Skip to content

Bump the actions group across 1 directory with 2 updates - #437

Merged
martincostello merged 1 commit into
devfrom
dependabot/github_actions/actions-c447a04a65
Jul 20, 2026
Merged

Bump the actions group across 1 directory with 2 updates#437
martincostello merged 1 commit into
devfrom
dependabot/github_actions/actions-c447a04a65

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 20, 2026

Copy link
Copy Markdown
Contributor

Bumps the actions group with 2 updates in the / directory: actions/setup-dotnet and actions/attest.

Updates actions/setup-dotnet from 5.4.0 to 6.0.0

Release notes

Sourced from actions/setup-dotnet's releases.

v6.0.0

What's Changed

New Contributors

Full Changelog: actions/setup-dotnet@v5...v6.0.0

Commits

Updates actions/attest from 4.1.1 to 4.2.0

Release notes

Sourced from actions/attest's releases.

v4.2.0

What's Changed

Full Changelog: actions/attest@v4.1.1...v4.2.0

Commits
  • f7c74d2 feat: support SHA-2 subject digests (#446)
  • 88633d1 Bump js-yaml from 4.2.0 to 5.2.1 (#452)
  • 5dff824 Bump the actions-minor group with 3 updates (#453)
  • e67e539 Bump the npm-development group across 1 directory with 2 updates (#448)
  • 95f6155 Bump @​types/node from 25.9.2 to 26.1.1 (#449)
  • b644c72 Read subjects from GITHUB_ARTIFACTS_LIST (#447)
  • 7d3af28 Bump csv-parse from 6.2.1 to 7.0.1 (#437)
  • 52cbb4d Bump @​actions/glob from 0.6.1 to 0.7.0 in the npm-production group across 1 d...
  • a5ce33e ci: download rebuilt dist/ artifact outside the checkout workspace (#445)
  • 4c65731 ci: auto-rebuild dist/ for Dependabot production bumps (#444)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jul 20, 2026
@martincostello

Copy link
Copy Markdown
Member

@dependabot rebase

Bumps the actions group with 2 updates in the / directory: [actions/setup-dotnet](https://github.com/actions/setup-dotnet) and [actions/attest](https://github.com/actions/attest).


Updates `actions/setup-dotnet` from 5.4.0 to 6.0.0
- [Release notes](https://github.com/actions/setup-dotnet/releases)
- [Commits](actions/setup-dotnet@26b0ec1...a98b568)

Updates `actions/attest` from 4.1.1 to 4.2.0
- [Release notes](https://github.com/actions/attest/releases)
- [Changelog](https://github.com/actions/attest/blob/main/RELEASE.md)
- [Commits](actions/attest@a1948c3...f7c74d2)

---
updated-dependencies:
- dependency-name: actions/attest
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: actions/setup-dotnet
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Bump the actions group with 2 updates Bump the actions group across 1 directory with 2 updates Jul 20, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions-c447a04a65 branch from 4b28dca to 15cfc78 Compare July 20, 2026 07:58
@martincostello
martincostello merged commit dcf7928 into dev Jul 20, 2026
11 checks passed
@martincostello
martincostello deleted the dependabot/github_actions/actions-c447a04a65 branch July 20, 2026 08:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Development

Successfully merging this pull request may close these issues.

1 participant