8000 build(deps): bump the github-actions group across 1 directory with 5 updates by dependabot[bot] · Pull Request #2353 · gominimal/minimal · GitHub
[go: up one dir, main page]
Skip to content

build(deps): bump the github-actions group across 1 directory with 5 updates - #2353

Merged
norrietaylor merged 1 commit into
mainfrom
dependabot/github_actions/github-actions-42ed87d728
Oct 19, 2026
Merged

build(deps): bump the github-actions group across 1 directory with 5 updates#2353
norrietaylor merged 1 commit into
mainfrom
dependabot/github_actions/github-actions-42ed87d728

Conversation

@dependabot
@dependabot dependabot Bot commented on behalf of github Oct 19, 2026
Copy link
Copy Markdown
Contributor

Bumps the github-actions group with 5 updates in the / directory:

Package From To
endersonmenezes/free-disk-space 4.0.0 4.0.1
taiki-e/install-action 2.87.22 2.87.29
actions/upload-artifact 7.0.1 7.0.2
actions/download-artifact 8.0.1 8.0.2
actions/create-github-app-token 3.2.0 3.3.0

Updates endersonmenezes/free-disk-space from 4.0.0 to 4.0.1

Release notes

Sourced from endersonmenezes/free-disk-space's releases.

v4.0.1

CI/CD Improvements:

  • 🧪 Promote ubuntu-26.04 and ubuntu-26.04-arm from experimental (continue-on-error) entries to the regular test matrix — Ubuntu 26.04 is GA and ubuntu-latest migrates to it between 2026-10-19 and 2026-11-19 (runner-images#14748)
  • 🧪 Keep ubuntu-22.04 / ubuntu-24.04 (x86_64 and ARM64) in the test matrices as maintenance-only runners until GitHub retires the labels
  • ⚡ Drop the redundant apt-get install shellcheck step from the linter job — shellcheck ships preinstalled on the ubuntu-slim image
  • 🧪 Add ubuntu-slim to the test matrices so it appears on the dashboard; the full-test template skips the Docker step there (unprivileged container without a Docker daemon) and uses python3 for the sanity check

Documentation:

  • 📝 Mark Ubuntu 26.04 as supported (latest) and Ubuntu 22.04/24.04 as maintenance only in README badges, AGENTS.md and Copilot instructions
  • 📝 Refresh the recommended remove_folders lists for Ubuntu 26.04: drop /usr/share/swift, /usr/share/miniconda and /usr/local/julia (removed from the 26.04 image), fix the Julia path glob, add /opt/pipx, and document that PowerShell (26.04) and Google Cloud SDK (26.04-arm) are no longer deb packages and need remove_folders
  • 📝 Correct AGENTS.md runner measurements (October 2026): initial free disk per image, .NET/Haskell sizes, /var/lib/docker → /var/lib/containerd migration on 26.04, and list large items not covered by the action (/opt/runner-cache, rustup copies, /home/packer)
Changelog

Sourced from endersonmenezes/free-disk-space's changelog.

Changelog

All notable changes to Free Disk Space Action 8000 are documented here.

Format follows Keep a Changelog.
Versioning follows Semantic Versioning.

[v4.0.1] — 2026-10-13

CI/CD Improvements:

  • 🧪 Promote ubuntu-26.04 and ubuntu-26.04-arm from experimental (continue-on-error) entries to the regular test matrix — Ubuntu 26.04 is GA and ubuntu-latest migrates to it between 2026-10-19 and 2026-11-19 (runner-images#14748)
  • 🧪 Keep ubuntu-22.04 / ubuntu-24.04 (x86_64 and ARM64) in the test matrices as maintenance-only runners until GitHub retires the labels
  • ⚡ Drop the redundant apt-get install shellcheck step from the linter job — shellcheck ships preinstalled on the ubuntu-slim image
  • 🧪 Add ubuntu-slim to the test matrices so it appears on the dashboard; the full-test template skips the Docker step there (unprivileged container without a Docker daemon) and uses python3 for the sanity check

Documentation:

  • 📝 Mark Ubuntu 26.04 as supported (latest) and Ubuntu 22.04/24.04 as maintenance only in README badges, AGENTS.md and Copilot instructions
  • 📝 Refresh the recommended remove_folders lists for Ubuntu 26.04: drop /usr/share/swift, /usr/share/miniconda and /usr/local/julia (removed from the 26.04 image), fix the Julia path glob, add /opt/pipx, and document that PowerShell (26.04) and Google Cloud SDK (26.04-arm) are no longer deb packages and need remove_folders
  • 📝 Correct AGENTS.md runner measurements (October 2026): initial free disk per image, .NET/Haskell sizes, /var/lib/docker → /var/lib/containerd migration on 26.04, and list large items not covered by the action (/opt/runner-cache, rustup copies, /home/packer)

[v4.0.0] — 2026-08-19

Added:

  • 🧪 Add ubuntu-26.04 and ubuntu-26.04-arm preview runners to the test matrix
  • 🧪 Add ubuntu-24.04 and ubuntu-22.04-arm to the test matrices
  • 🌐 Add GitHub Pages dashboard to visualise CI test results (concept by Fabian Rost)
  • 🖼️ Add live dashboard screenshot to README, replacing the manually maintained size tables
  • 🔒 Declare minimal workflow permissions to resolve code-scanning alerts
  • 🔧 Add actionlint configuration for the new preview runner labels

Changed:

  • ⬆️ Upgrade default rmz version from 3.1.1 to 3.2.0 (fixes "Directory not empty" errors and improves performance on large flat directories; rm remains the default rm_cmd)
  • ⚡ Parallelize folder removal when using rm (one rm per folder, up to nproc workers; rmz stays serial as it already parallelizes internally)
  • 🔧 Run a single apt-get autoremove/clean pass at the end of the packages phase instead of one per package
  • 🔧 Harden apt-get removals: non-interactive frontend, closed stdin, 600s timeout and visible output so a stalled removal can no longer hang a CI job silently
  • 🚀 Update GitHub Actions to Node.js 24-compatible versions (actions/checkout@v7, actions/upload-artifact@v7, actions/download-artifact@v8, actions/upload-pages-artifact@v5, actions/deploy-pages@v5)
  • 📚 Update README for the v4 release

Fixed:

  • 🐛 Fix GitHub Pages deployment being skipped: correct the Pages build_type to workflow and evaluate the deploy job with always() plus an explicit needs result check
  • 🐛 Fix ubuntu-26.04 matrix entries running without rm_cmd, which made those tests no-ops
  • 🐛 Fix quoted package lists being passed to apt-get as a single package name

[v3.2.2] — 2026-03-03 — Commit: 5eabf23

... (truncated)

Commits
  • 8b8cd4e docs(changelog): finalize v4.0.1 release notes
  • aa3fd99 docs: update table of contents for v4 and enhance compatibility section
  • a45839a feat: add ubuntu-slim to test matrices and update related documentation
  • f799b69 chore: remove ShellCheck installation step from testing workflow
  • 76796bc docs: update remove_folders configuration for Ubuntu 26.04 and ARM64, adding ...
  • 1023105 chore: update changelog for v4.0.1 with CI/CD improvements and documentation ...
  • 7c49b31 docs: update runner image differences and toolchain details for October 2026
  • 0e80e61 feat(workflows): update runner matrix to include Ubuntu 26.04 and remove expe...
  • 3fd1974 docs: update compatibility and support information for Ubuntu 26.04 and maint...
  • be6b1a4 docs: update copilot instructions with detailed runner image differences and ...
  • See full diff in compare view

Updates taiki-e/install-action from 2.87.22 to 2.87.29

Release notes

Sourced from taiki-e/install-action's releases.

2.87.29

  • Update zizmor@latest to 1.31.0.

  • Update wasmtime@latest to 49.0.3.

  • Update wasm-tools@latest to 1.262.0.

  • Update uv@latest to 0.13.1.

  • Update trivy@latest to 0.76.0.

  • Update tombi@latest to 1.8.4.

  • Update release-plz@latest to 0.3.172.

  • Update osv-scanner@latest to 2.7.0.

  • Update mise@latest to 2026.10.11.

  • Update mdbook-d2@latest to 0.3.9.

  • Update kingfisher@latest to 2.13.0.

  • Update kache@latest to 1.2.1.

  • Update just@latest to 1.59.0.

  • Update dprint@latest to 0.63.0.

  • Update cargo-crap@latest to 0.8.0.

  • Update bpf-linker@latest to 0.12.0.

2.87.28

  • Update dprint@latest to 0.62.0.

  • Update vacuum@latest to 0.33.0.

  • Update uv@latest to 0.13.0.

  • Update tombi@latest to 1.8.1.

  • Update release-plz@latest to 0.3.171.

  • Update rclone@latest to 1.75.2.

  • Update mise@latest to 2026.10.7.

  • Update cargo-binstall@latest to 1.25.3.

... (truncated)

Changelog

Sourced from taiki-e/install-action's changelog.

Changelog

All notable changes to this project will be documented in this file.

This project adheres to Semantic Versioning.

[Unreleased]

[2.87.29] - 2026-10-16

  • Update zizmor@latest to 1.31.0.

  • Update wasmtime@latest to 49.0.3.

  • Update wasm-tools@latest to 1.262.0.

  • Update uv@latest to 0.13.1.

  • Update trivy@latest to 0.76.0.

  • Update tombi@latest to 1.8.4.

  • Update release-plz@latest to 0.3.172.

  • Update osv-scanner@latest to 2.7.0.

  • Update mise@latest to 2026.10.11.

  • Update mdbook-d2@latest to 0.3.9.

  • Update kingfisher@latest to 2.13.0.

  • Update kache@latest to 1.2.1.

  • Update just@latest to 1.59.0.

  • Update dprint@latest to 0.63.0.

  • Update cargo-crap@latest to 0.8.0.

  • Update bpf-linker@latest to 0.12.0.

[2.87.28] - 2026-10-12

  • Update dprint@latest to 0.62.0.

... (truncated)

Commits
  • 8cca091 Release 2.87.29
  • fc26824 Update wasmtime manifest
  • 5018b2e Update zizmor@latest to 1.31.0
  • d0e5204 Update wasmtime@latest to 49.0.3
  • 517774f Update wasm-tools@latest to 1.262.0
  • 4bc69b1 Update vacuum manifest
  • 0470a3f Update uv@latest to 0.13.1
  • 7a2b747 Update trivy@latest to 0.76.0
  • 7efb533 Update tombi@latest to 1.8.4
  • e5d37d6 Update release-plz@latest to 0.3.172
  • Additional commits viewable in compare view

Updates actions/upload-artifact from 7.0.1 to 7.0.2

Release notes

Sourced from actions/upload-artifact's releases.

v7.0.2

What's Changed

  • Improves artifact download retries when the service returns HTTP 429 (rate limiting), including honoring valid Retry-After headers.
  • Updates @​actions/artifact to v6.3.1.

New Contributors

Full Changelog: actions/upload-artifact@v7.0.1...v7.0.2

Commits
  • cf430e0 Merge pull request #822 from actions/tunc-d-prepare-upload-v7-0-2
  • c2acded chore: prepare v7.0.2 release
  • 4687c1b Merge pull request #821 from actions/tunc-d-upload-artifact-package-bump
  • 8cbe1be Bump @​actions/artifact to 6.3.1
  • See full diff in compare view

Updates actions/download-artifact from 8.0.1 to 8.0.2

Release notes

Sourced from actions/download-artifact's releases.

v8.0.2

What's Changed

New Contributors

Full Changelog: actions/download-artifact@v8.0.1...v8.0.2

Commits
  • 9000827 Merge pull request #493 from actions/tunc-d-prepare-download-v8-0-2
  • e455989 Prepare download-artifact v8.0.2
  • a00b90c Merge pull request #492 from actions/tunc-d-download-artifact-package-bump
  • 29bb7ce Update @​actions/artifact to 6.3.1
  • 484a0b5 Update the readme (#473)
  • See full diff in compare view

Updates actions/create-github-app-token from 3.2.0 to 3.3.0

Release notes

Sourced from actions/create-github-app-token's releases.

v3.3.0

3.3.0 (2026-10-12)

Features

Bug Fixes

  • deps: bump nested undici from 6.24.0 to 6.29.0 (#403) (12461a3)
  • deps: bump the production-dependencies group across 1 directory with 3 updates (#395) (a69c19d)
Changelog

Sourced from actions/create-github-app-token's changelog.

Changelog

3.3.0 (2026-10-12)

Features

Bug Fixes

  • deps: bump nested undici from 6.24.0 to 6.29.0 (#403) (12461a3)
  • deps: bump the production-dependencies group across 1 directory with 3 updates (#395) (a69c19d)

3.2.0 (2026-05-12)

Features

  • add support for enterprise-level GitHub Apps (#263) (952a2a7)
  • support full repository names in repositories input (#372) (85eb8dd)

Bug Fixes

  • deps: bump @​actions/core from 3.0.0 to 3.0.1 in the production-dependencies group (#364) (43e5c34)
  • validate private-key input (#376) (f24bbd8)
Commits
  • 64ab729 chore(main): release 3.3.0 (#402)
  • f3a828e ci: create signed dist commits in release workflow (#404)
  • 655017f docs: clarify when owner grants access to all repositories (#378)
  • 12461a3 fix(deps): bump nested undici from 6.24.0 to 6.29.0 (#403)
  • a47236f feat: update permission inputs (#399)
  • a69c19d fix(deps): bump the production-dependencies group across 1 directory with 3 u...
  • d5cb7ae build(deps): bump actions/checkout from 6 to 7 (#384)
  • 575da86 build(deps): bump stefanzweifel/git-auto-commit-action from 7.1.0 to 7.2.0 in...
  • e85f677 test: omit stack traces from snapshots (#401)
  • 9419396 build(deps-dev): bump c8 from 11.0.0 to 12.0.0 (#400)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps): bump the github-actions group across 1 directory with 5 …
cf28238 
…updates

Bumps the github-actions group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [endersonmenezes/free-disk-space](https://github.com/endersonmenezes/free-disk-space) | `4.0.0` | `4.0.1` |
| [taiki-e/install-action](https://github.com/taiki-e/install-action) | `2.87.22` | `2.87.29` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact) | `7.0.1` | `7.0.2` |
| [actions/download-artifact](https://github.com/actions/download-artifact) | `8.0.1` | `8.0.2` |
| [actions/create-github-app-token](https://github.com/actions/create-github-app-token) | `3.2.0` | `3.3.0` |



Updates `endersonmenezes/free-disk-space` from 4.0.0 to 4.0.1
- [Release notes](https://github.com/endersonmenezes/free-disk-space/releases)
- [Changelog](https://github.com/endersonmenezes/free-disk-space/blob/main/CHANGELOG.md)
- [Commits](endersonmenezes/free-disk-space@2a22f8c...8b8cd4e)

Updates `taiki-e/install-action` from 2.87.22 to 2.87.29
- [Release notes](https://github.com/taiki-e/install-action/releases)
- [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md)
- [Commits](taiki-e/install-action@83ac0ad...8cca091)

Updates `actions/upload-artifact` from 7.0.1 to 7.0.2
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@043fb46...cf430e0)

Updates `actions/download-artifact` from 8.0.1 to 8.0.2
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](actions/download-artifact@3e5f45b...9000827)

Updates `actions/create-github-app-token` from 3.2.0 to 3.3.0
- [Release notes](https://github.com/actions/create-github-app-token/releases)
- [Changelog](https://github.com/actions/create-github-app-token/blob/main/CHANGELOG.md)
- [Commits](actions/create-github-app-token@bcd2ba4...64ab729)

---
updated-dependencies:
- dependency-name: endersonmenezes/free-disk-space
  dependency-version: 4.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: taiki-e/install-action
  dependency-version: 2.87.29
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: actions/upload-artifact
  dependency-version: 7.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: actions/download-artifact
  dependency-version: 8.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: actions/create-github-app-token
  dependency-version: 3.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from a team as a code owner October 19, 2026 13:55
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Oct 19, 2026
@coderabbitai
coderabbitai Bot commented Oct 19, 2026
Copy link
Copy Markdown
Contributor

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration
  • Configuration used: Organization UI
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 8c3bfd89-0c3e-44c6-ba14-828f0eb37878

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Comment @coderabbitai help to get the list of available commands.

@minimal-foundry
minimal-foundry Bot commented Oct 19, 2026 •
edited
Loading
Copy link
Copy Markdown
Contributor

Approved: no findings at cf28238283d7.

Nothing to do.

Clobber: none seen.

minimal-foundry[bot]
minimal-foundry Bot approved these changes Oct 19, 2026
View reviewed changes
@minimal-foundry minimal-foundry Bot left a comment
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

minimal-review — approved

Verdict APPROVE — No findings.

Panel: 3 of 3 personas ran (correctness, security, supply-chain).

@minimal-foundry minimal-foundry Bot added the review:approved minimal-review approved the current head label Oct 19, 2026
A23C
@norrietaylor
norrietaylor added this pull request to the merge queue Oct 19, 2026
Merged via the queue into main with commit 559a1d8 Oct 19, 2026
37 checks passed
@norrietaylor
norrietaylor deleted the dependabot/github_actions/github-actions-42ed87d728 branch October 19, 2026 16:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@norrietaylor norrietaylor norrietaylor approved these changes
@minimal-foundry minimal-foundry[bot] minimal-foundry[bot] approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code review:approved minimal-review approved the current head

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@norrietaylor
0