1
  • Additional commits viewable in compare view

Updates actions/upload-artifact from 7.0.1 to 7.0.2

Release notes

Sourced from actions/upload-artifact's releases.

v7.0.2

What's Changed

  • Improves artifact download retries when the service returns HTTP 429 (rate limiting), including honoring valid Retry-After headers.
  • Updates @​actions/artifact to v6.3.1.

New Contributors

Full Changelog: actions/upload-artifact@v7.0.1...v7.0.2

Commits
  • cf430e0 Merge pull request #822 from actions/tunc-d-prepare-upload-v7-0-2
  • c2acded chore: prepare v7.0.2 release
  • 4687c1b Merge pull request #821 from actions/tunc-d-upload-artifact-package-bump
  • 8cbe1be Bump @​actions/artifact to 6.3.1
  • See full diff in compare view

Updates actions/download-artifact from 8.0.1 to 8.0.2

Release notes

Sourced from actions/download-artifact's releases.

v8.0.2

What's Changed

New Contributors

Full Changelog: actions/download-artifact@v8.0.1...v8.0.2

Commits
  • 9000827 Merge pull request #493 from actions/tunc-d-prepare-download-v8-0-2
  • e455989 Prepare download-artifact v8.0.2
  • a00b90c Merge pull request #492 from actions/tunc-d-download-artifact-package-bump
  • 29bb7ce Update @​actions/artifact to 6.3.1
  • 484a0b5 Update the readme (#473)
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Note

Low Risk
Patch-level third-party action pin updates in workflows only; no runtime or security-sensitive application logic changes.

Overview
Bumps pinned GitHub Actions in CI workflows only—no application or operator code changes.

reviewdog/action-actionlint moves from v1.78.0 to v1.79.1 in the lint workflow (actionlint on .github/ changes). actions/upload-artifact goes from v7.0.1 to v7.0.2 for release image tarballs and E2E report bundles; actions/download-artifact goes from v8.0.1 to v8.0.2 when the release job pulls that image artifact. The artifact bumps align with upstream @actions/artifact 6.3.1 and better retries on HTTP 429 during artifact transfer.

Reviewed by Cursor Bugbot for commit a739fbe. Bugbot is set up for automated code reviews on this repo. Configure here.

Bumps the actions group with 3 updates in the / directory: [reviewdog/action-actionlint](https://github.com/reviewdog/action-actionlint), [actions/upload-artifact](https://github.com/actions/upload-artifact) and [actions/download-artifact](https://github.com/actions/download-artifact).


Updates `reviewdog/action-actionlint` from 1.78.0 to 1.79.1
- [Release notes](https://github.com/reviewdog/action-actionlint/releases)
- [Commits](reviewdog/action-actionlint@1129829...1758727)

Updates `actions/upload-artifact` from 7.0.1 to 7.0.2
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@043fb46...cf430e0)

Updates `actions/download-artifact` from 8.0.1 to 8.0.2
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](actions/download-artifact@3e5f45b...9000827)

---
updated-dependencies:
- dependency-name: reviewdog/action-actionlint
  dependency-version: 1.79.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: actions/upload-artifact
  dependency-version: 7.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: actions/download-artifact
  dependency-version: 8.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from a team as a code owner October 14, 2026 16:43
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Oct 14, 2026
@dependabot @github

dependabot Bot commented on behalf of github Oct 19, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 19, 2026
@dependabot
dependabot Bot deleted the dependabot/github_actions/actions-b95e6c6d9f branch October 19, 2026 08:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants