Skip to content

chore(deps): bump the github-actions group across 1 directory with 8 updates - #533

Merged
davidwkeith merged 1 commit into
mainfrom
dependabot/github_actions/github-actions-e40a95d3d0
Oct 21, 2026
Merged

davidwkeith merged 1 commit into
mainfrom
dependabot/github_actions/github-actions-e40a95d3d0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 10, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the github-actions group with 8 updates in the / directory:

Package From To
pnpm/action-setup 6.0.10 6.1.0
actions/setup-node 7.0.0 7.1.0
anthropics/claude-code-action 1.0.238 1.0.245
actions/upload-artifact 7.0.1 7.0.2
actions/download-artifact 8.0.1 8.0.2
cloudflare/wrangler-action 4.0.0 4.1.3
docker/setup-buildx-action 4.2.0 4.4.1
docker/build-push-action 7.3.0 7.4.0

Updates pnpm/action-setup from 6.0.10 to 6.1.0

Release notes

Sourced from pnpm/action-setup's releases.

v6.1.0

What's Changed

Full Changelog: pnpm/action-setup@v6.0.10...v6.1.0

Commits

Updates actions/setup-node from 7.0.0 to 7.1.0

Release notes

Sourced from actions/setup-node's releases.

v7.1.0

What's Changed

Enhancements:

Bug fixes:

Documentation updates:

Dependency updates:

New Contributors

Full Changelog: actions/setup-node@v7.0.0...v7.1.0

Commits
  • 949feb2 Bump eslint from 10.5.0 to 10.11.0 and package.json from 7.0.0 to 7.1.0 (#1635)
  • 7207c4f chore: update dependencies and add license files (#1642)
  • 54337e0 Bump eslint-plugin-n from 18.1.0 to 18.3.0 (#1638)
  • fb54fa8 Bump jest-each from 30.4.1 to 30.5.2 (#1636)
  • 7f84f1d Bump pnpm/action-setup from 6.0.10 to 6.1.0 (#1631)
  • 0c54c7b Bump @​typescript-eslint/parser from 8.62.0 to 8.70.0 (#1615)
  • a829419 Bump @​types/semver from 7.7.1 to 7.8.0 (#1616)
  • 680d1e4 Support absolute paths in node-version-file (#1633)
  • db0fb3a Bump baseline-browser-mapping from 2.10.38 to 2.11.22 (#1629)
  • 94196ee Bump pnpm/action-setup from 6.0.9 to 6.0.10 (#1602)
  • Additional commits viewable in compare view

Updates anthropics/claude-code-action from 1.0.238 to 1.0.245

Release notes

Sourced from anthropics/claude-code-action's releases.

v1.0.245

Full Changelog: anthropics/claude-code-action@v1.0.244...v1.0.245

v1.0.244

Full Changelog: anthropics/claude-code-action@v1.0.243...v1.0.244

v1.0.243

Full Changelog: anthropics/claude-code-action@v1.0.242...v1.0.243

v1.0.242

Full Changelog: anthropics/claude-code-action@v1.0.241...v1.0.242

v1.0.241

Full Changelog: anthropics/claude-code-action@v1.0.240...v1.0.241

v1.0.240

Full Changelog: anthropics/claude-code-action@v1.0.239...v1.0.240

v1.0.239

Full Changelog: anthropics/claude-code-action@v1.0.238...v1.0.239

Commits
  • 6fed3ca chore: bump Claude Code to 2.1.293 and Agent SDK to 0.3.293
  • 5898584 chore: bump Claude Code to 2.1.292 and Agent SDK to 0.3.292
  • 86d88e6 chore: bump Claude Code to 2.1.291 and Agent SDK to 0.3.291
  • 6c69018 chore: bump Claude Code to 2.1.290 and Agent SDK to 0.3.290
  • cab360f chore: bump Claude Code to 2.1.289 and Agent SDK to 0.3.289
  • ed670b4 chore: bump Claude Code to 2.1.288 and Agent SDK to 0.3.288
  • 97c5347 chore: bump Claude Code to 2.1.287 and Agent SDK to 0.3.287
  • See full diff in compare view

Updates actions/upload-artifact from 7.0.1 to 7.0.2

Release notes

Sourced from actions/upload-artifact's releases.

v7.0.2

What's Changed

  • Improves artifact download retries when the service returns HTTP 429 (rate limiting), including honoring valid Retry-After headers.
  • Updates @​actions/artifact to v6.3.1.

New Contributors

Full Changelog: actions/upload-artifact@v7.0.1...v7.0.2

Commits
  • cf430e0 Merge pull request #822 from actions/tunc-d-prepare-upload-v7-0-2
  • c2acded chore: prepare v7.0.2 release
  • 4687c1b Merge pull request #821 from actions/tunc-d-upload-artifact-package-bump
  • 8cbe1be Bump @​actions/artifact to 6.3.1
  • See full diff in compare view

Updates actions/download-artifact from 8.0.1 to 8.0.2

Release notes

Sourced from actions/download-artifact's releases.

v8.0.2

What's Changed

New Contributors

Full Changelog: actions/download-artifact@v8.0.1...v8.0.2

Commits
  • 9000827 Merge pull request #493 from actions/tunc-d-prepare-download-v8-0-2
  • e455989 Prepare download-artifact v8.0.2
  • a00b90c Merge pull request #492 from actions/tunc-d-download-artifact-package-bump
  • 29bb7ce Update @​actions/artifact to 6.3.1
  • 484a0b5 Update the readme (#473)
  • See full diff in compare view

Updates cloudflare/wrangler-action from 4.0.0 to 4.1.3

Release notes

Sourced from cloudflare/wrangler-action's releases.

v4.1.3

Patch Changes

v4.1.2

Patch Changes

  • #453 876f5b5 Thanks @​ericclemmons! - Create GitHub releases only after their compiled action tags are ready so immutable releases do not block publishing.

v4.1.1

[!WARNING] This release is broken due to a publishing issue and will fail when used in a workflow. Please update to v4.1.2 or v4. See #454 for details.

Patch Changes

  • #451 429a99d Thanks @​podonnell-dev! - Pin Workers Preview examples and integration tests to Wrangler 4.136.3, which includes the Worker name in Preview artifacts.

v4.1.0

[!WARNING] This release is broken due to a publishing issue and will fail when used in a workflow. Please update to v4.1.2 or v4. See #454 for details.

Minor Changes

  • #450 9500699 Thanks @​podonnell-dev! - Add support for Workers Previews, including Preview artifact parsing, Preview outputs, GitHub Deployments, and job summaries for wrangler preview.

Patch Changes

  • #418 789ac84 Thanks @​vliggio! - Surface wrangler error messages in the action step output instead of showing only a generic failure message.
Changelog

Sourced from cloudflare/wrangler-action's changelog.

Changelog

4.1.3

Patch Changes

4.1.2

Patch Changes

  • #453 876f5b5 Thanks @​ericclemmons! - Create GitHub releases only after their compiled action tags are ready so immutable releases do not block publishing.

4.1.1

Patch Changes

  • #451 429a99d Thanks @​podonnell-dev! - Pin Workers Preview examples and integration tests to Wrangler 4.136.3, which includes the Worker name in Preview artifacts.

4.1.0

Minor Changes

  • #450 9500699 Thanks @​podonnell-dev! - Add support for Workers Previews, including Preview artifact parsing, Preview outputs, GitHub Deployments, and job summaries for wrangler preview.

Patch Changes

  • #418 789ac84 Thanks @​vliggio! - Surface wrangler error messages in the action step output instead of showing only a generic failure message.

4.0.0

Major Changes

  • #412 1029e90 Thanks @​ericclemmons! - Update default Wrangler version to v4 (latest). The action now installs Wrangler v4 by default when no wranglerVersion input is specified. Users can still pin to v3 by setting wranglerVersion: "3.90.0" explicitly.

3.15.0

Minor Changes

  • #426 febbda6 Thanks @​WillTaylorDev! - Support version ranges and tags in wranglerVersion input. You can now set wranglerVersion to values like 4, ^4.0.0, 4.x, or latest instead of only exact versions like 4.81.0.

3.14.1

Patch Changes

3.14.0

... (truncated)

Commits
  • 953926a Automatic compilation
  • a17640a Merge pull request #457 from cloudflare/changeset-release/main
  • 8d350f6 Version Packages
  • df82e37 Merge pull request #456 from cloudflare/podonnell/preview-comms
  • d3cfe74 WC-6082 [previews] adjust wrangler guidance to v4.136.3
  • d4d1b2d Merge pull request #455 from cloudflare/changeset-release/main
  • 1e45d72 Version Packages
  • 194026b Merge pull request #453 from cloudflare/codex/fix-immutable-releases
  • 5fa9855 docs: Explain immutable release sequencing
  • d7fd981 refactor: Keep release publishing retryable
  • Additional commits viewable in compare view

Updates docker/setup-buildx-action from 4.2.0 to 4.4.1

Release notes

Sourced from docker/setup-buildx-action's releases.

v4.4.1

Full Changelog: docker/setup-buildx-action@v4.4.0...v4.4.1

v4.4.0

Full Changelog: docker/setup-buildx-action@v4.3.0...v4.4.0

v4.3.0

Full Changelog: docker/setup-buildx-action@v4.2.0...v4.3.0

Commits
  • f87e599 Merge pull request #624 from crazy-max/skip-pull-with-endpoint
  • e700274 chore: update generated content
  • 3061c91 skip BuildKit image pre-pulls for explicit endpoints
  • 594f3bf Merge pull request #609 from crazy-max/pull-buildkit-image-before-create
  • bd6e702 chore: update generated content
  • 6268c9d pull BuildKit image before builder creation
  • e823525 Merge pull request #621 from docker/dependabot/github_actions/codeql-actions-...
  • 533ed8e build(deps): bump the codeql-actions group with 2 updates
  • bedaf13 Merge pull request #620 from crazy-max/shared-error-helpers
  • d5079fb chore: update generated content
  • Additional commits viewable in compare view

Updates docker/build-push-action from 7.3.0 to 7.4.0

Release notes

Sourced from docker/build-push-action's releases.

v7.4.0

Full Changelog: docker/build-push-action@v7.3.0...v7.4.0

Commits
  • c3c9e26 Merge pull request #1621 from docker/dependabot/npm_and_yarn/docker/actions-t...
  • 459b674 [dependabot skip] chore: update generated content
  • 4dedcb2 chore(deps): Bump @​docker/actions-toolkit from 0.99.0 to 0.100.0
  • 379bf63 Merge pull request #1620 from crazy-max/buildx-error-message
  • 9877975 chore: update generated content
  • 7ed0556 use the shared Buildx error summary helper
  • 91670ba Merge pull request #1618 from docker/dependabot/npm_and_yarn/docker/actions-t...
  • 80dbc86 [dependabot skip] chore: update generated content
  • 50cac3a chore(deps): Bump @​docker/actions-toolkit from 0.98.0 to 0.99.0
  • 03b4d6c Merge pull request #1617 from crazy-max/fix-metadata-workflow-commands
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…updates

Bumps the github-actions group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [pnpm/action-setup](https://github.com/pnpm/action-setup) | `6.0.10` | `6.1.0` |
| [actions/setup-node](https://github.com/actions/setup-node) | `7.0.0` | `7.1.0` |
| [anthropics/claude-code-action](https://github.com/anthropics/claude-code-action) | `1.0.238` | `1.0.245` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact) | `7.0.1` | `7.0.2` |
| [actions/download-artifact](https://github.com/actions/download-artifact) | `8.0.1` | `8.0.2` |
| [cloudflare/wrangler-action](https://github.com/cloudflare/wrangler-action) | `4.0.0` | `4.1.3` |
| [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `4.2.0` | `4.4.1` |
| [docker/build-push-action](https://github.com/docker/build-push-action) | `7.3.0` | `7.4.0` |



Updates `pnpm/action-setup` from 6.0.10 to 6.1.0
- [Release notes](https://github.com/pnpm/action-setup/releases)
- [Commits](pnpm/action-setup@0977fd9...ea17c68)

Updates `actions/setup-node` from 7.0.0 to 7.1.0
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@8207627...949feb2)

Updates `anthropics/claude-code-action` from 1.0.238 to 1.0.245
- [Release notes](https://github.com/anthropics/claude-code-action/releases)
- [Commits](anthropics/claude-code-action@12dd8d7...6fed3ca)

Updates `actions/upload-artifact` from 7.0.1 to 7.0.2
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@043fb46...cf430e0)

Updates `actions/download-artifact` from 8.0.1 to 8.0.2
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](actions/download-artifact@3e5f45b...9000827)

Updates `cloudflare/wrangler-action` from 4.0.0 to 4.1.3
- [Release notes](https://github.com/cloudflare/wrangler-action/releases)
- [Changelog](https://github.com/cloudflare/wrangler-action/blob/main/CHANGELOG.md)
- [Commits](cloudflare/wrangler-action@ebbaa15...953926a)

Updates `docker/setup-buildx-action` from 4.2.0 to 4.4.1
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](docker/setup-buildx-action@bb05f3f...f87e599)

Updates `docker/build-push-action` from 7.3.0 to 7.4.0
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](docker/build-push-action@53b7df9...c3c9e26)

---
updated-dependencies:
- dependency-name: pnpm/action-setup
  dependency-version: 6.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: actions/setup-node
  dependency-version: 7.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: anthropics/claude-code-action
  dependency-version: 1.0.245
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: actions/upload-artifact
  dependency-version: 7.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: actions/download-artifact
  dependency-version: 8.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: cloudflare/wrangler-action
  dependency-version: 4.1.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: docker/setup-buildx-action
  dependency-version: 4.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: docker/build-push-action
  dependency-version: 7.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot
dependabot Bot requested a review from davidwkeith as a code owner October 10, 2026 23:53
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Oct 10, 2026
@davidwkeith
davidwkeith merged commit 0949f69 into main Oct 21, 2026
7 checks passed
@davidwkeith
davidwkeith deleted the dependabot/github_actions/github-actions-e40a95d3d0 branch October 21, 2026 01:59
davidwkeith added a commit that referenced this pull request Oct 21, 2026
Bumps n3 in the / directory from 2.2.0 to 2.7.12.

Rebased onto main after #519 and #533 merged ahead of this PR; no
content changes beyond the n3 bump itself.

Signed-off-by: dependabot[bot] <[email protected]>
Co-Authored-By: Claude Sonnet 5 <[email protected]>
davidwkeith added a commit that referenced this pull request Oct 21, 2026
…wrangler

@cloudflare/workers-types still ships the global `declare const Buffer:
any` (nodejs_compat ambient global) through 5.20260928.1, verified with a
minimal repro and by bisecting the group's updates individually. Merged
into a package's `types` array alongside @types/node (cf-shims, server,
conformance-target), it breaks resolution of Node's own Buffer
overloads: any `buf.toString(encoding)` call resolves to the zero-arg
`Object.prototype.toString` instead, which previously broke cf-shims's
typecheck and would also drop ExecutionContext's new `abort` member on
@dwk/server. Same root cause as #507.

wrangler peer-depends on a matching workers-types range, and
vitest-pool-workers pulls in that wrangler, so all three are held back
together. eslint, prettier, typescript-eslint, @types/node,
@changesets/cli, @libsql/client, and @fedify/fedify+vocab keep their
bumps. Rebased onto main after #519 and #533 merged ahead of this PR.
Frozen install, lint, format, typecheck, build, and the full test suite
all pass.

Co-Authored-By: Claude Sonnet 5 <[email protected]>
davidwkeith added a commit that referenced this pull request Oct 21, 2026
…wrangler (#526)

@cloudflare/workers-types still ships the global `declare const Buffer:
any` (nodejs_compat ambient global) through 5.20260928.1, verified with a
minimal repro and by bisecting the group's updates individually. Merged
into a package's `types` array alongside @types/node (cf-shims, server,
conformance-target), it breaks resolution of Node's own Buffer
overloads: any `buf.toString(encoding)` call resolves to the zero-arg
`Object.prototype.toString` instead, which previously broke cf-shims's
typecheck and would also drop ExecutionContext's new `abort` member on
@dwk/server. Same root cause as #507.

wrangler peer-depends on a matching workers-types range, and
vitest-pool-workers pulls in that wrangler, so all three are held back
together. eslint, prettier, typescript-eslint, @types/node,
@changesets/cli, @libsql/client, and @fedify/fedify+vocab keep their
bumps. Rebased onto main after #519 and #533 merged ahead of this PR.
Frozen install, lint, format, typecheck, build, and the full test suite
all pass.

Co-authored-by: David W. Keith <[email protected]>
Co-authored-by: Claude Sonnet 5 <[email protected]>
davidwkeith added a commit that referenced this pull request Oct 21, 2026
Bumps n3 in the / directory from 2.2.0 to 2.7.12.

Rebased onto main after #519 and #533 merged ahead of this PR; no
content changes beyond the n3 bump itself.

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: David W. Keith <[email protected]>
Co-authored-by: Claude Sonnet 5 <[email protected]>
davidwkeith added a commit that referenced this pull request Oct 21, 2026
Bumps ws to 8.22.0 and @types/ws to 8.18.2 in packages/server.

Rebased onto main after #519, #522, #526, #532, and #533 merged ahead
of this PR; no content changes beyond the ws bump itself.

Signed-off-by: dependabot[bot] <[email protected]>
Co-Authored-By: Claude Sonnet 5 <[email protected]>
davidwkeith added a commit that referenced this pull request Oct 21, 2026
Bumps ws to 8.22.0 and @types/ws to 8.18.2 in packages/server.

Rebased onto main after #519, #522, #526, #532, and #533 merged ahead
of this PR; no content changes beyond the ws bump itself.

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: David W. Keith <[email protected]>
Co-authored-by: Claude Sonnet 5 <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant