Skip to content

Bump the all-actions group across 1 directory with 8 updates - #1982

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/all-actions-1d409166f7
Open

Bump the all-actions group across 1 directory with 8 updates#1982
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/all-actions-1d409166f7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 2, 2026 •
edited
Loading

Copy link
Copy Markdown

Bumps the all-actions group with 8 updates in the / directory:

Package From To
actions/checkout 3 7
EmbarkStudios/cargo-deny-action 2.0.15 2.1.1
stellar/binaries 45 85
actions/upload-artifact 4 7
actions/download-artifact 5 8
github/gh-aw-actions 0.83.4 0.86.2
denoland/setup-deno 2.0.2 2.0.5
stellar/stellar-cli 23.1.4 27.1.0

Updates actions/checkout from 3 to 7

Release notes

Sourced from actions/checkout's releases.

v7.0.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v6.0.3...v7.0.0

v6.1.0

What's Changed

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: actions/checkout@v6.0.3...v6.1.0

v6.0.3

What's Changed

New Contributors

Full Changelog: actions/checkout@v6...v6.0.3

v6.0.2

What's Changed

Full Changelog: actions/checkout@v6.0.1...v6.0.2

v6.0.1

What's Changed

... (truncated)

Commits

Updates EmbarkStudios/cargo-deny-action from 2.0.15 to 2.1.1

Release notes

Sourced from EmbarkStudios/cargo-deny-action's releases.

Release 2.1.1 - cargo-deny 0.20.2

Fixed

  • PR#116 fixed in issue introduced in the 2.1.0 release due the deprecation of the use-git-cli argument. Thanks @​Firestar99!

Release 2.1.0 - cargo-deny 0.20.2

Changed

  • PR#881 refactored the CLI, moving some duplicated options/flags into the root and removing several deprecated options/flags/values. See the PR for a full list of changes.

Added

  • PR#879 resolved #873 by adding a new bans.std-replacements lint which checks the graph for crates.io sourced crates that have been partially or fully replaced in std and/or core.

Fixed

  • PR#880 resolved #765 by respecting non-default build script paths in manifests.
  • PR#881 resolved #874 by cleaning up the CLI, deduplicating some options/flags that caused bug in the list subcommand.

Release 2.0.20 - cargo-deny 0.19.8

Fixed

  • PR#864 fixed matching of ^ and ~ with on prerelease versions for when checking if a crate is affected by an advisory. As of the time of the PR, this literally affected none of published versions of any crate with an advisory, but this just ensures such a case will be handled in the future.

Release 2.0.19 - cargo-deny 0.19.7

Changed

Release 2.0.18 - cargo-deny 0.19.5

Fixed

Release 2.0.17 - cargo-deny 0.19.2

Fixed

Release 2.0.16 - cargo-deny 0.19.1

Fixed

  • PR#833 fixed an issue where the maximum advisory database staleness was over 14 years instead of the intended 90 days.
  • PR#839 fixed an issue where unsound advisories would appear for transitive dependencies despite requesting them only for workspace dependencies, resolving #829.
  • PR#840 resolved #797 by passing --filter-platform when collecting cargo metadata if only a single target was requested either in the config or via the command line.
  • PR#841 fixed an issue where --frozen would not disable fetching of the advisory DB, resolving #759.
  • PR#842 and PR#844 updated crates. Notably krates was updated to resolve two issues with crates being pruned from the graph used when running checks. Resolving these two issues may mean that updating cargo-deny may highlight issues that were previously hidden.
    • EmbarkStudios/krates#106 would fail to pull in crates brought in via a feature if that crate had its lib target renamed by the package author.
    • EmbarkStudios/krates#109 would fail to bring in optional dependencies if they were brought in by a weak feature in a crate also brought in by a weak feature.

Changed

  • PR#830 removed gix in favor of shelling out to git. This massively improves build times and eases maintenance as gix bumps minor versions quite frequently. If cargo-deny is used in an environment that for some reason allows internet access but doesn't have git available, the advisory database would need to be updated before calling cargo-deny.
  • PR#838 removed rustsec in favor of manually implemented advisory parsing and checking, with a nightly cron job that checks that the implementation exactly matches rustsec on the official rustsec advisory db.
Commits

Updates stellar/binaries from 45 to 85

Release notes

Sourced from stellar/binaries's releases.

v85

What's Changed

Full Changelog: stellar/binaries@v84...v85

v84

What's Changed

Full Changelog: stellar/binaries@v83...v84

v83

What's Changed

Full Changelog: stellar/binaries@v82...v83

v82

What's Changed

Full Changelog: stellar/binaries@v81...v82

v81

What's Changed

Full Changelog: stellar/binaries@v80...v81

v80

What's Changed

Full Changelog: stellar/binaries@v79...v80

v79

What's Changed

Full Changelog: stellar/binaries@v78...v79

v78

... (truncated)

Commits
  • 897fff5 Update dependency cargo-expand to v1.0.122 (#95)
  • 67c54fa Bump renovatebot/github-action in the all-actions group (#90)
  • 9647850 Update dependency cargo-nextest to v0.9.136 (#94)
  • 8efcf2d Update dependency wasm-pack to v0.15.0 (#92)
  • 183aa19 Update dependency cargo-nextest to v0.9.135 (#91)
  • 36cc0a9 Update dependency cargo-deny to v0.19.6 (#89)
  • 2612d6f Update dependency cargo-deny to v0.19.5 (#88)
  • 159e835 Update dependency cargo-workspaces to v0.4.2 (#87)
  • dd47970 Update dependency cargo-nextest to v0.9.133 (#82)
  • 231a4f5 Update dependency cargo-readme to v3.3.2 (#83)
  • Additional commits viewable in compare view

Updates actions/upload-artifact from 4 to 7

Release notes

Sourced from actions/upload-artifact's releases.

v7.0.0

v7 What's new

Direct Uploads

Adds support for uploading single files directly (unzipped). Callers can set the new archive parameter to false to skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. The name parameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.

ESM

To support new versions of the @actions/* packages, we've upgraded the package to ESM.

What's Changed

New Contributors

Full Changelog: actions/upload-artifact@v6...v7.0.0

v6.0.0

v6 - What's new

[!IMPORTANT] actions/upload-artifact@v6 now runs on Node.js 24 (runs.using: node24) and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading.

Node.js 24

This release updates the runtime to Node.js 24. v5 had preliminary support for Node.js 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.

What's Changed

Full Changelog: actions/upload-artifact@v5.0.0...v6.0.0

v5.0.0

What's Changed

BREAKING CHANGE: this update supports Node v24.x. This is not a breaking change per-se but we're treating it as such.

... (truncated)

Commits
  • 043fb46 Merge pull request #797 from actions/yacaovsnc/update-dependency
  • 634250c Include changes in typespec/ts-http-runtime 0.3.5
  • e454baa Readme: bump all the example versions to v7 (#796)
  • 74fad66 Update the readme with direct upload details (#795)
  • bbbca2d Support direct file uploads (#764)
  • 589182c Upgrade the module to ESM and bump dependencies (#762)
  • 47309c9 Merge pull request #754 from actions/Link-/add-proxy-integration-tests
  • 02a8460 Add proxy integration test
  • b7c566a Merge pull request #745 from actions/upload-artifact-v6-release
  • e516bc8 docs: correct description of Node.js 24 support in README
  • Additional commits viewable in compare view

Updates actions/download-artifact from 5 to 8

Release notes

Sourced from actions/download-artifact's releases.

v8.0.0

v8 - What's new

[!IMPORTANT] actions/download-artifact@v8 has been migrated to an ESM module. This should be transparent to the caller but forks might need to make significant changes.

[!IMPORTANT] Hash mismatches will now error by default. Users can override this behavior with a setting change (see below).

Direct downloads

To support direct uploads in actions/upload-artifact, the action will no longer attempt to unzip all downloaded files. Instead, the action checks the Content-Type header ahead of unzipping and skips non-zipped files. Callers wishing to download a zipped file as-is can also set the new skip-decompress parameter to true.

Enforced checks (breaking)

A previous release introduced digest checks on the download. If a download hash didn't match the expected hash from the server, the action would log a warning. Callers can now configure the behavior on mismatch with the digest-mismatch parameter. To be secure by default, we are now defaulting the behavior to error which will fail the workflow run.

ESM

To support new versions of the @actions/* packages, we've upgraded the package to ESM.

What's Changed

Full Changelog: actions/download-artifact@v7...v8.0.0

v7.0.0

v7 - What's new

[!IMPORTANT] actions/download-artifact@v7 now runs on Node.js 24 (runs.using: node24) and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading.

Node.js 24

This release updates the runtime to Node.js 24. v6 had preliminary support for Node 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.

What's Changed

New Contributors

Full Changelog: actions/download-artifact@v6.0.0...v7.0.0

v6.0.0

... (truncated)

Commits
  • 3e5f45b Add regression tests for CJK characters (#471)
  • e6d03f6 Add a regression test for artifact name + content-type mismatches (#472)
  • 70fc10c Merge pull request #461 from actions/danwkennedy/digest-mismatch-behavior
  • f258da9 Add change docs
  • ccc058e Fix linting issues
  • bd7976b Add a setting to specify what to do on hash mismatch and default it to error
  • ac21fcf Merge pull request #460 from actions/danwkennedy/download-no-unzip
  • 15999bf Add note about package bumps
  • 974686e Bump the version to v8 and add release notes
  • fbe48b1 Update test names to make it clearer what they do
  • Additional commits viewable in compare view

Updates github/gh-aw-actions from 0.83.4 to 0.86.2

Release notes

Sourced from github/gh-aw-actions's releases.

v0.86.2

Sync of actions from gh-aw at v0.86.2.

v0.86.1

Sync of actions from gh-aw at v0.86.1.

v0.86.0

Sync of actions from gh-aw at v0.86.0.

v0.85.4

Sync of actions from gh-aw at v0.85.4.

v0.85.1

Sync of actions from gh-aw at v0.85.1.

v0.85.0

Sync of actions from gh-aw at v0.85.0.

v0.84.4

Sync of actions from gh-aw at v0.84.4.

v0.84.3

Sync of actions from gh-aw at v0.84.3.

v0.84.2

Sync of actions from gh-aw at v0.84.2.

v0.84.1

Sync of actions from gh-aw at v0.84.1.

v0.84.0

Sync of actions from gh-aw at v0.84.0.

v0.83.5

Sync of actions from gh-aw at v0.83.5.

Commits

Updates denoland/setup-deno from 2.0.2 to 2.0.5

Release notes

Sourced from denoland/setup-deno's releases.

v2.0.5

What's Changed

New Contributors

Full Changelog: denoland/setup-deno@v2.0.0...v2.0.5

v2.0.4

Full Changelog: denoland/setup-deno@v2.0.3...v2.0.4

v2.0.3

Full Changelog: denoland/setup-deno@v2.0.2...v2.0.3

Commits

Updates stellar/stellar-cli from 23.1.4 to 27.1.0

Release notes

Sourced from stellar/stellar-cli's releases.

27.1.0

stellar-cli v27.1.0 — Release Notes

Tokens & Assets

  • stellar token transfer — transfer tokens for SEP-41 and Stellar Asset Contracts (#2644)
  • stellar token balance — new command to check token balances (#2651)
  • Reserved native contract alias that resolves to the native asset (#2646)
  • Centralized asset/token resolution behind a single resolver (#2654)

Containers

  • Add support for container engines — Docker or Apple Container (#2643)
  • stellar container use — set the default container engine (#2647)
  • Add CPU and memory limits to container start (#2648)
  • Shell out to Docker directly instead of using bollard (#2629)
  • Move Docker image distribution to its own repo (#2616)
  • Make latest the default quickstart image tag (#2649)

Signing & Transactions

  • Sign auth entries when the signer is passed by public key (#2658)
  • Allow tx sign and tx hash without an RPC URL (#2642)
  • Verify signature against cached public key after signing (#2619)

Output & UX

  • New output mode for human-readable and JSON results (#2635)
  • Improved descriptions for contract id commands (#2618)

Bug Fixes

  • Fix contract extend panic when extending a missing entry (#2657)
  • Fix contract restore panic when restoring a missing entry (#2660)

Bindings / TS Boilerplate

  • Replace Standalone with Local in the TS boilerplate (#2251)
  • Update stellar-sdk version in binding generation (#2640)

New Contributors

Full Changelog: stellar/stellar-cli@v27.0.0...v27.1.0

27.0.0

What's Changed

Protocol 27 Support

... (truncated)

Commits
  • 8e402ea Bump version to 27.1.0 (#2663)
  • 6c3bf44 Sign auth entries when the signer is passed by public key (#2658)
  • cbe70c3 Bump the all-actions group across 1 directory with 3 updates (#2650)
  • 82c37e2 Allow tx sign and tx hash without an RPC URL (#2642)
  • 0c32ac8 Fix contract restore panic when restoring a missing entry (#2660)
  • 380f7c1 Verify signature against cached public key after signing (#2619)
  • ac1379f Fix contract extend panic when extending a missing entry (#2657)
  • 0f907ea Update Soroban dependencies to 27.0.2 (#2656)
  • 42167e2 Make latest the default quickstart image tag (#2649)
  • 9c92633 Centralize asset/token resolution behind a single resolver (#2654)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Aug 2, 2026
Copilot AI review requested due to automatic review settings August 2, 2026 02:07
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Aug 2, 2026
Copilot AI reviewed Aug 2, 2026
View reviewed changes

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Note

Copilot could not run the full agentic suite for this review because it was automatically requested on a bot-authored pull request. Request a review from Copilot under Reviewers to retry with the full agentic suite. Improved support for bot-authored pull requests is coming soon.

Updates CI GitHub Actions dependencies across workflows to newer major versions.

Changes:

  • Bump actions/checkout usage across workflows.
  • Bump artifact upload/download action versions.
  • Update pins/versions for a few other CI tools (e.g., setup-deno, stellar-cli, stellar/binaries, gh-aw-actions/setup).

Reviewed changes

Copilot reviewed 5 out of 5 changed files in this pull request and generated no comments.

Show a summary per file
File Description
.github/workflows/test-with-soroban-examples.yml Updates checkout/artifact action versions and a few tool versions.
.github/workflows/test-with-openzeppelin-stellar-contracts.yml Updates checkout/artifact action versions.
.github/workflows/semver.lock.yml Updates versions for gh-aw-actions/setup and stellar/binaries.
.github/workflows/rust.yml Updates checkout/artifact actions and stellar/binaries usage across Rust CI jobs.
.github/workflows/bump-version.yml Updates checkout action version used for release branch bump workflow.

@dependabot
dependabot Bot force-pushed the dependabot/github_actions/all-actions-1d409166f7 branch 4 times, most recently from 9a55b62 to 8b61d9e Compare August 9, 2026 02:08
@dependabot
Bump the all-actions group across 1 directory with 8 updates
c627da7 
Bumps the all-actions group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `3` | `7` |
| [EmbarkStudios/cargo-deny-action](https://github.com/embarkstudios/cargo-deny-action) | `2.0.15` | `2.1.1` |
| [stellar/binaries](https://github.com/stellar/binaries) | `45` | `85` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4` | `7` |
| [actions/download-artifact](https://github.com/actions/download-artifact) | `5` | `8` |
| [github/gh-aw-actions](https://github.com/github/gh-aw-actions) | `0.83.4` | `0.86.2` |
| [denoland/setup-deno](https://github.com/denoland/setup-deno) | `2.0.2` | `2.0.5` |
| [stellar/stellar-cli](https://github.com/stellar/stellar-cli) | `23.1.4` | `27.1.0` |



Updates `actions/checkout` from 3 to 7
- [Release notes](https://github.com/actions/checkout/releases)
- [Commits](actions/checkout@v3...v7)

Updates `EmbarkStudios/cargo-deny-action` from 2.0.15 to 2.1.1
- [Release notes](https://github.com/embarkstudios/cargo-deny-action/releases)
- [Commits](EmbarkStudios/cargo-deny-action@3fd3802...3c63498)

Updates `stellar/binaries` from 45 to 85
- [Release notes](https://github.com/stellar/binaries/releases)
- [Commits](stellar/binaries@v45...v85)

Updates `actions/upload-artifact` from 4 to 7
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@v4...v7)

Updates `actions/download-artifact` from 5 to 8
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](actions/download-artifact@v5...v8)

Updates `github/gh-aw-actions` from 0.83.4 to 0.86.2
- [Release notes](https://github.com/github/gh-aw-actions/releases)
- [Changelog](https://github.com/github/gh-aw-actions/blob/main/CHANGELOG.md)
- [Commits](github/gh-aw-actions@v0.83.4...v0.86.2)

Updates `denoland/setup-deno` from 2.0.2 to 2.0.5
- [Release notes](https://github.com/denoland/setup-deno/releases)
- [Commits](denoland/setup-deno@909cc5a...22d081f)

Updates `stellar/stellar-cli` from 23.1.4 to 27.1.0
- [Release notes](https://github.com/stellar/stellar-cli/releases)
- [Commits](stellar/stellar-cli@v23.1.4...v27.1.0)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-actions
- dependency-name: actions/download-artifact
  dependency-version: '8'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-actions
- dependency-name: actions/upload-artifact
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-actions
- dependency-name: denoland/setup-deno
  dependency-version: 2.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-actions
- dependency-name: EmbarkStudios/cargo-deny-action
  dependency-version: 2.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-actions
- dependency-name: github/gh-aw-actions
  dependency-version: 0.84.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-actions
- dependency-name: stellar/binaries
  dependency-version: '85'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-actions
- dependency-name: stellar/stellar-cli
  dependency-version: 27.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/all-actions-1d409166f7 branch from 8b61d9e to c627da7 Compare August 16, 2026 02:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

Copilot code review Copilot
Copilot review effort
Applies to this pull request for everyone.Learn more about Copilot code review.
Copilot left review comments

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant