Skip to content

chore(deps): bump the all-actions group across 1 directory with 3 updates#17

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/github_actions/all-actions-24e7d938c0
Open

chore(deps): bump the all-actions group across 1 directory with 3 updates#17
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/github_actions/all-actions-24e7d938c0

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot bot commented on behalf of github Apr 9, 2026

Bumps the all-actions group with 3 updates in the / directory: actions/checkout, taiki-e/install-action and codecov/codecov-action.

Updates actions/checkout from 6.0.0 to 6.0.2

Release notes

Sourced from actions/checkout's releases.

v6.0.2

What's Changed

Full Changelog: actions/checkout@v6.0.1...v6.0.2

v6.0.1

What's Changed

Full Changelog: actions/checkout@v6...v6.0.1

Changelog

Sourced from actions/checkout's changelog.

Changelog

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

v4.2.0

v4.1.7

v4.1.6

... (truncated)

Commits
  • de0fac2 Fix tag handling: preserve annotations and explicit fetch-tags (#2356)
  • 064fe7f Add orchestration_id to git user-agent when ACTIONS_ORCHESTRATION_ID is set (...
  • 8e8c483 Clarify v6 README (#2328)
  • 033fa0d Add worktree support for persist-credentials includeIf (#2327)
  • c2d88d3 Update all references from v5 and v4 to v6 (#2314)
  • See full diff in compare view

Updates taiki-e/install-action from 2.75.1 to 2.75.2

Release notes

Sourced from taiki-e/install-action's releases.

2.75.2

  • Update uv@latest to 0.11.4.

  • Update tombi@latest to 0.9.16.

  • Update mise@latest to 2026.4.6.

Changelog

Sourced from taiki-e/install-action's changelog.

Changelog

All notable changes to this project will be documented in this file.

This project adheres to Semantic Versioning.

[Unreleased]

[2.75.2] - 2026-04-09

  • Update uv@latest to 0.11.4.

  • Update tombi@latest to 0.9.16.

  • Update mise@latest to 2026.4.6.

[2.75.1] - 2026-04-08

  • Update shfmt@latest to 3.13.1.

  • Update cosign@latest to 3.0.6.

[2.75.0] - 2026-04-07

  • Support cosign. (#1677)

[2.74.1] - 2026-04-07

  • Update mise@latest to 2026.4.5.

  • Update tombi@latest to 0.9.15.

[2.74.0] - 2026-04-06

  • Support cargo-deb. (#1669)

  • Update just@latest to 1.49.0.

  • Update mise@latest to 2026.4.4.

[2.73.0] - 2026-04-05

  • Introduce dependency cooldown when installing with taiki-e/install-action@<tool_name>, tool: <tool_name>@latest, or tool: <tool_name>@<omitted_version> to mitigate the risk of supply chain attacks by default. (#1666)

    This action without this cooldown already takes a few hours to a few days for new releases to be reflected (as with other common package managers that verify checksums or signatures), so this should not affect most users.

... (truncated)

Commits

Updates codecov/codecov-action from 5.5.1 to 6.0.0

Release notes

Sourced from codecov/codecov-action's releases.

v6.0.0

⚠️ This version introduces support for node24 which make cause breaking changes for systems that do not currently support node24. ⚠️

What's Changed

Full Changelog: codecov/codecov-action@v5.5.4...v6.0.0

v5.5.4

This is a mirror of v5.5.2. v6 will be released which requires node24

What's Changed

Full Changelog: codecov/codecov-action@v5.5.3...v5.5.4

v5.5.3

What's Changed

Full Changelog: codecov/codecov-action@v5.5.2...v5.5.3

v5.5.2

What's Changed

New Contributors

Full Changelog: codecov/codecov-action@v5.5.1...v5.5.2

Changelog

Sourced from codecov/codecov-action's changelog.

v5.5.2

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.5.1..v5.5.2

v5.5.1

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.5.0..v5.5.1

v5.5.0

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.3..v5.5.0

v5.4.3

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.2..v5.4.3

v5.4.2

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Summary by CodeRabbit

  • Chores
    • Updated CI/CD pipeline GitHub Actions to latest stable versions for improved reliability and security.

…ates

Bumps the all-actions group with 3 updates in the / directory: [actions/checkout](https://github.com/actions/checkout), [taiki-e/install-action](https://github.com/taiki-e/install-action) and [codecov/codecov-action](https://github.com/codecov/codecov-action).


Updates `actions/checkout` from 6.0.0 to 6.0.2
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@1af3b93...de0fac2)

Updates `taiki-e/install-action` from 2.75.1 to 2.75.2
- [Release notes](https://github.com/taiki-e/install-action/releases)
- [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md)
- [Commits](taiki-e/install-action@80e6af7...089a51b)

Updates `codecov/codecov-action` from 5.5.1 to 6.0.0
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](codecov/codecov-action@5a10915...57e3a13)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 6.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-actions
- dependency-name: taiki-e/install-action
  dependency-version: 2.75.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-actions
- dependency-name: codecov/codecov-action
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Apr 9, 2026
@dependabot dependabot bot requested a review from nh13 as a code owner April 9, 2026 13:39
@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Apr 9, 2026
@coderabbitai
Copy link
Copy Markdown

coderabbitai bot commented Apr 9, 2026

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: b00ac97b-fa03-496c-ac06-a9c8554836dd

📥 Commits

Reviewing files that changed from the base of the PR and between 57ee831 and e1d4098.

📒 Files selected for processing (2)
  • .github/workflows/ci.yml
  • .github/workflows/publish.yml

📝 Walkthrough

Walkthrough

GitHub Actions workflow versions updated across CI and publish pipelines. actions/checkout pinned to v6.0.2 from v6.0.0 in both workflows. CI workflow additionally pins newer versions for taiki-e/install-action (nextest, cargo-llvm-cov) and updates codecov/codecov-action to v6.0.0. No workflow logic or structure changes.

Changes

Cohort / File(s) Summary
CI Workflow
.github/workflows/ci.yml
Updated actions/checkout to v6.0.2, taiki-e/install-action pinned to newer v2 commits for nextest and cargo-llvm-cov, and codecov/codecov-action from v5.5.1 to v6.0.0.
Publish Workflow
.github/workflows/publish.yml
Updated actions/checkout to v6.0.2 in release-pr and publish jobs.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

Poem

🐰 Actions bump with hop and cheer,
v6.0.2 versions here,
Codecov dance makes workflows bright,
CI flows smooth through the night!

🚥 Pre-merge checks | ✅ 3
✅ Passed checks (3 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title accurately summarizes the main change: updating GitHub Actions dependencies across the repository with 3 version bumps.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch dependabot/github_actions/all-actions-24e7d938c0

Comment @coderabbitai help to get the list of available commands and usage tips.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants