Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 1, 2025

Updates the requirements on actions/checkout, grafana/shared-workflows, actions/create-github-app-token, actions/setup-go, docker/setup-qemu-action, docker/setup-buildx-action, actions/setup-node, docker/login-action, grafana/helm-charts, grafana/writers-toolkit and goreleaser/goreleaser-action to permit the latest version.
Updates actions/checkout from 4 to 5

Release notes

Sourced from actions/checkout's releases.

v5.0.0

What's Changed

⚠️ Minimum Compatible Runner Version

v2.327.1
Release Notes

Make sure your runner is updated to this version or newer to use this release.

Full Changelog: actions/checkout@v4...v5.0.0

v4.3.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v4...v4.3.0

v4.2.2

What's Changed

Full Changelog: actions/checkout@v4.2.1...v4.2.2

v4.2.1

What's Changed

New Contributors

Full Changelog: actions/checkout@v4.2.0...v4.2.1

... (truncated)

Commits

Updates grafana/shared-workflows to 28361cdb22223e5f1e34358c86c20908e7248760

Changelog

Sourced from grafana/shared-workflows's changelog.

{ "$schema": "https://raw.githubusercontent.com/googleapis/release-please/main/schemas/config.json", "changelog-sections": [ { "section": "🎉 Features", "type": "feat" }, { "section": "🐛 Bug Fixes", "type": "fix" }, { "section": "⚡ Performance Improvements", "type": "perf" }, { "section": "🔗 Dependencies", "type": "deps" }, { "section": "📝 Documentation", "type": "docs" }, { "section": "🏗️ Build System", "type": "build" }, { "section": "🤖 Continuous Integration", "type": "ci" }, { "section": "🔧 Miscellaneous Chores", "type": "chore" }, { "section": "⏪ Reverts", "type": "revert" }, { "section": "✅ Tests", "type": "test" }, { "section": "💄 Style", "type": "style" }, { "section": "♻️ Code Refactoring", "type": "refactor"

... (truncated)

Commits

Updates actions/create-github-app-token from 2.0.2 to 2.1.4

Release notes

Sourced from actions/create-github-app-token's releases.

v2.1.4

2.1.4 (2025-09-13)

Bug Fixes

  • deps: bump @​octokit/auth-app from 7.2.1 to 8.0.1 (#257) (bef1eaf)

v2.1.3

2.1.3 (2025-09-13)

Bug Fixes

  • deps: bump undici from 7.8.0 to 7.10.0 in the production-dependencies group (#254) (f3d5ec2)

v2.1.2

2.1.2 (2025-09-12)

Bug Fixes

  • deps: bump @​octokit/request from 9.2.3 to 10.0.2 (#256) (5d7307b)

v2.1.1

2.1.1 (2025-08-11)

Bug Fixes

v2.1.0

2.1.0 (2025-08-08)

Features

v2.0.6

2.0.6 (2025-05-03)

Bug Fixes

... (truncated)

Commits
  • 6701853 build(release): 2.1.4 [skip ci]
  • bef1eaf fix(deps): bump @​octokit/auth-app from 7.2.1 to 8.0.1 (#257)
  • 1526738 build(release): 2.1.3 [skip ci]
  • f3d5ec2 fix(deps): bump undici from 7.8.0 to 7.10.0 in the production-dependencies gr...
  • def152b build(release): 2.1.2 [skip ci]
  • 5d7307b fix(deps): bump @​octokit/request from 9.2.3 to 10.0.2 (#256)
  • 525760a build(deps): bump stefanzweifel/git-auto-commit-action from 5.2.0 to 6.0.1 (#...
  • 8ab05a8 Add beta branch support for releases (#282)
  • d00315e build(deps): bump actions/checkout from 4 to 5 (#279)
  • fcc6c28 build(deps-dev): bump dotenv from 16.5.0 to 17.2.1 (#269)
  • Additional commits viewable in compare view

Updates actions/setup-go from 5.4.0 to 6.0.0

Release notes

Sourced from actions/setup-go's releases.

v6.0.0

What's Changed

Breaking Changes

Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. See Release Notes

Dependency Upgrades

New Contributors

Full Changelog: actions/setup-go@v5...v6.0.0

v5.5.0

What's Changed

Bug fixes:

Dependency updates:

New Contributors

Full Changelog: actions/setup-go@v5...v5.5.0

Commits

Updates docker/setup-qemu-action from 2.2.0 to 3.6.0

Release notes

Sourced from docker/setup-qemu-action's releases.

v3.6.0

Full Changelog: docker/setup-qemu-action@v3.5.0...v3.6.0

v3.5.0

Full Changelog: docker/setup-qemu-action@v3.4.0...v3.5.0

v3.4.0

Full Changelog: docker/setup-qemu-action@v3.3.0...v3.4.0

v3.3.0

Full Changelog: docker/setup-qemu-action@v3.2.0...v3.3.0

v3.2.0

Full Changelog: docker/setup-qemu-action@v3.1.0...v3.2.0

v3.1.0

Full Changelog: docker/setup-qemu-action@v3.0.0...v3.1.0

v3.0.0

Full Changelog: docker/setup-qemu-action@v2.2.0...v3.0.0

Commits
  • 2910929 Merge pull request #202 from crazy-max/binfmt-version
  • 7ffe24a chore: update generated content
  • 17bc18b display binfmt version
  • 5964de0 Merge pull request #205 from docker/dependabot/npm_and_yarn/docker/actions-to...
  • 862b663 chore: update generated content
  • 138de3b build(deps): bump @​docker/actions-toolkit from 0.54.0 to 0.56.0
  • 4574d27 Merge pull request #195 from radarhere/patch-1
  • 7a38281 Merge pull request #197 from docker/dependabot/npm_and_yarn/docker/actions-to...
  • 7a1c63f build(deps): bump @​docker/actions-toolkit from 0.53.0 to 0.54.0
  • 2825a12 Fixed typo
  • Additional commits viewable in compare view

Updates docker/setup-buildx-action from 2.10.0 to 3.11.1

Release notes

Sourced from docker/setup-buildx-action's releases.

v3.11.1

Full Changelog: docker/setup-buildx-action@v3.11.0...v3.11.1

v3.11.0

Full Changelog: docker/setup-buildx-action@v3.10.0...v3.11.0

v3.10.0

Full Changelog: docker/setup-buildx-action@v3.9.0...v3.10.0

v3.9.0

Full Changelog: docker/setup-buildx-action@v3.8.0...v3.9.0

v3.8.0

Full Changelog: docker/setup-buildx-action@v3.7.1...v3.8.0

v3.7.1

Full Changelog: docker/setup-buildx-action@v3.7.0...v3.7.1

v3.7.0

Full Changelog: docker/setup-buildx-action@v3.6.1...v3.7.0

v3.6.1

Full Changelog: docker/setup-buildx-action@v3.6.0...v3.6.1

v3.6.0

... (truncated)

Commits
  • e468171 Merge pull request #429 from crazy-max/fix-keep-state
  • a3e7502 chore: update generated content
  • b145473 fix keep-state not being respected
  • 18ce135 Merge pull request #425 from docker/dependabot/npm_and_yarn/docker/actions-to...
  • 0e198e9 chore: update generated content
  • 05f3f3a build(deps): bump @​docker/actions-toolkit from 0.61.0 to 0.62.1
  • 6229134 Merge pull request #427 from crazy-max/keep-state
  • c6f6a07 chore: update generated content
  • 6c5e29d skip builder creation if one already exists with the same name
  • 548b297 ci: keep-state check
  • Additional commits viewable in compare view

Updates actions/setup-node from 3.9.1 to 5.0.0

Release notes

Sourced from actions/setup-node's releases.

v5.0.0

What's Changed

Breaking Changes

This update, introduces automatic caching when a valid packageManager field is present in your package.json. This aims to improve workflow performance and make dependency management more seamless. To disable this automatic caching, set package-manager-cache: false

steps:
- uses: actions/checkout@v5
- uses: actions/setup-node@v5
  with:
    package-manager-cache: false

Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. See Release Notes

Dependency Upgrades

New Contributors

Full Changelog: actions/setup-node@v4...v5.0.0

v4.4.0

What's Changed

Bug fixes:

Enhancement:

Dependency update:

New Contributors

Full Changelogactions/setup-node@v4...v4.4.0

... (truncated)

Commits

Updates docker/login-action from 2.2.0 to 3.6.0

Release notes

Sourced from docker/login-action's releases.

v3.6.0

Full Changelog: docker/login-action@v3.5.0...v3.6.0

v3.5.0

Full Changelog: docker/login-action@v3.4.0...v3.5.0

v3.4.0

Full Changelog: docker/login-action@v3.3.0...v3.4.0

v3.3.0

Full Changelog: docker/login-action@v3.2.0...v3.3.0

v3.2.0

Full Changelog: docker/login-action@v3.1.0...v3.2.0

v3.1.0

... (truncated)

Commits
  • 5e57cd1 Merge pull request #890 from docker/dependabot/npm_and_yarn/aws-sdk-dependenc...
  • 97e3143 chore: update generated content
  • 3a0796b build(deps): bump the aws-sdk-dependencies group with 2 updates
  • 5b7b28b Merge pull request #882 from docker/dependabot/npm_and_yarn/aws-sdk-dependenc...
  • abc9fb3 chore: update generated content
  • d468688 build(deps): bump the aws-sdk-dependencies group with 2 updates
  • a99b2f8 Merge pull request #883 from docker/dependabot/npm_and_yarn/docker/actions-to...
  • 0d7fae8 chore: update generated content
  • 9832253 build(deps): bump @​docker/actions-toolkit from 0.62.1 to 0.63.0
  • 09e05bb Merge pull request #881 from docker/dependabot/npm_and_yarn/tmp-0.2.4
  • Additional commits viewable in compare view

Updates grafana/helm-charts from 64b1c8260d69a9b1d9a186df25c51358b92f7662 to b672274878f23b6817e406922775fbfee6352a1a

Commits
  • b672274 Merge pull request #3914 from yetisage/rollout-operator/self-signed-cert-full...
  • 5b72742 Update helm-docs
  • babda96 [rollout-operator] Handle fullnameOverride in webhooks self-signed-cert
  • 24bcd88 Merge pull request #3898 from KyriosGN0/bump-rollout
  • 49d8bd3 Merge branch 'main' into bump-rollout
  • 8ba262e Update cloudcost exporter helm version (#3905)
  • 04b3b0b [tempo-distributed] add missing revisionHistoryLimit (#3845)
  • f4ea903 Merge pull request #3897 from fabian-woelk-el/feature/collout-operator-env-vars
  • 5671937 Merge branch 'main' into feature/collout-operator-env-vars
  • 43cde6d Merge pull request #3891 from waterdrag0n/enable_tpl_processing_alert_files
  • Additional commits viewable in compare view

Updates grafana/writers-toolkit from 9ccaaf1f78c5c045229e7088e816925311c67abc to 77cdb4fb19b931f44dafcbb3e6d48c5212f382ee

Changelog

Sourced from grafana/writers-toolkit's changelog.

Releases

The Writers' Toolkit repository is a collection of different tools that can have different release mechanisms.

GitHub Actions

The following directories contain GitHub Actions actions:

You release each action by creating or updating Git tags. The Git tag begins with the action directory, then a slash (/), and then the tag version. For example, publish-technical-documentation-release/v1.0.0 is the v1.0.0 release of the publish-technical-documentation-release action.

The actions follow semantic versioning.

To create a tag, use the following command:

git tag --annotate --force --sign --local-user=<GPG KEY ID> -m <MESSAGE> <TAG>

Where:

  • <GPG KEY ID> is the ID of the GPG key associated with your GitHub account.

    For more information refer to Signing commits.

  • <MESSAGE> is a short message explaining the change to the action.

    This is typically similar to a commit title explaining the "what" of the change.

  • TAG is the name of the tag using the previously explained naming convention.

Each release has three tags:

  • Major version: <ACTION>/v<MAJOR>
  • Major and minor version: <ACTION>/v<MAJOR>.<MINOR>
  • Major, minor, and patch version: <ACTION>/v<MAJOR>.<MINOR>.<PATCH>

The major version tag should point to the same commit as the latest major and minor version tag. The major and minor version tag should point to the same commit as the major, minor, and patch version tag.

The --force flag provided to the git tag command overwrites existing tags which you need to be able to move the major version and major and minor version tags when you release a new major, minor, and patch version.

Vale package

... (truncated)

Commits

@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Oct 1, 2025
@dependabot dependabot bot requested review from jdbaldry and a team as code owners October 1, 2025 07:15
@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Oct 1, 2025

This comment has been minimized.

@dependabot dependabot bot force-pushed the dependabot/github_actions/github-actions-e5c3efd1b8 branch from 6b43972 to db5df30 Compare October 2, 2025 18:13
… updates

Updates the requirements on [actions/checkout](https://github.com/actions/checkout), [grafana/shared-workflows](https://github.com/grafana/shared-workflows), [actions/create-github-app-token](https://github.com/actions/create-github-app-token), [actions/setup-go](https://github.com/actions/setup-go), [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action), [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action), [actions/setup-node](https://github.com/actions/setup-node), [docker/login-action](https://github.com/docker/login-action), [grafana/helm-charts](https://github.com/grafana/helm-charts), [grafana/writers-toolkit](https://github.com/grafana/writers-toolkit) and [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) to permit the latest version.

Updates `actions/checkout` from 4 to 5
- [Release notes](https://github.com/actions/checkout/releases)
- [Commits](actions/checkout@v4...v5)

Updates `grafana/shared-workflows` to 28361cdb22223e5f1e34358c86c20908e7248760
- [Release notes](https://github.com/grafana/shared-workflows/releases)
- [Changelog](https://github.com/grafana/shared-workflows/blob/main/release-please-config.json)
- [Commits](https://github.com/grafana/shared-workflows/commits/28361cdb22223e5f1e34358c86c20908e7248760)

Updates `actions/create-github-app-token` from 2.0.2 to 2.1.4
- [Release notes](https://github.com/actions/create-github-app-token/releases)
- [Commits](actions/create-github-app-token@3ff1caa...6701853)

Updates `actions/setup-go` from 5.4.0 to 6.0.0
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](actions/setup-go@0aaccfd...4469467)

Updates `docker/setup-qemu-action` from 2.2.0 to 3.6.0
- [Release notes](https://github.com/docker/setup-qemu-action/releases)
- [Commits](docker/setup-qemu-action@v2.2.0...2910929)

Updates `docker/setup-buildx-action` from 2.10.0 to 3.11.1
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](docker/setup-buildx-action@v2.10.0...e468171)

Updates `actions/setup-node` from 3.9.1 to 5.0.0
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@v3.9.1...a0853c2)

Updates `docker/login-action` from 2.2.0 to 3.6.0
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](docker/login-action@465a078...5e57cd1)

Updates `grafana/helm-charts` from 64b1c8260d69a9b1d9a186df25c51358b92f7662 to b672274878f23b6817e406922775fbfee6352a1a
- [Release notes](https://github.com/grafana/helm-charts/releases)
- [Commits](grafana/helm-charts@64b1c82...b672274)

Updates `grafana/writers-toolkit` from 9ccaaf1f78c5c045229e7088e816925311c67abc to 77cdb4fb19b931f44dafcbb3e6d48c5212f382ee
- [Release notes](https://github.com/grafana/writers-toolkit/releases)
- [Changelog](https://github.com/grafana/writers-toolkit/blob/main/RELEASE.md)
- [Commits](grafana/writers-toolkit@9ccaaf1...77cdb4f)

Updates `goreleaser/goreleaser-action` from 6.3.0 to 6.4.0
- [Release notes](https://github.com/goreleaser/goreleaser-action/releases)
- [Commits](goreleaser/goreleaser-action@9c156ee...e435ccd)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: grafana/shared-workflows
  dependency-version: 28361cdb22223e5f1e34358c86c20908e7248760
  dependency-type: direct:production
  dependency-group: github-actions
- dependency-name: actions/create-github-app-token
  dependency-version: 2.1.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: actions/setup-go
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: docker/setup-qemu-action
  dependency-version: 3.6.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: docker/setup-buildx-action
  dependency-version: 3.11.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/setup-node
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: docker/login-action
  dependency-version: 3.6.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: grafana/helm-charts
  dependency-version: b672274878f23b6817e406922775fbfee6352a1a
  dependency-type: direct:production
  dependency-group: github-actions
- dependency-name: grafana/writers-toolkit
  dependency-version: 77cdb4fb19b931f44dafcbb3e6d48c5212f382ee
  dependency-type: direct:production
  dependency-group: github-actions
- dependency-name: goreleaser/goreleaser-action
  dependency-version: 6.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/github_actions/github-actions-e5c3efd1b8 branch from db5df30 to 2965927 Compare October 3, 2025 13:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants