Skip to content

Deps/gha: Bump the ci-deps group across 1 directory with 5 updates - #3

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/ci-deps-ec3df8c0b8
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/ci-deps-ec3df8c0b8

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 2, 2026 •

Copy link
Copy Markdown

Bumps the ci-deps group with 5 updates in the / directory:

Package From To
flatpak/flatpak-github-actions/flatpak-builder 6.7 6.8
flatpak/flatpak-github-actions/flat-manager 6.7 6.8
mathieudutour/github-tag-action 6.2 7
softprops/action-gh-release 3.0.0 3.0.3
baptiste0928/cargo-install 3.4.0 3.5.0

Updates flatpak/flatpak-github-actions/flatpak-builder from 6.7 to 6.8

Release notes

Sourced from flatpak/flatpak-github-actions/flatpak-builder's releases.

v6.8

  • Add saveCache flag
  • Add ability to override artifact name
  • Add buildDebugBundle flag
  • Update tests, documentation and dependencies
Commits
  • 7932741 Update all dependencies and regenerate dist
  • 09e3d61 readme: Don't specify setting cache key to github.sha (#261)
  • 23e6222 Update runtime versions and docker images to latest
  • a3ab43f flatpak-builder: Add saveCache flag
  • 8e357b1 ci: Remove unnecessary 'needs' from debug bundle job
  • 26e19ca ci: Add test for artifact-name
  • 06d246b flatpak-builder: Add ability to override artifact name
  • a262264 ci: Add job that uses build-debug-bundle
  • f736229 flatpak-builder: Add buildDebugBundle flag
  • 3b10954 ci: Update actions to versions using Node 24
  • See full diff in compare view

Updates flatpak/flatpak-github-actions/flat-manager from 6.7 to 6.8

Release notes

Sourced from flatpak/flatpak-github-actions/flat-manager's releases.

v6.8

  • Add saveCache flag
  • Add ability to override artifact name
  • Add buildDebugBundle flag
  • Update tests, documentation and dependencies
Commits
  • 7932741 Update all dependencies and regenerate dist
  • 09e3d61 readme: Don't specify setting cache key to github.sha (#261)
  • 23e6222 Update runtime versions and docker images to latest
  • a3ab43f flatpak-builder: Add saveCache flag
  • 8e357b1 ci: Remove unnecessary 'needs' from debug bundle job
  • 26e19ca ci: Add test for artifact-name
  • 06d246b flatpak-builder: Add ability to override artifact name
  • a262264 ci: Add job that uses build-debug-bundle
  • f736229 flatpak-builder: Add buildDebugBundle flag
  • 3b10954 ci: Update actions to versions using Node 24
  • See full diff in compare view

Updates mathieudutour/github-tag-action from 6.2 to 7

Changelog

Sourced from mathieudutour/github-tag-action's changelog.

v7.0.0

v7 upgrades the action to Node 24 and introduces breaking changes to version calculation and branch handling. Review the migration guide before upgrading from v6.

  • Run on Node 24 and ship a self-contained dist/ bundle with both supported commit presets, templates, dependencies, and license notices. Refresh the lockfile, remove the old Octokit dependency chain, and retain proxy support.
  • Align analysis and changelogs on Conventional Commits, including feat!. Angular remains selectable.
  • Match whole branch names; an empty prerelease list now means no prerelease branches. Never publish from PR events or recursively process tag events. Preview versions include a commit SHA suffix.
  • Fetch all tags and all compare-commit pages. Explicitly restricted tag fetching fails when results might be incomplete. Read initial commit history instead of comparing against a fabricated HEAD baseline.
  • Skip version creation when no eligible commits remain, unless custom or forced versioning was explicitly requested.
  • Keep stable release baselines separate from unrelated prereleases; match prerelease identifiers exactly, honor the first prerelease default, increment existing RCs, and allow higher-level changes to advance the RC base.
  • Add path/scope/ignore filters, opt-in squash-bullet parsing, tag-stream filtering, explicit bump/version inputs, local/moving/rolling tags, repository/ref/directory overrides, and release metadata outputs.
  • Retry transient API reads and fall back to complete local Git history for compare failures. No history means no guessed release. Optional soft failure clears release outputs.

Migration

See Migrating from v6 to v7 for changed defaults, workflow examples, prerelease behavior, and a dry-run validation procedure.

New inputs are opt-in unless explicitly described above and require v7. See the README for the full input contract.

Commits

Updates softprops/action-gh-release from 3.0.0 to 3.0.3

Release notes

Sourced from softprops/action-gh-release's releases.

v3.0.3

3.0.3 is a maintenance release with updated dependencies. It also safely classifies malformed GitHub API errors to avoid secondary failures (#822).

What's Changed

Bug fixes 🐛

Other Changes 🔄

  • dependency updates

v3.0.2

3.0.2 is a patch release focused on release reliability and compatibility. It reuses existing draft releases when publishing prereleases, supports replacing release assets on Gitea, hardens streamed asset uploads, and provides clearer release-creation diagnostics. It also includes TypeScript, coverage, and tooling maintenance merged since 3.0.1.

This release fixes #795, #438, and #803. The upload transport hardening covers the historical failure reported in #790, although current hosted Node 24 runners did not reproduce it naturally. The diagnostics work is related to #786 and does not claim a reproducible release-creation fix.

What's Changed

Exciting New Features 🎉

Bug fixes 🐛

Other Changes 🔄

v3.0.1

3.0.1

  • maintenance release with updated dependencies
Changelog

Sourced from softprops/action-gh-release's changelog.

3.0.3

3.0.3 is a maintenance release with updated dependencies. It also safely classifies malformed GitHub API errors to avoid secondary failures (#822).

What's Changed

Bug fixes 🐛

Other Changes 🔄

  • dependency updates

3.0.2

3.0.2 is a patch release focused on release reliability and compatibility. It reuses existing draft releases when publishing prereleases, supports replacing release assets on Gitea, hardens streamed asset uploads, and provides clearer release-creation diagnostics. It also includes TypeScript, coverage, and tooling maintenance merged since 3.0.1.

This release fixes #795, #438, and #803. The upload transport hardening covers the historical failure reported in #790, although current hosted Node 24 runners did not reproduce it naturally. The diagnostics work is related to #786 and does not claim a reproducible release-creation fix.

What's Changed

Exciting New Features 🎉

Bug fixes 🐛

Other Changes 🔄

3.0.1

  • maintenance release with updated dependencies

... (truncated)

Commits
  • efb3536 release 3.0.3 (#840)
  • 6441963 chore(deps): bump the npm group with 2 updates (#839)
  • e5ee6bc chore(deps): bump esbuild from 0.28.1 to 0.28.2 in the npm group (#837)
  • d1e6617 chore(deps): bump undici from 6.27.0 to 6.28.0 (#831)
  • 6403751 chore(deps): bump the npm group with 2 updates (#835)
  • 7c7184b chore(deps): bump postcss from 8.5.19 to 8.5.25 (#833)
  • 0f3f0d2 chore(deps): bump brace-expansion from 5.0.8 to 5.0.9 (#832)
  • 77fb938 chore(deps): bump prettier from 3.9.5 to 3.9.6 in the npm group (#830)
  • 5a6f517 chore(deps): bump brace-expansion from 5.0.7 to 5.0.8 (#828)
  • a3c91c9 chore(deps): bump the github-actions group with 2 updates (#825)
  • Additional commits viewable in compare view

Updates baptiste0928/cargo-install from 3.4.0 to 3.5.0

Release notes

Sourced from baptiste0928/cargo-install's releases.

v3.5.0

Added

  • Multiple crates can now be installed in a single action run by using the crate@version syntax in the crate input. (issue #36)

Changed

  • Updated dependencies.
Changelog

Sourced from baptiste0928/cargo-install's changelog.

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[Unreleased]

[3.5.0] - 2026-09-14

Added

  • Multiple crates can now be installed in a single action run by using the crate@version syntax in the crate input. (issue #36)

Changed

  • Updated dependencies.

[3.4.0] - 2026-02-22

Changed

  • Upgraded the action runtime to Node.js 24.
  • Updated dependencies.

Fixed

  • The new version available warning could sometimes suggest a pre-release version.

[3.1.2] - 2025-08-24

Changed

  • The CARGO_INSTALL_ROOT environment variable is set when running cargo install. This allows sub-processed using the cargo install command (such as yazi's build script) to use the right installation path.

[3.3.1] - 2025-06-17

Changed

  • Dependencies have been updated.

[3.3.0] - 2025-01-06

Changed

... (truncated)

Commits
  • 8195d4f chore: release 3.5.0
  • 7217100 feat: install multiple crates with the name@version syntax
  • fa78a96 deps: update dependencies and pin actions
  • See full diff in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Oct 2, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/ci-deps-ec3df8c0b8 branch 3 times, most recently from 9e896b5 to 764caf3 Compare October 11, 2026 16:04
Bumps the ci-deps group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [flatpak/flatpak-github-actions/flatpak-builder](https://github.com/flatpak/flatpak-github-actions) | `6.7` | `6.8` |
| [flatpak/flatpak-github-actions/flat-manager](https://github.com/flatpak/flatpak-github-actions) | `6.7` | `6.8` |
| [mathieudutour/github-tag-action](https://github.com/mathieudutour/github-tag-action) | `6.2` | `7` |
| [softprops/action-gh-release](https://github.com/softprops/action-gh-release) | `3.0.0` | `3.0.3` |
| [baptiste0928/cargo-install](https://github.com/baptiste0928/cargo-install) | `3.4.0` | `3.5.0` |



Updates `flatpak/flatpak-github-actions/flatpak-builder` from 6.7 to 6.8
- [Release notes](https://github.com/flatpak/flatpak-github-actions/releases)
- [Commits](flatpak/flatpak-github-actions@401fe28...7932741)

Updates `flatpak/flatpak-github-actions/flat-manager` from 6.7 to 6.8
- [Release notes](https://github.com/flatpak/flatpak-github-actions/releases)
- [Commits](flatpak/flatpak-github-actions@401fe28...7932741)

Updates `mathieudutour/github-tag-action` from 6.2 to 7
- [Release notes](https://github.com/mathieudutour/github-tag-action/releases)
- [Changelog](https://github.com/mathieudutour/github-tag-action/blob/master/CHANGELOG.md)
- [Commits](mathieudutour/github-tag-action@a22cf08...af99e60)

Updates `softprops/action-gh-release` from 3.0.0 to 3.0.3
- [Release notes](https://github.com/softprops/action-gh-release/releases)
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md)
- [Commits](softprops/action-gh-release@b430933...efb3536)

Updates `baptiste0928/cargo-install` from 3.4.0 to 3.5.0
- [Release notes](https://github.com/baptiste0928/cargo-install/releases)
- [Changelog](https://github.com/baptiste0928/cargo-install/blob/main/CHANGELOG.md)
- [Commits](baptiste0928/cargo-install@f204293...8195d4f)

---
updated-dependencies:
- dependency-name: baptiste0928/cargo-install
  dependency-version: 3.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci-deps
- dependency-name: flatpak/flatpak-github-actions/flat-manager
  dependency-version: '6.8'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci-deps
- dependency-name: flatpak/flatpak-github-actions/flatpak-builder
  dependency-version: '6.8'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci-deps
- dependency-name: mathieudutour/github-tag-action
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: ci-deps
- dependency-name: softprops/action-gh-release
  dependency-version: 3.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: ci-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/ci-deps-ec3df8c0b8 branch from 764caf3 to 4bb6cad Compare October 23, 2026 01:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants