Skip to content

chore(deps): bump the github-actions group across 1 directory with 4 updates#5612

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-0e7a2c6b32
Open

chore(deps): bump the github-actions group across 1 directory with 4 updates#5612
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-0e7a2c6b32

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 24, 2026

Copy link
Copy Markdown
Contributor

Bumps the github-actions group with 4 updates in the / directory: actions/cache, getsentry/craft/.github/workflows/changelog-preview.yml, getsentry/craft and actions/setup-python.

Updates actions/cache from 5.0.5 to 6.0.0

Release notes

Sourced from actions/cache's releases.

v6.0.0

What's Changed

Full Changelog: actions/cache@v5...v6.0.0

Changelog

Sourced from actions/cache's changelog.

Releases

How to prepare a release

[!NOTE] Relevant for maintainers with write access only.

  1. Switch to a new branch from main.
  2. Run npm test to ensure all tests are passing.
  3. Update the version in https://github.com/actions/cache/blob/main/package.json.
  4. Run npm run build to update the compiled files.
  5. Update this https://github.com/actions/cache/blob/main/RELEASES.md with the new version and changes in the ## Changelog section.
  6. Run licensed cache to update the license report.
  7. Run licensed status and resolve any warnings by updating the https://github.com/actions/cache/blob/main/.licensed.yml file with the exceptions.
  8. Commit your changes and push your branch upstream.
  9. Open a pull request against main and get it reviewed and merged.
  10. Draft a new release https://github.com/actions/cache/releases use the same version number used in package.json
    1. Create a new tag with the version number.
    2. Auto generate release notes and update them to match the changes you made in RELEASES.md.
    3. Toggle the set as the latest release option.
    4. Publish the release.
  11. Navigate to https://github.com/actions/cache/actions/workflows/release-new-action-version.yml
    1. There should be a workflow run queued with the same version number.
    2. Approve the run to publish the new version and update the major tags for this action.

Changelog

6.1.0

6.0.0

  • Updated @actions/cache to ^6.0.1, @actions/core to ^3.0.1, @actions/exec to ^3.0.0, @actions/io to ^3.0.2
  • Migrated to ESM module system
  • Upgraded Jest to v30 and test infrastructure to be ESM compatible

5.0.4

  • Bump minimatch to v3.1.5 (fixes ReDoS via globstar patterns)
  • Bump undici to v6.24.1 (WebSocket decompression bomb protection, header validation fixes)
  • Bump fast-xml-parser to v5.5.6

5.0.3

5.0.2

... (truncated)

Commits

Updates getsentry/craft/.github/workflows/changelog-preview.yml from 2.26.10 to 2.26.12

Release notes

Sourced from getsentry/craft/.github/workflows/changelog-preview.yml's releases.

2.26.12

Bug Fixes 🐛

  • Pin Node to 22.23.1 to avoid node-fetch premature-close regression by @​BYK in #837

2.26.11

Bug Fixes 🐛

  • Resolve 10 Dependabot security alerts by @​BYK in #836

Internal Changes 🔧

Changelog

Sourced from getsentry/craft/.github/workflows/changelog-preview.yml's changelog.

Changelog

2.26.12

Bug Fixes 🐛

  • Pin Node to 22.23.1 to avoid node-fetch premature-close regression by @​BYK in #837

2.26.11

Bug Fixes 🐛

  • Resolve 10 Dependabot security alerts by @​BYK in #836

Internal Changes 🔧

2.26.10

Bug Fixes 🐛

2.26.9

Bug Fixes 🐛

  • Replace extract-zip with node-stream-zip to fix Node 24.16.0 hang by @​BYK in #831

2.26.8

New Features ✨

Bug Fixes 🐛

  • Avoid test timeout in extractZipArchive by batching writes by @​BYK in #830

2.26.7

Bug Fixes 🐛

2.26.6

Bug Fixes 🐛

... (truncated)

Commits
  • 9312e4d release: 2.26.12
  • 77012af fix: pin Node to 22.23.1 to avoid node-fetch premature-close regression (#837)
  • 1d955b5 meta: Bump new development version
  • a33b173 Merge branch 'release/2.26.11'
  • f245d27 release: 2.26.11
  • 67eb802 fix: resolve 10 Dependabot security alerts (#836)
  • 8f37246 build(deps-dev): bump esbuild from 0.25.12 to 0.28.1 (#834)
  • 6a353dc meta: Bump new development version
  • acaed00 Merge branch 'release/2.26.10'
  • See full diff in compare view

Updates getsentry/craft from 2.26.10 to 2.26.12

Release notes

Sourced from getsentry/craft's releases.

2.26.12

Bug Fixes 🐛

  • Pin Node to 22.23.1 to avoid node-fetch premature-close regression by @​BYK in #837

2.26.11

Bug Fixes 🐛

  • Resolve 10 Dependabot security alerts by @​BYK in #836

Internal Changes 🔧

Changelog

Sourced from getsentry/craft's changelog.

Changelog

2.26.12

Bug Fixes 🐛

  • Pin Node to 22.23.1 to avoid node-fetch premature-close regression by @​BYK in #837

2.26.11

Bug Fixes 🐛

  • Resolve 10 Dependabot security alerts by @​BYK in #836

Internal Changes 🔧

2.26.10

Bug Fixes 🐛

2.26.9

Bug Fixes 🐛

  • Replace extract-zip with node-stream-zip to fix Node 24.16.0 hang by @​BYK in #831

2.26.8

New Features ✨

Bug Fixes 🐛

  • Avoid test timeout in extractZipArchive by batching writes by @​BYK in #830

2.26.7

Bug Fixes 🐛

2.26.6

Bug Fixes 🐛

... (truncated)

Commits
  • 9312e4d release: 2.26.12
  • 77012af fix: pin Node to 22.23.1 to avoid node-fetch premature-close regression (#837)
  • 1d955b5 meta: Bump new development version
  • a33b173 Merge branch 'release/2.26.11'
  • f245d27 release: 2.26.11
  • 67eb802 fix: resolve 10 Dependabot security alerts (#836)
  • 8f37246 build(deps-dev): bump esbuild from 0.25.12 to 0.28.1 (#834)
  • 6a353dc meta: Bump new development version
  • acaed00 Merge branch 'release/2.26.10'
  • See full diff in compare view

Updates actions/setup-python from 6.2.0 to 6.3.0

Release notes

Sourced from actions/setup-python's releases.

v6.3.0

What's Changed

Enhancement

Dependency update

Documentation

New Contributors

Full Changelog: actions/setup-python@v6...v6.3.0

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jun 24, 2026
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jun 24, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jun 24, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@runningcode runningcode reopened this Jun 24, 2026
@sentry

sentry Bot commented Jun 24, 2026

Copy link
Copy Markdown

📲 Install Builds

Android

🔗 App Name App ID Version Configuration
SDK Size io.sentry.tests.size 8.45.0 (1) release

⚙️ sentry-android Build Distribution Settings

@github-actions

github-actions Bot commented Jun 24, 2026

Copy link
Copy Markdown
Contributor

Performance metrics 🚀

  Plain With Sentry Diff
Startup time 308.24 ms 364.96 ms 56.72 ms
Size 0 B 0 B 0 B

Baseline results on branch: main

Startup times

Revision Plain With Sentry Diff
18c0bc2 306.73 ms 349.77 ms 43.03 ms
0eaac1e 316.82 ms 357.34 ms 40.52 ms
d15471f 303.49 ms 439.08 ms 135.59 ms
fc5ccaf 276.52 ms 370.46 ms 93.93 ms
e2dce0b 308.96 ms 360.10 ms 51.14 ms
5b1a06b 352.27 ms 413.70 ms 61.43 ms
37ec571 366.04 ms 424.28 ms 58.23 ms
9fbb112 361.43 ms 427.57 ms 66.14 ms
bbc35bb 324.88 ms 425.73 ms 100.85 ms
ff8eea4 313.42 ms 337.08 ms 23.66 ms

App size

Revision Plain With Sentry Diff
18c0bc2 1.58 MiB 2.13 MiB 557.33 KiB
0eaac1e 1.58 MiB 2.19 MiB 619.17 KiB
d15471f 1.58 MiB 2.13 MiB 559.54 KiB
fc5ccaf 1.58 MiB 2.13 MiB 557.54 KiB
e2dce0b 0 B 0 B 0 B
5b1a06b 0 B 0 B 0 B
37ec571 0 B 0 B 0 B
9fbb112 1.58 MiB 2.11 MiB 539.18 KiB
bbc35bb 1.58 MiB 2.12 MiB 553.01 KiB
ff8eea4 1.58 MiB 2.28 MiB 718.64 KiB

…updates

Bumps the github-actions group with 4 updates in the / directory: [actions/cache](https://github.com/actions/cache), [getsentry/craft/.github/workflows/changelog-preview.yml](https://github.com/getsentry/craft), [getsentry/craft](https://github.com/getsentry/craft) and [actions/setup-python](https://github.com/actions/setup-python).


Updates `actions/cache` from 5.0.5 to 6.0.0
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](actions/cache@27d5ce7...2c8a9bd)

Updates `getsentry/craft/.github/workflows/changelog-preview.yml` from 2.26.10 to 2.26.12
- [Release notes](https://github.com/getsentry/craft/releases)
- [Changelog](https://github.com/getsentry/craft/blob/master/CHANGELOG.md)
- [Commits](getsentry/craft@acdb880...9312e4d)

Updates `getsentry/craft` from 2.26.10 to 2.26.12
- [Release notes](https://github.com/getsentry/craft/releases)
- [Changelog](https://github.com/getsentry/craft/blob/master/CHANGELOG.md)
- [Commits](getsentry/craft@acdb880...9312e4d)

Updates `actions/setup-python` from 6.2.0 to 6.3.0
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](actions/setup-python@a309ff8...ece7cb0)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/setup-python
  dependency-version: 6.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: getsentry/craft
  dependency-version: 2.26.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: getsentry/craft/.github/workflows/changelog-preview.yml
  dependency-version: 2.26.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps): bump the github-actions group with 4 updates chore(deps): bump the github-actions group across 1 directory with 4 updates Jun 25, 2026
@dependabot dependabot Bot force-pushed the dependabot/github_actions/github-actions-0e7a2c6b32 branch from 51f876d to 6f409b3 Compare June 25, 2026 04:15
@dependabot @github

dependabot Bot commented on behalf of github Jun 25, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@runningcode runningcode reopened this Jun 25, 2026
@runningcode runningcode enabled auto-merge (squash) June 25, 2026 07:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant