Skip to content

Bump the github-actions group across 1 directory with 4 updates#106

Closed
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/github_actions/github-actions-63064e3487
Closed

Bump the github-actions group across 1 directory with 4 updates#106
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/github_actions/github-actions-63064e3487

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Mar 13, 2026

Bumps the github-actions group with 4 updates in the / directory: ruby/setup-ruby, zizmorcore/zizmor-action, advanced-security/filter-sarif and taiki-e/install-action.

Updates ruby/setup-ruby from 1.289.0 to 1.292.0

Release notes

Sourced from ruby/setup-ruby's releases.

v1.292.0

What's Changed

Full Changelog: ruby/setup-ruby@v1.291.0...v1.292.0

v1.291.0

What's Changed

Full Changelog: ruby/setup-ruby@v1.290.0...v1.291.0

v1.290.0

What's Changed

New Contributors

Full Changelog: ruby/setup-ruby@v1.289.0...v1.290.0

Commits
  • 4eb9f11 Update Node to 24
  • 9d13dd6 Add ruby-3.4.9
  • 6ca151f Leave only basic comment about env variable change
  • 7413847 Set HOME variable from OS information
  • b3cff1b Add support for Windows Server Standard Evaluation
  • See full diff in compare view

Updates zizmorcore/zizmor-action from 0.5.0 to 0.5.2

Release notes

Sourced from zizmorcore/zizmor-action's releases.

v0.5.2

What's Changed

  • zizmor 1.23.1 is now the default used by this action.

Full Changelog: zizmorcore/zizmor-action@v0.5.1...v0.5.2

v0.5.1

What's Changed

  • zizmor 1.23.0 is now the default used by this action.

Full Changelog: zizmorcore/zizmor-action@v0.5.0...v0.5.1

Commits

Updates advanced-security/filter-sarif from 1.0.1 to 1.1

Release notes

Sourced from advanced-security/filter-sarif's releases.

v1.1

What's Changed

New Contributors

Full Changelog: advanced-security/filter-sarif@v1...v1.1

Commits
  • 2da736f Merge pull request #17 from advanced-security/copilot/add-severity-filter-option
  • b82026b Remove [DEBUG] print statements from production code
  • f15e3e4 Update action.yml
  • f74eb20 Refactor collect_rule_severities to streamline rule processing and enhance de...
  • da97499 Fix severity filter: results no longer incorrectly filtered when level is mis...
  • be31281 Initial plan for severity filter bug fix
  • 4bddfd6 Address code review: use env var for shell safety, fix double strip
  • e304681 Add optional severity filter for SARIF alerts
  • 36dc0ce Initial plan
  • 59d0a64 Merge pull request #14 from aibaars/patch-1
  • Additional commits viewable in compare view

Updates taiki-e/install-action from 2.68.19 to 2.68.27

Release notes

Sourced from taiki-e/install-action's releases.

2.68.27

  • Update cargo-cyclonedx@latest to 0.5.8.

  • Update mise@latest to 2026.3.8.

2.68.26

  • Update vacuum@latest to 0.25.0.

  • Update syft@latest to 1.42.2.

  • Update shfmt@latest to 3.13.0.

  • Update prek@latest to 0.3.5.

  • Update mise@latest to 2026.3.7.

  • Update cargo-shear@latest to 1.10.0.

  • Update cargo-nextest@latest to 0.9.130.

2.68.25

  • Update zizmor@latest to 1.23.1.

  • Update tombi@latest to 0.9.4.

  • Update cargo-semver-checks@latest to 0.47.0.

2.68.24

  • Avoid triggering zizmor ref-confusion when using this action in form of uses: taiki-e/install-action@v2 or uses: taiki-e/install-action@<tool_name>.

2.68.23

  • Update zizmor@latest to 1.23.0.

  • Update tombi@latest to 0.9.3.

  • Update mise@latest to 2026.3.5.

2.68.22

  • Update release-plz@latest to 0.3.157.

  • Update cargo-binstall@latest to 1.17.7.

  • Update mise@latest to 2026.3.4.

2.68.21

  • Update tombi@latest to 0.9.2.

  • Update uv@latest to 0.10.9.

  • Update rclone@latest to 1.73.2.

... (truncated)

Changelog

Sourced from taiki-e/install-action's changelog.

Changelog

All notable changes to this project will be documented in this file.

This project adheres to Semantic Versioning.

[Unreleased]

[2.68.27] - 2026-03-12

  • Update cargo-cyclonedx@latest to 0.5.8.

  • Update mise@latest to 2026.3.8.

[2.68.26] - 2026-03-10

  • Update vacuum@latest to 0.25.0.

  • Update syft@latest to 1.42.2.

  • Update shfmt@latest to 3.13.0.

  • Update prek@latest to 0.3.5.

  • Update mise@latest to 2026.3.7.

  • Update cargo-shear@latest to 1.10.0.

  • Update cargo-nextest@latest to 0.9.130.

[2.68.25] - 2026-03-08

  • Update zizmor@latest to 1.23.1.

  • Update tombi@latest to 0.9.4.

  • Update cargo-semver-checks@latest to 0.47.0.

[2.68.24] - 2026-03-08

  • Avoid triggering zizmor ref-confusion when using this action in form of uses: taiki-e/install-action@v2 or uses: taiki-e/install-action@<tool_name>.

[2.68.23] - 2026-03-08

  • Update zizmor@latest to 1.23.0.

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the github-actions group with 4 updates in the / directory: [ruby/setup-ruby](https://github.com/ruby/setup-ruby), [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action), [advanced-security/filter-sarif](https://github.com/advanced-security/filter-sarif) and [taiki-e/install-action](https://github.com/taiki-e/install-action).


Updates `ruby/setup-ruby` from 1.289.0 to 1.292.0
- [Release notes](https://github.com/ruby/setup-ruby/releases)
- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)
- [Commits](ruby/setup-ruby@19a43a6...4eb9f11)

Updates `zizmorcore/zizmor-action` from 0.5.0 to 0.5.2
- [Release notes](https://github.com/zizmorcore/zizmor-action/releases)
- [Commits](zizmorcore/zizmor-action@0dce257...71321a2)

Updates `advanced-security/filter-sarif` from 1.0.1 to 1.1
- [Release notes](https://github.com/advanced-security/filter-sarif/releases)
- [Commits](advanced-security/filter-sarif@f3b8118...2da736f)

Updates `taiki-e/install-action` from 2.68.19 to 2.68.27
- [Release notes](https://github.com/taiki-e/install-action/releases)
- [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md)
- [Commits](taiki-e/install-action@385db9c...5ab5d17)

---
updated-dependencies:
- dependency-name: ruby/setup-ruby
  dependency-version: 1.292.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: zizmorcore/zizmor-action
  dependency-version: 0.5.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: advanced-security/filter-sarif
  dependency-version: '1.1'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: taiki-e/install-action
  dependency-version: 2.68.27
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Mar 13, 2026
@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Mar 14, 2026

Looks like these dependencies are no longer updatable, so this is no longer needed.

@dependabot dependabot bot closed this Mar 14, 2026
@dependabot dependabot bot deleted the dependabot/github_actions/github-actions-63064e3487 branch March 14, 2026 05:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants