Skip to content

chore(deps): bump the github-actions group with 7 updates - #523

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-5f8dca132f
Open

chore(deps): bump the github-actions group with 7 updates#523
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-5f8dca132f

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 18, 2026

Copy link
Copy Markdown

Bumps the github-actions group with 7 updates:

Package From To
actions/checkout 4.4.0 7.0.1
actions/upload-artifact 4.6.2 7.0.1
actions/setup-python 5.6.0 7.0.0
prefix-dev/setup-pixi 0.8.1 0.10.1
marocchino/sticky-pull-request-comment 2.9.4 3.0.5
dawidd6/action-download-artifact 6 21
snok/install-poetry 1.3.4 1.4.2

Updates actions/checkout from 4.4.0 to 7.0.1

Release notes

Sourced from actions/checkout's releases.

v7.0.1

What's Changed

Full Changelog: actions/checkout@v7...v7.0.1

v7.0.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v6.0.3...v7.0.0

v6.1.0

What's Changed

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: actions/checkout@v6.0.3...v6.1.0

v6.0.3

What's Changed

New Contributors

Full Changelog: actions/checkout@v6...v6.0.3

v6.0.2

What's Changed

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

v7.0.1

v7.0.0

v6.0.3

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

... (truncated)

Commits

Updates actions/upload-artifact from 4.6.2 to 7.0.1

Release notes

Sourced from actions/upload-artifact's releases.

v7.0.1

What's Changed

Full Changelog: actions/upload-artifact@v7...v7.0.1

v7.0.0

v7 What's new

Direct Uploads

Adds support for uploading single files directly (unzipped). Callers can set the new archive parameter to false to skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. The name parameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.

ESM

To support new versions of the @actions/* packages, we've upgraded the package to ESM.

What's Changed

New Contributors

Full Changelog: actions/upload-artifact@v6...v7.0.0

v6.0.0

v6 - What's new

[!IMPORTANT] actions/upload-artifact@v6 now runs on Node.js 24 (runs.using: node24) and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading.

Node.js 24

This release updates the runtime to Node.js 24. v5 had preliminary support for Node.js 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.

What's Changed

Full Changelog: actions/upload-artifact@v5.0.0...v6.0.0

v5.0.0

What's Changed

... (truncated)

Commits
  • 043fb46 Merge pull request #797 from actions/yacaovsnc/update-dependency
  • 634250c Include changes in typespec/ts-http-runtime 0.3.5
  • e454baa Readme: bump all the example versions to v7 (#796)
  • 74fad66 Update the readme with direct upload details (#795)
  • bbbca2d Support direct file uploads (#764)
  • 589182c Upgrade the module to ESM and bump dependencies (#762)
  • 47309c9 Merge pull request #754 from actions/Link-/add-proxy-integration-tests
  • 02a8460 Add proxy integration test
  • b7c566a Merge pull request #745 from actions/upload-artifact-v6-release
  • e516bc8 docs: correct description of Node.js 24 support in README
  • Additional commits viewable in compare view

Updates actions/setup-python from 5.6.0 to 7.0.0

Release notes

Sourced from actions/setup-python's releases.

v7.0.0

What's Changed

Enhancements

Bug Fix

Dependency Upgrade

New Contributors

Full Changelog: actions/setup-python@v6...v7.0.0

v6.3.0

What's Changed

Enhancement

Dependency update

Documentation

New Contributors

Full Changelog: actions/setup-python@v6.2.0...v6.3.0

v6.2.0

What's Changed

Dependency Upgrades

... (truncated)

Commits

Updates prefix-dev/setup-pixi from 0.8.1 to 0.10.1

Release notes

Sourced from prefix-dev/setup-pixi's releases.

v0.10.1

What's Changed

⬆️ Dependency updates

🤷🏻 Other changes

New Contributors

Full Changelog: prefix-dev/setup-pixi@v0.10.0...v0.10.1

v0.10.0

What's Changed

💥 Breaking changes

⬆️ Dependency updates

New Contributors

Full Changelog: prefix-dev/setup-pixi@v0.9.6...v0.10.0

v0.9.6

What's Changed

✨ New features

⬆️ Dependency updates

🤷🏻 Other changes

New Contributors

Full Changelog: prefix-dev/setup-pixi@v0.9.5...v0.9.6

v0.9.5

... (truncated)

Commits
  • f00437f Update dependencies and add pnpm workspace configuration (#279)
  • d0c199d chore(deps): bump the gh-actions group with 3 updates (#276)
  • 2253d9c chore(deps): bump the gh-actions group with 3 updates (#273)
  • c5359a3 chore(deps): bump the nodejs group with 6 updates (#274)
  • a09b624 feat: change post-cleanup default to false (#272)
  • 947fc1f chore(deps): bump the nodejs group with 6 updates (#269)
  • 36c1c8c chore(deps): bump the gh-actions group with 2 updates (#268)
  • 5185adf feat: Add persist-credentials option (#266)
  • 92596c3 chore(deps): bump the nodejs group with 6 updates (#264)
  • 68a459a chore(deps): bump the gh-actions group with 5 updates (#263)
  • Additional commits viewable in compare view

Updates marocchino/sticky-pull-request-comment from 2.9.4 to 3.0.5

Release notes

Sourced from marocchino/sticky-pull-request-comment's releases.

v3.0.5

What's Changed

Full Changelog: marocchino/sticky-pull-request-comment@v3.0.4...v3.0.5

v3.0.4

What's Changed

Full Changelog: marocchino/sticky-pull-request-comment@v3.0.3...v3.0.4

v3.0.3

What's Changed

... (truncated)

Commits
  • 5770ad5 📦️ Build
  • 2c19060 build(deps-dev): Bump @​biomejs/biome from 2.4.14 to 2.5.2 (#1730)
  • 3d24e5a build(deps-dev): Bump js-yaml from 4.1.1 to 5.2.1 (#1732)
  • 3604821 build(deps-dev): Bump @​rollup/plugin-commonjs from 29.0.2 to 29.0.3 (#1710)
  • a4d9c0f build(deps-dev): Bump @​types/node from 25.9.1 to 26.1.0 (#1731)
  • ae65a58 build(deps-dev): Bump vitest from 4.1.7 to 4.1.9 (#1719)
  • 8680321 build(deps-dev): Bump vite from 8.0.13 to 8.0.16 (#1720)
  • 5d40239 build(deps): Bump actions/checkout from 6 to 7 (#1721)
  • 39ab01d build(deps-dev): Bump rollup from 4.60.4 to 4.62.2 (#1722)
  • b2660f1 build(deps): Bump undici from 6.24.0 to 6.27.0 (#1725)
  • Additional commits viewable in compare view

Updates dawidd6/action-download-artifact from 6 to 21

Release notes

Sourced from dawidd6/action-download-artifact's releases.

v21

What's Changed

New Contributors

Full Changelog: dawidd6/action-download-artifact@v20...v21

v20

What's Changed

Full Changelog: dawidd6/action-download-artifact@v19...v20

v19

What's Changed

Full Changelog: dawidd6/action-download-artifact@v18...v19

v18

What's Changed

Full Changelog: dawidd6/action-download-artifact@v17...v18

v17

What's Changed

... (truncated)

Commits
  • b6e2e70 node_modules: update (#405)
  • 1708cb3 Download artifacts in creation order (#398)
  • 00b585a build(deps): bump filesize from 11.0.16 to 11.0.17 (#404)
  • 0414c42 build(deps): bump @​actions/core from 3.0.0 to 3.0.1 (#401)
  • c802aad build(deps): bump @​actions/github from 9.1.0 to 9.1.1 (#400)
  • ef06691 build(deps): bump fast-xml-parser from 5.5.7 to 5.7.1 (#402)
  • 026702e build(deps): bump filesize from 11.0.15 to 11.0.16 (#399)
  • 09d0677 build(deps): bump @​actions/github from 9.0.0 to 9.1.0 (#396)
  • 8305c0f node_modules: update (#395)
  • 542af03 build(deps): bump lodash from 4.17.23 to 4.18.1 (#394)
  • Additional commits viewable in compare view

Updates snok/install-poetry from 1.3.4 to 1.4.2

Release notes

Sourced from snok/install-poetry's releases.

v1.4.2

Improvements

  • Pinned the Poetry install script to a specific commit (snok/install-poetry#176) to guard against potential supply-chain attacks
  • Consolidated the install script for Unix and Windows

Misc

  • Minor shell script cleanup
  • Modernized docs examples
  • Updated Python and Poetry versions
  • Upgraded CI workflow versions
  • Upgraded linters and formatters

New Contributors

Full Changelog: snok/install-poetry@v1.4.1...v1.4.2

v1.4.1

What's Changed

    Description has been truncated

Bumps the github-actions group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `4.4.0` | `7.0.1` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4.6.2` | `7.0.1` |
| [actions/setup-python](https://github.com/actions/setup-python) | `5.6.0` | `7.0.0` |
| [prefix-dev/setup-pixi](https://github.com/prefix-dev/setup-pixi) | `0.8.1` | `0.10.1` |
| [marocchino/sticky-pull-request-comment](https://github.com/marocchino/sticky-pull-request-comment) | `2.9.4` | `3.0.5` |
| [dawidd6/action-download-artifact](https://github.com/dawidd6/action-download-artifact) | `6` | `21` |
| [snok/install-poetry](https://github.com/snok/install-poetry) | `1.3.4` | `1.4.2` |


Updates `actions/checkout` from 4.4.0 to 7.0.1
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@11d5960...3d3c42e)

Updates `actions/upload-artifact` from 4.6.2 to 7.0.1
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@ea165f8...043fb46)

Updates `actions/setup-python` from 5.6.0 to 7.0.0
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](actions/setup-python@a26af69...5fda3b9)

Updates `prefix-dev/setup-pixi` from 0.8.1 to 0.10.1
- [Release notes](https://github.com/prefix-dev/setup-pixi/releases)
- [Commits](prefix-dev/setup-pixi@ba3bb36...f00437f)

Updates `marocchino/sticky-pull-request-comment` from 2.9.4 to 3.0.5
- [Release notes](https://github.com/marocchino/sticky-pull-request-comment/releases)
- [Commits](marocchino/sticky-pull-request-comment@7737449...5770ad5)

Updates `dawidd6/action-download-artifact` from 6 to 21
- [Release notes](https://github.com/dawidd6/action-download-artifact/releases)
- [Commits](dawidd6/action-download-artifact@bf251b5...b6e2e70)

Updates `snok/install-poetry` from 1.3.4 to 1.4.2
- [Release notes](https://github.com/snok/install-poetry/releases)
- [Commits](snok/install-poetry@93ada01...a783c32)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/upload-artifact
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/setup-python
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: prefix-dev/setup-pixi
  dependency-version: 0.10.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: marocchino/sticky-pull-request-comment
  dependency-version: 3.0.5
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: dawidd6/action-download-artifact
  dependency-version: '21'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: snok/install-poetry
  dependency-version: 1.4.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Aug 18, 2026
@github-actions

github-actions Bot commented Aug 18, 2026

Copy link
Copy Markdown

Performance Report (Linux)

Result: ✅ Within regression budgets

Metric PR Baseline Delta Change Blocking budget Status
Server startup P50 1ms 1ms +0ms +0.0% >5ms and >100%
Server startup P95 1ms 1ms +0ms +0.0% >50ms and >200%
Full refresh P50 54ms 56ms -2ms -3.6% >25ms and >30%
Full refresh P95 60ms 58ms +2ms +3.4% >50ms and >50% 🔺
Time to first environment P50 13ms 12ms +1ms +8.3% >20ms and >100% 🔺
Time to first environment P95 15ms 14ms +1ms +7.1% >25ms and >100% 🔺
Cold refresh P50 141ms 151ms -10ms -6.6% >100ms and >50%
Workload PR Baseline
Environments 5 5
Managers 1 1

A regression must exceed both the documented absolute and relative budget. Environment and manager inventories must match exactly within the same inventory schema.

@github-actions

github-actions Bot commented Aug 18, 2026

Copy link
Copy Markdown

Test Coverage Report (Linux)

Result: ✅ Within regression budget

Metric PR Baseline Delta
Lines 80.809% 80.815% -0.005pp
Functions 84.806% 84.806% +0.000pp

Allowed numerical tolerance: 0.01 percentage points.

@github-actions

github-actions Bot commented Aug 18, 2026

Copy link
Copy Markdown

Test Coverage Report (Windows)

Result: ✅ Within regression budget

Metric PR Baseline Delta
Lines 78.229% 78.229% +0.000pp
Functions 81.573% 81.573% +0.000pp

Allowed numerical tolerance: 0.01 percentage points.

@github-actions

github-actions Bot commented Aug 18, 2026

Copy link
Copy Markdown

Performance Report (macOS)

Result: ✅ Within regression budgets

Metric PR Baseline Delta Change Blocking budget Status
Server startup P50 63ms 82ms -19ms -23.2% >100ms and >50%
Server startup P95 592ms 591ms +1ms +0.2% >750ms and >100% 🔺
Full refresh P50 110ms 125ms -15ms -12.0% >100ms and >50%
Full refresh P95 150ms 142ms +8ms +5.6% >300ms and >100% 🔺
Time to first environment P50 80ms 111ms -31ms -27.9% >150ms and >50%
Time to first environment P95 114ms 113ms +1ms +0.9% >250ms and >100% 🔺
Cold refresh P50 276ms 397ms -121ms -30.5% >250ms and >50%
Workload PR Baseline
Environments 10 10
Managers 1 1

A regression must exceed both the documented absolute and relative budget. Environment and manager inventories must match exactly within the same inventory schema.

@github-actions

github-actions Bot commented Aug 18, 2026

Copy link
Copy Markdown

Performance Report (Windows)

Result: ✅ Within regression budgets

Metric PR Baseline Delta Change Blocking budget Status
Server startup P50 7ms 11ms -4ms -36.4% >10ms and >50%
Server startup P95 9ms 15ms -6ms -40.0% >50ms and >100%
Full refresh P50 90ms 166ms -76ms -45.8% >150ms and >50%
Full refresh P95 97ms 211ms -114ms -54.0% >250ms and >100%
Time to first environment P50 14ms 27ms -13ms -48.1% >25ms and >50%
Time to first environment P95 20ms 55ms -35ms -63.6% >100ms and >100%
Cold refresh P50 91ms 169ms -78ms -46.2% >150ms and >50%
Workload PR Baseline
Environments 8 8
Managers 1 1

A regression must exceed both the documented absolute and relative budget. Environment and manager inventories must match exactly within the same inventory schema.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant