Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 6, 2025

Bumps the actions group with 3 updates: docker/login-action, peter-evans/dockerhub-description and astral-sh/setup-uv.

Updates docker/login-action from 3.5.0 to 3.6.0

Release notes

Sourced from docker/login-action's releases.

v3.6.0

Full Changelog: docker/login-action@v3.5.0...v3.6.0

Commits
  • 5e57cd1 Merge pull request #890 from docker/dependabot/npm_and_yarn/aws-sdk-dependenc...
  • 97e3143 chore: update generated content
  • 3a0796b build(deps): bump the aws-sdk-dependencies group with 2 updates
  • 5b7b28b Merge pull request #882 from docker/dependabot/npm_and_yarn/aws-sdk-dependenc...
  • abc9fb3 chore: update generated content
  • d468688 build(deps): bump the aws-sdk-dependencies group with 2 updates
  • a99b2f8 Merge pull request #883 from docker/dependabot/npm_and_yarn/docker/actions-to...
  • 0d7fae8 chore: update generated content
  • 9832253 build(deps): bump @​docker/actions-toolkit from 0.62.1 to 0.63.0
  • 09e05bb Merge pull request #881 from docker/dependabot/npm_and_yarn/tmp-0.2.4
  • Additional commits viewable in compare view

Updates peter-evans/dockerhub-description from 4.0.2 to 5.0.0

Release notes

Sourced from peter-evans/dockerhub-description's releases.

Docker Hub Description v5.0.0

⚙️ Requires Actions Runner v2.327.1 or later if you are using a self-hosted runner for Node 24 support.

What's Changed

Full Changelog: peter-evans/dockerhub-description@v4.0.2...v5.0.0

Commits
  • 1b9a80c feat: v5 (#327)
  • ef9b19a build(deps-dev): bump @​vercel/ncc from 0.38.3 to 0.38.4 (#326)
  • a48612b build(deps): bump actions/setup-node from 4 to 5 (#325)
  • 08eafd1 build(deps): bump actions/checkout from 4 to 5 (#324)
  • a0bee1b build(deps-dev): bump eslint-plugin-prettier from 5.5.3 to 5.5.4 (#323)
  • 2877192 build(deps): bump actions/download-artifact from 4 to 5 (#322)
  • 444ccd3 build(deps): bump form-data from 3.0.1 to 3.0.4 (#321)
  • aca792b build(deps-dev): bump eslint-plugin-prettier from 5.5.1 to 5.5.3 (#320)
  • 940963a build(deps-dev): bump eslint-plugin-prettier from 5.5.0 to 5.5.1 (#318)
  • 0b249a1 build(deps-dev): bump prettier from 3.5.3 to 3.6.2 (#317)
  • Additional commits viewable in compare view

Updates astral-sh/setup-uv from 6.6.1 to 6.8.0

Release notes

Sourced from astral-sh/setup-uv's releases.

v6.7.0 🌈 New inputs restore-cache and save-cache

Changes

This release adds fine-grained control over the caching steps.

  • The input restore-cache (true by default) can be set to false to skip restoring the cache while still allowing to save the cache.
  • The input save-cache (true by default) can be set to false to skip saving the cache.

Skipping cache saving can be useful if you know, that you will never use this version of the cache again and don't want to waste storage space:

- name: Save cache only on main branch
  uses: astral-sh/setup-uv@v6
  with:
    enable-cache: true
    save-cache: ${{ github.ref == 'refs/heads/main' }}

🚀 Enhancements

🧰 Maintenance

⬆️ Dependency updates

Commits
  • d0cc045 Always show prune cache output (#597)
  • 2841f9f Bump zizmorcore/zizmor-action from 0.1.2 to 0.2.0 (#571)
  • e554b93 Add **/*.py.lock to cache-dependency-glob (#590)
  • c7d85d9 chore: update known versions for 0.8.20
  • 07f2cb5 persist credentials for version update (#584)
  • 208b0c0 README.md: Fix Python versions and update checkout action (#572)
  • b75a909 bump deps (#569)
  • ffff8aa Bump github/codeql-action from 3.29.11 to 3.30.3 (#566)
  • 95d0e23 Bump actions/setup-node from 4.4.0 to 5.0.0 (#551)
  • dc724a1 Add inputs restore-cache and save-cache (#568)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the actions group with 3 updates: [docker/login-action](https://github.com/docker/login-action), [peter-evans/dockerhub-description](https://github.com/peter-evans/dockerhub-description) and [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv).


Updates `docker/login-action` from 3.5.0 to 3.6.0
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](docker/login-action@184bdaa...5e57cd1)

Updates `peter-evans/dockerhub-description` from 4.0.2 to 5.0.0
- [Release notes](https://github.com/peter-evans/dockerhub-description/releases)
- [Commits](peter-evans/dockerhub-description@432a30c...1b9a80c)

Updates `astral-sh/setup-uv` from 6.6.1 to 6.8.0
- [Release notes](https://github.com/astral-sh/setup-uv/releases)
- [Commits](astral-sh/setup-uv@557e51d...d0cc045)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-version: 3.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: peter-evans/dockerhub-description
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: astral-sh/setup-uv
  dependency-version: 6.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Oct 6, 2025
@Ravencentric Ravencentric merged commit 6a74ecd into main Oct 29, 2025
5 checks passed
@Ravencentric Ravencentric deleted the dependabot/github_actions/actions-08c6f6d285 branch October 29, 2025 17:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants