Bumps the github-actions group with 6 updates in the / directory:
Updatesactions/checkout from 5.0.0 to 6.0.0
Release notes
Sourced fromactions/checkout's releases.
v6.0.0
What's Changed
Full Changelog:actions/checkout@v5.0.0...v6.0.0
v6-beta
What's Changed
Updated persist-credentials to store the credentials under$RUNNER_TEMP instead of directly in the local git config.
This requires a minimum Actions Runner version ofv2.329.0 to access the persisted credentials forDocker container action scenarios.
v5.0.1
What's Changed
Full Changelog:actions/checkout@v5...v5.0.1
Changelog
Sourced fromactions/checkout's changelog.
Changelog
V6.0.0
V5.0.1
V5.0.0
V4.3.1
V4.3.0
v4.2.2
v4.2.1
v4.2.0
v4.1.7
v4.1.6
v4.1.5
... (truncated)
Commits
Updatescrate-ci/typos from 1.39.2 to 1.40.0
Release notes
Sourced fromcrate-ci/typos's releases.
v1.40.0
[1.40.0] - 2025-11-26
Features
Changelog
Sourced fromcrate-ci/typos's changelog.
Change Log
All notable changes to this project will be documented in this file.
The format is based onKeep a Changelogand this project adheres toSemantic Versioning.
[Unreleased] - ReleaseDate
[1.40.0] - 2025-11-26
Features
[1.39.2] - 2025-11-13
Fixes
- Don't offer
entry as a correction forentrys
[1.39.1] - 2025-11-12
Features
[1.39.0] - 2025-10-31
Features
Fixes
- When a typo is pluralized, prefer pluralized corrections
[1.38.1] - 2025-10-07
Fixes
- Ignore common golang identifiers
[1.38.0] - 2025-10-06
Features
Fixes
... (truncated)
Commits
Updateschromaui/action from 13.3.3 to 13.3.4
Commits
Updatesfluxcd/flux2 from 2.7.3 to 2.7.5
Release notes
Sourced fromfluxcd/flux2's releases.
v2.7.5
Highlights
Flux v2.7.5 is a patch release that comes with fixes to helm-controller. Users are encouraged to upgrade for the best experience.
ℹ️ Please follow theUpgrade Procedure for Flux v2.7+ for a smooth upgrade from Flux v2.6 to the latest version.
Fixes:
- Fix HelmRelease history truncation when using the
RetryOnFailure strategy.
⚠️ Note that signature verification for OCI artifacts in source-controller is not compatible with Cosign v3.Flux users are advised to useCosign v2.6 for signing Flux OCI artifacts and Helm charts, until support for Cosign v3 is added in Flux v2.8.
Components changelog
CLI changelog
Full Changelog:fluxcd/flux2@v2.7.4...v2.7.5
v2.7.4
Highlights
Flux v2.7.4 is a patch release that comes with various fixes. Users are encouraged to upgrade for the best experience.
ℹ️ Please follow theUpgrade Procedure for Flux v2.7+ for a smooth upgrade from Flux v2.6 to the latest version.
Fixes:
- Add
DisableConfigWatchers feature gate to all controllers for disabling the Secrets/ConfigMaps watchers - Fix Workload Identity for Azure China Cloud in all controllers
- Update Helm Go SDK to v3.19.2 fixing schema validation issues in helm-controller
- Skip secret decryption for remote kustomize patches in kustomize-controller
- Improve post-build error reporting in kustomize-controller
- Add
ArtifactGenerator to aggregated RBAC roles
⚠️ Note that signature verification for OCI artifacts in source-controller is not compatible with Cosign v3.Flux users are advised to useCosign v2.6 for signing Flux OCI artifacts and Helm charts, until support for Cosign v3 is added in Flux v2.8.
Components changelog
... (truncated)
Commits
8454b02 Merge pull request#5649 from fluxcd/backport-5648-to-release/v2.7.x931f101 Update toolkit components06ed49d Merge pull request#5642 from fluxcd/backport-5597-to-release/v2.7.x6021981 Allow option to skip tenant namespace creation4b7d46e Merge pull request#5640 from fluxcd/backport-5639-to-release/v2.7.xe8c8704 Update toolkit componentsabd603e Merge pull request#5635 from fluxcd/backport-5625-to-release/v2.7.x83d426c diff: report if object is skipped48e77c8 Merge pull request#5634 from fluxcd/backport-5633-to-release/v2.7.x01fbe37 Upgrade k8s to 1.34.2, c-r to 0.22.4 and helm to 3.19.2- Additional commits viewable incompare view
Updatestj-actions/changed-files from 70069877f29101175ed2b055d210fe8b1d54d7d7 to abdd2f68ea150cee8f236d4a9fb4e0f2491abf1b
Changelog
Sourced fromtj-actions/changed-files's changelog.
Changelog
47.0.0 - (2025-09-13)
🚀 Features
➖ Remove
- Commit and push step from build job (#2538) (be393a9) - (Tonye Jack)
🔄 Update
- Updated README.md (#2592)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> (3dbc1e1) - (github-actions[bot])
- Updated README.md (#2591)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> (b1ccff8) - (github-actions[bot])
- Updated README.md (#2574)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> (050a3d3) - (github-actions[bot])
📚 Documentation
- Update link to glob patterns (#2590) (a892f50) - (Tonye Jack)
- Add Jellyfrog as a contributor for code, and doc (#2573) (f000a9b) - (allcontributors[bot])
🧪 Testing
⚙️ Miscellaneous Tasks
- deps-dev: Bump jest from 30.0.5 to 30.1.3 (#2655) (9a67555) - (dependabot[bot])
- deps: Bump tj-actions/git-cliff from 2.1.0 to 2.2.0 (#2660) (b67e30d) - (dependabot[bot])
- deps: Bump github/codeql-action from 3.30.2 to 3.30.3 (#2661) (62aef42) - (dependabot[bot])
- deps: Bump github/codeql-action from 3.29.11 to 3.30.2 (#2659) (e874f3c) - (dependabot[bot])
- deps: Bump actions/setup-node from 4.4.0 to 5.0.0 (#2656) (8c14441) - (dependabot[bot])
- deps-dev: Bump
@types/node from 24.3.0 to 24.3.1 (#2657) (e995ac4) - (dependabot[bot]) - deps-dev: Bump
@types/node from 24.2.1 to 24.3.0 (#2649) (3b04099) - (dependabot[bot]) - deps: Bump github/codeql-action from 3.29.9 to 3.29.11 (#2651) (e7b6c97) - (dependabot[bot])
- deps: Bump tj-actions/git-cliff from 2.0.2 to 2.1.0 (#2648) (765d62b) - (dependabot[bot])
- deps: Bump github/codeql-action from 3.29.8 to 3.29.9 (#2647) (2036da1) - (dependabot[bot])
- deps: Bump github/codeql-action from 3.29.7 to 3.29.8 (#2644) (239aef8) - (dependabot[bot])
- deps-dev: Bump
@types/node from 24.2.0 to 24.2.1 (#2645) (a7d5f5f) - (dependabot[bot]) - deps: Bump actions/checkout from 4.2.2 to 5.0.0 (#2646) (5107f3a) - (dependabot[bot])
- deps-dev: Bump
@types/node from 24.1.0 to 24.2.0 (#2640) (f963b3f) - (dependabot[bot]) - deps: Bump actions/download-artifact from 4.3.0 to 5.0.0 (#2641) (f956744) - (dependabot[bot])
... (truncated)
Commits
abdd2f6 chore(deps): bump peter-evans/create-pull-request from 7.0.8 to 7.0.9 (#2717)1d08ab2 chore(deps-dev): bump@types/lodash from 4.17.20 to 4.17.21 (#2718)085eb10 chore(deps-dev): bump eslint-plugin-jest from 29.1.0 to 29.2.1 (#2719)72321d1 chore(deps): bump github/codeql-action from 4.31.4 to 4.31.5 (#2720)8c66df4 chore(deps-dev): bump prettier from 3.6.2 to 3.7.1 (#2722)6da3c88 chore(deps): bump nrwl/nx-set-shas from 4.3.3 to 4.4.0 (#2712)48b6e97 chore(deps): bump actions/checkout from 5.0.0 to 5.0.1 (#2714)4206138 Update README.md31e663c chore(deps): bump github/codeql-action from 4.31.2 to 4.31.4 (#2715)46fd332 chore(deps-dev): bump@types/node from 24.10.0 to 24.10.1 (#2711)- Additional commits viewable incompare view
Updatesgithub/codeql-action from 4.31.3 to 4.31.6
Release notes
Sourced fromgithub/codeql-action's releases.
v4.31.6
CodeQL Action Changelog
See thereleases page for the relevant changes to the CodeQL CLI and language packs.
4.31.6 - 01 Dec 2025
No user facing changes.
See the fullCHANGELOG.md for more information.
v4.31.5
CodeQL Action Changelog
See thereleases page for the relevant changes to the CodeQL CLI and language packs.
4.31.5 - 24 Nov 2025
- Update default CodeQL bundle version to 2.23.6.#3321
See the fullCHANGELOG.md for more information.
v4.31.4
CodeQL Action Changelog
See thereleases page for the relevant changes to the CodeQL CLI and language packs.
4.31.4 - 18 Nov 2025
No user facing changes.
See the fullCHANGELOG.md for more information.
Changelog
Sourced fromgithub/codeql-action's changelog.
CodeQL Action Changelog
See thereleases page for the relevant changes to the CodeQL CLI and language packs.
[UNRELEASED]
No user facing changes.
4.31.6 - 01 Dec 2025
No user facing changes.
4.31.5 - 24 Nov 2025
- Update default CodeQL bundle version to 2.23.6.#3321
4.31.4 - 18 Nov 2025
No user facing changes.
4.31.3 - 13 Nov 2025
- CodeQL Action v3 will be deprecated in December 2026. The Action now logs a warning for customers who are running v3 but could be running v4. For more information, seeUpcoming deprecation of CodeQL Action v3.
- Update default CodeQL bundle version to 2.23.5.#3288
4.31.2 - 30 Oct 2025
No user facing changes.
4.31.1 - 30 Oct 2025
- The
add-snippets input has been removed from theanalyze action. This input has been deprecated since CodeQL Action 3.26.4 in August 2024 when this removal was announced.
4.31.0 - 24 Oct 2025
- Bump minimum CodeQL bundle version to 2.17.6.#3223
- When SARIF files are uploaded by the
analyze orupload-sarif actions, the CodeQL Action automatically performs post-processing steps to prepare the data for the upload. Previously, these post-processing steps were only performed before an upload took place. We are now changing this so that the post-processing steps will always be performed, even when the SARIF files are not uploaded. This does not change anything for theupload-sarif action. Foranalyze, this may affect Advanced Setup for CodeQL users who specify a value other thanalways for theupload input.#3222
4.30.9 - 17 Oct 2025
- Update default CodeQL bundle version to 2.23.3.#3205
- Experimental: A new
setup-codeql action has been added which is similar toinit, except it only installs the CodeQL CLI and does not initialize a database. Do not use this in production as it is part of an internal experiment and subject to change at any time.#3204
4.30.8 - 10 Oct 2025
No user facing changes.
4.30.7 - 06 Oct 2025
- [v4+ only] The CodeQL Action now runs on Node.js v24.#3169
... (truncated)
Commits
fe4161a Merge pull request#3336 from github/update-v4.31.6-ecec1f88788c2ab5 Update changelog for v4.31.6ecec1f8 Merge pull request#3335 from github/mbg/ci/run-codeql-on-all-prs23da732 Merge pull request#3334 from github/kaspersv/overlay-minor-commentsf7abc74 Remove branch filter for PR event in CodeQL workflow32ada5e Merge branch 'main' into kaspersv/overlay-minor-comments75b2f49 Merge pull request#3333 from github/kaspersv/overlay-no-resource-checks-optionf036b1c Merge branch 'main' into kaspersv/overlay-no-resource-checks-option58c5954 Add comment to runnerSupportsOverlayAnalysisb02fa13 Order feature flags alphabetically- Additional commits viewable incompare view
Most Recent Ignore Conditions Applied to This Pull Request
| Dependency Name | Ignore Conditions |
|---|
| crate-ci/typos | [>= 1.30.a, < 1.31] |
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting@dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase will rebase this PR@dependabot recreate will recreate this PR, overwriting any edits that have been made to it@dependabot merge will merge this PR after your CI passes on it@dependabot squash and merge will squash and merge this PR after your CI passes on it@dependabot cancel merge will cancel a previously requested merge and block automerging@dependabot reopen will reopen this PR if it is closed@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
Bumps the github-actions group with 6 updates in the / directory:
5.0.06.0.01.39.21.40.013.3.313.3.42.7.32.7.570069877f29101175ed2b055d210fe8b1d54d7d7abdd2f68ea150cee8f236d4a9fb4e0f2491abf1b4.31.34.31.6Updates
actions/checkoutfrom 5.0.0 to 6.0.0Release notes
Sourced fromactions/checkout's releases.
Changelog
Sourced fromactions/checkout's changelog.
... (truncated)
Commits
1af3b93update readme/changelog for v6 (#2311)71cf226v6-beta (#2298)069c695Persist creds to a separate file (#2286)ff7abcdUpdate README to include Node.js 24 support details and requirements (#2248)Updates
crate-ci/typosfrom 1.39.2 to 1.40.0Release notes
Sourced fromcrate-ci/typos's releases.
Changelog
Sourced fromcrate-ci/typos's changelog.
... (truncated)
Commits
2d0ce56chore: Releaseefbd900chore: Release863fd15docs: Update changelog9a27b16Merge pull request#1432 from epage/nov3dbd9d4feat(dict): November additionsa1a16c7Merge pull request#1427 from deining/bump-github-actioncb8d2e7docs: Bump GitHub checkout action in 'github-action.md'9f99fb8docs(ref): Clarify extend-words / extend-identifiersUpdates
chromaui/actionfrom 13.3.3 to 13.3.4Commits
4c20b95v13.3.4Updates
fluxcd/flux2from 2.7.3 to 2.7.5Release notes
Sourced fromfluxcd/flux2's releases.
... (truncated)
Commits
8454b02Merge pull request#5649 from fluxcd/backport-5648-to-release/v2.7.x931f101Update toolkit components06ed49dMerge pull request#5642 from fluxcd/backport-5597-to-release/v2.7.x6021981Allow option to skip tenant namespace creation4b7d46eMerge pull request#5640 from fluxcd/backport-5639-to-release/v2.7.xe8c8704Update toolkit componentsabd603eMerge pull request#5635 from fluxcd/backport-5625-to-release/v2.7.x83d426cdiff: report if object is skipped48e77c8Merge pull request#5634 from fluxcd/backport-5633-to-release/v2.7.x01fbe37Upgrade k8s to 1.34.2, c-r to 0.22.4 and helm to 3.19.2Updates
tj-actions/changed-filesfrom 70069877f29101175ed2b055d210fe8b1d54d7d7 to abdd2f68ea150cee8f236d4a9fb4e0f2491abf1bChangelog
Sourced fromtj-actions/changed-files's changelog.
... (truncated)
Commits
abdd2f6chore(deps): bump peter-evans/create-pull-request from 7.0.8 to 7.0.9 (#2717)1d08ab2chore(deps-dev): bump@types/lodashfrom 4.17.20 to 4.17.21 (#2718)085eb10chore(deps-dev): bump eslint-plugin-jest from 29.1.0 to 29.2.1 (#2719)72321d1chore(deps): bump github/codeql-action from 4.31.4 to 4.31.5 (#2720)8c66df4chore(deps-dev): bump prettier from 3.6.2 to 3.7.1 (#2722)6da3c88chore(deps): bump nrwl/nx-set-shas from 4.3.3 to 4.4.0 (#2712)48b6e97chore(deps): bump actions/checkout from 5.0.0 to 5.0.1 (#2714)4206138Update README.md31e663cchore(deps): bump github/codeql-action from 4.31.2 to 4.31.4 (#2715)46fd332chore(deps-dev): bump@types/nodefrom 24.10.0 to 24.10.1 (#2711)Updates
github/codeql-actionfrom 4.31.3 to 4.31.6Release notes
Sourced fromgithub/codeql-action's releases.
Changelog
Sourced fromgithub/codeql-action's changelog.
... (truncated)
Commits
fe4161aMerge pull request#3336 from github/update-v4.31.6-ecec1f88788c2ab5Update changelog for v4.31.6ecec1f8Merge pull request#3335 from github/mbg/ci/run-codeql-on-all-prs23da732Merge pull request#3334 from github/kaspersv/overlay-minor-commentsf7abc74Remove branch filter for PR event in CodeQL workflow32ada5eMerge branch 'main' into kaspersv/overlay-minor-comments75b2f49Merge pull request#3333 from github/kaspersv/overlay-no-resource-checks-optionf036b1cMerge branch 'main' into kaspersv/overlay-no-resource-checks-option58c5954Add comment to runnerSupportsOverlayAnalysisb02fa13Order feature flags alphabeticallyMost Recent Ignore Conditions Applied to This Pull Request
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions