chore: bump the actions group across 1 directory with 10 updates by dependabot[bot] · Pull Request #143 · stella/regex-set

dependabot · 2026-08-13T10:43:34Z

Bumps the actions group with 10 updates in the / directory:

Package	From	To
dorny/paths-filter	`4.0.2`	`4.0.3`
stella/.github/.github/actions/changeset-policy	`1.6.0`	`1.7.0`
stella/.github/.github/workflows/rust-napi-ci.yml	`90c81b47c5fee6dc88e67d432cc6951e88a6724e`	`80873456a2af7243e09228a08456250d1e938972`
stella/.github/.github/workflows/cla.yml	`44c8092f11c2f454916c320aa7d2144c173329d8`	`80873456a2af7243e09228a08456250d1e938972`
stella/.github/.github/workflows/provenance-update.yml	`cbcba03b6492bbc8a29da0bf2416b01431c4d90a`	`80873456a2af7243e09228a08456250d1e938972`
stella/.github/.github/workflows/changeset-release-pr.yml	`1.6.0`	`1.7.0`
stella/.github/.github/workflows/npm-version-preflight.yml	`1cf2d8c99d478e37c653dbe25816bfe5b26157ce`	`80873456a2af7243e09228a08456250d1e938972`
Swatinem/rust-cache	`e18b497796c12c097a38f9edb9d0641fb99eee32`	`258712b0b7b1ddf8bddc9fc3b0faca682b2736c3`
actions/attest	`4.2.1`	`4.2.2`
stella/.github/.github/workflows/npm-version-finalize.yml	`1cf2d8c99d478e37c653dbe25816bfe5b26157ce`	`80873456a2af7243e09228a08456250d1e938972`

Updates dorny/paths-filter from 4.0.2 to 4.0.3

Release notes

Sourced from dorny/paths-filter's releases.

v4.0.3

What's Changed

Update Outputs in readme to account for the 'every' predicate-quantifier by @hintron in dorny/paths-filter#247

fix: scope base-ignored warning to API path by @saschabratton in dorny/paths-filter#319

docs: add contents permission to PR example by @134130 in dorny/paths-filter#248

feat: add 'some-with-excludes' predicate quantifier by @arxeiss in dorny/paths-filter#322

Document safe handling of file list outputs in workflows by @dorny in dorny/paths-filter#326

Security

Escape multi-line filenames in list-files shell and csv output] by @ken-matsui and @tjswlsgg in https://github.com/advisories/GHSA-7hc6-8hq5-9q2m

New Contributors

@hintron made their first contribution in dorny/paths-filter#247

@134130 made their first contribution in dorny/paths-filter#248

@arxeiss made their first contribution in dorny/paths-filter#322

Full Changelog: dorny/paths-filter@v4...v4.0.3

Changelog

Sourced from dorny/paths-filter's changelog.

Changelog

v4.0.3

Document safe handling of file list outputs in workflows

Escape multi-line filenames in list-files shell and csv output

Add 'some-with-excludes' predicate quantifier

Add contents permission to PR example

Scope base-ignored warning to API path

Update outputs in readme to account for the 'every' predicate-quantifier

v4.0.2

Work around git dubious ownership errors in container jobs

Use rev-parse instead of branch --show-current for older git compat

Fix warning message

v4.0.1

Support merge queue

v4.0.0

Update action runtime to node24

v3.0.4

Escape multi-line filenames in list-files shell and csv output

v3.0.3

Add missing predicate-quantifier

v3.0.2

Add config parameter for predicate quantifier

v3.0.1

Compare base and ref when token is empty

v3.0.0

Update to Node.js 20

Update all dependencies

v2.11.1

Update @actions/core to v1.10.0 - Fixes warning about deprecated set-output

Document need for pull-requests: read permission

Updating to actions/checkout@v3

v2.11.0

Set list-files input parameter as not required

Update Node.js

Fix incorrect handling of Unicode characters in exec()

Use Octokit pagination

Updates real world links

v2.10.2

... (truncated)

Commits

ceb8a2b Update CHANGELOG.md for v4.0.3 and v3.0.4 (#327)
ef09b88 Document safe handling of file list outputs in workflows (#326)
44adc5b Merge commit from fork
4711b7a feat: add 'some-with-excludes' predicate quantifier (#322)
93c889f fix: escape multi-line filenames in list-files shell and csv output
b41dfa9 docs: add contents permission to PR example (#248)
9af6e5a fix: scope base-ignored warning to API path (#319)
cae9006 docs: update outputs in readme to account for the 'every' predicate-quantifie...
See full diff in compare view

Updates stella/.github/.github/actions/changeset-policy from 1.6.0 to 1.7.0

Commits

5628b97 fix(release): tolerate a release repeated across an offset page boundary (#71)
4011a76 chore(ci): allow test-prefixed PR titles (#70)
76d4e3a chore: split the label manifest into baseline and per-repo overlays (#69)
859a61e feat: add setup-bun-cached composite action (#68)
b96f83d chore: drop unused labels and correct the table description (#67)
63738e7 chore: make labels.yml enforceable and reconcile it with reality (#66)
639a344 docs: add a code of conduct (#65)
9a6f0b6 chore: bump the actions group across 1 directory with 2 updates (#50)
See full diff in compare view

Updates stella/.github/.github/workflows/rust-napi-ci.yml from 90c81b47c5fee6dc88e67d432cc6951e88a6724e to 80873456a2af7243e09228a08456250d1e938972

Commits

8087345 fix: trust runner CAs in CLA checks (#74)
5dafee1 fix: let release PR mutations finish (#73)
2a7a304 fix: prevent duplicate changeset release PRs (#72)
5628b97 fix(release): tolerate a release repeated across an offset page boundary (#71)
4011a76 chore(ci): allow test-prefixed PR titles (#70)
76d4e3a chore: split the label manifest into baseline and per-repo overlays (#69)
859a61e feat: add setup-bun-cached composite action (#68)
b96f83d chore: drop unused labels and correct the table description (#67)
63738e7 chore: make labels.yml enforceable and reconcile it with reality (#66)
639a344 docs: add a code of conduct (#65)
Additional commits viewable in compare view

Updates stella/.github/.github/workflows/cla.yml from 44c8092f11c2f454916c320aa7d2144c173329d8 to 80873456a2af7243e09228a08456250d1e938972

Commits

8087345 fix: trust runner CAs in CLA checks (#74)
5dafee1 fix: let release PR mutations finish (#73)
2a7a304 fix: prevent duplicate changeset release PRs (#72)
5628b97 fix(release): tolerate a release repeated across an offset page boundary (#71)
4011a76 chore(ci): allow test-prefixed PR titles (#70)
76d4e3a chore: split the label manifest into baseline and per-repo overlays (#69)
859a61e feat: add setup-bun-cached composite action (#68)
b96f83d chore: drop unused labels and correct the table description (#67)
63738e7 chore: make labels.yml enforceable and reconcile it with reality (#66)
639a344 docs: add a code of conduct (#65)
Additional commits viewable in compare view

Updates stella/.github/.github/workflows/provenance-update.yml from cbcba03b6492bbc8a29da0bf2416b01431c4d90a to 80873456a2af7243e09228a08456250d1e938972

Commits

8087345 fix: trust runner CAs in CLA checks (#74)
5dafee1 fix: let release PR mutations finish (#73)
2a7a304 fix: prevent duplicate changeset release PRs (#72)
5628b97 fix(release): tolerate a release repeated across an offset page boundary (#71)
4011a76 chore(ci): allow test-prefixed PR titles (#70)
76d4e3a chore: split the label manifest into baseline and per-repo overlays (#69)
859a61e feat: add setup-bun-cached composite action (#68)
b96f83d chore: drop unused labels and correct the table description (#67)
63738e7 chore: make labels.yml enforceable and reconcile it with reality (#66)
639a344 docs: add a code of conduct (#65)
Additional commits viewable in compare view

Updates stella/.github/.github/workflows/changeset-release-pr.yml from 1.6.0 to 1.7.0

Commits

5628b97 fix(release): tolerate a release repeated across an offset page boundary (#71)
4011a76 chore(ci): allow test-prefixed PR titles (#70)
76d4e3a chore: split the label manifest into baseline and per-repo overlays (#69)
859a61e feat: add setup-bun-cached composite action (#68)
b96f83d chore: drop unused labels and correct the table description (#67)
63738e7 chore: make labels.yml enforceable and reconcile it with reality (#66)
639a344 docs: add a code of conduct (#65)
9a6f0b6 chore: bump the actions group across 1 directory with 2 updates (#50)
See full diff in compare view

Updates stella/.github/.github/workflows/npm-version-preflight.yml from 1cf2d8c99d478e37c653dbe25816bfe5b26157ce to 80873456a2af7243e09228a08456250d1e938972

Commits

8087345 fix: trust runner CAs in CLA checks (#74)
5dafee1 fix: let release PR mutations finish (#73)
2a7a304 fix: prevent duplicate changeset release PRs (#72)
5628b97 fix(release): tolerate a release repeated across an offset page boundary (#71)
4011a76 chore(ci): allow test-prefixed PR titles (#70)
76d4e3a chore: split the label manifest into baseline and per-repo overlays (#69)
859a61e feat: add setup-bun-cached composite action (#68)
b96f83d chore: drop unused labels and correct the table description (#67)
63738e7 chore: make labels.yml enforceable and reconcile it with reality (#66)
639a344 docs: add a code of conduct (#65)
Additional commits viewable in compare view

Updates Swatinem/rust-cache from e18b497796c12c097a38f9edb9d0641fb99eee32 to 258712b0b7b1ddf8bddc9fc3b0faca682b2736c3

Changelog

Sourced from Swatinem/rust-cache's changelog.

Changelog

2.9.2

Fix credentials.toml cleanup

Improvements to cleanup, preserving more valid targets

Improvements to cargo install handling

Correctly sort/dedupe Rust versions

2.9.1

Fix regression in hash calculation

2.9.0

Update to node24

Support running from within a nix shell

Consider all installed toolchains for cache key

Use case-insensitive comparison to determine exact cache hit

2.8.2

Don't overwrite env for cargo-metadata call

2.8.1

Set empty CARGO_ENCODED_RUSTFLAGS when retrieving metadata

Various dependency updates

2.8.0

Add support for warpbuild cache provider

Add new cache-workspace-crates feature

2.7.8

Include CPU arch in the cache key

2.7.7

Also cache cargo install metadata

2.7.6

Allow opting out of caching $CARGO_HOME/bin

Add runner OS in cache key

Adds an option to do lookup-only of the cache

2.7.5

... (truncated)

Commits

258712b fix: stop cleanup timestamp pruning after the first entry (#377)
a45951f Merge pull request #373 from Swatinem/dependabot/github_actions/actions-420be...
b882611 Bump the actions group with 2 updates
6323deb 2.9.2
b16e8d7 bump rollup and rebuild
3bf42ac invert target/profile check in cleanup
6e5b278 correctly sort and dedupe Rust versions
5adc05f Bump the actions group across 1 directory with 3 updates (#368)
66b1e95 fix: support Cargo V2 build dir layout (#371)
72d126e Merge pull request #367 from Swatinem/dependabot/npm_and_yarn/dev-patch-2b495...
Additional commits viewable in compare view

Updates actions/attest from 4.2.1 to 4.2.2

Release notes

Sourced from actions/attest's releases.

v4.2.2

What's Changed

Bump @sigstore/oci from 0.7.1 to 0.7.2 by @bdehamer in actions/attest#469

Bump brace-expansion by @dependabot[bot] in actions/attest#468

Bump ip-address from 10.2.0 to 10.4.0 by @dependabot[bot] in actions/attest#467

Full Changelog: actions/attest@v4.2.1...v4.2.2

Commits

1e69f48 Bump ip-address from 10.2.0 to 10.4.0 (#467)
02787ce Bump brace-expansion (#468)
98ac037 bump @sigstore/oci from 0.7.1 to 0.7.2 (#469)
See full diff in compare view

Updates stella/.github/.github/workflows/npm-version-finalize.yml from 1cf2d8c99d478e37c653dbe25816bfe5b26157ce to 80873456a2af7243e09228a08456250d1e938972

Commits

8087345 fix: trust runner CAs in CLA checks (#74)
5dafee1 fix: let release PR mutations finish (#73)
2a7a304 fix: prevent duplicate changeset release PRs (#72)
5628b97 fix(release): tolerate a release repeated across an offset page boundary (#71)
4011a76 chore(ci): allow test-prefixed PR titles (#70)
76d4e3a chore: split the label manifest into baseline and per-repo overlays (#69)
859a61e feat: add setup-bun-cached composite action (#68)
b96f83d chore: drop unused labels and correct the table description (#67)
63738e7 chore: make labels.yml enforceable and reconcile it with reality (#66)
639a344 docs: add a code of conduct (#65)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the actions group with 10 updates in the / directory: | Package | From | To | | --- | --- | --- | | [dorny/paths-filter](https://github.com/dorny/paths-filter) | `4.0.2` | `4.0.3` | | [stella/.github/.github/actions/changeset-policy](https://github.com/stella/.github) | `1.6.0` | `1.7.0` | | [stella/.github/.github/workflows/rust-napi-ci.yml](https://github.com/stella/.github) | `90c81b47c5fee6dc88e67d432cc6951e88a6724e` | `80873456a2af7243e09228a08456250d1e938972` | | [stella/.github/.github/workflows/cla.yml](https://github.com/stella/.github) | `44c8092f11c2f454916c320aa7d2144c173329d8` | `80873456a2af7243e09228a08456250d1e938972` | | [stella/.github/.github/workflows/provenance-update.yml](https://github.com/stella/.github) | `cbcba03b6492bbc8a29da0bf2416b01431c4d90a` | `80873456a2af7243e09228a08456250d1e938972` | | [stella/.github/.github/workflows/changeset-release-pr.yml](https://github.com/stella/.github) | `1.6.0` | `1.7.0` | | [stella/.github/.github/workflows/npm-version-preflight.yml](https://github.com/stella/.github) | `1cf2d8c99d478e37c653dbe25816bfe5b26157ce` | `80873456a2af7243e09228a08456250d1e938972` | | [Swatinem/rust-cache](https://github.com/swatinem/rust-cache) | `e18b497796c12c097a38f9edb9d0641fb99eee32` | `258712b0b7b1ddf8bddc9fc3b0faca682b2736c3` | | [actions/attest](https://github.com/actions/attest) | `4.2.1` | `4.2.2` | | [stella/.github/.github/workflows/npm-version-finalize.yml](https://github.com/stella/.github) | `1cf2d8c99d478e37c653dbe25816bfe5b26157ce` | `80873456a2af7243e09228a08456250d1e938972` | Updates `dorny/paths-filter` from 4.0.2 to 4.0.3 - [Release notes](https://github.com/dorny/paths-filter/releases) - [Changelog](https://github.com/dorny/paths-filter/blob/master/CHANGELOG.md) - [Commits](dorny/paths-filter@7b450ff...ceb8a2b) Updates `stella/.github/.github/actions/changeset-policy` from 1.6.0 to 1.7.0 - [Release notes](https://github.com/stella/.github/releases) - [Commits](stella/.github@b8c0884...5628b97) Updates `stella/.github/.github/workflows/rust-napi-ci.yml` from 90c81b47c5fee6dc88e67d432cc6951e88a6724e to 80873456a2af7243e09228a08456250d1e938972 - [Release notes](https://github.com/stella/.github/releases) - [Commits](stella/.github@90c81b4...8087345) Updates `stella/.github/.github/workflows/cla.yml` from 44c8092f11c2f454916c320aa7d2144c173329d8 to 80873456a2af7243e09228a08456250d1e938972 - [Release notes](https://github.com/stella/.github/releases) - [Commits](stella/.github@44c8092...8087345) Updates `stella/.github/.github/workflows/provenance-update.yml` from cbcba03b6492bbc8a29da0bf2416b01431c4d90a to 80873456a2af7243e09228a08456250d1e938972 - [Release notes](https://github.com/stella/.github/releases) - [Commits](stella/.github@cbcba03...8087345) Updates `stella/.github/.github/workflows/changeset-release-pr.yml` from 1.6.0 to 1.7.0 - [Release notes](https://github.com/stella/.github/releases) - [Commits](stella/.github@b8c0884...5628b97) Updates `stella/.github/.github/workflows/npm-version-preflight.yml` from 1cf2d8c99d478e37c653dbe25816bfe5b26157ce to 80873456a2af7243e09228a08456250d1e938972 - [Release notes](https://github.com/stella/.github/releases) - [Commits](stella/.github@1cf2d8c...8087345) Updates `Swatinem/rust-cache` from e18b497796c12c097a38f9edb9d0641fb99eee32 to 258712b0b7b1ddf8bddc9fc3b0faca682b2736c3 - [Release notes](https://github.com/swatinem/rust-cache/releases) - [Changelog](https://github.com/Swatinem/rust-cache/blob/master/CHANGELOG.md) - [Commits](Swatinem/rust-cache@e18b497...258712b) Updates `actions/attest` from 4.2.1 to 4.2.2 - [Release notes](https://github.com/actions/attest/releases) - [Changelog](https://github.com/actions/attest/blob/main/RELEASE.md) - [Commits](actions/attest@508db95...1e69f48) Updates `stella/.github/.github/workflows/npm-version-finalize.yml` from 1cf2d8c99d478e37c653dbe25816bfe5b26157ce to 80873456a2af7243e09228a08456250d1e938972 - [Release notes](https://github.com/stella/.github/releases) - [Commits](stella/.github@1cf2d8c...8087345) --- updated-dependencies: - dependency-name: dorny/paths-filter dependency-version: 4.0.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: stella/.github/.github/actions/changeset-policy dependency-version: 1.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: stella/.github/.github/workflows/rust-napi-ci.yml dependency-version: 80873456a2af7243e09228a08456250d1e938972 dependency-type: direct:production dependency-group: actions - dependency-name: stella/.github/.github/workflows/cla.yml dependency-version: 80873456a2af7243e09228a08456250d1e938972 dependency-type: direct:production dependency-group: actions - dependency-name: stella/.github/.github/workflows/provenance-update.yml dependency-version: 80873456a2af7243e09228a08456250d1e938972 dependency-type: direct:production dependency-group: actions - dependency-name: stella/.github/.github/workflows/changeset-release-pr.yml dependency-version: 1.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: stella/.github/.github/workflows/npm-version-preflight.yml dependency-version: 80873456a2af7243e09228a08456250d1e938972 dependency-type: direct:production dependency-group: actions - dependency-name: Swatinem/rust-cache dependency-version: 258712b0b7b1ddf8bddc9fc3b0faca682b2736c3 dependency-type: direct:production dependency-group: actions - dependency-name: actions/attest dependency-version: 4.2.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: stella/.github/.github/workflows/npm-version-finalize.yml dependency-version: 80873456a2af7243e09228a08456250d1e938972 dependency-type: direct:production dependency-group: actions ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-08-13T10:43:35Z

Labels

The following labels could not be found: 📦 dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Navigation Menu

Uh oh!

chore: bump the actions group across 1 directory with 10 updates - #143

chore: bump the actions group across 1 directory with 10 updates#143
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions-254f95b959

dependabot Bot commented on behalf of github Aug 13, 2026

Uh oh!

dependabot Bot commented on behalf of github Aug 13, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Aug 13, 2026

v4.0.3

What's Changed

Security

New Contributors

Changelog

v4.0.3

v4.0.2

v4.0.1

v4.0.0

v3.0.4

v3.0.3

v3.0.2

v3.0.1

v3.0.0

v2.11.1

v2.11.0

v2.10.2

Changelog

2.9.2

2.9.1

2.9.0

2.8.2

2.8.1

2.8.0

2.7.8

2.7.7

2.7.6

2.7.5

v4.2.2

What's Changed

Uh oh!

dependabot Bot commented on behalf of github Aug 13, 2026

Labels

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants