Skip to content

chore(deps): Bump the actions group across 1 directory with 5 updates - #109

Merged
hyperpolymath merged 1 commit into
mainfrom
dependabot/github_actions/actions-e89b450480
Sep 7, 2026
Merged

chore(deps): Bump the actions group across 1 directory with 5 updates#109
hyperpolymath merged 1 commit into
mainfrom
dependabot/github_actions/actions-e89b450480

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 6, 2026

Copy link
Copy Markdown
Contributor

Bumps the actions group with 5 updates in the / directory:

Package From To
actions/deploy-pages 5.0.0 5.0.1
github/codeql-action 4.37.7 4.37.9
trufflesecurity/trufflehog 3.97.0 3.97.4
softprops/action-gh-release 3.0.2 3.0.3
Bogdanp/setup-racket 1.9.1 1.15

Updates actions/deploy-pages from 5.0.0 to 5.0.1

Release notes

Sourced from actions/deploy-pages's releases.

v5.0.1

Changelog

See details of all code changes since previous release.

⚠️ For use with products other than GitHub.com, such as GitHub Enterprise Server, please consult the compatibility table.

Commits
  • 368f825 Merge pull request #444 from actions/yoannchaudet-deployment-polling-backoff
  • 7e97763 Validate deployment polling intervals
  • 0143e11 Add backoff and jitter to deployment polling
  • 5e98f10 Merge pull request #440 from actions/user/adwitiya
  • 8b0625a Improve deployment request test coverage
  • See full diff in compare view

Updates github/codeql-action from 4.37.7 to 4.37.9

Release notes

Sourced from github/codeql-action's releases.

v4.37.9

  • Update default CodeQL bundle version to 2.26.4. #4106

v4.37.8

No user facing changes.

Changelog

Sourced from github/codeql-action's changelog.

4.37.9 - 26 Aug 2026

  • Update default CodeQL bundle version to 2.26.4. #4106

4.37.8 - 21 Aug 2026

No user facing changes.

Commits
  • cdf488f Merge pull request #4107 from github/update-v4.37.9-920ba7cd1
  • 7243f38 Update changelog for v4.37.9
  • 920ba7c Merge pull request #4106 from github/update-bundle/codeql-bundle-v2.26.4
  • ecfa6e1 Add changelog note
  • adcdf4a Update default bundle to codeql-bundle-v2.26.4
  • 486fec2 Merge pull request #4099 from github/update-supported-enterprise-server-versions
  • 134624c Merge pull request #4101 from github/dependabot/npm_and_yarn/npm-minor-457d82...
  • ff43db8 Merge pull request #4103 from github/mergeback/v4.37.8-to-main-db488dde
  • 4605e03 Rebuild
  • 099c869 Update changelog and version after v4.37.8
  • Additional commits viewable in compare view

Updates trufflesecurity/trufflehog from 3.97.0 to 3.97.4

Release notes

Sourced from trufflesecurity/trufflehog's releases.

v3.97.4

What's Changed

Full Changelog: trufflesecurity/trufflehog@v3.97.3...v3.97.4

v3.97.3

What's Changed

Full Changelog: trufflesecurity/trufflehog@v3.97.2...v3.97.3

v3.97.2

What's Changed

New Contributors

Full Changelog: trufflesecurity/trufflehog@v3.97.1...v3.97.2

v3.97.1

What's Changed

... (truncated)

Commits
  • 363923b added tests for twilio detector fixes (#5271)
  • f537081 Improve the json-enumerator source (#5265)
  • 8a9a4c6 Made retry exaustion indeterminate for Twilio secrets and twilioapikeys (#5267)
  • 8947a7f Revert "De-base64 SourceUnit.UnitData in the GitHub Source (#5248)" (#5269)
  • ea33cd0 fix(s3): cut a child context per object so key/size log values don't pile up ...
  • cc1fe98 Retry git clone on secondary rate limit (bare 403/429) (#5260)
  • 74dcf3f Update link to Truffle Security documentation (#5256)
  • 2b75fd2 Implement Enumerate for the Jenkins source (#5229)
  • 0c952ac De-base64 SourceUnit.UnitData in the GitHub Source (#5248)
  • 1ea7fc1 expand result code in pagerduty detector (#5230)
  • Additional commits viewable in compare view

Updates softprops/action-gh-release from 3.0.2 to 3.0.3

Release notes

Sourced from softprops/action-gh-release's releases.

v3.0.3

3.0.3 is a maintenance release with updated dependencies. It also safely classifies malformed GitHub API errors to avoid secondary failures (#822).

What's Changed

Bug fixes 🐛

Other Changes 🔄

  • dependency updates
Changelog

Sourced from softprops/action-gh-release's changelog.

3.0.3

3.0.3 is a maintenance release with updated dependencies. It also safely classifies malformed GitHub API errors to avoid secondary failures (#822).

What's Changed

Bug fixes 🐛

Other Changes 🔄

  • dependency updates
Commits
  • efb3536 release 3.0.3 (#840)
  • 6441963 chore(deps): bump the npm group with 2 updates (#839)
  • e5ee6bc chore(deps): bump esbuild from 0.28.1 to 0.28.2 in the npm group (#837)
  • d1e6617 chore(deps): bump undici from 6.27.0 to 6.28.0 (#831)
  • 6403751 chore(deps): bump the npm group with 2 updates (#835)
  • 7c7184b chore(deps): bump postcss from 8.5.19 to 8.5.25 (#833)
  • 0f3f0d2 chore(deps): bump brace-expansion from 5.0.8 to 5.0.9 (#832)
  • 77fb938 chore(deps): bump prettier from 3.9.5 to 3.9.6 in the npm group (#830)
  • 5a6f517 chore(deps): bump brace-expansion from 5.0.7 to 5.0.8 (#828)
  • a3c91c9 chore(deps): bump the github-actions group with 2 updates (#825)
  • Additional commits viewable in compare view

Updates Bogdanp/setup-racket from 1.9.1 to 1.15

Release notes

Sourced from Bogdanp/setup-racket's releases.

v1.15

  • No user-visible changes. This change simply updates the action to run using Node 24, as Node 20 will be dropped by GitHub in June.

v1.14

Changed

  • The snapshot sites have been updated to consolidate the set of builds provided between the Utah and Northwestern sites. BC snapshots are now no longer available, so if you currently use version: current with variant: BC, you'll have to change variant to CS to fix your builds going forward. Additionally, the "test" distribution from Northwestern is no longer available. In the highly unlikely case you were setting distribution to test, change it to full. The test option is rejected by the action as of this version.

v1.13

Added

  • Support for more arm configurations. See the "ARM Builds" section of the README for details. (#81, #80, #9)

Changed

  • The architecture flag no longer defaults to x64. Instead it defaults to the process arch. This may have an impact on macOS builds if you were using ARM runners and weren't specifying the arch.

v1.12

Added

Changed

  • The version argument now defaults to stable

v1.11

Changed

  • Bumped the Node.js runtime version from 16 to 20. (#70)

v1.10

Changed

  • By default, snapshot versions are now installed from whichever snapshot site (between Utah and Northwestern) finished building more recently. You can pick a specific snapshot site using the new snapshot_site option. (#63, #64)
Commits
  • 2466913 doc: s/1.14/1.15 and s/8.18/9.1 [skip ci]
  • 2d6a750 build: update dependencies and run on node 24
  • 8823878 ci: drop macos-13
  • 510c17a build(deps): bump js-yaml from 3.14.1 to 3.14.2 (#84)
  • 0e4942f doc: s/8.17/8.18
  • dff14a0 build(deps): bump form-data from 3.0.1 to 3.0.4 (#83)
  • fda0f4d doc: update version [skip ci]
  • e321cc4 ci: drop deprecated windows-2019 environment
  • b45ffad core: drop "test" Distribution
  • 2c52f9b ci: drop BC variant and "test" distribution from Northwestern tests
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): Bump the actions group across 1 directory with 5 updates
2b96df1 
Bumps the actions group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [actions/deploy-pages](https://github.com/actions/deploy-pages) | `5.0.0` | `5.0.1` |
| [github/codeql-action](https://github.com/github/codeql-action) | `4.37.7` | `4.37.9` |
| [trufflesecurity/trufflehog](https://github.com/trufflesecurity/trufflehog) | `3.97.0` | `3.97.4` |
| [softprops/action-gh-release](https://github.com/softprops/action-gh-release) | `3.0.2` | `3.0.3` |
| [Bogdanp/setup-racket](https://github.com/bogdanp/setup-racket) | `1.9.1` | `1.15` |



Updates `actions/deploy-pages` from 5.0.0 to 5.0.1
- [Release notes](https://github.com/actions/deploy-pages/releases)
- [Commits](actions/deploy-pages@v5.0.0...v5.0.1)

Updates `github/codeql-action` from 4.37.7 to 4.37.9
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@v4.37.7...v4.37.9)

Updates `trufflesecurity/trufflehog` from 3.97.0 to 3.97.4
- [Release notes](https://github.com/trufflesecurity/trufflehog/releases)
- [Commits](trufflesecurity/trufflehog@v3.97.0...v3.97.4)

Updates `softprops/action-gh-release` from 3.0.2 to 3.0.3
- [Release notes](https://github.com/softprops/action-gh-release/releases)
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md)
- [Commits](softprops/action-gh-release@v3.0.2...v3.0.3)

Updates `Bogdanp/setup-racket` from 1.9.1 to 1.15
- [Release notes](https://github.com/bogdanp/setup-racket/releases)
- [Commits](Bogdanp/setup-racket@v1.9.1...v1.15)

---
updated-dependencies:
- dependency-name: actions/deploy-pages
  dependency-version: 5.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: github/codeql-action
  dependency-version: 4.37.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: trufflesecurity/trufflehog
  dependency-version: 3.97.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: softprops/action-gh-release
  dependency-version: 3.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: Bogdanp/setup-racket
  dependency-version: '1.15'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Sep 6, 2026
@dependabot
dependabot Bot requested a review from hyperpolymath as a code owner September 6, 2026 23:55
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Sep 6, 2026
@hyperpolymath
hyperpolymath merged commit e28fd55 into main Sep 7, 2026
20 of 22 checks passed
@hyperpolymath
hyperpolymath deleted the dependabot/github_actions/actions-e89b450480 branch September 7, 2026 01:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@hyperpolymath hyperpolymath hyperpolymath approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@hyperpolymath