Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 27, 2025

Bumps the gha-all-dependencies group with 17 updates in the / directory:

Package From To
actions/checkout 4.2.2 5.0.0
aws-actions/configure-aws-credentials 4.2.1 5.1.0
actions/setup-java 4.7.1 5.0.0
gradle/actions 4.4.1 5.0.0
actions/upload-artifact 4.6.2 5.0.0
actions/download-artifact 5.0.0 6.0.0
tj-actions/changed-files 3b04099b21072562f07469c10deb182b24236ca9 dbf178ceecb9304128c8e0648591d71208c6e2c9
peter-evans/find-comment 3.1.0 4.0.0
peter-evans/create-or-update-comment 4.0.0 5.0.0
bridgecrewio/checkov-action 12.3056.0 12.3068.0
github/codeql-action 3.30.0 4.31.0
actions/dependency-review-action 4.7.3 4.8.1
aws-actions/setup-sam f664fad9e12492edfc187a31f575537dfbb0ff63 c71dd89d980e49367c70391e8ada4353f52f2800
govuk-one-login/devplatform-upload-action 3.10.1 3.11.0
actions/setup-python 5.6.0 6.0.0
actions/cache 4.2.4 4.3.0
zgosalvez/github-actions-ensure-sha-pinned-actions 3.0.25 4.0.0

Updates actions/checkout from 4.2.2 to 5.0.0

Release notes

Sourced from actions/checkout's releases.

v5.0.0

What's Changed

⚠️ Minimum Compatible Runner Version

v2.327.1
Release Notes

Make sure your runner is updated to this version or newer to use this release.

Full Changelog: actions/checkout@v4...v5.0.0

v4.3.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v4...v4.3.0

Changelog

Sourced from actions/checkout's changelog.

Changelog

V5.0.0

V4.3.0

v4.2.2

v4.2.1

v4.2.0

v4.1.7

v4.1.6

v4.1.5

v4.1.4

v4.1.3

... (truncated)

Commits

Updates aws-actions/configure-aws-credentials from 4.2.1 to 5.1.0

Release notes

Sourced from aws-actions/configure-aws-credentials's releases.

v5.1.0

5.1.0 (2025-10-06)

Features

Bug Fixes

v5.0.0

5.0.0 (2025-09-03)

⚠ BREAKING CHANGES

  • Cleanup input handling. Changes invalid boolean input behavior (see #1445)

Features

v4.3.1

4.3.1 (2025-08-04)

Bug Fixes

v4.3.0

4.3.0 (2025-08-04)

NOTE: This release tag originally pointed to 59b441846ad109fa4a1549b73ef4e149c4bfb53b, but a critical bug was discovered shortly after publishing. We updated this tag to d0834ad3a60a024346910e522a81b0002bd37fea to prevent anyone using the 4.3.0 tag from encountering the bug, and we published 4.3.1 to allow workflows to auto update correctly.

Features

Bug Fixes

... (truncated)

Changelog

Sourced from aws-actions/configure-aws-credentials's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

5.1.0 (2025-10-06)

Features

Bug Fixes

5.0.0 (2025-09-03)

⚠ BREAKING CHANGES

  • Cleanup input handling. Changes invalid boolean input behavior (see #1445)

Features

4.3.1 (2025-08-04)

Bug Fixes

4.3.0 (2025-08-04)

Features

Bug Fixes

  • docs: readme samples versioning (5b3c895)

... (truncated)

Commits
  • 0094301 chore(main): release 5.1.0 (#1483)
  • e381dc3 chore(deps-dev): bump @​vercel/ncc from 0.38.3 to 0.38.4 (#1500)
  • 031a65b chore(deps-dev): bump del-cli from 6.0.0 to 7.0.0 (#1497)
  • 9efe715 chore: Update dist
  • 6bbafa6 chore(deps-dev): bump @​aws-sdk/credential-provider-env (#1502)
  • 4c879b4 chore(deps-dev): bump @​types/node from 24.5.0 to 24.6.0 (#1503)
  • fb52c69 chore(deps-dev): bump memfs from 4.39.0 to 4.47.0 (#1504)
  • f226b05 chore: Update dist
  • be2cf0c chore(deps): bump @​aws-sdk/client-sts from 3.888.0 to 3.899.0 (#1501)
  • 0be22f9 chore: Update dist
  • Additional commits viewable in compare view

Updates actions/setup-java from 4.7.1 to 5.0.0

Release notes

Sourced from actions/setup-java's releases.

v5.0.0

What's Changed

Breaking Changes

Make sure your runner is updated to this version or newer to use this release. v2.327.1 Release Notes

Dependency Upgrades

Bug Fixes

New Contributors

Full Changelog: actions/setup-java@v4...v5.0.0

Commits

Updates gradle/actions from 4.4.1 to 5.0.0

Release notes

Sourced from gradle/actions's releases.

v5.0.0

What's Changed

Breaking Changes

Make sure your runner is updated to this version or newer to use this release. v2.327.1 Release Notes

Dependency upgrades

Full Changelog: gradle/actions@v4...v5.0.0

v4.4.4

What's Changed

Full Changelog: gradle/actions@v4...v4.4.4

v4.4.3

What's Changed

... (truncated)

Commits
  • 4d9f0ba Bump the github-actions group across 1 directory with 2 updates (#748)
  • 4b530e3 Bump the github-actions group across 1 directory with 2 updates
  • e60655a Upgrade to node 24 (#721)
  • 748248d Bump the npm-dependencies group in /sources with 5 updates (#745)
  • 81b68c9 Bump com.google.guava:guava from 33.4.8-jre to 33.5.0-jre in /.github/workflo...
  • 1361730 Bump com.google.guava:guava
  • a86ac11 Bump the npm-dependencies group in /sources with 5 updates
  • 182e4d3 [bot] Update dist directory
  • a48a0fa Update known wrapper checksums (#743)
  • 6d7d019 Update known wrapper checksums
  • Additional commits viewable in compare view

Updates actions/upload-artifact from 4.6.2 to 5.0.0

Release notes

Sourced from actions/upload-artifact's releases.

v5.0.0

What's Changed

BREAKING CHANGE: this update supports Node v24.x. This is not a breaking change per-se but we're treating it as such.

New Contributors

Full Changelog: actions/upload-artifact@v4...v5.0.0

Commits
  • 330a01c Merge pull request #734 from actions/danwkennedy/prepare-5.0.0
  • 03f2824 Update github.dep.yml
  • 905a1ec Prepare v5.0.0
  • 2d9f9cd Merge pull request #725 from patrikpolyak/patch-1
  • 9687587 Merge branch 'main' into patch-1
  • 2848b2c Merge pull request #727 from danwkennedy/patch-1
  • 9b51177 Spell out the first use of GHES
  • cd231ca Update GHES guidance to include reference to Node 20 version
  • de65e23 Merge pull request #712 from actions/nebuk89-patch-1
  • 8747d8c Update README.md
  • Additional commits viewable in compare view

Updates actions/download-artifact from 5.0.0 to 6.0.0

Release notes

Sourced from actions/download-artifact's releases.

v6.0.0

What's Changed

BREAKING CHANGE: this update supports Node v24.x. This is not a breaking change per-se but we're treating it as such.

New Contributors

Full Changelog: actions/download-artifact@v5...v6.0.0

Commits
  • 018cc2c Merge pull request #438 from actions/danwkennedy/prepare-6.0.0
  • 815651c Revert "Remove github.dep.yml"
  • bb3a066 Remove github.dep.yml
  • fa1ce46 Prepare v6.0.0
  • 4a24838 Merge pull request #431 from danwkennedy/patch-1
  • 5e3251c Readme: spell out the first use of GHES
  • abefc31 Merge pull request #424 from actions/yacaovsnc/update_readme
  • ac43a60 Update README with artifact extraction details
  • de96f46 Merge pull request #417 from actions/yacaovsnc/update_readme
  • 7993cb4 Remove migration guide for artifact download changes
  • Additional commits viewable in compare view

Updates tj-actions/changed-files from 3b04099b21072562f07469c10deb182b24236ca9 to dbf178ceecb9304128c8e0648591d71208c6e2c9

Changelog

Sourced from tj-actions/changed-files's changelog.

Changelog

47.0.0 - (2025-09-13)

🚀 Features

➖ Remove

  • Commit and push step from build job (#2538) (be393a9) - (Tonye Jack)

🔄 Update

  • Updated README.md (#2592)

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@​users.noreply.github.com> (3dbc1e1) - (github-actions[bot])

  • Updated README.md (#2591)

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@​users.noreply.github.com> (b1ccff8) - (github-actions[bot])

  • Updated README.md (#2574)

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@​users.noreply.github.com> (050a3d3) - (github-actions[bot])

📚 Documentation

  • Update link to glob patterns (#2590) (a892f50) - (Tonye Jack)
  • Add Jellyfrog as a contributor for code, and doc (#2573) (f000a9b) - (allcontributors[bot])

🧪 Testing

  • Manual triggered workflows (#2637) (c2ca249) - (Tonye Jack)

⚙️ Miscellaneous Tasks

  • deps-dev: Bump jest from 30.0.5 to 30.1.3 (#2655) (9a67555) - (dependabot[bot])
  • deps: Bump tj-actions/git-cliff from 2.1.0 to 2.2.0 (#2660) (b67e30d) - (dependabot[bot])
  • deps: Bump github/codeql-action from 3.30.2 to 3.30.3 (#2661) (62aef42) - (dependabot[bot])
  • deps: Bump github/codeql-action from 3.29.11 to 3.30.2 (#2659) (e874f3c) - (dependabot[bot])
  • deps: Bump actions/setup-node from 4.4.0 to 5.0.0 (#2656) (8c14441) - (dependabot[bot])
  • deps-dev: Bump @​types/node from 24.3.0 to 24.3.1 (#2657) (e995ac4) - (dependabot[bot])
  • deps-dev: Bump @​types/node from 24.2.1 to 24.3.0 (#2649) (3b04099) - (dependabot[bot])
  • deps: Bump github/codeql-action from 3.29.9 to 3.29.11 (#2651) (e7b6c97) - (dependabot[bot])
  • deps: Bump tj-actions/git-cliff from 2.0.2 to 2.1.0 (#2648) (765d62b) - (dependabot[bot])
  • deps: Bump github/codeql-action from 3.29.8 to 3.29.9 (#2647) (2036da1) - (dependabot[bot])
  • deps: Bump github/codeql-action from 3.29.7 to 3.29.8 (#2644) (239aef8) - (dependabot[bot])
  • deps-dev: Bump @​types/node from 24.2.0 to 24.2.1 (#2645) (a7d5f5f) - (dependabot[bot])
  • deps: Bump actions/checkout from 4.2.2 to 5.0.0 (#2646) (5107f3a) - (dependabot[bot])
  • deps-dev: Bump @​types/node from 24.1.0 to 24.2.0 (#2640) (f963b3f) - (dependabot[bot])
  • deps: Bump actions/download-artifact from 4.3.0 to 5.0.0 (#2641) (f956744) - (dependabot[bot])

... (truncated)

Commits
  • dbf178c chore(deps): bump actions/setup-node from 5.0.0 to 6.0.0 (#2690)
  • 1900262 chore(deps): bump github/codeql-action from 3.30.6 to 4.30.9 (#2693)
  • 27e5d78 chore(deps-dev): bump @​types/node from 24.6.2 to 24.9.1 (#2695)
  • d03a93c chore(deps): bump github/codeql-action from 3.30.5 to 3.30.6 (#2680)
  • df9aabc chore(deps-dev): bump @​types/node from 24.6.1 to 24.6.2 (#2681)
  • d6f020b chore(deps-dev): bump @​types/node from 24.5.2 to 24.6.1 (#2679)
  • 212f9a7 chore(deps-dev): bump jest from 30.1.3 to 30.2.0 (#2677)
  • 0dc2215 chore(deps): bump github/codeql-action from 3.30.4 to 3.30.5 (#2676)
  • 28cf3ad chore(deps-dev): bump ts-jest from 29.4.3 to 29.4.4 (#2672)
  • 0b7adf7 chore(deps): bump github/codeql-action from 3.30.3 to 3.30.4 (#2675)
  • Additional commits viewable in compare view

Updates peter-evans/find-comment from 3.1.0 to 4.0.0

Release notes

Sourced from peter-evans/find-comment's releases.

Find Comment v4.0.0

⚙️ Requires Actions Runner v2.327.1 or later if you are using a self-hosted runner for Node 24 support.

What's Changed

@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Oct 27, 2025
@dependabot dependabot bot requested review from a team as code owners October 27, 2025 08:30
@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Oct 27, 2025
@github-actions
Copy link

Java Tests Skipped

No Java files were changed in this pull request. Java tests will be skipped1.

Any Java files that are changed in a subsequent commit will trigger the Java tests.

Footnotes

  1. These tests will still show as passing in the PR status check, but will not actually have run.

…pdates

Bumps the gha-all-dependencies group with 17 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `4.2.2` | `5.0.0` |
| [aws-actions/configure-aws-credentials](https://github.com/aws-actions/configure-aws-credentials) | `4.2.1` | `5.1.0` |
| [actions/setup-java](https://github.com/actions/setup-java) | `4.7.1` | `5.0.0` |
| [gradle/actions](https://github.com/gradle/actions) | `4.4.1` | `5.0.0` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4.6.2` | `5.0.0` |
| [actions/download-artifact](https://github.com/actions/download-artifact) | `5.0.0` | `6.0.0` |
| [tj-actions/changed-files](https://github.com/tj-actions/changed-files) | `3b04099b21072562f07469c10deb182b24236ca9` | `dbf178ceecb9304128c8e0648591d71208c6e2c9` |
| [peter-evans/find-comment](https://github.com/peter-evans/find-comment) | `3.1.0` | `4.0.0` |
| [peter-evans/create-or-update-comment](https://github.com/peter-evans/create-or-update-comment) | `4.0.0` | `5.0.0` |
| [bridgecrewio/checkov-action](https://github.com/bridgecrewio/checkov-action) | `12.3056.0` | `12.3068.0` |
| [github/codeql-action](https://github.com/github/codeql-action) | `3.30.0` | `4.31.0` |
| [actions/dependency-review-action](https://github.com/actions/dependency-review-action) | `4.7.3` | `4.8.1` |
| [aws-actions/setup-sam](https://github.com/aws-actions/setup-sam) | `f664fad9e12492edfc187a31f575537dfbb0ff63` | `c71dd89d980e49367c70391e8ada4353f52f2800` |
| [govuk-one-login/devplatform-upload-action](https://github.com/govuk-one-login/devplatform-upload-action) | `3.10.1` | `3.11.0` |
| [actions/setup-python](https://github.com/actions/setup-python) | `5.6.0` | `6.0.0` |
| [actions/cache](https://github.com/actions/cache) | `4.2.4` | `4.3.0` |
| [zgosalvez/github-actions-ensure-sha-pinned-actions](https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions) | `3.0.25` | `4.0.0` |



Updates `actions/checkout` from 4.2.2 to 5.0.0
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v4.2.2...08c6903)

Updates `aws-actions/configure-aws-credentials` from 4.2.1 to 5.1.0
- [Release notes](https://github.com/aws-actions/configure-aws-credentials/releases)
- [Changelog](https://github.com/aws-actions/configure-aws-credentials/blob/main/CHANGELOG.md)
- [Commits](aws-actions/configure-aws-credentials@v4.2.1...0094301)

Updates `actions/setup-java` from 4.7.1 to 5.0.0
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](actions/setup-java@v4.7.1...dded088)

Updates `gradle/actions` from 4.4.1 to 5.0.0
- [Release notes](https://github.com/gradle/actions/releases)
- [Commits](gradle/actions@v4.4.1...4d9f0ba)

Updates `actions/upload-artifact` from 4.6.2 to 5.0.0
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@ea165f8...330a01c)

Updates `actions/download-artifact` from 5.0.0 to 6.0.0
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](actions/download-artifact@634f93c...018cc2c)

Updates `tj-actions/changed-files` from 3b04099b21072562f07469c10deb182b24236ca9 to dbf178ceecb9304128c8e0648591d71208c6e2c9
- [Release notes](https://github.com/tj-actions/changed-files/releases)
- [Changelog](https://github.com/tj-actions/changed-files/blob/main/HISTORY.md)
- [Commits](tj-actions/changed-files@3b04099...dbf178c)

Updates `peter-evans/find-comment` from 3.1.0 to 4.0.0
- [Release notes](https://github.com/peter-evans/find-comment/releases)
- [Commits](peter-evans/find-comment@3eae4d3...b30e6a3)

Updates `peter-evans/create-or-update-comment` from 4.0.0 to 5.0.0
- [Release notes](https://github.com/peter-evans/create-or-update-comment/releases)
- [Commits](peter-evans/create-or-update-comment@71345be...e8674b0)

Updates `bridgecrewio/checkov-action` from 12.3056.0 to 12.3068.0
- [Release notes](https://github.com/bridgecrewio/checkov-action/releases)
- [Commits](bridgecrewio/checkov-action@7bd1adb...197d539)

Updates `github/codeql-action` from 3.30.0 to 4.31.0
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@2d92b76...4e94bd1)

Updates `actions/dependency-review-action` from 4.7.3 to 4.8.1
- [Release notes](https://github.com/actions/dependency-review-action/releases)
- [Commits](actions/dependency-review-action@595b5ae...40c09b7)

Updates `aws-actions/setup-sam` from f664fad9e12492edfc187a31f575537dfbb0ff63 to c71dd89d980e49367c70391e8ada4353f52f2800
- [Release notes](https://github.com/aws-actions/setup-sam/releases)
- [Commits](aws-actions/setup-sam@f664fad...c71dd89)

Updates `govuk-one-login/devplatform-upload-action` from 3.10.1 to 3.11.0
- [Release notes](https://github.com/govuk-one-login/devplatform-upload-action/releases)
- [Commits](govuk-one-login/devplatform-upload-action@v3.10.1...fda7561)

Updates `actions/setup-python` from 5.6.0 to 6.0.0
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](actions/setup-python@a26af69...e797f83)

Updates `actions/cache` from 4.2.4 to 4.3.0
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](actions/cache@0400d5f...0057852)

Updates `zgosalvez/github-actions-ensure-sha-pinned-actions` from 3.0.25 to 4.0.0
- [Release notes](https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/releases)
- [Commits](zgosalvez/github-actions-ensure-sha-pinned-actions@fc87bb5...9e9574e)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gha-all-dependencies
- dependency-name: aws-actions/configure-aws-credentials
  dependency-version: 5.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gha-all-dependencies
- dependency-name: actions/setup-java
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gha-all-dependencies
- dependency-name: gradle/actions
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gha-all-dependencies
- dependency-name: actions/upload-artifact
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gha-all-dependencies
- dependency-name: actions/download-artifact
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gha-all-dependencies
- dependency-name: tj-actions/changed-files
  dependency-version: dbf178ceecb9304128c8e0648591d71208c6e2c9
  dependency-type: direct:production
  dependency-group: gha-all-dependencies
- dependency-name: peter-evans/find-comment
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gha-all-dependencies
- dependency-name: peter-evans/create-or-update-comment
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gha-all-dependencies
- dependency-name: bridgecrewio/checkov-action
  dependency-version: 12.3068.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gha-all-dependencies
- dependency-name: github/codeql-action
  dependency-version: 4.31.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gha-all-dependencies
- dependency-name: actions/dependency-review-action
  dependency-version: 4.8.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gha-all-dependencies
- dependency-name: aws-actions/setup-sam
  dependency-version: c71dd89d980e49367c70391e8ada4353f52f2800
  dependency-type: direct:production
  dependency-group: gha-all-dependencies
- dependency-name: govuk-one-login/devplatform-upload-action
  dependency-version: 3.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gha-all-dependencies
- dependency-name: actions/setup-python
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gha-all-dependencies
- dependency-name: actions/cache
  dependency-version: 4.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gha-all-dependencies
- dependency-name: zgosalvez/github-actions-ensure-sha-pinned-actions
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gha-all-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/github_actions/main/gha-all-dependencies-2121eb29eb branch from e979d73 to ad1a35a Compare November 3, 2025 08:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant