Bump the github-actions group across 1 directory with 6 updates by dependabot[bot] · Pull Request #11528 · radius-project/radius

dependabot · 2026-03-26T22:47:09Z

Bumps the github-actions group with 6 updates in the / directory:

Package	From	To
azure/setup-helm	`4.3.1`	`5.0.0`
github/codeql-action	`4.33.0`	`4.34.1`
securego/gosec	`2.24.0`	`2.25.0`
LouisBrunner/checks-action	`2.0.0`	`3.0.0`
mikefarah/yq	`4.52.4`	`4.52.5`
codecov/codecov-action	`5.5.3`	`6.0.0`

Updates azure/setup-helm from 4.3.1 to 5.0.0

Release notes

Sourced from azure/setup-helm's releases.

v5.0.0

Changed

#259 Update Node.js runtime from node20 to node24

#263 Bump undici

#257 Bump undici and @actions/http-client

#256 Bump minimatch

#248 Bump the actions group with 2 updates

#247 Bump the actions group with 3 updates

#246 Bump @types/node from 25.0.2 to 25.0.3 in the actions group

#245 Bump the actions group with 3 updates

#243 Bump the actions group with 2 updates

#240 Bump prettier from 3.6.2 to 3.7.3 in the actions group

#229 Bump the actions group across 1 directory with 3 updates

#231 Bump js-yaml from 3.14.1 to 3.14.2

#234 Bump glob from 10.4.5 to 10.5.0

#225 Fix build error

#222 Bump @types/node from 24.7.2 to 24.8.1 in the actions group

#220 Bump the actions group across 1 directory with 4 updates

#216 Bump the actions group across 1 directory with 4 updates

#213 Bump the actions group with 2 updates

#211 Bump undici

#212 Bump jest from 30.0.5 to 30.1.2 in the actions group

#210 Bump @types/node from 24.2.1 to 24.3.0 in the actions group

Changelog

Sourced from azure/setup-helm's changelog.

Change Log

[5.0.0] - 2026-03-23

Changed

#259 Update Node.js runtime from node20 to node24

#263 Bump undici

#257 Bump undici and @actions/http-client

#256 Bump minimatch

#248 Bump the actions group with 2 updates

#247 Bump the actions group with 3 updates

#246 Bump @types/node from 25.0.2 to 25.0.3 in the actions group

#245 Bump the actions group with 3 updates

#243 Bump the actions group with 2 updates

#240 Bump prettier from 3.6.2 to 3.7.3 in the actions group

#229 Bump the actions group across 1 directory with 3 updates

#231 Bump js-yaml from 3.14.1 to 3.14.2

#234 Bump glob from 10.4.5 to 10.5.0

#225 Fix build error

#222 Bump @types/node from 24.7.2 to 24.8.1 in the actions group

#220 Bump the actions group across 1 directory with 4 updates

#216 Bump the actions group across 1 directory with 4 updates

#213 Bump the actions group with 2 updates

#211 Bump undici

#212 Bump jest from 30.0.5 to 30.1.2 in the actions group

#210 Bump @types/node from 24.2.1 to 24.3.0 in the actions group

[4.3.1] - 2025-08-12

Changed

#167 Pinning Action Dependencies for Security and Reliability

#181 Fix types, and update node version.

#191 chore(tests): Mock arch to make tests pass on arm host

#192 chore: remove unnecessary prebuild script

#203 Update helm version retrieval to use JSON output for latest version

#207 ci(workflows): update helm version to v3.18.4 and add matrix for tests

Added

#197 Add pre-commit hook

[4.3.0] - 2025-02-15

#152 feat: log when restoring from cache

#157 Dependencies Update

#137 Add dependabot

[4.2.0] - 2024-04-15

... (truncated)

Commits

dda3372 build
3894c84 chore(release): v5.0.0 (#265)
ca66f38 Update Node.js runtime from node20 to node24 (#259)
316ed5a Bump undici (#263)
bc9bc0c Bump undici and @actions/http-client (#257)
16e3094 Bump minimatch (#256)
6e42753 Bump actions/stale in /.github/workflows in the actions group (#255)
9651d9d Bump actions/checkout in /.github/workflows in the actions group (#251)
658bff9 Bump the actions group with 2 updates (#248)
331c814 Bump the actions group with 3 updates (#247)
Additional commits viewable in compare view

Updates github/codeql-action from 4.33.0 to 4.34.1

Release notes

Sourced from github/codeql-action's releases.

v4.34.1

Downgrade default CodeQL bundle version to 2.24.3 due to issues with a small percentage of Actions and JavaScript analyses. #3762

v4.34.0

Added an experimental change which disables TRAP caching when improved incremental analysis is enabled, since improved incremental analysis supersedes TRAP caching. This will improve performance and reduce Actions cache usage. We expect to roll this change out to everyone in March. #3569

We are rolling out improved incremental analysis to C/C++ analyses that use build mode none. We expect this rollout to be complete by the end of April 2026. #3584

Update default CodeQL bundle version to 2.25.0. #3585

Changelog

Sourced from github/codeql-action's changelog.

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

[UNRELEASED]

Reduced the minimum Git version required for improved incremental analysis from 2.38.0 to 2.11.0. #3767

4.34.1 - 20 Mar 2026

Downgrade default CodeQL bundle version to 2.24.3 due to issues with a small percentage of Actions and JavaScript analyses. #3762

4.34.0 - 20 Mar 2026

Added an experimental change which disables TRAP caching when improved incremental analysis is enabled, since improved incremental analysis supersedes TRAP caching. This will improve performance and reduce Actions cache usage. We expect to roll this change out to everyone in March. #3569

We are rolling out improved incremental analysis to C/C++ analyses that use build mode none. We expect this rollout to be complete by the end of April 2026. #3584

Update default CodeQL bundle version to 2.25.0. #3585

4.33.0 - 16 Mar 2026

Upcoming change: Starting April 2026, the CodeQL Action will skip collecting file coverage information on pull requests to improve analysis performance. File coverage information will still be computed on non-PR analyses. Pull request analyses will log a warning about this upcoming change. #3562

To opt out of this change:

Repositories owned by an organization: Create a custom repository property with the name github-codeql-file-coverage-on-prs and the type "True/false", then set this property to true in the repository's settings. For more information, see Managing custom properties for repositories in your organization. Alternatively, if you are using an advanced setup workflow, you can set the CODEQL_ACTION_FILE_COVERAGE_ON_PRS environment variable to true in your workflow.

User-owned repositories using default setup: Switch to an advanced setup workflow and set the CODEQL_ACTION_FILE_COVERAGE_ON_PRS environment variable to true in your workflow.

User-owned repositories using advanced setup: Set the CODEQL_ACTION_FILE_COVERAGE_ON_PRS environment variable to true in your workflow.

Fixed a bug which caused the CodeQL Action to fail loading repository properties if a "Multi select" repository property was configured for the repository. #3557

The CodeQL Action now loads custom repository properties on GitHub Enterprise Server, enabling the customization of features such as github-codeql-disable-overlay that was previously only available on GitHub.com. #3559

Once private package registries can be configured with OIDC-based authentication for organizations, the CodeQL Action will now be able to accept such configurations. #3563

Fixed the retry mechanism for database uploads. Previously this would fail with the error "Response body object should not be disturbed or locked". #3564

A warning is now emitted if the CodeQL Action detects a repository property whose name suggests that it relates to the CodeQL Action, but which is not one of the properties recognised by the current version of the CodeQL Action. #3570

4.32.6 - 05 Mar 2026

Update default CodeQL bundle version to 2.24.3. #3548

4.32.5 - 02 Mar 2026

Repositories owned by an organization can now set up the github-codeql-disable-overlay custom repository property to disable improved incremental analysis for CodeQL. First, create a custom repository property with the name github-codeql-disable-overlay and the type "True/false" in the organization's settings. Then in the repository's settings, set this property to true to disable improved incremental analysis. For more information, see Managing custom properties for repositories in your organization. This feature is not yet available on GitHub Enterprise Server. #3507

Added an experimental change so that when improved incremental analysis fails on a runner — potentially due to insufficient disk space — the failure is recorded in the Actions cache so that subsequent runs will automatically skip improved incremental analysis until something changes (e.g. a larger runner is provisioned or a new CodeQL version is released). We expect to roll this change out to everyone in March. #3487

The minimum memory check for improved incremental analysis is now skipped for CodeQL 2.24.3 and later, which has reduced peak RAM usage. #3515

Reduced log levels for best-effort private package registry connection check failures to reduce noise from workflow annotations. #3516

Added an experimental change which lowers the minimum disk space requirement for improved incremental analysis, enabling it to run on standard GitHub Actions runners. We expect to roll this change out to everyone in March. #3498

Added an experimental change which allows the start-proxy action to resolve the CodeQL CLI version from feature flags instead of using the linked CLI bundle version. We expect to roll this change out to everyone in March. #3512

The previously experimental changes from versions 4.32.3, 4.32.4, 3.32.3 and 3.32.4 are now enabled by default. #3503, #3504

4.32.4 - 20 Feb 2026

Update default CodeQL bundle version to 2.24.2. #3493

Added an experimental change which improves how certificates are generated for the authentication proxy that is used by the CodeQL Action in Default Setup when private package registries are configured. This is expected to generate more widely compatible certificates and should have no impact on analyses which are working correctly already. We expect to roll this change out to everyone in February. #3473

... (truncated)

Commits

3869755 Merge pull request #3763 from github/update-v4.34.1-095e0fe50
20e68ac Update changelog for v4.34.1
095e0fe Merge pull request #3762 from github/henrymercer/downgrade-default-bundle
47b94fe Add changelog note
51a1d69 Downgrade default bundle to codeql-bundle-v2.24.3
510cf73 Merge pull request #3589 from github/mergeback/v4.34.0-to-main-c6f93110
89f0c86 Rebuild
c3f90ba Update changelog and version after v4.34.0
c6f9311 Merge pull request #3588 from github/update-v4.34.0-30c555a52
eeb9b3f Update changelog for v4.34.0
Additional commits viewable in compare view

Updates securego/gosec from 2.24.0 to 2.25.0

Release notes

Sourced from securego/gosec's releases.

v2.25.0

Changelog

223e19b8856e00f02cc67804499a83f77e208f3c chore(deps): bump google.golang.org/grpc from 1.75.0 to 1.79.3 (#1617)

b23a9e534822ec656207d6d33116b9c48fcde6c7 fix: allow barry action to access secrets on fork PRs (#1616)

355cfa5a43916c57b7727eece120dd54665c1427 fix: reduce G117 false positives for custom marshalers and transformed values (#1614) (#1615)

744bfb5ef06e24230087a2470dd1eda8cf5ac48a Add barry security scanner as a step in the CI (#1612)

4fde15d2287caa7ba8480e14d3ccd49579d17f42 chore(deps): update all dependencies (#1611)

dec52c4101b534ac9bc8cf22ac051a65c90d75e0 fix: prevent taint analysis hang on packages with many CHA call graph edges (#1608) (#1610)

a0de8b6aab054e0fe97bec94d1f5e635dc5dc495 Add some skills for claude code to automate some tasks (#1609)

c2dfcec7f34bdbb3591c1dccd4aafde1d49c5bd6 Add G701-G706 rule-to-CWE mappings and CWE-117, CWE-918 entries (#1606)

8aec3f48a22ee5404185b01ac7667302ba73e51c fix: skip SSA analysis on ill-typed packages to prevent panic (#1607)

1ced32df147e2dd7bb9400023c246235bb32be92 Port G120 from SSA-based to taint analysis (fixes #1600, #1603) (#1605)

befce8de5da965121ad143b3c1eba58b0c3941bb fix(G118): eliminate false positive for package-level cancel variables (#1602)

b7b2c7b668f3f2bef8a8ae04d72f0eb60492322c feat: add G124 rule for insecure HTTP cookie configuration (#1599)

6e66a943db54eb8d235ac766fa2fd414d44e8821 feat: add G709 rule for unsafe deserialization of untrusted data (#1598)

e7ea2377aa2138d550e6d466ceef7a3164b4d7ea feat: add G708 rule for server-side template injection via text/template (#1597)

889546214c90564feb348e14fd1bf526295e0b2d fix(G118): eliminate false positive when cancel is called via struct field in a closure (#1596)

619ce2117e086b696f9357dc3422c18c2d0262bf Fix infinite recursion in interprocedural taint analysis (#1594)

0e0eb1792f3ced1edfe332daa388f088d4bd2f08 Fix G118 false positive when cancel is stored in returned struct field (#1593)

59a9da022f37d928b5c26c2b720e5f43f4a3e9b4 Fix G118 false positive on cancel called inside goroutine closure (#1592)

cbf46b8771cfe2f02d3f935469c7898198d901f4 fix(analyzer): per-package rule instantiation eliminates concurrent map crash (#1589)

c6c3ba865980cf3333c8bcaa93b4b9b7a4858bba chore(deps): update all dependencies (#1588)

c709ed8be30a01d52ef51a099f5da6fc23dd3e31 fix(G118): treat returned cancel func as called (fixes #1584) (#1585)

fa74dd7069d482a37b1207afbeffbfc7681a47f8 chore(go): update supported Go versions to 1.25.8 and 1.26.1 (#1583)

cd1f29ec710ed24a305edf5908f52240addb1811 Update the README with the correct version of the Github action for gosec (#1582)

5887aee36f8b982ecb71885fde827ec0e84d98a2 chore(deps): update all dependencies (#1579)

6641fcf966593bf52ed426aa262839b340d56375 Fix G115 false positives for guarded int64-to-byte conversions (#1578)

3c9c3da6924bb1daeea428e28ec9ac5fa5a09c25 Update the container image migration notice (#1576)

973e94e8fc181de08ab86b212e6475221e777069 chore(action): bump gosec to 2.24.7 (#1575)

v2.24.7

Changelog

bb17e422fc34bf4c0a2e5cab9d07dc45a68c040c Ignore nosec comments in action integration workflow to generate some warnings (#1573)

e1502ad21653d1c6717e33f1221c3ce2d5c8581f Add a workflow for action integration test (#1571)

f8691bd77bab5430ccb538e6f253275e82577afc fix(sarif): avoid invalid null relationships in SARIF output (#1569)

ade1d0e0a04ec8ae98da98614d42524621d40df2 chore: migrate gosec container image references to GHCR (#1567)

v2.24.6

Changelog

88835e86bba381290c2f60a1c73610995b1502eb Update gorelease to use the latest cosign bundle argument (#1565)

Commits

223e19b chore(deps): bump google.golang.org/grpc from 1.75.0 to 1.79.3 (#1617)
b23a9e5 fix: allow barry action to access secrets on fork PRs (#1616)
355cfa5 fix: reduce G117 false positives for custom marshalers and transformed values...
744bfb5 Add barry security scanner as a step in the CI (#1612)
4fde15d chore(deps): update all dependencies (#1611)
dec52c4 fix: prevent taint analysis hang on packages with many CHA call graph edges (...
a0de8b6 Add some skills for claude code to automate some tasks (#1609)
c2dfcec Add G701-G706 rule-to-CWE mappings and CWE-117, CWE-918 entries (#1606)
8aec3f4 fix: skip SSA analysis on ill-typed packages to prevent panic (#1607)
1ced32d Port G120 from SSA-based to taint analysis (fixes #1600, #1603) (#1605)
Additional commits viewable in compare view

Updates LouisBrunner/checks-action from 2.0.0 to 3.0.0

Release notes

Sourced from LouisBrunner/checks-action's releases.

v3.0.0

What's Changed

feat: update to node24 + migrate to bun by @LouisBrunner in LouisBrunner/checks-action#385

Full Changelog: LouisBrunner/checks-action@v2...v3.0.0

Commits

dfcbcf8 feat: update to node24 + migrate to bun (#385)
273ee42 chore(deps-dev): Bump flatted (#383)
7d5f016 chore(deps-dev): Bump minimatch (#382)
0133500 chore(deps-dev): Bump the minor-updates group with 2 updates (#378)
8bfc36e chore(deps-dev): Bump the minor-updates group with 2 updates (#375)
8343a1e chore(deps-dev): Bump the minor-updates group with 2 updates (#373)
edd1da9 chore(deps): Bump actions/checkout from 5 to 6 in the actions-deps group (#371)
8750740 chore(deps-dev): Bump js-yaml (#370)
07d9a1b ci: group dependabot updates (#367)
70f22f2 chore(deps-dev): Bump typescript from 5.9.2 to 5.9.3 (#365)
Additional commits viewable in compare view

Updates mikefarah/yq from 4.52.4 to 4.52.5

Release notes

Sourced from mikefarah/yq's releases.

v4.52.5

Fix: reset TOML decoder state between files (#2634) thanks @terminalchai

Fix: preserve original filename when using --front-matter (#2613) thanks @cobyfrombrooklyn-bot

Fix typo in filename (#2611) thanks @alexandear

Bumped dependencies

Changelog

Sourced from mikefarah/yq's changelog.

4.52.5:

Fix: reset TOML decoder state between files (#2634) thanks @terminalchai

Fix: preserve original filename when using --front-matter (#2613) thanks @cobyfrombrooklyn-bot

Fix typo in filename (#2611) thanks @alexandear

Bumped dependencies

4.52.4:

Dropping windows/arm - no longer supported in cross-compile

4.52.3:

Fixing comments in TOML arrays (#2592)

Bumped dependencies

4.52.2:

Fixed bad instructions file breaking go-install (#2587) Thanks @theyoprst

Fixed TOML table scope after comments (#2588) Thanks @tomers

Multiply uses a readonly context (#2558)

Fixed merge globbing wildcards in keys (#2564)

Fixing TOML subarray parsing issue (#2581)

4.52.1:

TOML encoder support - you can now roundtrip! #1364

Parent now supports negative indices, and added a 'root' command for referencing the top level document

Fixed scalar encoding for HCL

Add --yaml-compact-seq-indent / -c flag for compact sequence indentation (#2583) Thanks @jfenal

Add symlink check to file rename util (#2576) Thanks @Elias-elastisys

Powershell fixed default command used for __completeNoDesc alias (#2568) Thanks @teejaded

Unwrap scalars in shell output mode. (#2548) Thanks @flintwinters

Added K8S KYAML output format support (#2560) Thanks @robbat2

Bumped dependencies

Special shout out to @ccoVeille for reviewing my PRs!

4.50.1:

Added HCL support!

Fixing handling of CRLF #2352

Bumped dependencies

4.49.2:

Fixing escape character bugs 😓 #2517

Fixing snap release pipeline #2518 Thanks @aalexjo

4.49.1:

Added --security flags to disable env and file ops #2515

Fixing TOML ArrayTable parsing issues #1758

Fixing parsing of escaped characters #2506

4.48.2:

... (truncated)

Commits

0f4fb8d Bumping version
80c319a Fixing tests with latest linting rules
b25ae78 fix: reset TOML decoder state between files (#2634)
b151522 fix: preserve original filename when using --front-matter (#2613)
c5cbf97 Bump golang.org/x/net from 0.50.0 to 0.52.0 (#2628)
b5cb9a2 Bump github.com/zclconf/go-cty from 1.17.0 to 1.18.0 (#2616)
133ba76 Bump golang.org/x/mod from 0.33.0 to 0.34.0 (#2629)
5db3dcf Bump golang.org/x/text from 0.34.0 to 0.35.0 (#2630)
4c14817 Fix typo in filename (#2611)
4df6e46 Bump docker/setup-buildx-action from 3 to 4 (#2627)
Additional commits viewable in compare view

Updates codecov/codecov-action from 5.5.3 to 6.0.0

Release notes

Sourced from codecov/codecov-action's releases.

v6.0.0

⚠️ This version introduces support for node24 which make cause breaking changes for systems that do not currently support node24. ⚠️

What's Changed

Revert "Revert "build(deps): bump actions/github-script from 7.0.1 to 8.0.0"" by @thomasrockhu-codecov in codecov/codecov-action#1929

Th/6.0.0 by @thomasrockhu-codecov in codecov/codecov-action#1928

Full Changelog: codecov/codecov-action@v5.5.4...v6.0.0

v5.5.4

This is a mirror of v5.5.2. v6 will be released which requires node24

What's Changed

Revert "build(deps): bump actions/github-script from 7.0.1 to 8.0.0" by @thomasrockhu-codecov in codecov/codecov-action#1926

chore(release): 5.5.4 by @thomasrockhu-codecov in codecov/codecov-action#1927

Full Changelog: codecov/codecov-action@v5.5.3...v5.5.4

Changelog

Sourced from codecov/codecov-action's changelog.

v5.5.2

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.5.1..v5.5.2

v5.5.1

What's Changed

fix: overwrite pr number on fork by @thomasrockhu-codecov in codecov/codecov-action#1871

build(deps): bump actions/checkout from 4.2.2 to 5.0.0 by @app/dependabot in codecov/codecov-action#1868

build(deps): bump github/codeql-action from 3.29.9 to 3.29.11 by @app/dependabot in codecov/codecov-action#1867

fix: update to use local app/ dir by @thomasrockhu-codecov in codecov/codecov-action#1872

docs: fix typo in README by @datalater in codecov/codecov-action#1866

Document a codecov-cli version reference example by @webknjaz in codecov/codecov-action#1774

build(deps): bump github/codeql-action from 3.28.18 to 3.29.9 by @app/dependabot in codecov/codecov-action#1861

build(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2 by @app/dependabot in codecov/codecov-action#1833

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.5.0..v5.5.1

v5.5.0

What's Changed

feat: upgrade wrapper to 0.2.4 by @jviall in codecov/codecov-action#1864

Pin actions/github-script by Git SHA by @martincostello in codecov/codecov-action#1859

fix: check reqs exist by @joseph-sentry in codecov/codecov-action#1835

fix: Typo in README by @spalmurray in codecov/codecov-action#1838

docs: Refine OIDC docs by @spalmurray in codecov/codecov-action#1837

build(deps): bump github/codeql-action from 3.28.17 to 3.28.18 by @app/dependabot in codecov/codecov-action#1829

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.3..v5.5.0

v5.4.3

What's Changed

build(deps): bump github/codeql-action from 3.28.13 to 3.28.17 by @app/dependabot in codecov/codecov-action#1822

fix: OIDC on forks by @joseph-sentry in codecov/codecov-action#1823

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.2..v5.4.3

v5.4.2

... (truncated)

Commits

57e3a13 Th/6.0.0 (#1928)
f67d33d Revert "Revert "build(deps): bump actions/github-script from 7.0.1 to 8.0.0""...
75cd116 chore(release): 5.5.4 (#1927)
87d39f4 Revert "build(deps): bump actions/github-script from 7.0.1 to 8.0.0" (#1926)
See full diff in compare view

Most Recent Ignore Conditions Applied to This Pull Request

Dependency Name	Ignore Conditions
securego/gosec	[>= 2.24.7.a, < 2.24.8]
securego/gosec	[< 2.25, > 2.24.0]

github-actions · 2026-03-26T23:02:09Z

Unit Tests

2 files 415 suites 6m 37s ⏱️
4 862 tests 4 860 ✅ 2 💤 0 ❌
5 764 runs 5 762 ✅ 2 💤 0 ❌

Results for commit d547676.

♻️ This comment has been updated with latest results.

brooke-hamilton · 2026-03-26T23:55:40Z

@dependabot rebase

brooke-hamilton · 2026-03-27T01:33:37Z

@dependabot rebase

…updates Bumps the github-actions group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [azure/setup-helm](https://github.com/azure/setup-helm) | `4.3.1` | `5.0.0` | | [github/codeql-action](https://github.com/github/codeql-action) | `4.33.0` | `4.34.1` | | [securego/gosec](https://github.com/securego/gosec) | `2.24.0` | `2.25.0` | | [LouisBrunner/checks-action](https://github.com/louisbrunner/checks-action) | `2.0.0` | `3.0.0` | | [mikefarah/yq](https://github.com/mikefarah/yq) | `4.52.4` | `4.52.5` | | [codecov/codecov-action](https://github.com/codecov/codecov-action) | `5.5.3` | `6.0.0` | Updates `azure/setup-helm` from 4.3.1 to 5.0.0 - [Release notes](https://github.com/azure/setup-helm/releases) - [Changelog](https://github.com/Azure/setup-helm/blob/main/CHANGELOG.md) - [Commits](Azure/setup-helm@1a275c3...dda3372) Updates `github/codeql-action` from 4.33.0 to 4.34.1 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@b1bff81...3869755) Updates `securego/gosec` from 2.24.0 to 2.25.0 - [Release notes](https://github.com/securego/gosec/releases) - [Commits](securego/gosec@271492b...223e19b) Updates `LouisBrunner/checks-action` from 2.0.0 to 3.0.0 - [Release notes](https://github.com/louisbrunner/checks-action/releases) - [Commits](LouisBrunner/checks-action@6b626ff...dfcbcf8) Updates `mikefarah/yq` from 4.52.4 to 4.52.5 - [Release notes](https://github.com/mikefarah/yq/releases) - [Changelog](https://github.com/mikefarah/yq/blob/master/release_notes.txt) - [Commits](mikefarah/yq@5a7e72a...0f4fb8d) Updates `codecov/codecov-action` from 5.5.3 to 6.0.0 - [Release notes](https://github.com/codecov/codecov-action/releases) - [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md) - [Commits](codecov/codecov-action@1af5884...57e3a13) --- updated-dependencies: - dependency-name: azure/setup-helm dependency-version: 5.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: github/codeql-action dependency-version: 4.34.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: securego/gosec dependency-version: 2.25.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: LouisBrunner/checks-action dependency-version: 3.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: mikefarah/yq dependency-version: 4.52.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: codecov/codecov-action dependency-version: 6.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com>

radius-functional-tests · 2026-03-27T01:43:47Z

Radius functional test overview

🔍 Go to test action run

Click here to see the test run details

Name	Value
Repository	radius-project/radius
Commit ref	`d547676`
Unique ID	funca289bb12f7
Image tag	pr-funca289bb12f7

gotestsum 1.13.0
KinD: v0.29.0
Dapr: 1.14.4
Azure KeyVault CSI driver: 1.4.2
Azure Workload identity webhook: 1.3.0
Bicep recipe location ghcr.io/radius-project/dev/test/testrecipes/test-bicep-recipes/<name>:pr-funca289bb12f7
Terraform recipe location http://tf-module-server.radius-test-tf-module-server.svc.cluster.local/<name>.zip (in cluster)
applications-rp test image location: ghcr.io/radius-project/dev/applications-rp:pr-funca289bb12f7
dynamic-rp test image location: ghcr.io/radius-project/dev/dynamic-rp:pr-funca289bb12f7
controller test image location: ghcr.io/radius-project/dev/controller:pr-funca289bb12f7
ucp test image location: ghcr.io/radius-project/dev/ucpd:pr-funca289bb12f7
deployment-engine test image location: ghcr.io/radius-project/deployment-engine:latest

Test Status

⌛ Building Radius and pushing container images for functional tests...
✅ Container images build succeeded
⌛ Publishing Bicep Recipes for functional tests...
✅ Recipe publishing succeeded
⌛ Starting corerp-cloud functional tests...
⌛ Starting ucp-cloud functional tests...
✅ ucp-cloud functional tests succeeded
✅ corerp-cloud functional tests succeeded

dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Mar 26, 2026

Copilot AI review requested due to automatic review settings March 26, 2026 22:47

dependabot bot requested review from a team as code owners March 26, 2026 22:47

dependabot bot added the dependencies Pull requests that update a dependency file label Mar 26, 2026

dependabot bot review requested due to automatic review settings March 26, 2026 22:47

dependabot bot added the github_actions Pull requests that update GitHub Actions code label Mar 26, 2026

brooke-hamilton changed the title ~~build(deps): bump the github-actions group across 1 directory with 6 updates~~ Bump the github-actions group across 1 directory with 6 updates Mar 26, 2026

dependabot bot changed the title ~~Bump the github-actions group across 1 directory with 6 updates~~ build(deps): bump the github-actions group across 1 directory with 6 updates Mar 27, 2026

Copilot AI review requested due to automatic review settings March 27, 2026 00:04

dependabot bot force-pushed the dependabot/github_actions/github-actions-227546fba5 branch from 652beb9 to c6b4f84 Compare March 27, 2026 00:04

dependabot bot review requested due to automatic review settings March 27, 2026 00:04

DariuszPorowski approved these changes Mar 27, 2026

View reviewed changes

brooke-hamilton changed the title ~~build(deps): bump the github-actions group across 1 directory with 6 updates~~ Bump the github-actions group across 1 directory with 6 updates Mar 27, 2026

dependabot bot changed the title ~~Bump the github-actions group across 1 directory with 6 updates~~ build(deps): bump the github-actions group across 1 directory with 6 updates Mar 27, 2026

Copilot AI review requested due to automatic review settings March 27, 2026 01:42

dependabot bot force-pushed the dependabot/github_actions/github-actions-227546fba5 branch from c6b4f84 to d547676 Compare March 27, 2026 01:42

dependabot bot review requested due to automatic review settings March 27, 2026 01:42

brooke-hamilton changed the title ~~build(deps): bump the github-actions group across 1 directory with 6 updates~~ Bump the github-actions group across 1 directory with 6 updates Mar 27, 2026

brooke-hamilton approved these changes Mar 27, 2026

View reviewed changes

brooke-hamilton merged commit de4ac2d into main Mar 27, 2026
55 checks passed

brooke-hamilton deleted the dependabot/github_actions/github-actions-227546fba5 branch March 27, 2026 02:17

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the github-actions group across 1 directory with 6 updates#11528

Bump the github-actions group across 1 directory with 6 updates#11528
brooke-hamilton merged 1 commit intomainfrom
dependabot/github_actions/github-actions-227546fba5

dependabot bot commented on behalf of github Mar 26, 2026 •

edited

Loading

Uh oh!

github-actions bot commented Mar 26, 2026 •

edited

Loading

Uh oh!

brooke-hamilton commented Mar 26, 2026

Uh oh!

brooke-hamilton commented Mar 27, 2026

Uh oh!

radius-functional-tests bot commented Mar 27, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

dependabot bot commented on behalf of github Mar 26, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v5.0.0

Changed

Change Log

[5.0.0] - 2026-03-23

Changed

[4.3.1] - 2025-08-12

Changed

Added

[4.3.0] - 2025-02-15

[4.2.0] - 2024-04-15

v4.34.1

v4.34.0

CodeQL Action Changelog

[UNRELEASED]

4.34.1 - 20 Mar 2026

4.34.0 - 20 Mar 2026

4.33.0 - 16 Mar 2026

4.32.6 - 05 Mar 2026

4.32.5 - 02 Mar 2026

4.32.4 - 20 Feb 2026

v2.25.0

Changelog

v2.24.7

Changelog

v2.24.6

Changelog

v3.0.0

What's Changed

v4.52.5

v6.0.0

⚠️ This version introduces support for node24 which make cause breaking changes for systems that do not currently support node24. ⚠️

What's Changed

v5.5.4

What's Changed

v5.5.2

What's Changed

v5.5.1

What's Changed

v5.5.0

What's Changed

v5.4.3

What's Changed

v5.4.2

Uh oh!

github-actions bot commented Mar 26, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Unit Tests

Uh oh!

brooke-hamilton commented Mar 26, 2026

Uh oh!

brooke-hamilton commented Mar 27, 2026

Uh oh!

radius-functional-tests bot commented Mar 27, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Radius functional test overview

Test Status

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

dependabot bot commented on behalf of github Mar 26, 2026 •

edited

Loading

github-actions bot commented Mar 26, 2026 •

edited

Loading

radius-functional-tests bot commented Mar 27, 2026 •

edited

Loading