deps(actions): bump the actions-all group across 1 directory with 12 updates by dependabot[bot] · Pull Request #66 · prodnull/prmana

dependabot · 2026-07-27T18:09:10Z

Bumps the actions-all group with 12 updates in the / directory:

Package	From	To
aws-actions/configure-aws-credentials	`6.1.0`	`6.2.3`
taiki-e/install-action	`2.76.0`	`2.85.2`
actions/setup-java	`5.2.0`	`5.6.0`
hashicorp/setup-terraform	`4.0.0`	`4.0.1`
docker/setup-buildx-action	`4.0.0`	`4.2.0`
docker/setup-qemu-action	`4.0.0`	`4.2.0`
peaceiris/actions-gh-pages	`4.0.0`	`4.1.0`
actions/attest-build-provenance	`4.1.0`	`4.1.1`
sigstore/cosign-installer	`4.1.1`	`4.1.2`
softprops/action-gh-release	`3.0.0`	`3.0.2`
github/codeql-action/upload-sarif	`4.35.3`	`4.37.3`
ossf/scorecard-action	`2.4.3`	`2.4.4`

Updates aws-actions/configure-aws-credentials from 6.1.0 to 6.2.3

Release notes

Sourced from aws-actions/configure-aws-credentials's releases.

v6.2.3

6.2.3 (2026-07-22)

Bug Fixes

attach git credentials before Tag Major Version push (#1877) (9ae780b)

PackedPolicyTooLarge detection in STS tags (#1899) (fa8d6a5)

v6.2.2

6.2.2 (2026-07-07)

Miscellaneous Chores

release 6.2.2 (d01d678)

v6.2.1

6.2.1 (2026-06-26)

Bug Fixes

enforce allowed-account-ids on all auth paths (#1847) (4d281fb)

v6.2.0

6.2.0 (2026-06-01)

Features

add additional session tags by default (#1775) (e0ba768)

add more retry logic and better logging (#1764) (540d0c1)

add regex validation to role-session-name (#1765) (e354499)

Allow custom session tags to be passed when assuming a role (#1759) (61f50f6)

expose run id in STS client user-agent (#1774) (29d1be3)

support custom STS endpoints (#1762) (8d52d05)

Bug Fixes

skip credential check on output-env-credentials: false (#1778) (58e7c47)

assumeRole failing from session tag size too large (#1808) (d6f5dc3)

v6.1.3

6.1.3 (2026-05-27)

Bug Fixes

fix: allow kubelet token symlink in aws-actions/configure-aws-credentials#1805

v6.1.2

... (truncated)

Changelog

Sourced from aws-actions/configure-aws-credentials's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

6.2.3 (2026-07-22)

Bug Fixes

attach git credentials before Tag Major Version push (#1877) (9ae780b)

PackedPolicyTooLarge detection in STS tags (#1899) (fa8d6a5)

6.2.2 (2026-07-07)

Miscellaneous Chores

release 6.2.2 (d01d678)

6.2.1 (2026-06-26)

Bug Fixes

enforce allowed-account-ids on all auth paths (#1847) (4d281fb)

6.2.0 (2026-06-01)

Features

add additional session tags by default (#1775) (e0ba768)

add more retry logic and better logging (#1764) (540d0c1)

add regex validation to role-session-name (#1765) (e354499)

Allow custom session tags to be passed when assuming a role (#1759) (61f50f6)

expose run id in STS client user-agent (#1774) (29d1be3)

support custom STS endpoints (#1762) (8d52d05)

Bug Fixes

skip credential check on output-env-credentials: false (#1778) (58e7c47)

assumeRole failing from session tag size too large (#1808) (d6f5dc3)

6.1.3 (2026-05-28)

Bug Fixes

fix: allow kubelet token symlink in #1805

6.1.2 (2026-05-26)

... (truncated)

Commits

e6de054 chore(main): release 6.2.3 (#1878)
ab3b2ba chore: Update dist
fa8d6a5 fix: PackedPolicyTooLarge detection in STS tags (#1899)
42e118a chore(deps-dev): bump markdownlint-cli from 0.49.0 to 0.49.1 (#1896)
d86ddfc chore: Update dist
874aaac chore(deps): bump @aws-sdk/client-sts from 3.1086.0 to 3.1091.0 (#1892)
d4341b6 chore: Update dist
fe51823 chore(deps-dev): bump @aws-sdk/credential-provider-env (#1894)
a8be382 chore(deps-dev): bump @biomejs/biome from 2.5.3 to 2.5.4 (#1893)
e000376 chore: Update dist
Additional commits viewable in compare view

Updates taiki-e/install-action from 2.76.0 to 2.85.2

Release notes

Sourced from taiki-e/install-action's releases.

2.85.2

Update prek@latest to 0.4.11.

Update mise@latest to 2026.7.13.

Update kingfisher@latest to 1.109.0.

2.85.1

Update vacuum@latest to 0.30.0.

Update uv@latest to 0.11.32.

Update mise@latest to 2026.7.12.

Update cyclonedx@latest to 0.33.1.

Update cargo-neat@latest to 0.5.2.

2.85.0

Support wild (alias: wild-linker). (#1949)

Support bpf-linker. (#1950)

Support rafn. (#1935, thanks @DarkWanderer)

Update cargo-neat@latest to 0.5.1.

Update zizmor@latest to 1.28.0.

Update wasmtime@latest to 47.0.2.

Update uv@latest to 0.11.31.

Update syft@latest to 1.49.0.

2.84.1

Update wasmtime@latest to 47.0.1.

Update wasm-tools@latest to 1.254.0.

Update uv@latest to 0.11.30.

Update mise@latest to 2026.7.11.

Update cargo-neat@latest to 0.5.0.

Update cargo-crap@latest to 0.3.1.

Update biome@latest to 2.5.5.

... (truncated)

Changelog

Sourced from taiki-e/install-action's changelog.

Changelog

All notable changes to this project will be documented in this file.

This project adheres to Semantic Versioning.

[Unreleased]

[2.85.2] - 2026-07-26

Update prek@latest to 0.4.11.

Update mise@latest to 2026.7.13.

Update kingfisher@latest to 1.109.0.

[2.85.1] - 2026-07-25

Update vacuum@latest to 0.30.0.

Update uv@latest to 0.11.32.

Update mise@latest to 2026.7.12.

Update cyclonedx@latest to 0.33.1.

Update cargo-neat@latest to 0.5.2.

[2.85.0] - 2026-07-23

Support wild (alias: wild-linker). (#1949)

Support bpf-linker. (#1950)

Support rafn. (#1935, thanks @DarkWanderer)

Update cargo-neat@latest to 0.5.1.

Update zizmor@latest to 1.28.0.

Update wasmtime@latest to 47.0.2.

Update uv@latest to 0.11.31.

Update syft@latest to 1.49.0.

... (truncated)

Commits

41049aa Release 2.85.2
dfcf365 Update prek@latest to 0.4.11
eea03cc Update mise@latest to 2026.7.13
81ca2fe Update martin manifest
cc90ed0 Update kingfisher@latest to 1.109.0
55639a3 Update cargo-shear manifest
3d7d7cd Release 2.85.1
d09ccb4 Update vacuum@latest to 0.30.0
ac43dee Update uv@latest to 0.11.32
49b1697 Update prek manifest
Additional commits viewable in compare view

Updates actions/setup-java from 5.2.0 to 5.6.0

Release notes

Sourced from actions/setup-java's releases.

v5.6.0

What's Changed

Backport to v5: Add Maven compiler problem matcher for javac diagnostics by @brunoborges in actions/setup-java#1087

feat: expose cache-primary-key output (#597) [v5 backport] by @brunoborges in actions/setup-java#1089

dist: Cover Tencent Kona JDK 25 (#1108) [v5 backport] by @brunoborges in actions/setup-java#1110

Backport #1111: Preserve Maven toolchains across repeated setup-java runs (#1099) by @brunoborges in actions/setup-java#1113

Backport #1097/#1098 to v5: cache Maven and Gradle wrapper distributions separately by @brunoborges in actions/setup-java#1122

Full Changelog: actions/setup-java@v5...v5.6.0

v5.5.0

What's Changed

chore: enforce pre-PR validation (aggregate scripts, git hooks, PR checklist) by @brunoborges in actions/setup-java#1061

Bump github/codeql-action from 3 to 4 by @dependabot[bot] in actions/setup-java#1069

Bump actions/checkout from 6 to 7 by @dependabot[bot] in actions/setup-java#1068

Bump actions/setup-python from 5 to 6 by @dependabot[bot] in actions/setup-java#1067

Bump @typescript-eslint/parser from 8.61.1 to 8.62.0 by @dependabot[bot] in actions/setup-java#1062

feat: Add verify-signature plumbing and Temurin+Microsoft verification support by @johnoliver in actions/setup-java#1060

Updated jetbrains test: https.request() now catches errors. This fixes leaking tests as well by @jmjaffe37 in actions/setup-java#1070

Fix arm64 e2e workflow tests mislabeled as x64 by @brunoborges with @Copilot in actions/setup-java#1073

feat: suppress Maven transfer progress via MAVEN_ARGS by default (add show-download-progress input) by @brunoborges in actions/setup-java#1053

feat: Disable interactiveMode in generated Maven settings.xml by @brunoborges with @Copilot in actions/setup-java#1052

Bump prettier from 3.6.2 to 3.9.1 by @dependabot[bot] in actions/setup-java#1066

chore(deps-dev): bump eslint-plugin-jest from 29.0.1 to 29.15.4 by @dependabot[bot] in actions/setup-java#1074

fix: Maven Toolchains grows unexpectedly by @Okeanos in actions/setup-java#534

dist: Support Tencent Kona JDK by @johnshajiang in actions/setup-java#672

feat: Add set-default option by @gsmet in actions/setup-java#1017

docs: document problem matcher (and how to disable it), Maven Wrapper caching, and generated interactiveMode by @brunoborges in actions/setup-java#1075

feat: Add distribution detection support to .sdkmanrc file by @lukaszgyg in actions/setup-java#975

New Contributors

@jmjaffe37 made their first contribution in actions/setup-java#1070

@gsmet made their first contribution in actions/setup-java#1017

@lukaszgyg made their first contribution in actions/setup-java#975

Full Changelog: actions/setup-java@v5...v5.5.0

v5.4.0

What's Changed

Bump @typescript-eslint/parser from 8.48.0 to 8.61.1 by @dependabot[bot] in actions/setup-java#1021

Fix codeql workflow permissions by @jsoref in actions/setup-java#993

fix CodeQL permissions by @gdams in actions/setup-java#1025

fix: reject non-semver candidate versions in isVersionSatisfies by @sproctor in actions/setup-java#1009

Bump @actions/cache to 5.1.0, handle cache write denied by @jasongin in actions/setup-java#1026

Add Maven Wrapper cache feature by @mahabaleshwars in actions/setup-java#1027

Spelling by @jsoref in actions/setup-java#713

add link to advanced configuration for JetBrains by @robstoll in actions/setup-java#850

docs(action): fix missing required or default fields by @kranthipoturaju in actions/setup-java#1007

feat: add microsoft openjdk 17.0.18 by @al-kau in actions/setup-java#1002

... (truncated)

Commits

03ad4de Backport #1097/#1098: cache Maven and Gradle wrapper distributions separately...
d229d2e Backport #1111: Preserve Maven toolchains across repeated setup-java runs (#1...
bbf0f69 dist: Cover Tencent Kona JDK 25 (#1110)
513edc4 feat: expose cache-primary-key output (#597) [v5 backport] (#1089)
62df799 Add Maven compiler problem matcher for javac diagnostics (#1087)
176156a chore: bump version to 5.6.0 for v5 release line
bf7b8de build: rebuild dist for backported changes (#1079, #1083, #1084)
0173e6d Infer distribution from asdf .tool-versions vendor prefix (#1084)
f45cd82 Rename jdkFile input to jdk-file with deprecated alias (#1083)
e2863ad Map Zulu x86 architecture to i686 for Azul Metadata API (#1079)
Additional commits viewable in compare view

Updates hashicorp/setup-terraform from 4.0.0 to 4.0.1

Release notes

Sourced from hashicorp/setup-terraform's releases.

v4.0.1

BUG FIXES:

Fix Node 24 DEP0169 url.parse() deprecation warning by updating @hashicorp/js-releases to v1.7.7 (#549)

Changelog

Sourced from hashicorp/setup-terraform's changelog.

4.0.1 (2026-05-12)

BUG FIXES:

Fix Node 24 DEP0169 url.parse() deprecation warning by updating @hashicorp/js-releases to v1.7.7 (#549)

4.0.0 (2026-02-24)

BREAKING CHANGES:

Upgrade to Node.js 24 - setup-terraform now requires Node.js 24 (#503)

3.1.2 (2024-08-19)

NOTES:

This release introduces no functional changes. It does however include dependency updates which address upstream CVEs. (#430)

3.1.1 (2024-05-07)

BUG FIXES:

wrapper: Fix wrapper to output to stdout and stderr immediately when data is received (#395)

3.1.0 (2024-04-23)

ENHANCEMENTS:

Automatically fallback to darwin/amd64 for Terraform versions before 1.0.2 as releases for darwin/arm64 are not available (#409)

3.0.0 (2023-10-30)

NOTES:

Updated default runtime to node20 (#346)

The wrapper around the installed Terraform binary has been fixed to return the exact STDOUT and STDERR from Terraform when executing commands. Previous versions of setup-terraform may have required workarounds to process the STDOUT in bash, such as filtering out the first line or selectively parsing STDOUT with jq. These workarounds may need to be adjusted with v3.0.0, which will now return just the STDOUT/STDERR from Terraform with no errant characters/statements. (#367)

BUG FIXES:

Fixed malformed stdout when wrapper is enabled (#367)

[2.0.3] (2022-11-01)

NOTES

Reduced occurrences of GitHub Actions warnings for setting output #247

[2.0.2] (2022-10-12)

BUG FIXES

... (truncated)

Commits

dfe3c3f Update package version
61e02cf Update changelog
36079f9 fix: update @hashicorp/js-releases to v1.7.7 to resolve Node 24 DEP0169 warni...
af2ccf2 update axios brace expansion flatted picomatch (#551)
5b1ab0e Bump follow-redirects from 1.15.11 to 1.16.0 (#542)
ca190bf Bump miniscruff/changie-action in the github-actions group (#541)
30128a2 chore: update CI node version from 20 to 24 (#544)
b0cc02d Bump undici from 6.23.0 to 6.24.1 (#539)
3d7cd03 Update README.md with latest versions (#536)
fa68287 Bump actions/setup-node from 6.2.0 to 6.3.0 in the github-actions group (#537)
Additional commits viewable in compare view

Updates docker/setup-buildx-action from 4.0.0 to 4.2.0

Release notes

Sourced from docker/setup-buildx-action's releases.

v4.2.0

Preserve names in esbuild bundle by @crazy-max in docker/setup-buildx-action#572

Bump @actions/core from 3.0.0 to 3.0.1 in docker/setup-buildx-action#551

Bump @docker/actions-toolkit from 0.90.0 to 0.92.0 in docker/setup-buildx-action#557 docker/setup-buildx-action#580

Bump @sigstore/core from 3.1.0 to 3.2.1 in docker/setup-buildx-action#573

Bump @sigstore/verify from 3.1.0 to 3.1.1 in docker/setup-buildx-action#576

Bump js-yaml from 4.1.1 to 5.2.0 in docker/setup-buildx-action#562

Bump sigstore from 4.1.0 to 4.1.1 in docker/setup-buildx-action#577

Bump tmp from 0.2.5 to 0.2.7 in docker/setup-buildx-action#556

Bump undici from 6.25.0 to 6.27.0 in docker/setup-buildx-action#570

Bump vite from 7.3.2 to 7.3.6 in docker/setup-buildx-action#569

Full Changelog: docker/setup-buildx-action@v4.1.0...v4.2.0

v4.1.0

Bump @docker/actions-toolkit from 0.79.0 to 0.90.0 in docker/setup-buildx-action#489

Bump brace-expansion from 1.1.12 to 5.0.6 in docker/setup-buildx-action#547 docker/setup-buildx-action#508

Bump fast-xml-builder from 1.0.0 to 1.2.0 in docker/setup-buildx-action#540

Bump fast-xml-parser from 5.4.2 to 5.8.0 in docker/setup-buildx-action#496

Bump flatted from 3.3.3 to 3.4.2 in docker/setup-buildx-action#499

Bump glob from 10.3.12 to 13.0.6 in docker/setup-buildx-action#495

Bump handlebars from 4.7.8 to 4.7.9 in docker/setup-buildx-action#504

Bump lodash from 4.17.23 to 4.18.1 in docker/setup-buildx-action#523

Bump picomatch from 4.0.3 to 4.0.4 in docker/setup-buildx-action#503

Bump postcss from 8.5.6 to 8.5.10 in docker/setup-buildx-action#537

Bump tar from 6.2.1 to 7.5.15 in docker/setup-buildx-action#545

Bump undici from 6.23.0 to 6.25.0 in docker/setup-buildx-action#492

Bump vite from 7.3.1 to 7.3.2 in docker/setup-buildx-action#520

Full Changelog: docker/setup-buildx-action@v4.0.0...v4.1.0

Commits

bb05f3f Merge pull request #580 from docker/dependabot/npm_and_yarn/docker/actions-to...
321c814 [dependabot skip] chore: update generated content
b9a36ef build(deps): bump @docker/actions-toolkit from 0.91.0 to 0.92.0
ebeab24 Merge pull request #570 from docker/dependabot/npm_and_yarn/undici-6.27.0
5c7b8ae [dependabot skip] chore: update generated content
037e618 build(deps): bump undici from 6.25.0 to 6.27.0
66080e5 Merge pull request #577 from docker/dependabot/npm_and_yarn/sigstore-4.1.1
409aef0 Merge pull request #562 from docker/dependabot/npm_and_yarn/js-yaml-4.2.0
49c6e42 build(deps): bump sigstore from 4.1.0 to 4.1.1
2211273 [dependabot skip] chore: update generated content
Additional commits viewable in compare view

Updates docker/setup-qemu-action from 4.0.0 to 4.2.0

Release notes

Sourced from docker/setup-qemu-action's releases.

v4.2.0

Preserve names in esbuild bundle by @crazy-max in docker/setup-qemu-action#311

Bump @actions/core from 3.0.0 to 3.0.1 in docker/setup-qemu-action#295

Bump @docker/actions-toolkit from 0.91.0 to 0.92.0 in docker/setup-qemu-action#315

Bump @sigstore/core from 3.1.0 to 3.2.1 in docker/setup-qemu-action#312

Bump js-yaml from 4.1.1 to 4.2.0 in docker/setup-qemu-action#310

Bump tmp from 0.2.6 to 0.2.7 in docker/setup-qemu-action#304

Bump undici from 6.26.0 to 6.27.0 in docker/setup-qemu-action#308

Bump vite from 7.3.2 to 7.3.6 in docker/setup-qemu-action#307

Full Changelog: docker/setup-qemu-action@v4.1.0...v4.2.0

v4.1.0

Add reset input to uninstall current emulators by @crazy-max in docker/setup-qemu-action#21

Bump @docker/actions-toolkit from 0.77.0 to 0.91.0 in docker/setup-qemu-action#250 docker/setup-qemu-action#247

Bump brace-expansion from 1.1.12 to 1.1.15 in docker/setup-qemu-action#265

Bump fast-xml-builder from 1.0.0 to 1.2.0 in docker/setup-qemu-action#286

Bump fast-xml-parser from 5.4.2 to 5.8.0 in docker/setup-qemu-action#255

Bump flatted from 3.3.3 to 3.4.2 in docker/setup-qemu-action#257

Bump glob from 10.3.15 to 10.5.0 in docker/setup-qemu-action#254

Bump handlebars from 4.7.8 to 4.7.9 in docker/setup-qemu-action#262

Bump lodash from 4.17.23 to 4.18.1 in docker/setup-qemu-action#273

Bump postcss from 8.5.6 to 8.5.10 in docker/setup-qemu-action#285

Bump tar from 6.2.1 to 7.5.15 in docker/setup-qemu-action#287

Bump tmp from 0.2.5 to 0.2.6 in docker/setup-qemu-action#291

Bump undici from 6.23.0 to 6.26.0 in docker/setup-qemu-action#251

Bump vite from 7.3.1 to 7.3.2 in docker/setup-qemu-action#271

Full Changelog: docker/setup-qemu-action@v4.0.0...v4.1.0

Commits

96fe6ef Merge pull request #315 from docker/dependabot/npm_and_yarn/docker/actions-to...
31f08d3 [dependabot skip] chore: update generated content
4e7017a build(deps): bump @docker/actions-toolkit from 0.91.0 to 0.92.0
0eca235 Merge pull request #314 from crazy-max/fix-yarn-preapprove-actions-toolkit
ea66a41 chore: allow actions-toolkit to bypass yarn age gate
451542b Merge pull request #308 from docker/dependabot/npm_and_yarn/undici-6.27.0
532ae00 [dependabot skip] chore: update generated content
b6f5af6 build(deps): bump undici from 6.26.0 to 6.27.0
cf96b86 Merge pull request #304 from docker/dependabot/npm_and_yarn/tmp-0.2.7
f0ba643 [dependabot skip] chore: update generated content
Additional commits viewable in compare view

Updates peaceiris/actions-gh-pages from 4.0.0 to 4.1.0

Release notes

Sourced from peaceiris/actions-gh-pages's releases.

actions-github-pages v4.1.0

See CHANGELOG.md for more details.

What's Changed

Actions examples: update to modern versions of actions by @clintonsteiner in peaceiris/actions-gh-pages#1117

chore: update Node runtime and dependencies by @peaceiris in peaceiris/actions-gh-pages#1147

ci: harden GitHub Actions workflows by @peaceiris in peaceiris/actions-gh-pages#1156

New Contributors

@clintonsteiner made their first contribution in peaceiris/actions-gh-pages#1117

Full Changelog: peaceiris/actions-gh-pages@v4.0.0...v4.1.0

Changelog

Sourced from peaceiris/actions-gh-pages's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

4.1.0 (2026-05-12)

chore

add .codex/ (94ae2d2)

add hasInstallScript true (494ec9b)

update Node runtime and dependencies (#1147) (954f6bf), closes #1147

ci

change automerge to false (4b09552)

harden GitHub Actions workflows (#1156) (aa0466c), closes #1156

docs

add repository guidelines (a1f94b5)

bump to v4 from v3 (a16b61f)

fix note style (0b7567f)

update versions of actions (#1117) (aa83d0c), closes #1117

4.0.0 (2024-04-08)

build

node 20.11.1 (5049354)

chore

bump node16 to node20 (#1067) (4eb285e), closes #1067

downgrade engines.npm to 8.0.0 (87231bc)

ci

pin node-version to 18 (#981) (65ebf11), closes #981

docs

add Release Strategy (67f80d9)

fix link to Nuxt github-pages (#980) (88b4d2a), closes #980

remove braces in if conditions (#920) (0fbd122), closes #920

... (truncated)

Commits

84c30a8 chore(release): 4.1.0
6fa0f50 chore(release): Add build assets
3b7506a chore(deps): update dependency trim-newlines to v5 (#1158)
aa0466c ci: harden GitHub Actions workflows (#1156)
31835fb chore(deps): update actions/labeler action to v6 (#1153)
f4f1bc4 chore(deps): update peaceiris/actions-mdbook action to v2 (#1161)
a5e4979 chore(deps): update dependency ubuntu to v24 (#1159)
6cc3bac chore(deps): update github/codeql-action action to v4 (#1160)
0d6e9f4 chore(deps): update actions/setup-node action to v6 (#1154)
d70c101 chore(deps): update actions/upload-artifact action to v7 (#1155)
Additional commits viewable in compare view

Updates actions/attest-build-provenance from 4.1.0 to 4.1.1

Release notes

Sourced from actions/attest-build-provenance's releases.

v4.1.1

[!NOTE] As of version 4, actions/attest-build-provenance is simply a wrapper on top of actions/attest.

Existing applications may continue to use the attest-build-provenance action, but new implementations should use actions/attest instead.

What's Changed

Update actions/attest to v4.1.1 by @bdehamer in actions/attest-build-provenance#858

Full Changelog: actions/attest-build-provenance@v4.1.0...v4.1.1

Commits

0f67c3f Bump actions/checkout from 6.0.3 to 7.0.0 (#857)
21b787d Update actions/attest to v4.1.1 (#858)
f14352a add dependabot cooldown (#851)
2c04a00 Bump actions/checkout from 6.0.2 to 6.0.3 in the actions-minor group (#850)
10334b5 remove badges from README (#840)
c5efebd remove prober workflows (#837)
See full diff in compare view

Updates sigstore/cosign-installer from 4.1.1 to 4.1.2

Release notes

Sourced from sigstore/cosign-installer's releases.

v4.1.2

What's Changed

Bump cosign to 3.0.6 in sigstore/cosign-installer#232

Commits

…updates Bumps the actions-all group with 12 updates in the / directory: | Package | From | To | | --- | --- | --- | | [aws-actions/configure-aws-credentials](https://github.com/aws-actions/configure-aws-credentials) | `6.1.0` | `6.2.3` | | [taiki-e/install-action](https://github.com/taiki-e/install-action) | `2.76.0` | `2.85.2` | | [actions/setup-java](https://github.com/actions/setup-java) | `5.2.0` | `5.6.0` | | [hashicorp/setup-terraform](https://github.com/hashicorp/setup-terraform) | `4.0.0` | `4.0.1` | | [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `4.0.0` | `4.2.0` | | [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) | `4.0.0` | `4.2.0` | | [peaceiris/actions-gh-pages](https://github.com/peaceiris/actions-gh-pages) | `4.0.0` | `4.1.0` | | [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance) | `4.1.0` | `4.1.1` | | [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) | `4.1.1` | `4.1.2` | | [softprops/action-gh-release](https://github.com/softprops/action-gh-release) | `3.0.0` | `3.0.2` | | [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) | `4.35.3` | `4.37.3` | | [ossf/scorecard-action](https://github.com/ossf/scorecard-action) | `2.4.3` | `2.4.4` | Updates `aws-actions/configure-aws-credentials` from 6.1.0 to 6.2.3 - [Release notes](https://github.com/aws-actions/configure-aws-credentials/releases) - [Changelog](https://github.com/aws-actions/configure-aws-credentials/blob/main/CHANGELOG.md) - [Commits](aws-actions/configure-aws-credentials@ec61189...e6de054) Updates `taiki-e/install-action` from 2.76.0 to 2.85.2 - [Release notes](https://github.com/taiki-e/install-action/releases) - [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md) - [Commits](taiki-e/install-action@711e1c3...41049aa) Updates `actions/setup-java` from 5.2.0 to 5.6.0 - [Release notes](https://github.com/actions/setup-java/releases) - [Commits](actions/setup-java@be666c2...03ad4de) Updates `hashicorp/setup-terraform` from 4.0.0 to 4.0.1 - [Release notes](https://github.com/hashicorp/setup-terraform/releases) - [Changelog](https://github.com/hashicorp/setup-terraform/blob/main/CHANGELOG.md) - [Commits](hashicorp/setup-terraform@5e8dbf3...dfe3c3f) Updates `docker/setup-buildx-action` from 4.0.0 to 4.2.0 - [Release notes](https://github.com/docker/setup-buildx-action/releases) - [Commits](docker/setup-buildx-action@4d04d5d...bb05f3f) Updates `docker/setup-qemu-action` from 4.0.0 to 4.2.0 - [Release notes](https://github.com/docker/setup-qemu-action/releases) - [Commits](docker/setup-qemu-action@ce36039...96fe6ef) Updates `peaceiris/actions-gh-pages` from 4.0.0 to 4.1.0 - [Release notes](https://github.com/peaceiris/actions-gh-pages/releases) - [Changelog](https://github.com/peaceiris/actions-gh-pages/blob/main/CHANGELOG.md) - [Commits](peaceiris/actions-gh-pages@4f9cc66...84c30a8) Updates `actions/attest-build-provenance` from 4.1.0 to 4.1.1 - [Release notes](https://github.com/actions/attest-build-provenance/releases) - [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md) - [Commits](actions/attest-build-provenance@a2bbfa2...0f67c3f) Updates `sigstore/cosign-installer` from 4.1.1 to 4.1.2 - [Release notes](https://github.com/sigstore/cosign-installer/releases) - [Commits](sigstore/cosign-installer@cad07c2...6f9f177) Updates `softprops/action-gh-release` from 3.0.0 to 3.0.2 - [Release notes](https://github.com/softprops/action-gh-release/releases) - [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md) - [Commits](softprops/action-gh-release@b430933...3d0d988) Updates `github/codeql-action/upload-sarif` from 4.35.3 to 4.37.3 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@e46ed2c...e4fba86) Updates `ossf/scorecard-action` from 2.4.3 to 2.4.4 - [Release notes](https://github.com/ossf/scorecard-action/releases) - [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md) - [Commits](ossf/scorecard-action@4eaacf0...2d11466) --- updated-dependencies: - dependency-name: aws-actions/configure-aws-credentials dependency-version: 6.2.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-all - dependency-name: taiki-e/install-action dependency-version: 2.85.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-all - dependency-name: actions/setup-java dependency-version: 5.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-all - dependency-name: hashicorp/setup-terraform dependency-version: 4.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-all - dependency-name: docker/setup-buildx-action dependency-version: 4.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-all - dependency-name: docker/setup-qemu-action dependency-version: 4.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-all - dependency-name: peaceiris/actions-gh-pages dependency-version: 4.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-all - dependency-name: actions/attest-build-provenance dependency-version: 4.1.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-all - dependency-name: sigstore/cosign-installer dependency-version: 4.1.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-all - dependency-name: softprops/action-gh-release dependency-version: 3.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-all - dependency-name: github/codeql-action/upload-sarif dependency-version: 4.37.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-all - dependency-name: ossf/scorecard-action dependency-version: 2.4.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-all ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-07-27T18:09:11Z

Labels

The following labels could not be found: github-actions. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

dependabot Bot added the dependencies Pull requests that update a dependency file label Jul 27, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

deps(actions): bump the actions-all group across 1 directory with 12 updates - #66

deps(actions): bump the actions-all group across 1 directory with 12 updates#66
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions-all-aa21b908d5

dependabot Bot commented on behalf of github Jul 27, 2026

Uh oh!

dependabot Bot commented on behalf of github Jul 27, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Jul 27, 2026

v6.2.3

6.2.3 (2026-07-22)

Bug Fixes

v6.2.2

6.2.2 (2026-07-07)

Miscellaneous Chores

v6.2.1

6.2.1 (2026-06-26)

Bug Fixes

v6.2.0

6.2.0 (2026-06-01)

Features

Bug Fixes

v6.1.3

6.1.3 (2026-05-27)

Bug Fixes

v6.1.2

Changelog

6.2.3 (2026-07-22)

Bug Fixes

6.2.2 (2026-07-07)

Miscellaneous Chores

6.2.1 (2026-06-26)

Bug Fixes

6.2.0 (2026-06-01)

Features

Bug Fixes

6.1.3 (2026-05-28)

Bug Fixes

6.1.2 (2026-05-26)

2.85.2

2.85.1

2.85.0

2.84.1

Changelog

[Unreleased]

[2.85.2] - 2026-07-26

[2.85.1] - 2026-07-25

[2.85.0] - 2026-07-23

v5.6.0

What's Changed

v5.5.0

What's Changed

New Contributors

v5.4.0

What's Changed

v4.0.1

4.0.1 (2026-05-12)

4.0.0 (2026-02-24)

3.1.2 (2024-08-19)

3.1.1 (2024-05-07)

3.1.0 (2024-04-23)

3.0.0 (2023-10-30)

[2.0.3] (2022-11-01)

NOTES

[2.0.2] (2022-10-12)

BUG FIXES

v4.2.0

v4.1.0

v4.2.0

v4.1.0

actions-github-pages v4.1.0

What's Changed

New Contributors

Changelog

4.1.0 (2026-05-12)

chore

ci

docs

4.0.0 (2024-04-08)

build

chore

ci

docs

v4.1.1

What's Changed

v4.1.2

What's Changed