-
chore(deps): bump the github-actions group across 1 directory with 7 updates (#3694)
发布于
2026-06-29 11:09:32 +00:00 Bumps the github-actions group with 7 updates in the / directory:
Package From To actions/checkout 6.0.27.0.0swift-actions/setup-swift 2.4.03anthropics/claude-code-action 1.0.1401.0.159openai/codex-action 1.81.9anthropics/claude-code-action/base-action 1.0.1401.0.159actions/cache 5.0.56.1.0actions/setup-python 6.2.06.3.0Updates
actions/checkoutfrom 6.0.2 to 7.0.0Release notes
Sourced from actions/checkout's releases.
v7.0.0
What's Changed
- block checking out fork pr for pull_request_target and workflow_run
by
@aiqiaoyin actions/checkout#2454 - Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the
minor-actions-dependencies group across 1 directory by
@dependabot[bot] in actions/checkout#2458 - Bump flatted from 3.3.1 to 3.4.2 by
@dependabot[bot] in actions/checkout#2460 - Bump js-yaml from 4.1.0 to 4.2.0 by
@dependabot[bot] in actions/checkout#2461 - Bump
@actions/coreand@actions/tool-cacheand Remove uuid by@dependabot[bot] in actions/checkout#2459 - upgrade module to esm and update dependencies by
@aiqiaoyin actions/checkout#2463 - Bump the minor-npm-dependencies group across 1 directory with 3
updates by
@dependabot[bot] in actions/checkout#2462 - getting ready for checkout v7 release by
@aiqiaoyin actions/checkout#2464 - update error wording by
@aiqiaoyin actions/checkout#2467
New Contributors
@aiqiaoymade their first contribution in actions/checkout#2454
Full Changelog: https://github.com/actions/checkout/compare/v6.0.3...v7.0.0
v6.0.3
What's Changed
- Update changelog by
@ericsciplein actions/checkout#2357 - fix: expand merge commit SHA regex and add SHA-256 test cases by
@yaananthin actions/checkout#2414 - Fix checkout init for SHA-256 repositories by
@yaananthin actions/checkout#2439 - Update changelog for v6.0.3 by
@yaananthin actions/checkout#2446
New Contributors
@yaananthmade their first contribution in actions/checkout#2414
Full Changelog: https://github.com/actions/checkout/compare/v6...v6.0.3
Changelog
Sourced from actions/checkout's changelog.
Changelog
v7.0.0
- Block checking out fork PR for pull_request_target and workflow_run
by
@aiqiaoyin actions/checkout#2454 - Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the
minor-actions-dependencies group across 1 directory by
@dependabot[bot] in actions/checkout#2458 - Bump flatted from 3.3.1 to 3.4.2 by
@dependabot[bot] in actions/checkout#2460 - Bump js-yaml from 4.1.0 to 4.2.0 by
@dependabot[bot] in actions/checkout#2461 - Bump
@actions/coreand@actions/tool-cacheand Remove uuid by@dependabot[bot] in actions/checkout#2459 - upgrade module to esm and update dependencies by
@aiqiaoyin actions/checkout#2463 - Bump the minor-npm-dependencies group across 1 directory with 3
updates by
@dependabot[bot] in actions/checkout#2462
v6.0.3
- Fix checkout init for SHA-256 repositories by
@yaananthin actions/checkout#2439 - fix: expand merge commit SHA regex and add SHA-256 test cases by
@yaananthin actions/checkout#2414
v6.0.2
- Fix tag handling: preserve annotations and explicit fetch-tags by
@ericsciplein actions/checkout#2356
v6.0.1
- Add worktree support for persist-credentials includeIf by
@ericsciplein actions/checkout#2327
v6.0.0
- Persist creds to a separate file by
@ericsciplein actions/checkout#2286 - Update README to include Node.js 24 support details and requirements
by
@salmanmkcin actions/checkout#2248
v5.0.1
- Port v6 cleanup to v5 by
@ericsciplein actions/checkout#2301
v5.0.0
- Update actions checkout to use node 24 by
@salmanmkcin actions/checkout#2226
v4.3.1
- Port v6 cleanup to v4 by
@ericsciplein actions/checkout#2305
v4.3.0
- docs: update README.md by
@motssin actions/checkout#1971 - Add internal repos for checking out multiple repositories by
@mouismailin actions/checkout#1977 - Documentation update - add recommended permissions to Readme by
@benwellsin actions/checkout#2043 - Adjust positioning of user email note and permissions heading by
@joshmgrossin actions/checkout#2044 - Update README.md by
@nebuk89in actions/checkout#2194 - Update CODEOWNERS for actions by
@TingluoHuangin actions/checkout#2224 - Update package dependencies by
@salmanmkcin actions/checkout#2236
v4.2.2
url-helper.tsnow leverages well-known environment variables by@jww3in actions/checkout#1941- Expand unit test coverage for
isGhesby@jww3in actions/checkout#1946
v4.2.1
- Check out other refs/* by commit if provided, fall back to ref by
@orhantoyin actions/checkout#1924
... (truncated)
Commits
9c091bbupdate error wording (#2467)1044a6dgetting ready for checkout v7 release (#2464)f028218Bump the minor-npm-dependencies group across 1 directory with 3 updates (#2462)d914b26upgrade module to esm and update dependencies (#2463)537c7efBump@actions/coreand@actions/tool-cacheand Remove uuid (#2459)130a169Bump js-yaml from 4.1.0 to 4.2.0 (#2461)7d09575Bump flatted from 3.3.1 to 3.4.2 (#2460)0f9f3aaBump actions/publish-immutable-action (#2458)f9e715ablock checking out fork pr for pull_request_target and workflow_run (#2454)df4cb1cUpdate changelog for v6.0.3 (#2446)- Additional commits viewable in compare view
Updates
swift-actions/setup-swiftfrom 2.4.0 to 3Release notes
Sourced from swift-actions/setup-swift's releases.
3.0.0 Beta 1
Beta 1 of using Swiftly to setup Swift
- Now uses Swiftly to set up Swift
- Added flag
skip-verify-signatureto disable GPG verification checks
Features
Commits
364295dBump build7ef546cUpdate readme3273319Bump swiftlya90d258Pass skip flagded451bUpdate workflows0dad4e4Merge pull request #710 from swift-actions/next4abeccaBuild0c75150Formatting7849873Update gpg handling9005990Merge branch 'main' into next- Additional commits viewable in compare view
Updates
anthropics/claude-code-actionfrom 1.0.140 to 1.0.159Release notes
Sourced from anthropics/claude-code-action's releases.
v1.0.159
What's Changed
- fix: bound app token revocation cleanup by
@tarunag10in anthropics/claude-code-action#1437
New Contributors
@tarunag10made their first contribution in anthropics/claude-code-action#1437
Full Changelog: https://github.com/anthropics/claude-code-action/compare/v1...v1.0.159
v1.0.158
Full Changelog: https://github.com/anthropics/claude-code-action/compare/v1...v1.0.158
v1.0.157
Full Changelog: https://github.com/anthropics/claude-code-action/compare/v1...v1.0.157
v1.0.156
Full Changelog: https://github.com/anthropics/claude-code-action/compare/v1...v1.0.156
v1.0.155
What's Changed
- fix: filter PR reviews and inline review comments to trigger time by
@EffortlessStevenin anthropics/claude-code-action#1385 - test: cover format-turns content-type fallbacks and system_other
handling by
@farmer-datain anthropics/claude-code-action#1421 - fix: allow @ in branch names (valid per git-check-ref-format) by
@bellalMohamedin anthropics/claude-code-action#1411
New Contributors
@EffortlessStevenmade their first contribution in anthropics/claude-code-action#1385@farmer-datamade their first contribution in anthropics/claude-code-action#1421@bellalMohamedmade their first contribution in anthropics/claude-code-action#1411
Full Changelog: https://github.com/anthropics/claude-code-action/compare/v1...v1.0.155
v1.0.154
Full Changelog: https://github.com/anthropics/claude-code-action/compare/v1...v1.0.154
v1.0.153
Full Changelog: https://github.com/anthropics/claude-code-action/compare/v1...v1.0.153
v1.0.152
Full Changelog: https://github.com/anthropics/claude-code-action/compare/v1...v1.0.152
v1.0.151
What's Changed
- fix: skip workflow validation token exchange failures by
@Ryanoonanin anthropics/claude-code-action#1417
New Contributors
@Ryanoonanmade their first contribution in anthropics/claude-code-action#1417
Full Changelog: https://github.com/anthropics/claude-code-action/compare/v1...v1.0.151
v1.0.150
... (truncated)
Commits
a92e7c7chore: bump Claude Code to 2.1.195 and Agent SDK to 0.3.195f8076dcfix: bound app token revocation cleanup (#1437)5211368chore: bump Claude Code to 2.1.193 and Agent SDK to 0.3.193428971dchore: bump Claude Code to 2.1.191 and Agent SDK to 0.3.19174eedf1chore: bump Claude Code to 2.1.190 and Agent SDK to 0.3.19080b3182chore: bump Claude Code to 2.1.187 and Agent SDK to 0.3.187360be9cfix: allow @ in branch names (valid per git-check-ref-format) (#1411)e452eb9test: cover format-turns content-type fallbacks and system_other handling (#1...6b80630fix: filter PR reviews and inline review comments to trigger time (#1385)30544b6chore: bump Claude Code to 2.1.186 and Agent SDK to 0.3.186- Additional commits viewable in compare view
Updates
openai/codex-actionfrom 1.8 to 1.9Changelog
Sourced from openai/codex-action's changelog.
codex-action Changelog
v1.9 (2026-06-22)
- #85
update the internal
setup-nodepin tov6.3.0
v1.8 (2026-04-29)
- #91 tighten what bots are allowed
v1.7 (2026-04-24)
- #89 restrict bot permission bypass
v1.6 (2026-03-16)
- #77 enable GitHub-hosted Linux bubblewrap support
v1.5 (2026-03-16)
- #74 harden shell interpolation in action workflows
v1.4 (2025-11-19)
v1.3 (2025-11-19)
- #56
temporarily set the default version of Codex CLI to
0.58.0
v1.2 (2025-11-07)
- #52
add
baseUrltoOctokitconstructor, if appropriate, for GHE
v1.1 (2025-11-05)
- #47
added support for Azure via the new
responses-api-endpointparameter - #36
added
effortparameter - #45
pin the commit hash of the
actions/setup-nodeaction used byopenai/codex-action
v1.0 (2025-10-06)
- Initial release (OpenAI DevDay 2025!)
Commits
10cb888Update the internal setup-node pin to v6.3.0 (#85)9cdb6f3docs: clarify PR-controlled project instructions (#101)- See full diff in compare view
Updates
anthropics/claude-code-action/base-actionfrom 1.0.140 to
1.0.159Release notes
Sourced from anthropics/claude-code-action/base-action's releases.
v1.0.159
What's Changed
- fix: bound app token revocation cleanup by
@tarunag10in anthropics/claude-code-action#1437
New Contributors
@tarunag10made their first contribution in anthropics/claude-code-action#1437
Full Changelog: https://github.com/anthropics/claude-code-action/compare/v1...v1.0.159
v1.0.158
Full Changelog: https://github.com/anthropics/claude-code-action/compare/v1...v1.0.158
v1.0.157
Full Changelog: https://github.com/anthropics/claude-code-action/compare/v1...v1.0.157
v1.0.156
Full Changelog: https://github.com/anthropics/claude-code-action/compare/v1...v1.0.156
v1.0.155
What's Changed
- fix: filter PR reviews and inline review comments to trigger time by
@EffortlessStevenin anthropics/claude-code-action#1385 - test: cover format-turns content-type fallbacks and system_other
handling by
@farmer-datain anthropics/claude-code-action#1421 - fix: allow @ in branch names (valid per git-check-ref-format) by
@bellalMohamedin anthropics/claude-code-action#1411
New Contributors
@EffortlessStevenmade their first contribution in anthropics/claude-code-action#1385@farmer-datamade their first contribution in anthropics/claude-code-action#1421@bellalMohamedmade their first contribution in anthropics/claude-code-action#1411
Full Changelog: https://github.com/anthropics/claude-code-action/compare/v1...v1.0.155
v1.0.154
Full Changelog: https://github.com/anthropics/claude-code-action/compare/v1...v1.0.154
v1.0.153
Full Changelog: https://github.com/anthropics/claude-code-action/compare/v1...v1.0.153
v1.0.152
Full Changelog: https://github.com/anthropics/claude-code-action/compare/v1...v1.0.152
v1.0.151
What's Changed
- fix: skip workflow validation token exchange failures by
@Ryanoonanin anthropics/claude-code-action#1417
New Contributors
@Ryanoonanmade their first contribution in anthropics/claude-code-action#1417
Full Changelog: https://github.com/anthropics/claude-code-action/compare/v1...v1.0.151
v1.0.150
... (truncated)
Commits
a92e7c7chore: bump Claude Code to 2.1.195 and Agent SDK to 0.3.195f8076dcfix: bound app token revocation cleanup (#1437)5211368chore: bump Claude Code to 2.1.193 and Agent SDK to 0.3.193428971dchore: bump Claude Code to 2.1.191 and Agent SDK to 0.3.19174eedf1chore: bump Claude Code to 2.1.190 and Agent SDK to 0.3.19080b3182chore: bump Claude Code to 2.1.187 and Agent SDK to 0.3.187360be9cfix: allow @ in branch names (valid per git-check-ref-format) (#1411)e452eb9test: cover format-turns content-type fallbacks and system_other handling (#1...6b80630fix: filter PR reviews and inline review comments to trigger time (#1385)30544b6chore: bump Claude Code to 2.1.186 and Agent SDK to 0.3.186- Additional commits viewable in compare view
Updates
actions/cachefrom 5.0.5 to 6.1.0Release notes
Sourced from actions/cache's releases.
v6.1.0
What's Changed
- Bump
@actions/cacheto v6.1.0 - handle read-only cache access by@jasonginin actions/cache#1768
Full Changelog: https://github.com/actions/cache/compare/v6...v6.1.0
v6.0.0
What's Changed
- Update packages, migrate to ESM by
@Samiratin actions/cache#1760
Full Changelog: https://github.com/actions/cache/compare/v5...v6.0.0
v5.1.0
What's Changed
- Bump
@actions/cacheto v5.1.0 - handle read-only cache access by@jasonginin actions/cache#1775
Full Changelog: https://github.com/actions/cache/compare/v5...v5.1.0
Changelog
Sourced from actions/cache's changelog.
Releases
How to prepare a release
[!NOTE] Relevant for maintainers with write access only.
- Switch to a new branch from
main. - Run
npm testto ensure all tests are passing. - Update the version in
https://github.com/actions/cache/blob/main/package.json. - Run
npm run buildto update the compiled files. - Update this
https://github.com/actions/cache/blob/main/RELEASES.mdwith the new version and changes in the## Changelogsection. - Run
licensed cacheto update the license report. - Run
licensed statusand resolve any warnings by updating thehttps://github.com/actions/cache/blob/main/.licensed.ymlfile with the exceptions. - Commit your changes and push your branch upstream.
- Open a pull request against
mainand get it reviewed and merged. - Draft a new release https://github.com/actions/cache/releases
use the same version number used in
package.json- Create a new tag with the version number.
- Auto generate release notes and update them to match the changes you
made in
RELEASES.md. - Toggle the set as the latest release option.
- Publish the release.
- Navigate to https://github.com/actions/cache/actions/workflows/release-new-action-version.yml
- There should be a workflow run queued with the same version number.
- Approve the run to publish the new version and update the major tags for this action.
Changelog
6.1.0
- Bump
@actions/cacheto v6.1.0 to pick up actions/toolkit#2435 Handle cache write error due to read-only token - Switch redundant "Cache save failed" warning to debug log in save-only
6.0.0
- Updated
@actions/cacheto ^6.0.1,@actions/coreto ^3.0.1,@actions/execto ^3.0.0,@actions/ioto ^3.0.2 - Migrated to ESM module system
- Upgraded Jest to v30 and test infrastructure to be ESM compatible
5.0.4
- Bump
minimatchto v3.1.5 (fixes ReDoS via globstar patterns) - Bump
undicito v6.24.1 (WebSocket decompression bomb protection, header validation fixes) - Bump
fast-xml-parserto v5.5.6
5.0.3
- Bump
@actions/cacheto v5.0.5 (Resolves: https://github.com/actions/cache/security/dependabot/33) - Bump
@actions/coreto v2.0.3
5.0.2
... (truncated)
Commits
55cc834Merge pull request #1768 from jasongin/readonly-cached8cd72fBump@actions/cacheto v6.1.0 - handle cache write error due to RO token2c8a9bdMerge pull request #1760 from actions/samirat/esm_migration_and_package_updatee9b91fdPrettier fixese4884b8Rebuild dist10baf01Fixed licensese39b386Fix test mock return orderb692820PR feedback6074912Rebuild dist bundles as ESM to match type:module5a912e8Fix lint and jest issues- Additional commits viewable in compare view
Updates
actions/setup-pythonfrom 6.2.0 to 6.3.0Release notes
Sourced from actions/setup-python's releases.
v6.3.0
What's Changed
Enhancement
- Add RHEL support and include Linux distro in cache keys by
@priyagupta108in actions/setup-python#1323 - Fix pip cache error handling on Windows by
@priyagupta108in actions/setup-python#1040
Dependency update
- Upgrade minimatch from 3.1.2 to 3.1.5 by
@dependabotin actions/setup-python#1281 - Upgrade actions dependencies by
@gowridurgadwith@Copilotin actions/setup-python#1303 - Upgrade
@actions/cacheto 5.1.0, log cache write denied by@jasonginin actions/setup-python#1324 - Upgrade dependency versions and test workflow configuration by
@HarithaVattikutiin actions/setup-python#1322
Documentation
- Update advanced-usage.md by
@Dunky-Zin actions/setup-python#811
New Contributors
@gowridurgadwith@Copilotmade their first contribution in actions/setup-python#1303@jasonginmade their first contribution in actions/setup-python#1324@Dunky-Zmade their first contribution in actions/setup-python#811
Full Changelog: https://github.com/actions/setup-python/compare/v6...v6.3.0
Commits
ece7cb0Fix pip cache error handling on Windows. (#1040)1d18d7aUpdate advanced-usage.md (#811)d2b357aUpdate dependency versions and test workflow configuration (#1322)8f639b1Merge pull request #1324 from jasongin/update-actions-cache-5.1.06731c2bResolve high-severity audit issues0cb1a84Add RHEL support and include Linux distro in cache keys (#1323)dc6eab6Update dist6f4b74bStrict equalityfa8bde1Bump@actions/cacheto 5.1.0, log cache write deniedc8813baUpgrade@actionsdependencies and update licenses (#1303)- Additional commits viewable in compare view
Signed-off-by: dependabot[bot] support@github.com
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: jkomyno alberto@composio.dev下载附件
- block checking out fork pr for pull_request_target and workflow_run
by