ci(deps): bump the actions group across 1 directory with 8 updates by dependabot[bot] · Pull Request #19 · praxis-proxy/operator

dependabot · 2026-10-14T04:11:53Z

Bumps the actions group with 8 updates in the / directory:

Package	From	To
docker/login-action	`4.1.0`	`4.6.0`
actions/setup-go	`5.5.0`	`7.0.0`
actions/upload-artifact	`7.0.1`	`7.0.2`
praxis-proxy/conventions/.github/actions/setup-rust	`0.1.0`	`0.3.0`
docker/build-push-action	`6.18.0`	`7.4.0`
praxis-proxy/conventions/.github/actions/setup-rust-lint	`0.1.0`	`0.3.0`
praxis-proxy/conventions/.github/actions/coverage-check	`0.1.0`	`0.3.0`
praxis-proxy/conventions/.github/actions/supply-chain-audit	`0.1.0`	`0.3.0`

Updates docker/login-action from 4.1.0 to 4.6.0

Release notes

Sourced from docker/login-action's releases.

v4.6.0

Harden buildx scoped config path handling by @crazy-max in docker/login-action#1059

Bump @aws-sdk/client-ecr and @aws-sdk/client-ecr-public to 3.1095.0 in docker/login-action#1051

Bump js-yaml from 5.2.1 to 5.2.2 in docker/login-action#1057

Bump postcss from 8.5.10 to 8.5.22 in docker/login-action#1056

Full Changelog: docker/login-action@v4.5.2...v4.6.0

v4.5.2

Surface Docker Hub OIDC error responses by @crazy-max in docker/login-action#1058

Full Changelog: docker/login-action@v4.5.1...v4.5.2

v4.5.1

Support dhi.io as Docker Hub OIDC registry by @crazy-max in docker/login-action#1054

Full Changelog: docker/login-action@v4.5.0...v4.5.1

v4.5.0

Docker Hub OIDC login support by @crazy-max in docker/login-action#1048

Bump @aws-sdk/client-ecr and @aws-sdk/client-ecr-public to 3.1091.0 in docker/login-action#1037

Bump @docker/actions-toolkit from 0.92.0 to 0.94.0 in docker/login-action#1044 docker/login-action#1050

Bump brace-expansion from 1.1.13 to 1.1.16 in docker/login-action#1046

Bump js-yaml from 5.2.0 to 5.2.1 in docker/login-action#1038

Full Changelog: docker/login-action@v4.4.0...v4.5.0

v4.4.0

Skip empty registry-auth secret mask by @crazy-max in docker/login-action#1035

Bump @aws-sdk/client-ecr and @aws-sdk/client-ecr-public to 3.1077.0 docker/login-action#1034

Full Changelog: docker/login-action@v4.3.0...v4.4.0

v4.3.0

Preserve names in esbuild bundle by @crazy-max in docker/login-action#1022

Bump @aws-sdk/client-ecr and @aws-sdk/client-ecr-public to 3.1076.0 docker/login-action#999 docker/login-action#1030

Bump @docker/actions-toolkit from 0.90.0 to 0.92.0 in docker/login-action#1004 docker/login-action#1027

Bump @sigstore/core from 3.1.0 to 3.2.1 in docker/login-action#1023

Bump @sigstore/verify from 3.1.0 to 3.1.1 in docker/login-action#1029

Bump http-proxy-agent and https-proxy-agent to 9.1.0 in docker/login-action#1017

Bump js-yaml from 4.1.1 to 5.2.0 in docker/login-action#1028

Bump sigstore from 4.1.0 to 4.1.1 in docker/login-action#1031

Bump tmp from 0.2.5 to 0.2.7 in docker/login-action#1002

Bump undici from 6.24.1 to 6.27.0 in docker/login-action#1020

Bump vite from 7.3.3 to 7.3.6 in docker/login-action#1019

Full Changelog: docker/login-action@v4.2.0...v4.3.0

v4.2.0

Bump @actions/core from 3.0.0 to 3.0.1 in docker/login-action#976

... (truncated)

Commits

dbcb813 Merge pull request #1051 from docker/dependabot/npm_and_yarn/aws-sdk-dependen...
5bcb015 [dependabot skip] chore: update generated content
b30b2f2 build(deps): bump the aws-sdk-dependencies group across 1 directory with 2 up...
9087f1e Merge pull request #1057 from docker/dependabot/npm_and_yarn/js-yaml-5.2.2
0009830 [dependabot skip] chore: update generated content
2325523 build(deps): bump js-yaml from 5.2.1 to 5.2.2
4ec1d4a Merge pull request #1056 from docker/dependabot/npm_and_yarn/postcss-8.5.22
5fc99ba Merge pull request #1053 from docker/dependabot/github_actions/aws-actions/co...
e512bd5 Merge pull request #1052 from docker/dependabot/github_actions/codeql-actions...
a146c91 Merge pull request #1059 from crazy-max/harden-buildx-scope-paths
Additional commits viewable in compare view

Updates actions/setup-go from 5.5.0 to 7.0.0

Release notes

Sourced from actions/setup-go's releases.

v7.0.0

What's Changed

Migrate to ESM and upgrade dependencies by @priyagupta108 in actions/setup-go#763

chore(deps): bump @actions/cache to 6.2.0 by @philip-gai in actions/setup-go#771

New Contributors

@philip-gai made their first contribution in actions/setup-go#771

Full Changelog: actions/setup-go@v6...v7.0.0

v6.5.0

What's Changed

Dependency update

Upgrade actions dependencies by @priyagupta108 with @Copilot in actions/setup-go#744

Upgrade @types/node and typescript-eslint dependencies to resolve npm audit findings by @HarithaVattikuti in actions/setup-go#755

Upgrade @actions/cache to 5.1.0, log cache write denied by @jasongin in actions/setup-go#758

Upgrade version to 6.5.0 in package.json and package-lock.json by @HarithaVattikuti in actions/setup-go#762

New Contributors

@priyagupta108 with @Copilot made their first contribution in actions/setup-go#744

@jasongin made their first contribution in actions/setup-go#758

Full Changelog: actions/setup-go@v6...v6.5.0

v6.4.0

What's Changed

Enhancement

Add go-download-base-url input for custom Go distributions by @gdams in actions/setup-go#721

Dependency update

Upgrade minimatch from 3.1.2 to 3.1.5 by @dependabot in actions/setup-go#727

Documentation update

Rearrange README.md, add advanced-usage.md by @priyagupta108 in actions/setup-go#724

Fix Microsoft build of Go link by @gdams in actions/setup-go#734

New Contributors

@gdams made their first contribution in actions/setup-go#721

Full Changelog: actions/setup-go@v6...v6.4.0

v6.3.0

What's Changed

Update default Go module caching to use go.mod by @priyagupta108 in actions/setup-go#705

Fix golang download url to go.dev by @178inaba in actions/setup-go#469

Full Changelog: actions/setup-go@v6...v6.3.0

v6.2.0

What's Changed

... (truncated)

Commits

b7ad1da chore(deps): bump @actions/cache to 6.2.0 (#771)
0778a10 Migrate to ESM and upgrade dependencies (#763)
924ae3a chore: bump version to 6.5.0 in package.json and package-lock.json (#762)
e91cc3b Bump @actions/cache to 5.1.0, log cache write denied (#758)
4a2405e chore: update @types/node and @typescript-eslint dependencies to latest versi...
78961f6 chore: update @actions dependencies and refresh license cache (#744)
4a36011 docs: fix Microsoft build of Go link (#734)
8f19afc feat: add go-download-base-url input for custom Go distributions (#721)
27fdb26 Bump minimatch from 3.1.2 to 3.1.5 (#727)
def8c39 Rearrange README.md, add advanced-usage.md (#724)
Additional commits viewable in compare view

Updates actions/upload-artifact from 7.0.1 to 7.0.2

Release notes

Sourced from actions/upload-artifact's releases.

v7.0.2

What's Changed

Improves artifact download retries when the service returns HTTP 429 (rate limiting), including honoring valid Retry-After headers.

Updates @actions/artifact to v6.3.1.

New Contributors

@tunc-d made their first contribution in actions/upload-artifact#821

Full Changelog: actions/upload-artifact@v7.0.1...v7.0.2

Commits

cf430e0 Merge pull request #822 from actions/tunc-d-prepare-upload-v7-0-2
c2acded chore: prepare v7.0.2 release
4687c1b Merge pull request #821 from actions/tunc-d-upload-artifact-package-bump
8cbe1be Bump @actions/artifact to 6.3.1
See full diff in compare view

Updates praxis-proxy/conventions/.github/actions/setup-rust from 0.1.0 to 0.3.0

Commits

c5837c3 release: v0.3.0
bd62781 feat(ci): let other repos run these workflows instead of copying them
747ec18 fix(ci): let the org's maintainer teams triage issues
23a6013 fix(ci): explain PR Conventions failures on fork and Dependabot PRs
fee1681 fix(ci): stop PR Conventions failing on every Dependabot PR
f4422e2 chore(deps): Bump docker/build-push-action (#11)
29ef9b4 chore(deps): Bump taiki-e/install-action (#12)
47bb6d1 feat: add metadata-context input to ghcr-publish action (#8)
cfdba0f chore(deps): Bump docker/setup-buildx-action (#7)
728a69f chore(deps): Bump docker/login-action in /.github/actions/ghcr-publish (#6)
Additional commits viewable in compare view

Updates docker/build-push-action from 6.18.0 to 7.4.0

Release notes

Sourced from docker/build-push-action's releases.

v7.4.0

Use the shared error helper for Buildx commands by @crazy-max in docker/build-push-action#1620

Prevent workflow command injection in metadata logs by @crazy-max in docker/build-push-action#1617

Bump @docker/actions-toolkit from 0.92.0 to 0.100.0 in docker/build-push-action#1614 docker/build-push-action#1618 docker/build-push-action#1621

Bump @humanfs/node from 0.16.7 to 0.16.8 in docker/build-push-action#1609

Bump brace-expansion from 1.1.13 to 1.1.18 in docker/build-push-action#1592

Bump csv-parse from 7.0.0 to 7.0.2 in docker/build-push-action#1613

Bump js-yaml from 4.3.0 to 4.3.2 in docker/build-push-action#1605 docker/build-push-action#1615

Bump nanoid from 3.3.16 to 3.3.18 in docker/build-push-action#1611

Bump postcss from 8.5.10 to 8.5.25 in docker/build-push-action#1590

Bump postcss-selector-parser from 7.1.1 to 7.1.5 in docker/build-push-action#1606

Bump sigstore from 4.1.0 to 4.1.1 in docker/build-push-action#1577

Bump undici from 6.27.0 to 6.28.0 in docker/build-push-action#1594

Full Changelog: docker/build-push-action@v7.3.0...v7.4.0

v7.3.0

Preserve names in esbuild bundle by @crazy-max in docker/build-push-action#1567

Bump @docker/actions-toolkit from 0.90.0 to 0.92.0 in docker/build-push-action#1545 docker/build-push-action#1572

Bump @sigstore/core from 3.1.0 to 3.2.1 in docker/build-push-action#1568

Bump js-yaml from 4.1.1 to 4.3.0 in docker/build-push-action#1566

Bump tmp from 0.2.5 to 0.2.7 in docker/build-push-action#1547

Bump undici from 6.24.1 to 6.27.0 in docker/build-push-action#1564

Bump vite from 7.3.2 to 7.3.6 in docker/build-push-action#1563

Full Changelog: docker/build-push-action@v7.2.0...v7.3.0

v7.2.0

Bump @actions/core from 3.0.0 to 3.0.1 in docker/build-push-action#1525

Bump @docker/actions-toolkit from 0.87.0 to 0.90.0 in docker/build-push-action#1517

Bump brace-expansion from 2.0.2 to 5.0.6 in docker/build-push-action#1534

Bump fast-xml-builder from 1.1.4 to 1.2.0 in docker/build-push-action#1529

Bump fast-xml-parser from 5.5.7 to 5.8.0 in docker/build-push-action#1521

Bump postcss from 8.5.6 to 8.5.10 in docker/build-push-action#1526

Bump tar from 6.2.1 to 7.5.15 in docker/build-push-action#1533

Full Changelog: docker/build-push-action@v7.1.0...v7.2.0

v7.1.0

Git context query format support by @crazy-max in docker/build-push-action#1505

Bump @docker/actions-toolkit from 0.79.0 to 0.87.0 by @crazy-max in docker/build-push-action#1505

Bump brace-expansion from 1.1.12 to 1.1.13 in docker/build-push-action#1500

Bump fast-xml-parser from 5.4.2 to 5.5.7 in docker/build-push-action#1489

Bump flatted from 3.3.3 to 3.4.2 in docker/build-push-action#1491

Bump glob from 10.3.12 to 10.5.0 in docker/build-push-action#1490

Bump handlebars from 4.7.8 to 4.7.9 in docker/build-push-action#1497

Bump lodash from 4.17.23 to 4.18.1 in docker/build-push-action#1510

Bump picomatch from 4.0.3 to 4.0.4 in docker/build-push-action#1496

Bump undici from 6.23.0 to 6.24.1 in docker/build-push-action#1486

Bump vite from 7.3.1 to 7.3.2 in docker/build-push-action#1509

... (truncated)

Commits

c3c9e26 Merge pull request #1621 from docker/dependabot/npm_and_yarn/docker/actions-t...
459b674 [dependabot skip] chore: update generated content
4dedcb2 chore(deps): Bump @docker/actions-toolkit from 0.99.0 to 0.100.0
379bf63 Merge pull request #1620 from crazy-max/buildx-error-message
9877975 chore: update generated content
7ed0556 use the shared Buildx error summary helper
91670ba Merge pull request #1618 from docker/dependabot/npm_and_yarn/docker/actions-t...
80dbc86 [dependabot skip] chore: update generated content
50cac3a chore(deps): Bump @docker/actions-toolkit from 0.98.0 to 0.99.0
03b4d6c Merge pull request #1617 from crazy-max/fix-metadata-workflow-commands
Additional commits viewable in compare view

Updates praxis-proxy/conventions/.github/actions/setup-rust-lint from 0.1.0 to 0.3.0

Commits

c5837c3 release: v0.3.0
bd62781 feat(ci): let other repos run these workflows instead of copying them
747ec18 fix(ci): let the org's maintainer teams triage issues
23a6013 fix(ci): explain PR Conventions failures on fork and Dependabot PRs
fee1681 fix(ci): stop PR Conventions failing on every Dependabot PR
f4422e2 chore(deps): Bump docker/build-push-action (#11)
29ef9b4 chore(deps): Bump taiki-e/install-action (#12)
47bb6d1 feat: add metadata-context input to ghcr-publish action (#8)
cfdba0f chore(deps): Bump docker/setup-buildx-action (#7)
728a69f chore(deps): Bump docker/login-action in /.github/actions/ghcr-publish (#6)
Additional commits viewable in compare view

Updates praxis-proxy/conventions/.github/actions/coverage-check from 0.1.0 to 0.3.0

Commits

c5837c3 release: v0.3.0
bd62781 feat(ci): let other repos run these workflows instead of copying them
747ec18 fix(ci): let the org's maintainer teams triage issues
23a6013 fix(ci): explain PR Conventions failures on fork and Dependabot PRs
fee1681 fix(ci): stop PR Conventions failing on every Dependabot PR
f4422e2 chore(deps): Bump docker/build-push-action (#11)
29ef9b4 chore(deps): Bump taiki-e/install-action (#12)
47bb6d1 feat: add metadata-context input to ghcr-publish action (#8)
cfdba0f chore(deps): Bump docker/setup-buildx-action (#7)
728a69f chore(deps): Bump docker/login-action in /.github/actions/ghcr-publish (#6)
Additional commits viewable in compare view

Updates praxis-proxy/conventions/.github/actions/supply-chain-audit from 0.1.0 to 0.3.0

Commits

c5837c3 release: v0.3.0
bd62781 feat(ci): let other repos run these workflows instead of copying them
747ec18 fix(ci): let the org's maintainer teams triage issues
23a6013 fix(ci): explain PR Conventions failures on fork and Dependabot PRs
fee1681 fix(ci): stop PR Conventions failing on every Dependabot PR
f4422e2 chore(deps): Bump docker/build-push-action (#11)
29ef9b4 chore(deps): Bump taiki-e/install-action (#12)
47bb6d1 feat: add metadata-context input to ghcr-publish action (#8)
cfdba0f chore(deps): Bump docker/setup-buildx-action (#7)
728a69f chore(deps): Bump docker/login-action in /.github/actions/ghcr-publish (#6)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the actions group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [docker/login-action](https://github.com/docker/login-action) | `4.1.0` | `4.6.0` | | [actions/setup-go](https://github.com/actions/setup-go) | `5.5.0` | `7.0.0` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `7.0.1` | `7.0.2` | | [praxis-proxy/conventions/.github/actions/setup-rust](https://github.com/praxis-proxy/conventions) | `0.1.0` | `0.3.0` | | [docker/build-push-action](https://github.com/docker/build-push-action) | `6.18.0` | `7.4.0` | | [praxis-proxy/conventions/.github/actions/setup-rust-lint](https://github.com/praxis-proxy/conventions) | `0.1.0` | `0.3.0` | | [praxis-proxy/conventions/.github/actions/coverage-check](https://github.com/praxis-proxy/conventions) | `0.1.0` | `0.3.0` | | [praxis-proxy/conventions/.github/actions/supply-chain-audit](https://github.com/praxis-proxy/conventions) | `0.1.0` | `0.3.0` | Updates `docker/login-action` from 4.1.0 to 4.6.0 - [Release notes](https://github.com/docker/login-action/releases) - [Commits](docker/login-action@4907a6d...dbcb813) Updates `actions/setup-go` from 5.5.0 to 7.0.0 - [Release notes](https://github.com/actions/setup-go/releases) - [Commits](actions/setup-go@d35c59a...b7ad1da) Updates `actions/upload-artifact` from 7.0.1 to 7.0.2 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@043fb46...cf430e0) Updates `praxis-proxy/conventions/.github/actions/setup-rust` from 0.1.0 to 0.3.0 - [Changelog](https://github.com/praxis-proxy/conventions/blob/main/docs/release.md) - [Commits](praxis-proxy/conventions@7e1e8d9...c5837c3) Updates `docker/build-push-action` from 6.18.0 to 7.4.0 - [Release notes](https://github.com/docker/build-push-action/releases) - [Commits](docker/build-push-action@2634353...c3c9e26) Updates `praxis-proxy/conventions/.github/actions/setup-rust-lint` from 0.1.0 to 0.3.0 - [Changelog](https://github.com/praxis-proxy/conventions/blob/main/docs/release.md) - [Commits](praxis-proxy/conventions@7e1e8d9...c5837c3) Updates `praxis-proxy/conventions/.github/actions/coverage-check` from 0.1.0 to 0.3.0 - [Changelog](https://github.com/praxis-proxy/conventions/blob/main/docs/release.md) - [Commits](praxis-proxy/conventions@7e1e8d9...c5837c3) Updates `praxis-proxy/conventions/.github/actions/supply-chain-audit` from 0.1.0 to 0.3.0 - [Changelog](https://github.com/praxis-proxy/conventions/blob/main/docs/release.md) - [Commits](praxis-proxy/conventions@7e1e8d9...c5837c3) --- updated-dependencies: - dependency-name: docker/login-action dependency-version: 4.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: actions/setup-go dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/upload-artifact dependency-version: 7.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: praxis-proxy/conventions/.github/actions/setup-rust dependency-version: 0.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: docker/build-push-action dependency-version: 7.4.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: praxis-proxy/conventions/.github/actions/setup-rust-lint dependency-version: 0.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: praxis-proxy/conventions/.github/actions/coverage-check dependency-version: 0.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: praxis-proxy/conventions/.github/actions/supply-chain-audit dependency-version: 0.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions ... Signed-off-by: dependabot[bot] <support@github.com>

coderabbitai · 2026-10-14T04:12:25Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository: praxis-proxy/coderabbit/.coderabbit.yaml
Review profile: ASSERTIVE
Plan: Advanced
Run ID: 047a2005-e453-4d5d-b07a-0e0fce7e35ce

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

dependabot · 2026-10-19T20:45:44Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Oct 14, 2026

dependabot Bot closed this Oct 19, 2026

dependabot Bot deleted the dependabot/github_actions/actions-bcbd6def6a branch October 19, 2026 20:45

Navigation Menu

Repository navigation

ci(deps): bump the actions group across 1 directory with 8 updates - #19

ci(deps): bump the actions group across 1 directory with 8 updates#19
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions-bcbd6def6a

dependabot Bot commented on behalf of github Oct 14, 2026 •

edited

Loading

Uh oh!

coderabbitai Bot commented Oct 14, 2026

Review skipped

Uh oh!

dependabot Bot commented on behalf of github Oct 19, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 14, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v4.6.0

v4.5.2

v4.5.1

v4.5.0

v4.4.0

v4.3.0

v4.2.0

v7.0.0

What's Changed

New Contributors

v6.5.0

What's Changed

Dependency update

New Contributors

v6.4.0

What's Changed

Enhancement

Dependency update

Documentation update

New Contributors

v6.3.0

What's Changed

v6.2.0

What's Changed

v7.0.2

What's Changed

New Contributors

v7.4.0

v7.3.0

v7.2.0

v7.1.0

Uh oh!

coderabbitai Bot commented Oct 14, 2026

Review skipped

Uh oh!

dependabot Bot commented on behalf of github Oct 19, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Oct 14, 2026 •

edited

Loading