Skip to content

build(deps): bump the github-actions group with 4 updates - #70

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-7a7cc6bf85
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-7a7cc6bf85

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 9, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the github-actions group with 4 updates: actions/checkout, Azure/setup-azd, azure/docker-login and docker/build-push-action.

Updates actions/checkout from 4.4.0 to 7.0.1

Release notes

Sourced from actions/checkout's releases.

v7.0.1

What's Changed

Full Changelog: actions/checkout@v7...v7.0.1

v7.0.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v6.0.3...v7.0.0

v6.1.0

What's Changed

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: actions/checkout@v6.0.3...v6.1.0

v6.0.3

What's Changed

New Contributors

Full Changelog: actions/checkout@v6...v6.0.3

v6.0.2

What's Changed

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

v7.0.1

v7.0.0

v6.0.3

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

... (truncated)

Commits

Updates Azure/setup-azd from 2.1.0 to 2.4.0

Release notes

Sourced from Azure/setup-azd's releases.

setup-azd_v2.4.0

2.4.0 (2026-08-05)

Features Added

  • [566] Harden azd version installation. The version input is validated before use — accepted values are latest, stable, daily, or a semantic version such as 1.2.3, 1.2.3-beta.1, or 1.2.3+build.5 — and installer scripts are downloaded to an isolated temporary directory and invoked with explicit process arguments instead of a shell command line.

setup-azd_v2.3.0

2.3.0 (2026-04-17)

Breaking Changes

  • [467] Upgrade action runtime from Node.js 20 to Node.js 24 to address the Node.js 20 deprecation on GitHub Actions runners. Bump up GitHub Actions versions used in workflows (actions/checkout@v6, actions/upload-artifact@v7).

setup-azd_v2.2.1

2.2.1 (2025-11-19)

Other Changes

Bump up dependency versions.

setup-azd_v2.2.0

2.2.0 (2025-08-05)

Other Changes

Bump up dependency versions.

Changelog

Sourced from Azure/setup-azd's changelog.

Release History

2.4.0 (2026-08-05)

Features Added

  • [566] Harden azd version installation. The version input is validated before use — accepted values are latest, stable, daily, or a semantic version such as 1.2.3, 1.2.3-beta.1, or 1.2.3+build.5 — and installer scripts are downloaded to an isolated temporary directory and invoked with explicit process arguments instead of a shell command line.

2.3.0 (2026-04-17)

Breaking Changes

  • [467] Upgrade action runtime from Node.js 20 to Node.js 24 to address the Node.js 20 deprecation on GitHub Actions runners. Bump up GitHub Actions versions used in workflows (actions/checkout@v6, actions/upload-artifact@v7).

2.2.1 (2025-11-19)

Other Changes

Bump up dependency versions.

2.2.0 (2025-08-05)

Other Changes

Bump up dependency versions.

2.1.0 (2025-01-25)

Features Added

  • [236] Use installation script to install azd.

2.0.0 (2024-12-18)

Breaking Changes

  • [213] Migrate to new CDN endpoint.

1.0.0 (2024-03-27)

Other Changes

  • [87] Upgrade to NodeJS 20 due to NodeJS 16 deprecation.

0.1.0 (2023-07-12)

Initial public release of the GitHub Action for the Azure Developer CLI.

Commits
  • 0b7e3a3 release 2.4.0 - harden azd version installation (#567)
  • e6951e8 build(deps-dev): bump js-yaml override to ^4.3.0 to fix GHSA-52cp-r559-cp3m (...
  • f5b7aa1 Harden azd version installation (#566)
  • d689624 build(deps): bump undici from 6.27.0 to 6.28.0 (#564)
  • 43b4dc8 build(deps-dev): bump js-yaml from 5.2.2 to 5.2.3 (#565)
  • 3e4a1fc build(deps): bump brace-expansion (#563)
  • 9a1412a build(deps): bump github/codeql-action from 4 to 4.37.4 (#562)
  • 3edef31 build(deps-dev): bump ts-jest from 29.4.11 to 29.4.12 (#558)
  • 56858f6 build(deps-dev): bump js-yaml from 5.2.1 to 5.2.2 (#556)
  • f1416c3 build(deps-dev): bump eslint from 10.7.0 to 10.8.0 (#560)
  • Additional commits viewable in compare view

Updates azure/docker-login from 1.0.1 to 2

Release notes

Sourced from azure/docker-login's releases.

Version 2.0

  • update of Node20
  • update dependencies
Commits
  • 15c4aad Merge pull request #69 from lgmorand/master
  • 8fa230a add node_modules
  • cf67284 action/core => last version
  • 7aabc0a rebuild lock
  • af42a18 fix some npm packages after upgrade to node20
  • 3fe855c Update README.md to use v2
  • f3bf641 Merge pull request #64 from eikooc/master
  • b35be4d Update to nodejs v20
  • 51016b5 Merge pull request #61 from Azure/stephenmichaelf/remove-integration-tests
  • 6a8199f Remove Integration tests.
  • Additional commits viewable in compare view

Updates docker/build-push-action from 4.2.1 to 7.3.0

Release notes

Sourced from docker/build-push-action's releases.

v7.3.0

Full Changelog: docker/build-push-action@v7.2.0...v7.3.0

v7.2.0

Full Changelog: docker/build-push-action@v7.1.0...v7.2.0

v7.1.0

Full Changelog: docker/build-push-action@v7.0.0...v7.1.0

v7.0.0

Full Changelog: docker/build-push-action@v6.19.2...v7.0.0

v6.19.2

... (truncated)

Commits
  • 53b7df9 Merge pull request #1572 from docker/dependabot/npm_and_yarn/docker/actions-t...
  • 154298c [dependabot skip] chore: update generated content
  • cb1238b chore(deps): Bump @​docker/actions-toolkit from 0.91.0 to 0.92.0
  • 24f845d Merge pull request #1566 from docker/dependabot/npm_and_yarn/js-yaml-4.2.0
  • 9c69730 [dependabot skip] chore: update generated content
  • bc3a3a5 Merge pull request #1574 from docker/dependabot/github_actions/aws-actions/co...
  • a82c504 chore(deps): Bump js-yaml from 4.1.1 to 4.3.0
  • 0285a75 Merge pull request #1573 from docker/dependabot/github_actions/actions/cache-...
  • c6ad2a3 Merge pull request #1575 from docker/dependabot/github_actions/actions/checko...
  • d37484f Merge pull request #1564 from docker/dependabot/npm_and_yarn/undici-6.27.0
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the github-actions group with 4 updates: [actions/checkout](https://github.com/actions/checkout), [Azure/setup-azd](https://github.com/azure/setup-azd), [azure/docker-login](https://github.com/azure/docker-login) and [docker/build-push-action](https://github.com/docker/build-push-action).


Updates `actions/checkout` from 4.4.0 to 7.0.1
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@11d5960...3d3c42e)

Updates `Azure/setup-azd` from 2.1.0 to 2.4.0
- [Release notes](https://github.com/azure/setup-azd/releases)
- [Changelog](https://github.com/Azure/setup-azd/blob/main/CHANGELOG.md)
- [Commits](Azure/setup-azd@ae0f8b5...0b7e3a3)

Updates `azure/docker-login` from 1.0.1 to 2
- [Release notes](https://github.com/azure/docker-login/releases)
- [Commits](Azure/docker-login@83efeb7...15c4aad)

Updates `docker/build-push-action` from 4.2.1 to 7.3.0
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](docker/build-push-action@0a97817...53b7df9)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: Azure/setup-azd
  dependency-version: 2.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: azure/docker-login
  dependency-version: '2'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: docker/build-push-action
  dependency-version: 7.3.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Sep 9, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants