Thanks to visit codestin.com
Credit goes to github.com

Skip to content

build(deps): bump the actions group with 3 updates#2833

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions-0b802d69f4
Open

build(deps): bump the actions group with 3 updates#2833
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions-0b802d69f4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 9, 2026

Copy link
Copy Markdown
Contributor

Bumps the actions group with 3 updates: docker/login-action, docker/setup-buildx-action and dorny/paths-filter.

Updates docker/login-action from 4.2.0 to 4.3.0

Release notes

Sourced from docker/login-action's releases.

v4.3.0

Full Changelog: docker/login-action@v4.2.0...v4.3.0

Commits
  • c99871d Merge pull request #1030 from docker/dependabot/npm_and_yarn/aws-sdk-dependen...
  • b433555 [dependabot skip] chore: update generated content
  • 678a46a build(deps): bump the aws-sdk-dependencies group across 1 directory with 2 up...
  • f9a0aea Merge pull request #1031 from docker/dependabot/npm_and_yarn/sigstore-4.1.1
  • cc1e4cb build(deps): bump sigstore from 4.1.0 to 4.1.1
  • 02e1730 Merge pull request #1029 from docker/dependabot/npm_and_yarn/sigstore/verify-...
  • b548518 build(deps): bump @​sigstore/verify from 3.1.0 to 3.1.1
  • a244be3 Merge pull request #1027 from docker/dependabot/npm_and_yarn/docker/actions-t...
  • ee0d698 [dependabot skip] chore: update generated content
  • 127dc2c build(deps): bump @​docker/actions-toolkit from 0.91.0 to 0.92.0
  • Additional commits viewable in compare view

Updates docker/setup-buildx-action from 4.1.0 to 4.2.0

Release notes

Sourced from docker/setup-buildx-action's releases.

v4.2.0

Full Changelog: docker/setup-buildx-action@v4.1.0...v4.2.0

Commits
  • bb05f3f Merge pull request #580 from docker/dependabot/npm_and_yarn/docker/actions-to...
  • 321c814 [dependabot skip] chore: update generated content
  • b9a36ef build(deps): bump @​docker/actions-toolkit from 0.91.0 to 0.92.0
  • ebeab24 Merge pull request #570 from docker/dependabot/npm_and_yarn/undici-6.27.0
  • 5c7b8ae [dependabot skip] chore: update generated content
  • 037e618 build(deps): bump undici from 6.25.0 to 6.27.0
  • 66080e5 Merge pull request #577 from docker/dependabot/npm_and_yarn/sigstore-4.1.1
  • 409aef0 Merge pull request #562 from docker/dependabot/npm_and_yarn/js-yaml-4.2.0
  • 49c6e42 build(deps): bump sigstore from 4.1.0 to 4.1.1
  • 2211273 [dependabot skip] chore: update generated content
  • Additional commits viewable in compare view

Updates dorny/paths-filter from 4.0.1 to 4.0.2

Release notes

Sourced from dorny/paths-filter's releases.

v4.0.2

What's Changed

New Contributors

Full Changelog: dorny/paths-filter@v4.0.1...v4.0.2

Changelog

Sourced from dorny/paths-filter's changelog.

v4.0.2

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps): bump the actions group with 3 updates
ba3af4a 
Bumps the actions group with 3 updates: [docker/login-action](https://github.com/docker/login-action), [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) and [dorny/paths-filter](https://github.com/dorny/paths-filter).


Updates `docker/login-action` from 4.2.0 to 4.3.0
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](docker/login-action@v4.2.0...v4.3.0)

Updates `docker/setup-buildx-action` from 4.1.0 to 4.2.0
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](docker/setup-buildx-action@v4.1.0...v4.2.0)

Updates `dorny/paths-filter` from 4.0.1 to 4.0.2
- [Release notes](https://github.com/dorny/paths-filter/releases)
- [Changelog](https://github.com/dorny/paths-filter/blob/master/CHANGELOG.md)
- [Commits](dorny/paths-filter@v4.0.1...v4.0.2)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-version: 4.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: docker/setup-buildx-action
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: dorny/paths-filter
  dependency-version: 4.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jul 9, 2026
@dependabot dependabot Bot requested a review from Dreamsorcerer as a code owner July 9, 2026 05:37
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jul 9, 2026
@dependabot dependabot Bot added the github_actions Pull requests that update GitHub Actions code label Jul 9, 2026
@github-actions github-actions Bot enabled auto-merge (squash) July 9, 2026 05:37
@greptile-apps

greptile-apps Bot commented Jul 9, 2026

Copy link
Copy Markdown
Contributor

Greptile Summary

This dependabot PR bumps three GitHub Actions used in the Docker build workflow: docker/login-action (4.2.0 → 4.3.0), docker/setup-buildx-action (4.1.0 → 4.2.0), and dorny/paths-filter (4.0.1 → 4.0.2).

  • docker/login-action and docker/setup-buildx-action receive dependency updates (undici, sigstore, js-yaml) and esbuild bundle name preservation fixes; no behavioral changes to the login or buildx setup flows.
  • dorny/paths-filter v4.0.2 is a patch release fixing git dubious ownership errors in container jobs and improving compatibility with older git versions via rev-parse — both relevant to this repo's self-hosted Linux runners.

Confidence Score: 5/5

Routine patch and minor version bumps to three well-maintained GitHub Actions with no breaking changes; safe to merge.

All three updates are minor or patch releases from official Docker and dorny maintainers. The dorny/paths-filter patch specifically fixes git dubious ownership errors in container jobs, which is directly beneficial for this repo's self-hosted Linux runners. No workflow logic was changed — only the pinned version strings.

No files require special attention.

Important Files Changed

Filename Overview
.github/workflows/_docker-build-template.yml Bumps docker/login-action from v4.2.0 to v4.3.0 and docker/setup-buildx-action from v4.1.0 to v4.2.0; no other changes.
.github/workflows/docker-build.yml Bumps dorny/paths-filter from v4.0.1 to v4.0.2; patch release includes git dubious ownership fix for container jobs and older git compatibility improvements.

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart TD
    A[push / schedule / dispatch] --> B[check-changes job]
    B --> C{force rebuild?}
    C -->|yes| D[skip paths-filter]
    C -->|no| E[dorny paths-filter v4.0.2]
    E --> F[outputs ros / python / dev flags]
    D --> F
    F --> G[ros build]
    F --> H[python build]
    F --> I[dev build]
    G --> J[ros-python build]
    H --> K[dev build]
    J --> L[ros-dev build]
    I --> L
    G --> M[build-complete gate]
    H --> M
    I --> M
    J --> M
    K --> M
    L --> M
    subgraph template [_docker-build-template.yml]
        N[docker login-action v4.3.0]
        O[docker setup-buildx-action v4.2.0]
        N --> O
    end
    G -.uses.-> template
    H -.uses.-> template
    I -.uses.-> template
    J -.uses.-> template
    K -.uses.-> template
    L -.uses.-> template
Loading 
%%{init: {'theme': 'base', 'themeVariables': {"darkMode": true, "background": "#0d1117", "primaryColor": "#21262d", "primaryTextColor": "#e6edf3", "primaryBorderColor": "#8b949e", "lineColor": "#8b949e", "textColor": "#e6edf3", "edgeLabelBackground": "#161b22", "actorBkg": "#21262d", "actorBorder": "#8b949e", "actorTextColor": "#e6edf3", "actorLineColor": "#8b949e", "signalColor": "#8b949e", "signalTextColor": "#e6edf3", "noteBkgColor": "#373320", "noteBorderColor": "#d4a72c", "noteTextColor": "#f0e6c0", "labelBoxBkgColor": "#21262d", "labelBoxBorderColor": "#8b949e", "labelTextColor": "#e6edf3", "loopTextColor": "#e6edf3", "activationBkgColor": "#30363d", "activationBorderColor": "#8b949e"}}}%%
flowchart TD
    A[push / schedule / dispatch] --> B[check-changes job]
    B --> C{force rebuild?}
    C -->|yes| D[skip paths-filter]
    C -->|no| E[dorny paths-filter v4.0.2]
    E --> F[outputs ros / python / dev flags]
    D --> F
    F --> G[ros build]
    F --> H[python build]
    F --> I[dev build]
    G --> J[ros-python build]
    H --> K[dev build]
    J --> L[ros-dev build]
    I --> L
    G --> M[build-complete gate]
    H --> M
    I --> M
    J --> M
    K --> M
    L --> M
    subgraph template [_docker-build-template.yml]
        N[docker login-action v4.3.0]
        O[docker setup-buildx-action v4.2.0]
        N --> O
    end
    G -.uses.-> template
    H -.uses.-> template
    I -.uses.-> template
    J -.uses.-> template
    K -.uses.-> template
    L -.uses.-> template
Loading

Reviews (1): Last reviewed commit: "build(deps): bump the actions group with..." | Re-trigger Greptile

@codecov

codecov Bot commented Jul 9, 2026 •
edited
Loading

Copy link
Copy Markdown

❌ 2 Tests Failed:

Tests completed Failed Passed Skipped
2785 2 2783 71
View the full list of 2 ❄️ flaky test(s) 
dimos.e2e_tests.test_dimsim_spatial_memory::test_go_to_the_bed

Flake rate in main: 19.51% (Passed 99 times, Failed 24 times)

Stack Traces | 535s run time 
lcm_spy = <dimos.e2e_tests.lcm_spy.LcmSpy object at 0x762bde56f470>
start_blueprint = <function start_blueprint.<locals>.set_name_and_start at 0x762bdeed9260>
human_input = <function human_input.<locals>.send_human_input at 0x762bdeed9300>
dim_sim = <dimos.e2e_tests.dim_sim_client.DimSimClient object at 0x762bde567c50>
explore_house = <function explore_house.<locals>.explore at 0x762bdeed9800>

    @pytest.mark.self_hosted_large
    def test_go_to_the_bed(lcm_spy, start_blueprint, human_input, dim_sim, explore_house) -> None:
        start_blueprint(
            "run",
            "unitree-go2-agentic",
            simulator="dimsim",
        )
        lcm_spy.save_topic(".../McpClient/on_system_modules/res")
        lcm_spy.wait_for_saved_topic(".../McpClient/on_system_modules/res", timeout=1200.0)
    
        explore_house()
    
        human_input("go to the bed")
    
>       lcm_spy.wait_until_odom_position(-3.567, -1.332, threshold=2, timeout=180)

dim_sim    = <dimos.e2e_tests.dim_sim_client.DimSimClient object at 0x762bde567c50>
explore_house = <function explore_house.<locals>.explore at 0x762bdeed9800>
human_input = <function human_input.<locals>.send_human_input at 0x762bdeed9300>
lcm_spy    = <dimos.e2e_tests.lcm_spy.LcmSpy object at 0x762bde56f470>
start_blueprint = <function start_blueprint.<locals>.set_name_and_start at 0x762bdeed9260>

dimos/e2e_tests/test_dimsim_spatial_memory.py:32: 
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 
dimos/e2e_tests/lcm_spy.py:167: in wait_until_odom_position
    self.wait_for_message_result(
        predicate  = <function LcmSpy.wait_until_odom_position.<locals>.predicate at 0x762bdeed9940>
        self       = <dimos.e2e_tests.lcm_spy.LcmSpy object at 0x762bde56f470>
        threshold  = 2
        timeout    = 180
        x          = -3.567
        y          = -1.332
dimos/e2e_tests/lcm_spy.py:153: in wait_for_message_result
    wait_until(
        event      = <threading.Event at 0x762bde2cf6b0: unset>
        fail_message = 'Failed to get to position x=-3.567, y=-1.332'
        listener   = <function LcmSpy.wait_for_message_result.<locals>.listener at 0x762bdeed8cc0>
        predicate  = <function LcmSpy.wait_until_odom_position.<locals>.predicate at 0x762bdeed9940>
        self       = <dimos.e2e_tests.lcm_spy.LcmSpy object at 0x762bde56f470>
        timeout    = 180
        topic      = '/odom#geometry_msgs.PoseStamped'
        type       = <class 'dimos.msgs.geometry_msgs.PoseStamped.PoseStamped'>
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 

predicate = <bound method Event.is_set of <threading.Event at 0x762bde2cf6b0: unset>>

    def wait_until(
        predicate: Callable[[], bool],
        *,
        timeout: float,
        interval: float = 0.1,
        message: str | None = None,
    ) -> None:
        """Poll ``predicate`` until it returns truthy or ``timeout`` elapses."""
        deadline = time.monotonic() + timeout
        while time.monotonic() < deadline:
            if predicate():
                return
            time.sleep(interval)
>       raise TimeoutError(message or f"Timed out after {timeout}s waiting for condition")
E       TimeoutError: Failed to get to position x=-3.567, y=-1.332

deadline   = 45425.579285131
interval   = 0.1
message    = 'Failed to get to position x=-3.567, y=-1.332'
predicate  = <bound method Event.is_set of <threading.Event at 0x762bde2cf6b0: unset>>
timeout    = 180

.../utils/testing/waiting.py:35: TimeoutError
dimos.e2e_tests.test_dimsim_walk_forward::test_walk_forward

Flake rate in main: 21.85% (Passed 93 times, Failed 26 times)

Stack Traces | 200s run time 
lcm_spy = <dimos.e2e_tests.lcm_spy.LcmSpy object at 0x762bddae61e0>
start_blueprint = <function start_blueprint.<locals>.set_name_and_start at 0x762bdeed9580>
human_input = <function human_input.<locals>.send_human_input at 0x762bdeed9f80>
dim_sim = <dimos.e2e_tests.dim_sim_client.DimSimClient object at 0x762bddae5520>

    @pytest.mark.self_hosted_large
    def test_walk_forward(lcm_spy, start_blueprint, human_input, dim_sim) -> None:
        start_blueprint(
            "run",
            "--disable",
            "spatial-memory",
            "--disable",
            "security-module",
            "unitree-go2-agentic",
            simulator="dimsim",
        )
        lcm_spy.save_topic(".../McpClient/on_system_modules/res")
        lcm_spy.wait_for_saved_topic(".../McpClient/on_system_modules/res", timeout=1200.0)
    
        origin_x, origin_y = 1, 2
        dim_sim.set_agent_position(origin_x, origin_y)
    
        human_input("move forward 3 meter")
    
>       lcm_spy.wait_until_odom_position(origin_x + 3, origin_y, threshold=0.4, timeout=120)

dim_sim    = <dimos.e2e_tests.dim_sim_client.DimSimClient object at 0x762bddae5520>
human_input = <function human_input.<locals>.send_human_input at 0x762bdeed9f80>
lcm_spy    = <dimos.e2e_tests.lcm_spy.LcmSpy object at 0x762bddae61e0>
origin_x   = 1
origin_y   = 2
start_blueprint = <function start_blueprint.<locals>.set_name_and_start at 0x762bdeed9580>

dimos/e2e_tests/test_dimsim_walk_forward.py:37: 
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 
dimos/e2e_tests/lcm_spy.py:167: in wait_until_odom_position
    self.wait_for_message_result(
        predicate  = <function LcmSpy.wait_until_odom_position.<locals>.predicate at 0x762bdeed8e00>
        self       = <dimos.e2e_tests.lcm_spy.LcmSpy object at 0x762bddae61e0>
        threshold  = 0.4
        timeout    = 120
        x          = 4
        y          = 2
dimos/e2e_tests/lcm_spy.py:153: in wait_for_message_result
    wait_until(
        event      = <threading.Event at 0x762bddae5c70: unset>
        fail_message = 'Failed to get to position x=4, y=2'
        listener   = <function LcmSpy.wait_for_message_result.<locals>.listener at 0x762bdeeda340>
        predicate  = <function LcmSpy.wait_until_odom_position.<locals>.predicate at 0x762bdeed8e00>
        self       = <dimos.e2e_tests.lcm_spy.LcmSpy object at 0x762bddae61e0>
        timeout    = 120
        topic      = '/odom#geometry_msgs.PoseStamped'
        type       = <class 'dimos.msgs.geometry_msgs.PoseStamped.PoseStamped'>
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 

predicate = <bound method Event.is_set of <threading.Event at 0x762bddae5c70: unset>>

    def wait_until(
        predicate: Callable[[], bool],
        *,
        timeout: float,
        interval: float = 0.1,
        message: str | None = None,
    ) -> None:
        """Poll ``predicate`` until it returns truthy or ``timeout`` elapses."""
        deadline = time.monotonic() + timeout
        while time.monotonic() < deadline:
            if predicate():
                return
            time.sleep(interval)
>       raise TimeoutError(message or f"Timed out after {timeout}s waiting for condition")
E       TimeoutError: Failed to get to position x=4, y=2

deadline   = 45625.004375608
interval   = 0.1
message    = 'Failed to get to position x=4, y=2'
predicate  = <bound method Event.is_set of <threading.Event at 0x762bddae5c70: unset>>
timeout    = 120

.../utils/testing/waiting.py:35: TimeoutError

To view more test analytics, go to the Test Analytics Dashboard
📋 Got 3 mins? Take this short survey to help us improve Test Analytics.

@github-actions github-actions Bot added the ready-to-merge Required CI checks have passed on this PR label Jul 9, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@github-actions github-actions[bot] github-actions[bot] approved these changes
@Dreamsorcerer Dreamsorcerer Awaiting requested review from Dreamsorcerer Dreamsorcerer is a code owner
@leshy leshy Awaiting requested review from leshy leshy is a code owner
@paul-nechifor paul-nechifor Awaiting requested review from paul-nechifor paul-nechifor is a code owner
@spomichter spomichter Awaiting requested review from spomichter spomichter is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code ready-to-merge Required CI checks have passed on this PR

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants