Skip to content

chore(deps): pin dependencies - #592

Merged
renovate[bot] merged 1 commit into
masterfrom
renovate/github-actions
Aug 30, 2026
Merged

renovate[bot] merged 1 commit into
masterfrom
renovate/github-actions

Conversation

@renovate

@renovate renovate Bot commented Aug 30, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change
actions/checkout action pin v7 → v7.0.1
actions/configure-pages action pin v6 → v6.0.0
actions/deploy-pages action pin v5 → v5.0.0
actions/jekyll-build-pages action pin v1 → v1.0.13
actions/setup-node action pin v7 → v7.0.0
actions/upload-artifact action pin v7 → v7.0.1
actions/upload-pages-artifact action pin v5 → v5.0.0
codecov/codecov-action action pin v7 → v7.0.0
github/codeql-action action patch v4.37.6 → v4.37.9
google/osv-scanner-action workflow patch v2.5.0 → v2.5.1
node uses-with pin 26 → 26.8.1
node uses-with minor 26.5.1 → 26.8.1
release-drafter/release-drafter action pin v7 → v7.7.0

Add the preset :preserveSemverRanges to your config if you don't want to pin your dependencies.


Release Notes

github/codeql-action (github/codeql-action)

v4.37.9

Compare Source

v4.37.8

Compare Source

No user facing changes.

v4.37.7

Compare Source

google/osv-scanner-action (google/osv-scanner-action)

v2.5.1

Compare Source

This updates OSV-Scanner to v2.3.8.

What's Changed
Fixes:
  • Preserve package namespaces when querying osv.dev API (fixes #​2978).
  • Re-add support for the OSV_SCANNER_LOCAL_DB_CACHE_DIRECTORY environment variable (fixes #​2983).
  • Fix local vulnerability matching (--offline-vulnerabilities) not working when network capability is NetworkOnline.

Full Changelog: google/osv-scanner-action@v2.5.0...v2.5.1

actions/node-versions (node)

v26.8.1: 26.8.1

Compare Source

Node.js 26.8.1


Configuration

📅 Schedule: (in timezone Australia/Sydney)

  • Branch creation
    • "before 6am on Monday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added dependencies Dependency updates renovate Created or managed by Renovate labels Aug 30, 2026
@renovate
renovate Bot enabled auto-merge (squash) August 30, 2026 14:54
@codecov

codecov Bot commented Aug 30, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

@renovate
renovate Bot merged commit 9c31788 into master Aug 30, 2026
43 of 44 checks passed
@renovate
renovate Bot deleted the renovate/github-actions branch August 30, 2026 15:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Dependency updates renovate Created or managed by Renovate

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants