Skip to content

build(deps): bump the actions group across 1 directory with 2 updates - #15

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/github_actions/actions-e3ee0ff57b
Open

dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/github_actions/actions-e3ee0ff57b

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 8, 2026 •

Copy link
Copy Markdown

Bumps the actions group with 2 updates in the / directory: actions/checkout and actions/setup-dotnet.

Updates actions/checkout from 5.1.0 to 7.0.1

Release notes

Sourced from actions/checkout's releases.

v7.0.1

What's Changed

Full Changelog: actions/checkout@v7...v7.0.1

v7.0.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v6.0.3...v7.0.0

v6.1.0

What's Changed

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: actions/checkout@v6.0.3...v6.1.0

v6.0.3

What's Changed

New Contributors

Full Changelog: actions/checkout@v6...v6.0.3

v6.0.2

What's Changed

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

v7.0.1

v7.0.0

v6.0.3

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

... (truncated)

Commits

Updates actions/setup-dotnet from 5.4.0 to 6.0.0

Release notes

Sourced from actions/setup-dotnet's releases.

v6.0.0

What's Changed

New Contributors

Full Changelog: actions/setup-dotnet@v5...v6.0.0

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Oct 8, 2026
@solrevdev

Copy link
Copy Markdown
Owner

Held for the NativeAOT round (#6). Not merged on purpose.

  • Release path untested. The validate job only proves checkout and setup-dotnet work for the build. The publish job also runs git push --atomic with the credentials checkout stores. That changed in checkout v6+, and only a real release exercises it.
  • Do it after feat: NativeAOT builds, benchmarks and packaging #6. native.yml uses the same actions, so do this bump once feat: NativeAOT builds, benchmarks and packaging #6 is on master. Dependabot will then cover both workflows.
  • Avoid an extra patch. This PR changes .github/workflows/publish.yml. Merging it without [skip ci] publishes a NuGet patch.

🤖 Generated with Claude Code

Bumps the actions group with 2 updates in the / directory: [actions/checkout](https://github.com/actions/checkout) and [actions/setup-dotnet](https://github.com/actions/setup-dotnet).


Updates `actions/checkout` from 5.1.0 to 7.0.1
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@fbc6f39...3d3c42e)

Updates `actions/setup-dotnet` from 5.4.0 to 6.0.0
- [Release notes](https://github.com/actions/setup-dotnet/releases)
- [Commits](actions/setup-dotnet@26b0ec1...a98b568)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: actions/setup-dotnet
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot Bot changed the title build(deps): bump the actions group with 2 updates build(deps): bump the actions group across 1 directory with 2 updates Oct 15, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions-e3ee0ff57b branch from 7c1a729 to 907ff74 Compare October 15, 2026 08:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant