Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 29, 2026

Bumps the all-actions group with 14 updates:

Package From To
actions/add-to-project 0.4.0 1.0.2
pascalgn/automerge-action 0.16.3 0.16.4
actions/checkout 2 6
aws-actions/configure-aws-credentials 2 5
actions/setup-go 5 6
peaceiris/actions-hugo 2 3
pulumi/actions 4 6
actions/upload-artifact 4 6
actions/github-script 7 8
actions/setup-python 5 6
actions/setup-dotnet 4 5
actions/setup-java 3 5
google-github-actions/auth 2 3
peter-evans/create-pull-request 3 8

Updates actions/add-to-project from 0.4.0 to 1.0.2

Release notes

Sourced from actions/add-to-project's releases.

v1.0.2

What's Changed

Full Changelog: actions/add-to-project@v1.0.1...v1.0.2

v1.0.1

Summary

This release includes dependency updates, including security fix to undici.

What's Changed

Full Changelog: actions/add-to-project@v1.0.0...v1.0.1

v1.0.0

Summary

This release promotes actions/add-to-projects to a major version 1 and marks the public API stable.

What's Changed

Full Changelog: actions/add-to-project@v0.6.1...v1.0.0

v0.6.1

What's Changed

... (truncated)

Commits
  • 244f685 Merge pull request #591 from actions/dependabot/npm_and_yarn/eslint-plugin-je...
  • 2a5ef71 Build and package
  • 8c11461 Update license for json-schema.dep.yml
  • 66f6cff Merge pull request #578 from actions/dependabot/npm_and_yarn/eslint-plugin-je...
  • ddf5099 Merge pull request #590 from actions/dependabot/npm_and_yarn/typescript-eslin...
  • da1ae5b build(deps-dev): bump @​typescript-eslint/eslint-plugin
  • ced87c7 Merge pull request #589 from actions/dependabot/npm_and_yarn/typescript-eslin...
  • c78e6a1 Merge pull request #582 from actions/dependabot/npm_and_yarn/ts-jest-29.1.5
  • 267a19f build(deps-dev): bump @​typescript-eslint/parser from 7.6.0 to 7.14.1
  • e005a86 Merge pull request #588 from actions/dependabot/npm_and_yarn/types/node-16.18...
  • Additional commits viewable in compare view

Updates pascalgn/automerge-action from 0.16.3 to 0.16.4

Release notes

Sourced from pascalgn/automerge-action's releases.

Release 0.16.4

What's Changed

New Contributors

Full Changelog: pascalgn/automerge-action@v0.16.3...v0.16.4

Commits

Updates actions/checkout from 2 to 6

Release notes

Sourced from actions/checkout's releases.

v6.0.0

What's Changed

Full Changelog: actions/checkout@v5.0.0...v6.0.0

v6-beta

What's Changed

Updated persist-credentials to store the credentials under $RUNNER_TEMP instead of directly in the local git config.

This requires a minimum Actions Runner version of v2.329.0 to access the persisted credentials for Docker container action scenarios.

v5.0.1

What's Changed

Full Changelog: actions/checkout@v5...v5.0.1

v5.0.0

What's Changed

⚠️ Minimum Compatible Runner Version

v2.327.1
Release Notes

Make sure your runner is updated to this version or newer to use this release.

Full Changelog: actions/checkout@v4...v5.0.0

v4.3.1

What's Changed

Full Changelog: actions/checkout@v4...v4.3.1

v4.3.0

What's Changed

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

v4.2.0

v4.1.7

v4.1.6

... (truncated)

Commits

Updates aws-actions/configure-aws-credentials from 2 to 5

Release notes

Sourced from aws-actions/configure-aws-credentials's releases.

v5.0.0

5.0.0 (2025-09-03)

⚠ BREAKING CHANGES

  • Cleanup input handling. Changes invalid boolean input behavior (see #1445)

Features

v4.3.1

4.3.1 (2025-08-04)

Bug Fixes

v4.3.0

4.3.0 (2025-08-04)

NOTE: This release tag originally pointed to 59b441846ad109fa4a1549b73ef4e149c4bfb53b, but a critical bug was discovered shortly after publishing. We updated this tag to d0834ad3a60a024346910e522a81b0002bd37fea to prevent anyone using the 4.3.0 tag from encountering the bug, and we published 4.3.1 to allow workflows to auto update correctly.

Features

Bug Fixes

  • docs: readme samples versioning (5b3c895)
  • the wrong example region for China partition in README (37fe9a7)
  • properly set proxy environment variable (cbea708)

Miscellaneous Chores

v4.2.1

4.2.1 (2025-05-14)

Bug Fixes

... (truncated)

Changelog

Sourced from aws-actions/configure-aws-credentials's changelog.

1.5.3 (2020-10-05)

1.5.2 (2020-08-25)

1.5.1 (2020-08-11)

Bug Fixes

1.5.0 (2020-07-29)

Features

  • Add post-job action cleanup of credentials and region env vars (#101) (d19cafc)

Bug Fixes

  • Mask assume role response in debug output (#102) (df7d846)

1.4.4 (2020-07-17)

1.4.3 (2020-07-14)

Bug Fixes

1.4.2 (2020-06-30)

Bug Fixes

  • add comma to set of special characters (#78) (f04843b)

1.4.1 (2020-06-09)

1.4.0 (2020-06-03)

Features

  • Refresh and validate credentials after setting env var creds (#71) (472e549)

1.3.5 (2020-05-27)

... (truncated)

Commits
  • 61815dc chore(main): release 5.1.1 (#1564)
  • 56d6a58 chore: release 5.1.1
  • 4a54c24 chore(deps-dev): bump glob from 10.4.5 to 10.5.0 (#1563)
  • b2793c9 chore(deps-dev): bump @​types/node from 24.10.0 to 24.10.1 (#1559)
  • 8c230bf chore: Update dist
  • f7a5b07 chore(deps): bump @​aws-sdk/client-sts from 3.928.0 to 3.933.0 (#1558)
  • 730fc04 chore(deps-dev): bump @​biomejs/biome from 2.3.4 to 2.3.6 (#1555)
  • bc0dd36 chore(deps-dev): bump memfs from 4.50.0 to 4.51.0 (#1556)
  • f2964c7 chore: Update dist
  • cf46495 chore(deps): bump @​aws-sdk/client-sts from 3.922.0 to 3.928.0 (#1548)
  • Additional commits viewable in compare view

Updates actions/setup-go from 5 to 6

Release notes

Sourced from actions/setup-go's releases.

v6.0.0

What's Changed

Breaking Changes

Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. See Release Notes

Dependency Upgrades

New Contributors

Full Changelog: actions/setup-go@v5...v6.0.0

v5.6.0

What's Changed

Full Changelog: actions/setup-go@v5...v5.6.0

v5.5.0

What's Changed

Bug fixes:

Dependency updates:

New Contributors

Full Changelog: actions/setup-go@v5...v5.5.0

... (truncated)

Commits

Updates peaceiris/actions-hugo from 2 to 3

Release notes

Sourced from peaceiris/actions-hugo's releases.

actions-hugo v3.0.0

See CHANGELOG.md for more details.

actions-hugo v2.6.0

  • deps: bump node12 to node16
  • deps: bump @​actions/core from 1.6.0 to 1.10.0

See CHANGELOG.md for more details.

actions-hugo v2.5.0

See CHANGELOG.md for more details.

actions-hugo v2.4.13

See CHANGELOG.md for more details.

actions-hugo v2.4.12

See CHANGELOG.md for more details.

Fixes

actions-hugo v2.4.11

See CHANGELOG.md for more details.

actions-hugo v2.4.10

See CHANGELOG.md for more details.

This action was featured at GitHub Action Hero: Shohei Ueda - The GitHub Blog. Thanks all.

actions-hugo v2.4.9

See CHANGELOG.md for more details.

actions-hugo v2.4.8

See CHANGELOG.md for more details.

actions-hugo v2.4.7

See CHANGELOG.md for more details.

actions-hugo v2.4.6

See CHANGELOG.md for more details.

actions-hugo v2.4.5

See CHANGELOG.md for more details.

actions-hugo v2.4.4

See CHANGELOG.md for more details.

Release v2.4.3

See CHANGELOG.md for more details.

... (truncated)

Changelog

Sourced from peaceiris/actions-hugo's changelog.

3.0.0 (2024-04-02)

build

chore

ci

docs

feat

2.6.0 (2022-10-23)

chore

ci

... (truncated)

Commits

Updates pulumi/actions from 4 to 6

Release notes

Sourced from pulumi/actions's releases.

v6.0.0

What's Changed

New Contributors

Full Changelog: pulumi/actions@v5...v6.0.0

v5.5.1

What's Changed

Full Changelog: pulumi/actions@v5...v5.5.1

v5.5.0

What's Changed

New Contributors

Full Changelog: pulumi/actions@v5...v5.5.0

v5.4.0

What's Changed

New Contributors

Full Changelog: pulumi/actions@v5...v5.4.0

v5.3.3

What's Changed

Full Changelog: pulumi/actions@v5...v5.3.3

v5.3.2

What's Changed

Full Changelog: pulumi/actions@v5...v5.3.2

... (truncated)

Changelog

Sourced from pulumi/actions's changelog.

6.4.0 (2025-07-16)

  • feat: Add run-program flag support for refresh, destroy, preview, and up/update commands (#1376)

6.3.0 (2025-05-08)

  • feat: support --exclude and --exclude-dependents flags (#1363)

  • feat: verbosity and debug inputs to enable debug options (#1046)

  • fix: update "user agent" string to pulumi/actions@v6 (#1357)

6.2.0 (2025-03-05)

  • feat: support continue on error flag (--continue-on-error) (#1357)

6.1.0 (2025-02-27)

  • feat: Add clickable View Live link to PR comments (#1355)

6.0.1 (2025-01-13)

  • fix: Make pulumi login respect configuration in Pulumi.yaml (#1299)

  • fix: Log stderr from commands (#1316)

  • fix: Make the output command work without having to be in a working directory that contains a Pulumi.yaml file. (#1327)

6.0.0 (2024-09-27)

  • feat: (breaking change) Update the refresh option to run commands with the --refresh flag. (#1118)

5.5.1 (2024-08-23)

  • fix: always-include-summary only logs warning when ouput is too large (#1263)

5.5.0 (2024-08-22)

... (truncated)

Commits
  • 8582a9e Prepare changelog for 6.6.1 (#1395)
  • 7c2e7ce chore(dist): Update dist [automated commit]
  • e5bcb14 upgrade pulumi/pulumi to latest (#1394)
  • d7ceb02 Release v6.6.0 (#1388)
  • e8ceb1f be honest about release cadence (#1389)
  • 51ca905 chore(dist): Update dist [automated commit]
  • 18db25e feat: Remove ANSI control chars from GitHub step Summary and PR comment (#1312)
  • 7a04e88 chore(dist): Update dist [automated commit]
  • 1cd186d Merge pull request #1384 from pulumi/win32-arm-support
  • 412ba8b Update test play...

    Description has been truncated

@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Jan 29, 2026
@github-actions github-actions bot added deps-merge-after-test Test locally, then merge deps-risk-low Dev tools only deps-security-patch Security update, merge immediately labels Jan 29, 2026
@github-actions
Copy link
Contributor

Automated Dependabot Triage

Risk Tier: LOW
Dependencies: See PR body

🔒 Security Update - Test locally and merge immediately.

Claude Code Review

Automated Claude reviews are not available for Dependabot PRs. To review this PR with Claude Code, run:

/docs-review 17353

For detailed triage guidance, see the Dependency Management section in BUILD-AND-DEPLOY.md.

@pulumi-bot
Copy link
Collaborator

Bumps the all-actions group with 14 updates:

| Package | From | To |
| --- | --- | --- |
| [actions/add-to-project](https://github.com/actions/add-to-project) | `0.4.0` | `1.0.2` |
| [pascalgn/automerge-action](https://github.com/pascalgn/automerge-action) | `0.16.3` | `0.16.4` |
| [actions/checkout](https://github.com/actions/checkout) | `2` | `6` |
| [aws-actions/configure-aws-credentials](https://github.com/aws-actions/configure-aws-credentials) | `2` | `5` |
| [actions/setup-go](https://github.com/actions/setup-go) | `5` | `6` |
| [peaceiris/actions-hugo](https://github.com/peaceiris/actions-hugo) | `2` | `3` |
| [pulumi/actions](https://github.com/pulumi/actions) | `4` | `6` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4` | `6` |
| [actions/github-script](https://github.com/actions/github-script) | `7` | `8` |
| [actions/setup-python](https://github.com/actions/setup-python) | `5` | `6` |
| [actions/setup-dotnet](https://github.com/actions/setup-dotnet) | `4` | `5` |
| [actions/setup-java](https://github.com/actions/setup-java) | `3` | `5` |
| [google-github-actions/auth](https://github.com/google-github-actions/auth) | `2` | `3` |
| [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) | `3` | `8` |


Updates `actions/add-to-project` from 0.4.0 to 1.0.2
- [Release notes](https://github.com/actions/add-to-project/releases)
- [Commits](actions/add-to-project@v0.4.0...v1.0.2)

Updates `pascalgn/automerge-action` from 0.16.3 to 0.16.4
- [Release notes](https://github.com/pascalgn/automerge-action/releases)
- [Commits](pascalgn/automerge-action@v0.16.3...v0.16.4)

Updates `actions/checkout` from 2 to 6
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v2...v6)

Updates `aws-actions/configure-aws-credentials` from 2 to 5
- [Release notes](https://github.com/aws-actions/configure-aws-credentials/releases)
- [Changelog](https://github.com/aws-actions/configure-aws-credentials/blob/main/CHANGELOG.md)
- [Commits](aws-actions/configure-aws-credentials@v2...v5)

Updates `actions/setup-go` from 5 to 6
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](actions/setup-go@v5...v6)

Updates `peaceiris/actions-hugo` from 2 to 3
- [Release notes](https://github.com/peaceiris/actions-hugo/releases)
- [Changelog](https://github.com/peaceiris/actions-hugo/blob/main/CHANGELOG.md)
- [Commits](peaceiris/actions-hugo@v2...v3)

Updates `pulumi/actions` from 4 to 6
- [Release notes](https://github.com/pulumi/actions/releases)
- [Changelog](https://github.com/pulumi/actions/blob/main/CHANGELOG.md)
- [Commits](pulumi/actions@v4...v6)

Updates `actions/upload-artifact` from 4 to 6
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@v4...v6)

Updates `actions/github-script` from 7 to 8
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](actions/github-script@v7...v8)

Updates `actions/setup-python` from 5 to 6
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](actions/setup-python@v5...v6)

Updates `actions/setup-dotnet` from 4 to 5
- [Release notes](https://github.com/actions/setup-dotnet/releases)
- [Commits](actions/setup-dotnet@v4...v5)

Updates `actions/setup-java` from 3 to 5
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](actions/setup-java@v3...v5)

Updates `google-github-actions/auth` from 2 to 3
- [Release notes](https://github.com/google-github-actions/auth/releases)
- [Changelog](https://github.com/google-github-actions/auth/blob/main/CHANGELOG.md)
- [Commits](google-github-actions/auth@v2...v3)

Updates `peter-evans/create-pull-request` from 3 to 8
- [Release notes](https://github.com/peter-evans/create-pull-request/releases)
- [Commits](peter-evans/create-pull-request@v3...v8)

---
updated-dependencies:
- dependency-name: actions/add-to-project
  dependency-version: 1.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-actions
- dependency-name: pascalgn/automerge-action
  dependency-version: 0.16.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-actions
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-actions
- dependency-name: aws-actions/configure-aws-credentials
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-actions
- dependency-name: actions/setup-go
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-actions
- dependency-name: peaceiris/actions-hugo
  dependency-version: '3'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-actions
- dependency-name: pulumi/actions
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-actions
- dependency-name: actions/upload-artifact
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-actions
- dependency-name: actions/github-script
  dependency-version: '8'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-actions
- dependency-name: actions/setup-python
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-actions
- dependency-name: actions/setup-dotnet
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-actions
- dependency-name: actions/setup-java
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-actions
- dependency-name: google-github-actions/auth
  dependency-version: '3'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-actions
- dependency-name: peter-evans/create-pull-request
  dependency-version: '8'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/github_actions/all-actions-5f48b51468 branch from 07ab67b to 7857ac8 Compare January 29, 2026 23:41
@github-actions
Copy link
Contributor

Automated Dependabot Triage

Risk Tier: LOW
Dependencies: See PR body

🔒 Security Update - Test locally and merge immediately.

Claude Code Review

Automated Claude reviews are not available for Dependabot PRs. To review this PR with Claude Code, run:

/pr-review 17353

For detailed triage guidance, see the Dependency Management section in BUILD-AND-DEPLOY.md.

@pulumi-bot
Copy link
Collaborator

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file deps-merge-after-test Test locally, then merge deps-risk-low Dev tools only deps-security-patch Security update, merge immediately

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant