Skip to content

Commit cb772cb

Browse files
dependabot[bot]dependabot[bot]
authored
build(deps): bump the actions group with 4 updates (#12189)
Bumps the actions group with 4 updates: [github/gh-aw/actions/setup-cli](https://github.com/github/gh-aw), [actions/download-artifact](https://github.com/actions/download-artifact), [actions/upload-artifact](https://github.com/actions/upload-artifact) and [actions/setup-node](https://github.com/actions/setup-node). Updates `github/gh-aw/actions/setup-cli` from 0.89.21 to 0.91.3 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/github/gh-aw/releases">github/gh-aw/actions/setup-cli's releases</a>.</em></p> <blockquote> <h2>v0.91.2</h2> <h2>🌟 Release Highlights</h2> <p>This release deepens observability with richer unified agent sessions, and hardens security around secret masking, post-steps, and package scanning.</p> <h3>✨ What's New</h3> <ul> <li><strong>Richer unified agent sessions</strong>: sessions now include split prompts, GitHub API rate limits, and daily AIC decisions, with estimated credits clearly distinguished from recorded usage.</li> <li><strong>Dynamic workflow smoke coverage</strong>: new smoke tests for dynamic workflows (including Claude) and opt-in engine defaults.</li> <li><strong>Wildcard GitHub App repositories</strong> are now allowed explicitly in strict mode.</li> </ul> <h3>🐛 Bug Fixes &amp; Improvements</h3> <ul> <li><strong>Security</strong>: post-steps can no longer create issues directly or access safe-outputs; package resource scanning is file-aware; artifact redaction covers regex-shaped MCP gateway masks; non-writable files are prepared for custom secret masking.</li> <li><strong>Engines</strong>: Pi codemode compatibility and reasoning configuration fixed; Codex code-mode exec disabled for GitHub inference; pinned Node.js versions honored in detection and evals jobs.</li> <li><strong>Reliability</strong>: transient issue-listing failures are retried when publishing essential issues; Copilot session summary fallbacks fixed.</li> <li><strong>Reporting</strong>: engine conversation reports are cleaner with collapsed streamed messages; structured data in safe-output issues is collapsed.</li> <li>MCP gateway updated to v0.4.29.</li> </ul> <blockquote> <p>Generated by <a href="https://github.com/github/gh-aw/actions/runs/37504185059">🚀 Release</a> · copilot · auto · 15.1 AIC · ⊞ 11.6K</p> </blockquote> <!-- raw HTML omitted --> <hr /> <h2>What's Changed</h2> <ul> <li>[docs] docs: unbloat sharing-workflows.md by <a href="https://github.com/github-actions"><code>@​github-actions</code></a>[bot] in <a href="https://redirect.github.com/github/gh-aw/pull/65973">github/gh-aw#65973</a></li> <li>Fix Copilot session summary source fallbacks by <a href="https://github.com/pelikhan"><code>@​pelikhan</code></a> in <a href="https://redirect.github.com/github/gh-aw/pull/65979">github/gh-aw#65979</a></li> <li>Bump source-map-js from 1.2.1 to 1.2.2 in /eslint-factory in the npm_and_yarn group across 1 directory by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/github/gh-aw/pull/65980">github/gh-aw#65980</a></li> <li>Bump the npm_and_yarn group across 1 directory with 4 updates by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/github/gh-aw/pull/65983">github/gh-aw#65983</a></li> <li>Bump the npm_and_yarn group across 1 directory with 2 updates by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/github/gh-aw/pull/65981">github/gh-aw#65981</a></li> <li>[community] Update community contributions in README by <a href="https://github.com/github-actions"><code>@​github-actions</code></a>[bot] in <a href="https://redirect.github.com/github/gh-aw/pull/65994">github/gh-aw#65994</a></li> <li>Include split prompts in the unified agent session by <a href="https://github.com/pelikhan"><code>@​pelikhan</code></a> with <a href="https://github.com/Copilot"><code>@​Copilot</code></a> in <a href="https://redirect.github.com/github/gh-aw/pull/66011">github/gh-aw#66011</a></li> <li>fix: collapse structured data in safe-output issues by <a href="https://github.com/pelikhan"><code>@​pelikhan</code></a> in <a href="https://redirect.github.com/github/gh-aw/pull/66025">github/gh-aw#66025</a></li> <li>Make package resource security scanning file-aware by <a href="https://github.com/pelikhan"><code>@​pelikhan</code></a> with <a href="https://github.com/Copilot"><code>@​Copilot</code></a> in <a href="https://redirect.github.com/github/gh-aw/pull/65961">github/gh-aw#65961</a></li> <li>Honor pinned Node.js versions in detection and evals jobs by <a href="https://github.com/pelikhan"><code>@​pelikhan</code></a> with <a href="https://github.com/Copilot"><code>@​Copilot</code></a> in <a href="https://redirect.github.com/github/gh-aw/pull/66040">github/gh-aw#66040</a></li> <li>Cover regex-shaped MCP gateway masks in artifact redaction by <a href="https://github.com/pelikhan"><code>@​pelikhan</code></a> with <a href="https://github.com/Copilot"><code>@​Copilot</code></a> in <a href="https://redirect.github.com/github/gh-aw/pull/66041">github/gh-aw#66041</a></li> <li>Include GitHub API rate limits in unified agent sessions by <a href="https://github.com/pelikhan"><code>@​pelikhan</code></a> with <a href="https://github.com/Copilot"><code>@​Copilot</code></a> in <a href="https://redirect.github.com/github/gh-aw/pull/66047">github/gh-aw#66047</a></li> <li>[spec-enforcer] Enforce specifications for ctxutil, envutil, errorutil by <a href="https://github.com/github-actions"><code>@​github-actions</code></a>[bot] in <a href="https://redirect.github.com/github/gh-aw/pull/66106">github/gh-aw#66106</a></li> <li>Fix engine conversation reports and collapse streamed messages by <a href="https://github.com/pelikhan"><code>@​pelikhan</code></a> in <a href="https://redirect.github.com/github/gh-aw/pull/66048">github/gh-aw#66048</a></li> <li>Distinguish estimated credits from recorded daily AIC usage by <a href="https://github.com/pelikhan"><code>@​pelikhan</code></a> with <a href="https://github.com/Copilot"><code>@​Copilot</code></a> in <a href="https://redirect.github.com/github/gh-aw/pull/66043">github/gh-aw#66043</a></li> <li>Allow explicit wildcard GitHub App repositories in strict mode by <a href="https://github.com/pelikhan"><code>@​pelikhan</code></a> with <a href="https://github.com/Copilot"><code>@​Copilot</code></a> in <a href="https://redirect.github.com/github/gh-aw/pull/66039">github/gh-aw#66039</a></li> <li>[WIP] Fix compiled lock files and zizmor pedantic audit issues by <a href="https://github.com/pelikhan"><code>@​pelikhan</code></a> with <a href="https://github.com/Copilot"><code>@​Copilot</code></a> in <a href="https://redirect.github.com/github/gh-aw/pull/66042">github/gh-aw#66042</a></li> <li>[spec-extractor] Update package specifications for agentdrain, cli, console, constants by <a href="https://github.com/github-actions"><code>@​github-actions</code></a>[bot] in <a href="https://redirect.github.com/github/gh-aw/pull/66085">github/gh-aw#66085</a></li> <li>Bump golang.org/x/tools from 0.50.0 to 0.51.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/github/gh-aw/pull/66087">github/gh-aw#66087</a></li> <li>Bump prettier from 3.9.8 to 3.9.9 in /actions/setup/js by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/github/gh-aw/pull/66088">github/gh-aw#66088</a></li> <li>Retry transient issue-listing failures in essential issue publishing by <a href="https://github.com/pelikhan"><code>@​pelikhan</code></a> with <a href="https://github.com/Copilot"><code>@​Copilot</code></a> in <a href="https://redirect.github.com/github/gh-aw/pull/66123">github/gh-aw#66123</a></li> <li>Refresh workflow pins and bundle Dependabot updates by <a href="https://github.com/pelikhan"><code>@​pelikhan</code></a> with <a href="https://github.com/Copilot"><code>@​Copilot</code></a> in <a href="https://redirect.github.com/github/gh-aw/pull/66124">github/gh-aw#66124</a></li> <li>[ci-coach] Fix failing pkg/workflow unit tests (stale goldens and expectations) by <a href="https://github.com/github-actions"><code>@​github-actions</code></a>[bot] in <a href="https://redirect.github.com/github/gh-aw/pull/66180">github/gh-aw#66180</a></li> <li>Record daily AIC decisions in unified sessions by <a href="https://github.com/pelikhan"><code>@​pelikhan</code></a> with <a href="https://github.com/Copilot"><code>@​Copilot</code></a> in <a href="https://redirect.github.com/github/gh-aw/pull/66126">github/gh-aw#66126</a></li> <li>Bump starlight-github-alerts from 0.4.0 to 0.5.0 in /docs by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/github/gh-aw/pull/66093">github/gh-aw#66093</a></li> <li>Bump mermaid from 12.0.0 to 12.1.0 in /docs by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/github/gh-aw/pull/66091">github/gh-aw#66091</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/github/gh-aw/commit/382f4b025fefaa7d6b2492c3608f098340bf6536"><code>382f4b0</code></a> Render failure diagnostics safely with progressive disclosure (<a href="https://redirect.github.com/github/gh-aw/issues/66292">#66292</a>)</li> <li><a href="https://github.com/github/gh-aw/commit/37c0b1980ec9ce6acbc42681e7e3da736a2b39d9"><code>37c0b19</code></a> Add development compilation and local-first workflow debugging (<a href="https://redirect.github.com/github/gh-aw/issues/66270">#66270</a>)</li> <li><a href="https://github.com/github/gh-aw/commit/3fd44f8dc17a5fcdc45f653e7826853456b1839e"><code>3fd44f8</code></a> Separate routing candidates from sub-agent model policy (<a href="https://redirect.github.com/github/gh-aw/issues/66234">#66234</a>)</li> <li><a href="https://github.com/github/gh-aw/commit/0d0a4b854ca46614353f8b40b76de3a6724499f8"><code>0d0a4b8</code></a> Resolve post-agent usage paths on ARC/DinD runners (<a href="https://redirect.github.com/github/gh-aw/issues/66223">#66223</a>)</li> <li><a href="https://github.com/github/gh-aw/commit/401a4f2df34eaa84aa801b202b58efadfc9acad9"><code>401a4f2</code></a> Bump gh-aw-mcpg to v0.4.29 (<a href="https://redirect.github.com/github/gh-aw/issues/66246">#66246</a>)</li> <li><a href="https://github.com/github/gh-aw/commit/02e6afb14c6eebdc278c1cf7a2bbffe2852421fa"><code>02e6afb</code></a> [linter-miner] Add reflect-deepequal-usage linter (<a href="https://redirect.github.com/github/gh-aw/issues/66239">#66239</a>)</li> <li><a href="https://github.com/github/gh-aw/commit/7a5aaccea7ee9620214fe4f9f38451f2f9c89512"><code>7a5aacc</code></a> Fix embedded session parser dependencies and post-step CI expectation (<a href="https://redirect.github.com/github/gh-aw/issues/66243">#66243</a>)</li> <li><a href="https://github.com/github/gh-aw/commit/9a631f399d77d17a7da4adadaf0760accca2547e"><code>9a631f3</code></a> Fix CI redaction assertion and remove unauthorized CGO coverage upload (<a href="https://redirect.github.com/github/gh-aw/issues/66235">#66235</a>)</li> <li><a href="https://github.com/github/gh-aw/commit/ffc93b2f3118eae982d395381bdcd81cf8e1fc67"><code>ffc93b2</code></a> Add dynamic workflow smoke and opt-in engine defaults (<a href="https://redirect.github.com/github/gh-aw/issues/66195">#66195</a>)</li> <li><a href="https://github.com/github/gh-aw/commit/ea26db6a5beb68ae37d97613f3e9c7923d92d515"><code>ea26db6</code></a> Add Claude dynamic workflow smoke coverage and unified task events (<a href="https://redirect.github.com/github/gh-aw/issues/66208">#66208</a>)</li> <li>Additional commits viewable in <a href="https://github.com/github/gh-aw/compare/c35393777e5604a63721d09512263b1383301d4f...382f4b025fefaa7d6b2492c3608f098340bf6536">compare view</a></li> </ul> </details> <br /> Updates `actions/download-artifact` from 8.0.1 to 8.0.2 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/download-artifact/releases">actions/download-artifact's releases</a>.</em></p> <blockquote> <h2>v8.0.2</h2> <h2>What's Changed</h2> <ul> <li>Update the readme by <a href="https://github.com/danwkennedy"><code>@​danwkennedy</code></a> in <a href="https://redirect.github.com/actions/download-artifact/pull/473">actions/download-artifact#473</a></li> <li>Improves artifact download retries when the service returns HTTP 429 (rate limiting), including honoring valid Retry-After headers.</li> <li>Update <code>@​actions/artifact</code> to 6.3.1 by <a href="https://github.com/tunc-d"><code>@​tunc-d</code></a> in <a href="https://redirect.github.com/actions/download-artifact/pull/492">actions/download-artifact#492</a></li> <li>Prepare download-artifact v8.0.2 by <a href="https://github.com/tunc-d"><code>@​tunc-d</code></a> in <a href="https://redirect.github.com/actions/download-artifact/pull/493">actions/download-artifact#493</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/tunc-d"><code>@​tunc-d</code></a> made their first contribution in <a href="https://redirect.github.com/actions/download-artifact/pull/492">actions/download-artifact#492</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/download-artifact/compare/v8.0.1...v8.0.2">https://github.com/actions/download-artifact/compare/v8.0.1...v8.0.2</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/actions/download-artifact/commit/9000827ccba6bdab643e8b6fd33ac0654aef8333"><code>9000827</code></a> Merge pull request <a href="https://redirect.github.com/actions/download-artifact/issues/493">#493</a> from actions/tunc-d-prepare-download-v8-0-2</li> <li><a href="https://github.com/actions/download-artifact/commit/e455989ae00f5bdd4054f05d3e972c6bf8a62dc5"><code>e455989</code></a> Prepare download-artifact v8.0.2</li> <li><a href="https://github.com/actions/download-artifact/commit/a00b90c4a2f01d73a8c89552caabca6ea3b43137"><code>a00b90c</code></a> Merge pull request <a href="https://redirect.github.com/actions/download-artifact/issues/492">#492</a> from actions/tunc-d-download-artifact-package-bump</li> <li><a href="https://github.com/actions/download-artifact/commit/29bb7ce6af5345aeab5bb4774ce7249ee3ccc27f"><code>29bb7ce</code></a> Update <code>@​actions/artifact</code> to 6.3.1</li> <li><a href="https://github.com/actions/download-artifact/commit/484a0b528fb4d7bd804637ccb632e47a0e638317"><code>484a0b5</code></a> Update the readme (<a href="https://redirect.github.com/actions/download-artifact/issues/473">#473</a>)</li> <li>See full diff in <a href="https://github.com/actions/download-artifact/compare/3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c...9000827ccba6bdab643e8b6fd33ac0654aef8333">compare view</a></li> </ul> </details> <br /> Updates `actions/upload-artifact` from 7.0.1 to 7.0.2 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/upload-artifact/releases">actions/upload-artifact's releases</a>.</em></p> <blockquote> <h2>v7.0.2</h2> <h2>What's Changed</h2> <ul> <li>Improves artifact download retries when the service returns HTTP 429 (rate limiting), including honoring valid Retry-After headers.</li> <li>Updates <code>@​actions/artifact</code> to v6.3.1.</li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/tunc-d"><code>@​tunc-d</code></a> made their first contribution in <a href="https://redirect.github.com/actions/upload-artifact/pull/821">actions/upload-artifact#821</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/upload-artifact/compare/v7.0.1...v7.0.2">https://github.com/actions/upload-artifact/compare/v7.0.1...v7.0.2</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/actions/upload-artifact/commit/cf430e030ddbb5b0abf93d22962f4752f3646cd9"><code>cf430e0</code></a> Merge pull request <a href="https://redirect.github.com/actions/upload-artifact/issues/822">#822</a> from actions/tunc-d-prepare-upload-v7-0-2</li> <li><a href="https://github.com/actions/upload-artifact/commit/c2acdedd35a8824a1552c7137f8c18288c3ea469"><code>c2acded</code></a> chore: prepare v7.0.2 release</li> <li><a href="https://github.com/actions/upload-artifact/commit/4687c1bbaa0a58abb517d90b4bbade6754c80c1a"><code>4687c1b</code></a> Merge pull request <a href="https://redirect.github.com/actions/upload-artifact/issues/821">#821</a> from actions/tunc-d-upload-artifact-package-bump</li> <li><a href="https://github.com/actions/upload-artifact/commit/8cbe1bebdb858105d8fdd88f81404d4de4595719"><code>8cbe1be</code></a> Bump <code>@​actions/artifact</code> to 6.3.1</li> <li>See full diff in <a href="https://github.com/actions/upload-artifact/compare/043fb46d1a93c77aae656e7c1c64a875d1fc6a0a...cf430e030ddbb5b0abf93d22962f4752f3646cd9">compare view</a></li> </ul> </details> <br /> Updates `actions/setup-node` from 7.0.0 to 7.1.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/setup-node/releases">actions/setup-node's releases</a>.</em></p> <blockquote> <h2>v7.1.0</h2> <h2>What's Changed</h2> <h3>Enhancements:</h3> <ul> <li>Add support for mise.toml file by <a href="https://github.com/gperdomor"><code>@​gperdomor</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1421">actions/setup-node#1421</a></li> <li>Support absolute paths in node-version-file by <a href="https://github.com/v-mahabaleshwars"><code>@​v-mahabaleshwars</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1633">actions/setup-node#1633</a></li> </ul> <h3>Bug fixes:</h3> <ul> <li>Add Node version validation and manifest fetch retry by <a href="https://github.com/v-jitenderpalsingh"><code>@​v-jitenderpalsingh</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1580">actions/setup-node#1580</a></li> </ul> <h3>Documentation updates:</h3> <ul> <li>README.md: bump actions/checkout to latest version 7 by <a href="https://github.com/deining"><code>@​deining</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1578">actions/setup-node#1578</a></li> <li>docs: add V7 ESM migration and NODE_AUTH_TOKEN behavior change by <a href="https://github.com/v-gowridurgad"><code>@​v-gowridurgad</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1593">actions/setup-node#1593</a></li> <li>Fixed cache recommendation syntax by <a href="https://github.com/SubJunk"><code>@​SubJunk</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1603">actions/setup-node#1603</a></li> </ul> <h3>Dependency updates:</h3> <ul> <li>Update workflow pins and migrate Node matrices to modern versions by <a href="https://github.com/v-HarithaVattikuti"><code>@​v-HarithaVattikuti</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1583">actions/setup-node#1583</a></li> <li>Upgrade <code>@​actions/cache</code> to 6.2.0 by <a href="https://github.com/philip-gai"><code>@​philip-gai</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1584">actions/setup-node#1584</a></li> <li>Pin <code>@​types/node</code> to v24 by <a href="https://github.com/v-priyagupta108"><code>@​v-priyagupta108</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1585">actions/setup-node#1585</a></li> <li>Override brace-expansion to 5.0.8 by <a href="https://github.com/v-priyagupta108"><code>@​v-priyagupta108</code></a> with <a href="https://github.com/Copilot"><code>@​Copilot</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1599">actions/setup-node#1599</a></li> <li>Upgrade actions/checkout from 7.0.0 to 7.0.1 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1598">actions/setup-node#1598</a></li> <li>Upgrade prettier from 3.8.4 to 3.9.6 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1590">actions/setup-node#1590</a></li> <li>Upgrade <code>@​vercel/ncc</code> from 0.44.0 to 0.45.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1610">actions/setup-node#1610</a></li> <li>Upgrade pnpm/action-setup from 6.0.9 to 6.0.10 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1602">actions/setup-node#1602</a></li> <li>Upgrade baseline-browser-mapping from 2.10.38 to 2.11.22 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1629">actions/setup-node#1629</a></li> <li>Upgrade <code>@​types/semver</code> from 7.7.1 to 7.8.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1616">actions/setup-node#1616</a></li> <li>Upgrade <code>@​typescript-eslint/parser</code> from 8.62.0 to 8.70.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1615">actions/setup-node#1615</a></li> <li>Upgrade pnpm/action-setup from 6.0.10 to 6.1.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1631">actions/setup-node#1631</a></li> <li>Upgrade jest-each from 30.4.1 to 30.5.2 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1636">actions/setup-node#1636</a></li> <li>Upgrade eslint-plugin-n from 18.1.0 to 18.3.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1638">actions/setup-node#1638</a></li> <li>Update dependencies and add license files by <a href="https://github.com/v-HarithaVattikuti"><code>@​v-HarithaVattikuti</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1642">actions/setup-node#1642</a></li> <li>Upgrade eslint from 10.5.0 to 10.11.0 and package.json from 7.0.0 to 7.1.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1635">actions/setup-node#1635</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/v-jitenderpalsingh"><code>@​v-jitenderpalsingh</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-node/pull/1580">actions/setup-node#1580</a></li> <li><a href="https://github.com/philip-gai"><code>@​philip-gai</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-node/pull/1584">actions/setup-node#1584</a></li> <li><a href="https://github.com/gperdomor"><code>@​gperdomor</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-node/pull/1421">actions/setup-node#1421</a></li> <li><a href="https://github.com/SubJunk"><code>@​SubJunk</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-node/pull/1603">actions/setup-node#1603</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/setup-node/compare/v7.0.0...v7.1.0">https://github.com/actions/setup-node/compare/v7.0.0...v7.1.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/actions/setup-node/commit/949feb2413d6458794dcd2491c4babbbce0c15c1"><code>949feb2</code></a> Bump eslint from 10.5.0 to 10.11.0 and package.json from 7.0.0 to 7.1.0 (<a href="https://redirect.github.com/actions/setup-node/issues/1635">#1635</a>)</li> <li><a href="https://github.com/actions/setup-node/commit/7207c4f1189c7ee83ddf20c7c68bd1af6fdd751c"><code>7207c4f</code></a> chore: update dependencies and add license files (<a href="https://redirect.github.com/actions/setup-node/issues/1642">#1642</a>)</li> <li><a href="https://github.com/actions/setup-node/commit/54337e0d02de9202d0948aaff36ad556375497b9"><code>54337e0</code></a> Bump eslint-plugin-n from 18.1.0 to 18.3.0 (<a href="https://redirect.github.com/actions/setup-node/issues/1638">#1638</a>)</li> <li><a href="https://github.com/actions/setup-node/commit/fb54fa8c14c63410cc752f0ae3b7b3ca6af161fc"><code>fb54fa8</code></a> Bump jest-each from 30.4.1 to 30.5.2 (<a href="https://redirect.github.com/actions/setup-node/issues/1636">#1636</a>)</li> <li><a href="https://github.com/actions/setup-node/commit/7f84f1d52d0c56afb45c62fee31a93b843cea4d6"><code>7f84f1d</code></a> Bump pnpm/action-setup from 6.0.10 to 6.1.0 (<a href="https://redirect.github.com/actions/setup-node/issues/1631">#1631</a>)</li> <li><a href="https://github.com/actions/setup-node/commit/0c54c7b07420dcba69a7d832587f55ebdf771c9e"><code>0c54c7b</code></a> Bump <code>@​typescript-eslint/parser</code> from 8.62.0 to 8.70.0 (<a href="https://redirect.github.com/actions/setup-node/issues/1615">#1615</a>)</li> <li><a href="https://github.com/actions/setup-node/commit/a8294190049a9c296f01b9a432aff41dd83d8284"><code>a829419</code></a> Bump <code>@​types/semver</code> from 7.7.1 to 7.8.0 (<a href="https://redirect.github.com/actions/setup-node/issues/1616">#1616</a>)</li> <li><a href="https://github.com/actions/setup-node/commit/680d1e489b82f1243de15bc7665c0007e3c9a860"><code>680d1e4</code></a> Support absolute paths in node-version-file (<a href="https://redirect.github.com/actions/setup-node/issues/1633">#1633</a>)</li> <li><a href="https://github.com/actions/setup-node/commit/db0fb3a98ed314b69026b6e8c9be26a7e2fe65a8"><code>db0fb3a</code></a> Bump baseline-browser-mapping from 2.10.38 to 2.11.22 (<a href="https://redirect.github.com/actions/setup-node/issues/1629">#1629</a>)</li> <li><a href="https://github.com/actions/setup-node/commit/94196ee1d15439c1b6651cd87ef14e88ec435966"><code>94196ee</code></a> Bump pnpm/action-setup from 6.0.9 to 6.0.10 (<a href="https://redirect.github.com/actions/setup-node/issues/1602">#1602</a>)</li> <li>Additional commits viewable in <a href="https://github.com/actions/setup-node/compare/820762786026740c76f36085b0efc47a31fe5020...949feb2413d6458794dcd2491c4babbbce0c15c1">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1 parent 6951f0a commit cb772cb

10 files changed

Lines changed: 22 additions & 22 deletions

‎.github/workflows/check-agentic-workflows.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -17,7 +17,7 @@ jobs:
1717
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
1818

1919
- name: Install gh-aw
20-
uses: github/gh-aw/actions/setup-cli@c35393777e5604a63721d09512263b1383301d4f # v0.89.21
20+
uses: github/gh-aw/actions/setup-cli@382f4b025fefaa7d6b2492c3608f098340bf6536 # v0.91.3
2121
with:
2222
version: v0.88.7
2323

‎.github/workflows/ci-emitter-diff-python-commenter.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -74,7 +74,7 @@ jobs:
7474
7575
- name: Download comment artifact
7676
if: steps.resolve.outputs.artifact != ''
77-
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
77+
uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
7878
with:
7979
artifact-ids: ${{ steps.resolve.outputs.artifact }}
8080
merge-multiple: true

‎.github/workflows/ci-emitter-diff-python.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -108,7 +108,7 @@ jobs:
108108
109109
- name: Upload HTML diff
110110
if: always()
111-
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
111+
uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
112112
with:
113113
name: emitter-diff-html
114114
path: ${{ runner.temp }}/emitter-diff.html
@@ -139,7 +139,7 @@ jobs:
139139
140140
- name: Upload comment artifact
141141
if: always() && github.event_name == 'pull_request'
142-
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
142+
uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
143143
with:
144144
name: emitter-diff-python-comment
145145
path: ${{ runner.temp }}/emitter-diff-comment/comment.json

‎.github/workflows/ci-python.yml‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -49,7 +49,7 @@ jobs:
4949
working-directory: packages/http-client-python
5050

5151
- name: Upload generated artifacts
52-
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
52+
uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
5353
with:
5454
name: python-generated
5555
include-hidden-files: true
@@ -74,7 +74,7 @@ jobs:
7474
python-version: "3.12"
7575

7676
- name: Download generated artifacts
77-
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
77+
uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
7878
with:
7979
name: python-generated
8080
path: packages/http-client-python
@@ -108,7 +108,7 @@ jobs:
108108
python-version: "3.12"
109109

110110
- name: Download generated artifacts
111-
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
111+
uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
112112
with:
113113
name: python-generated
114114
path: packages/http-client-python
@@ -142,7 +142,7 @@ jobs:
142142
python-version: "3.12"
143143

144144
- name: Download generated artifacts
145-
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
145+
uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
146146
with:
147147
name: python-generated
148148
path: packages/http-client-python
@@ -187,7 +187,7 @@ jobs:
187187
python-version: "3.12"
188188

189189
- name: Download generated artifacts
190-
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
190+
uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
191191
with:
192192
name: python-generated
193193
path: packages/http-client-python

‎.github/workflows/commenter.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -21,7 +21,7 @@ jobs:
2121
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
2222
- name: Prepare artifact directory
2323
run: mkdir -p "${{ runner.temp }}/comment-artifact"
24-
- uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
24+
- uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
2525
with:
2626
name: comment
2727
run-id: ${{github.event.workflow_run.id }}

‎.github/workflows/consistency.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -43,7 +43,7 @@ jobs:
4343
env:
4444
GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}
4545

46-
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
46+
- uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
4747
with:
4848
name: comment
4949
path: comment-out/

‎.github/workflows/copilot-setup-steps.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -21,6 +21,6 @@ jobs:
2121
- name: Checkout repository
2222
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
2323
- name: Install gh-aw extension
24-
uses: github/gh-aw/actions/setup-cli@c35393777e5604a63721d09512263b1383301d4f # v0.89.21
24+
uses: github/gh-aw/actions/setup-cli@382f4b025fefaa7d6b2492c3608f098340bf6536 # v0.91.3
2525
with:
2626
version: v0.50.1

‎.github/workflows/core-ci.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -55,7 +55,7 @@ jobs:
5555
run: pnpm vitest run ${{ matrix.coverage }} --reporter=default --reporter=github-actions
5656

5757
- name: Upload coverage artifacts
58-
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
58+
uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
5959
if: always() && matrix.coverage != ''
6060
with:
6161
name: coverage-${{ matrix.os }}-node${{ matrix.node-version }}
@@ -122,23 +122,23 @@ jobs:
122122
run: pnpm run test:e2e
123123

124124
- name: Upload UI test results
125-
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
125+
uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
126126
if: always()
127127
with:
128128
name: uitestresults-e2e
129129
path: packages/playground-website/test-results/
130130
retention-days: 5
131131

132132
- name: Upload screenshots
133-
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
133+
uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
134134
if: always()
135135
with:
136136
name: screenshots
137137
path: packages/typespec-vscode/temp/images-linux/
138138
retention-days: 5
139139

140140
- name: Upload trace results
141-
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
141+
uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
142142
if: always()
143143
with:
144144
name: trace-results

‎.github/workflows/external-integration.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -31,7 +31,7 @@ jobs:
3131
3232
steps:
3333
- name: Setup Node.js
34-
uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
34+
uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
3535
with:
3636
node-version: lts/*
3737

‎.github/workflows/python-integration.yml‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -90,7 +90,7 @@ jobs:
9090
venv/bin/python tests/install_packages.py build unbranded tests
9191
9292
- name: Upload generated artifacts
93-
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
93+
uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
9494
with:
9595
name: python-generated
9696
path: |
@@ -127,7 +127,7 @@ jobs:
127127
- uses: ./.github/actions/setup-python
128128

129129
- name: Download generated artifacts
130-
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
130+
uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
131131
with:
132132
name: python-generated
133133
path: .
@@ -169,7 +169,7 @@ jobs:
169169
- uses: ./.github/actions/setup-python
170170

171171
- name: Download generated artifacts
172-
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
172+
uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
173173
with:
174174
name: python-generated
175175
path: .
@@ -208,7 +208,7 @@ jobs:
208208
- uses: ./.github/actions/setup-python
209209

210210
- name: Download generated artifacts
211-
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
211+
uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
212212
with:
213213
name: python-generated
214214
path: .
@@ -255,7 +255,7 @@ jobs:
255255
- uses: ./.github/actions/setup-python
256256

257257
- name: Download generated artifacts
258-
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
258+
uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
259259
with:
260260
name: python-generated
261261
path: .

0 commit comments

Comments
 (0)