Skip to content

chore(deps): bump the github-actions-dependencies group across 1 directory with 11 updates - #324

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-dependencies-832af80b32
Closed

chore(deps): bump the github-actions-dependencies group across 1 directory with 11 updates#324
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-dependencies-832af80b32

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 23, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the github-actions-dependencies group with 11 updates in the / directory:

Package From To
hoverkraft-tech/ci-github-nodejs/actions/setup-node 0.24.4 0.25.0
hoverkraft-tech/ci-github-nodejs/.github/workflows/continuous-integration.yml 0.24.4 0.25.0
hoverkraft-tech/ci-github-common/.github/workflows/linter.yml 0.38.0 0.39.0
hoverkraft-tech/ci-github-common/.github/workflows/greetings.yml 0.38.0 0.39.0
actions/create-github-app-token 3.2.0 3.3.0
hoverkraft-tech/ci-github-common/actions/create-and-merge-pull-request 0.38.0 0.39.0
actions/upload-artifact 7.0.1 7.0.2
hoverkraft-tech/ci-github-common/.github/workflows/need-fix-to-issue.yml 0.38.0 0.39.0
hoverkraft-tech/ci-github-publish/.github/workflows/prepare-release.yml 0.28.0 0.29.0
hoverkraft-tech/ci-github-common/.github/workflows/semantic-pull-request.yml 0.38.0 0.39.0
hoverkraft-tech/ci-github-common/.github/workflows/stale.yml 0.38.0 0.39.0

Updates hoverkraft-tech/ci-github-nodejs/actions/setup-node from 0.24.4 to 0.25.0

Release notes

Sourced from hoverkraft-tech/ci-github-nodejs/actions/setup-node's releases.

0.25.0

Release Summary

Introduced actions/publish to publish CI-built npm packages directly from your own jobs, giving projects control over validation and GitHub release ordering. (hoverkraft-tech/ci-github-nodejs#536)

Internal updates refresh dependencies and generated documentation, and streamline test-package maintenance and lint configuration. (hoverkraft-tech/ci-github-nodejs#538)

Breaking changes

Removed .github/workflows/release.yml; migrate to hoverkraft-tech/ci-github-nodejs/actions/publish and configure the runner and permissions in the calling job. Pass github-token as an action input rather than a workflow secret, and quote provenance and dry-run values as strings. (hoverkraft-tech/ci-github-nodejs#536)

What's Changed

Full Changelog: hoverkraft-tech/ci-github-nodejs@0.24.4...0.25.0

Commits
  • 81a4bca docs: update actions and workflows documentation
  • 88c006e chore(deps): bump the github-actions-dependencies group across 1 directory wi...
  • 11fde0a chore(deps): bump the devcontainers-dependencies group across 1 directory wit...
  • 88cf069 docs: update actions and workflows documentation
  • 152d045 fix: sync pnpm fixture overrides
  • 67ae69a fix: patch lodash in pnpm fixture
  • f3d030d fix: patch pnpm dependency review fixture
  • 9933639 fix: handle pnpm dependency fixtures
  • 189761d style: format pnpm workspace fixtures
  • 7e79ae2 fix: restore pnpm workspace fixtures for ci
  • Additional commits viewable in compare view

Updates hoverkraft-tech/ci-github-nodejs/.github/workflows/continuous-integration.yml from 0.24.4 to 0.25.0

Release notes

Sourced from hoverkraft-tech/ci-github-nodejs/.github/workflows/continuous-integration.yml's releases.

0.25.0

Release Summary

Introduced actions/publish to publish CI-built npm packages directly from your own jobs, giving projects control over validation and GitHub release ordering. (hoverkraft-tech/ci-github-nodejs#536)

Internal updates refresh dependencies and generated documentation, and streamline test-package maintenance and lint configuration. (hoverkraft-tech/ci-github-nodejs#538)

Breaking changes

Removed .github/workflows/release.yml; migrate to hoverkraft-tech/ci-github-nodejs/actions/publish and configure the runner and permissions in the calling job. Pass github-token as an action input rather than a workflow secret, and quote provenance and dry-run values as strings. (hoverkraft-tech/ci-github-nodejs#536)

What's Changed

Full Changelog: hoverkraft-tech/ci-github-nodejs@0.24.4...0.25.0

Commits
  • 81a4bca docs: update actions and workflows documentation
  • 88c006e chore(deps): bump the github-actions-dependencies group across 1 directory wi...
  • 11fde0a chore(deps): bump the devcontainers-dependencies group across 1 directory wit...
  • 88cf069 docs: update actions and workflows documentation
  • 152d045 fix: sync pnpm fixture overrides
  • 67ae69a fix: patch lodash in pnpm fixture
  • f3d030d fix: patch pnpm dependency review fixture
  • 9933639 fix: handle pnpm dependency fixtures
  • 189761d style: format pnpm workspace fixtures
  • 7e79ae2 fix: restore pnpm workspace fixtures for ci
  • Additional commits viewable in compare view

Updates hoverkraft-tech/ci-github-common/.github/workflows/linter.yml from 0.38.0 to 0.39.0

Release notes

Sourced from hoverkraft-tech/ci-github-common/.github/workflows/linter.yml's releases.

0.39.0

Release Summary

Linting now shares Super-Linter defaults across local and CI runs for consistent configuration. Super-Linter summaries are enabled by default, with fallback Conventional Commits rules when commitlint is enabled without a project configuration.

Internal updates refresh documentation, GitHub Actions dependencies, and fast-xml-parser.

Breaking changes

The actions/local-actions and actions/local-workflow-actions helpers have been removed; migrate to direct $/ action references and remove dependencies on the helpers’ exposed paths or outputs. These references require GitHub.com and GitHub Actions runner 2.336.0 or newer.

What's Changed

Full Changelog: hoverkraft-tech/ci-github-common@0.38.0...0.39.0

Commits
  • ab69f41 docs: update actions and workflows documentation
  • a3ee349 fix(ci): pin shared super-linter image by digest
  • 467cdd3 feat: share linting defaults and remove local action helpers
  • 46b37cf chore: bump the github-actions-dependencies group across 2 directories with 2...
  • d6339c7 chore: bump the github-actions-dependencies group across 1 directory with 4 u...
  • 7c8a12e chore: bump fast-xml-parser
  • d470912 chore: bump the github-actions-dependencies group across 1 directory with 3 u...
  • 546a624 chore: bump the github-actions-dependencies group across 1 directory with 2 u...
  • b6dd60c chore: bump fast-xml-parser
  • efc2024 feat(linter): align Super-Linter defaults with workflow behavior
  • Additional commits viewable in compare view

Updates hoverkraft-tech/ci-github-common/.github/workflows/greetings.yml from 0.38.0 to 0.39.0

Release notes

Sourced from hoverkraft-tech/ci-github-common/.github/workflows/greetings.yml's releases.

0.39.0

Release Summary

Linting now shares Super-Linter defaults across local and CI runs for consistent configuration. Super-Linter summaries are enabled by default, with fallback Conventional Commits rules when commitlint is enabled without a project configuration.

Internal updates refresh documentation, GitHub Actions dependencies, and fast-xml-parser.

Breaking changes

The actions/local-actions and actions/local-workflow-actions helpers have been removed; migrate to direct $/ action references and remove dependencies on the helpers’ exposed paths or outputs. These references require GitHub.com and GitHub Actions runner 2.336.0 or newer.

What's Changed

Full Changelog: hoverkraft-tech/ci-github-common@0.38.0...0.39.0

Commits
  • ab69f41 docs: update actions and workflows documentation
  • a3ee349 fix(ci): pin shared super-linter image by digest
  • 467cdd3 feat: share linting defaults and remove local action helpers
  • 46b37cf chore: bump the github-actions-dependencies group across 2 directories with 2...
  • d6339c7 chore: bump the github-actions-dependencies group across 1 directory with 4 u...
  • 7c8a12e chore: bump fast-xml-parser
  • d470912 chore: bump the github-actions-dependencies group across 1 directory with 3 u...
  • 546a624 chore: bump the github-actions-dependencies group across 1 directory with 2 u...
  • b6dd60c chore: bump fast-xml-parser
  • efc2024 feat(linter): align Super-Linter defaults with workflow behavior
  • Additional commits viewable in compare view

Updates actions/create-github-app-token from 3.2.0 to 3.3.0

Release notes

Sourced from actions/create-github-app-token's releases.

v3.3.0

3.3.0 (2026-10-12)

Features

Bug Fixes

  • deps: bump nested undici from 6.24.0 to 6.29.0 (#403) (12461a3)
  • deps: bump the production-dependencies group across 1 directory with 3 updates (#395) (a69c19d)
Changelog

Sourced from actions/create-github-app-token's changelog.

Changelog

3.3.0 (2026-10-12)

Features

Bug Fixes

  • deps: bump nested undici from 6.24.0 to 6.29.0 (#403) (12461a3)
  • deps: bump the production-dependencies group across 1 directory with 3 updates (#395) (a69c19d)

3.2.0 (2026-05-12)

Features

  • add support for enterprise-level GitHub Apps (#263) (952a2a7)
  • support full repository names in repositories input (#372) (85eb8dd)

Bug Fixes

  • deps: bump @​actions/core from 3.0.0 to 3.0.1 in the production-dependencies group (#364) (43e5c34)
  • validate private-key input (#376) (f24bbd8)
Commits
  • 64ab729 chore(main): release 3.3.0 (#402)
  • f3a828e ci: create signed dist commits in release workflow (#404)
  • 655017f docs: clarify when owner grants access to all repositories (#378)
  • 12461a3 fix(deps): bump nested undici from 6.24.0 to 6.29.0 (#403)
  • a47236f feat: update permission inputs (#399)
  • a69c19d fix(deps): bump the production-dependencies group across 1 directory with 3 u...
  • d5cb7ae build(deps): bump actions/checkout from 6 to 7 (#384)
  • 575da86 build(deps): bump stefanzweifel/git-auto-commit-action from 7.1.0 to 7.2.0 in...
  • e85f677 test: omit stack traces from snapshots (#401)
  • 9419396 build(deps-dev): bump c8 from 11.0.0 to 12.0.0 (#400)
  • Additional commits viewable in compare view

Updates hoverkraft-tech/ci-github-common/actions/create-and-merge-pull-request from 0.38.0 to 0.39.0

Release notes

Sourced from hoverkraft-tech/ci-github-common/actions/create-and-merge-pull-request's releases.

0.39.0

Release Summary

Linting now shares Super-Linter defaults across local and CI runs for consistent configuration. Super-Linter summaries are enabled by default, with fallback Conventional Commits rules when commitlint is enabled without a project configuration.

Internal updates refresh documentation, GitHub Actions dependencies, and fast-xml-parser.

Breaking changes

The actions/local-actions and actions/local-workflow-actions helpers have been removed; migrate to direct $/ action references and remove dependencies on the helpers’ exposed paths or outputs. These references require GitHub.com and GitHub Actions runner 2.336.0 or newer.

What's Changed

Full Changelog: hoverkraft-tech/ci-github-common@0.38.0...0.39.0

Commits
  • ab69f41 docs: update actions and workflows documentation
  • a3ee349 fix(ci): pin shared super-linter image by digest
  • 467cdd3 feat: share linting defaults and remove local action helpers
  • 46b37cf chore: bump the github-actions-dependencies group across 2 directories with 2...
  • d6339c7 chore: bump the github-actions-dependencies group across 1 directory with 4 u...
  • 7c8a12e chore: bump fast-xml-parser
  • d470912 chore: bump the github-actions-dependencies group across 1 directory with 3 u...
  • 546a624 chore: bump the github-actions-dependencies group across 1 directory with 2 u...
  • b6dd60c chore: bump fast-xml-parser
  • efc2024 feat(linter): align Super-Linter defaults with workflow behavior
  • Additional commits viewable in compare view

Updates actions/upload-artifact from 7.0.1 to 7.0.2

Release notes

Sourced from actions/upload-artifact's releases.

v7.0.2

What's Changed

  • Improves artifact download retries when the service returns HTTP 429 (rate limiting), including honoring valid Retry-After headers.
  • Updates @​actions/artifact to v6.3.1.

New Contributors

Full Changelog: actions/upload-artifact@v7.0.1...v7.0.2

Commits
  • cf430e0 Merge pull request #822 from actions/tunc-d-prepare-upload-v7-0-2
  • c2acded chore: prepare v7.0.2 release
  • 4687c1b Merge pull request #821 from actions/tunc-d-upload-artifact-package-bump
  • 8cbe1be Bump @​actions/artifact to 6.3.1
  • See full diff in compare view

Updates hoverkraft-tech/ci-github-common/.github/workflows/need-fix-to-issue.yml from 0.38.0 to 0.39.0

Release notes

Sourced from hoverkraft-tech/ci-github-common/.github/workflows/need-fix-to-issue.yml's releases.

0.39.0

Release Summary

Linting now shares Super-Linter defaults across local and CI runs for consistent configuration. Super-Linter summaries are enabled by default, with fallback Conventional Commits rules when commitlint is enabled without a project configuration.

Internal updates refresh documentation, GitHub Actions dependencies, and fast-xml-parser.

Breaking changes

The actions/local-actions and actions/local-workflow-actions helpers have been removed; migrate to direct $/ action references and remove dependencies on the helpers’ exposed paths or outputs. These references require GitHub.com and GitHub Actions runner 2.336.0 or newer.

What's Changed

Full Changelog: hoverkraft-tech/ci-github-common@0.38.0...0.39.0

Commits
  • ab69f41 docs: update actions and workflows documentation

@dependabot
chore(deps): bump the github-actions-dependencies group across 1 dire…
ce52ca7 
…ctory with 11 updates

Bumps the github-actions-dependencies group with 11 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [hoverkraft-tech/ci-github-nodejs/actions/setup-node](https://github.com/hoverkraft-tech/ci-github-nodejs) | `0.24.4` | `0.25.0` |
| [hoverkraft-tech/ci-github-nodejs/.github/workflows/continuous-integration.yml](https://github.com/hoverkraft-tech/ci-github-nodejs) | `0.24.4` | `0.25.0` |
| [hoverkraft-tech/ci-github-common/.github/workflows/linter.yml](https://github.com/hoverkraft-tech/ci-github-common) | `0.38.0` | `0.39.0` |
| [hoverkraft-tech/ci-github-common/.github/workflows/greetings.yml](https://github.com/hoverkraft-tech/ci-github-common) | `0.38.0` | `0.39.0` |
| [actions/create-github-app-token](https://github.com/actions/create-github-app-token) | `3.2.0` | `3.3.0` |
| [hoverkraft-tech/ci-github-common/actions/create-and-merge-pull-request](https://github.com/hoverkraft-tech/ci-github-common) | `0.38.0` | `0.39.0` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact) | `7.0.1` | `7.0.2` |
| [hoverkraft-tech/ci-github-common/.github/workflows/need-fix-to-issue.yml](https://github.com/hoverkraft-tech/ci-github-common) | `0.38.0` | `0.39.0` |
| [hoverkraft-tech/ci-github-publish/.github/workflows/prepare-release.yml](https://github.com/hoverkraft-tech/ci-github-publish) | `0.28.0` | `0.29.0` |
| [hoverkraft-tech/ci-github-common/.github/workflows/semantic-pull-request.yml](https://github.com/hoverkraft-tech/ci-github-common) | `0.38.0` | `0.39.0` |
| [hoverkraft-tech/ci-github-common/.github/workflows/stale.yml](https://github.com/hoverkraft-tech/ci-github-common) | `0.38.0` | `0.39.0` |



Updates `hoverkraft-tech/ci-github-nodejs/actions/setup-node` from 0.24.4 to 0.25.0
- [Release notes](https://github.com/hoverkraft-tech/ci-github-nodejs/releases)
- [Commits](hoverkraft-tech/ci-github-nodejs@df34807...81a4bca)

Updates `hoverkraft-tech/ci-github-nodejs/.github/workflows/continuous-integration.yml` from 0.24.4 to 0.25.0
- [Release notes](https://github.com/hoverkraft-tech/ci-github-nodejs/releases)
- [Commits](hoverkraft-tech/ci-github-nodejs@df34807...81a4bca)

Updates `hoverkraft-tech/ci-github-common/.github/workflows/linter.yml` from 0.38.0 to 0.39.0
- [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases)
- [Commits](hoverkraft-tech/ci-github-common@3a27d31...ab69f41)

Updates `hoverkraft-tech/ci-github-common/.github/workflows/greetings.yml` from 0.38.0 to 0.39.0
- [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases)
- [Commits](hoverkraft-tech/ci-github-common@3a27d31...ab69f41)

Updates `actions/create-github-app-token` from 3.2.0 to 3.3.0
- [Release notes](https://github.com/actions/create-github-app-token/releases)
- [Changelog](https://github.com/actions/create-github-app-token/blob/main/CHANGELOG.md)
- [Commits](actions/create-github-app-token@bcd2ba4...64ab729)

Updates `hoverkraft-tech/ci-github-common/actions/create-and-merge-pull-request` from 0.38.0 to 0.39.0
- [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases)
- [Commits](hoverkraft-tech/ci-github-common@3a27d31...ab69f41)

Updates `actions/upload-artifact` from 7.0.1 to 7.0.2
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@043fb46...cf430e0)

Updates `hoverkraft-tech/ci-github-common/.github/workflows/need-fix-to-issue.yml` from 0.38.0 to 0.39.0
- [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases)
- [Commits](hoverkraft-tech/ci-github-common@3a27d31...ab69f41)

Updates `hoverkraft-tech/ci-github-publish/.github/workflows/prepare-release.yml` from 0.28.0 to 0.29.0
- [Release notes](https://github.com/hoverkraft-tech/ci-github-publish/releases)
- [Commits](hoverkraft-tech/ci-github-publish@1ee0354...a0a9d18)

Updates `hoverkraft-tech/ci-github-common/.github/workflows/semantic-pull-request.yml` from 0.38.0 to 0.39.0
- [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases)
- [Commits](hoverkraft-tech/ci-github-common@3a27d31...ab69f41)

Updates `hoverkraft-tech/ci-github-common/.github/workflows/stale.yml` from 0.38.0 to 0.39.0
- [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases)
- [Commits](hoverkraft-tech/ci-github-common@3a27d31...ab69f41)

---
updated-dependencies:
- dependency-name: hoverkraft-tech/ci-github-nodejs/actions/setup-node
  dependency-version: 0.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-nodejs/.github/workflows/continuous-integration.yml
  dependency-version: 0.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-common/.github/workflows/linter.yml
  dependency-version: 0.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-common/.github/workflows/greetings.yml
  dependency-version: 0.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: actions/create-github-app-token
  dependency-version: 3.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-common/actions/create-and-merge-pull-request
  dependency-version: 0.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: actions/upload-artifact
  dependency-version: 7.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-common/.github/workflows/need-fix-to-issue.yml
  dependency-version: 0.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-publish/.github/workflows/prepare-release.yml
  dependency-version: 0.29.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-common/.github/workflows/semantic-pull-request.yml
  dependency-version: 0.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-common/.github/workflows/stale.yml
  dependency-version: 0.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Oct 23, 2026
@github-actions

github-actions Bot commented Oct 23, 2026

Copy link
Copy Markdown
Contributor

Hi, thank you for creating your PR, we will check it out very soon

@github-actions github-actions Bot added type: dependencies Updates dependencies type: maintenance Performs maintenance work labels Oct 23, 2026
@github-actions

github-actions Bot commented Oct 23, 2026

Copy link
Copy Markdown
Contributor

Super-linter summary

Language Validation result
BIOME_FORMAT Pass ✅
BIOME_LINT Pass ✅
CHECKOV Pass ✅
GITHUB_ACTIONS Pass ✅
GITHUB_ACTIONS_ZIZMOR Fail ❌
GITLEAKS Pass ✅
GIT_COMMITLINT Fail ❌
GIT_MERGE_CONFLICT_MARKERS Pass ✅
JSCPD Pass ✅
PRE_COMMIT Pass ✅
SPELL_CODESPELL Pass ✅
TRIVY Pass ✅
YAML Pass ✅
YAML_PRETTIER Pass ✅

Super-linter detected linting errors

For more information, see the GitHub Actions workflow run

Powered by Super-linter
Super-linter revision: 2da136927bd4a73596db63044b504547c62cb854
Super-linter version: 9.0.0

GITHUB_ACTIONS_ZIZMOR 
�[1m�[96mhelp[self-repository]�[0m�[1m: use GitHub's dedicated self-repository syntax�[0m
  �[1m�[94m--> �[0m/github/workspace/.github/workflows/__shared-ci.yml:23:11
   �[1m�[94m|�[0m
�[1m�[94m21�[0m �[1m�[94m|�[0m     name: Test nodejs
   �[1m�[94m|�[0m     �[1m�[94m-----------------�[0m �[1m�[94mthis job�[0m
�[1m�[94m22�[0m �[1m�[94m|�[0m     needs: linter
�[1m�[94m23�[0m �[1m�[94m|�[0m     uses: ./.github/workflows/__check-nodejs.yml
   �[1m�[94m|�[0m           �[1m�[96m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[96muse '$/...' instead of './...'�[0m
   �[1m�[94m|�[0m
   �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
   �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
   �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#self-repository�[39m

�[1m�[96mhelp[self-repository]�[0m�[1m: use GitHub's dedicated self-repository syntax�[0m
  �[1m�[94m--> �[0m/github/workspace/.github/workflows/__shared-ci.yml:34:11
   �[1m�[94m|�[0m
�[1m�[94m32�[0m �[1m�[94m|�[0m     name: Test nodejs
   �[1m�[94m|�[0m     �[1m�[94m-----------------�[0m �[1m�[94mthis job�[0m
�[1m�[94m33�[0m �[1m�[94m|�[0m     needs: linter
�[1m�[94m34�[0m �[1m�[94m|�[0m     uses: ./.github/workflows/__check-dist.yml
   �[1m�[94m|�[0m           �[1m�[96m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[96muse '$/...' instead of './...'�[0m
   �[1m�[94m|�[0m
   �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
   �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
   �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#self-repository�[39m

�[1m�[96mhelp[self-repository]�[0m�[1m: use GitHub's dedicated self-repository syntax�[0m
  �[1m�[94m--> �[0m/github/workspace/.github/workflows/__shared-ci.yml:41:11
   �[1m�[94m|�[0m
�[1m�[94m39�[0m �[1m�[94m|�[0m     name: Test action
   �[1m�[94m|�[0m     �[1m�[94m-----------------�[0m �[1m�[94mthis job�[0m
�[1m�[94m40�[0m �[1m�[94m|�[0m     needs: [check-nodejs, check-dist]
�[1m�[94m41�[0m �[1m�[94m|�[0m     uses: ./.github/workflows/__check-action.yml
   �[1m�[94m|�[0m           �[1m�[96m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[96muse '$/...' instead of './...'�[0m
   �[1m�[94m|�[0m
   �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
   �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
   �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#self-repository�[39m

�[1m�[96mhelp[self-repository]�[0m�[1m: use GitHub's dedicated self-repository syntax�[0m
  �[1m�[94m--> �[0m/github/workspace/.github/workflows/main-ci.yml:21:11
   �[1m�[94m|�[0m
�[1m�[94m20�[0m �[1m�[94m|�[0m   ci:
   �[1m�[94m|�[0m   �[1m�[94m--�[0m �[1m�[94mthis job�[0m
�[1m�[94m21�[0m �[1m�[94m|�[0m     uses: ./.github/workflows/__shared-ci.yml
   �[1m�[94m|�[0m           �[1m�[96m^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^�[0m �[1m�[96muse '$/...' instead of './...'�[0m
   �[1m�[94m|�[0m
   �[1m�[94m= �[0m�[1mnote�[0m: audit confidence → High
   �[1m�[94m= �[0m�[1mnote�[0m: this finding has an auto-fix
   �[1m�[94m= �[0m�[1mhelp�[0m: audit documentation → �[32mhttps://docs.zizmor.sh/audits/#self-repository�[39m

�[32m15�[39m findings (�[1m�[93m11�[39m suppressed, �[91m4�[39m unsafe fixes�[0m): �[35m0�[39m informational, �[36m4�[39m low, �[33m0�[39m medium, �[31m0�[39m high�[32m INFO�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 zizmor v1.30.1
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/.github/workflows/__check-dist.yml
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/.github/workflows/__check-nodejs.yml
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/.github/workflows/__shared-ci.yml
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/.github/workflows/greetings.yml
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/.github/workflows/main-ci.yml
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/.github/workflows/need-fix-to-issue.yml
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/.github/workflows/prepare-release.yml
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/.github/workflows/semantic-pull-request.yml
�[32m INFO�[0m �[1maudit�[0m�[2m:�[0m �[2mzizmor�[0m�[2m:�[0m 🌈 completed /github/workspace/.github/workflows/stale.yml
GIT_COMMITLINT 
�[90m⧗�[39m   --- input ---
�[1mchore(deps): bump the github-actions-dependencies group across 1 directory with 11 updates

Bumps the github-actions-dependencies group with 11 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [hoverkraft-tech/ci-github-nodejs/actions/setup-node](https://github.com/hoverkraft-tech/ci-github-nodejs) | `0.24.4` | `0.25.0` |
| [hoverkraft-tech/ci-github-nodejs/.github/workflows/continuous-integration.yml](https://github.com/hoverkraft-tech/ci-github-nodejs) | `0.24.4` | `0.25.0` |
| [hoverkraft-tech/ci-github-common/.github/workflows/linter.yml](https://github.com/hoverkraft-tech/ci-github-common) | `0.38.0` | `0.39.0` |
| [hoverkraft-tech/ci-github-common/.github/workflows/greetings.yml](https://github.com/hoverkraft-tech/ci-github-common) | `0.38.0` | `0.39.0` |
| [actions/create-github-app-token](https://github.com/actions/create-github-app-token) | `3.2.0` | `3.3.0` |
| [hoverkraft-tech/ci-github-common/actions/create-and-merge-pull-request](https://github.com/hoverkraft-tech/ci-github-common) | `0.38.0` | `0.39.0` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact) | `7.0.1` | `7.0.2` |
| [hoverkraft-tech/ci-github-common/.github/workflows/need-fix-to-issue.yml](https://github.com/hoverkraft-tech/ci-github-common) | `0.38.0` | `0.39.0` |
| [hoverkraft-tech/ci-github-publish/.github/workflows/prepare-release.yml](https://github.com/hoverkraft-tech/ci-github-publish) | `0.28.0` | `0.29.0` |
| [hoverkraft-tech/ci-github-common/.github/workflows/semantic-pull-request.yml](https://github.com/hoverkraft-tech/ci-github-common) | `0.38.0` | `0.39.0` |
| [hoverkraft-tech/ci-github-common/.github/workflows/stale.yml](https://github.com/hoverkraft-tech/ci-github-common) | `0.38.0` | `0.39.0` |



Updates `hoverkraft-tech/ci-github-nodejs/actions/setup-node` from 0.24.4 to 0.25.0
- [Release notes](https://github.com/hoverkraft-tech/ci-github-nodejs/releases)
- [Commits](https://github.com/hoverkraft-tech/ci-github-nodejs/compare/df348077afa4e79725151d50606e9dc63f86dcb6...81a4bca8445b7b273455ff26a9a5c3c31c86b2a1)

Updates `hoverkraft-tech/ci-github-nodejs/.github/workflows/continuous-integration.yml` from 0.24.4 to 0.25.0
- [Release notes](https://github.com/hoverkraft-tech/ci-github-nodejs/releases)
- [Commits](https://github.com/hoverkraft-tech/ci-github-nodejs/compare/df348077afa4e79725151d50606e9dc63f86dcb6...81a4bca8445b7b273455ff26a9a5c3c31c86b2a1)

Updates `hoverkraft-tech/ci-github-common/.github/workflows/linter.yml` from 0.38.0 to 0.39.0
- [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases)
- [Commits](https://github.com/hoverkraft-tech/ci-github-common/compare/3a27d31e9ccefbe9609cc9165017ed100ff34a22...ab69f41f76e77ec84e733dedb03492b3ee95a05f)

Updates `hoverkraft-tech/ci-github-common/.github/workflows/greetings.yml` from 0.38.0 to 0.39.0
- [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases)
- [Commits](https://github.com/hoverkraft-tech/ci-github-common/compare/3a27d31e9ccefbe9609cc9165017ed100ff34a22...ab69f41f76e77ec84e733dedb03492b3ee95a05f)

Updates `actions/create-github-app-token` from 3.2.0 to 3.3.0
- [Release notes](https://github.com/actions/create-github-app-token/releases)
- [Changelog](https://github.com/actions/create-github-app-token/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/create-github-app-token/compare/bcd2ba49218906704ab6c1aa796996da409d3eb1...64ab729a6294000f5aa4a4bc0b73d1f32bc45510)

Updates `hoverkraft-tech/ci-github-common/actions/create-and-merge-pull-request` from 0.38.0 to 0.39.0
- [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases)
- [Commits](https://github.com/hoverkraft-tech/ci-github-common/compare/3a27d31e9ccefbe9609cc9165017ed100ff34a22...ab69f41f76e77ec84e733dedb03492b3ee95a05f)

Updates `actions/upload-artifact` from 7.0.1 to 7.0.2
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/043fb46d1a93c77aae656e7c1c64a875d1fc6a0a...cf430e030ddbb5b0abf93d22962f4752f3646cd9)

Updates `hoverkraft-tech/ci-github-common/.github/workflows/need-fix-to-issue.yml` from 0.38.0 to 0.39.0
- [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases)
- [Commits](https://github.com/hoverkraft-tech/ci-github-common/compare/3a27d31e9ccefbe9609cc9165017ed100ff34a22...ab69f41f76e77ec84e733dedb03492b3ee95a05f)

Updates `hoverkraft-tech/ci-github-publish/.github/workflows/prepare-release.yml` from 0.28.0 to 0.29.0
- [Release notes](https://github.com/hoverkraft-tech/ci-github-publish/releases)
- [Commits](https://github.com/hoverkraft-tech/ci-github-publish/compare/1ee0354c40e4cd0a46c69cbe305c74fc67338042...a0a9d185c51c10710a5987822e78feb2b5ce1932)

Updates `hoverkraft-tech/ci-github-common/.github/workflows/semantic-pull-request.yml` from 0.38.0 to 0.39.0
- [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases)
- [Commits](https://github.com/hoverkraft-tech/ci-github-common/compare/3a27d31e9ccefbe9609cc9165017ed100ff34a22...ab69f41f76e77ec84e733dedb03492b3ee95a05f)

Updates `hoverkraft-tech/ci-github-common/.github/workflows/stale.yml` from 0.38.0 to 0.39.0
- [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases)
- [Commits](https://github.com/hoverkraft-tech/ci-github-common/compare/3a27d31e9ccefbe9609cc9165017ed100ff34a22...ab69f41f76e77ec84e733dedb03492b3ee95a05f)

---
updated-dependencies:
- dependency-name: hoverkraft-tech/ci-github-nodejs/actions/setup-node
  dependency-version: 0.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-nodejs/.github/workflows/continuous-integration.yml
  dependency-version: 0.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-common/.github/workflows/linter.yml
  dependency-version: 0.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-common/.github/workflows/greetings.yml
  dependency-version: 0.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: actions/create-github-app-token
  dependency-version: 3.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-common/actions/create-and-merge-pull-request
  dependency-version: 0.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: actions/upload-artifact
  dependency-version: 7.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-common/.github/workflows/need-fix-to-issue.yml
  dependency-version: 0.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-publish/.github/workflows/prepare-release.yml
  dependency-version: 0.29.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-common/.github/workflows/semantic-pull-request.yml
  dependency-version: 0.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-common/.github/workflows/stale.yml
  dependency-version: 0.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>�[22m
�[31m✖�[39m   body's lines must not be longer than 100 characters �[90m[body-max-line-length]�[39m

�[1m�[31m✖�[39m   found 1 problems, 0 warnings�[22m
ⓘ   Get help: https://github.com/conventional-changelog/commitlint/#what-is-commitlint

@dependabot @github

dependabot Bot commented on behalf of github Oct 30, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 30, 2026
@dependabot
dependabot Bot deleted the dependabot/github_actions/github-actions-dependencies-832af80b32 branch October 30, 2026 04:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code type: dependencies Updates dependencies type: maintenance Performs maintenance work

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants