chore(deps): bump the github-actions group across 1 directory with 11 updates by dependabot[bot] · Pull Request #4340 · triggerdotdev/trigger.dev

dependabot · 2026-07-22T13:29:11Z

Bumps the github-actions group with 11 updates in the / directory:

Package	From	To
actions/setup-node	`6.4.0`	`7.0.0`
anthropics/claude-code-action	`1.0.157`	`1.0.175`
slackapi/slack-github-action	`3.0.3`	`4.0.0`
docker/login-action	`4.2.0`	`4.4.0`
dorny/paths-filter	`4.0.1`	`4.0.2`
actions/attest-build-provenance	`4.1.0`	`4.1.1`
softprops/action-gh-release	`3.0.1`	`3.0.2`
denoland/setup-deno	`2.0.4`	`2.0.5`
mitchellh/vouch/action/check-pr	`1.4.2`	`1.5.0`
mitchellh/vouch/action/manage-by-issue	`1.4.2`	`1.5.0`
zizmorcore/zizmor-action	`0.5.7`	`0.6.0`

Updates actions/setup-node from 6.4.0 to 7.0.0

Release notes

Sourced from actions/setup-node's releases.

v7.0.0

What's Changed

Enhancements:

Add cache-primary-key and cache-matched-key as outputs by @gowridurgad in actions/setup-node#1577

Migrate to ESM and upgrade dependencies by @gowridurgad in actions/setup-node#1574

Bug fixes:

Remove dummy NODE_AUTH_TOKEN export by @gowridurgad in actions/setup-node#1558

Only use mirrorToken in getManifest if it's provided by @deiga in actions/setup-node#1548

Documentation updates:

Add documentation for publishing to npm with Trusted Publisher (OIDC) by @chiranjib-swain in actions/setup-node#1536

docs: Update restore-only cache documentation by @priya-kinthali in actions/setup-node#1550

docs: Update caching recommendations to mitigate cache poisoning risks by @chiranjib-swain in actions/setup-node#1567

Dependency update:

Upgrade @actions/cache to 5.1.0, log cache write denied by @jasongin in actions/setup-node#1569

New Contributors

@chiranjib-swain made their first contribution in actions/setup-node#1536

@deiga made their first contribution in actions/setup-node#1548

@jasongin made their first contribution in actions/setup-node#1569

Full Changelog: actions/setup-node@v6...v7.0.0

v6.5.0

What's Changed

Update @actions/cache to 5.1.0 and add security overrides for undici and fast-xml-parser by @HarithaVattikuti in actions/setup-node#1579

Full Changelog: actions/setup-node@v6.4.0...v6.5.0

Commits

8207627 Migrate to ESM and upgrade dependencies (#1574)
04be95c Add cache-primary-key and cache-matched-key as outputs (#1577)
7c2c68d docs: Update caching recommendations to mitigate cache poisoning risks (#1567)
6a61c03 Merge pull request #1569 from jasongin/update-actions-cache-5.1.0
30eb73b Resolve high-severity audit issues
4e1a87a Update dist
360237f Strict equality
4f8aac5 Bump @actions/cache to 5.1.0, log cache write denied
f4a67bb Only use mirrorToken in getManifest if it's provided (#1548)
0355742 Remove dummy NODE_AUTH_TOKEN export (#1558)
Additional commits viewable in compare view

Updates anthropics/claude-code-action from 1.0.157 to 1.0.175

Release notes

Sourced from anthropics/claude-code-action's releases.

v1.0.175

Full Changelog: anthropics/claude-code-action@v1...v1.0.175

v1.0.174

What's Changed

fix(sanitizer): redact GitHub user-to-server (ghu_) tokens by @NickNojiri in anthropics/claude-code-action#1502

New Contributors

@NickNojiri made their first contribution in anthropics/claude-code-action#1502

Full Changelog: anthropics/claude-code-action@v1...v1.0.174

v1.0.173

Full Changelog: anthropics/claude-code-action@v1...v1.0.173

v1.0.172

What's Changed

fix(sdk): fail step when result has is_error:true despite success subtype by @syf2211 in anthropics/claude-code-action#1496

Full Changelog: anthropics/claude-code-action@v1...v1.0.172

v1.0.171

Full Changelog: anthropics/claude-code-action@v1...v1.0.171

v1.0.170

Full Changelog: anthropics/claude-code-action@v1...v1.0.170

v1.0.169

Full Changelog: anthropics/claude-code-action@v1...v1.0.169

v1.0.168

Full Changelog: anthropics/claude-code-action@v1...v1.0.168

v1.0.167

Full Changelog: anthropics/claude-code-action@v1...v1.0.167

v1.0.166

What's Changed

Drop buffered inline comment when it is posted live (#1405) by @archievi in anthropics/claude-code-action#1412

Use modern noreply email for co-author trailers by @tarunag10 in anthropics/claude-code-action#1369

fix(restore): handle symlinked CLAUDE.md paths during config snapshot by @syf2211 in anthropics/claude-code-action#1441

fix: preserve repeated add-dir flags in claude args by @Jerry2003826 in anthropics/claude-code-action#1256

fix: propagate curl failures in install pipeline by @akhilesharora in anthropics/claude-code-action#1241

chore: fix prettier formatting by @ashwin-ant in anthropics/claude-code-action#1463

New Contributors

@archievi made their first contribution in anthropics/claude-code-action#1412

@syf2211 made their first contribution in anthropics/claude-code-action#1441

@akhilesharora made their first contribution in anthropics/claude-code-action#1241

... (truncated)

Commits

1298632 chore: bump Claude Code to 2.1.211 and Agent SDK to 0.3.211
1253134 chore: bump Claude Code to 2.1.210 and Agent SDK to 0.3.210
4f07c81 fix(sanitizer): redact GitHub user-to-server (ghu_) tokens (#1502)
f1bd27c chore: bump Claude Code to 2.1.209 and Agent SDK to 0.3.209
a08f891 chore: bump Claude Code to 2.1.208 and Agent SDK to 0.3.208
972a512 fix(sdk): fail step when result has is_error:true despite success subtype (#1...
e90deca chore: bump Claude Code to 2.1.207 and Agent SDK to 0.3.207
536f2c3 chore: bump Claude Code to 2.1.206 and Agent SDK to 0.3.206
37b464c chore: bump Claude Code to 2.1.205 and Agent SDK to 0.3.205
ba0aafd chore: bump Claude Code to 2.1.204 and Agent SDK to 0.3.204
Additional commits viewable in compare view

Updates slackapi/slack-github-action from 3.0.3 to 4.0.0

Release notes

Sourced from slackapi/slack-github-action's releases.

Slack GitHub Action v4.0.0

Major Changes
b1974f0: build: parse yaml with more strict multiline indentation rules

Internal dependencies of js-yaml@v5 make YAML parsing more strict and compliant with the YAML specification. Indentation is now required for values that span multiple lines against the base value.

See the YAML line prefixes spec for the expected indentation rule:
  channel: "C0123"
  text: "first line

second line"


second line"
Patch Changes

654bb72: chore: provide global fetch proxied configurations with updates to web api and webhook packages

Slack GitHub Action v3.0.5

Patch Changes

96fddbe: fix: revert multiline yaml parsing indentation change

Slack GitHub Action v3.0.4

Patch Changes

fa03fe4: refactor: send webhooks with the @slack/webhook package

Changelog

Sourced from slackapi/slack-github-action's changelog.

slack-github-action

4.0.0

Major Changes
b1974f0: build: parse yaml with more strict multiline indentation rules

Internal dependencies of js-yaml@v5 make YAML parsing more strict and compliant with the YAML specification. Indentation is now required for values that span multiple lines against the base value.

See the YAML line prefixes spec for the expected indentation rule:
  channel: "C0123"
  text: "first line

second line"


second line"
Patch Changes

654bb72: chore: provide global fetch proxied configurations with updates to web api and webhook packages

3.0.5

Patch Changes

96fddbe: fix: revert multiline yaml parsing indentation change

3.0.4

Patch Changes

fa03fe4: refactor: send webhooks with the @slack/webhook package

3.0.3

Patch Changes

66834e4: feat: add instrumentation to address error rates

3.0.2

Patch Changes

79529d7: fix: resolve url.parse deprecation warning for webhook techniques

Commits

dcb1066 chore: release
53861e0 chore: release (#645)
b1974f0 build!: parse yaml with more strict multiline indentation rules (#640)
947ed06 build(deps): bump undici from 7.28.0 to 8.7.0 (#653)
03922a9 chore: track undici-types to the resolved undici version (#652)
31d473e build(deps-dev): bump typescript from 6.0.3 to 7.0.2 (#651)
3ca6997 build(deps-dev): bump sinon and @types/sinon (#649)
26a5ad3 build(deps): bump actions/setup-node from 6.4.0 to 7.0.0 (#647)
5092efb build(deps-dev): bump @biomejs/biome from 2.5.3 to 2.5.4 (#650)
3548c3e build(deps): bump slackapi/slack-github-action from 3.0.3 to 3.0.5 (#646)
Additional commits viewable in compare view

Updates docker/login-action from 4.2.0 to 4.4.0

Release notes

Sourced from docker/login-action's releases.

v4.4.0

Skip empty registry-auth secret mask by @crazy-max in docker/login-action#1035

Bump @aws-sdk/client-ecr and @aws-sdk/client-ecr-public to 3.1077.0 docker/login-action#1034

Full Changelog: docker/login-action@v4.3.0...v4.4.0

v4.3.0

Preserve names in esbuild bundle by @crazy-max in docker/login-action#1022

Bump @aws-sdk/client-ecr and @aws-sdk/client-ecr-public to 3.1076.0 docker/login-action#999 docker/login-action#1030

Bump @docker/actions-toolkit from 0.90.0 to 0.92.0 in docker/login-action#1004 docker/login-action#1027

Bump @sigstore/core from 3.1.0 to 3.2.1 in docker/login-action#1023

Bump @sigstore/verify from 3.1.0 to 3.1.1 in docker/login-action#1029

Bump http-proxy-agent and https-proxy-agent to 9.1.0 in docker/login-action#1017

Bump js-yaml from 4.1.1 to 5.2.0 in docker/login-action#1028

Bump sigstore from 4.1.0 to 4.1.1 in docker/login-action#1031

Bump tmp from 0.2.5 to 0.2.7 in docker/login-action#1002

Bump undici from 6.24.1 to 6.27.0 in docker/login-action#1020

Bump vite from 7.3.3 to 7.3.6 in docker/login-action#1019

Full Changelog: docker/login-action@v4.2.0...v4.3.0

Commits

af1e73f Merge pull request #1034 from docker/dependabot/npm_and_yarn/aws-sdk-dependen...
da722bd [dependabot skip] chore: update generated content
2916ad6 build(deps): bump the aws-sdk-dependencies group across 1 directory with 2 up...
ca0a662 Merge pull request #1035 from crazy-max/fix-registry-auth-empty-mask
c455755 chore: update generated content
4835190 skip empty registry-auth secret mask
992421c Merge pull request #1033 from docker/dependabot/github_actions/docker/bake-ac...
b249b43 Merge pull request #1032 from docker/dependabot/github_actions/docker/bake-ac...
1b67977 build(deps): bump docker/bake-action from 7.2.0 to 7.3.0
9d49d6a build(deps): bump docker/bake-action/subaction/matrix
Additional commits viewable in compare view

Updates dorny/paths-filter from 4.0.1 to 4.0.2

Release notes

Sourced from dorny/paths-filter's releases.

v4.0.2

What's Changed

fix warning message by @cgundy in dorny/paths-filter#282

chore: fix GitHub spelling in logs by @squat in dorny/paths-filter#278

fix: use rev-parse instead of branch --show-current for older git compat by @saschabratton in dorny/paths-filter#303

fix: work around git dubious ownership errors in container jobs by @saschabratton in dorny/paths-filter#317

docs: update changelog for v4.0.2 by @saschabratton in dorny/paths-filter#318

New Contributors

@cgundy made their first contribution in dorny/paths-filter#282

@squat made their first contribution in dorny/paths-filter#278

Full Changelog: dorny/paths-filter@v4.0.1...v4.0.2

Changelog

Sourced from dorny/paths-filter's changelog.

Changelog

v4.0.2

Work around git dubious ownership errors in container jobs

Use rev-parse instead of branch --show-current for older git compat

Fix warning message

v4.0.1

Support merge queue

v4.0.0

Update action runtime to node24

v3.0.3

Add missing predicate-quantifier

v3.0.2

Add config parameter for predicate quantifier

v3.0.1

Compare base and ref when token is empty

v3.0.0

Update to Node.js 20

Update all dependencies

v2.11.1

Update @actions/core to v1.10.0 - Fixes warning about deprecated set-output

Document need for pull-requests: read permission

Updating to actions/checkout@v3

v2.11.0

Set list-files input parameter as not required

Update Node.js

Fix incorrect handling of Unicode characters in exec()

Use Octokit pagination

Updates real world links

v2.10.2

Fix getLocalRef() returns wrong ref

v2.10.1

Improve robustness of change detection

v2.10.0

Add ref input parameter

Fix change detection in PR when pullRequest.changed_files is incorrect

v2.9.3

Fix change detection when base is a tag

... (truncated)

Commits

7b450ff docs: update changelog for v4.0.2 (#318)
9280377 fix: work around git dubious ownership errors in container jobs (#317)
f3ceefd fix: use rev-parse instead of branch --show-current for older git compat (#303)
61f87a1 chore: fix GitHub spelling in logs (#278)
b82ff81 fix warning message (#282)
See full diff in compare view

Updates actions/attest-build-provenance from 4.1.0 to 4.1.1

Release notes

Sourced from actions/attest-build-provenance's releases.

v4.1.1

[!NOTE] As of version 4, actions/attest-build-provenance is simply a wrapper on top of actions/attest.

Existing applications may continue to use the attest-build-provenance action, but new implementations should use actions/attest instead.

What's Changed

Update actions/attest to v4.1.1 by @bdehamer in actions/attest-build-provenance#858

Full Changelog: actions/attest-build-provenance@v4.1.0...v4.1.1

Commits

0f67c3f Bump actions/checkout from 6.0.3 to 7.0.0 (#857)
21b787d Update actions/attest to v4.1.1 (#858)
f14352a add dependabot cooldown (#851)
2c04a00 Bump actions/checkout from 6.0.2 to 6.0.3 in the actions-minor group (#850)
10334b5 remove badges from README (#840)
c5efebd remove prober workflows (#837)
See full diff in compare view

Updates softprops/action-gh-release from 3.0.1 to 3.0.2

Release notes

Sourced from softprops/action-gh-release's releases.

v3.0.2

3.0.2 is a patch release focused on release reliability and compatibility. It reuses existing draft releases when publishing prereleases, supports replacing release assets on Gitea, hardens streamed asset uploads, and provides clearer release-creation diagnostics. It also includes TypeScript, coverage, and tooling maintenance merged since 3.0.1.

This release fixes #795, #438, and #803. The upload transport hardening covers the historical failure reported in #790, although current hosted Node 24 runners did not reproduce it naturally. The diagnostics work is related to #786 and does not claim a reproducible release-creation fix.

What's Changed

Exciting New Features 🎉

feat: improve release error reporting and test coverage by @chenrui333 in softprops/action-gh-release#813

Bug fixes 🐛

fix: publish existing draft releases as prereleases by @godfengliang in softprops/action-gh-release#801

fix: upload small checksum assets reliably by @chenrui333 in softprops/action-gh-release#815

fix: replace existing release assets on Gitea by @chenrui333 in softprops/action-gh-release#816

fix: clarify release creation 404 errors by @chenrui333 in softprops/action-gh-release#817

Other Changes 🔄

chore(deps): upgrade TypeScript to 7 by @chenrui333 in softprops/action-gh-release#812

chore(deps): remove unused TypeScript tooling by @chenrui333 in softprops/action-gh-release#814

dependency, Node 24 pin, and CI maintenance merged since 3.0.1

Changelog

Sourced from softprops/action-gh-release's changelog.

3.0.2

3.0.2 is a patch release focused on release reliability and compatibility. It reuses existing draft releases when publishing prereleases, supports replacing release assets on Gitea, hardens streamed asset uploads, and provides clearer release-creation diagnostics. It also includes TypeScript, coverage, and tooling maintenance merged since 3.0.1.

This release fixes #795, #438, and #803. The upload transport hardening covers the historical failure reported in #790, although current hosted Node 24 runners did not reproduce it naturally. The diagnostics work is related to #786 and does not claim a reproducible release-creation fix.

What's Changed

Exciting New Features 🎉

feat: improve release error reporting and test coverage by @chenrui333 in softprops/action-gh-release#813

Bug fixes 🐛

fix: publish existing draft releases as prereleases by @godfengliang in softprops/action-gh-release#801

fix: upload small checksum assets reliably by @chenrui333 in softprops/action-gh-release#815

fix: replace existing release assets on Gitea by @chenrui333 in softprops/action-gh-release#816

fix: clarify release creation 404 errors by @chenrui333 in softprops/action-gh-release#817

Other Changes 🔄

chore(deps): upgrade TypeScript to 7 by @chenrui333 in softprops/action-gh-release#812

chore(deps): remove unused TypeScript tooling by @chenrui333 in softprops/action-gh-release#814

dependency, Node 24 pin, and CI maintenance merged since 3.0.1

3.0.1

maintenance release with updated dependencies

3.0.0

3.0.0 is a major release that moves the action runtime from Node 20 to Node 24. Use v3 on GitHub-hosted runners and self-hosted fleets that already support the Node 24 Actions runtime. v2.6.2 was the final Node 20-compatible release and is no longer maintained or supported.

What's Changed

Other Changes 🔄

Move the action runtime and bundle target to Node 24

Update @types/node to the Node 24 line and allow future Dependabot updates

Keep the floating major tag on v3; freeze v2 at the final v2.6.2 release

... (truncated)

Commits

3d0d988 release 3.0.2 (#818)
7e13ed4 fix: clarify release creation 404 errors (#817)
e6c70a5 fix: replace existing release assets on Gitea (#816)
f345337 fix: publish existing draft releases as prereleases (#801)
d8a89a2 fix: upload small checksum assets reliably (#815)
45ece40 chore(deps): remove unused TypeScript tooling (#814)
f6b913c feat: improve release error reporting and test coverage (#813)
15f193d chore(deps): upgrade TypeScript to 7 (#812)
cc8268d chore(deps): bump actions/checkout in the github-actions group (#810)
fd0ed1e chore(deps): bump the npm group with 3 updates (#811)
Additional commits viewable in compare view

Updates denoland/setup-deno from 2.0.4 to 2.0.5

Release notes

Sourced from denoland/setup-deno's releases.

v2.0.5

What's Changed

fix: update README and tests by @crowlKats in denoland/setup-deno#85

2.0.1 by @crowlKats in denoland/setup-deno#86

Add problem matchers for deno lint by @r7kamura in denoland/setup-deno#62

refactor: use GitHub downloads for stable version download by @crowlKats in denoland/setup-deno#91

2.0.2 by @crowlKats in denoland/setup-deno#92

refactor: convert action to TS and bundle code by @csvn in denoland/setup-deno#95

feat: add "lts" version option by @sebdanielsson in denoland/setup-deno#97

feat: add built-in caching via inputs by @csvn in denoland/setup-deno#89

feat: include a hash of deno.lock files in the cache key automatically by @dsherret in denoland/setup-deno#98

fix: switch back to package.json as it's necessary for GH actions by @dsherret in denoland/setup-deno#101

2.0.3 by @crowlKats in denoland/setup-deno#102

Update actions/checkout by @katayama8000 in denoland/setup-deno#106

docs: add lts as possible release-channel output by @csvn in denoland/setup-deno#99

docs: condense Deno version information in one section by @csvn in denoland/setup-deno#100

docs: fix identifier for latest stable release by @Ms2ger in denoland/setup-deno#115

feat: upgrade Node.js runtime from node20 to node24 by @nikicat in denoland/setup-deno#123

2.0.4 by @crowlKats in denoland/setup-deno#125

chore: use versions.json from dl.deno.land by @crowlKats in denoland/setup-deno#130

2.0.5 by @crowlKats in denoland/setup-deno#131

New Contributors

@r7kamura made their first contribution in denoland/setup-deno#62

@csvn made their first contribution in denoland/setup-deno#95

@sebdanielsson made their first contribution in denoland/setup-deno#97

@katayama8000 made their first contribution in denoland/setup-deno#106

@Ms2ger made their first contribution in denoland/setup-deno#115

@nikicat made their first contribution in denoland/setup-deno#123

Full Changelog: denoland/setup-deno@v2.0.0...v2.0.5

Commits

22d081f 2.0.5 (#131)
28c677f chore: use versions.json from dl.deno.land (#130)
ff4860f 2.0.4 (#125)
6a293fc feat: upgrade Node.js runtime from node20 to node24 (#123)
390061a docs: fix identifier for latest stable release (#115)
bdaa2e4 docs: condense Deno version information in one section (#100)
e4ff81c docs: add lts as possible release-channel output (#99)
bac1f72 Update actions/checkout (#106)
2f7698f 2.0.3 (#102)
ee64dd3 fix: switch back to package.json as it's necessary for GH actions (#101)
Additional commits viewable in compare view

Updates mitchellh/vouch/action/check-pr from 1.4.2 to 1.5.0

Release notes

Sourced from mitchellh/vouch/action/check-pr's releases.

v1.5.0

What's New

Improvements

-action/check-issue has a new option auto-lock to automatically lock closed issues. (#90)

gh-manage-by-discussion supports numerical IDs. (#77)

Commits

d66fa29 Merge pull request #93 from mitchellh/dependabot/github_actions/actions/check...
c22b93d Bump actions/checkout from 6.0.2 to 7.0.0
baeb3bf Merge pull request #90 from trag1c/lock-issues
52aec3d add an option to lock closed issues
3dbc69c Merge pull request #87 from freepicheep/example-attribute
a693346 Update VOUCHED list
21177c0 Merge pull request #74 from pavelzw/vouch-cli
527cdc3 Merge pull request #81 from mitchellh/dependabot/github_actions/hustcer/setup...
1895e9c feat: use @example attribute for command examples
8c80ada Update README
Additional commits viewable in compare view

Updates mitchellh/vouch/action/manage-by-issue from 1.4.2 to 1.5.0

Release notes

Sourced from mitchellh/vouch/action/manage-by-issue's releases.

v1.5.0

What's New

Improvements

-action/check-issue has a new option auto-lock to automatically lock closed issues. (#90)

gh-manage-by-discussion supports numerical IDs. (#77)

Commits

d66fa29 Merge pull request #93 from mitchellh/dependabot/github_actions/actions/check...
c22b93d Bump actions/checkout from 6.0.2 to 7.0.0
baeb3bf Merge pull request #90 from trag1c/lock-issues
52aec3d add an option to lock closed issues
3dbc69c Merge pull request #87 from freepicheep/example-attribute
a693346 Update VOUCHED list
21177c0 Merge pull request #74 from pavelzw/vouch-cli
527cdc3 Merge pull request #81 from mitchellh/dependabot/github_actions/hustcer/setup...
1895e9c feat: use @example attribute for command examples
8c80ada Update README
Additional commits viewable in compare view

Updates zizmorcore/zizmor-action from 0.5.7 to 0.6.0

Release notes

Sourced from zizmorcore/zizmor-action's releases.

v0.6.0

zizmor 1.27.0 is now the default version used by the action.

What's Changed

Fold Docker image pull output into a collapsed Actions log group by @woodruffw with @Copilot in zizmorcore/zizmor-action#132

Readme: document missing inputs by @staabm in zizmorcore/zizmor-action#130

ci: block version sync workflow on forks by @shaanmajid in zizmorcore/zizmor-action#129

Sync zizmor versions by @github-actions[bot] in zizmorcore/zizmor-action#137

Add collect input by @woodruffw in zizmorcore/zizmor-action#139

New Contributors

@woodruffw with @Copilot made their first contribution in zizmorcore/zizmor-action#132

@staabm made their first contribution in zizmorcore/zizmor-action#130

@shaanmajid made their first contribution in zizmorcore/zizmor-action#129

Full Changelog: zizmorcore/zizmor-action@v0.5.7...v0.6.0

Commits

6599ee8 Add collect input (#139)
bec05c8 Sync zizmor versions (#137)
cf59549 Add issue templates (

… updates Bumps the github-actions group with 11 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/setup-node](https://github.com/actions/setup-node) | `6.4.0` | `7.0.0` | | [anthropics/claude-code-action](https://github.com/anthropics/claude-code-action) | `1.0.157` | `1.0.175` | | [slackapi/slack-github-action](https://github.com/slackapi/slack-github-action) | `3.0.3` | `4.0.0` | | [docker/login-action](https://github.com/docker/login-action) | `4.2.0` | `4.4.0` | | [dorny/paths-filter](https://github.com/dorny/paths-filter) | `4.0.1` | `4.0.2` | | [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance) | `4.1.0` | `4.1.1` | | [softprops/action-gh-release](https://github.com/softprops/action-gh-release) | `3.0.1` | `3.0.2` | | [denoland/setup-deno](https://github.com/denoland/setup-deno) | `2.0.4` | `2.0.5` | | [mitchellh/vouch/action/check-pr](https://github.com/mitchellh/vouch) | `1.4.2` | `1.5.0` | | [mitchellh/vouch/action/manage-by-issue](https://github.com/mitchellh/vouch) | `1.4.2` | `1.5.0` | | [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action) | `0.5.7` | `0.6.0` | Updates `actions/setup-node` from 6.4.0 to 7.0.0 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](actions/setup-node@48b55a0...8207627) Updates `anthropics/claude-code-action` from 1.0.157 to 1.0.175 - [Release notes](https://github.com/anthropics/claude-code-action/releases) - [Commits](anthropics/claude-code-action@428971d...1298632) Updates `slackapi/slack-github-action` from 3.0.3 to 4.0.0 - [Release notes](https://github.com/slackapi/slack-github-action/releases) - [Changelog](https://github.com/slackapi/slack-github-action/blob/main/CHANGELOG.md) - [Commits](slackapi/slack-github-action@45a88b9...dcb1066) Updates `docker/login-action` from 4.2.0 to 4.4.0 - [Release notes](https://github.com/docker/login-action/releases) - [Commits](docker/login-action@650006c...af1e73f) Updates `dorny/paths-filter` from 4.0.1 to 4.0.2 - [Release notes](https://github.com/dorny/paths-filter/releases) - [Changelog](https://github.com/dorny/paths-filter/blob/master/CHANGELOG.md) - [Commits](dorny/paths-filter@fbd0ab8...7b450ff) Updates `actions/attest-build-provenance` from 4.1.0 to 4.1.1 - [Release notes](https://github.com/actions/attest-build-provenance/releases) - [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md) - [Commits](actions/attest-build-provenance@a2bbfa2...0f67c3f) Updates `softprops/action-gh-release` from 3.0.1 to 3.0.2 - [Release notes](https://github.com/softprops/action-gh-release/releases) - [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md) - [Commits](softprops/action-gh-release@718ea10...3d0d988) Updates `denoland/setup-deno` from 2.0.4 to 2.0.5 - [Release notes](https://github.com/denoland/setup-deno/releases) - [Commits](denoland/setup-deno@667a34c...22d081f) Updates `mitchellh/vouch/action/check-pr` from 1.4.2 to 1.5.0 - [Release notes](https://github.com/mitchellh/vouch/releases) - [Commits](mitchellh/vouch@c6d80ea...d66fa29) Updates `mitchellh/vouch/action/manage-by-issue` from 1.4.2 to 1.5.0 - [Release notes](https://github.com/mitchellh/vouch/releases) - [Commits](mitchellh/vouch@c6d80ea...d66fa29) Updates `zizmorcore/zizmor-action` from 0.5.7 to 0.6.0 - [Release notes](https://github.com/zizmorcore/zizmor-action/releases) - [Commits](zizmorcore/zizmor-action@192e21d...6599ee8) --- updated-dependencies: - dependency-name: actions/setup-node dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: anthropics/claude-code-action dependency-version: 1.0.175 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: slackapi/slack-github-action dependency-version: 4.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: docker/login-action dependency-version: 4.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: dorny/paths-filter dependency-version: 4.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: actions/attest-build-provenance dependency-version: 4.1.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: softprops/action-gh-release dependency-version: 3.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: denoland/setup-deno dependency-version: 2.0.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: mitchellh/vouch/action/check-pr dependency-version: 1.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: mitchellh/vouch/action/manage-by-issue dependency-version: 1.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: zizmorcore/zizmor-action dependency-version: 0.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com>

changeset-bot · 2026-07-22T13:29:18Z

⚠️ No Changeset found

Latest commit: ad731ab

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

      - name: Create GitHub Release
        id: release
-        uses: softprops/action-gh-release@718ea10b132b3b2eba29c1007bb80653f286566b # v3.0.1
+        uses: softprops/action-gh-release@3d0d9888cb7fd7b750713d6e236d1fcb99157228 # v3.0.2


devin-ai-integration

✅ Devin Review: No Issues Found

Devin Review analyzed this PR and found no bugs or issues to report.

dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jul 22, 2026

github-advanced-security AI found potential problems Jul 22, 2026

View reviewed changes

Comment thread .github/workflows/release-helm.yml

- name: Create GitHub Release

id: release

uses: softprops/action-gh-release@718ea10b132b3b2eba29c1007bb80653f286566b # v3.0.1

uses: softprops/action-gh-release@3d0d9888cb7fd7b750713d6e236d1fcb99157228 # v3.0.2

devin-ai-integration Bot reviewed Jul 22, 2026

View reviewed changes

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

chore(deps): bump the github-actions group across 1 directory with 11 updates#4340

chore(deps): bump the github-actions group across 1 directory with 11 updates#4340
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-6883c06087

dependabot Bot commented on behalf of github Jul 22, 2026

Uh oh!

changeset-bot Bot commented Jul 22, 2026

Uh oh!

devin-ai-integration Bot left a comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 22, 2026

v7.0.0

What's Changed

Enhancements:

Bug fixes:

Documentation updates:

Dependency update:

New Contributors

v6.5.0

What's Changed

v1.0.175

v1.0.174

What's Changed

New Contributors

v1.0.173

v1.0.172

What's Changed

v1.0.171

v1.0.170

v1.0.169

v1.0.168

v1.0.167

v1.0.166

What's Changed

New Contributors

Slack GitHub Action v4.0.0

Major Changes

Patch Changes

Slack GitHub Action v3.0.5

Patch Changes

Slack GitHub Action v3.0.4

Patch Changes

slack-github-action

4.0.0

Major Changes

Patch Changes

3.0.5

Patch Changes

3.0.4

Patch Changes

3.0.3

Patch Changes

3.0.2

Patch Changes

v4.4.0

v4.3.0

v4.0.2

What's Changed

New Contributors

Changelog

v4.0.2

v4.0.1

v4.0.0

v3.0.3

v3.0.2

v3.0.1

v3.0.0

v2.11.1

v2.11.0

v2.10.2

v2.10.1

v2.10.0

v2.9.3

v4.1.1

What's Changed

v3.0.2

What's Changed

Exciting New Features 🎉

Bug fixes 🐛

Other Changes 🔄

3.0.2

What's Changed

Exciting New Features 🎉

Bug fixes 🐛

Other Changes 🔄

3.0.1

3.0.0