Codestin Search App

dependabot · 2026-03-03T00:16:40Z

Bumps the actions group with 5 updates in the / directory:

Package	From	To
actions/setup-go	`6.2.0`	`6.3.0`
anchore/sbom-action	`0.22.0`	`0.23.0`
helm/kind-action	`1.13.0`	`1.14.0`
docker/login-action	`3.6.0`	`3.7.0`
actions/stale	`10.1.1`	`10.2.0`

Updates actions/setup-go from 6.2.0 to 6.3.0

Release notes

Sourced from actions/setup-go's releases.

v6.3.0

What's Changed

Update default Go module caching to use go.mod by @priyagupta108 in actions/setup-go#705

Fix golang download url to go.dev by @178inaba in actions/setup-go#469

Full Changelog: actions/setup-go@v6...v6.3.0

Commits

4b73464 Fix golang download url to go.dev (#469)
a5f9b05 Update default Go module caching to use go.mod (#705)
See full diff in compare view

Updates anchore/sbom-action from 0.22.0 to 0.23.0

Release notes

Sourced from anchore/sbom-action's releases.

v0.23.0

switch to single-file dist build with sub-action flags and update dependencies (#595) [@kzantow]

switch to esbuild (#590) [@willmurphyscode]

update Syft to v1.42.1 (#599) [@anchore-actions-token-generator[bot]]

v0.22.2

⬆️ Dependencies

chore(deps): bump fast-xml-parser from 5.3.3 to 5.3.4 (#581) [@dependabot[bot]]

chore(deps): update Syft to v1.41.2 (#582) [@anchore-actions-token-generator[bot]]

chore(deps-dev): bump the dev-dependencies group with 2 updates (#580) [@dependabot[bot]]

chore(deps): update Syft to v1.41.1 (#579) [@anchore-actions-token-generator[bot]]

v0.22.1

⬆️ Dependencies

chore(deps): update Syft to v1.41.0 (#576) [@anchore-actions-token-generator[bot]]

chore(deps): bump lodash from 4.17.21 to 4.17.23 (#573) [@dependabot[bot]]

Commits

17ae174 chore(deps/test): move to es modules, node:test, single dist file (#595)
6d473d3 chore(deps): update Syft to v1.42.1 (#599)
60619e7 fix tests and bump fast-xml-parser (#598)
e2bd58a chore(deps-dev): bump the dev-dependencies group with 3 updates (#592)
d032d7d ci(syft auto update): npm ci, not npm install (#597)
2d09430 fix(dev): switch to esbuild (#590)
74c5ce9 chore(deps): update Syft to v1.42.0 (#589)
77fae5a chore(deps-dev): bump the dev-dependencies group with 4 updates (#583)
debc3ee chore(deps): bump npm-check-updates in the non-major group (#584)
fff8762 chore(deps): bump zizmorcore/zizmor-action from 0.4.1 to 0.5.0 (#588)
Additional commits viewable in compare view

Updates helm/kind-action from 1.13.0 to 1.14.0

Release notes

Sourced from helm/kind-action's releases.

v1.14.0

What's Changed

Bump actions/checkout from 5.0.0 to 6.0.1 by @dependabot[bot] in helm/kind-action#153

bump kind to v0.31.0 and k8s to v1.35.0 by @MrFreezeex in helm/kind-action#155

Bump actions/checkout from 6.0.1 to 6.0.2 in the actions group by @dependabot[bot] in helm/kind-action#156

New Contributors

@MrFreezeex made their first contribution in helm/kind-action#155

Full Changelog: helm/kind-action@v1...v1.14.0

Commits

ef37e7f Bump actions/checkout from 6.0.1 to 6.0.2 in the actions group (#156)
f5f117a bump kind to v0.31.0 and k8s to v1.35.0 (#155)
2cd8ada Bump actions/checkout from 5.0.0 to 6.0.1 (#153)
See full diff in compare view

Updates docker/login-action from 3.6.0 to 3.7.0

Release notes

Sourced from docker/login-action's releases.

v3.7.0

Add scope input to set scopes for the authentication token by @crazy-max in docker/login-action#912

Add support for AWS European Sovereign Cloud ECR by @dphi in docker/login-action#914

Ensure passwords are redacted with registry-auth input by @crazy-max in docker/login-action#911

build(deps): bump lodash from 4.17.21 to 4.17.23 in docker/login-action#915

Full Changelog: docker/login-action@v3.6.0...v3.7.0

Commits

c94ce9f Merge pull request #915 from docker/dependabot/npm_and_yarn/lodash-4.17.23
8339c95 Merge pull request #912 from docker/scope
c83e932 build(deps): bump lodash from 4.17.21 to 4.17.23
b268aa5 chore: update generated content
a603229 documentation for scope input
7567f92 Add scope input to set scopes for the authentication token
0567fa5 Merge pull request #914 from dphi/add-support-for-amazonaws.eu
f6ef577 feat: add support for AWS European Sovereign Cloud ECR registries
916386b Merge pull request #911 from crazy-max/ensure-redact
5b3f94a chore: update generated content
Additional commits viewable in compare view

Updates actions/stale from 10.1.1 to 10.2.0

Release notes

Sourced from actions/stale's releases.

v10.2.0

What's Changed

Bug Fix

Fix checking state cache (fix #1136) and switch to Octokit helper methods by @itchyny in actions/stale#1152

Dependency Updates

Upgrade js-yaml from 4.1.0 to 4.1.1 by @dependabot in actions/stale#1304

Upgrade lodash from 4.17.21 to 4.17.23 by @dependabot in actions/stale#1313

Upgrade actions/cache from 4.0.3 to 5.0.2 and actions/github from 5.1.1 to 7.0.0 by @chiranjib-swain in actions/stale#1312

New Contributors

@itchyny made their first contribution in actions/stale#1152

Full Changelog: actions/stale@v10...v10.2.0

Commits

b5d41d4 build(deps-dev): bump lodash from 4.17.21 to 4.17.23 (#1313)
dcd2b94 Fix punycode and url.parse Deprecation Warnings (#1312)
d6f8a33 build(deps-dev): bump js-yaml from 4.1.0 to 4.1.1 (#1304)
a21a081 Fix checking state cache (fix #1136), also switch to octokit methods (#1152)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the actions group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/setup-go](https://github.com/actions/setup-go) | `6.2.0` | `6.3.0` | | [anchore/sbom-action](https://github.com/anchore/sbom-action) | `0.22.0` | `0.23.0` | | [helm/kind-action](https://github.com/helm/kind-action) | `1.13.0` | `1.14.0` | | [docker/login-action](https://github.com/docker/login-action) | `3.6.0` | `3.7.0` | | [actions/stale](https://github.com/actions/stale) | `10.1.1` | `10.2.0` | Updates `actions/setup-go` from 6.2.0 to 6.3.0 - [Release notes](https://github.com/actions/setup-go/releases) - [Commits](actions/setup-go@7a3fe6c...4b73464) Updates `anchore/sbom-action` from 0.22.0 to 0.23.0 - [Release notes](https://github.com/anchore/sbom-action/releases) - [Changelog](https://github.com/anchore/sbom-action/blob/main/RELEASE.md) - [Commits](anchore/sbom-action@62ad528...17ae174) Updates `helm/kind-action` from 1.13.0 to 1.14.0 - [Release notes](https://github.com/helm/kind-action/releases) - [Commits](helm/kind-action@92086f6...ef37e7f) Updates `docker/login-action` from 3.6.0 to 3.7.0 - [Release notes](https://github.com/docker/login-action/releases) - [Commits](docker/login-action@5e57cd1...c94ce9f) Updates `actions/stale` from 10.1.1 to 10.2.0 - [Release notes](https://github.com/actions/stale/releases) - [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md) - [Commits](actions/stale@9971854...b5d41d4) --- updated-dependencies: - dependency-name: actions/setup-go dependency-version: 6.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: anchore/sbom-action dependency-version: 0.23.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: helm/kind-action dependency-version: 1.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: docker/login-action dependency-version: 3.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: actions/stale dependency-version: 10.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Mar 3, 2026

pull-request-size bot added the size/S label Mar 3, 2026

cpanato approved these changes Mar 3, 2026

View reviewed changes

cpanato merged commit 59825b8 into main Mar 3, 2026
4 checks passed

cpanato deleted the dependabot/github_actions/actions-e166bf8667 branch March 3, 2026 06:36

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

build(deps): Bump the actions group across 1 directory with 5 updates#815

build(deps): Bump the actions group across 1 directory with 5 updates#815
cpanato merged 1 commit intomainfrom
dependabot/github_actions/actions-e166bf8667

dependabot bot commented on behalf of github Mar 3, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot bot commented on behalf of github Mar 3, 2026

v6.3.0

What's Changed

v0.23.0

v0.22.2

⬆️ Dependencies

v0.22.1

⬆️ Dependencies

v1.14.0

What's Changed

New Contributors

v3.7.0

v10.2.0

What's Changed

Bug Fix

Dependency Updates

New Contributors

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant