Skip to content

build(deps): bump the actions-updates group across 1 directory with 8 updates - #272

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions-updates-178b253989
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions-updates-178b253989

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 25, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the actions-updates group with 8 updates in the / directory:

Package From To
step-security/harden-runner 2.20.1 2.21.1
actions/checkout 4.4.0 7.0.1
docker/setup-buildx-action 4.2.0 4.4.1
astral-sh/setup-uv 10.1.0 10.2.0
edera-dev/actions/report-disk-space 0.0.17 0.0.19
edera-dev/actions/reclaim-disk-space 0.0.17 0.0.19
edera-dev/actions/configure-azure-sccache 0.0.17 0.0.19
anthropics/claude-code-action 1.0.208 1.0.235

Updates step-security/harden-runner from 2.20.1 to 2.21.1

Release notes

Sourced from step-security/harden-runner's releases.

v2.21.1

What's Changed

  • Improved performance of the disable-sudo feature.
  • Fixed an issue in the Community tier where new endpoints required by the GitHub Actions runner were not being implicitly allowed in block mode.
  • Fixed the Harden-Runner post step failing on Linux distributions that do not have a merged /usr filesystem layout (for example Debian 11), where /usr/bin/echo does not exist. This mainly affected self-hosted runners.
  • Documentation updates: clarified which features are in the Community (free) vs Enterprise tier.

Full Changelog: step-security/harden-runner@v2.21.0...v2.21.1

v2.21.0

What's Changed

  • Support for denied endpoints in block mode. This is included in the enterprise tier. Customers can deny outbound calls, for example, to public package registries.
  • Improved Support for AWS CodeBuild GitHub Actions Runners.
  • Bug fixes.

Full Changelog: step-security/harden-runner@v2.20.1...v2.21.0

Commits
  • e14015d Merge pull request #690 from step-security/rc-43
  • 9001249 docs: update harden-runner version pin to v2.21.0 in getting started example
  • a447fba docs: expand enterprise feature list and document custom VM and ubuntu-slim l...
  • b0eaf8d docs: clarify community vs enterprise tiers and add maintained actions section
  • 063e8e3 Merge pull request #687 from rohan-stepsecurity/rp/fix/bin-echo-fallback
  • f46bdc1 chore: bump agent-ebpf to v1.9.1 and agent to v0.16.3
  • 42e6daa fix: fall back to /bin/echo for non-usr-merged distros
  • 05e3151 Merge pull request #684 from step-security/rc-42
  • 0f37afa fix: ignore denied-endpoints on non-enterprise tier
  • 93b58ee fix: resolve cache host read-first and never downgrade egress policy
  • Additional commits viewable in compare view

Updates actions/checkout from 4.4.0 to 7.0.1

Release notes

Sourced from actions/checkout's releases.

v7.0.1

What's Changed

Full Changelog: actions/checkout@v7...v7.0.1

v7.0.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v6.0.3...v7.0.0

v6.1.0

What's Changed

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: actions/checkout@v6.0.3...v6.1.0

v6.0.3

What's Changed

New Contributors

Full Changelog: actions/checkout@v6...v6.0.3

v6.0.2

What's Changed

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

v7.0.1

v7.0.0

v6.0.3

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

... (truncated)

Commits

Updates docker/setup-buildx-action from 4.2.0 to 4.4.1

Release notes

Sourced from docker/setup-buildx-action's releases.

v4.4.1

Full Changelog: docker/setup-buildx-action@v4.4.0...v4.4.1

v4.4.0

Full Changelog: docker/setup-buildx-action@v4.3.0...v4.4.0

v4.3.0

Full Changelog: docker/setup-buildx-action@v4.2.0...v4.3.0

Commits
  • f87e599 Merge pull request #624 from crazy-max/skip-pull-with-endpoint
  • e700274 chore: update generated content
  • 3061c91 skip BuildKit image pre-pulls for explicit endpoints
  • 594f3bf Merge pull request #609 from crazy-max/pull-buildkit-image-before-create
  • bd6e702 chore: update generated content
  • 6268c9d pull BuildKit image before builder creation
  • e823525 Merge pull request #621 from docker/dependabot/github_actions/codeql-actions-...
  • 533ed8e build(deps): bump the codeql-actions group with 2 updates
  • bedaf13 Merge pull request #620 from crazy-max/shared-error-helpers
  • d5079fb chore: update generated content
  • Additional commits viewable in compare view

Updates astral-sh/setup-uv from 10.1.0 to 10.2.0

Release notes

Sourced from astral-sh/setup-uv's releases.

v10.2.0 🌈 Disable automatic cache saves for merge queues

Changes

This release contains the known-checksum of the most recent uv releases and also disabled the uploading(saving) of the cache when in a merge queue since theses caches would almost never be used.

🚀 Enhancements

🧰 Maintenance

📚 Documentation

⬆️ Dependency updates

Commits

Updates edera-dev/actions/report-disk-space from 0.0.17 to 0.0.19

Commits
  • faf6053 feat(push-metrics): switch from Pushgateway to Prometheus remote_write (#32)
  • d72451e feat: add push-metrics action (#30)
  • f516281 feat(notify-slack): add resolve mode to auto-close tracking issues on recover...
  • See full diff in compare view

Updates edera-dev/actions/reclaim-disk-space from 0.0.17 to 0.0.19

Commits
  • faf6053 feat(push-metrics): switch from Pushgateway to Prometheus remote_write (#32)
  • d72451e feat: add push-metrics action (#30)
  • f516281 feat(notify-slack): add resolve mode to auto-close tracking issues on recover...
  • See full diff in compare view

Updates edera-dev/actions/configure-azure-sccache from 0.0.17 to 0.0.19

Commits
  • faf6053 feat(push-metrics): switch from Pushgateway to Prometheus remote_write (#32)
  • d72451e feat: add push-metrics action (#30)
  • f516281 feat(notify-slack): add resolve mode to auto-close tracking issues on recover...
  • See full diff in compare view

Updates anthropics/claude-code-action from 1.0.208 to 1.0.235

Release notes

Sourced from anthropics/claude-code-action's releases.

v1.0.235

Full Changelog: anthropics/claude-code-action@v1.0.234...v1.0.235

v1.0.234

Full Changelog: anthropics/claude-code-action@v1.0.233...v1.0.234

v1.0.233

Full Changelog: anthropics/claude-code-action@v1.0.232...v1.0.233

v1.0.232

What's Changed

New Contributors

Full Changelog: anthropics/claude-code-action@v1.0.231...v1.0.232

v1.0.231

Full Changelog: anthropics/claude-code-action@v1.0.230...v1.0.231

v1.0.230

Full Changelog: anthropics/claude-code-action@v1.0.229...v1.0.230

v1.0.229

Full Changelog: anthropics/claude-code-action@v1.0.228...v1.0.229

v1.0.228

Full Changelog: anthropics/claude-code-action@v1.0.227...v1.0.228

v1.0.227

Full Changelog: anthropics/claude-code-action@v1.0.226...v1.0.227

v1.0.226

Full Changelog: anthropics/claude-code-action@v1.0.225...v1.0.226

v1.0.225

Full Changelog: anthropics/claude-code-action@v1.0.224...v1.0.225

v1.0.224

Full Changelog: anthropics/claude-code-action@v1.0.223...v1.0.224

v1.0.223

Full Changelog: anthropics/claude-code-action@v1.0.222...v1.0.223

v1.0.222

Full Changelog: anthropics/claude-code-action@v1.0.221...v1.0.222

v1.0.221

Full Changelog: anthropics/claude-code-action@v1.0.220...v1.0.221

... (truncated)

Commits
  • 756cc22 chore: bump Claude Code to 2.1.283 and Agent SDK to 0.3.283
  • 9171db3 chore: bump Claude Code to 2.1.282 and Agent SDK to 0.3.282
  • 8cf3482 chore: bump Claude Code to 2.1.281 and Agent SDK to 0.3.281
  • 46a42b4 ci: pin the integration tests to claude-opus-5 (#1853)
  • 9ca9355 chore: bump Claude Code to 2.1.280 and Agent SDK to 0.3.280
  • cfc3eb2 chore: bump Claude Code to 2.1.278 and Agent SDK to 0.3.278
  • 4036a18 chore: bump Claude Code to 2.1.277 and Agent SDK to 0.3.277
  • a4f54ef chore: bump Claude Code to 2.1.276 and Agent SDK to 0.3.276
  • 2261fcf chore: bump Claude Code to 2.1.275 and Agent SDK to 0.3.275
  • 3b8197d chore: bump Claude Code to 2.1.274 and Agent SDK to 0.3.274
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Sep 25, 2026
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Sep 25, 2026
… updates

Bumps the actions-updates group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [step-security/harden-runner](https://github.com/step-security/harden-runner) | `2.20.1` | `2.21.1` |
| [actions/checkout](https://github.com/actions/checkout) | `4.4.0` | `7.0.1` |
| [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `4.2.0` | `4.4.1` |
| [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) | `10.1.0` | `10.2.0` |
| [edera-dev/actions/report-disk-space](https://github.com/edera-dev/actions) | `0.0.17` | `0.0.19` |
| [edera-dev/actions/reclaim-disk-space](https://github.com/edera-dev/actions) | `0.0.17` | `0.0.19` |
| [edera-dev/actions/configure-azure-sccache](https://github.com/edera-dev/actions) | `0.0.17` | `0.0.19` |
| [anthropics/claude-code-action](https://github.com/anthropics/claude-code-action) | `1.0.208` | `1.0.235` |



Updates `step-security/harden-runner` from 2.20.1 to 2.21.1
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](step-security/harden-runner@v2.20.1...e14015d)

Updates `actions/checkout` from 4.4.0 to 7.0.1
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v4.4.0...3d3c42e)

Updates `docker/setup-buildx-action` from 4.2.0 to 4.4.1
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](docker/setup-buildx-action@bb05f3f...f87e599)

Updates `astral-sh/setup-uv` from 10.1.0 to 10.2.0
- [Release notes](https://github.com/astral-sh/setup-uv/releases)
- [Commits](astral-sh/setup-uv@bec219d...c18668a)

Updates `edera-dev/actions/report-disk-space` from 0.0.17 to 0.0.19
- [Release notes](https://github.com/edera-dev/actions/releases)
- [Commits](edera-dev/actions@6e6996f...faf6053)

Updates `edera-dev/actions/reclaim-disk-space` from 0.0.17 to 0.0.19
- [Release notes](https://github.com/edera-dev/actions/releases)
- [Commits](edera-dev/actions@6e6996f...faf6053)

Updates `edera-dev/actions/configure-azure-sccache` from 0.0.17 to 0.0.19
- [Release notes](https://github.com/edera-dev/actions/releases)
- [Commits](edera-dev/actions@6e6996f...faf6053)

Updates `anthropics/claude-code-action` from 1.0.208 to 1.0.235
- [Release notes](https://github.com/anthropics/claude-code-action/releases)
- [Commits](anthropics/claude-code-action@e8c2d7c...756cc22)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions-updates
- dependency-name: anthropics/claude-code-action
  dependency-version: 1.0.231
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-updates
- dependency-name: astral-sh/setup-uv
  dependency-version: 10.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-updates
- dependency-name: docker/setup-buildx-action
  dependency-version: 4.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-updates
- dependency-name: edera-dev/actions/configure-azure-sccache
  dependency-version: 0.0.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-updates
- dependency-name: edera-dev/actions/reclaim-disk-space
  dependency-version: 0.0.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-updates
- dependency-name: edera-dev/actions/report-disk-space
  dependency-version: 0.0.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-updates
- dependency-name: step-security/harden-runner
  dependency-version: 2.21.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions-updates-178b253989 branch from 3883d0d to 23942c7 Compare September 28, 2026 00:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants