Skip to content

build(deps): bump the actions group across 1 directory with 2 updates - #15

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/github_actions/actions-e3ee0ff57b
Closed

dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/github_actions/actions-e3ee0ff57b

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 8, 2026 •

Copy link
Copy Markdown

Bumps the actions group with 2 updates in the / directory: actions/checkout and actions/setup-dotnet.

Updates actions/checkout from 5.1.0 to 7.0.1

Release notes

Sourced from actions/checkout's releases.

v7.0.1

What's Changed

Full Changelog: actions/checkout@v7...v7.0.1

v7.0.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v6.0.3...v7.0.0

v6.1.0

What's Changed

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: actions/checkout@v6.0.3...v6.1.0

v6.0.3

What's Changed

New Contributors

Full Changelog: actions/checkout@v6...v6.0.3

v6.0.2

What's Changed

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

v7.0.1

v7.0.0

v6.0.3

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

... (truncated)

Commits

Updates actions/setup-dotnet from 5.4.0 to 6.0.0

Release notes

Sourced from actions/setup-dotnet's releases.

v6.0.0

What's Changed

New Contributors

Full Changelog: actions/setup-dotnet@v5...v6.0.0

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Oct 8, 2026
@solrevdev

Copy link
Copy Markdown
Owner

Held for the NativeAOT round (#6). Not merged on purpose.

  • Release path untested. The validate job only proves checkout and setup-dotnet work for the build. The publish job also runs git push --atomic with the credentials checkout stores. That changed in checkout v6+, and only a real release exercises it.
  • Do it after feat: NativeAOT builds, benchmarks and packaging #6. native.yml uses the same actions, so do this bump once feat: NativeAOT builds, benchmarks and packaging #6 is on master. Dependabot will then cover both workflows.
  • Avoid an extra patch. This PR changes .github/workflows/publish.yml. Merging it without [skip ci] publishes a NuGet patch.

🤖 Generated with Claude Code

Bumps the actions group with 2 updates in the / directory: [actions/checkout](https://github.com/actions/checkout) and [actions/setup-dotnet](https://github.com/actions/setup-dotnet).


Updates `actions/checkout` from 5.1.0 to 7.0.1
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@fbc6f39...3d3c42e)

Updates `actions/setup-dotnet` from 5.4.0 to 6.0.0
- [Release notes](https://github.com/actions/setup-dotnet/releases)
- [Commits](actions/setup-dotnet@26b0ec1...a98b568)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: actions/setup-dotnet
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title build(deps): bump the actions group with 2 updates build(deps): bump the actions group across 1 directory with 2 updates Oct 15, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions-e3ee0ff57b branch from 7c1a729 to 907ff74 Compare October 15, 2026 08:15
@dependabot @github

dependabot Bot commented on behalf of github Oct 22, 2026

Copy link
Copy Markdown
Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 22, 2026
@dependabot
dependabot Bot deleted the dependabot/github_actions/actions-e3ee0ff57b branch October 22, 2026 08:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant