Skip to content

chore(deps): bump the actions group across 1 directory with 3 updates - #149

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions-366aa2e4bc
Closed

chore(deps): bump the actions group across 1 directory with 3 updates#149
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions-366aa2e4bc

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 28, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the actions group with 3 updates in the / directory: goreleaser/goreleaser-action, helm/kind-action and zizmorcore/zizmor-action.

Updates goreleaser/goreleaser-action from 7.2.3 to 7.3.0

Release notes

Sourced from goreleaser/goreleaser-action's releases.

v7.3.0

What's Changed

Full Changelog: goreleaser/goreleaser-action@v7.2.3...v7.3.0

Commits
  • a4f02ab chore: update generated files
  • e27eb77 chore(deps): bump the npm group with 2 updates (#580)
  • f5b4e31 chore(deps): bump undici from 6.28.0 to 6.29.0 (#579)
  • 2d42c26 ci(deps): bump codecov/codecov-action (#581)
  • 73cd4ff feat: reuse the goreleaser binary from the runner tool cache (#577)
  • 97a9607 chore: update generated files
  • 689e48f chore(deps): bump js-yaml from 5.2.3 to 5.4.1 in the npm group (#578)
  • 7e6b514 chore: update generated files
  • 4ec1183 chore(deps): bump js-yaml from 5.2.2 to 5.2.3 (#573)
  • 59060fd chore: update generated files
  • Additional commits viewable in compare view

Updates helm/kind-action from 1.15.0 to 1.15.1

Release notes

Sourced from helm/kind-action's releases.

v1.15.1

What's Changed

New Contributors

Full Changelog: helm/kind-action@v1.15.0...v1.15.1

Commits
  • 1544676 chore: bump kubectl to v1.37.1 and cloud-provider-kind to v0.12.0 (#170)
  • 27e2534 feat: add version_file input to read the kind version from a file (#162)
  • See full diff in compare view

Updates zizmorcore/zizmor-action from 0.6.4 to 0.7.1

Release notes

Sourced from zizmorcore/zizmor-action's releases.

v0.7.1

zizmor changes

Bug Fixes 🐛🔗

  • Fixed a regression in 1.31.0 where some ignore comments/configurations would no longer apply to the dangerous-triggers audit

action changes

The default version of zizmor is now 1.31.1.

What's Changed

Full Changelog: zizmorcore/zizmor-action@v0.7.0...v0.7.1

v0.7.0

Sponsorship is appreciated!

zizmor notes

Enhancements 🌱🔗

  • The typosquat-uses audit now supports pre-commit config inputs (#2437)

  • The self-hosted-runner audit is now significantly more precise (#2350)

    Many thanks to @​ubiratansoares for proposing and implementing this enhancement!

  • The dangerous-triggers audit now considers the issue_comment trigger fundamentally dangerous (#2396)

  • zizmor is now aware of the image_version workflow trigger (#2397)

  • The dangerous-triggers audit now produces more precise finding/diagnostic spans (#2402)

  • The cache-poisoning audit is now aware of pnpm/setup (#2409)

  • The unpinned-images audit now produces more precise findings when the user's workflow contains an indirect matrix (#2395)

    Many thanks to @​ubiratansoares for proposing and implementing this enhancement!

  • The cache-poisoning audit is now aware of GitHub's new cache-mode: setting, and will skip any findings that would occur when a job has an effective cache-mode: none (#2418)

  • The cache-poisoning audit now flags usages of cache-mode: write and cache-mode: write-only with dangerous triggers, i.e. triggers that give an attacker privileged code execution (#2426)

  • zizmor now uses a tree-sitter grammar for PowerShell that's more precise/capable of capturing more non-trivial PowerShell expressions (#2444)

Bug Fixes 🐛🔗

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the actions group across 1 directory with 3 updates
efe96f8 
Bumps the actions group with 3 updates in the / directory: [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action), [helm/kind-action](https://github.com/helm/kind-action) and [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action).


Updates `goreleaser/goreleaser-action` from 7.2.3 to 7.3.0
- [Release notes](https://github.com/goreleaser/goreleaser-action/releases)
- [Commits](goreleaser/goreleaser-action@f06c13b...a4f02ab)

Updates `helm/kind-action` from 1.15.0 to 1.15.1
- [Release notes](https://github.com/helm/kind-action/releases)
- [Commits](helm/kind-action@06c1ae1...1544676)

Updates `zizmorcore/zizmor-action` from 0.6.4 to 0.7.1
- [Release notes](https://github.com/zizmorcore/zizmor-action/releases)
- [Commits](zizmorcore/zizmor-action@cc914d7...85b2b9f)

---
updated-dependencies:
- dependency-name: goreleaser/goreleaser-action
  dependency-version: 7.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: helm/kind-action
  dependency-version: 1.15.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: zizmorcore/zizmor-action
  dependency-version: 0.7.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Oct 28, 2026
@dependabot @github

dependabot Bot commented on behalf of github Nov 4, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Nov 4, 2026
@dependabot
dependabot Bot deleted the dependabot/github_actions/actions-366aa2e4bc branch November 4, 2026 00:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants