Skip to content

chore(deps): bump oras-project/setup-oras from 2.0.0 to 2.0.1#1639

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/oras-project/setup-oras-2.0.1
Open

chore(deps): bump oras-project/setup-oras from 2.0.0 to 2.0.1#1639
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/oras-project/setup-oras-2.0.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 13, 2026

Copy link
Copy Markdown
Contributor

Bumps oras-project/setup-oras from 2.0.0 to 2.0.1.

Release notes

Sourced from oras-project/setup-oras's releases.

v2.0.1

Highlights

What's Changed

  • chore: update releases.json for 1.3.2 (#167)
  • chore: update releases.json for 1.3.3 (#182)
  • feat: automate releases.json updates via GitHub Actions workflow (#171)
  • fix: retry post-creation API calls on 422 eventual consistency errors
  • ci: sign automated release-update commits (#183)
  • chore(deps): Bump @​actions/core to 3.0.1, esbuild to 0.28.1, typescript to 6.0.3, actions/checkout to v7, and @​types/node

Full Changelog: oras-project/setup-oras@v2.0.0...v2.0.1

Commits
  • 1d808f7 chore: update releases.json for 1.3.3 (#182)
  • b38537d ci: sign automated release-update commits (#183)
  • 6f3b32c chore(deps): Bump @​types/node from 26.0.1 to 26.1.0 (#181)
  • fb503f0 chore(deps): Bump @​types/node from 26.0.0 to 26.0.1 (#180)
  • 4aa197c chore(deps): Bump @​types/node from 25.9.3 to 26.0.0 (#178)
  • 0c499ae chore(deps): Bump actions/checkout from 6 to 7 (#179)
  • 82faa22 chore(deps): Bump @​types/node from 25.9.2 to 25.9.3 (#177)
  • f8710a5 chore(deps): Bump esbuild from 0.28.0 to 0.28.1 (#176)
  • ce8d0d5 chore(deps): Bump @​types/node from 25.9.1 to 25.9.2 (#175)
  • ae76689 chore(deps): Bump peter-evans/create-pull-request from 7 to 8 (#173)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [oras-project/setup-oras](https://github.com/oras-project/setup-oras) from 2.0.0 to 2.0.1.
- [Release notes](https://github.com/oras-project/setup-oras/releases)
- [Commits](oras-project/setup-oras@38de303...1d808f7)

---
updated-dependencies:
- dependency-name: oras-project/setup-oras
  dependency-version: 2.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the kind/dependencies For PRs that update dependencies or related components label Jul 13, 2026
Copilot AI review requested due to automatic review settings July 13, 2026 03:04
@dependabot dependabot Bot added the kind/dependencies For PRs that update dependencies or related components label Jul 13, 2026

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot can't review bot-authored pull requests automatically. A user with Copilot access can request a review manually.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

kind/dependencies For PRs that update dependencies or related components

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant