Skip to content

fix: bump the gh-actions group across 1 directory with 7 updates - #2205

Merged
JayT106 merged 1 commit into
mainfrom
dependabot/github_actions/gh-actions-20bfafe235
Sep 23, 2026
Merged

JayT106 merged 1 commit into
mainfrom
dependabot/github_actions/gh-actions-20bfafe235

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 17, 2026

Copy link
Copy Markdown
Contributor

Bumps the gh-actions group with 7 updates in the / directory:

Package From To
cachix/cachix-action 5f2d7c5294214f71b873db4b969586b980625e71 38b082610b782e7e93e209c35fd730d399dee866
DeterminateSystems/magic-nix-cache-action 14 15
codecov/codecov-action 7.0.0 7.1.1
aws-actions/configure-aws-credentials 6.2.3 6.3.0
anthropics/claude-code-action 1.0.195 1.0.230
github/issue-labeler 3.4 3.5
softprops/action-gh-release 3.0.2 3.0.3

Updates cachix/cachix-action from 5f2d7c5294214f71b873db4b969586b980625e71 to 38b082610b782e7e93e209c35fd730d399dee866

Changelog

Sourced from cachix/cachix-action's changelog.

Release

  1. Create and push a new tag:

    git tag v17
    git push origin v17
  2. Wait for CI to pass.

  3. Create a release for the new tag.

  4. Move the major version tag to the latest release:

    git tag -fa v17
    git push origin v17 --force
Commits
  • 38b0826 dev: cleanup tests and dev files
  • 0fe030c dist
  • 792dafc deps: bump dependencies
  • b690244 ci: improve Nix compatibility test coverage
  • f495f3f Merge pull request #217 from cachix/dependabot/github_actions/actions/checkout-7
  • 9ee3c77 chore(deps): bump actions/checkout from 6 to 7
  • See full diff in compare view

Updates DeterminateSystems/magic-nix-cache-action from 14 to 15

Release notes

Sourced from DeterminateSystems/magic-nix-cache-action's releases.

v15

What's Changed

Full Changelog: DeterminateSystems/magic-nix-cache-action@v14...v15

Commits
  • 84c0677 Update detsys-ts to v2.1.3 (99d5b05518240632c090b3c3093be30cac088e8c) (...
  • b017b86 Update detsys-ts to v2.1.2 (d2661b332db07fcc64f3922f7a4fe3157bffaa57) (...
  • fa09681 Update detsys-ts to v2.1.1 (#219)
  • 2ac72e4 Drop x86_64-darwin (#220)
  • 77f0204 Grahamc/otel (#213)
  • 4119f6e Update npm dependencies, fix esbuild advisory, and update flake inputs (#217)
  • 2cdbb78 Depend on detsys-ts from npm (#215)
  • 2c34ee4 Update detsys-ts: Merge pull request #206 from DeterminateSystems/deps/depe...
  • 55718cd Update detsys-ts: Merge pull request #196 from DeterminateSystems/undici (#...
  • 76aaf88 Add source-checksums-url, source-checksums-sha256 inputs (#201)
  • Additional commits viewable in compare view

Updates codecov/codecov-action from 7.0.0 to 7.1.1

Release notes

Sourced from codecov/codecov-action's releases.

v7.1.1

What's Changed

Full Changelog: codecov/codecov-action@v7.1.0...v7.1.1

v7.1.0

What's Changed

Full Changelog: codecov/codecov-action@v7.0.0...v7.1.0

Commits

Updates aws-actions/configure-aws-credentials from 6.2.3 to 6.3.0

Release notes

Sourced from aws-actions/configure-aws-credentials's releases.

v6.3.0

6.3.0 (2026-09-11)

Features

v6.2.4

6.2.4 (2026-08-31)

Bug Fixes

  • account-ids handling, mask proxy as secret in logs (#1943) (aa65264)
  • skip backoff sleep after the final retryAndBackoff attempt (#1937) (3852440)
Changelog

Sourced from aws-actions/configure-aws-credentials's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

6.3.0 (2026-09-11)

Features

6.2.4 (2026-08-31)

Bug Fixes

  • account-ids handling, mask proxy as secret in logs (#1943) (aa65264)
  • skip backoff sleep after the final retryAndBackoff attempt (#1937) (3852440)

6.2.3 (2026-07-22)

Bug Fixes

  • attach git credentials before Tag Major Version push (#1877) (9ae780b)
  • PackedPolicyTooLarge detection in STS tags (#1899) (fa8d6a5)

6.2.2 (2026-07-07)

Miscellaneous Chores

6.2.1 (2026-06-26)

Bug Fixes

  • enforce allowed-account-ids on all auth paths (#1847) (4d281fb)

6.2.0 (2026-06-01)

Features

  • add additional session tags by default (#1775) (e0ba768)
  • add more retry logic and better logging (#1764) (540d0c1)
  • add regex validation to role-session-name (#1765) (e354499)
  • Allow custom session tags to be passed when assuming a role (#1759) (61f50f6)
  • expose run id in STS client user-agent (#1774) (29d1be3)

... (truncated)

Commits
  • e125382 chore(main): release 6.3.0 (#1963)
  • 438100a chore: add link to GH security docs (#1962)
  • e92ebcc chore: Update dist
  • 57b8365 feat: add translate-env-variables option (#1961)
  • cc49fa7 chore(docs): README main branch guidance (#1960)
  • 866cb16 chore(deps-dev): bump smol-toml from 1.7.0 to 1.7.2 (#1958)
  • 6782cb1 chore(deps-dev): bump generate-license-file from 4.2.4 to 4.2.5 (#1951)
  • c20509a chore: Update dist
  • 7a41fc6 chore(deps): bump @​aws-sdk/client-sts from 3.1121.0 to 3.1127.0 (#1954)
  • 726b713 chore(deps-dev): bump @​biomejs/biome from 2.5.11 to 2.5.12 (#1957)
  • Additional commits viewable in compare view

Updates anthropics/claude-code-action from 1.0.195 to 1.0.230

Release notes

Sourced from anthropics/claude-code-action's releases.

v1.0.230

Full Changelog: anthropics/claude-code-action@v1.0.229...v1.0.230

v1.0.229

Full Changelog: anthropics/claude-code-action@v1.0.228...v1.0.229

v1.0.228

Full Changelog: anthropics/claude-code-action@v1.0.227...v1.0.228

v1.0.227

Full Changelog: anthropics/claude-code-action@v1.0.226...v1.0.227

v1.0.226

Full Changelog: anthropics/claude-code-action@v1.0.225...v1.0.226

v1.0.225

Full Changelog: anthropics/claude-code-action@v1.0.224...v1.0.225

v1.0.224

Full Changelog: anthropics/claude-code-action@v1.0.223...v1.0.224

v1.0.223

Full Changelog: anthropics/claude-code-action@v1.0.222...v1.0.223

v1.0.222

Full Changelog: anthropics/claude-code-action@v1.0.221...v1.0.222

v1.0.221

Full Changelog: anthropics/claude-code-action@v1.0.220...v1.0.221

v1.0.220

Full Changelog: anthropics/claude-code-action@v1.0.219...v1.0.220

v1.0.219

Full Changelog: anthropics/claude-code-action@v1.0.218...v1.0.219

v1.0.218

Full Changelog: anthropics/claude-code-action@v1.0.217...v1.0.218

v1.0.217

Full Changelog: anthropics/claude-code-action@v1.0.216...v1.0.217

v1.0.216

Full Changelog: anthropics/claude-code-action@v1.0.215...v1.0.216

v1.0.215

Full Changelog: anthropics/claude-code-action@v1.0.214...v1.0.215

v1.0.214

Full Changelog: anthropics/claude-code-action@v1.0.213...v1.0.214

... (truncated)

Commits
  • 4036a18 chore: bump Claude Code to 2.1.277 and Agent SDK to 0.3.277
  • a4f54ef chore: bump Claude Code to 2.1.276 and Agent SDK to 0.3.276
  • 2261fcf chore: bump Claude Code to 2.1.275 and Agent SDK to 0.3.275
  • 3b8197d chore: bump Claude Code to 2.1.274 and Agent SDK to 0.3.274
  • 7b0b255 chore: bump Claude Code to 2.1.273 and Agent SDK to 0.3.273
  • bf38e86 chore: bump Claude Code to 2.1.272 and Agent SDK to 0.3.272
  • 51db78a chore: bump Claude Code to 2.1.271 and Agent SDK to 0.3.271
  • 9cdae7f chore: bump Claude Code to 2.1.270 and Agent SDK to 0.3.270
  • 56cf60f chore: bump Claude Code to 2.1.269 and Agent SDK to 0.3.269
  • 0a8d3c9 chore: bump Claude Code to 2.1.268 and Agent SDK to 0.3.268
  • Additional commits viewable in compare view

Updates github/issue-labeler from 3.4 to 3.5

Release notes

Sourced from github/issue-labeler's releases.

v3.5

Compatibility

This release updates the action runtime from Node.js 20 to Node.js 24. Self-hosted runners should use Actions Runner v2.328.0 or later. Node.js 24 is incompatible with macOS 13.4 and earlier and does not support ARM32. See GitHub's Node 20 deprecation notice.

What's Changed

New Contributors

Full Changelog: github/issue-labeler@v3.4...v3.5

Commits

Updates softprops/action-gh-release from 3.0.2 to 3.0.3

Release notes

Sourced from softprops/action-gh-release's releases.

v3.0.3

3.0.3 is a maintenance release with updated dependencies. It also safely classifies malformed GitHub API errors to avoid secondary failures (#822).

What's Changed

Bug fixes 🐛

Other Changes 🔄

  • dependency updates
Changelog

Sourced from softprops/action-gh-release's changelog.

3.0.3

3.0.3 is a maintenance release with updated dependencies. It also safely classifies malformed GitHub API errors to avoid secondary failures (#822).

What's Changed

Bug fixes 🐛

Other Changes 🔄

  • dependency updates

3.0.2

3.0.2 is a patch release focused on release reliability and compatibility. It reuses existing draft releases when publishing prereleases, supports replacing release assets on Gitea, hardens streamed asset uploads, and provides clearer release-creation diagnostics. It also includes TypeScript, coverage, and tooling maintenance merged since 3.0.1.

This release fixes #795, #438, and #803. The upload transport hardening covers the historical failure reported in #790, although current hosted Node 24 runners did not reproduce it naturally. The diagnostics work is related to #786 and does not claim a reproducible release-creation fix.

What's Changed

Exciting New Features 🎉

Bug fixes 🐛

Other Changes 🔄

3.0.1

  • maintenance release with updated dependencies

... (truncated)

Commits
  • efb3536 release 3.0.3 (#840)
  • 6441963 chore(deps): bump the npm group with 2 updates (#839)
  • e5ee6bc chore(deps): bump esbuild from 0.28.1 to 0.28.2 in the npm group (#837)
  • d1e6617 chore(deps): bump undici from 6.27.0 to 6.28.0 (#831)
  • 6403751 chore(deps): bump the npm group with 2 updates (#835)
  • 7c7184b chore(deps): bump postcss from 8.5.19 to 8.5.25 (#833)
  • 0f3f0d2 chore(deps): bump brace-expansion from 5.0.8 to 5.0.9 (#832)
  • 77fb938 chore(deps): bump prettier from 3.9.5 to 3.9.6 in the npm group (#830)
  • 5a6f517 chore(deps): bump brace-expansion from 5.0.7 to 5.0.8 (#828)
  • a3c91c9 chore(deps): bump the github-actions group with 2 updates (#825)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Sep 17, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner September 17, 2026 10:12
@dependabot
dependabot Bot requested review from JayT106 and randy-cro September 17, 2026 10:12
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Sep 17, 2026
@coderabbitai

coderabbitai Bot commented Sep 17, 2026

Copy link
Copy Markdown
Contributor

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: 3316da5b-5768-4c57-89ed-4995944acc1d

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@github-actions github-actions Bot added the ci label Sep 17, 2026
@socket-security

socket-security Bot commented Sep 17, 2026

Copy link
Copy Markdown

@dependabot
dependabot Bot force-pushed the dependabot/github_actions/gh-actions-20bfafe235 branch 2 times, most recently from dbad9e1 to 673d887 Compare September 21, 2026 03:57
Bumps the gh-actions group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [cachix/cachix-action](https://github.com/cachix/cachix-action) | `5f2d7c5294214f71b873db4b969586b980625e71` | `38b082610b782e7e93e209c35fd730d399dee866` |
| [DeterminateSystems/magic-nix-cache-action](https://github.com/determinatesystems/magic-nix-cache-action) | `14` | `15` |
| [codecov/codecov-action](https://github.com/codecov/codecov-action) | `7.0.0` | `7.1.1` |
| [aws-actions/configure-aws-credentials](https://github.com/aws-actions/configure-aws-credentials) | `6.2.3` | `6.3.0` |
| [anthropics/claude-code-action](https://github.com/anthropics/claude-code-action) | `1.0.195` | `1.0.230` |
| [github/issue-labeler](https://github.com/github/issue-labeler) | `3.4` | `3.5` |
| [softprops/action-gh-release](https://github.com/softprops/action-gh-release) | `3.0.2` | `3.0.3` |



Updates `cachix/cachix-action` from 5f2d7c5294214f71b873db4b969586b980625e71 to 38b082610b782e7e93e209c35fd730d399dee866
- [Release notes](https://github.com/cachix/cachix-action/releases)
- [Changelog](https://github.com/cachix/cachix-action/blob/master/RELEASE.md)
- [Commits](cachix/cachix-action@5f2d7c5...38b0826)

Updates `DeterminateSystems/magic-nix-cache-action` from 14 to 15
- [Release notes](https://github.com/determinatesystems/magic-nix-cache-action/releases)
- [Commits](DeterminateSystems/magic-nix-cache-action@908b263...84c0677)

Updates `codecov/codecov-action` from 7.0.0 to 7.1.1
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](codecov/codecov-action@fb8b358...303a32d)

Updates `aws-actions/configure-aws-credentials` from 6.2.3 to 6.3.0
- [Release notes](https://github.com/aws-actions/configure-aws-credentials/releases)
- [Changelog](https://github.com/aws-actions/configure-aws-credentials/blob/main/CHANGELOG.md)
- [Commits](aws-actions/configure-aws-credentials@e6de054...e125382)

Updates `anthropics/claude-code-action` from 1.0.195 to 1.0.230
- [Release notes](https://github.com/anthropics/claude-code-action/releases)
- [Commits](anthropics/claude-code-action@d40ddef...4036a18)

Updates `github/issue-labeler` from 3.4 to 3.5
- [Release notes](https://github.com/github/issue-labeler/releases)
- [Commits](github/issue-labeler@v3.4...v3.5)

Updates `softprops/action-gh-release` from 3.0.2 to 3.0.3
- [Release notes](https://github.com/softprops/action-gh-release/releases)
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md)
- [Commits](softprops/action-gh-release@3d0d988...efb3536)

---
updated-dependencies:
- dependency-name: anthropics/claude-code-action
  dependency-version: 1.0.224
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gh-actions
- dependency-name: aws-actions/configure-aws-credentials
  dependency-version: 6.2.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gh-actions
- dependency-name: cachix/cachix-action
  dependency-version: 38b082610b782e7e93e209c35fd730d399dee866
  dependency-type: direct:production
  dependency-group: gh-actions
- dependency-name: codecov/codecov-action
  dependency-version: 7.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gh-actions
- dependency-name: DeterminateSystems/magic-nix-cache-action
  dependency-version: '15'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gh-actions
- dependency-name: github/issue-labeler
  dependency-version: '3.5'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gh-actions
- dependency-name: softprops/action-gh-release
  dependency-version: 3.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gh-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/gh-actions-20bfafe235 branch from 673d887 to 38d7515 Compare September 21, 2026 10:12

@JayT106 JayT106 left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approving: the earlier integration_tests failures were a transient ECONNRESET downloading the solc compiler in one job plus fail-fast cancellations of the siblings. Re-ran failed jobs; all checks green.

@JayT106
JayT106 added this pull request to the merge queue Sep 23, 2026
Merged via the queue into main with commit db2a758 Sep 23, 2026
43 of 52 checks passed
@JayT106
JayT106 deleted the dependabot/github_actions/gh-actions-20bfafe235 branch September 23, 2026 05:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

ci dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant