Repository navigation
build(deps): bump the github-actions group across 1 directory with 7 updates - #502
Merged
MikeMcQuaid merged 1 commit intoOct 16, 2026
Merged
Conversation
…updates Bumps the github-actions group with 7 updates in the / directory: | Package | From | To | | --- | --- | --- | | [Homebrew/actions/setup-homebrew](https://github.com/homebrew/actions) | `2026.09.28.1` | `2026.10.12.1` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `7.0.1` | `7.0.2` | | [actions/download-artifact](https://github.com/actions/download-artifact) | `8.0.1` | `8.0.2` | | [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) | `4.38.2` | `4.38.3` | | [Homebrew/actions/setup-ruby](https://github.com/homebrew/actions) | `2026.09.28.1` | `2026.10.12.1` | | [Homebrew/actions/git-user-config](https://github.com/homebrew/actions) | `2026.09.28.1` | `2026.10.12.1` | | [Homebrew/actions/setup-commit-signing](https://github.com/homebrew/actions) | `2026.09.28.1` | `2026.10.12.1` | Updates `Homebrew/actions/setup-homebrew` from 2026.09.28.1 to 2026.10.12.1 - [Release notes](https://github.com/homebrew/actions/releases) - [Changelog](https://github.com/Homebrew/actions/blob/main/release.test.mts) - [Commits](Homebrew/actions@e99025e...eb02c69) Updates `actions/upload-artifact` from 7.0.1 to 7.0.2 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@043fb46...cf430e0) Updates `actions/download-artifact` from 8.0.1 to 8.0.2 - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](actions/download-artifact@3e5f45b...9000827) Updates `github/codeql-action/upload-sarif` from 4.38.2 to 4.38.3 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@2892aa5...24c5418) Updates `Homebrew/actions/setup-ruby` from 2026.09.28.1 to 2026.10.12.1 - [Release notes](https://github.com/homebrew/actions/releases) - [Changelog](https://github.com/Homebrew/actions/blob/main/release.test.mts) - [Commits](Homebrew/actions@e99025e...eb02c69) Updates `Homebrew/actions/git-user-config` from 2026.09.28.1 to 2026.10.12.1 - [Release notes](https://github.com/homebrew/actions/releases) - [Changelog](https://github.com/Homebrew/actions/blob/main/release.test.mts) - [Commits](Homebrew/actions@e99025e...eb02c69) Updates `Homebrew/actions/setup-commit-signing` from 2026.09.28.1 to 2026.10.12.1 - [Release notes](https://github.com/homebrew/actions/releases) - [Changelog](https://github.com/Homebrew/actions/blob/main/release.test.mts) - [Commits](Homebrew/actions@e99025e...eb02c69) --- updated-dependencies: - dependency-name: Homebrew/actions/setup-homebrew dependency-version: 2026.10.12.1 dependency-type: direct:production dependency-group: github-actions - dependency-name: actions/upload-artifact dependency-version: 7.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: actions/download-artifact dependency-version: 8.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: github/codeql-action/upload-sarif dependency-version: 4.38.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: Homebrew/actions/setup-ruby dependency-version: 2026.10.12.1 dependency-type: direct:production dependency-group: github-actions - dependency-name: Homebrew/actions/git-user-config dependency-version: 2026.10.12.1 dependency-type: direct:production dependency-group: github-actions - dependency-name: Homebrew/actions/setup-commit-signing dependency-version: 2026.10.12.1 dependency-type: direct:production dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
Contributor
There was a problem hiding this comment.
🟢 Approval recommended
The pin-only changes match the supplied release metadata, with no identified blocking issues.
0 open findings
What changed in this PR
Updates seven pinned GitHub Actions dependencies across three workflows, keeping workflow logic and inputs unchanged.
Changes:
- Updates Homebrew setup, Git configuration, and commit-signing actions to
2026.10.12.1. - Updates artifact upload/download actions and CodeQL SARIF upload to newer patch releases.
| File | Description |
|---|---|
.github/workflows/sync-shared-config.yml |
Updates Homebrew setup and Git-related action pins. |
.github/workflows/licenses.yml |
Updates the Homebrew setup action pin. |
.github/workflows/actionlint.yml |
Updates Homebrew, artifact transfer, and SARIF upload pins. |
🧠 Review effort: Balanced
💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.
|
No actionable comments were generated in the recent review. 🎉 ℹ️ Recent review info
📝 Walkthrough
Priority: ⬇️ Low Merge Risk: ⚪ Minimal · up to
|
| Check name | Status | Explanation |
|---|---|---|
| Description Check |  |
Check skipped - CodeRabbit’s high-level summary is enabled. |
| Title check | |
The title accurately describes a grouped update of seven GitHub Actions dependencies in one directory. |
| Linked Issues check | |
Check skipped because no linked issues were found for this pull request. |
| Out of Scope Changes check | |
Check skipped because no linked issues were found for this pull request. |
- Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts
Comment @coderabbitai help to get the list of available commands.
MikeMcQuaid
approved these changes
Oct 16, 2026
MikeMcQuaid
deleted the
dependabot/github_actions/github-actions-b97afb623c
branch
October 16, 2026 08:21
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the github-actions group with 7 updates in the / directory:
2026.09.28.12026.10.12.17.0.17.0.28.0.18.0.24.38.24.38.32026.09.28.12026.10.12.12026.09.28.12026.10.12.12026.09.28.12026.10.12.1Updates
Homebrew/actions/setup-homebrewfrom 2026.09.28.1 to 2026.10.12.1Release notes
Sourced from Homebrew/actions/setup-homebrew's releases.
Commits
eb02c69Merge pull request #948 from Homebrew/developer-ci-environmentf729fb9Suppress developer mode warningsfccef3bMerge pull request #947 from Homebrew/dependabot/npm_and_yarn/npm-24192dad0d64b330cnode_modules: update3f85856build(deps): bump the npm group with 3 updates9ffcbccMerge pull request #946 from Homebrew/sync-shared-configd227fe1actionlint.yml: update to match main configurationdc7099bMerge pull request #945 from Homebrew/setup-ruby-description456fe4bsetup-ruby: dropbrew rubyfrom input description9f17989Merge pull request #943 from Homebrew/dependabot/npm_and_yarn/npm-4284b91a76Updates
actions/upload-artifactfrom 7.0.1 to 7.0.2Release notes
Sourced from actions/upload-artifact's releases.
Commits
cf430e0Merge pull request #822 from actions/tunc-d-prepare-upload-v7-0-2c2acdedchore: prepare v7.0.2 release4687c1bMerge pull request #821 from actions/tunc-d-upload-artifact-package-bump8cbe1beBump@actions/artifactto 6.3.1Updates
actions/download-artifactfrom 8.0.1 to 8.0.2Release notes
Sourced from actions/download-artifact's releases.
Commits
9000827Merge pull request #493 from actions/tunc-d-prepare-download-v8-0-2e455989Prepare download-artifact v8.0.2a00b90cMerge pull request #492 from actions/tunc-d-download-artifact-package-bump29bb7ceUpdate@actions/artifactto 6.3.1484a0b5Update the readme (#473)Updates
github/codeql-action/upload-sariffrom 4.38.2 to 4.38.3Release notes
Sourced from github/codeql-action/upload-sarif's releases.
Changelog
Sourced from github/codeql-action/upload-sarif's changelog.
... (truncated)
Commits
24c5418Merge pull request #4214 from github/update-v4.38.3-e0b52dbdc69e87c5Add changelog note for #418423b6828Update changelog for v4.38.3e0b52dbMerge pull request #4210 from github/henrymercer/pin-python-for-older-clis-in-ci6b99698Pin Python 3.13.15 for older CLI versions in multi-language check63d3d63Merge pull request #4203 from github/update-bundle/codeql-bundle-v2.27.27377a10Add changelog notec1a30cdUpdate default bundle to codeql-bundle-v2.27.2d208ec7Merge pull request #4200 from github/mbg/esm/migrate-pr-checksa71b0c6Replace__dirnameinsync.tsUpdates
Homebrew/actions/setup-rubyfrom 2026.09.28.1 to 2026.10.12.1Release notes
Sourced from Homebrew/actions/setup-ruby's releases.
Commits
eb02c69Merge pull request #948 from Homebrew/developer-ci-environmentf729fb9Suppress developer mode warningsfccef3bMerge pull request #947 from Homebrew/dependabot/npm_and_yarn/npm-24192dad0d64b330cnode_modules: update3f85856build(deps): bump the npm group with 3 updates9ffcbccMerge pull request #946 from Homebrew/sync-shared-configd227fe1actionlint.yml: update to match main configurationdc7099bMerge pull request #945 from Homebrew/setup-ruby-description456fe4bsetup-ruby: dropbrew rubyfrom input description9f17989Merge pull request #943 from Homebrew/dependabot/npm_and_yarn/npm-4284b91a76Updates
Homebrew/actions/git-user-configfrom 2026.09.28.1 to 2026.10.12.1Release notes
Sourced from Homebrew/actions/git-user-config's releases.
Commits
eb02c69Merge pull request #948 from Homebrew/developer-ci-environmentf729fb9Suppress developer mode warningsfccef3bMerge pull request #947 from Homebrew/dependabot/npm_and_yarn/npm-24192dad0d64b330cnode_modules: update3f85856build(deps): bump the npm group with 3 updates9ffcbccMerge pull request #946 from Homebrew/sync-shared-configd227fe1actionlint.yml: update to match main configurationdc7099bMerge pull request #945 from Homebrew/setup-ruby-description456fe4bsetup-ruby: dropbrew rubyfrom input description9f17989Merge pull request #943 from Homebrew/dependabot/npm_and_yarn/npm-4284b91a76Updates
Homebrew/actions/setup-commit-signingfrom 2026.09.28.1 to 2026.10.12.1Release notes
Sourced from Homebrew/actions/setup-commit-signing's releases.
Commits
eb02c69Merge pull request #948 from Homebrew/developer-ci-environmentf729fb9Suppress developer mode warningsfccef3bMerge pull request #947 from Homebrew/dependabot/npm_and_yarn/npm-24192dad0d64b330cnode_modules: update3f85856build(deps): bump the npm group with 3 updates9ffcbccMerge pull request #946 from Homebrew/sync-shared-configd227fe1actionlint.yml: update to match main configurationdc7099bMerge pull request #945 from Homebrew/setup-ruby-description456fe4bsetup-ruby: dropbrew rubyfrom input description9f17989Merge pull request #943 from Homebrew/dependabot/npm_and_yarn/npm-4284b91a76Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditionsSummary by CodeRabbit