build(deps): bump the github-actions group across 1 directory with 14 updates

[dependabot]

Bumps the github-actions group with 14 updates in the / directory:

Package	From	To
Homebrew/actions/setup-homebrew	2026.09.13.1	2026.09.21.1
github/codeql-action/upload-sarif	4.38.0	4.38.1
Homebrew/actions/setup-ruby	2026.09.13.1	2026.09.21.1
github/codeql-action/init	4.38.0	4.38.1
github/codeql-action/analyze	4.38.0	4.38.1
Homebrew/actions/check-commit-format	2026.09.13.1	2026.09.21.1
docker/setup-buildx-action	4.3.0	4.4.1
docker/build-push-action	7.3.0	7.4.0
aws-actions/configure-aws-credentials	6.2.4	6.3.0
Homebrew/actions/create-or-update-issue	2026.09.13.1	2026.09.21.1
Homebrew/actions/git-user-config	2026.09.13.1	2026.09.21.1
Homebrew/actions/setup-commit-signing	2026.09.13.1	2026.09.21.1
Homebrew/actions/git-try-push	2026.09.13.1	2026.09.21.1
codecov/codecov-action	7.0.0	7.1.1

Updates Homebrew/actions/setup-homebrew from 2026.09.13.1 to 2026.09.21.1

Release notes

Sourced from Homebrew/actions/setup-homebrew's releases.

2026.09.21.1

What's Changed

• workflows: stop syncing and testing master by @​MikeMcQuaid in Homebrew/actions#934
• node_modules: ignore hidden lockfile by @​p-linnane in Homebrew/actions#935
• Synchronize shared configuration by @​BrewTestBot in Homebrew/actions#936
• Synchronize shared configuration by @​BrewTestBot in Homebrew/actions#937
• build(deps): bump the npm group with 3 updates by @​dependabot[bot] in Homebrew/actions#938
• build(deps): bump the github-actions group across 1 directory with 2 updates by @​dependabot[bot] in Homebrew/actions#939

Full Changelog: Homebrew/actions@2026.09.13.1...2026.09.21.1

Commits

• 848c272 Merge pull request #939 from Homebrew/dependabot/github_actions/github-action...
• f316292 Merge pull request #938 from Homebrew/dependabot/npm_and_yarn/npm-372e9df88c
• 7f5e5db build(deps): bump the github-actions group across 1 directory with 2 updates
• 5532d81 node_modules: update
• 38f8d3c build(deps): bump the npm group with 3 updates
• 75658ce Merge pull request #937 from Homebrew/sync-shared-config
• 2d398a7 licenses.yml: update to match main configuration
• 7b92cae check-licenses.sh: update to match main configuration
• 304fc86 Merge pull request #936 from Homebrew/sync-shared-config
• c2b5578 .ruby-version: update to match main configuration
• Additional commits viewable in compare view

Updates github/codeql-action/upload-sarif from 4.38.0 to 4.38.1

Release notes

Sourced from github/codeql-action/upload-sarif's releases.

v4.38.1

• The CodeQL Action now has experimental support for CodeQL releases for which per-language bundles are available. Per-language bundles support analysis for a single language and are therefore smaller than the combined bundles that allow analysis for all supported languages. As a result, per-language bundles take up less space on disk and are faster to download. We expect to roll this change out to everyone in the coming weeks. #4146

Changelog

Sourced from github/codeql-action/upload-sarif's changelog.

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

[UNRELEASED]

No user facing changes.

4.38.2 - 24 Sept 2026

• Update default CodeQL bundle version to 2.27.1. #4160

4.38.1 - 18 Sept 2026

• The CodeQL Action now has experimental support for CodeQL releases for which per-language bundles are available. Per-language bundles support analysis for a single language and are therefore smaller than the combined bundles that allow analysis for all supported languages. As a result, per-language bundles take up less space on disk and are faster to download. We expect to roll this change out to everyone in the coming weeks. #4146

4.38.0 - 09 Sept 2026

• On GitHub-hosted runners, the CodeQL Action now deletes unused CodeQL bundles from the toolcache before downloading a different bundle, which frees up disk space for the analysis. We expect to roll this change out to everyone in September. #4124
• The CodeQL Action now supports CodeQL releases that are compatible with Linux Arm64 and downloads the native linux-arm64 CodeQL bundle when available. #4072
• Update default CodeQL bundle version to 2.27.0. #4129

4.37.9 - 26 Aug 2026

• Update default CodeQL bundle version to 2.26.4. #4106

4.37.8 - 21 Aug 2026

No user facing changes.

4.37.7 - 13 Aug 2026

• Update default CodeQL bundle version to 2.26.3. #4085

4.37.6 - 04 Aug 2026

• Changed the default filepath for the new remote file address format that was introduced in CodeQL Action 4.37.0 / 3.37.0 to .github/codeql-config.yml to align it with the suggested path that is used elsewhere. #4070

4.37.5 - 03 Aug 2026

• Fixed a bug where a network error while streaming the download of the CodeQL bundle could terminate the init Action instead of falling back to downloading the bundle before extracting it. #4061

4.37.4 - 29 Jul 2026

• This version of the CodeQL Action adds support for the tools input for the codeql-action/init step to be specified using a github-codeql-tools repository property. This feature will gradually be rolled out following the release of this version. Once rolled out, this allows for the CodeQL CLI version that is used in GitHub-managed workflows, such as Default Setup, to be set to a custom value. For example, customers who run into issues with rate limits when a new CodeQL CLI version is released can set the value to toolcache to always use the CodeQL CLI version that is available in the runner toolcache. For Advanced Setup workflows, the value provided for tools in the workflow definition always takes precedence unless the value of the repository property starts with !. #4037
• Update default CodeQL bundle version to 2.26.2. #4051

4.37.3 - 22 Jul 2026

No user facing changes.

... (truncated)

Commits

• 1c5b675 Merge pull request #4152 from github/update-v4.38.1-a65b83a73
• a97cdca Add changelog entry for #4146
• cc6c691 Update changelog for v4.38.1
• a65b83a Merge pull request #4146 from github/henrymercer/per-language-bundles-pr
• 07fa87d Clarify the latest-nightly eligibility exception
• f18f353 Describe the bundle URL resolver
• ecec9b5 Share per-language telemetry fields without renaming
• 79fe3a1 Move download telemetry into the status-report directory
• ead1f7d Rename the platform module
• 549d498 Simplify per-language platform eligibility checks
• Additional commits viewable in compare view

Updates Homebrew/actions/setup-ruby from 2026.09.13.1 to 2026.09.21.1

Release notes

Sourced from Homebrew/actions/setup-ruby's releases.

2026.09.21.1

What's Changed

• workflows: stop syncing and testing master by @​MikeMcQuaid in Homebrew/actions#934
• node_modules: ignore hidden lockfile by @​p-linnane in Homebrew/actions#935
• Synchronize shared configuration by @​BrewTestBot in Homebrew/actions#936
• Synchronize shared configuration by @​BrewTestBot in Homebrew/actions#937
• build(deps): bump the npm group with 3 updates by @​dependabot[bot] in Homebrew/actions#938
• build(deps): bump the github-actions group across 1 directory with 2 updates by @​dependabot[bot] in Homebrew/actions#939

Full Changelog: Homebrew/actions@2026.09.13.1...2026.09.21.1

Commits

• 848c272 Merge pull request #939 from Homebrew/dependabot/github_actions/github-action...
• f316292 Merge pull request #938 from Homebrew/dependabot/npm_and_yarn/npm-372e9df88c
• 7f5e5db build(deps): bump the github-actions group across 1 directory with 2 updates
• 5532d81 node_modules: update
• 38f8d3c build(deps): bump the npm group with 3 updates
• 75658ce Merge pull request #937 from Homebrew/sync-shared-config
• 2d398a7 licenses.yml: update to match main configuration
• 7b92cae check-licenses.sh: update to match main configuration
• 304fc86 Merge pull request #936 from Homebrew/sync-shared-config
• c2b5578 .ruby-version: update to match main configuration
• Additional commits viewable in compare view

Updates github/codeql-action/init from 4.38.0 to 4.38.1

Release notes

Sourced from github/codeql-action/init's releases.

v4.38.1

• The CodeQL Action now has experimental support for CodeQL releases for which per-language bundles are available. Per-language bundles support analysis for a single language and are therefore smaller than the combined bundles that allow analysis for all supported languages. As a result, per-language bundles take up less space on disk and are faster to download. We expect to roll this change out to everyone in the coming weeks. #4146

Changelog

Sourced from github/codeql-action/init's changelog.

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

[UNRELEASED]

No user facing changes.

4.38.2 - 24 Sept 2026

• Update default CodeQL bundle version to 2.27.1. #4160

4.38.1 - 18 Sept 2026

• The CodeQL Action now has experimental support for CodeQL releases for which per-language bundles are available. Per-language bundles support analysis for a single language and are therefore smaller than the combined bundles that allow analysis for all supported languages. As a result, per-language bundles take up less space on disk and are faster to download. We expect to roll this change out to everyone in the coming weeks. #4146

4.38.0 - 09 Sept 2026

• On GitHub-hosted runners, the CodeQL Action now deletes unused CodeQL bundles from the toolcache before downloading a different bundle, which frees up disk space for the analysis. We expect to roll this change out to everyone in September. #4124
• The CodeQL Action now supports CodeQL releases that are compatible with Linux Arm64 and downloads the native linux-arm64 CodeQL bundle when available. #4072
• Update default CodeQL bundle version to 2.27.0. #4129

4.37.9 - 26 Aug 2026

• Update default CodeQL bundle version to 2.26.4. #4106

4.37.8 - 21 Aug 2026

No user facing changes.

4.37.7 - 13 Aug 2026

• Update default CodeQL bundle version to 2.26.3. #4085

4.37.6 - 04 Aug 2026

• Changed the default filepath for the new remote file address format that was introduced in CodeQL Action 4.37.0 / 3.37.0 to .github/codeql-config.yml to align it with the suggested path that is used elsewhere. #4070

4.37.5 - 03 Aug 2026

• Fixed a bug where a network error while streaming the download of the CodeQL bundle could terminate the init Action instead of falling back to downloading the bundle before extracting it. #4061

4.37.4 - 29 Jul 2026

• This version of the CodeQL Action adds support for the tools input for the codeql-action/init step to be specified using a github-codeql-tools repository property. This feature will gradually be rolled out following the release of this version. Once rolled out, this allows for the CodeQL CLI version that is used in GitHub-managed workflows, such as Default Setup, to be set to a custom value. For example, customers who run into issues with rate limits when a new CodeQL CLI version is released can set the value to toolcache to always use the CodeQL CLI version that is available in the runner toolcache. For Advanced Setup workflows, the value provided for tools in the workflow definition always takes precedence unless the value of the repository property starts with !. #4037
• Update default CodeQL bundle version to 2.26.2. #4051

4.37.3 - 22 Jul 2026

No user facing changes.

... (truncated)

Commits

• 1c5b675 Merge pull request #4152 from github/update-v4.38.1-a65b83a73
• a97cdca Add changelog entry for #4146
• cc6c691 Update changelog for v4.38.1
• a65b83a Merge pull request #4146 from github/henrymercer/per-language-bundles-pr
• 07fa87d Clarify the latest-nightly eligibility exception
• f18f353 Describe the bundle URL resolver
• ecec9b5 Share per-language telemetry fields without renaming
• 79fe3a1 Move download telemetry into the status-report directory
• ead1f7d Rename the platform module
• 549d498 Simplify per-language platform eligibility checks
• Additional commits viewable in compare view

Updates github/codeql-action/analyze from 4.38.0 to 4.38.1

Release notes

Sourced from github/codeql-action/analyze's releases.

v4.38.1

• The CodeQL Action now has experimental support for CodeQL releases for which per-language bundles are available. Per-language bundles support analysis for a single language and are therefore smaller than the combined bundles that allow analysis for all supported languages. As a result, per-language bundles take up less space on disk and are faster to download. We expect to roll this change out to everyone in the coming weeks. #4146

Changelog

Sourced from github/codeql-action/analyze's changelog.

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

[UNRELEASED]

No user facing changes.

4.38.2 - 24 Sept 2026

• Update default CodeQL bundle version to 2.27.1. #4160

4.38.1 - 18 Sept 2026

• The CodeQL Action now has experimental support for CodeQL releases for which per-language bundles are available. Per-language bundles support analysis for a single language and are therefore smaller than the combined bundles that allow analysis for all supported languages. As a result, per-language bundles take up less space on disk and are faster to download. We expect to roll this change out to everyone in the coming weeks. #4146

4.38.0 - 09 Sept 2026

• On GitHub-hosted runners, the CodeQL Action now deletes unused CodeQL bundles from the toolcache before downloading a different bundle, which frees up disk space for the analysis. We expect to roll this change out to everyone in September. #4124
• The CodeQL Action now supports CodeQL releases that are compatible with Linux Arm64 and downloads the native linux-arm64 CodeQL bundle when available. #4072
• Update default CodeQL bundle version to 2.27.0. #4129

4.37.9 - 26 Aug 2026

• Update default CodeQL bundle version to 2.26.4. #4106

4.37.8 - 21 Aug 2026

No user facing changes.

4.37.7 - 13 Aug 2026

• Update default CodeQL bundle version to 2.26.3. #4085

4.37.6 - 04 Aug 2026

• Changed the default filepath for the new remote file address format that was introduced in CodeQL Action 4.37.0 / 3.37.0 to .github/codeql-config.yml to align it with the suggested path that is used elsewhere. #4070

4.37.5 - 03 Aug 2026

• Fixed a bug where a network error while streaming the download of the CodeQL bundle could terminate the init Action instead of falling back to downloading the bundle before extracting it. #4061

4.37.4 - 29 Jul 2026

• This version of the CodeQL Action adds support for the tools input for the codeql-action/init step to be specified using a github-codeql-tools repository property. This feature will gradually be rolled out following the release of this version. Once rolled out, this allows for the CodeQL CLI version that is used in GitHub-managed workflows, such as Default Setup, to be set to a custom value. For example, customers who run into issues with rate limits when a new CodeQL CLI version is released can set the value to toolcache to always use the CodeQL CLI version that is available in the runner toolcache. For Advanced Setup workflows, the value provided for tools in the workflow definition always takes precedence unless the value of the repository property starts with !. #4037
• Update default CodeQL bundle version to 2.26.2. #4051

4.37.3 - 22 Jul 2026

No user facing changes.

... (truncated)

Commits

• 1c5b675 Merge pull request #4152 from github/update-v4.38.1-a65b83a73
• a97cdca Add changelog entry for #4146
• cc6c691 Update changelog for v4.38.1
• a65b83a Merge pull request #4146 from github/henrymercer/per-language-bundles-pr
• 07fa87d Clarify the latest-nightly eligibility exception
• f18f353 Describe the bundle URL resolver
• ecec9b5 Share per-language telemetry fields without renaming
• 79fe3a1 Move download telemetry into the status-report directory
• ead1f7d Rename the platform module
• 549d498 Simplify per-language platform eligibility checks
• Additional commits viewable in compare view

Updates Homebrew/actions/check-commit-format from 2026.09.13.1 to 2026.09.21.1

Release notes

Sourced from Homebrew/actions/check-commit-format's releases.

2026.09.21.1

What's Changed

• workflows: stop syncing and testing master by @​MikeMcQuaid in Homebrew/actions#934
• node_modules: ignore hidden lockfile by @​p-linnane in Homebrew/actions#935
• Synchronize shared configuration by @​BrewTestBot in Homebrew/actions#936
• Synchronize shared configuration by @​BrewTestBot in Homebrew/actions#937
• build(deps): bump the npm group with 3 updates by @​dependabot[bot] in Homebrew/actions#938
• build(deps): bump the github-actions group across 1 directory with 2 updates by @​dependabot[bot] in Homebrew/actions#939

Full Changelog: Homebrew/actions@2026.09.13.1...2026.09.21.1

Commits

• 848c272 Merge pull request #939 from Homebrew/dependabot/github_actions/github-action...
• f316292 Merge pull request #938 from Homebrew/dependabot/npm_and_yarn/npm-372e9df88c
• 7f5e5db build(deps): bump the github-actions group across 1 directory with 2 updates
• 5532d81 node_modules: update
• 38f8d3c build(deps): bump the npm group with 3 updates
• 75658ce Merge pull request #937 from Homebrew/sync-shared-config
• 2d398a7 licenses.yml: update to match main configuration
• 7b92cae check-licenses.sh: update to match main configuration
• 304fc86 Merge pull request #936 from Homebrew/sync-shared-config
• c2b5578 .ruby-version: update to match main configuration
• Additional commits viewable in compare view

Updates docker/setup-buildx-action from 4.3.0 to 4.4.1

Release notes

Sourced from docker/setup-buildx-action's releases.

v4.4.1

• Skip BuildKit image pre-pulls for explicit endpoints by @​crazy-max in docker/setup-buildx-action#624

Full Changelog: docker/setup-buildx-action@v4.4.0...v4.4.1

v4.4.0

• Use official Buildx releases for cloud driver by @​crazy-max in docker/setup-buildx-action#606
• Pull BuildKit image before builder creation by @​crazy-max in docker/setup-buildx-action#609
• Use shared error helpers for Buildx and Docker commands by @​crazy-max in docker/setup-buildx-action#620
• Bump @​docker/actions-toolkit from 0.95.0 to 0.100.0 in docker/setup-buildx-action#610 docker/setup-buildx-action#618 docker/setup-buildx-action#619
• Bump @​humanfs/node from 0.16.7 to 0.16.8 in docker/setup-buildx-action#614
• Bump js-yaml from 5.3.0 to 5.4.2 in docker/setup-buildx-action#608 docker/setup-buildx-action#617
• Bump postcss-selector-parser from 7.1.1 to 7.1.5 in docker/setup-buildx-action#611

Full Changelog: docker/setup-buildx-action@v4.3.0...v4.4.0

Commits

• f87e599 Merge pull request #624 from crazy-max/skip-pull-with-endpoint
• e700274 chore: update generated content
• 3061c91 skip BuildKit image pre-pulls for explicit endpoints
• 594f3bf Merge pull request #609 from crazy-max/pull-buildkit-image-before-create
• bd6e702 chore: update generated content
• 6268c9d pull BuildKit image before builder creation
• e823525 Merge pull request #621 from docker/dependabot/github_actions/codeql-actions-...
• 533ed8e build(deps): bump the codeql-actions group with 2 updates
• bedaf13 Merge pull request #620 from crazy-max/shared-error-helpers
• d5079fb chore: update generated content
• Additional commits viewable in compare view

Updates docker/build-push-action from 7.3.0 to 7.4.0

Release notes

Sourced from docker/build-push-action's releases.

v7.4.0

• Use the shared error helper for Buildx commands by @​crazy-max in docker/build-push-action#1620
• Prevent workflow command injection in metadata logs by @​crazy-max in docker/build-push-action#1617
• Bump @​docker/actions-toolkit from 0.92.0 to 0.100.0 in docker/build-push-action#1614 docker/build-push-action#1618 docker/build-push-action#1621
• Bump @​humanfs/node from 0.16.7 to 0.16.8 in docker/build-push-action#1609
• Bump brace-expansion from 1.1.13 to 1.1.18 in docker/build-push-action#1592
• Bump csv-parse from 7.0.0 to 7.0.2 in docker/build-push-action#1613
• Bump js-yaml from 4.3.0 to 4.3.2 in docker/build-push-action#1605 docker/build-push-action#1615
• Bump nanoid from 3.3.16 to 3.3.18 in docker/build-push-action#1611
• Bump postcss from 8.5.10 to 8.5.25 in docker/build-push-action#1590
• Bump postcss-selector-parser from 7.1.1 to 7.1.5 in docker/build-push-action#1606
• Bump sigstore from 4.1.0 to 4.1.1 in docker/build-push-action#1577
• Bump undici from 6.27.0 to 6.28.0 in docker/build-push-action#1594

Full Changelog: docker/build-push-action@v7.3.0...v7.4.0

Commits

• c3c9e26 Merge pull request #1621 from docker/dependabot/npm_and_yarn/docker/actions-t...
• 459b674 [dependabot skip] chore: update generated content
• 4dedcb2 chore(deps): Bump @​docker/actions-toolkit from 0.99.0 to 0.100.0
• 379bf63 Merge pull request #1620 from crazy-max/buildx-error-message
• 9877975 chore: update generated content
• 7ed0556 use the shared Buildx error summary helper
• 91670ba Merge pull request #1618 from docker/dependabot/npm_and_yarn/docker/actions-t...
• 80dbc86 [dependabot skip] chore: update generated content
• 50cac3a chore(deps): Bump @​docker/actions-toolkit from 0.98.0 to 0.99.0
• 03b4d6c Merge pull request #1617 from crazy-max/fix-metadata-workflow-commands
• Additional commits viewable in compare view

Updates aws-actions/configure-aws-credentials from 6.2.4 to 6.3.0

Release notes

Sourced from aws-actions/configure-aws-credentials's releases.

v6.3.0

6.3.0 (2026-09-11)

Features

• add translate-env-variables option (#1961) (57b8365)

Changelog

Sourced from aws-actions/configure-aws-credentials's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

6.3.0 (2026-09-11)

Features

• add translate-env-variables option (#1961) (57b8365)

6.2.4 (2026-08-31)

Bug Fixes

• account-ids handling, mask proxy as secret in logs (#1943) (aa65264)
• skip backoff sleep after the final retryAndBackoff attempt (#1937) (3852440)

6.2.3 (2026-07-22)

Bug Fixes

• attach git credentials before Tag Major Version push (#1877) (9ae780b)
• PackedPolicyTooLarge detection in STS tags (#1899) (fa8d6a5)

6.2.2 (2026-07-07)

Miscellaneous Chores

• release 6.2.2 (d01d678)

6.2.1 (2026-06-26)

Bug Fixes

• enforce allowed-account-ids on all auth paths (#1847) (4d281fb)

6.2.0 (2026-06-01)

Features

• add additional session tags by default (#1775) (e0ba768)
• add more retry logic and better logging (#1764) (540d0c1)
• add regex validation to role-session-name (#1765) (e354499)
• Allow custom session tags to be passed when assuming a role (#1759) (61f50f6)
• expose run id in STS client user-agent (#1774) (29d1be3)

... (truncated)

Commits

• e125382 chore(main): release 6.3.0 (#1963)
• 438100a chore: add link to GH security docs (#1962)
• e92ebcc chore: Update dist
• 57b8365 feat: add translate-env-variables option (#1961)
• cc49fa7 chore(docs): README main branch guidance (#1960)
• 866cb16 chore(deps-dev): bump smol-toml from 1.7.0 to 1.7.2 (#1958)
• 6782cb1 chore(deps-dev): bump generate-license-file from 4.2.4 to 4.2.5 (#1951)
• c20509a chore: Update dist
• 7a41fc6 chore(deps): bump @​aws-sdk/client-sts from 3.1121.0 to 3.1127.0 (#1954)
• 726b713 chore(deps-dev): bump @​biomejs/biome from 2.5.11 to 2.5.12 (#1957)
• Additional commits viewable in compare view

Updates Homebrew/actions/create-or-update-issue from 2026.09.13.1 to 2026.09.21.1

Release notes

Sourced from Homebrew/actions/create-or-update-issue's releases.

2026.09.21.1

What's Changed

• workflows: stop syncing and testing master by @​MikeMcQuaid in Homebrew/actions#934
• node_modules: ignore hidden lockfile by @​p-linnane in Homebrew/actions#935
• Synchronize shared configuration by @​BrewTestBot in Homebrew/actions#936
• Synchronize shared configuration by @​BrewTestBot in Homebrew/actions#937
• build(deps): bump the npm group with 3 updates by @​dependabot[bot] in Homebrew/actions#938
• build(deps): bump the github-actions group across 1 directory with 2 updates by @​dependabot[bot] in Homebrew/actions#939

Full Changelog: Homebrew/actions@2026.09.13.1...2026.09.21.1

Commits

• 848c272 Merge pull request #939 from Homebrew/dependabot/github_actions/github-action...
• f316292 Merge pull request #938 from Homebrew/dependabot/npm_and_yarn/npm-372e9df88c
• 7f5e5db build(deps): bump the github-actions group across 1 directory with 2 updates
• 5532d81 node_modules: update
• 38f8d3c build(deps): bump the npm group with 3 updates
• 75658ce Merge pull request #937 from Homebrew/sync-shared-config
• 2d398a7 licenses.yml: update to match main configuration
• 7b92cae check-licenses.sh: update to match main configuration
• 304fc86 Merge pull request #936 from Homebrew/sync-shared-config
• c2b5578 .ruby-version: update to match main configuration
• Additional commits viewable in compare view

Updates Homebrew/actions/git-user-config from 2026.09.13.1 to 2026.09.21.1

Release notes

Sourced from Homebrew/actions/git-user-config's releases.

2026.09.21.1

What's Changed

• workflows: stop syncing and testing master by @​MikeMcQuaid in Homebrew/actions#934
• node_modules: ignore hidden lockfile by @​p-linnane in Homebrew/actions#935
• Synchronize shared configuration by @​BrewTestBot in Homebrew/actions#936
• Synchronize shared configuration by @​BrewTestBot in Homebrew/actions#937
• build(deps): bump the npm group with 3 updates by @​dependabot[bot] in Homebrew/actions#938
• build(deps): bump the github-actions group across 1 directory with 2 updates by @​dependabot[bot] in Homebrew/actions#939

Full Changelog: Homebrew/actions@2026.09.13.1...2026.09.21.1

Commits

• 848c272 Merge pull request #939 from Homebrew/dependabot/github_actions/github-action...
• f316292 Merge pull request #938 from Homebrew/dependabot/npm_and_yarn/npm-372e9df88c
• 7f5e5db build(deps): bump the github-actions group across 1 directory with 2 updates
• 5532d81 node_modules: update
• 38f8d3c build(deps): bump the npm group with 3 updates
• 75658ce Merge pull request #937 from Homebrew/sync-shared-config
• 2d398a7 licenses.yml: update to match main configuration
• 7b92cae check-licenses.sh: update to match main configuration
• 304fc86Description has been truncated

[Copilot]

Copilot review overview

🟢 Approval recommended

No blocking issues remain.

Review effort: Lite
Findings: None

What changed in this PR

Updates 14 pinned GitHub Actions dependencies across Homebrew CI, release, Docker, documentation, and maintenance workflows.

Changes:

• Updates Homebrew Actions to 2026.09.21.1.
• Updates CodeQL, Docker, AWS credentials, and Codecov actions.
• Retains immutable commit-SHA pinning.

File	Changes
.github/​workflows/​vendor-version.yml	Updates Homebrew setup actions
.github/​workflows/​vendor-gems.yml	Updates setup and push actions
.github/​workflows/​tests.yml	Updates test and Codecov actions
.github/​workflows/​tap-new-tests.yml	Updates Homebrew setup
.github/​workflows/​tap-new-publish.yml	Updates publishing actions
.github/​workflows/​tap-new-autobump.yml	Updates autobump actions
.github/​workflows/​sponsors-maintainers-man-completions.yml	Updates maintenance actions
.github/​workflows/​spdx.yml	Updates SPDX workflow actions
.github/​workflows/​sorbet.yml	Updates Sorbet workflow actions
.github/​workflows/​sbom.yml	Updates SBOM workflow actions
.github/​workflows/​release.yml	Updates release setup
.github/​workflows/​licenses.yml	Updates license workflow setup
.github/​workflows/​doctor.yml	Updates doctor workflow setup
.github/​workflows/​docs.yml	Updates documentation workflow actions
.github/​workflows/​docker.yml	Updates Docker and AWS actions
.github/​workflows/​copilot-setup-steps.yml	Updates Copilot setup
.github/​workflows/​commit-style.yml	Updates commit-format checking
.github/​workflows/​codeql-analysis.yml	Updates CodeQL actions
.github/​workflows/​autogenerated-files.yml	Updates workflow setup
.github/​workflows/​approve-stale-lead-maintainer-prs.yml	Updates Ruby setup
.github/​workflows/​actionlint.yml	Updates linting and SARIF upload

---

💡 Add a code-review agent skill for context-aware, tailored reviews. Learn more in the docs.