Skip to content

deps(deps): bump the github-actions group across 1 directory with 3 updates - #392

Merged
github-actions[bot] merged 1 commit into
mainfrom
dependabot/github_actions/github-actions-bb63aebacb
Sep 28, 2026
Merged

github-actions[bot] merged 1 commit into
mainfrom
dependabot/github_actions/github-actions-bb63aebacb

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 5, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the github-actions group with 3 updates in the / directory: actions/deploy-pages, actions/attest-build-provenance and actions/attest-sbom.

Updates actions/deploy-pages from 5.0.0 to 5.0.1

Release notes

Sourced from actions/deploy-pages's releases.

v5.0.1

Changelog


See details of all code changes since previous release.

⚠️ For use with products other than GitHub.com, such as GitHub Enterprise Server, please consult the compatibility table.

Commits
  • 368f825 Merge pull request #444 from actions/yoannchaudet-deployment-polling-backoff
  • 7e97763 Validate deployment polling intervals
  • 0143e11 Add backoff and jitter to deployment polling
  • 5e98f10 Merge pull request #440 from actions/user/adwitiya
  • 8b0625a Improve deployment request test coverage
  • See full diff in compare view

Updates actions/attest-build-provenance from e3fe62ef559997059fe8380e7d2b4c909e2d65f4 to 9d57eef8c06cd9d6b433effeeb7a6a77b3ff94ad

Changelog

Sourced from actions/attest-build-provenance's changelog.

Release Instructions

Follow the steps below to tag a new release for the actions/attest-build-provenance action.

  1. Create a new release for the top-level action using a tag of the form vX.X.X following SemVer conventions:

    gh release create vX.X.X
  2. Move (or create) the major version tag to point to the same commit tagged above:

    git tag -fa vX -m "vX"
    git push origin vX --force
Commits
  • 9d57eef Bump actions/attest from 4.2.1 to 4.2.2 in the actions-minor group (#864)
  • 4d10147 Bump actions/attest from 4.2.0 to 4.2.1 in the actions-minor group (#862)
  • See full diff in compare view

Updates actions/attest-sbom from 5729fe4dc697fb7538e4e94fd44d040aac1367b2 to 4c8abdcbea4a6b66f70fd1169e70af4bf5b13701

Changelog

Sourced from actions/attest-sbom's changelog.

Release Instructions

Follow the steps below to tag a new release for the actions/attest-sbom action.

  1. Create a new release for the top-level action using a tag of the form vX.X.X following SemVer conventions:

    gh release create vX.X.X
  2. Move (or create) the major version tag to point to the same commit tagged above:

    git tag -fa vX -m "vX"
    git push origin vX --force
Commits
  • 4c8abdc Bump actions/attest from 4.2.1 to 4.2.2 in the actions-minor group (#261)
  • 9be8a82 Bump actions/attest from 4.2.0 to 4.2.1 in the actions-minor group (#260)
  • See full diff in compare view

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Sep 5, 2026
@dependabot @github

dependabot Bot commented on behalf of github Sep 5, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: github-actions. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot
dependabot Bot force-pushed the dependabot/github_actions/github-actions-bb63aebacb branch from b7a4e8e to 7082610 Compare September 14, 2026 13:10
@github-actions
github-actions Bot enabled auto-merge (squash) September 14, 2026 13:11
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/github-actions-bb63aebacb branch from 7082610 to e841e42 Compare September 21, 2026 13:11
…pdates

Bumps the github-actions group with 3 updates in the / directory: [actions/deploy-pages](https://github.com/actions/deploy-pages), [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance) and [actions/attest-sbom](https://github.com/actions/attest-sbom).


Updates `actions/deploy-pages` from 5.0.0 to 5.0.1
- [Release notes](https://github.com/actions/deploy-pages/releases)
- [Commits](actions/deploy-pages@cd2ce8f...368f825)

Updates `actions/attest-build-provenance` from e3fe62ef559997059fe8380e7d2b4c909e2d65f4 to 9d57eef8c06cd9d6b433effeeb7a6a77b3ff94ad
- [Release notes](https://github.com/actions/attest-build-provenance/releases)
- [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md)
- [Commits](actions/attest-build-provenance@e3fe62e...9d57eef)

Updates `actions/attest-sbom` from 5729fe4dc697fb7538e4e94fd44d040aac1367b2 to 4c8abdcbea4a6b66f70fd1169e70af4bf5b13701
- [Release notes](https://github.com/actions/attest-sbom/releases)
- [Changelog](https://github.com/actions/attest-sbom/blob/main/RELEASE.md)
- [Commits](actions/attest-sbom@5729fe4...4c8abdc)

---
updated-dependencies:
- dependency-name: actions/attest-build-provenance
  dependency-version: 9d57eef8c06cd9d6b433effeeb7a6a77b3ff94ad
  dependency-type: direct:production
  dependency-group: github-actions
- dependency-name: actions/attest-sbom
  dependency-version: 4c8abdcbea4a6b66f70fd1169e70af4bf5b13701
  dependency-type: direct:production
  dependency-group: github-actions
- dependency-name: actions/deploy-pages
  dependency-version: 5.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/github-actions-bb63aebacb branch from e841e42 to dd9e0b2 Compare September 28, 2026 13:10
@github-actions
github-actions Bot merged commit c3f10e8 into main Sep 28, 2026
24 checks passed
@dependabot
dependabot Bot deleted the dependabot/github_actions/github-actions-bb63aebacb branch September 28, 2026 13:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants