Skip to content

chore(deps): bump the trusted-actions group across 1 directory with 2 updates - #6388

Merged
daggerstuff merged 1 commit into
stagingfrom
dependabot/github_actions/trusted-actions-2d2759111c
Oct 26, 2026
Merged

daggerstuff merged 1 commit into
stagingfrom
dependabot/github_actions/trusted-actions-2d2759111c

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 26, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the trusted-actions group with 2 updates in the / directory: actions/setup-python and bridgecrewio/checkov-action.

Updates actions/setup-python from 7.0.0 to 7.1.0

Release notes

Sourced from actions/setup-python's releases.

v7.1.0

What's Changed

Enhancements

Dependency Upgrade

New Contributors

Full Changelog: actions/setup-python@v7.0.0...v7.1.0

Commits

Updates bridgecrewio/checkov-action from 12.3134.0 to 12.3135.0

Commits

@dependabot
dependabot Bot requested a review from daggerstuff as a code owner October 26, 2026 03:12
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 26, 2026
@vercel

vercel Bot commented Oct 26, 2026 •

Copy link
Copy Markdown
Contributor

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment
Project Deployment Actions Updated
pixelated Ignored Ignored Preview Oct 26, 2026 7:06am UTC

Request Review

@dependabot dependabot Bot added the github-actions Dependabot PR labels for GitHub Actions ecosystem updates label Oct 26, 2026
@github-actions github-actions Bot added ci-cd and removed github-actions Dependabot PR labels for GitHub Actions ecosystem updates labels Oct 26, 2026
@github-actions

Copy link
Copy Markdown

px Advisor Review

Risk: unknown

No summary available

No findings.

@daggerstuff

Copy link
Copy Markdown
Owner

@dependabot rebase

1 similar comment
@daggerstuff

Copy link
Copy Markdown
Owner

@dependabot rebase

… updates

Bumps the trusted-actions group with 2 updates in the / directory: [actions/setup-python](https://github.com/actions/setup-python) and [bridgecrewio/checkov-action](https://github.com/bridgecrewio/checkov-action).


Updates `actions/setup-python` from 7.0.0 to 7.1.0
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](actions/setup-python@v7...v7.1.0)

Updates `bridgecrewio/checkov-action` from 12.3134.0 to 12.3135.0
- [Release notes](https://github.com/bridgecrewio/checkov-action/releases)
- [Commits](bridgecrewio/checkov-action@v12.3134.0...v12.3135.0)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-version: 7.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: trusted-actions
- dependency-name: bridgecrewio/checkov-action
  dependency-version: 12.3135.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: trusted-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps): bump the trusted-actions group with 2 updates chore(deps): bump the trusted-actions group across 1 directory with 2 updates Oct 26, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/trusted-actions-2d2759111c branch from f197ae9 to d2c48e7 Compare October 26, 2026 07:05
@github-actions

Copy link
Copy Markdown

px Advisor Review

Risk: unknown

No summary available

No findings.

@daggerstuff
daggerstuff merged commit 8043f12 into staging Oct 26, 2026
43 of 47 checks passed
@daggerstuff
daggerstuff deleted the dependabot/github_actions/trusted-actions-2d2759111c branch October 26, 2026 07:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

ci-cd dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant