chore: bump the actions group with 9 updates by dependabot[bot] · Pull Request #109 · stella/text-search

dependabot · 2026-08-15T07:03:59Z

Bumps the actions group with 9 updates:

Package	From	To
dorny/paths-filter	`4.0.2`	`4.0.3`
stella/.github/.github/actions/changeset-policy	`1.6.0`	`1.7.0`
Swatinem/rust-cache	`e18b497796c12c097a38f9edb9d0641fb99eee32`	`258712b0b7b1ddf8bddc9fc3b0faca682b2736c3`
stella/.github/actions/provenance-check	`9a6f0b6dd423b9c368c63d9466b1aebbe6984ba3`	`905280fd96d464a343fd3bf6be20af9ef3f399fb`
stella/.github/.github/workflows/cla.yml	`9a6f0b6dd423b9c368c63d9466b1aebbe6984ba3`	`905280fd96d464a343fd3bf6be20af9ef3f399fb`
stella/.github/.github/workflows/provenance-update.yml	`9a6f0b6dd423b9c368c63d9466b1aebbe6984ba3`	`905280fd96d464a343fd3bf6be20af9ef3f399fb`
stella/.github/.github/workflows/changeset-release-pr.yml	`9a6f0b6dd423b9c368c63d9466b1aebbe6984ba3`	`905280fd96d464a343fd3bf6be20af9ef3f399fb`
stella/.github/.github/workflows/npm-version-preflight.yml	`9a6f0b6dd423b9c368c63d9466b1aebbe6984ba3`	`905280fd96d464a343fd3bf6be20af9ef3f399fb`
stella/.github/.github/workflows/npm-version-finalize.yml	`9a6f0b6dd423b9c368c63d9466b1aebbe6984ba3`	`905280fd96d464a343fd3bf6be20af9ef3f399fb`

Updates dorny/paths-filter from 4.0.2 to 4.0.3

Release notes

Sourced from dorny/paths-filter's releases.

v4.0.3

What's Changed

Update Outputs in readme to account for the 'every' predicate-quantifier by @hintron in dorny/paths-filter#247

fix: scope base-ignored warning to API path by @saschabratton in dorny/paths-filter#319

docs: add contents permission to PR example by @134130 in dorny/paths-filter#248

feat: add 'some-with-excludes' predicate quantifier by @arxeiss in dorny/paths-filter#322

Document safe handling of file list outputs in workflows by @dorny in dorny/paths-filter#326

Security

Escape multi-line filenames in list-files shell and csv output] by @ken-matsui and @tjswlsgg in https://github.com/advisories/GHSA-7hc6-8hq5-9q2m

New Contributors

@hintron made their first contribution in dorny/paths-filter#247

@134130 made their first contribution in dorny/paths-filter#248

@arxeiss made their first contribution in dorny/paths-filter#322

Full Changelog: dorny/paths-filter@v4...v4.0.3

Changelog

Sourced from dorny/paths-filter's changelog.

Changelog

v4.0.3

Document safe handling of file list outputs in workflows

Escape multi-line filenames in list-files shell and csv output

Add 'some-with-excludes' predicate quantifier

Add contents permission to PR example

Scope base-ignored warning to API path

Update outputs in readme to account for the 'every' predicate-quantifier

v4.0.2

Work around git dubious ownership errors in container jobs

Use rev-parse instead of branch --show-current for older git compat

Fix warning message

v4.0.1

Support merge queue

v4.0.0

Update action runtime to node24

v3.0.4

Escape multi-line filenames in list-files shell and csv output

v3.0.3

Add missing predicate-quantifier

v3.0.2

Add config parameter for predicate quantifier

v3.0.1

Compare base and ref when token is empty

v3.0.0

Update to Node.js 20

Update all dependencies

v2.11.1

Update @actions/core to v1.10.0 - Fixes warning about deprecated set-output

Document need for pull-requests: read permission

Updating to actions/checkout@v3

v2.11.0

Set list-files input parameter as not required

Update Node.js

Fix incorrect handling of Unicode characters in exec()

Use Octokit pagination

Updates real world links

v2.10.2

... (truncated)

Commits

ceb8a2b Update CHANGELOG.md for v4.0.3 and v3.0.4 (#327)
ef09b88 Document safe handling of file list outputs in workflows (#326)
44adc5b Merge commit from fork
4711b7a feat: add 'some-with-excludes' predicate quantifier (#322)
93c889f fix: escape multi-line filenames in list-files shell and csv output
b41dfa9 docs: add contents permission to PR example (#248)
9af6e5a fix: scope base-ignored warning to API path (#319)
cae9006 docs: update outputs in readme to account for the 'every' predicate-quantifie...
See full diff in compare view

Updates stella/.github/.github/actions/changeset-policy from 1.6.0 to 1.7.0

Commits

5628b97 fix(release): tolerate a release repeated across an offset page boundary (#71)
4011a76 chore(ci): allow test-prefixed PR titles (#70)
76d4e3a chore: split the label manifest into baseline and per-repo overlays (#69)
859a61e feat: add setup-bun-cached composite action (#68)
b96f83d chore: drop unused labels and correct the table description (#67)
63738e7 chore: make labels.yml enforceable and reconcile it with reality (#66)
639a344 docs: add a code of conduct (#65)
9a6f0b6 chore: bump the actions group across 1 directory with 2 updates (#50)
See full diff in compare view

Updates Swatinem/rust-cache from e18b497796c12c097a38f9edb9d0641fb99eee32 to 258712b0b7b1ddf8bddc9fc3b0faca682b2736c3

Changelog

Sourced from Swatinem/rust-cache's changelog.

Changelog

2.9.2

Fix credentials.toml cleanup

Improvements to cleanup, preserving more valid targets

Improvements to cargo install handling

Correctly sort/dedupe Rust versions

2.9.1

Fix regression in hash calculation

2.9.0

Update to node24

Support running from within a nix shell

Consider all installed toolchains for cache key

Use case-insensitive comparison to determine exact cache hit

2.8.2

Don't overwrite env for cargo-metadata call

2.8.1

Set empty CARGO_ENCODED_RUSTFLAGS when retrieving metadata

Various dependency updates

2.8.0

Add support for warpbuild cache provider

Add new cache-workspace-crates feature

2.7.8

Include CPU arch in the cache key

2.7.7

Also cache cargo install metadata

2.7.6

Allow opting out of caching $CARGO_HOME/bin

Add runner OS in cache key

Adds an option to do lookup-only of the cache

2.7.5

... (truncated)

Commits

258712b fix: stop cleanup timestamp pruning after the first entry (#377)
a45951f Merge pull request #373 from Swatinem/dependabot/github_actions/actions-420be...
b882611 Bump the actions group with 2 updates
6323deb 2.9.2
b16e8d7 bump rollup and rebuild
3bf42ac invert target/profile check in cleanup
6e5b278 correctly sort and dedupe Rust versions
5adc05f Bump the actions group across 1 directory with 3 updates (#368)
66b1e95 fix: support Cargo V2 build dir layout (#371)
72d126e Merge pull request #367 from Swatinem/dependabot/npm_and_yarn/dev-patch-2b495...
Additional commits viewable in compare view

Updates stella/.github/actions/provenance-check from 9a6f0b6dd423b9c368c63d9466b1aebbe6984ba3 to 905280fd96d464a343fd3bf6be20af9ef3f399fb

Commits

905280f fix: use supported GitHub App client input (#75)
8087345 fix: trust runner CAs in CLA checks (#74)
5dafee1 fix: let release PR mutations finish (#73)
2a7a304 fix: prevent duplicate changeset release PRs (#72)
5628b97 fix(release): tolerate a release repeated across an offset page boundary (#71)
4011a76 chore(ci): allow test-prefixed PR titles (#70)
76d4e3a chore: split the label manifest into baseline and per-repo overlays (#69)
859a61e feat: add setup-bun-cached composite action (#68)
b96f83d chore: drop unused labels and correct the table description (#67)
63738e7 chore: make labels.yml enforceable and reconcile it with reality (#66)
Additional commits viewable in compare view

Updates stella/.github/.github/workflows/cla.yml from 9a6f0b6dd423b9c368c63d9466b1aebbe6984ba3 to 905280fd96d464a343fd3bf6be20af9ef3f399fb

Commits

905280f fix: use supported GitHub App client input (#75)
8087345 fix: trust runner CAs in CLA checks (#74)
5dafee1 fix: let release PR mutations finish (#73)
2a7a304 fix: prevent duplicate changeset release PRs (#72)
5628b97 fix(release): tolerate a release repeated across an offset page boundary (#71)
4011a76 chore(ci): allow test-prefixed PR titles (#70)
76d4e3a chore: split the label manifest into baseline and per-repo overlays (#69)
859a61e feat: add setup-bun-cached composite action (#68)
b96f83d chore: drop unused labels and correct the table description (#67)
63738e7 chore: make labels.yml enforceable and reconcile it with reality (#66)
Additional commits viewable in compare view

Updates stella/.github/.github/workflows/provenance-update.yml from 9a6f0b6dd423b9c368c63d9466b1aebbe6984ba3 to 905280fd96d464a343fd3bf6be20af9ef3f399fb

Commits

905280f fix: use supported GitHub App client input (#75)
8087345 fix: trust runner CAs in CLA checks (#74)
5dafee1 fix: let release PR mutations finish (#73)
2a7a304 fix: prevent duplicate changeset release PRs (#72)
5628b97 fix(release): tolerate a release repeated across an offset page boundary (#71)
4011a76 chore(ci): allow test-prefixed PR titles (#70)
76d4e3a chore: split the label manifest into baseline and per-repo overlays (#69)
859a61e feat: add setup-bun-cached composite action (#68)
b96f83d chore: drop unused labels and correct the table description (#67)
63738e7 chore: make labels.yml enforceable and reconcile it with reality (#66)
Additional commits viewable in compare view

Updates stella/.github/.github/workflows/changeset-release-pr.yml from 9a6f0b6dd423b9c368c63d9466b1aebbe6984ba3 to 905280fd96d464a343fd3bf6be20af9ef3f399fb

Commits

905280f fix: use supported GitHub App client input (#75)
8087345 fix: trust runner CAs in CLA checks (#74)
5dafee1 fix: let release PR mutations finish (#73)
2a7a304 fix: prevent duplicate changeset release PRs (#72)
5628b97 fix(release): tolerate a release repeated across an offset page boundary (#71)
4011a76 chore(ci): allow test-prefixed PR titles (#70)
76d4e3a chore: split the label manifest into baseline and per-repo overlays (#69)
859a61e feat: add setup-bun-cached composite action (#68)
b96f83d chore: drop unused labels and correct the table description (#67)
63738e7 chore: make labels.yml enforceable and reconcile it with reality (#66)
Additional commits viewable in compare view

Updates stella/.github/.github/workflows/npm-version-preflight.yml from 9a6f0b6dd423b9c368c63d9466b1aebbe6984ba3 to 905280fd96d464a343fd3bf6be20af9ef3f399fb

Commits

905280f fix: use supported GitHub App client input (#75)
8087345 fix: trust runner CAs in CLA checks (#74)
5dafee1 fix: let release PR mutations finish (#73)
2a7a304 fix: prevent duplicate changeset release PRs (#72)
5628b97 fix(release): tolerate a release repeated across an offset page boundary (#71)
4011a76 chore(ci): allow test-prefixed PR titles (#70)
76d4e3a chore: split the label manifest into baseline and per-repo overlays (#69)
859a61e feat: add setup-bun-cached composite action (#68)
b96f83d chore: drop unused labels and correct the table description (#67)
63738e7 chore: make labels.yml enforceable and reconcile it with reality (#66)
Additional commits viewable in compare view

Updates stella/.github/.github/workflows/npm-version-finalize.yml from 9a6f0b6dd423b9c368c63d9466b1aebbe6984ba3 to 905280fd96d464a343fd3bf6be20af9ef3f399fb

Commits

905280f fix: use supported GitHub App client input (#75)
8087345 fix: trust runner CAs in CLA checks (#74)
5dafee1 fix: let release PR mutations finish (#73)
2a7a304 fix: prevent duplicate changeset release PRs (#72)
5628b97 fix(release): tolerate a release repeated across an offset page boundary (#71)
4011a76 chore(ci): allow test-prefixed PR titles (#70)
76d4e3a chore: split the label manifest into baseline and per-repo overlays (#69)
859a61e feat: add setup-bun-cached composite action (#68)
b96f83d chore: drop unused labels and correct the table description (#67)
63738e7 chore: make labels.yml enforceable and reconcile it with reality (#66)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the actions group with 9 updates: | Package | From | To | | --- | --- | --- | | [dorny/paths-filter](https://github.com/dorny/paths-filter) | `4.0.2` | `4.0.3` | | [stella/.github/.github/actions/changeset-policy](https://github.com/stella/.github) | `1.6.0` | `1.7.0` | | [Swatinem/rust-cache](https://github.com/swatinem/rust-cache) | `e18b497796c12c097a38f9edb9d0641fb99eee32` | `258712b0b7b1ddf8bddc9fc3b0faca682b2736c3` | | [stella/.github/actions/provenance-check](https://github.com/stella/.github) | `9a6f0b6dd423b9c368c63d9466b1aebbe6984ba3` | `905280fd96d464a343fd3bf6be20af9ef3f399fb` | | [stella/.github/.github/workflows/cla.yml](https://github.com/stella/.github) | `9a6f0b6dd423b9c368c63d9466b1aebbe6984ba3` | `905280fd96d464a343fd3bf6be20af9ef3f399fb` | | [stella/.github/.github/workflows/provenance-update.yml](https://github.com/stella/.github) | `9a6f0b6dd423b9c368c63d9466b1aebbe6984ba3` | `905280fd96d464a343fd3bf6be20af9ef3f399fb` | | [stella/.github/.github/workflows/changeset-release-pr.yml](https://github.com/stella/.github) | `9a6f0b6dd423b9c368c63d9466b1aebbe6984ba3` | `905280fd96d464a343fd3bf6be20af9ef3f399fb` | | [stella/.github/.github/workflows/npm-version-preflight.yml](https://github.com/stella/.github) | `9a6f0b6dd423b9c368c63d9466b1aebbe6984ba3` | `905280fd96d464a343fd3bf6be20af9ef3f399fb` | | [stella/.github/.github/workflows/npm-version-finalize.yml](https://github.com/stella/.github) | `9a6f0b6dd423b9c368c63d9466b1aebbe6984ba3` | `905280fd96d464a343fd3bf6be20af9ef3f399fb` | Updates `dorny/paths-filter` from 4.0.2 to 4.0.3 - [Release notes](https://github.com/dorny/paths-filter/releases) - [Changelog](https://github.com/dorny/paths-filter/blob/master/CHANGELOG.md) - [Commits](dorny/paths-filter@7b450ff...ceb8a2b) Updates `stella/.github/.github/actions/changeset-policy` from 1.6.0 to 1.7.0 - [Release notes](https://github.com/stella/.github/releases) - [Commits](stella/.github@b8c0884...5628b97) Updates `Swatinem/rust-cache` from e18b497796c12c097a38f9edb9d0641fb99eee32 to 258712b0b7b1ddf8bddc9fc3b0faca682b2736c3 - [Release notes](https://github.com/swatinem/rust-cache/releases) - [Changelog](https://github.com/Swatinem/rust-cache/blob/master/CHANGELOG.md) - [Commits](Swatinem/rust-cache@e18b497...258712b) Updates `stella/.github/actions/provenance-check` from 9a6f0b6dd423b9c368c63d9466b1aebbe6984ba3 to 905280fd96d464a343fd3bf6be20af9ef3f399fb - [Release notes](https://github.com/stella/.github/releases) - [Commits](stella/.github@9a6f0b6...905280f) Updates `stella/.github/.github/workflows/cla.yml` from 9a6f0b6dd423b9c368c63d9466b1aebbe6984ba3 to 905280fd96d464a343fd3bf6be20af9ef3f399fb - [Release notes](https://github.com/stella/.github/releases) - [Commits](stella/.github@9a6f0b6...905280f) Updates `stella/.github/.github/workflows/provenance-update.yml` from 9a6f0b6dd423b9c368c63d9466b1aebbe6984ba3 to 905280fd96d464a343fd3bf6be20af9ef3f399fb - [Release notes](https://github.com/stella/.github/releases) - [Commits](stella/.github@9a6f0b6...905280f) Updates `stella/.github/.github/workflows/changeset-release-pr.yml` from 9a6f0b6dd423b9c368c63d9466b1aebbe6984ba3 to 905280fd96d464a343fd3bf6be20af9ef3f399fb - [Release notes](https://github.com/stella/.github/releases) - [Commits](stella/.github@9a6f0b6...905280f) Updates `stella/.github/.github/workflows/npm-version-preflight.yml` from 9a6f0b6dd423b9c368c63d9466b1aebbe6984ba3 to 905280fd96d464a343fd3bf6be20af9ef3f399fb - [Release notes](https://github.com/stella/.github/releases) - [Commits](stella/.github@9a6f0b6...905280f) Updates `stella/.github/.github/workflows/npm-version-finalize.yml` from 9a6f0b6dd423b9c368c63d9466b1aebbe6984ba3 to 905280fd96d464a343fd3bf6be20af9ef3f399fb - [Release notes](https://github.com/stella/.github/releases) - [Commits](stella/.github@9a6f0b6...905280f) --- updated-dependencies: - dependency-name: dorny/paths-filter dependency-version: 4.0.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: stella/.github/.github/actions/changeset-policy dependency-version: 1.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: Swatinem/rust-cache dependency-version: 258712b0b7b1ddf8bddc9fc3b0faca682b2736c3 dependency-type: direct:production dependency-group: actions - dependency-name: stella/.github/actions/provenance-check dependency-version: 905280fd96d464a343fd3bf6be20af9ef3f399fb dependency-type: direct:production dependency-group: actions - dependency-name: stella/.github/.github/workflows/cla.yml dependency-version: 905280fd96d464a343fd3bf6be20af9ef3f399fb dependency-type: direct:production dependency-group: actions - dependency-name: stella/.github/.github/workflows/provenance-update.yml dependency-version: 905280fd96d464a343fd3bf6be20af9ef3f399fb dependency-type: direct:production dependency-group: actions - dependency-name: stella/.github/.github/workflows/changeset-release-pr.yml dependency-version: 905280fd96d464a343fd3bf6be20af9ef3f399fb dependency-type: direct:production dependency-group: actions - dependency-name: stella/.github/.github/workflows/npm-version-preflight.yml dependency-version: 905280fd96d464a343fd3bf6be20af9ef3f399fb dependency-type: direct:production dependency-group: actions - dependency-name: stella/.github/.github/workflows/npm-version-finalize.yml dependency-version: 905280fd96d464a343fd3bf6be20af9ef3f399fb dependency-type: direct:production dependency-group: actions ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added the 📦 dependencies Dependency updates label Aug 15, 2026

Navigation Menu

Uh oh!

chore: bump the actions group with 9 updates - #109

chore: bump the actions group with 9 updates#109
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions-86c1e41c02

dependabot Bot commented on behalf of github Aug 15, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Aug 15, 2026

v4.0.3

What's Changed

Security

New Contributors

Changelog

v4.0.3

v4.0.2

v4.0.1

v4.0.0

v3.0.4

v3.0.3

v3.0.2

v3.0.1

v3.0.0

v2.11.1

v2.11.0

v2.10.2

Changelog

2.9.2

2.9.1

2.9.0

2.8.2

2.8.1

2.8.0

2.7.8

2.7.7

2.7.6

2.7.5

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants