Skip to content

chore(deps): bump the actions group with 3 updates - #3576

Merged
timflannagan merged 1 commit into
mainfrom
dependabot/github_actions/actions-2e267e0659
Nov 9, 2026
Merged

timflannagan merged 1 commit into
mainfrom
dependabot/github_actions/actions-2e267e0659

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 9, 2026

Copy link
Copy Markdown
Contributor

Bumps the actions group with 3 updates: useblacksmith/setup-docker-builder, helm/kind-action and softprops/action-gh-release.

Updates useblacksmith/setup-docker-builder from 2.2.0 to 2.3.0

Release notes

Sourced from useblacksmith/setup-docker-builder's releases.

v2.3.0

What's Changed

Other Changes

New Contributors

Full Changelog: useblacksmith/setup-docker-builder@v2.2.0...v2.3.0

Commits
  • 06dd9c8 deps: bump axios to 1.20.0 and remove stale package-lock.json (release/v2) (#...
  • ec85cd5 post: fstrim the buildkit sticky disk before unmount at commit (#143)
  • ded4bfd post: skip sticky disk cleanup when this step reused an existing buildkitd (r...
  • See full diff in compare view

Updates helm/kind-action from 1.15.1 to 1.15.2

Release notes

Sourced from helm/kind-action's releases.

v1.15.2

What's Changed

New Contributors

Full Changelog: helm/kind-action@v1.15.1...v1.15.2

Commits

Updates softprops/action-gh-release from 3.0.3 to 3.0.4

Release notes

Sourced from softprops/action-gh-release's releases.

v3.0.4

  • maintenance release with updated dependencies
Changelog

Sourced from softprops/action-gh-release's changelog.

3.0.4

  • maintenance release with updated dependencies

3.0.3

3.0.3 is a maintenance release with updated dependencies. It also safely classifies malformed GitHub API errors to avoid secondary failures (#822).

What's Changed

Bug fixes 🐛

Other Changes 🔄

  • dependency updates

3.0.2

3.0.2 is a patch release focused on release reliability and compatibility. It reuses existing draft releases when publishing prereleases, supports replacing release assets on Gitea, hardens streamed asset uploads, and provides clearer release-creation diagnostics. It also includes TypeScript, coverage, and tooling maintenance merged since 3.0.1.

This release fixes #795, #438, and #803. The upload transport hardening covers the historical failure reported in #790, although current hosted Node 24 runners did not reproduce it naturally. The diagnostics work is related to #786 and does not claim a reproducible release-creation fix.

What's Changed

Exciting New Features 🎉

Bug fixes 🐛

Other Changes 🔄

... (truncated)

Commits
  • 8a0cd65 release 3.0.4 (#865)
  • ac01154 chore(deps): bump the npm group across 1 directory with 4 updates (#864)
  • ca4c9d5 chore(deps): bump minimatch and glob (#862)
  • e4a57ae chore(deps): bump undici from 6.29.0 to 6.29.1 (#859)
  • ee55a0e chore(deps): bump vite from 8.3.2 to 8.3.5 (#855)
  • 8d42b22 chore(deps): bump actions/setup-node (#853)
  • 6680cc0 chore(deps): bump the npm group with 3 updates (#851)
  • 4a050ba chore(deps): bump source-map-js from 1.2.1 to 1.2.2 (#850)
  • b5a645e chore(deps): bump the npm group with 4 updates (#848)
  • d99a5de chore(deps): bump brace-expansion from 5.0.9 to 5.0.12 (#846)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the actions group with 3 updates: [useblacksmith/setup-docker-builder](https://github.com/useblacksmith/setup-docker-builder), [helm/kind-action](https://github.com/helm/kind-action) and [softprops/action-gh-release](https://github.com/softprops/action-gh-release).


Updates `useblacksmith/setup-docker-builder` from 2.2.0 to 2.3.0
- [Release notes](https://github.com/useblacksmith/setup-docker-builder/releases)
- [Commits](useblacksmith/setup-docker-builder@1921511...06dd9c8)

Updates `helm/kind-action` from 1.15.1 to 1.15.2
- [Release notes](https://github.com/helm/kind-action/releases)
- [Commits](helm/kind-action@1544676...ea822c7)

Updates `softprops/action-gh-release` from 3.0.3 to 3.0.4
- [Release notes](https://github.com/softprops/action-gh-release/releases)
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md)
- [Commits](softprops/action-gh-release@efb3536...8a0cd65)

---
updated-dependencies:
- dependency-name: useblacksmith/setup-docker-builder
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: helm/kind-action
  dependency-version: 1.15.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: softprops/action-gh-release
  dependency-version: 3.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Nov 9, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot @github

dependabot Bot commented on behalf of github Nov 9, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@timflannagan timflannagan reopened this Nov 9, 2026
@timflannagan
timflannagan added this pull request to the merge queue Nov 9, 2026
Merged via the queue into main with commit 8f2b687 Nov 9, 2026
62 of 66 checks passed
@timflannagan
timflannagan deleted the dependabot/github_actions/actions-2e267e0659 branch November 9, 2026 20:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant