Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Dec 1, 2025

Bumps the minor group with 5 updates in the / directory:

Package From To
lycheeverse/lychee-action 2.6.1 2.7.0
softprops/action-gh-release 2.3.3 2.4.2
step-security/harden-runner 2.13.1 2.13.2
actions/dependency-review-action 4.8.0 4.8.2
awalsh128/cache-apt-pkgs-action 1.5.3 1.6.0

Updates lycheeverse/lychee-action from 2.6.1 to 2.7.0

Release notes

Sourced from lycheeverse/lychee-action's releases.

Version 2.7.0

Breaking changes

If you're using --base, you must now provide either a URL (with scheme) or an absolute local path. See lychee --help for more information. If you want to resolve root-relative links in local files, also see --root-dir.

What's Changed

Full Changelog: lycheeverse/lychee-action@v2...v2.7.0

Commits

Updates softprops/action-gh-release from 2.3.3 to 2.4.2

Release notes

Sourced from softprops/action-gh-release's releases.

v2.4.2

What's Changed

Exciting New Features 🎉

Other Changes 🔄

  • dependency updates

New Contributors

Full Changelog: softprops/action-gh-release@v2.4.1...v2.4.2

v2.4.1

What's Changed

Other Changes 🔄

Full Changelog: softprops/action-gh-release@v2...v2.4.1

v2.4.0

What's Changed

Exciting New Features 🎉

Other Changes 🔄

Full Changelog: softprops/action-gh-release@v2.3.4...v2.4.0

v2.3.4

What's Changed

Bug fixes 🐛

Other Changes 🔄

... (truncated)

Changelog

Sourced from softprops/action-gh-release's changelog.

2.4.2

What's Changed

Exciting New Features 🎉

Other Changes 🔄

  • dependency updates

2.4.1

What's Changed

Other Changes 🔄

2.4.0

What's Changed

Exciting New Features 🎉

2.3.4

What's Changed

Bug fixes 🐛

Other Changes 🔄

  • dependency updates

2.3.3

What's Changed

Exciting New Features 🎉

Other Changes 🔄

... (truncated)

Commits
  • 5be0e66 release 2.4.2
  • af658b4 feat: Ensure generated release notes cannot be over 125000 characters (#684)
  • 237aacc chore: bump node to 24.11.0
  • 00362be chore(deps): bump the npm group with 5 updates (#687)
  • 0adea5a chore(deps): bump the npm group with 3 updates (#686)
  • aa05f9d chore(deps): bump actions/setup-node from 5.0.0 to 6.0.0 in the github-action...
  • bbaccb3 chore(deps): bump @​types/node from 20.19.21 to 20.19.22 in the npm group (#682)
  • 50fda3f chore(deps): bump vite from 7.1.5 to 7.1.11 (#681)
  • 5434409 chore(deps): bump @​types/node from 20.19.19 to 20.19.21 in the npm group (#679)
  • 6da8fa9 release 2.4.1
  • Additional commits viewable in compare view

Updates step-security/harden-runner from 2.13.1 to 2.13.2

Release notes

Sourced from step-security/harden-runner's releases.

v2.13.2

What's Changed

  • Fixed an issue where there was a limit of 512 allowed endpoints when using block egress policy. This restriction has been removed, allowing for an unlimited number of endpoints to be configured.
  • Harden Runner now automatically detects if the agent is already pre-installed on a custom VM image used by a GitHub-hosted runner. When detected, the action will skip reinstallation and use the existing agent.

Full Changelog: step-security/harden-runner@v2.13.1...v2.13.2

Commits

Updates actions/dependency-review-action from 4.8.0 to 4.8.2

Release notes

Sourced from actions/dependency-review-action's releases.

v4.8.2

Minor fixes:

Dependency Review Action v4.8.1

What's Changed

Full Changelog: actions/dependency-review-action@v4...v4.8.1

Commits
  • 3c4e3dc Merge pull request #1016 from actions/dra-release
  • 02930b2 Update CONTRIBUTING to reflect new guidelines
  • 49ffd9f Update CONTRIBUTING to reflect the need to build
  • 70cb25e 4.8.2 release
  • ebabd31 Merge pull request #1008 from danielhardej/danielhardej-patch-20251023
  • 19f9360 Update package-lock.json
  • 5fd2f98 Bump @​types/jest to version 29.5.14
  • 28647f4 Fix PURL parsing by removing encodeURI
  • f620fd1 Merge pull request #1013 from actions/dangoor/token-fix
  • 9b42b7e Remove bad token reference
  • Additional commits viewable in compare view

Updates awalsh128/cache-apt-pkgs-action from 1.5.3 to 1.6.0

Release notes

Sourced from awalsh128/cache-apt-pkgs-action's releases.

v1.6.0

What's Changed

New Contributors

Full Changelog: awalsh128/cache-apt-pkgs-action@v1.5.2...v1.5.4

Commits
  • acb598e Pin actions for immutable and secure dependency versions (#175)
  • 23602f4 Add support for third-party PPA repositories via add-repository parameter (#173)
  • 2ae65d5 Fix ls error when no tar files exist in cache restore (#170)
  • 9f7a885 Support symlinks and their targets.
  • a605dbd Add empty_packages_behavior option to handle empty package list (#154)
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot added the area/dependencies The issue or PR is related to dependencies label Dec 1, 2025
@dependabot dependabot bot requested a review from a team as a code owner December 1, 2025 03:19
@dependabot dependabot bot added the area/dependencies The issue or PR is related to dependencies label Dec 1, 2025
Bumps the minor group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [lycheeverse/lychee-action](https://github.com/lycheeverse/lychee-action) | `2.6.1` | `2.7.0` |
| [softprops/action-gh-release](https://github.com/softprops/action-gh-release) | `2.3.3` | `2.4.2` |
| [step-security/harden-runner](https://github.com/step-security/harden-runner) | `2.13.1` | `2.13.2` |
| [actions/dependency-review-action](https://github.com/actions/dependency-review-action) | `4.8.0` | `4.8.2` |
| [awalsh128/cache-apt-pkgs-action](https://github.com/awalsh128/cache-apt-pkgs-action) | `1.5.3` | `1.6.0` |



Updates `lycheeverse/lychee-action` from 2.6.1 to 2.7.0
- [Release notes](https://github.com/lycheeverse/lychee-action/releases)
- [Commits](lycheeverse/lychee-action@v2.6.1...v2.7.0)

Updates `softprops/action-gh-release` from 2.3.3 to 2.4.2
- [Release notes](https://github.com/softprops/action-gh-release/releases)
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md)
- [Commits](softprops/action-gh-release@6cbd405...5be0e66)

Updates `step-security/harden-runner` from 2.13.1 to 2.13.2
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](step-security/harden-runner@f4a75cf...95d9a5d)

Updates `actions/dependency-review-action` from 4.8.0 to 4.8.2
- [Release notes](https://github.com/actions/dependency-review-action/releases)
- [Commits](actions/dependency-review-action@56339e5...3c4e3dc)

Updates `awalsh128/cache-apt-pkgs-action` from 1.5.3 to 1.6.0
- [Release notes](https://github.com/awalsh128/cache-apt-pkgs-action/releases)
- [Commits](awalsh128/cache-apt-pkgs-action@2c09a5e...acb598e)

---
updated-dependencies:
- dependency-name: lycheeverse/lychee-action
  dependency-version: 2.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: softprops/action-gh-release
  dependency-version: 2.4.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
- dependency-name: step-security/harden-runner
  dependency-version: 2.13.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor
- dependency-name: actions/dependency-review-action
  dependency-version: 4.8.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor
- dependency-name: awalsh128/cache-apt-pkgs-action
  dependency-version: 1.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/github_actions/minor-808c44db63 branch from 42ad9b8 to 407ad8c Compare January 1, 2026 03:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area/dependencies The issue or PR is related to dependencies

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant