Skip to content

Bump the all-actions group across 1 directory with 6 updates#1743

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/all-actions-40cf53cb7e
Closed

Bump the all-actions group across 1 directory with 6 updates#1743
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/all-actions-40cf53cb7e

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github Feb 26, 2026

Bumps the all-actions group with 6 updates in the / directory:

Package From To
actions/checkout 3 6
stellar/binaries 45 53
actions/upload-artifact 4 7
actions/download-artifact 5 8
denoland/setup-deno 2.0.2 2.0.3
stellar/stellar-cli 23.1.4 25.1.0

Updates actions/checkout from 3 to 6

Release notes

Sourced from actions/checkout's releases.

v6.0.0

What's Changed

Full Changelog: actions/checkout@v5.0.0...v6.0.0

v6-beta

What's Changed

Updated persist-credentials to store the credentials under $RUNNER_TEMP instead of directly in the local git config.

This requires a minimum Actions Runner version of v2.329.0 to access the persisted credentials for Docker container action scenarios.

v5.0.1

What's Changed

Full Changelog: actions/checkout@v5...v5.0.1

v5.0.0

What's Changed

⚠️ Minimum Compatible Runner Version

v2.327.1
Release Notes

Make sure your runner is updated to this version or newer to use this release.

Full Changelog: actions/checkout@v4...v5.0.0

v4.3.1

What's Changed

Full Changelog: actions/checkout@v4...v4.3.1

v4.3.0

What's Changed

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

v4.2.0

v4.1.7

v4.1.6

... (truncated)

Commits

Updates stellar/binaries from 45 to 53

Release notes

Sourced from stellar/binaries's releases.

v53

What's Changed

Full Changelog: stellar/binaries@v52...v53

v52

What's Changed

Full Changelog: stellar/binaries@v51...v52

v51

What's Changed

New Contributors

Full Changelog: stellar/binaries@v50...v51

v50

What's Changed

Full Changelog: stellar/binaries@v49...v50

v49

What's Changed

Full Changelog: stellar/binaries@v48...v49

v48

What's Changed

Full Changelog: stellar/binaries@v47...v48

v47

What's Changed

New Contributors

... (truncated)

Commits
  • 6521a4f Update actions/setup-go from v5 to v6 (#57)
  • 5fd45af Update cargo-semver-checks version to 0.46.0 (#56)
  • 68bb729 chore: update cargo-semver-checks to 0.45.0 (#55)
  • 0040680 add cargo-cache, cargo-sweep (#54)
  • 4685638 Add cargo-nextest (#52)
  • 1974d71 Update macOS runner versions to latest and add Linux arm64 support for Go bui...
  • d65580e add dependabot.yml for version updates (#27)
  • b2efb23 Fix release-test (#48)
  • See full diff in compare view

Updates actions/upload-artifact from 4 to 7

Release notes

Sourced from actions/upload-artifact's releases.

v7.0.0

v7 What's new

Direct Uploads

Adds support for uploading single files directly (unzipped). Callers can set the new archive parameter to false to skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. The name parameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.

ESM

To support new versions of the @actions/* packages, we've upgraded the package to ESM.

What's Changed

New Contributors

Full Changelog: actions/upload-artifact@v6...v7.0.0

v6.0.0

v6 - What's new

[!IMPORTANT] actions/upload-artifact@v6 now runs on Node.js 24 (runs.using: node24) and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading.

Node.js 24

This release updates the runtime to Node.js 24. v5 had preliminary support for Node.js 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.

What's Changed

Full Changelog: actions/upload-artifact@v5.0.0...v6.0.0

v5.0.0

What's Changed

BREAKING CHANGE: this update supports Node v24.x. This is not a breaking change per-se but we're treating it as such.

... (truncated)

Commits
  • bbbca2d Support direct file uploads (#764)
  • 589182c Upgrade the module to ESM and bump dependencies (#762)
  • 47309c9 Merge pull request #754 from actions/Link-/add-proxy-integration-tests
  • 02a8460 Add proxy integration test
  • b7c566a Merge pull request #745 from actions/upload-artifact-v6-release
  • e516bc8 docs: correct description of Node.js 24 support in README
  • ddc45ed docs: update README to correct action name for Node.js 24 support
  • 615b319 chore: release v6.0.0 for Node.js 24 support
  • 017748b Merge pull request #744 from actions/fix-storage-blob
  • 38d4c79 chore: rebuild dist
  • Additional commits viewable in compare view

Updates actions/download-artifact from 5 to 8

Release notes

Sourced from actions/download-artifact's releases.

v8.0.0

v8 - What's new

Direct downloads

To support direct uploads in actions/upload-artifact, the action will no longer attempt to unzip all downloaded files. Instead, the action checks the Content-Type header ahead of unzipping and skips non-zipped files. Callers wishing to download a zipped file as-is can also set the new skip-decompress parameter to false.

Enforced checks (breaking)

A previous release introduced digest checks on the download. If a download hash didn't match the expected hash from the server, the action would log a warning. Callers can now configure the behavior on mismatch with the digest-mismatch parameter. To be secure by default, we are now defaulting the behavior to error which will fail the workflow run.

ESM

To support new versions of the @actions/* packages, we've upgraded the package to ESM.

What's Changed

Full Changelog: actions/download-artifact@v7...v8.0.0

v7.0.0

v7 - What's new

[!IMPORTANT] actions/download-artifact@v7 now runs on Node.js 24 (runs.using: node24) and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading.

Node.js 24

This release updates the runtime to Node.js 24. v6 had preliminary support for Node 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.

What's Changed

New Contributors

Full Changelog: actions/download-artifact@v6.0.0...v7.0.0

v6.0.0

What's Changed

BREAKING CHANGE: this update supports Node v24.x. This is not a breaking change per-se but we're treating it as such.

... (truncated)

Commits
  • 70fc10c Merge pull request #461 from actions/danwkennedy/digest-mismatch-behavior
  • f258da9 Add change docs
  • ccc058e Fix linting issues
  • bd7976b Add a setting to specify what to do on hash mismatch and default it to error
  • ac21fcf Merge pull request #460 from actions/danwkennedy/download-no-unzip
  • 15999bf Add note about package bumps
  • 974686e Bump the version to v8 and add release notes
  • fbe48b1 Update test names to make it clearer what they do
  • 96bf374 One more test fix
  • b8c4819 Fix skip decompress test
  • Additional commits viewable in compare view

Updates denoland/setup-deno from 2.0.2 to 2.0.3

Release notes

Sourced from denoland/setup-deno's releases.

v2.0.3

Full Changelog: denoland/setup-deno@v2.0.2...v2.0.3

Commits
  • e95548e 2.0.3 (#102)
  • 8273ddd fix: switch back to package.json as it's necessary for GH actions (#101)
  • 609c005 feat: include a hash of deno.lock files in the cache key automatically (#98)
  • aa0fea1 feat: add built-in caching via inputs (#89)
  • db3496c feat: add "lts" version option (#97)
  • d74ee56 refactor: convert action to TS and bundle code (#95)
  • See full diff in compare view

Updates stellar/stellar-cli from 23.1.4 to 25.1.0

Release notes

Sourced from stellar/stellar-cli's releases.

25.1.0

🛡️ Bug Fixes

  • Better error reporting for contract builds — The CLI now raises a clear error when building contracts without overflow checks enabled, helping developers catch misconfigurations early.

📦 Packaging & Distribution

  • Debian package support — Added .deb package generation to the CI pipeline, making it easier to install the Stellar CLI on Debian and Ubuntu systems.
  • Fixed Nix build configuration — Moved pkg-config to nativeBuildInputs in the Nix configuration, resolving cross-compilation and build issues for Nix users.

Full Changelog: stellar/stellar-cli@v25.0.0...v25.1.0

25.0.0

What's Changed

✨ Features & Improvements

🐛 Fixes

🛠️ Technical Updates

🗑️ Deprecations Notice

  • stellar contract invoke --fee -> Use stellar contract invoke --inclusion-fee
  • stellar feestats -> Use stellar fees stats

New Contributors

Full Changelog: stellar/stellar-cli@v23.4.1...v25.0.0

23.4.1

What's Changed

🐛 Bug Fixes

Full Changelog: stellar/stellar-cli@v23.4.0...v23.4.1

23.4.0

... (truncated)

Commits
  • a048a57 Bump version to 25.1.0 (#2370)
  • 26e6e33 Generate package for Debian systems. (#2371)
  • a277036 Bump lodash from 4.17.21 to 4.17.23 in /cmd/crates/soroban-spec-typescript/ts...
  • 1073f95 Update dependencies. (#2369)
  • 4b45b4e Error during contract build without overflow checks (#2367)
  • daac568 Update nix configuration by moving pkg-config to nativeBuildInputs. (#2368)
  • 57d331e Bump js-yaml from 3.14.1 to 3.14.2 in /cmd/crates/soroban-spec-typescript/ts-...
  • 72e0ee9 Use stable dependencies. (#2366)
  • bd18516 Remove network runnable abstraction. (#2364)
  • a64925e Bump version to 25.0.0 (#2363)
  • Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Feb 26, 2026
Copilot AI review requested due to automatic review settings February 26, 2026 21:34
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Feb 26, 2026
@dependabot dependabot Bot review requested due to automatic review settings February 26, 2026 21:34
Copilot AI review requested due to automatic review settings March 5, 2026 23:32
@dependabot dependabot Bot force-pushed the dependabot/github_actions/all-actions-40cf53cb7e branch from 02f52f3 to a910172 Compare March 5, 2026 23:32
@dependabot dependabot Bot requested review from Copilot and removed request for Copilot March 5, 2026 23:32
@dependabot dependabot Bot force-pushed the dependabot/github_actions/all-actions-40cf53cb7e branch from a910172 to e5569f9 Compare March 7, 2026 01:50
@dependabot dependabot Bot review requested due to automatic review settings March 7, 2026 01:50
@dependabot dependabot Bot force-pushed the dependabot/github_actions/all-actions-40cf53cb7e branch from e5569f9 to 337c033 Compare March 15, 2026 02:09
@dependabot dependabot Bot requested review from Copilot and removed request for Copilot March 15, 2026 02:09
@dependabot dependabot Bot force-pushed the dependabot/github_actions/all-actions-40cf53cb7e branch from 337c033 to e41ef46 Compare March 22, 2026 02:09
@dependabot dependabot Bot requested review from Copilot and removed request for Copilot March 22, 2026 02:09
Copilot AI review requested due to automatic review settings March 29, 2026 02:10
@dependabot dependabot Bot force-pushed the dependabot/github_actions/all-actions-40cf53cb7e branch from e41ef46 to 37d132b Compare March 29, 2026 02:10
@dependabot dependabot Bot review requested due to automatic review settings March 29, 2026 02:10
Bumps the all-actions group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `3` | `6` |
| [stellar/binaries](https://github.com/stellar/binaries) | `45` | `53` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4` | `7` |
| [actions/download-artifact](https://github.com/actions/download-artifact) | `5` | `8` |
| [denoland/setup-deno](https://github.com/denoland/setup-deno) | `2.0.2` | `2.0.3` |
| [stellar/stellar-cli](https://github.com/stellar/stellar-cli) | `23.1.4` | `25.1.0` |



Updates `actions/checkout` from 3 to 6
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v3...v6)

Updates `stellar/binaries` from 45 to 53
- [Release notes](https://github.com/stellar/binaries/releases)
- [Commits](stellar/binaries@v45...v53)

Updates `actions/upload-artifact` from 4 to 7
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@v4...v7)

Updates `actions/download-artifact` from 5 to 8
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](actions/download-artifact@v5...v8)

Updates `denoland/setup-deno` from 2.0.2 to 2.0.3
- [Release notes](https://github.com/denoland/setup-deno/releases)
- [Commits](denoland/setup-deno@909cc5a...e95548e)

Updates `stellar/stellar-cli` from 23.1.4 to 25.1.0
- [Release notes](https://github.com/stellar/stellar-cli/releases)
- [Commits](stellar/stellar-cli@v23.1.4...v25.1.0)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-actions
- dependency-name: stellar/binaries
  dependency-version: '53'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-actions
- dependency-name: actions/upload-artifact
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-actions
- dependency-name: actions/download-artifact
  dependency-version: '8'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-actions
- dependency-name: denoland/setup-deno
  dependency-version: 2.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-actions
- dependency-name: stellar/stellar-cli
  dependency-version: 25.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/github_actions/all-actions-40cf53cb7e branch from 37d132b to 6ea9675 Compare April 5, 2026 02:10
@dependabot dependabot Bot requested review from Copilot and removed request for Copilot April 5, 2026 02:10
@dependabot @github
Copy link
Copy Markdown
Author

dependabot Bot commented on behalf of github Apr 12, 2026

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Apr 12, 2026
@dependabot dependabot Bot deleted the dependabot/github_actions/all-actions-40cf53cb7e branch April 12, 2026 02:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants