Skip to content

Conversation

dependabot[bot]
Copy link

@dependabot dependabot bot commented on behalf of github Aug 24, 2025

Bumps the actions group with 4 updates in the / directory: actions/checkout, mlugg/setup-zig, actions/upload-pages-artifact and actions/create-github-app-token.

Updates actions/checkout from 4 to 5

Release notes

Sourced from actions/checkout's releases.

v5.0.0

What's Changed

⚠️ Minimum Compatible Runner Version

v2.327.1
Release Notes

Make sure your runner is updated to this version or newer to use this release.

Full Changelog: actions/checkout@v4...v5.0.0

v4.3.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v4...v4.3.0

v4.2.2

What's Changed

Full Changelog: actions/checkout@v4.2.1...v4.2.2

v4.2.1

What's Changed

New Contributors

Full Changelog: actions/checkout@v4.2.0...v4.2.1

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

V5.0.0

V4.3.0

v4.2.2

v4.2.1

v4.2.0

v4.1.7

v4.1.6

v4.1.5

v4.1.4

v4.1.3

... (truncated)

Commits

Updates mlugg/setup-zig from 1 to 2

Release notes

Sourced from mlugg/setup-zig's releases.

v2.0.0

  • Support getting Zig version from build.zig.zon
  • Add option to customize cache key to work around matrix deficiencies
  • Clear Zig cache directory when it grows too large

v1.2.2

[!WARNING] Assuming no serious bugs, this will be the last v1 release. I highly recommend upgrading to v2.

  • Update mirror list
  • Update dependencies
    • This includes the cache service, resolving #36; sorry about that one!
  • Validate minisign "trusted comment"

v1.2.1

  • Fix .zip tarball extraction
  • Add two new mirrors
  • Don't attempt to cache global Zig cache if it doesn't exist (#8)

v1.2.0

  • Add the use-cache option to disable preservation of the Zig global cache directory

v1.1.1

  • Fix the restriction of mirror to not be ziglang.org (I forgot to implement it before)
  • Append query parameter to downloads so mirrors can know that traffic is coming from Actions
  • Add new mirror (thanks @​hryx!)

v1.1.0

  • Support looking up Mach nominated versions, e.g. 2024.5.0-mach
  • Support overriding download mirror

See README.md for details.

Commits
  • 8d6198c Handle zig env being ZON instead of JSON
  • 475c97b main: fix canonical URL
  • df54020 Use more descriptive ?source query parameter
  • 5eb0fc8 Use ziglang.org community mirrors list
  • 0483960 npm update
  • edd2134 post: include run attempt in cache name
  • cab5810 post: simplify and rename totalSize
  • e819eaa Don't use the tool cache on GitHub-hosted runners by default
  • 5c89f10 remove buggy mirror
  • e077164 remove zig.nekos.space due to issues
  • Additional commits viewable in compare view

Updates actions/upload-pages-artifact from 3 to 4

Release notes

Sourced from actions/upload-pages-artifact's releases.

v4.0.0

What's Changed

Full Changelog: actions/upload-pages-artifact@v3.0.1...v4.0.0

v3.0.1

Changelog

See details of all code changes since previous release.

Commits
  • 7b1f4a7 Merge pull request #127 from heavymachinery/pin-sha
  • 4cc19c7 Pin actions/upload-artifact to SHA
  • 2d163be Merge pull request #107 from KittyChiu/main
  • c704843 fix: linted README
  • 9605915 Merge pull request #106 from KittyChiu/kittychiu/update-readme-1
  • e59cdfe Update README.md
  • a2d6704 doc: updated usage section in readme
  • 984864e Merge pull request #105 from actions/Jcambass-patch-1
  • 45dc788 Add workflow file for publishing releases to immutable action package
  • efaad07 Merge pull request #102 from actions/hidden-files
  • Additional commits viewable in compare view

Updates actions/create-github-app-token from 1 to 2

Release notes

Sourced from actions/create-github-app-token's releases.

v2.0.0

2.0.0 (2025-04-03)

BREAKING CHANGES

  • Removed deprecated inputs (app_id, private_key, skip_token_revoke) and made app-id and private-key required in the action configuration.

v1.12.0

1.12.0 (2025-03-27)

Features

v1.11.7

1.11.7 (2025-03-20)

Bug Fixes

  • deps: bump undici from 5.28.4 to 7.5.0 (#214) (a24b46a)

v1.11.6

1.11.6 (2025-03-03)

Bug Fixes

  • deps: bump the production-dependencies group with 2 updates (#210) (1ff1dea)

v1.11.5

1.11.5 (2025-02-15)

Bug Fixes

... (truncated)

Commits
  • a8d6161 build(release): 2.1.1 [skip ci]
  • 5204204 fix: revert "use node24 as runner" (#278)
  • 0f859bf build(release): 2.1.0 [skip ci]
  • a1cbe0f feat: use node24 as runner (#267)
  • d7ee281 build(deps-dev): bump the development-dependencies group across 1 directory w...
  • 93c1f04 build(deps-dev): bump the development-dependencies group with 4 updates (#255)
  • dff4b11 ci(test): set permissions in test workflow (#247)
  • 6d44c9f docs(README): Client ID can be used as App ID (#251)
  • df432ce build(release): 2.0.6 [skip ci]
  • 3336784 fix: replace - with _ (#246)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the actions group with 4 updates in the / directory: [actions/checkout](https://github.com/actions/checkout), [mlugg/setup-zig](https://github.com/mlugg/setup-zig), [actions/upload-pages-artifact](https://github.com/actions/upload-pages-artifact) and [actions/create-github-app-token](https://github.com/actions/create-github-app-token).


Updates `actions/checkout` from 4 to 5
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v4...v5)

Updates `mlugg/setup-zig` from 1 to 2
- [Release notes](https://github.com/mlugg/setup-zig/releases)
- [Commits](mlugg/setup-zig@v1...v2)

Updates `actions/upload-pages-artifact` from 3 to 4
- [Release notes](https://github.com/actions/upload-pages-artifact/releases)
- [Commits](actions/upload-pages-artifact@v3...v4)

Updates `actions/create-github-app-token` from 1 to 2
- [Release notes](https://github.com/actions/create-github-app-token/releases)
- [Commits](actions/create-github-app-token@v1...v2)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: mlugg/setup-zig
  dependency-version: '2'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: actions/upload-pages-artifact
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: actions/create-github-app-token
  dependency-version: '2'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Dependency updates label Aug 24, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Dependency updates
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants