Bump the github-actions group with 9 updates by dependabot[bot] · Pull Request #3107 · jfrog/jfrog-cli

dependabot · 2025-09-17T08:59:30Z

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

Bumps the github-actions group with 9 updates:

Package	From	To
actions/checkout	`4`	`5`
softprops/action-gh-release	`1`	`2`
actions/setup-java	`4`	`5`
gradle/gradle-build-action	`2`	`3`
stCarolas/setup-maven	`4.5`	`5`
actions/setup-node	`4`	`5`
actions/setup-dotnet	`4`	`5`
actions/setup-go	`5`	`6`
actions/setup-python	`5`	`6`

Updates actions/checkout from 4 to 5

Release notes

Sourced from actions/checkout's releases.

v5.0.0

What's Changed

Update actions checkout to use node 24 by @salmanmkc in actions/checkout#2226

Prepare v5.0.0 release by @salmanmkc in actions/checkout#2238

⚠️ Minimum Compatible Runner Version

v2.327.1
Release Notes

Make sure your runner is updated to this version or newer to use this release.

Full Changelog: actions/checkout@v4...v5.0.0

v4.3.0

What's Changed

docs: update README.md by @motss in actions/checkout#1971

Add internal repos for checking out multiple repositories by @mouismail in actions/checkout#1977

Documentation update - add recommended permissions to Readme by @benwells in actions/checkout#2043

Adjust positioning of user email note and permissions heading by @joshmgross in actions/checkout#2044

Update README.md by @nebuk89 in actions/checkout#2194

Update CODEOWNERS for actions by @TingluoHuang in actions/checkout#2224

Update package dependencies by @salmanmkc in actions/checkout#2236

Prepare release v4.3.0 by @salmanmkc in actions/checkout#2237

New Contributors

@motss made their first contribution in actions/checkout#1971

@mouismail made their first contribution in actions/checkout#1977

@benwells made their first contribution in actions/checkout#2043

@nebuk89 made their first contribution in actions/checkout#2194

@salmanmkc made their first contribution in actions/checkout#2236

Full Changelog: actions/checkout@v4...v4.3.0

v4.2.2

What's Changed

url-helper.ts now leverages well-known environment variables by @jww3 in actions/checkout#1941

Expand unit test coverage for isGhes by @jww3 in actions/checkout#1946

Full Changelog: actions/checkout@v4.2.1...v4.2.2

v4.2.1

What's Changed

Check out other refs/* by commit if provided, fall back to ref by @orhantoy in actions/checkout#1924

New Contributors

@Jcambass made their first contribution in actions/checkout#1919

Full Changelog: actions/checkout@v4.2.0...v4.2.1

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

V5.0.0

Update actions checkout to use node 24 by @salmanmkc in actions/checkout#2226

V4.3.0

docs: update README.md by @motss in actions/checkout#1971

Add internal repos for checking out multiple repositories by @mouismail in actions/checkout#1977

Documentation update - add recommended permissions to Readme by @benwells in actions/checkout#2043

Adjust positioning of user email note and permissions heading by @joshmgross in actions/checkout#2044

Update README.md by @nebuk89 in actions/checkout#2194

Update CODEOWNERS for actions by @TingluoHuang in actions/checkout#2224

Update package dependencies by @salmanmkc in actions/checkout#2236

v4.2.2

url-helper.ts now leverages well-known environment variables by @jww3 in actions/checkout#1941

Expand unit test coverage for isGhes by @jww3 in actions/checkout#1946

v4.2.1

Check out other refs/* by commit if provided, fall back to ref by @orhantoy in actions/checkout#1924

v4.2.0

Add Ref and Commit outputs by @lucacome in actions/checkout#1180

Dependency updates by @dependabot- actions/checkout#1777, actions/checkout#1872

v4.1.7

Bump the minor-npm-dependencies group across 1 directory with 4 updates by @dependabot in actions/checkout#1739

Bump actions/checkout from 3 to 4 by @dependabot in actions/checkout#1697

Check out other refs/* by commit by @orhantoy in actions/checkout#1774

Pin actions/checkout's own workflows to a known, good, stable version. by @jww3 in actions/checkout#1776

v4.1.6

Check platform to set archive extension appropriately by @cory-miller in actions/checkout#1732

v4.1.5

Update NPM dependencies by @cory-miller in actions/checkout#1703

Bump github/codeql-action from 2 to 3 by @dependabot in actions/checkout#1694

Bump actions/setup-node from 1 to 4 by @dependabot in actions/checkout#1696

Bump actions/upload-artifact from 2 to 4 by @dependabot in actions/checkout#1695

README: Suggest user.email to be 41898282+github-actions[bot]@users.noreply.github.com by @cory-miller in actions/checkout#1707

v4.1.4

Disable extensions.worktreeConfig when disabling sparse-checkout by @jww3 in actions/checkout#1692

Add dependabot config by @cory-miller in actions/checkout#1688

Bump the minor-actions-dependencies group with 2 updates by @dependabot in actions/checkout#1693

Bump word-wrap from 1.2.3 to 1.2.5 by @dependabot in actions/checkout#1643

v4.1.3

... (truncated)

Commits

08c6903 Prepare v5.0.0 release (#2238)
9f26565 Update actions checkout to use node 24 (#2226)
See full diff in compare view

Updates softprops/action-gh-release from 1 to 2

Release notes

Sourced from softprops/action-gh-release's releases.

v2.0.0

update actions.yml declaration to node20 to address warnings

Changelog

Sourced from softprops/action-gh-release's changelog.

0.1.12

fix bug leading to empty strings subsituted for inputs users don't provide breaking api calls #144

Commits

6cbd405 release 2.3.3
fbadcc9 update to use actions/checkout@v5
4a84006 chore(deps): bump @types/node from 20.19.10 to 20.19.11 in the npm group (#648)
7191749 chore(deps): bump actions/checkout in the github-actions group (#649)
126b1e7 chore(deps): bump @types/node from 20.19.9 to 20.19.10 in the npm group (#647)
f82d31e chore(deps): bump the npm group with 3 updates (#643)
f2352b9 chore(deps): bump @types/node from 20.19.2 to 20.19.7 in the npm group (#640)
f0b3259 chore(deps): bump the npm group across 1 directory with 4 updates (#638)
f37a2f9 chore(deps): bump the npm group with 2 updates (#635)
db56014 chore(deps): bump brace-expansion from 2.0.1 to 2.0.2 (#634)
Additional commits viewable in compare view

Updates actions/setup-java from 4 to 5

Release notes

Sourced from actions/setup-java's releases.

v5.0.0

What's Changed

Breaking Changes

Upgrade to node 24 by @salmanmkc in actions/setup-java#888

Make sure your runner is updated to this version or newer to use this release. v2.327.1 Release Notes

Dependency Upgrades

Upgrade Publish Immutable Action by @HarithaVattikuti in actions/setup-java#798

Upgrade eslint-plugin-jest from 27.9.0 to 28.11.0 by @dependabot[bot] in actions/setup-java#730

Upgrade undici from 5.28.5 to 5.29.0 by @dependabot[bot] in actions/setup-java#833

Upgrade form-data to bring in fix for critical vulnerability by @gowridurgad in actions/setup-java#887

Upgrade actions/checkout from 4 to 5 by @dependabot[bot] in actions/setup-java#896

Bug Fixes

Prevent default installation of JetBrains pre-releases by @priyagupta108 in actions/setup-java#859

Improve Error Handling for Setup-Java Action to Help Debug Intermittent Failures by @gowridurgad in actions/setup-java#848

New Contributors

@gowridurgad made their first contribution in actions/setup-java#848

@salmanmkc made their first contribution in actions/setup-java#888

Full Changelog: actions/setup-java@v4...v5.0.0

v4.7.1

What's Changed

Documentation changes

Add Documentation to Recommend Using GraalVM JDK 17 Version to 17.0.12 to Align with GFTC License Terms by @aparnajyothi-y in actions/setup-java#704

Remove duplicated GraalVM section in documentation by @Marcono1234 in actions/setup-java#716

Dependency updates:

Upgrade @action/cache from 4.0.0 to 4.0.2 by @aparnajyothi-y in actions/setup-java#766

Upgrade @actions/glob from 0.4.0 to 0.5.0 by @dependabot in actions/setup-java#744

Upgrade ts-jest from 29.1.2 to 29.2.5 by @dependabot in actions/setup-java#743

Upgrade @action/cache to 4.0.3 by @aparnajyothi-y in actions/setup-java#773

Full Changelog: actions/setup-java@v4...v4.7.1

v4.7.0

What's Changed

Configure Dependabot settings by @HarithaVattikuti in actions/setup-java#722

README Update: Added a permissions section by @benwells in actions/setup-java#723

Upgrade cache from version 3.2.4 to 4.0.0 by @aparnajyothi-y in actions/setup-java#724

Upgrade @actions/http-client from 2.2.1 to 2.2.3 by @dependabot in actions/setup-java#728

Upgrade actions/publish-immutable-action from 0.0.3 to 0.0.4 by @dependabot in actions/setup-java#727

Upgrade @types/jest from 29.5.12 to 29.5.14 by @dependabot in actions/setup-java#729

... (truncated)

Commits

dded088 Bump actions/checkout from 4 to 5 (#896)
0913e9a Upgrade to node 24 (#888)
e9343db Bumps form-data (#887)
ae2b61d Bump undici from 5.28.5 to 5.29.0 (#833)
c190c18 Bump eslint-plugin-jest from 27.9.0 to 29.0.1 (#730)
67aec00 Fix: prevent default installation of JetBrains pre-releases (#859)
ebb356c Improve Error Handling for Setup-Java Action to Help Debug Intermittent Failu...
f4f1212 Update publish-immutable-actions.yml (#798)
See full diff in compare view

Updates gradle/gradle-build-action from 2 to 3

Release notes

Sourced from gradle/gradle-build-action's releases.

v3.0.0

This is the first release of gradle/gradle-build-action available with the v3 version tag.
[!IMPORTANT] As of v3 this action has been superceded by gradle/actions/setup-gradle. Any workflow that uses gradle/gradle-build-action@v3 will transparently delegate to gradle/actions/setup-gradle@v3.

Users are encouraged to update their workflows, replacing:
uses: gradle/gradle-build-action@v3
with
uses: gradle/actions/setup-gradle@v3
See the setup-gradle documentation for up-to-date documentation for gradle/actions/setup-gradle.
Changes from gradle-build-action@v2

This release brings some useful and much requested features, including:

save and restore the Gradle configuration-cache data

add the Job summary content as a PR comment

easily publish Build Scans® to the free Gradle Build Scan service

compatibility with Node 20

The only major breaking change from gradle-build-action@v2.12.0 is the update to require a Node 20 runtime environment. Aside from that change, this release should generally serve as a drop-in replacement for gradle-build-action@v2.

Changelog

[NEW] - Run with NodeJs 20.x (gradle/gradle-build-action#946)

[NEW] - Support for save & restore of configuration-cache data (gradle/gradle-build-action#966)

[NEW] - Support for automatic adding PR comment with Job Summary content (gradle/gradle-build-action#1020)

[NEW] - Make it easy to publish a Build Scan® to https://scans.gradle.com (gradle/gradle-build-action#1044)

[NEW] - Added dependency-graph-continue-on-failure input, which can be set to false to force the Job to fail when dependency graph submission fails (gradle/gradle-build-action#1036). Failure modes include:

Fail build step if version of Gradle being executed is not supported for dependency-graph generation (gradle/gradle-build-action#1034)

Fail job if permissions are insufficient to submit dependency graph via Dependency Submission API (gradle/gradle-build-action#997)

[NEW] - Add dependency-graph: clear option to clear any dependency-graph previously submitted by the job

[FIX] Allow cache entries to be reused by jobs with the same ID in different workflows (gradle/gradle-build-action#1017)

Workflow name remains part of the cache key, but cache entries generated by the same job id in a different workflow may be restored

[FIX] Register pre-installed JDKs in Maven toolchains.xml file (gradle/gradle-build-action#1024)

This allows pre-installed JDKs to be auto-detected by Gradle Toolchain support on Windows

[FIX] - Update the Gradle Enterprise injection configuration for product rename to Develocity (gradle/gradle-build-action#995)

[FIX] - Avoid submitting an empty dependency graph when state is loaded from configuration-cache

[FIX] - Update to GitHub Dependency Graph Gradle Plugin v1.2.0

[DEPRECATION] - Deprecation of the arguments parameter (gradle/gradle-build-action#996)

[BREAKING CHANGE] - Remove the gradle-executable input parameter. Use a separate workflow Step to execute a Gradle from a custom location.

... (truncated)

Commits

ac2d340 Bump to v3.5.0
66535aa Bump to v3.4.2
04b20c0 Bump to v3.4.1
db35f23 Bump to v3.4.0
4c39dd8 Bump to v3.3.2
e2097cc Bump to use v3.3.1
8baac4c Map setup-gradle outputs back to gradle-build-action
595fa85 Run quick-check on main
f02f491 Update action.yml for setup-gradle@v3.3.0
cb6e43f Emit correct deprecation warnings in setup-gradle
Additional commits viewable in compare view

Updates stCarolas/setup-maven from 4.5 to 5

Release notes

Sourced from stCarolas/setup-maven's releases.

Node version update (v20)

What's Changed

feat(node)!: bump node to node20 by @ammmze in stCarolas/setup-maven#36

New Contributors

@ammmze made their first contribution in stCarolas/setup-maven#36

Full Changelog: stCarolas/setup-maven@v4.5...v5

Commits

d6af6ab Update README.md with new version
29eaa7b Merge pull request #36 from ammmze/node20
98c2bd3 chore: reconcile type errors
f5430bd chore: update node_modules
4d59bc2 chore: bump typescript to latest
0dec519 chore: update node_modules
d90de66 feat(node)!: bump node to node20
See full diff in compare view

Updates actions/setup-node from 4 to 5

Release notes

Sourced from actions/setup-node's releases.

v5.0.0

What's Changed

Breaking Changes

Enhance caching in setup-node with automatic package manager detection by @priya-kinthali in actions/setup-node#1348

This update, introduces automatic caching when a valid packageManager field is present in your package.json. This aims to improve workflow performance and make dependency management more seamless. To disable this automatic caching, set package-manager-cache: false
steps:
- uses: actions/checkout@v5
- uses: actions/setup-node@v5
  with:
    package-manager-cache: false
Upgrade action to use node24 by @salmanmkc in actions/setup-node#1325

Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. See Release Notes

Dependency Upgrades

Upgrade @octokit/request-error and @actions/github by @dependabot[bot] in actions/setup-node#1227

Upgrade uuid from 9.0.1 to 11.1.0 by @dependabot[bot] in actions/setup-node#1273

Upgrade undici from 5.28.5 to 5.29.0 by @dependabot[bot] in actions/setup-node#1295

Upgrade form-data to bring in fix for critical vulnerability by @gowridurgad in actions/setup-node#1332

Upgrade actions/checkout from 4 to 5 by @dependabot[bot] in actions/setup-node#1345

New Contributors

@priya-kinthali made their first contribution in actions/setup-node#1348

@salmanmkc made their first contribution in actions/setup-node#1325

Full Changelog: actions/setup-node@v4...v5.0.0

v4.4.0

What's Changed

Bug fixes:

Make eslint-compact matcher compatible with Stylelint by @FloEdelmann in actions/setup-node#98

Add support for indented eslint output by @fregante in actions/setup-node#1245

Enhancement:

Support private mirrors by @marco-ippolito in actions/setup-node#1240

Dependency update:

Upgrade @action/cache from 4.0.2 to 4.0.3 by @aparnajyothi-y in actions/setup-node#1262

New Contributors

@FloEdelmann made their first contribution in actions/setup-node#98

@fregante made their first contribution in actions/setup-node#1245

@marco-ippolito made their first contribution in actions/setup-node#1240

Full Changelog: actions/setup-node@v4...v4.4.0

... (truncated)

Commits

a0853c2 Bump actions/checkout from 4 to 5 (#1345)
b7234cc Upgrade action to use node24 (#1325)
d7a1131 Enhance caching in setup-node with automatic package manager detection (#1348)
5e2628c Bumps form-data (#1332)
65becef Bump undici from 5.28.5 to 5.29.0 (#1295)
7e24a65 Bump uuid from 9.0.1 to 11.1.0 (#1273)
08f58d1 Bump @octokit/request-error and @actions/github (#1227)
See full diff in compare view

Updates actions/setup-dotnet from 4 to 5

Release notes

Sourced from actions/setup-dotnet's releases.

v5.0.0

What's Changed

Breaking Changes

Upgrade to Node.js 24 and modernize async usage by @salmanmkc in actions/setup-dotnet#654

Make sure your runner is updated to this version or newer to use this release. v2.327.1 Release Notes

Dependency Updates

Upgrade @action/cache from 4.0.2 to 4.0.3 by @aparnajyothi-y in actions/setup-dotnet#622

Upgrade husky from 8.0.3 to 9.1.7 by @dependabot[bot] in actions/setup-dotnet#591

Upgrade @actions/glob from 0.4.0 to 0.5.0 by @dependabot[bot] in actions/setup-dotnet#594

Upgrade eslint-config-prettier from 9.1.0 to 10.1.5 by @dependabot[bot] in actions/setup-dotnet#639

Upgrade undici from 5.28.5 to 5.29.0 by @dependabot[bot] in actions/setup-dotnet#641

Upgrade form-data to bring in fix for critical vulnerability by @gowridurgad in actions/setup-dotnet#652

Upgrade actions/checkout from 4 to 5 by @dependabot[bot] in actions/setup-dotnet#662

Bug Fixes

Remove Support for older .NET Versions and Update installers scripts by @gowridurgad in actions/setup-dotnet#647

New Contributors

@gowridurgad made their first contribution in actions/setup-dotnet#647

@salmanmkc made their first contribution in actions/setup-dotnet#654

Full Changelog: actions/setup-dotnet@v4...v5.0.0

v4.3.1

What's Changed

v4 - Remove azureedge.net fallback logic and update install scripts by @zaataylor in actions/setup-dotnet#572 As outlined in Critical .NET Install Links Are Changing, remove the storage account fallback logic added for v4 in actions/setup-dotnet#566 and update the install scripts accordingly. Related issue: dotnet/install-scripts#559

upgrade @actions/cache to 4.0.2 by @HarithaVattikuti in actions/setup-dotnet#615

Full Changelog: actions/setup-dotnet@v4...v4.3.1

v4.3.0

What's Changed

README update - add permissions section by @benwells in actions/setup-dotnet#587

Configure Dependabot settings by @HarithaVattikuti in actions/setup-dotnet#585

Upgrade cache from 3.2.4 to 4.0.0 by @aparnajyothi-y in actions/setup-dotnet#586

Upgrade actions/publish-immutable-action from 0.0.3 to 0.0.4 by @dependabot in actions/setup-dotnet#590

Upgrade @actions/http-client from 2.2.1 to 2.2.3 by @dependabot in actions/setup-dotnet#592

Upgrade undici from 5.28.4 to 5.28.5 by @dependabot in actions/setup-dotnet#596

New Contributors

@benwells made their first contribution in actions/setup-dotnet#587

@aparnajyothi-y made their first contribution in actions/setup-dotnet#586

... (truncated)

Commits

d4c9434 Update to Node.js 24 and modernize async usage (#654)
5c125af Bump actions/checkout from 4 to 5 (#662)
87c6e11 Bumps form-data (#652)
06a5327 Bump undici from 5.28.5 to 5.29.0 (#641)
e8e5b82 Bump eslint-config-prettier from 9.1.0 to 10.1.5 (#639)
bf4cd79 Bump @actions/glob from 0.4.0 to 0.5.0 (#594)
4ddad1c Bump husky from 8.0.3 to 9.1.7 (#591)
0f55b45 removes end-of-line dotnet versions (#647)
267870a upgrade actions/cache to 4.0.3 (#622)
See full diff in compare view

Updates actions/setup-go from 5 to 6

Release notes

Sourced from actions/setup-go's releases.

v6.0.0

What's Changed

Breaking Changes

Improve toolchain handling to ensure more reliable and consistent toolchain selection and management by @matthewhughes934 in actions/setup-go#460

Upgrade Nodejs runtime from node20 to node 24 by @salmanmkc in actions/setup-go#624

Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. See Release Notes

Dependency Upgrades

Upgrade @types/jest from 29.5.12 to 29.5.14 by @dependabot[bot] in actions/setup-go#589

Upgrade @actions/tool-cache from 2.0.1 to 2.0.2 by @dependabot[bot] in actions/setup-go#591

Upgrade @typescript-eslint/parser from 8.31.1 to 8.35.1 by @dependabot[bot] in actions/setup-go#590

Upgrade undici from 5.28.5 to 5.29.0 by @dependabot[bot] in actions/setup-go#594

Upgrade typescript from 5.4.2 to 5.8.3 by @dependabot[bot] in actions/setup-go#538

Upgrade eslint-plugin-jest from 28.11.0 to 29.0.1 by @dependabot[bot] in actions/setup-go#603

Upgrade form-data to bring in fix for critical vulnerability by @matthewhughes934 in actions/setup-go#618

Upgrade actions/checkout from 4 to 5 by @dependabot[bot] in actions/setup-go#631

New Contributors

@matthewhughes934 made their first contribution in actions/setup-go#618

@salmanmkc made their first contribution in actions/setup-go#624

Full Changelog: actions/setup-go@v5...v6.0.0

v5.5.0

What's Changed

Bug fixes:

Update self-hosted environment validation by @priyagupta108 in actions/setup-go#556

Add manifest validation and improve error handling by @priyagupta108 in actions/setup-go#586

Update template link by @jsoref in actions/setup-go#527

Dependency updates:

Upgrade @action/cache from 4.0.2 to 4.0.3 by @aparnajyothi-y in actions/setup-go#574

Upgrade @actions/glob from 0.4.0 to 0.5.0 by @dependabot in actions/setup-go#573

Upgrade ts-jest from 29.1.2 to 29.3.2 by @dependabot in actions/setup-go#582

Upgrade eslint-plugin-jest from 27.9.0 to 28.11.0 by @dependabot in actions/setup-go#537

New Contributors

@jsoref made their first contribution in actions/setup-go#527

Full Changelog: actions/setup-go@v5...v5.5.0

v5.4.0

What's Changed

Dependency updates :

Upgrade semver from 7.6.0 to 7.6.3 by @dependabot in actions/setup-go#535

Upgrade eslint-config-prettier from 8.10.0 to 10.0.1 by @dependabot in actions/setup-go#536

Upgrade @action/cache from 4.0.0 to 4.0.2 by @aparnajyothi-y in actions/setup-go#568

Upgrade undici from 5.28.4 to 5.28.5 by @dependabot in actions/setup-go#541

... (truncated)

Commits

4469467 Bump actions/checkout from 4 to 5 (#631)
e093d1e Node 24 upgrade (#624)
1d76b95 Improve toolchain handling (#460)
e75c3e8 Bump form-data to bring in fix for critical vulnerability (#618)
8e57b58 Bump eslint-plugin-jest from 28.11.0 to 29.0.1 (#603)
7c0b336 Bump typescript from 5.4.2 to 5.8.3 (#538)
6f26dcc Bump undici from 5.28.5 to 5.29.0 (#594)
8d4083a Bump @typescript-eslint/parser from 5.62.0 to 8.32.0 (#590)
fa96338 Bump @actions/tool-cache from 2.0.1 to 2.0.2 (#591)
4de67c0 Bump @types/jest from 29.5.12 to 29.5.14 (#589)
See full diff in compare view

Updates actions/setup-python from 5 to 6

Release notes

Sourced from actions/setup-python's releases.

v6.0.0

What's Changed

Breaking Changes

Upgrade to node 24 by @salmanmkc in actions/setup-python#1164

Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. See Release Notes

Enhancements:

Add support for pip-version by @priyagupta108 in actions/setup-python#1129

Enhance reading from .python-version by @krystof-k in actions/setup-python#787

Add version parsing from Pipfile by @aradkdj in actions/setup-python#1067

Bug fixes:

Clarify pythonLocation behaviour for PyPy and GraalPy in environment variables by @aparnajyothi-y in actions/setup-python#1183

Change missing cache directory error to warning by @aparnajyothi-y in actions/setup-python#1182

Add Architecture-Specific PATH Management for Python with --user Flag on Windows by @aparnajyothi-y in actions/setup-python#1122

Include python version in PyPy python-version output by @cdce8p in actions/setup-python#1110

Update docs: clarification on pip authentication with setup-python by @priya-kinthali in actions/setup-python#1156

Dependency updates:

Upgrade idna from 2.9 to 3.7 in /tests/data by @dependabot[bot] in actions/setup-python#843

Upgrade form-data to fix critical vulnerabilities #182 & #183 by @aparnajyothi-y in actions/setup-python#1163

Upgrade setuptools to 78.1.1 to fix path traversal vulnerability in PackageIndex.download by @aparnajyothi-y in actions/setup-python#1165

Upgrade actions/checkout from 4 to 5 by @dependabot[bot] in actions/setup-python#1181

Upgrade @actions/tool-cache from 2.0.1 to 2.0.2 by @dependabot[bot] in actions/setup-python#1095

New Contributors

@krystof-k made their first contribution in actions/setup-python#787

@cdce8p made their first contribution in actions/setup-python#1110

@aradkdj made their first contribution in actions/setup-python#1067

Full Changelog: actions/setup-python@v5...v6.0.0

v5.6.0

What's Changed

Workflow updates related to Ubuntu 20.04 by @aparnajyothi-y in actions/setup-python#1065

Fix for Candidate Not Iterable Error by

ehl-jf · 2025-09-18T07:29:25Z

@dependabot rebase

Bumps the github-actions group with 9 updates: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `4` | `5` | | [softprops/action-gh-release](https://github.com/softprops/action-gh-release) | `1` | `2` | | [actions/setup-java](https://github.com/actions/setup-java) | `4` | `5` | | [gradle/gradle-build-action](https://github.com/gradle/gradle-build-action) | `2` | `3` | | [stCarolas/setup-maven](https://github.com/stcarolas/setup-maven) | `4.5` | `5` | | [actions/setup-node](https://github.com/actions/setup-node) | `4` | `5` | | [actions/setup-dotnet](https://github.com/actions/setup-dotnet) | `4` | `5` | | [actions/setup-go](https://github.com/actions/setup-go) | `5` | `6` | | [actions/setup-python](https://github.com/actions/setup-python) | `5` | `6` | Updates `actions/checkout` from 4 to 5 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@v4...v5) Updates `softprops/action-gh-release` from 1 to 2 - [Release notes](https://github.com/softprops/action-gh-release/releases) - [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md) - [Commits](softprops/action-gh-release@v1...v2) Updates `actions/setup-java` from 4 to 5 - [Release notes](https://github.com/actions/setup-java/releases) - [Commits](actions/setup-java@v4...v5) Updates `gradle/gradle-build-action` from 2 to 3 - [Release notes](https://github.com/gradle/gradle-build-action/releases) - [Commits](gradle/gradle-build-action@v2...v3) Updates `stCarolas/setup-maven` from 4.5 to 5 - [Release notes](https://github.com/stcarolas/setup-maven/releases) - [Commits](stCarolas/setup-maven@v4.5...v5) Updates `actions/setup-node` from 4 to 5 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](actions/setup-node@v4...v5) Updates `actions/setup-dotnet` from 4 to 5 - [Release notes](https://github.com/actions/setup-dotnet/releases) - [Commits](actions/setup-dotnet@v4...v5) Updates `actions/setup-go` from 5 to 6 - [Release notes](https://github.com/actions/setup-go/releases) - [Commits](actions/setup-go@v5...v6) Updates `actions/setup-python` from 5 to 6 - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](actions/setup-python@v5...v6) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '5' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: softprops/action-gh-release dependency-version: '2' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/setup-java dependency-version: '5' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: gradle/gradle-build-action dependency-version: '3' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: stCarolas/setup-maven dependency-version: '5' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/setup-node dependency-version: '5' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/setup-dotnet dependency-version: '5' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/setup-go dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/setup-python dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2025-09-23T06:58:33Z

🐸 JFrog Frogbot

dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Sep 17, 2025

dependabot Bot had a problem deploying to frogbot September 17, 2025 08:59 Failure

This was referenced Sep 17, 2025

Bump stCarolas/setup-maven from 4.5 to 5 #3093

Closed

Bump softprops/action-gh-release from 1 to 2 #3094

Closed

Bump actions/setup-go from 5 to 6 #3095

Closed

Bump actions/setup-java from 4 to 5 #3096

Closed

github-actions Bot enabled auto-merge (squash) September 17, 2025 08:59

dependabot Bot mentioned this pull request Sep 17, 2025

Bump actions/setup-python from 5 to 6 #3097

Closed

dependabot Bot force-pushed the dependabot/github_actions/github-actions-786a80224c branch from ab0b92a to 574dd54 Compare September 18, 2025 07:32

dependabot Bot had a problem deploying to frogbot September 18, 2025 07:32 Failure

dependabot Bot force-pushed the dependabot/github_actions/github-actions-786a80224c branch 2 times, most recently from 8b44f1b to 1546f83 Compare September 18, 2025 09:38

ehl-jf force-pushed the dependabot/github_actions/github-actions-786a80224c branch from 1546f83 to e4a9dd8 Compare September 23, 2025 06:45

ehl-jf added the safe to test Approve running integration tests on a pull request label Sep 23, 2025

github-actions Bot removed the safe to test Approve running integration tests on a pull request label Sep 23, 2025

ehl-jf force-pushed the dependabot/github_actions/github-actions-786a80224c branch from e4a9dd8 to d9b66c3 Compare September 23, 2025 06:54

ehl-jf added ignore for release Automatically generated release notes safe to test Approve running integration tests on a pull request labels Sep 23, 2025

github-actions Bot removed the safe to test Approve running integration tests on a pull request label Sep 23, 2025

ehl-jf approved these changes Sep 23, 2025

View reviewed changes

ehl-jf disabled auto-merge September 23, 2025 06:57

ehl-jf merged commit 763968e into master Sep 23, 2025

ehl-jf deleted the dependabot/github_actions/github-actions-786a80224c branch September 23, 2025 07:02

Navigation Menu

Repository navigation

Bump the github-actions group with 9 updates - #3107

Bump the github-actions group with 9 updates#3107
ehl-jf merged 1 commit into
masterfrom
dependabot/github_actions/github-actions-786a80224c

dependabot Bot commented on behalf of github Sep 17, 2025 •

edited

Loading

Uh oh!

ehl-jf commented Sep 18, 2025

Uh oh!

github-actions Bot commented Sep 23, 2025

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Sep 17, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v5.0.0

What's Changed

⚠️ Minimum Compatible Runner Version

v4.3.0

What's Changed

New Contributors

v4.2.2

What's Changed

v4.2.1

What's Changed

New Contributors

Changelog

V5.0.0

V4.3.0

v4.2.2

v4.2.1

v4.2.0

v4.1.7

v4.1.6

v4.1.5

v4.1.4

v4.1.3

v2.0.0

0.1.12

v5.0.0

What's Changed

Breaking Changes

Dependency Upgrades

Bug Fixes

New Contributors

v4.7.1

What's Changed

Documentation changes

Dependency updates:

v4.7.0

What's Changed

v3.0.0

Changes from gradle-build-action@v2

Changelog

Node version update (v20)

What's Changed

New Contributors

v5.0.0

What's Changed

Breaking Changes

Dependency Upgrades

New Contributors

v4.4.0

What's Changed

Bug fixes:

Enhancement:

Dependency update:

New Contributors

v5.0.0

What's Changed

Breaking Changes

Dependency Updates

Bug Fixes

New Contributors

v4.3.1

What's Changed

v4.3.0

What's Changed

New Contributors

v6.0.0

What's Changed

Breaking Changes

Dependency Upgrades

New Contributors

v5.5.0

What's Changed

Bug fixes:

Dependency updates:

New Contributors

v5.4.0

What's Changed

Dependency updates :

dependabot Bot commented on behalf of github Sep 17, 2025 •

edited

Loading

Changes from `gradle-build-action@v2`