Skip to content

Bump the actions group across 1 directory with 2 updates#31483

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/github_actions/actions-926eff13a3
Open

Bump the actions group across 1 directory with 2 updates#31483
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/github_actions/actions-926eff13a3

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Apr 10, 2026

Bumps the actions group with 2 updates in the / directory: actions/upload-artifact and imjohnbo/issue-bot.

Updates actions/upload-artifact from 7.0.0 to 7.0.1

Release notes

Sourced from actions/upload-artifact's releases.

v7.0.1

What's Changed

Full Changelog: actions/upload-artifact@v7...v7.0.1

Commits
  • 043fb46 Merge pull request #797 from actions/yacaovsnc/update-dependency
  • 634250c Include changes in typespec/ts-http-runtime 0.3.5
  • e454baa Readme: bump all the example versions to v7 (#796)
  • 74fad66 Update the readme with direct upload details (#795)
  • See full diff in compare view

Updates imjohnbo/issue-bot from 3.4.4 to 3.4.5

Release notes

Sourced from imjohnbo/issue-bot's releases.

v3.4.5 – fix README example, update dependencies

What's Changed

  • Fixed the README simple usage example, which included pinned: true without the required labels field — causing Error: Invalid inputs for anyone copying it verbatim. (#104)
  • Bumped @​actions/github (^6→^8) and @​actions/core (^1→^2) to resolve three undici security advisories: GHSA-g9mf-h72j-4rw9, GHSA-2mjp-6q6p-2qxm, GHSA-4992-7rv2-5pvq.
  • Expanded test coverage from 16 to 34 tests.

Full changelog: imjohnbo/issue-bot@v3.4.4...v3.4.5

Commits
  • 3188c6c Automatic compilation
  • b350cc6 Merge pull request #106 from imjohnbo/chore/update-deps
  • d171c34 fix: add eslint-env jest to mock file to satisfy semistandard
  • 70c1dae chore: update deps, fix undici CVEs, expand test coverage
  • d7a1584 Merge pull request #105 from imjohnbo/fix/issue-104-readme
  • e351acc fix: correct README simple example to not require labels for non-pinned use
  • See full diff in compare view

@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Apr 10, 2026
@github-actions github-actions bot added the CI: Run cibuildwheel Run wheel building tests on a PR label Apr 10, 2026
Bumps the actions group with 2 updates: [actions/upload-artifact](https://github.com/actions/upload-artifact) and [imjohnbo/issue-bot](https://github.com/imjohnbo/issue-bot).


Updates `actions/upload-artifact` from 7.0.0 to 7.0.1
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@bbbca2d...043fb46)

Updates `imjohnbo/issue-bot` from 3.4.4 to 3.4.5
- [Release notes](https://github.com/imjohnbo/issue-bot/releases)
- [Commits](imjohnbo/issue-bot@572eed1...3188c6c)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: imjohnbo/issue-bot
  dependency-version: 3.4.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot changed the title Bump the actions group with 2 updates Bump the actions group across 1 directory with 2 updates Apr 10, 2026
@dependabot dependabot bot force-pushed the dependabot/github_actions/actions-926eff13a3 branch from 7d023b6 to c1cc236 Compare April 10, 2026 19:35
@QuLogic QuLogic added this to the v3.11.0 milestone Apr 10, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

CI: Run cibuildwheel Run wheel building tests on a PR dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant