Skip to content

[ci](deps): Bump the github-actions group with 14 updates #175

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
Nick2bad4u merged 1 commit into from
Feb 1, 2026
Merged

[ci](deps): Bump the github-actions group with 14 updates #175

Nick2bad4u merged 1 commit into from
Feb 1, 2026

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 1, 2026

Bumps the github-actions group with 14 updates:

Package From To
step-security/harden-runner 2.14.0 2.14.1
actions/checkout 6.0.1 6.0.2
actions/setup-node 6.1.0 6.2.0
actions/cache 5.0.1 5.0.3
github/codeql-action 4.31.9 4.32.0
oxsecurity/megalinter 9.2.0 9.3.0
google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml 2.3.1 2.3.2
google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml 2.3.1 2.3.2
peter-evans/create-pull-request 8.0.0 8.1.0
rojopolis/spellcheck-github-actions 0.56.0 0.58.0
actions/ai-inference 2.0.4 2.0.5
super-linter/super-linter 8.3.2 8.4.0
trufflesecurity/trufflehog 3.92.4 3.92.5
crate-ci/typos 1.41.0 1.42.3

Updates step-security/harden-runner from 2.14.0 to 2.14.1

Release notes

Sourced from step-security/harden-runner's releases.

v2.14.1

What's Changed

  1. In some self-hosted environments, the agent could briefly fall back to public DNS resolvers during startup if the system DNS was not yet available. This behavior was unintended for GitHub-hosted runners and has now been fixed to prevent any use of public DNS resolvers.

  2. Fixed npm audit vulnerabilities

Full Changelog: step-security/harden-runner@v2.14.0...v2.14.1

Commits

Updates actions/checkout from 6.0.1 to 6.0.2

Release notes

Sourced from actions/checkout's releases.

v6.0.2

What's Changed

Full Changelog: actions/checkout@v6.0.1...v6.0.2

Commits
  • de0fac2 Fix tag handling: preserve annotations and explicit fetch-tags (#2356)
  • 064fe7f Add orchestration_id to git user-agent when ACTIONS_ORCHESTRATION_ID is set (...
  • See full diff in compare view

Updates actions/setup-node from 6.1.0 to 6.2.0

Release notes

Sourced from actions/setup-node's releases.

v6.2.0

What's Changed

Documentation

Dependency updates:

New Contributors

Full Changelog: actions/setup-node@v6...v6.2.0

Commits

Updates actions/cache from 5.0.1 to 5.0.3

Release notes

Sourced from actions/cache's releases.

v5.0.3

What's Changed

Full Changelog: actions/cache@v5...v5.0.3

v.5.0.2

v5.0.2

What's Changed

When creating cache entries, 429s returned from the cache service will not be retried.

Changelog

Sourced from actions/cache's changelog.

Releases

How to prepare a release

[!NOTE]
Relevant for maintainers with write access only.

  1. Switch to a new branch from main.
  2. Run npm test to ensure all tests are passing.
  3. Update the version in https://github.com/actions/cache/blob/main/package.json.
  4. Run npm run build to update the compiled files.
  5. Update this https://github.com/actions/cache/blob/main/RELEASES.md with the new version and changes in the ## Changelog section.
  6. Run licensed cache to update the license report.
  7. Run licensed status and resolve any warnings by updating the https://github.com/actions/cache/blob/main/.licensed.yml file with the exceptions.
  8. Commit your changes and push your branch upstream.
  9. Open a pull request against main and get it reviewed and merged.
  10. Draft a new release https://github.com/actions/cache/releases use the same version number used in package.json
    1. Create a new tag with the version number.
    2. Auto generate release notes and update them to match the changes you made in RELEASES.md.
    3. Toggle the set as the latest release option.
    4. Publish the release.
  11. Navigate to https://github.com/actions/cache/actions/workflows/release-new-action-version.yml
    1. There should be a workflow run queued with the same version number.
    2. Approve the run to publish the new version and update the major tags for this action.

Changelog

5.0.3

5.0.2

  • Bump @actions/cache to v5.0.3 #1692

5.0.1

5.0.0

[!IMPORTANT] actions/cache@v5 runs on the Node.js 24 runtime and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading.

4.3.0

  • Bump @actions/cache to v4.1.0

... (truncated)

Commits

Updates github/codeql-action from 4.31.9 to 4.32.0

Release notes

Sourced from github/codeql-action's releases.

v4.32.0

  • Update default CodeQL bundle version to 2.24.0. #3425

v4.31.11

  • When running a Default Setup workflow with Actions debugging enabled, the CodeQL Action will now use more unique names when uploading logs from the Dependabot authentication proxy as workflow artifacts. This ensures that the artifact names do not clash between multiple jobs in a build matrix. #3409
  • Improved error handling throughout the CodeQL Action. #3415
  • Added experimental support for automatically excluding generated files from the analysis. This feature is not currently enabled for any analysis. In the future, it may be enabled by default for some GitHub-managed analyses. #3318
  • The changelog extracts that are included with releases of the CodeQL Action are now shorter to avoid duplicated information from appearing in Dependabot PRs. #3403

v4.31.10

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.10 - 12 Jan 2026

  • Update default CodeQL bundle version to 2.23.9. #3393

See the full CHANGELOG.md for more information.

Changelog

Sourced from github/codeql-action's changelog.

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

[UNRELEASED]

No user facing changes.

4.32.0 - 26 Jan 2026

  • Update default CodeQL bundle version to 2.24.0. #3425

4.31.11 - 23 Jan 2026

  • When running a Default Setup workflow with Actions debugging enabled, the CodeQL Action will now use more unique names when uploading logs from the Dependabot authentication proxy as workflow artifacts. This ensures that the artifact names do not clash between multiple jobs in a build matrix. #3409
  • Improved error handling throughout the CodeQL Action. #3415
  • Added experimental support for automatically excluding generated files from the analysis. This feature is not currently enabled for any analysis. In the future, it may be enabled by default for some GitHub-managed analyses. #3318
  • The changelog extracts that are included with releases of the CodeQL Action are now shorter to avoid duplicated information from appearing in Dependabot PRs. #3403

4.31.10 - 12 Jan 2026

  • Update default CodeQL bundle version to 2.23.9. #3393

4.31.9 - 16 Dec 2025

No user facing changes.

4.31.8 - 11 Dec 2025

  • Update default CodeQL bundle version to 2.23.8. #3354

4.31.7 - 05 Dec 2025

  • Update default CodeQL bundle version to 2.23.7. #3343

4.31.6 - 01 Dec 2025

No user facing changes.

4.31.5 - 24 Nov 2025

  • Update default CodeQL bundle version to 2.23.6. #3321

4.31.4 - 18 Nov 2025

No user facing changes.

4.31.3 - 13 Nov 2025

  • CodeQL Action v3 will be deprecated in December 2026. The Action now logs a warning for customers who are running v3 but could be running v4. For more information, see Upcoming deprecation of CodeQL Action v3.

... (truncated)

Commits
  • b20883b Merge pull request #3428 from github/update-v4.32.0-e3b8227a2
  • c9aa45d Update changelog for v4.32.0
  • e3b8227 Merge pull request #3427 from github/henrymercer/bump-for-new-minor-series
  • 8a01181 Compare minor version number
  • 80e1425 Bump minor version for CLI v2.24.0
  • b748848 Bump the Action minor version number on new CodeQL minor version series
  • 5e767ef Merge pull request #3425 from github/update-bundle/codeql-bundle-v2.24.0
  • 9752869 Add changelog note
  • c62c214 Update default bundle to codeql-bundle-v2.24.0
  • 25a224b Merge pull request #3423 from github/mbg/ci/yq-windows
  • Additional commits viewable in compare view

Updates oxsecurity/megalinter from 9.2.0 to 9.3.0

Release notes

Sourced from oxsecurity/megalinter's releases.

v9.3.0

What's Changed

  • Core

    • Add enum name support in MegaLinter config Json schema for better autocompletion in editors
    • Update base image to python:3.13-alpine3.23

  • New linters

  • Linters enhancements

    • Change checkmake Docker image reference by @​bdovaz

  • Reporters

    • Handle multiple MegaLinter runs on the same repo using custom value sent in variable MEGALINTER_MULTIRUN_KEY
    • Allow to override url to CI build in Git based reporters using REPORTERS_ACTION_RUN_URL variable
    • Fix sections display in Gitlab console logs

  • Doc

    • Classify all JSON schema config variables by category and section

  • CI

    • Free disk space on GitHub actions runner when releasing a new flavor
    • Add missing Dockerfile patterns to Renovate Dockerfile manager
    • Remove gitpod custom image, workflow, and makefile targets

  • Linter versions upgrades (54)

... (truncated)

Changelog

Sourced from oxsecurity/megalinter's changelog.

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[Unreleased] (beta, main branch content)

Note: Can be used with oxsecurity/megalinter@beta in your GitHub Action mega-linter.yml file, or with oxsecurity/megalinter:beta docker image

  • Core

    • Improve files browsing performances
    • Optimize parallel linter processing and improve grouping logic
    • Improve performance of listing .gitignored files by sending excluded directories to git ls-files
    • If there are more than 500 .gitignored files, advise to add more excluded directories using variable ADDITIONAL_EXCLUDED_DIRECTORIES, to improve performances

  • New linters

  • Disabled linters

  • Deprecated linters

  • Removed linters

  • Media

  • Linters enhancements

  • Fixes

    • Add support for SSH remote origins when building custom flavors (fixes: #6511)
    • Fix issue with plugins ignored when FLAVOR_SUGGESTIONS=false
    • Fix wrong tagging apply_fixes=True when linter has no fix options configured
    • Python mypy: Remove .ipynb from file extensions (mypy doesn't support notebooks directly) - fixes #6904

  • Reporters

    • Add a link inviting to star MegaLinter
    • Display in the console reporter the working directory from which the commands are executed by @​bdovaz
    • Update WebHook reporter so it can send more events for a better integration with UI
    • When truncating long comments in markdown reports, keep the end of the text instead of the beginning (which usually contains less useful information)

  • Doc

    • JSON Schema: add default values for file extensions and file names variables + improve descriptions
    • Update default secured env variables documentation

  • Flavors

  • CI

... (truncated)

Commits
  • 42bb470 Release MegaLinter v9.3.0
  • fe74938 changelog
  • edb083a [automation] Auto-update linters version, help and documentation (#6889)
  • 824240c JSON Schema fix (#6888)
  • 9af8d5b chore(deps): update dependency npm-package-json-lint to v9.1.0 (#6883)
  • 781c95c [automation] Auto-update linters version, help and documentation (#6885)
  • 101b802 JSON Schema (#6887)
  • 3ab7a93 chore(deps): update dependency friendsofphp/php-cs-fixer to v3.92.4 (#6886)
  • 12f7c03 chore(deps): update ghcr.io/astral-sh/uv docker tag to v0.9.21 (#6882)
  • 91a9dfb chore(deps): update dependency sfdx-hardis to v6.20.0 (#6884)
  • Additional commits viewable in compare view

Updates google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml from 2.3.1 to 2.3.2

Release notes

Sourced from google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml's releases.

v2.3.2

This updates OSV-Scanner to v2.3.2

This release includes performance improvements for local scanning, reducing memory usage and avoiding unnecessary advisory loading. It also fixes issues with MCP's get_vulnerability_details tool, git queries in osv-scanner.json, and ignore entry tracking, along with documentation updates.

Fixes:

Misc:

Full Changelog: google/osv-scanner@v2.3.1...v2.3.2

Commits
  • 2a387ed Merge pull request #116 from google/update-to-v2.3.2
  • f75042f Update unified workflow example to point to v2.3.2 reusable workflows
  • 17ad728 Update reusable workflows to point to v2.3.2 actions
  • 9eebeae "Update actions to use v2.3.2 osv-scanner image"
  • dcf7b89 Merge pull request #114 from renovate-bot/renovate/major-workflows
  • 6bcc4fa Merge pull request #113 from renovate-bot/renovate/workflows
  • 70f7395 chore(deps): update github/codeql-action action to v4.31.9
  • 7c3c2a7 chore(deps): update workflows
  • a239d86 Merge pull request #109 from renovate-bot/renovate/major-workflows
  • 5345c88 chore(deps): update actions/checkout action to v6
  • See full diff in compare view

Updates google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml from 2.3.1 to 2.3.2

Release notes

Sourced from google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml's releases.

v2.3.2

This updates OSV-Scanner to v2.3.2

This release includes performance improvements for local scanning, reducing memory usage and avoiding unnecessary advisory loading. It also fixes issues with MCP's get_vulnerability_details tool, git queries in osv-scanner.json, and ignore entry tracking, along with documentation updates.

Fixes:

Misc:

Full Changelog: google/osv-scanner@v2.3.1...v2.3.2

Commits
  • 2a387ed Merge pull request #116 from google/update-to-v2.3.2
  • f75042f Update unified workflow example to point to v2.3.2 reusable workflows
  • 17ad728 Update reusable workflows to point to v2.3.2 actions
  • 9eebeae "Update actions to use v2.3.2 osv-scanner image"
  • dcf7b89 Merge pull request #114 from renovate-bot/renovate/major-workflows
  • 6bcc4fa Merge pull request #113 from renovate-bot/renovate/workflows
  • 70f7395 chore(deps): update github/codeql-action action to v4.31.9
  • 7c3c2a7 chore(deps): update workflows
  • a239d86 Merge pull request #109 from renovate-bot/renovate/major-workflows
  • 5345c88 chore(deps): update actions/checkout action to v6
  • See full diff in compare view

Updates peter-evans/create-pull-request from 8.0.0 to 8.1.0

Release notes

Sourced from peter-evans/create-pull-request's releases.

Create Pull Request v8.1.0

What's Changed

New Contributors

Full Changelog: peter-evans/create-pull-request@v8.0.0...v8.1.0

Commits
  • c0f553f feat: add @​octokit/plugin-retry to handle retriable server errors (#4298)
  • 7000124 fix: Handle remote prune failures gracefully (#4295)
  • 34aa40e build: update distribution (#4289)
  • 641099d build(deps-dev): bump undici from 6.22.0 to 6.23.0 (#4284)
  • 2271f1d build(deps-dev): bump the npm group with 2 updates (#4274)
  • 437c31a build(deps): bump the github-actions group with 2 updates (#4273)
  • 0979079 docs: update readme
  • 5b751cd README.md: bump given GitHub actions to their latest versions (#4265)
  • See full diff in compare view

Updates rojopolis/spellcheck-github-actions from 0.56.0 to 0.58.0

Release notes

Sourced from rojopolis/spellcheck-github-actions's releases.

0.58.0

What's Changed

Full Changelog: rojopolis/spellcheck-github-actions@0.57.0...0.58.0

0.57.0

What's Changed

Full Changelog: rojopolis/spellcheck-github-actions@0.56.0...0.57.0

Changelog

Sourced from rojopolis/spellcheck-github-actions's changelog.

Change Log for spellcheck-github-actions

0.58.0, 2026-01-20, security release, update not required

0.57.0, 2026-01-14, maintenance release, update not required

  • Docker based image updated to Python 3.14.2 slim trixie via PR #310 from Dependabot. The version is the same, the image has had updates.

0.56.0, 2025-12-27, feature and maintenance release, update not required

0.55.0, 2025-11-27, maintenance release, update not required

  • Via an issue #293 from @​shoverbj, an update to the core component PySpelling from version 2.12.0 to version 2.12.1 was made, this allows for use of large dictionaries with Aspell

0.54.0, 2025-11-05, feature release, update not required

0.53.0, 2025-10-25, maintenance release, update not required

  • Docker image updated to Python 3.14.0 trixie slim Release notes for Python 3.14.0, this originated from the PR mentioned below, however updated to Trixie from Bookworm and as always the slim variant is used

  • Bumped the requirement for cython to 3.0.11 or above, addressing a build issue with lxml, located when testing the PR : #274 from @​dependabot, the above update of Python

  • In general the Docker build file had a few updates since the above changes required some tweaking of the Dockerfile

    • Order of installation of dependencies adjusted to ensure that lxml can build correctly
    • Installation of:
      • build-essential
      • pkg-config
      • libxml2-dev
      • libxslt1-dev
      • zlib1g-dev

0.52.0, 2025-09-10, feature release, update not required

  • With version 2.11 of PySpelling a new command line option --skip-dict-compile is introduced to PySpelling and is adopted by this action. This will skip the dictionary compiling step if the dictionary already exists. Changes to a custom dictionary will be ignored., see the release notes for PySpelling. Do see the updated documentation for details.

    • The feature can be enabled by setting the input parameter skip_dict_compile to true, the default is false, meaning that the dictionary will be compiled on each run of the action.
    • This can save time if you have a large custom dictionary that does not change often.

  • Docker image updated to Python 3.13.7 bookworm slim Release notes for Python 3.13.7

... (truncated)

Commits
  • 0bf4b2f Bumped release date
  • d2bf0b0 Bump rojopolis/spellcheck-github-actions from 0.56.0 to 0.57.0 (#315)
  • 247484a Fixed some spelling, URLs should possibly be treated as code
  • 8c73a77 Security patch for dependency pymdown-extensions (#313)
  • 2b78e36 Merge pull request #311 from rojopolis/release_candidate-0.57.0
  • ae438aa Updated base image, version intact. Maintenance release, update not required
  • ed2239b Merge pull request #310 from rojopolis/dependabot/docker/python-3955a7d
  • 975de5b Bump python from 2751cbe to 3955a7d
  • 5d3ca52 Bump rojopolis/spellcheck-github-actions from 0.55.0 to 0.56.0 (#309)
  • See full diff in compare view

Updates actions/ai-inference from 2.0.4 to 2.0.5

Release notes

Sourced from actions/ai-inference's releases.

v2.0.5

What's Changed

New Contributors

Full Changelog: actions/ai-inference@v2...v2.0.5

Commits
  • a6101c8 Merge pull request #163 from yg1996/add-custom-headers-support
  • 15ae50a Add CRLF injection protection for header values
  • f773800 Update src/helpers.ts
  • 6402ff8 Update README.md
  • c760995 Remove redundant feature documentation file
  • ce720b3 Fix header validation per RFC 7230 and add null check

@dependabot
[ci](deps): Bump the github-actions group with 14 updates
94b78e3 
Bumps the github-actions group with 14 updates:

| Package | From | To |
| --- | --- | --- |
| [step-security/harden-runner](https://github.com/step-security/harden-runner) | `2.14.0` | `2.14.1` |
| [actions/checkout](https://github.com/actions/checkout) | `6.0.1` | `6.0.2` |
| [actions/setup-node](https://github.com/actions/setup-node) | `6.1.0` | `6.2.0` |
| [actions/cache](https://github.com/actions/cache) | `5.0.1` | `5.0.3` |
| [github/codeql-action](https://github.com/github/codeql-action) | `4.31.9` | `4.32.0` |
| [oxsecurity/megalinter](https://github.com/oxsecurity/megalinter) | `9.2.0` | `9.3.0` |
| [google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml](https://github.com/google/osv-scanner-action) | `2.3.1` | `2.3.2` |
| [google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml](https://github.com/google/osv-scanner-action) | `2.3.1` | `2.3.2` |
| [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) | `8.0.0` | `8.1.0` |
| [rojopolis/spellcheck-github-actions](https://github.com/rojopolis/spellcheck-github-actions) | `0.56.0` | `0.58.0` |
| [actions/ai-inference](https://github.com/actions/ai-inference) | `2.0.4` | `2.0.5` |
| [super-linter/super-linter](https://github.com/super-linter/super-linter) | `8.3.2` | `8.4.0` |
| [trufflesecurity/trufflehog](https://github.com/trufflesecurity/trufflehog) | `3.92.4` | `3.92.5` |
| [crate-ci/typos](https://github.com/crate-ci/typos) | `1.41.0` | `1.42.3` |


Updates `step-security/harden-runner` from 2.14.0 to 2.14.1
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](step-security/harden-runner@20cf305...e3f713f)

Updates `actions/checkout` from 6.0.1 to 6.0.2
- [Release notes](https://github.com/actions/checkout/releases)
- [Commits](actions/checkout@v6.0.1...v6.0.2)

Updates `actions/setup-node` from 6.1.0 to 6.2.0
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@v6.1.0...v6.2.0)

Updates `actions/cache` from 5.0.1 to 5.0.3
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](actions/cache@9255dc7...cdf6c1f)

Updates `github/codeql-action` from 4.31.9 to 4.32.0
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@5d4e8d1...b20883b)

Updates `oxsecurity/megalinter` from 9.2.0 to 9.3.0
- [Release notes](https://github.com/oxsecurity/megalinter/releases)
- [Changelog](https://github.com/oxsecurity/megalinter/blob/main/CHANGELOG.md)
- [Commits](oxsecurity/megalinter@55a59b2...42bb470)

Updates `google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml` from 2.3.1 to 2.3.2
- [Release notes](https://github.com/google/osv-scanner-action/releases)
- [Commits](google/osv-scanner-action@375a0e8...2a387ed)

Updates `google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml` from 2.3.1 to 2.3.2
- [Release notes](https://github.com/google/osv-scanner-action/releases)
- [Commits](google/osv-scanner-action@375a0e8...2a387ed)

Updates `peter-evans/create-pull-request` from 8.0.0 to 8.1.0
- [Release notes](https://github.com/peter-evans/create-pull-request/releases)
- [Commits](peter-evans/create-pull-request@98357b1...c0f553f)

Updates `rojopolis/spellcheck-github-actions` from 0.56.0 to 0.58.0
- [Release notes](https://github.com/rojopolis/spellcheck-github-actions/releases)
- [Changelog](https://github.com/rojopolis/spellcheck-github-actions/blob/master/CHANGELOG.md)
- [Commits](rojopolis/spellcheck-github-actions@cebe064...0bf4b2f)

Updates `actions/ai-inference` from 2.0.4 to 2.0.5
- [Release notes](https://github.com/actions/ai-inference/releases)
- [Commits](actions/ai-inference@334892b...a6101c8)

Updates `super-linter/super-linter` from 8.3.2 to 8.4.0
- [Release notes](https://github.com/super-linter/super-linter/releases)
- [Changelog](https://github.com/super-linter/super-linter/blob/main/CHANGELOG.md)
- [Commits](super-linter/super-linter@d5b0a2a...12562e4)

Updates `trufflesecurity/trufflehog` from 3.92.4 to 3.92.5
- [Release notes](https://github.com/trufflesecurity/trufflehog/releases)
- [Commits](trufflesecurity/trufflehog@ef6e76c...116e717)

Updates `crate-ci/typos` from 1.41.0 to 1.42.3
- [Release notes](https://github.com/crate-ci/typos/releases)
- [Changelog](https://github.com/crate-ci/typos/blob/master/CHANGELOG.md)
- [Commits](crate-ci/typos@5c19779...06d010d)

---
updated-dependencies:
- dependency-name: step-security/harden-runner
  dependency-version: 2.14.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: actions/checkout
  dependency-version: 6.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: actions/setup-node
  dependency-version: 6.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: actions/cache
  dependency-version: 5.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: github/codeql-action
  dependency-version: 4.32.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: oxsecurity/megalinter
  dependency-version: 9.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml
  dependency-version: 2.3.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml
  dependency-version: 2.3.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: peter-evans/create-pull-request
  dependency-version: 8.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: rojopolis/spellcheck-github-actions
  dependency-version: 0.58.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: actions/ai-inference
  dependency-version: 2.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: super-linter/super-linter
  dependency-version: 8.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: trufflesecurity/trufflehog
  dependency-version: 3.92.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: crate-ci/typos
  dependency-version: 1.42.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependabot Dependabot Pull Requests dependencies Pull requests that update a dependency file labels Feb 1, 2026
@dependabot dependabot bot requested a review from Nick2bad4u as a code owner February 1, 2026 10:51
@dependabot dependabot bot added the Github-actions GitHub Action Updates label Feb 1, 2026
@Nick2bad4u
Copy link
Owner

Nick2bad4u commented Feb 1, 2026

✅ Snyk checks have passed. No issues have been found so far.

Status Scanner Critical High Medium Low Total (0)
✅ Open Source Security 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

@Nick2bad4u Nick2bad4u merged commit 0f0dff8 into main Feb 1, 2026
10 of 13 checks passed
@dependabot dependabot bot deleted the dependabot/github_actions/github-actions-0105c6f420 branch February 1, 2026 23:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@Nick2bad4u Nick2bad4u Awaiting requested review from Nick2bad4u Nick2bad4u is a code owner

Assignees

@Nick2bad4u Nick2bad4u

Labels

dependabot Dependabot Pull Requests dependencies Pull requests that update a dependency file Github-actions GitHub Action Updates

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@Nick2bad4u