Bump the github_action-dependencies group across 1 directory with 6 updates by dependabot[bot] · Pull Request #2628 · pi-hole/FTL

dependabot · 2025-09-14T05:14:22Z

Bumps the github_action-dependencies group with 6 updates in the / directory:

Package	From	To
actions/attest-build-provenance	`2.4.0`	`3.0.0`
softprops/action-gh-release	`2.3.2`	`2.3.3`
github/codeql-action	`3.29.10`	`3.30.3`
advanced-security/filter-sarif	`1.0.0`	`1.0.1`
actions/setup-node	`4.4.0`	`5.0.0`
actions/stale	`9.1.0`	`10.0.0`

Updates actions/attest-build-provenance from 2.4.0 to 3.0.0

Release notes

Sourced from actions/attest-build-provenance's releases.

v3.0.0

What's Changed

Adjust node max-http-header-size setting by @bdehamer in actions/attest-build-provenance#687

Bump actions/attest from v2.4.0 to v3.0.0 by @bdehamer in actions/attest-build-provenance#691

Bump to node24 runtime

Improved checksum parsing

Bump attest-build-provenance/predicate to v2.0.0 by @bdehamer in actions/attest-build-provenance#693

Bump to node24 runtime by @bdehamer in actions/attest-build-provenance#692

⚠️ Minimum Compatible Runner Version

v2.327.1 Release Notes

Make sure your runner is updated to this version or newer to use this release.

Full Changelog: actions/attest-build-provenance@v2.4.0...v3.0.0

Commits

977bb37 bump attest-build-provenance/predicate to v2.0.0 (#693)
864457a Bump to node24 runtime (#692)
57aa2b0 bump actions/attest from v2.4.0 to v3.0.0 (#691)
8ee7163 refactor eslint config (#690)
91ca1c2 Bump actions/checkout from 4.1.1 to 5.0.0 (#684)
ff19f40 custom node max-http-header-size (#687)
8bd83f1 pin workflow deps (#683)
f0878de Bump the npm-development group with 4 updates (#681)
463e6df Bump the npm-development group with 3 updates (#678)
fef91c1 Bump the npm-development group with 6 updates (#673)
Additional commits viewable in compare view

Updates softprops/action-gh-release from 2.3.2 to 2.3.3

Release notes

Sourced from softprops/action-gh-release's releases.

v2.3.3

What's Changed

Exciting New Features 🎉

feat: add input option overwrite_files by @asfernandes in softprops/action-gh-release#343

Other Changes 🔄

dependency updates

New Contributors

@asfernandes made their first contribution in softprops/action-gh-release#343

Full Changelog: softprops/action-gh-release@v2...v2.3.3

Changelog

Sourced from softprops/action-gh-release's changelog.

2.3.3

What's Changed

Exciting New Features 🎉

feat: add input option overwrite_files by @asfernandes in softprops/action-gh-release#343

Other Changes 🔄

dependency updates

2.3.2

fix: revert fs readableWebStream change

2.3.1

Bug fixes 🐛

fix: fix file closing issue by @WailGree in softprops/action-gh-release#629

2.3.0

Migrate from jest to vitest

Replace mime with mime-types

Bump to use node 24

Dependency updates

2.2.2

What's Changed

Bug fixes 🐛

fix: updating release draft status from true to false by @galargh in softprops/action-gh-release#316

Other Changes 🔄

chore: simplify ref_type test by @steinybot in softprops/action-gh-release#598

fix(docs): clarify the default for tag_name by @muzimuzhi in softprops/action-gh-release#599

test(release): add unit tests when searching for a release by @rwaskiewicz in softprops/action-gh-release#603

dependency updates

2.2.1

What's Changed

Bug fixes 🐛

... (truncated)

Commits

6cbd405 release 2.3.3
fbadcc9 update to use actions/checkout@v5
4a84006 chore(deps): bump @types/node from 20.19.10 to 20.19.11 in the npm group (#648)
7191749 chore(deps): bump actions/checkout in the github-actions group (#649)
126b1e7 chore(deps): bump @types/node from 20.19.9 to 20.19.10 in the npm group (#647)
f82d31e chore(deps): bump the npm group with 3 updates (#643)
f2352b9 chore(deps): bump @types/node from 20.19.2 to 20.19.7 in the npm group (#640)
f0b3259 chore(deps): bump the npm group across 1 directory with 4 updates (#638)
f37a2f9 chore(deps): bump the npm group with 2 updates (#635)
db56014 chore(deps): bump brace-expansion from 2.0.1 to 2.0.2 (#634)
Additional commits viewable in compare view

Updates github/codeql-action from 3.29.10 to 3.30.3

Release notes

Sourced from github/codeql-action's releases.

v3.30.3

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.30.3 - 10 Sep 2025

No user facing changes.

See the full CHANGELOG.md for more information.

v3.30.2

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.30.2 - 09 Sep 2025

Fixed a bug which could cause language autodetection to fail. #3084

Experimental: The quality-queries input that was added in 3.29.2 as part of an internal experiment is now deprecated and will be removed in an upcoming version of the CodeQL Action. It has been superseded by a new analysis-kinds input, which is part of the same internal experiment. Do not use this in production as it is subject to change at any time. #3064

See the full CHANGELOG.md for more information.

v3.30.1

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.30.1 - 05 Sep 2025

Update default CodeQL bundle version to 2.23.0. #3077

See the full CHANGELOG.md for more information.

v3.30.0

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.30.0 - 01 Sep 2025

Reduce the size of the CodeQL Action, speeding up workflows by approximately 4 seconds. #3054

See the full CHANGELOG.md for more information.

v3.29.11

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

... (truncated)

Changelog

Sourced from github/codeql-action's changelog.

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

[UNRELEASED]

We have improved the CodeQL Action's ability to validate that the workflow it is used in does not use different versions of the CodeQL Action for different workflow steps. Mixing different versions of the CodeQL Action in the same workflow is unsupported and can lead to unpredictable results. A warning will now be emitted from the codeql-action/init step if different versions of the CodeQL Action are detected in the workflow file. Additionally, an error will now be thrown by the other CodeQL Action steps if they load a configuration file that was generated by a different version of the codeql-action/init step. #3099 and #3100

We added support for reducing the size of dependency caches for Java analyses, which will reduce cache usage and speed up workflows. This will be enabled automatically at a later time. #3107

3.30.3 - 10 Sep 2025

No user facing changes.

3.30.2 - 09 Sep 2025

Fixed a bug which could cause language autodetection to fail. #3084

Experimental: The quality-queries input that was added in 3.29.2 as part of an internal experiment is now deprecated and will be removed in an upcoming version of the CodeQL Action. It has been superseded by a new analysis-kinds input, which is part of the same internal experiment. Do not use this in production as it is subject to change at any time. #3064

3.30.1 - 05 Sep 2025

Update default CodeQL bundle version to 2.23.0. #3077

3.30.0 - 01 Sep 2025

Reduce the size of the CodeQL Action, speeding up workflows by approximately 4 seconds. #3054

3.29.11 - 21 Aug 2025

Update default CodeQL bundle version to 2.22.4. #3044

3.29.10 - 18 Aug 2025

No user facing changes.

3.29.9 - 12 Aug 2025

No user facing changes.

3.29.8 - 08 Aug 2025

Fix an issue where the Action would autodetect unsupported languages such as HTML. #3015

3.29.7 - 07 Aug 2025

This release rolls back 3.29.6 to address issues with language autodetection. It is identical to 3.29.5.

3.29.6 - 07 Aug 2025

The cleanup-level input to the analyze Action is now deprecated. The CodeQL Action has written a limited amount of intermediate results to the database since version 2.2.5, and now automatically manages cleanup. #2999

Update default CodeQL bundle version to 2.22.3. #3000

... (truncated)

Commits

192325c Merge pull request #3104 from github/update-v3.30.3-b660efdcf
e68956d Update changelog for v3.30.3
b660efd Merge pull request #3103 from github/mbg/fix/category-check
e49458b Fix runInterpretResultsFor using the wrong AnalysisConfig for category fix
f374a62 Merge pull request #3098 from github/kaspersv/increase-overlay-base-size-limit
5efa438 Merge pull request #3101 from github/mbg/public-repo-notice-in-pr-template
8a84a62 Overlay: Increase size limit for cached overlay base database
eb50a88 Merge pull request #3097 from github/redsun82/only-dump-sarif
4c53461 Tweak sarif dump log
dae3742 Dump soon to be uploaded SARIF on request
Additional commits viewable in compare view

Updates advanced-security/filter-sarif from 1.0.0 to 1.0.1

Release notes

Sourced from advanced-security/filter-sarif's releases.

v1.0.1

Fixes

Updated to work in Docker containers (thanks @way-dave!)

Commits

f3b8118 Merge pull request #7 from wayflyer/main
6d405db Using GITHUB_ACTION_PATH env var
09a9626 Update docs
ffc5cf4 update
5f94cb5 Add Apache License for the globber module.
4c9e026 update
163dc40 update
See full diff in compare view

Updates actions/setup-node from 4.4.0 to 5.0.0

Release notes

Sourced from actions/setup-node's releases.

v5.0.0

What's Changed

Breaking Changes

Enhance caching in setup-node with automatic package manager detection by @priya-kinthali in actions/setup-node#1348

This update, introduces automatic caching when a valid packageManager field is present in your package.json. This aims to improve workflow performance and make dependency management more seamless. To disable this automatic caching, set package-manager-cache: false
steps:
- uses: actions/checkout@v5
- uses: actions/setup-node@v5
  with:
    package-manager-cache: false
Upgrade action to use node24 by @salmanmkc in actions/setup-node#1325

Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. See Release Notes

Dependency Upgrades

Upgrade @octokit/request-error and @actions/github by @dependabot[bot] in actions/setup-node#1227

Upgrade uuid from 9.0.1 to 11.1.0 by @dependabot[bot] in actions/setup-node#1273

Upgrade undici from 5.28.5 to 5.29.0 by @dependabot[bot] in actions/setup-node#1295

Upgrade form-data to bring in fix for critical vulnerability by @gowridurgad in actions/setup-node#1332

Upgrade actions/checkout from 4 to 5 by @dependabot[bot] in actions/setup-node#1345

New Contributors

@priya-kinthali made their first contribution in actions/setup-node#1348

@salmanmkc made their first contribution in actions/setup-node#1325

Full Changelog: actions/setup-node@v4...v5.0.0

Commits

a0853c2 Bump actions/checkout from 4 to 5 (#1345)
b7234cc Upgrade action to use node24 (#1325)
d7a1131 Enhance caching in setup-node with automatic package manager detection (#1348)
5e2628c Bumps form-data (#1332)
65becef Bump undici from 5.28.5 to 5.29.0 (#1295)
7e24a65 Bump uuid from 9.0.1 to 11.1.0 (#1273)
08f58d1 Bump @octokit/request-error and @actions/github (#1227)
See full diff in compare view

Updates actions/stale from 9.1.0 to 10.0.0

Release notes

Sourced from actions/stale's releases.

v10.0.0

What's Changed

Breaking Changes

Upgrade to node 24 by @salmanmkc in actions/stale#1279 Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. Release Notes

Enhancement

Introducing sort-by option by @suyashgaonkar in actions/stale#1254

Dependency Upgrades

Upgrade actions/publish-immutable-action from 0.0.3 to 0.0.4 by @dependabot[bot] in actions/stale#1186

Upgrade undici from 5.28.4 to 5.28.5 by @dependabot[bot] in actions/stale#1201

Upgrade @action/cache from 4.0.0 to 4.0.2 by @aparnajyothi-y in actions/stale#1226

Upgrade @action/cache from 4.0.2 to 4.0.3 by @suyashgaonkar in actions/stale#1233

Upgrade undici from 5.28.5 to 5.29.0 by @dependabot[bot] in actions/stale#1251

Upgrade form-data to bring in fix for critical vulnerability by @gowridurgad in actions/stale#1277

Documentation changes

Changelog update for recent releases by @suyashgaonkar in actions/stale#1224

Permissions update in Readme by @ghadimir in actions/stale#1248

New Contributors

@suyashgaonkar made their first contribution in actions/stale#1224

@GhadimiR made their first contribution in actions/stale#1248

@gowridurgad made their first contribution in actions/stale#1277

@salmanmkc made their first contribution in actions/stale#1279

Full Changelog: actions/stale@v9...v10.0.0

Commits

3a9db7e Upgrade to node 24 (#1279)
8f717f0 Bumps form-data (#1277)
a92fd57 build(deps): bump undici from 5.28.5 to 5.29.0 (#1251)
128b2c8 Introducing sort-by option (#1254)
f78de97 Update README.md (#1248)
816d9db Upgrade @action/cache from 4.0.2 to 4.0.3 (#1233)
ba23c1c upgrade actions/cache from 4.0.0 to 4.0.2 (#1226)
a65e88a build(deps): bump undici from 5.28.4 to 5.28.5 (#1201)
d4df79c Updates to CHANGELOG.MD for recent releases (#1224)
ee7ef89 build(deps): bump actions/publish-immutable-action from 0.0.3 to 0.0.4 (#1186)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…pdates Bumps the github_action-dependencies group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance) | `2.4.0` | `3.0.0` | | [softprops/action-gh-release](https://github.com/softprops/action-gh-release) | `2.3.2` | `2.3.3` | | [github/codeql-action](https://github.com/github/codeql-action) | `3.29.10` | `3.30.3` | | [advanced-security/filter-sarif](https://github.com/advanced-security/filter-sarif) | `1.0.0` | `1.0.1` | | [actions/setup-node](https://github.com/actions/setup-node) | `4.4.0` | `5.0.0` | | [actions/stale](https://github.com/actions/stale) | `9.1.0` | `10.0.0` | Updates `actions/attest-build-provenance` from 2.4.0 to 3.0.0 - [Release notes](https://github.com/actions/attest-build-provenance/releases) - [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md) - [Commits](actions/attest-build-provenance@e8998f9...977bb37) Updates `softprops/action-gh-release` from 2.3.2 to 2.3.3 - [Release notes](https://github.com/softprops/action-gh-release/releases) - [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md) - [Commits](softprops/action-gh-release@72f2c25...6cbd405) Updates `github/codeql-action` from 3.29.10 to 3.30.3 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@96f518a...192325c) Updates `advanced-security/filter-sarif` from 1.0.0 to 1.0.1 - [Release notes](https://github.com/advanced-security/filter-sarif/releases) - [Commits](advanced-security/filter-sarif@bc96d9f...f3b8118) Updates `actions/setup-node` from 4.4.0 to 5.0.0 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](actions/setup-node@49933ea...a0853c2) Updates `actions/stale` from 9.1.0 to 10.0.0 - [Release notes](https://github.com/actions/stale/releases) - [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md) - [Commits](actions/stale@5bef64f...3a9db7e) --- updated-dependencies: - dependency-name: actions/attest-build-provenance dependency-version: 3.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github_action-dependencies - dependency-name: softprops/action-gh-release dependency-version: 2.3.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github_action-dependencies - dependency-name: github/codeql-action dependency-version: 3.30.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github_action-dependencies - dependency-name: advanced-security/filter-sarif dependency-version: 1.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github_action-dependencies - dependency-name: actions/setup-node dependency-version: 5.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github_action-dependencies - dependency-name: actions/stale dependency-version: 10.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github_action-dependencies ... Signed-off-by: dependabot[bot] <[email protected]>

DL6ER

Seems like all breaking changes involved in here are due to

Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release.

which is nothing we have to worry about since we stopped using self-hosted runners when ARM GitHub provided ones became available.

dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Sep 14, 2025

dependabot Bot requested a review from a team as a code owner September 14, 2025 05:14

dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Sep 14, 2025

DL6ER approved these changes Sep 14, 2025

View reviewed changes

DL6ER enabled auto-merge September 14, 2025 05:36

DL6ER merged commit 888d0cd into development Sep 14, 2025
17 checks passed

DL6ER deleted the dependabot-github_actions-development-github_action-dependencies-508b09d925 branch September 14, 2025 05:40

PromoFaux mentioned this pull request Oct 25, 2025

FTL v6.3 #2616

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the github_action-dependencies group across 1 directory with 6 updates#2628

Bump the github_action-dependencies group across 1 directory with 6 updates#2628
DL6ER merged 1 commit intodevelopmentfrom
dependabot-github_actions-development-github_action-dependencies-508b09d925

dependabot Bot commented on behalf of github Sep 14, 2025

Uh oh!

DL6ER left a comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Sep 14, 2025

v3.0.0

What's Changed

⚠️ Minimum Compatible Runner Version

v2.3.3

What's Changed

Exciting New Features 🎉

Other Changes 🔄

New Contributors

2.3.3

What's Changed

Exciting New Features 🎉

Other Changes 🔄

2.3.2

2.3.1

Bug fixes 🐛

2.3.0

2.2.2

What's Changed

Bug fixes 🐛

Other Changes 🔄

2.2.1

What's Changed

Bug fixes 🐛

v3.30.3

CodeQL Action Changelog

3.30.3 - 10 Sep 2025

v3.30.2

CodeQL Action Changelog

3.30.2 - 09 Sep 2025

v3.30.1

CodeQL Action Changelog

3.30.1 - 05 Sep 2025

v3.30.0

CodeQL Action Changelog

3.30.0 - 01 Sep 2025

v3.29.11

CodeQL Action Changelog

CodeQL Action Changelog

[UNRELEASED]

3.30.3 - 10 Sep 2025

3.30.2 - 09 Sep 2025

3.30.1 - 05 Sep 2025

3.30.0 - 01 Sep 2025

3.29.11 - 21 Aug 2025

3.29.10 - 18 Aug 2025

3.29.9 - 12 Aug 2025

3.29.8 - 08 Aug 2025

3.29.7 - 07 Aug 2025

3.29.6 - 07 Aug 2025

v1.0.1

Fixes

v5.0.0

What's Changed

Breaking Changes

Dependency Upgrades

New Contributors

v10.0.0

What's Changed

Breaking Changes

Enhancement

Dependency Upgrades

Documentation changes

New Contributors

Uh oh!

DL6ER left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant