Skip to content

deps(deps): bump the github-actions group across 1 directory with 3 updates - #392

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-bb63aebacb
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-bb63aebacb

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 5, 2026

Copy link
Copy Markdown
Contributor

Bumps the github-actions group with 3 updates in the / directory: actions/deploy-pages, actions/attest-build-provenance and actions/attest-sbom.

Updates actions/deploy-pages from 5.0.0 to 5.0.1

Release notes

Sourced from actions/deploy-pages's releases.

v5.0.1

Changelog


See details of all code changes since previous release.

⚠️ For use with products other than GitHub.com, such as GitHub Enterprise Server, please consult the compatibility table.

Commits
  • 368f825 Merge pull request #444 from actions/yoannchaudet-deployment-polling-backoff
  • 7e97763 Validate deployment polling intervals
  • 0143e11 Add backoff and jitter to deployment polling
  • 5e98f10 Merge pull request #440 from actions/user/adwitiya
  • 8b0625a Improve deployment request test coverage
  • See full diff in compare view

Updates actions/attest-build-provenance from e3fe62ef559997059fe8380e7d2b4c909e2d65f4 to 9d57eef8c06cd9d6b433effeeb7a6a77b3ff94ad

Changelog

Sourced from actions/attest-build-provenance's changelog.

Release Instructions

Follow the steps below to tag a new release for the actions/attest-build-provenance action.

  1. Create a new release for the top-level action using a tag of the form vX.X.X following SemVer conventions:

    gh release create vX.X.X
  2. Move (or create) the major version tag to point to the same commit tagged above:

    git tag -fa vX -m "vX"
    git push origin vX --force
Commits
  • 9d57eef Bump actions/attest from 4.2.1 to 4.2.2 in the actions-minor group (#864)
  • 4d10147 Bump actions/attest from 4.2.0 to 4.2.1 in the actions-minor group (#862)
  • See full diff in compare view

Updates actions/attest-sbom from 5729fe4dc697fb7538e4e94fd44d040aac1367b2 to 4c8abdcbea4a6b66f70fd1169e70af4bf5b13701

Changelog

Sourced from actions/attest-sbom's changelog.

Release Instructions

Follow the steps below to tag a new release for the actions/attest-sbom action.

  1. Create a new release for the top-level action using a tag of the form vX.X.X following SemVer conventions:

    gh release create vX.X.X
  2. Move (or create) the major version tag to point to the same commit tagged above:

    git tag -fa vX -m "vX"
    git push origin vX --force
Commits
  • 4c8abdc Bump actions/attest from 4.2.1 to 4.2.2 in the actions-minor group (#261)
  • 9be8a82 Bump actions/attest from 4.2.0 to 4.2.1 in the actions-minor group (#260)
  • See full diff in compare view

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Sep 5, 2026
@dependabot @github

dependabot Bot commented on behalf of github Sep 5, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: github-actions. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot
dependabot Bot force-pushed the dependabot/github_actions/github-actions-bb63aebacb branch from b7a4e8e to 7082610 Compare September 14, 2026 13:10
@github-actions
github-actions Bot enabled auto-merge (squash) September 14, 2026 13:11
…pdates

Bumps the github-actions group with 3 updates in the / directory: [actions/deploy-pages](https://github.com/actions/deploy-pages), [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance) and [actions/attest-sbom](https://github.com/actions/attest-sbom).


Updates `actions/deploy-pages` from 5.0.0 to 5.0.1
- [Release notes](https://github.com/actions/deploy-pages/releases)
- [Commits](actions/deploy-pages@cd2ce8f...368f825)

Updates `actions/attest-build-provenance` from e3fe62ef559997059fe8380e7d2b4c909e2d65f4 to 9d57eef8c06cd9d6b433effeeb7a6a77b3ff94ad
- [Release notes](https://github.com/actions/attest-build-provenance/releases)
- [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md)
- [Commits](actions/attest-build-provenance@e3fe62e...9d57eef)

Updates `actions/attest-sbom` from 5729fe4dc697fb7538e4e94fd44d040aac1367b2 to 4c8abdcbea4a6b66f70fd1169e70af4bf5b13701
- [Release notes](https://github.com/actions/attest-sbom/releases)
- [Changelog](https://github.com/actions/attest-sbom/blob/main/RELEASE.md)
- [Commits](actions/attest-sbom@5729fe4...4c8abdc)

---
updated-dependencies:
- dependency-name: actions/attest-build-provenance
  dependency-version: 9d57eef8c06cd9d6b433effeeb7a6a77b3ff94ad
  dependency-type: direct:production
  dependency-group: github-actions
- dependency-name: actions/attest-sbom
  dependency-version: 4c8abdcbea4a6b66f70fd1169e70af4bf5b13701
  dependency-type: direct:production
  dependency-group: github-actions
- dependency-name: actions/deploy-pages
  dependency-version: 5.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/github-actions-bb63aebacb branch from 7082610 to e841e42 Compare September 21, 2026 13:11

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants