From 25bf5a6d9f328878ffd9fdc6a9375b9bb98243be Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 17 Aug 2026 06:55:24 +0000 Subject: [PATCH] chore(deps): bump the gh-actions group across 1 directory with 3 updates Bumps the gh-actions group with 3 updates in the / directory: [actions/checkout](https://github.com/actions/checkout), [actions/setup-node](https://github.com/actions/setup-node) and [changesets/action](https://github.com/changesets/action). Updates `actions/checkout` from 6 to 7 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v6...v7) Updates `actions/setup-node` from 6 to 7 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](https://github.com/actions/setup-node/compare/v6...v7) Updates `changesets/action` from 1 to 2 - [Release notes](https://github.com/changesets/action/releases) - [Changelog](https://github.com/changesets/action/blob/main/CHANGELOG.md) - [Commits](https://github.com/changesets/action/compare/v1...v2) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: gh-actions - dependency-name: actions/setup-node dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: gh-actions - dependency-name: changesets/action dependency-version: '2' dependency-type: direct:production update-type: version-update:semver-major dependency-group: gh-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/action-selftest.yml | 2 +- .github/workflows/ci.yml | 16 ++++++++-------- .github/workflows/deploy-docs.yml | 4 ++-- .github/workflows/release.yml | 6 +++--- .github/workflows/self-check.yml | 4 ++-- 5 files changed, 16 insertions(+), 16 deletions(-) diff --git a/.github/workflows/action-selftest.yml b/.github/workflows/action-selftest.yml index 93efdd3..1961c58 100644 --- a/.github/workflows/action-selftest.yml +++ b/.github/workflows/action-selftest.yml @@ -17,7 +17,7 @@ jobs: name: Run the local composite action against fixtures runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 # Lay down a temp workspace whose layout matches what `uses: ./` will scan when # invoked from the action's repo. We point the action at a per-job `.github/workflows/` diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 93cec3c..644f36e 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -18,9 +18,9 @@ jobs: name: Lint & format runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 - uses: pnpm/action-setup@v6 - - uses: actions/setup-node@v6 + - uses: actions/setup-node@v7 with: node-version: 24 cache: pnpm @@ -32,9 +32,9 @@ jobs: name: Typecheck runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 - uses: pnpm/action-setup@v6 - - uses: actions/setup-node@v6 + - uses: actions/setup-node@v7 with: node-version: 24 cache: pnpm @@ -50,9 +50,9 @@ jobs: node: ['22', '24'] os: [ubuntu-latest, macos-latest, windows-latest] steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 - uses: pnpm/action-setup@v6 - - uses: actions/setup-node@v6 + - uses: actions/setup-node@v7 with: node-version: ${{ matrix.node }} cache: pnpm @@ -70,9 +70,9 @@ jobs: runs-on: ubuntu-latest needs: [lint, typecheck, test] steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 - uses: pnpm/action-setup@v6 - - uses: actions/setup-node@v6 + - uses: actions/setup-node@v7 with: node-version: 24 cache: pnpm diff --git a/.github/workflows/deploy-docs.yml b/.github/workflows/deploy-docs.yml index 9409d58..216ee69 100644 --- a/.github/workflows/deploy-docs.yml +++ b/.github/workflows/deploy-docs.yml @@ -22,9 +22,9 @@ jobs: build: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 - uses: pnpm/action-setup@v6 - - uses: actions/setup-node@v6 + - uses: actions/setup-node@v7 with: node-version: 24 cache: pnpm diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index d58e8c4..abc41a5 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -30,7 +30,7 @@ jobs: # App-authored, which triggers downstream workflows. Setting env # GITHUB_TOKEN alone is not enough — checkout's persisted credential is # what `git push` actually uses. - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 with: fetch-depth: 0 token: ${{ steps.app-token.outputs.token }} @@ -42,7 +42,7 @@ jobs: # and `changeset publish` exits 1. Trusted publishing only kicks in when # *no* token is configured. Default registry is registry.npmjs.org, so # dropping `registry-url:` costs nothing. - - uses: actions/setup-node@v6 + - uses: actions/setup-node@v7 with: node-version: 24 cache: pnpm @@ -68,7 +68,7 @@ jobs: - run: pnpm build - name: Create release PR or publish id: changesets - uses: changesets/action@v1 + uses: changesets/action@v2 with: publish: pnpm release version: pnpm exec changeset version diff --git a/.github/workflows/self-check.yml b/.github/workflows/self-check.yml index ae274af..4650647 100644 --- a/.github/workflows/self-check.yml +++ b/.github/workflows/self-check.yml @@ -16,9 +16,9 @@ jobs: name: Run ghau against this repo runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 - uses: pnpm/action-setup@v6 - - uses: actions/setup-node@v6 + - uses: actions/setup-node@v7 with: node-version: 24 cache: pnpm