Skip to content

chore(deps): bump the gh-actions group across 1 directory with 5 updates - #577

Open
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/github_actions/gh-actions-bea7ac4791
Open

dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/github_actions/gh-actions-bea7ac4791

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 30, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the gh-actions group with 5 updates in the / directory:

Package From To
actions/checkout 4 7
aws-actions/configure-aws-credentials 4.3.1 6.3.0
actions/upload-artifact 4 7
actions/create-github-app-token 1 3
natsukium/nix-diff-action 1.1.0 1.1.1

Updates actions/checkout from 4 to 7

Release notes

Sourced from actions/checkout's releases.

v7.0.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v6.0.3...v7.0.0

v6.1.0

What's Changed

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: actions/checkout@v6.0.3...v6.1.0

v6.0.3

What's Changed

New Contributors

Full Changelog: actions/checkout@v6...v6.0.3

v6.0.2

What's Changed

Full Changelog: actions/checkout@v6.0.1...v6.0.2

v6.0.1

What's Changed

... (truncated)

Commits

Updates aws-actions/configure-aws-credentials from 4.3.1 to 6.3.0

Release notes

Sourced from aws-actions/configure-aws-credentials's releases.

v6.3.0

6.3.0 (2026-09-11)

Features

v6.2.4

6.2.4 (2026-08-31)

Bug Fixes

  • account-ids handling, mask proxy as secret in logs (#1943) (aa65264)
  • skip backoff sleep after the final retryAndBackoff attempt (#1937) (3852440)

v6.2.3

6.2.3 (2026-07-22)

Bug Fixes

  • attach git credentials before Tag Major Version push (#1877) (9ae780b)
  • PackedPolicyTooLarge detection in STS tags (#1899) (fa8d6a5)

v6.2.2

6.2.2 (2026-07-07)

Miscellaneous Chores

v6.2.1

6.2.1 (2026-06-26)

Bug Fixes

  • enforce allowed-account-ids on all auth paths (#1847) (4d281fb)

v6.2.0

6.2.0 (2026-06-01)

Features

... (truncated)

Changelog

Sourced from aws-actions/configure-aws-credentials's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

6.3.0 (2026-09-11)

Features

6.2.4 (2026-08-31)

Bug Fixes

  • account-ids handling, mask proxy as secret in logs (#1943) (aa65264)
  • skip backoff sleep after the final retryAndBackoff attempt (#1937) (3852440)

6.2.3 (2026-07-22)

Bug Fixes

  • attach git credentials before Tag Major Version push (#1877) (9ae780b)
  • PackedPolicyTooLarge detection in STS tags (#1899) (fa8d6a5)

6.2.2 (2026-07-07)

Miscellaneous Chores

6.2.1 (2026-06-26)

Bug Fixes

  • enforce allowed-account-ids on all auth paths (#1847) (4d281fb)

6.2.0 (2026-06-01)

Features

  • add additional session tags by default (#1775) (e0ba768)
  • add more retry logic and better logging (#1764) (540d0c1)
  • add regex validation to role-session-name (#1765) (e354499)
  • Allow custom session tags to be passed when assuming a role (#1759) (61f50f6)
  • expose run id in STS client user-agent (#1774) (29d1be3)

... (truncated)

Commits
  • e125382 chore(main): release 6.3.0 (#1963)
  • 438100a chore: add link to GH security docs (#1962)
  • e92ebcc chore: Update dist
  • 57b8365 feat: add translate-env-variables option (#1961)
  • cc49fa7 chore(docs): README main branch guidance (#1960)
  • 866cb16 chore(deps-dev): bump smol-toml from 1.7.0 to 1.7.2 (#1958)
  • 6782cb1 chore(deps-dev): bump generate-license-file from 4.2.4 to 4.2.5 (#1951)
  • c20509a chore: Update dist
  • 7a41fc6 chore(deps): bump @​aws-sdk/client-sts from 3.1121.0 to 3.1127.0 (#1954)
  • 726b713 chore(deps-dev): bump @​biomejs/biome from 2.5.11 to 2.5.12 (#1957)
  • Additional commits viewable in compare view

Updates actions/upload-artifact from 4 to 7

Release notes

Sourced from actions/upload-artifact's releases.

v7.0.0

v7 What's new

Direct Uploads

Adds support for uploading single files directly (unzipped). Callers can set the new archive parameter to false to skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. The name parameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.

ESM

To support new versions of the @actions/* packages, we've upgraded the package to ESM.

What's Changed

New Contributors

Full Changelog: actions/upload-artifact@v6...v7.0.0

v6.0.0

v6 - What's new

[!IMPORTANT] actions/upload-artifact@v6 now runs on Node.js 24 (runs.using: node24) and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading.

Node.js 24

This release updates the runtime to Node.js 24. v5 had preliminary support for Node.js 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.

What's Changed

Full Changelog: actions/upload-artifact@v5.0.0...v6.0.0

v5.0.0

What's Changed

BREAKING CHANGE: this update supports Node v24.x. This is not a breaking change per-se but we're treating it as such.

... (truncated)

Commits
  • cf430e0 Merge pull request #822 from actions/tunc-d-prepare-upload-v7-0-2
  • c2acded chore: prepare v7.0.2 release
  • 4687c1b Merge pull request #821 from actions/tunc-d-upload-artifact-package-bump
  • 8cbe1be Bump @​actions/artifact to 6.3.1
  • 043fb46 Merge pull request #797 from actions/yacaovsnc/update-dependency
  • 634250c Include changes in typespec/ts-http-runtime 0.3.5
  • e454baa Readme: bump all the example versions to v7 (#796)
  • 74fad66 Update the readme with direct upload details (#795)
  • bbbca2d Support direct file uploads (#764)
  • 589182c Upgrade the module to ESM and bump dependencies (#762)
  • Additional commits viewable in compare view

Updates actions/create-github-app-token from 1 to 3

Release notes

Sourced from actions/create-github-app-token's releases.

v3.0.0

3.0.0 (2026-03-14)

Bug Fixes

BREAKING CHANGES

  • Custom proxy handling has been removed. If you use HTTP_PROXY or HTTPS_PROXY, you must now also set NODE_USE_ENV_PROXY=1 on the action step.
  • Requires Actions Runner v2.327.1 or later if you are using a self-hosted runner.

v3.0.0-beta.6

3.0.0-beta.6 (2026-03-13)

Bug Fixes

  • deps: bump @​actions/core from 1.11.1 to 3.0.0 (#337) (b044133)
  • deps: bump minimatch from 9.0.5 to 9.0.9 (#335) (5cbc656)
  • deps: bump the production-dependencies group with 4 updates (#336) (6bda5bc)
  • deps: bump undici from 7.16.0 to 7.18.2 (#323) (b4f638f)

v3.0.0-beta.5

3.0.0-beta.5 (2026-03-13)

  • fix!: require NODE_USE_ENV_PROXY for proxy support (#342) (d53a1cd)

BREAKING CHANGES

  • Custom proxy handling has been removed. If you use HTTP_PROXY or HTTPS_PROXY, you must now also set NODE_USE_ENV_PROXY=1 on the action step.

v3.0.0-beta.4

3.0.0-beta.4 (2026-03-13)

Bug Fixes

  • deps: bump @​octokit/auth-app from 7.2.1 to 8.0.1 (#257) (bef1eaf)
  • deps: bump @​octokit/request from 9.2.3 to 10.0.2 (#256) (5d7307b)
  • deps: bump glob from 10.4.5 to 10.5.0 (#305) (5480f43)
  • deps: bump p-retry from 6.2.1 to 7.1.0 (#294) (dce3be8)

... (truncated)

Commits
  • 64ab729 chore(main): release 3.3.0 (#402)
  • f3a828e ci: create signed dist commits in release workflow (#404)
  • 655017f docs: clarify when owner grants access to all repositories (#378)
  • 12461a3 fix(deps): bump nested undici from 6.24.0 to 6.29.0 (#403)
  • a47236f feat: update permission inputs (#399)
  • a69c19d fix(deps): bump the production-dependencies group across 1 directory with 3 u...
  • d5cb7ae build(deps): bump actions/checkout from 6 to 7 (#384)
  • 575da86 build(deps): bump stefanzweifel/git-auto-commit-action from 7.1.0 to 7.2.0 in...
  • e85f677 test: omit stack traces from snapshots (#401)
  • 9419396 build(deps-dev): bump c8 from 11.0.0 to 12.0.0 (#400)
  • Additional commits viewable in compare view

Updates natsukium/nix-diff-action from 1.1.0 to 1.1.1

Release notes

Sourced from natsukium/nix-diff-action's releases.

v1.1.1

What's Changed

Full Changelog: natsukium/nix-diff-action@v1.1.0...v1.1.1

Commits
  • 4091452 Merge pull request #57 from natsukium/update/flake
  • 403d052 flake.lock: Update
  • f0e7656 Merge pull request #49 from natsukium/renovate/devdependencies-(non-major)
  • 9e79340 chore(deps): update devdependencies (non-major)
  • af6cba0 Merge pull request #50 from natsukium/renovate/lock-file-maintenance
  • 7fe36be chore(deps): lock file maintenance
  • b12751a Merge pull request #53 from natsukium/renovate/effect-3.x-lockfile
  • e96f3a5 chore(deps): update dependency effect to v3.21.4
  • 55024af Merge pull request #55 from natsukium/renovate/nixbuild-nix-quick-install-act...
  • 4ed35b8 Merge pull request #54 from natsukium/renovate/actions-checkout-7.x
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jul 30, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/gh-actions-bea7ac4791 branch from 7e8a95c to 9d1eb5d Compare July 30, 2026 00:20
@github-actions

github-actions Bot commented Jul 30, 2026 •

Copy link
Copy Markdown
Contributor

Thanks for your Pull Request!

Below you will find a summary of the cachix status of each package, for each supported platform.

package x86_64-linux x86_64-darwin aarch64-darwin
attic-migrate-flake ❌ build failed 🚫 not supported ❌ build failed
attic-migrate-flake-idempotent ❌ build failed 🚫 not supported ❌ build failed
attic-push-flake-outputs-action ❌ build failed 🚫 not supported ❌ build failed
aztec ❌ build failed 🚫 not supported ❌ build failed
cachix ❌ build failed 🚫 not supported ❌ build failed
cachix-deploy-metrics ❌ build failed 🚫 not supported ❌ build failed
check-nixos-runner-hazards ❌ build failed 🚫 not supported ❌ build failed
ci-build-batching ❌ build failed 🚫 not supported ❌ build failed
ci-image ❌ build failed 🚫 not supported 🚫 not supported
cloudflare-mail-auth ❌ build failed 🚫 not supported ❌ build failed
consumer-flake-cachix-inventory ❌ build failed 🚫 not supported ❌ build failed
consumer-flake-cachix-inventory-tool ❌ build failed 🚫 not supported ❌ build failed
consumer-flake-no-cachix-residual ❌ build failed 🚫 not supported ❌ build failed
consumer-flake-no-cachix-residual-tool ❌ build failed 🚫 not supported ❌ build failed
dcd ❌ build failed 🚫 not supported 🚫 not supported
deployment-attic-nginx-logs-vm ❌ build failed 🚫 not supported 🚫 not supported
deployment-attic-push-substitute-vm ❌ build failed 🚫 not supported 🚫 not supported
deployment-break-glass-runbook-sections ❌ build failed 🚫 not supported ❌ build failed
deployment-cache-backend-policy ❌ build failed 🚫 not supported ❌ build failed
deployment-cache-corruption-vm ❌ build failed 🚫 not supported 🚫 not supported
deployment-cachix-fallback-simulation ❌ build failed 🚫 not supported 🚫 not supported
deployment-current-flow-inventory ❌ build failed 🚫 not supported ❌ build failed
deployment-darwin-activation-integration ❌ build failed 🚫 not supported ❌ build failed
deployment-dashboard-query-fixtures ❌ build failed 🚫 not supported 🚫 not supported
deployment-direct-ssh-attic-restore-vm ❌ build failed 🚫 not supported 🚫 not supported
deployment-direct-ssh-rollback-vm ❌ build failed 🚫 not supported 🚫 not supported
deployment-direct-ssh-success-vm ❌ build failed 🚫 not supported 🚫 not supported
deployment-e2e-rehearsal-skill-doc ❌ build failed 🚫 not supported ❌ build failed
deployment-event-metrics ❌ build failed 🚫 not supported 🚫 not supported
deployment-event-schema-examples ❌ build failed 🚫 not supported ❌ build failed
deployment-incus-rehearsal-image ❌ build failed 🚫 not supported 🚫 not supported
deployment-incus-rehearsal-script-static ❌ build failed 🚫 not supported 🚫 not supported
deployment-metrics-vm ❌ build failed 🚫 not supported 🚫 not supported
deployment-no-default-cachix-deploy-call ❌ build failed 🚫 not supported 🚫 not supported
deployment-parallel-cache-push-local ❌ build failed 🚫 not supported 🚫 not supported
deployment-production-cutover-simulation-vm ❌ build failed 🚫 not supported 🚫 not supported
deployment-pull-agent-darwin-integration 🚫 not supported 🚫 not supported ❌ build failed
deployment-pull-agent-latest-vm ❌ build failed 🚫 not supported 🚫 not supported
deployment-pull-agent-lock-contention-vm ❌ build failed 🚫 not supported 🚫 not supported
deployment-pull-agent-locks-migration-vm ❌ build failed 🚫 not supported 🚫 not supported
deployment-pull-agent-rejects-invalid-vm ❌ build failed 🚫 not supported 🚫 not supported
deployment-pull-agent-selfheal-vm ❌ build failed 🚫 not supported 🚫 not supported
deployment-pull-agent-static ❌ build failed 🚫 not supported 🚫 not supported
deployment-reconciler-lock-contention-vm ❌ build failed 🚫 not supported 🚫 not supported
deployment-reconciler-skill-doc ❌ build failed 🚫 not supported ❌ build failed
deployment-reconciler-supersession-vm ❌ build failed 🚫 not supported 🚫 not supported
deployment-reconciler-timer-retry-vm ❌ build failed 🚫 not supported 🚫 not supported
deployment-reconciler-timer-static ❌ build failed 🚫 not supported 🚫 not supported
deployment-scheduled-canary-local-vm ❌ build failed 🚫 not supported 🚫 not supported
deployment-skill-doc-command-references ❌ build failed 🚫 not supported ❌ build failed
deployment-summary-artifact ❌ build failed 🚫 not supported ❌ build failed
desktop-vms-golden ❌ build failed 🚫 not supported 🚫 not supported
disko ❌ build failed 🚫 not supported 🚫 not supported
dmd ❌ build failed 🚫 not supported 🚫 not supported
dscanner ❌ build failed 🚫 not supported 🚫 not supported
dub ❌ build failed 🚫 not supported ❌ build failed
encrypted-s3-artifact ❌ build failed 🚫 not supported ❌ build failed
fleet-alertmanager-config ❌ build failed 🚫 not supported ❌ build failed
fleet-alertmanager-config-deadman ❌ build failed 🚫 not supported ❌ build failed
folder-size-metrics ❌ build failed 🚫 not supported 🚫 not supported
garm ❌ build failed 🚫 not supported ❌ build failed
garm-fleet-alert-rules ❌ build failed 🚫 not supported ❌ build failed
garm-fleet-external-checks ❌ build failed 🚫 not supported ❌ build failed
garm-provider-agentharbor ❌ build failed 🚫 not supported ❌ build failed
garm-provider-aws ❌ build failed 🚫 not supported ❌ build failed
garm-provider-vmharness ❌ build failed 🚫 not supported ❌ build failed
git-hooks-reprobuild-handoff ❌ build failed 🚫 not supported ❌ build failed
git-hooks-same-repo-git ❌ build failed 🚫 not supported ❌ build failed
github-actions-fit-alert-rules ❌ build failed 🚫 not supported ❌ build failed
github-actions-fit-exporter ❌ build failed 🚫 not supported ❌ build failed
google-workspace-dkim ❌ build failed 🚫 not supported ❌ build failed
google-workspace-dkim-test ❌ build failed 🚫 not supported ❌ build failed
google-workspace-domains ❌ build failed 🚫 not supported ❌ build failed
google-workspace-domains-test ❌ build failed 🚫 not supported ❌ build failed
google-workspace-dwd ❌ build failed 🚫 not supported ❌ build failed
google-workspace-setup ❌ build failed 🚫 not supported ❌ build failed
gosti ❌ build failed 🚫 not supported ❌ build failed
ldc ❌ build failed 🚫 not supported 🚫 not supported
lido-withdrawals-automation ❌ build failed 🚫 not supported ❌ build failed
linux-vm-cloud-init-image ❌ build failed 🚫 not supported 🚫 not supported
mcl-devops ❌ build failed 🚫 not supported ❌ build failed
mcl-devops-no-stale-references ❌ build failed 🚫 not supported ❌ build failed
mcl-devops-single-bin-mcl-provider ❌ build failed 🚫 not supported ❌ build failed
netbird-with-agenix-login-script ❌ build failed 🚫 not supported 🚫 not supported
nix ✅ Cached at <0> 🚫 not supported ✅ Cached at <0>
nix-eval-jobs ✅ Cached at <0> 🚫 not supported ✅ Cached at <0>
nix-fast-build ✅ Cached at <0> 🚫 not supported ✅ Cached at <0>
nixos-anywhere ❌ build failed 🚫 not supported 🚫 not supported
nixos-rebuild-ng ❌ build failed 🚫 not supported ❌ build failed
pyroscope ❌ build failed 🚫 not supported ❌ build failed
random-alerts ❌ build failed 🚫 not supported ❌ build failed
reusable-flake-checks-artifact-fallback ❌ build failed 🚫 not supported ❌ build failed
reusable-flake-checks-attic-credentials ❌ build failed 🚫 not supported ❌ build failed
reusable-flake-checks-build-timeout ❌ build failed 🚫 not supported ❌ build failed
reusable-flake-checks-mcl-ref ❌ build failed 🚫 not supported ❌ build failed
reusable-flake-checks-nix-token ❌ build failed 🚫 not supported ❌ build failed
reusable-flake-checks-s3-mirror-compat ❌ build failed 🚫 not supported ❌ build failed
reusable-lint-hook-discovery ❌ build failed 🚫 not supported ❌ build failed
reusable-terraform-drift-workflow ❌ build failed 🚫 not supported ❌ build failed
reusable-terraform-policy-advisories ❌ build failed 🚫 not supported ❌ build failed
reusable-terraform-source-identity ❌ build failed 🚫 not supported ❌ build failed
runner-label-tool ❌ build failed 🚫 not supported ❌ build failed
rustToolchain ❌ build failed 🚫 not supported ❌ build failed
seal-alerting-secrets ❌ build failed 🚫 not supported ❌ build failed
secret-integration ❌ build failed 🚫 not supported 🚫 not supported
serve-d ❌ build failed 🚫 not supported 🚫 not supported
setup-nix-hosted-disk-reclamation ❌ build failed 🚫 not supported ❌ build failed
setup-nix-substituter-preflight ❌ build failed 🚫 not supported ❌ build failed
setup-nix-transfer-resilience ❌ build failed 🚫 not supported ❌ build failed
t_aws_burst_runners ❌ build failed 🚫 not supported 🚫 not supported
t_aws_spot_runners ❌ build failed 🚫 not supported 🚫 not supported
t_central_garm_recovery ❌ build failed 🚫 not supported 🚫 not supported
t_ci_nixos_runner_hazards ❌ build failed 🚫 not supported ❌ build failed
t_ci_runs_on_capability ❌ build failed 🚫 not supported ❌ build failed
t_cross_host_publish_substitute ❌ build failed 🚫 not supported 🚫 not supported
t_fit_exporter_repos_env_roundtrip ❌ build failed 🚫 not supported 🚫 not supported
t_fleet_alert_routing ❌ build failed 🚫 not supported ❌ build failed
t_fleet_alerting ❌ build failed 🚫 not supported ❌ build failed
t_garm_api_watchdog ❌ build failed 🚫 not supported 🚫 not supported
t_garm_busy_runner_not_reaped ❌ build failed 🚫 not supported 🚫 not supported
t_garm_capability_placement ❌ build failed 🚫 not supported 🚫 not supported
t_garm_central_multi_host ❌ build failed 🚫 not supported 🚫 not supported
t_garm_credentials_no_race ❌ build failed 🚫 not supported 🚫 not supported
t_garm_deleting_capacity ❌ build failed 🚫 not supported 🚫 not supported
t_garm_incus_runner_host ❌ build failed 🚫 not supported 🚫 not supported
t_garm_incus_storage_pool_source ❌ build failed 🚫 not supported 🚫 not supported
t_garm_install_script_template_fixtures ❌ build failed 🚫 not supported ❌ build failed
t_garm_instance_lifecycle ❌ build failed 🚫 not supported 🚫 not supported
t_garm_job_cache_self_heal ❌ build failed 🚫 not supported 🚫 not supported
t_garm_macos_pools_supported ❌ build failed 🚫 not supported ❌ build failed
t_garm_macos_runner_install_wrapper ❌ build failed 🚫 not supported ❌ build failed
t_garm_multi_provider ❌ build failed 🚫 not supported 🚫 not supported
t_garm_nixos_service_boots ❌ build failed 🚫 not supported 🚫 not supported
t_garm_pools_labels ❌ build failed 🚫 not supported 🚫 not supported
t_garm_provider_agentharbor ❌ build failed 🚫 not supported 🚫 not supported
t_garm_provider_agentharbor_module ❌ build failed 🚫 not supported 🚫 not supported
t_garm_provider_remote ❌ build failed 🚫 not supported 🚫 not supported
t_garm_provider_remote_old_daemon ❌ build failed 🚫 not supported 🚫 not supported
t_garm_provider_vmharness_backend ❌ build failed 🚫 not supported ❌ build failed
t_garm_provider_vmharness_protocol ❌ build failed 🚫 not supported 🚫 not supported
t_garm_provider_vmharness_windows_toolchain ❌ build failed 🚫 not supported ❌ build failed
t_garm_reconcile ❌ build failed 🚫 not supported 🚫 not supported
t_garm_remote_incus_capabilities ❌ build failed 🚫 not supported 🚫 not supported
t_garm_remote_libvirt_settings ❌ build failed 🚫 not supported 🚫 not supported
t_garm_skip_queued_jobs_when_pools_full ❌ build failed 🚫 not supported ❌ build failed
t_garm_stale_scaleset_job_reaped ❌ build failed 🚫 not supported 🚫 not supported
t_garm_webhook_delivery ❌ build failed 🚫 not supported 🚫 not supported
t_garm_webhook_public_paths ❌ build failed 🚫 not supported 🚫 not supported
t_gosti_serve_rename ❌ build failed 🚫 not supported ❌ build failed
t_gosti_serve_survives_incus_blip ❌ build failed 🚫 not supported 🚫 not supported
t_gosti_serve_unit_rename_switch ❌ build failed 🚫 not supported 🚫 not supported
t_pools_cutover_complete ❌ build failed 🚫 not supported 🚫 not supported
t_private_repo_hybrid_fallback ❌ build failed 🚫 not supported ❌ build failed
t_public_repo_free_ci ❌ build failed 🚫 not supported ❌ build failed
t_repro_binary_cache_systemd_healthz ❌ build failed 🚫 not supported 🚫 not supported
t_repro_cache_client_render ❌ build failed 🚫 not supported 🚫 not supported
t_repro_deploy_agent_https_converges ❌ build failed 🚫 not supported 🚫 not supported
t_repro_lease_reaper_eval ❌ build failed 🚫 not supported 🚫 not supported
t_runner_fit_monitoring ❌ build failed 🚫 not supported ❌ build failed
t_runner_label_taxonomy ❌ build failed 🚫 not supported ❌ build failed
t_runner_mode_manager ❌ build failed 🚫 not supported ❌ build failed
t_runner_mode_switch ❌ build failed 🚫 not supported ❌ build failed
t_s3_artifact_store_acl_and_creds ❌ build failed 🚫 not supported 🚫 not supported
t_vmharness_create_fails_on_dead_guest ❌ build failed 🚫 not supported ❌ build failed
t_vmharness_image_is_honoured ❌ build failed 🚫 not supported ❌ build failed
t_vmharness_serve_inventory_textfile ❌ build failed 🚫 not supported 🚫 not supported
t_vmharness_serve_linux_deploy ❌ build failed 🚫 not supported 🚫 not supported
t_vmharness_serve_win_libvirt ❌ build failed 🚫 not supported 🚫 not supported
terraform ❌ build failed 🚫 not supported 🚫 not supported
terraform-ci-matrix ❌ build failed 🚫 not supported ❌ build failed
terranix ❌ build failed 🚫 not supported 🚫 not supported
test-linux-vm-cloud-init ❌ build failed 🚫 not supported 🚫 not supported
test_darwin_pull_agent_already_current_is_transaction_free 🚫 not supported 🚫 not supported ❌ build failed
test_darwin_pull_agent_already_current_recovers_lifecycle_before_convergence 🚫 not supported 🚫 not supported ❌ build failed
test_darwin_pull_agent_assertion_gate 🚫 not supported 🚫 not supported ❌ build failed
test_darwin_pull_agent_entrypoint_survives_generation_change 🚫 not supported 🚫 not supported ❌ build failed
test_darwin_pull_agent_launchd_contract 🚫 not supported 🚫 not supported ❌ build failed
test_darwin_pull_agent_lock_contention_is_non_destructive 🚫 not supported 🚫 not supported ❌ build failed
test_darwin_pull_agent_recreates_missing_lock_dir ❌ build failed 🚫 not supported ❌ build failed
test_darwin_pull_agent_rejects_invalid_durable_state 🚫 not supported 🚫 not supported ❌ build failed
test_darwin_pull_agent_rejects_untrusted_and_wrong_target_manifests 🚫 not supported 🚫 not supported ❌ build failed
test_darwin_pull_agent_same_id_sequence_high_water 🚫 not supported 🚫 not supported ❌ build failed
vm-harness ❌ build failed 🚫 not supported ❌ build failed
vmharness-serve-darwin-posture ❌ build failed 🚫 not supported ❌ build failed
workspace-admin-tools ❌ build failed 🚫 not supported ❌ build failed
yaml-automation-runner ❌ build failed 🚫 not supported 🚫 not supported

@dependabot
dependabot Bot force-pushed the dependabot/github_actions/gh-actions-bea7ac4791 branch 2 times, most recently from 4dc0a60 to 501132c Compare August 3, 2026 00:04
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/gh-actions-bea7ac4791 branch 5 times, most recently from fce863b to f343070 Compare August 18, 2026 21:17
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/gh-actions-bea7ac4791 branch 4 times, most recently from 8b645bb to 915a912 Compare August 21, 2026 00:04
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/gh-actions-bea7ac4791 branch 4 times, most recently from d9c8dd3 to cde1a39 Compare August 27, 2026 00:04
@zah

zah commented Aug 27, 2026

Copy link
Copy Markdown
Member

Re-verified against today's dev (edca535). Still MERGEABLE, but blocked on a self-check in this repo, and the blast radius wants a human decision.

The concrete blocker. checks/ci-workflows.nix:249 hardcodes the exact string:

checkout = "uses: actions/checkout@v6.0.2"

checks.reusable-flake-checks-artifact-fallback asserts that literal appears in the merge-matrices job and precedes the artifact-regeneration step. This PR rewrites it to @v7, so the assertion fails and the check goes red. The check's intent is ordering — "a caller-repository checkout must precede matrix regeneration" — and the version pin is incidental to that, so the right repair is to match uses: actions/checkout@ version-agnostically rather than to chase the pin on every bump.

Why I did not just do that and merge. This PR carries four major-version jumps:

action from to
actions/checkout v6.0.2 v7
actions/upload-artifact v4 v7
actions/create-github-app-token v1 v3
aws-actions/configure-aws-credentials v4.3.1 v6.2.3
natsukium/nix-diff-action v1.1.0 v1.1.1

These live in reusable workflows that downstream repos consume at @main, so the jumps reach every consumer as soon as this reaches main — create-github-app-token v1→v3 and configure-aws-credentials v4→v6 in particular touch credential minting, where a behaviour change fails closed on other people's pipelines.

One inconsistency to sort out while you are in here: the PR replaces SHA-pinned entries with floating tags in some places (actions/checkout@v7) while introducing a SHA pin in another (actions/checkout@3d3c42e5… # v7.0.1). Worth settling on one policy.

Not a blocker: upload-artifact v4→v7 pairs better with the download-artifact@v8 already on dev than the current v4 does.

Recommend: update the pinned assertion to be version-agnostic in this PR, then merge as one reviewed change with a consumer heads-up — not an unattended dependabot merge.

@dependabot
dependabot Bot force-pushed the dependabot/github_actions/gh-actions-bea7ac4791 branch 3 times, most recently from 5f4d8a0 to f269364 Compare September 3, 2026 00:04
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/gh-actions-bea7ac4791 branch 4 times, most recently from 671d4de to 31f43c8 Compare September 9, 2026 00:04
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/gh-actions-bea7ac4791 branch 6 times, most recently from c8e7eaa to 9eb5da8 Compare September 17, 2026 00:05
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/gh-actions-bea7ac4791 branch 4 times, most recently from 928151f to a5f1893 Compare September 24, 2026 00:04
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/gh-actions-bea7ac4791 branch from a5f1893 to a8467ff Compare September 25, 2026 00:04
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/gh-actions-bea7ac4791 branch 4 times, most recently from e6d628d to 16ad98a Compare October 12, 2026 00:10
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/gh-actions-bea7ac4791 branch 5 times, most recently from 58fe499 to d535d0e Compare October 20, 2026 00:04
Bumps the gh-actions group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `4` | `7` |
| [aws-actions/configure-aws-credentials](https://github.com/aws-actions/configure-aws-credentials) | `4.3.1` | `6.3.0` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4` | `7` |
| [actions/create-github-app-token](https://github.com/actions/create-github-app-token) | `1` | `3` |
| [natsukium/nix-diff-action](https://github.com/natsukium/nix-diff-action) | `1.1.0` | `1.1.1` |



Updates `actions/checkout` from 4 to 7
- [Release notes](https://github.com/actions/checkout/releases)
- [Commits](actions/checkout@v4...v7)

Updates `aws-actions/configure-aws-credentials` from 4.3.1 to 6.3.0
- [Release notes](https://github.com/aws-actions/configure-aws-credentials/releases)
- [Changelog](https://github.com/aws-actions/configure-aws-credentials/blob/main/CHANGELOG.md)
- [Commits](aws-actions/configure-aws-credentials@7474bc4...e125382)

Updates `actions/upload-artifact` from 4 to 7
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@v4...v7)

Updates `actions/create-github-app-token` from 1 to 3
- [Release notes](https://github.com/actions/create-github-app-token/releases)
- [Commits](actions/create-github-app-token@v1...v3)

Updates `natsukium/nix-diff-action` from 1.1.0 to 1.1.1
- [Release notes](https://github.com/natsukium/nix-diff-action/releases)
- [Commits](natsukium/nix-diff-action@v1.1.0...v1.1.1)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gh-actions
- dependency-name: actions/create-github-app-token
  dependency-version: '3'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gh-actions
- dependency-name: actions/upload-artifact
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gh-actions
- dependency-name: aws-actions/configure-aws-credentials
  dependency-version: 6.2.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gh-actions
- dependency-name: natsukium/nix-diff-action
  dependency-version: 1.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gh-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/gh-actions-bea7ac4791 branch from d535d0e to c9beb83 Compare October 21, 2026 00:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant