Skip to content

chore(deps): Bump the actions group across 1 directory with 3 updates - #14

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions-64ca834fb6
Open

chore(deps): Bump the actions group across 1 directory with 3 updates#14
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions-64ca834fb6

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 26, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the actions group with 3 updates in the / directory: actions/setup-node, actions/setup-python and foundry-rs/foundry-toolchain.

Updates actions/setup-node from 7.0.0 to 7.1.0

Release notes

Sourced from actions/setup-node's releases.

v7.1.0

What's Changed

Enhancements:

Bug fixes:

Documentation updates:

Dependency updates:

New Contributors

Full Changelog: actions/setup-node@v7.0.0...v7.1.0

Commits
  • 949feb2 Bump eslint from 10.5.0 to 10.11.0 and package.json from 7.0.0 to 7.1.0 (#1635)
  • 7207c4f chore: update dependencies and add license files (#1642)
  • 54337e0 Bump eslint-plugin-n from 18.1.0 to 18.3.0 (#1638)
  • fb54fa8 Bump jest-each from 30.4.1 to 30.5.2 (#1636)
  • 7f84f1d Bump pnpm/action-setup from 6.0.10 to 6.1.0 (#1631)
  • 0c54c7b Bump @​typescript-eslint/parser from 8.62.0 to 8.70.0 (#1615)
  • a829419 Bump @​types/semver from 7.7.1 to 7.8.0 (#1616)
  • 680d1e4 Support absolute paths in node-version-file (#1633)
  • db0fb3a Bump baseline-browser-mapping from 2.10.38 to 2.11.22 (#1629)
  • 94196ee Bump pnpm/action-setup from 6.0.9 to 6.0.10 (#1602)
  • Additional commits viewable in compare view

Updates actions/setup-python from 7.0.0 to 7.1.0

Release notes

Sourced from actions/setup-python's releases.

v7.1.0

What's Changed

Enhancements

Dependency Upgrade

New Contributors

Full Changelog: actions/setup-python@v7.0.0...v7.1.0

Commits
  • 6d4fd22 Cache upgrade to 6.3.0 (#1370)
  • ec52d0a Bump @​typescript-eslint/eslint-plugin from 8.62.0 to 8.71.1 (#1369)
  • ff73b24 Bump prettier from 3.8.4 to 3.9.9 and package.json from 7.0.0 to 7.1.0 (#1363)
  • 0e40890 Bump brace-expansion from 5.0.9 to 5.0.12 (#1365)
  • 3892123 Bump ts-jest from 29.4.11 to 29.4.14 (#1361)
  • 6609657 Bump undici from 6.28.0 to 6.29.0 (#1364)
  • e1be392 Bump @​types/semver from 7.7.1 to 7.8.0 (#1359)
  • 06da627 Bump @​vercel/ncc from 0.44.0 to 0.45.0 (#1357)
  • af9bcc7 Bump eslint-plugin-jest from 29.15.2 to 29.16.6 (#1342)
  • 7aeabeb Bump @​typescript-eslint/parser from 8.62.0 to 8.70.0 (#1343)
  • Additional commits viewable in compare view

Updates foundry-rs/foundry-toolchain from 1.9.1 to 1.9.2

Release notes

Sourced from foundry-rs/foundry-toolchain's releases.

v1.9.2

Security

Update the development and CI Node.js version to 24.22.1 (#193), incorporating fixes for Brotli decoder remote code execution (CVE-2026-111497), TLS hostname verification bypasses, and other vulnerabilities disclosed on October 21, 2026.

These fixes are documented in the Node.js security advisory https://nodejs.org/en/blog/vulnerability/october-2026-security-releases.

What's Changed

Full Changelog: foundry-rs/foundry-toolchain@v1.9.1...v1.9.2

Commits
  • dba66c2 fix: upgrade Node.js to patch CVE-2026-111497 (#193)
  • 2226fa3 chore(deps): bump prettier from 3.9.9 to 3.9.10 in the npm-weekly group (#192)
  • be69c4d chore(deps): bump the ci-weekly group with 4 updates (#191)
  • 3545907 chore(deps): bump @​types/node from 26.6.4 to 26.6.5 in the npm-weekly group (...
  • 2e54994 fix(ci): buffer the action update cooldown (#189)
  • 9100cd3 chore(deps): bump @​types/node from 26.6.3 to 26.6.4 in the npm-weekly group (...
  • 25c634d chore(deps): bump the ci-weekly group with 2 updates (#186)
  • 7840435 chore(deps): bump the npm-weekly group with 2 updates (#187)
  • efe890f chore: bump gh-actions to d5402286 (#185)
  • e8d3beb chore(deps): bump the npm-weekly group with 2 updates (#184)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): Bump the actions group across 1 directory with 3 updates
f6f7bd7 
Bumps the actions group with 3 updates in the / directory: [actions/setup-node](https://github.com/actions/setup-node), [actions/setup-python](https://github.com/actions/setup-python) and [foundry-rs/foundry-toolchain](https://github.com/foundry-rs/foundry-toolchain).


Updates `actions/setup-node` from 7.0.0 to 7.1.0
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@8207627...949feb2)

Updates `actions/setup-python` from 7.0.0 to 7.1.0
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](actions/setup-python@5fda3b9...6d4fd22)

Updates `foundry-rs/foundry-toolchain` from 1.9.1 to 1.9.2
- [Release notes](https://github.com/foundry-rs/foundry-toolchain/releases)
- [Changelog](https://github.com/foundry-rs/foundry-toolchain/blob/master/RELEASE.md)
- [Commits](foundry-rs/foundry-toolchain@908c540...dba66c2)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: 7.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: actions/setup-python
  dependency-version: 7.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: foundry-rs/foundry-toolchain
  dependency-version: 1.9.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from SaulBuilds as a code owner October 26, 2026 19:16
@dependabot @github

dependabot Bot commented on behalf of github Oct 26, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies, github-actions. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

BerryManifold
BerryManifold approved these changes Oct 27, 2026
View reviewed changes

@BerryManifold BerryManifold left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approve dependency/workflow configuration change at f6f7bd74f760bbf05fbbe51fa1234f3d344fac7d. All changed dependency/workflow files and structured before/after manifests and lockfiles. Package versions, registry origins, integrity metadata, importer consistency, overrides, scripts and engine context checked. No application-source changes.

121 unique changed npm package versions across this sweep matched official registry integrity metadata; targeted GitHub Action pins match official repository tags. npm root manifest entries and pnpm importer specifiers align. CI evidence checked separately; application test suites were not rerun for these configuration-only changes.

Limits: Focused dependency configuration review, not an audit of all upstream package implementations. Existing failed CI and branch/owner/stack gates remain in force. Private report: https://github.com/CitrateNetwork/citrate-federation/issues/405#issuecomment-6445712749. Both accounts reflect the same automated review.

Matr0xshka
Matr0xshka approved these changes Oct 27, 2026
View reviewed changes

@Matr0xshka Matr0xshka left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approve dependency/workflow configuration change at f6f7bd74f760bbf05fbbe51fa1234f3d344fac7d. All changed dependency/workflow files and structured before/after manifests and lockfiles. Package versions, registry origins, integrity metadata, importer consistency, overrides, scripts and engine context checked. No application-source changes.

121 unique changed npm package versions across this sweep matched official registry integrity metadata; targeted GitHub Action pins match official repository tags. npm root manifest entries and pnpm importer specifiers align. CI evidence checked separately; application test suites were not rerun for these configuration-only changes.

Limits: Focused dependency configuration review, not an audit of all upstream package implementations. Existing failed CI and branch/owner/stack gates remain in force. Private report: https://github.com/CitrateNetwork/citrate-federation/issues/405#issuecomment-6445712749. Both accounts reflect the same automated review.

BerryManifold
BerryManifold reviewed Oct 28, 2026
View reviewed changes

@BerryManifold BerryManifold left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Automated Codex static review of f6f7bd74f760bbf05fbbe51fa1234f3d344fac7d is complete. Result: incomplete; details retained privately. Details and coverage limits are recorded in the project's private review log. No tests were executed by this reviewer. Both account submissions represent the same Codex review, not independent reviews.

Matr0xshka
Matr0xshka reviewed Oct 28, 2026
View reviewed changes

@Matr0xshka Matr0xshka left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Automated Codex static review of f6f7bd74f760bbf05fbbe51fa1234f3d344fac7d is complete. Result: incomplete; details retained privately. Details and coverage limits are recorded in the project's private review log. No tests were executed by this reviewer. Both account submissions represent the same Codex review, not independent reviews.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@SaulBuilds SaulBuilds Awaiting requested review from SaulBuilds SaulBuilds is a code owner
2 more reviewers
@BerryManifold BerryManifold BerryManifold approved these changes
@Matr0xshka Matr0xshka Matr0xshka approved these changes
Reviewers whose approvals may not affect merge requirements

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@BerryManifold @Matr0xshka