Skip to content

chore(deps): bump the github-actions group across 1 directory with 8 updates - #10488

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-b4a0c72388
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-b4a0c72388

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 15, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the github-actions group with 8 updates in the / directory:

Package From To
actions/checkout 7 7
github/gh-aw-actions/setup 0.91.5 0.92.1
github/gh-aw-actions/setup-cli 0.91.5 0.92.1
actions/setup-node 7.0.0 7.1.0
actions/setup-go 7.0.0 7.0.0
devcontainers/action 1.4.3 1.4.4
actions/upload-artifact 7.0.1 7.0.2
actions/download-artifact 8.0.1 8.0.2

Updates actions/checkout from 7 to 7

Changelog

Sourced from actions/checkout's changelog.

Changelog

v7.0.1

v7.0.0

v6.0.3

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

... (truncated)

Commits

Updates github/gh-aw-actions/setup from 0.91.5 to 0.92.1

Release notes

Sourced from github/gh-aw-actions/setup's releases.

v0.92.1

Sync of actions from gh-aw at v0.92.1.

v0.92.0

Sync of actions from gh-aw at v0.92.0.

v0.91.14

Sync of actions from gh-aw at v0.91.14.

v0.91.13

Sync of actions from gh-aw at v0.91.13.

v0.91.12

Sync of actions from gh-aw at v0.91.12.

v0.91.11

Sync of actions from gh-aw at v0.91.11.

v0.91.10

Sync of actions from gh-aw at v0.91.10.

v0.91.9

Sync of actions from gh-aw at v0.91.9.

v0.91.8

Sync of actions from gh-aw at v0.91.8.

v0.91.7

Sync of actions from gh-aw at v0.91.7.

v0.91.6

Sync of actions from gh-aw at v0.91.6.

Commits

Updates github/gh-aw-actions/setup-cli from 0.91.5 to 0.92.1

Release notes

Sourced from github/gh-aw-actions/setup-cli's releases.

v0.92.1

Sync of actions from gh-aw at v0.92.1.

v0.92.0

Sync of actions from gh-aw at v0.92.0.

v0.91.14

Sync of actions from gh-aw at v0.91.14.

v0.91.13

Sync of actions from gh-aw at v0.91.13.

v0.91.12

Sync of actions from gh-aw at v0.91.12.

v0.91.11

Sync of actions from gh-aw at v0.91.11.

v0.91.10

Sync of actions from gh-aw at v0.91.10.

v0.91.9

Sync of actions from gh-aw at v0.91.9.

v0.91.8

Sync of actions from gh-aw at v0.91.8.

v0.91.7

Sync of actions from gh-aw at v0.91.7.

v0.91.6

Sync of actions from gh-aw at v0.91.6.

Commits

Updates actions/setup-node from 7.0.0 to 7.1.0

Release notes

Sourced from actions/setup-node's releases.

v7.1.0

What's Changed

Enhancements:

Bug fixes:

Documentation updates:

Dependency updates:

New Contributors

Full Changelog: actions/setup-node@v7.0.0...v7.1.0

Commits
  • 949feb2 Bump eslint from 10.5.0 to 10.11.0 and package.json from 7.0.0 to 7.1.0 (#1635)
  • 7207c4f chore: update dependencies and add license files (#1642)
  • 54337e0 Bump eslint-plugin-n from 18.1.0 to 18.3.0 (#1638)
  • fb54fa8 Bump jest-each from 30.4.1 to 30.5.2 (#1636)
  • 7f84f1d Bump pnpm/action-setup from 6.0.10 to 6.1.0 (#1631)
  • 0c54c7b Bump @​typescript-eslint/parser from 8.62.0 to 8.70.0 (#1615)
  • a829419 Bump @​types/semver from 7.7.1 to 7.8.0 (#1616)
  • 680d1e4 Support absolute paths in node-version-file (#1633)
  • db0fb3a Bump baseline-browser-mapping from 2.10.38 to 2.11.22 (#1629)
  • 94196ee Bump pnpm/action-setup from 6.0.9 to 6.0.10 (#1602)
  • Additional commits viewable in compare view

Updates actions/setup-go from 7.0.0 to 7.0.0

Commits

Updates devcontainers/action from 1.4.3 to 1.4.4

Release notes

Sourced from devcontainers/action's releases.

v1.4.4

What's Changed

New Contributors

Full Changelog: devcontainers/action@v1.4.3...v1.4.4

Commits

Updates actions/upload-artifact from 7.0.1 to 7.0.2

Release notes

Sourced from actions/upload-artifact's releases.

v7.0.2

What's Changed

  • Improves artifact download retries when the service returns HTTP 429 (rate limiting), including honoring valid Retry-After headers.
  • Updates @​actions/artifact to v6.3.1.

New Contributors

Full Changelog: actions/upload-artifact@v7.0.1...v7.0.2

Commits
  • cf430e0 Merge pull request #822 from actions/tunc-d-prepare-upload-v7-0-2
  • c2acded chore: prepare v7.0.2 release
  • 4687c1b Merge pull request #821 from actions/tunc-d-upload-artifact-package-bump
  • 8cbe1be Bump @​actions/artifact to 6.3.1
  • See full diff in compare view

Updates actions/download-artifact from 8.0.1 to 8.0.2

Release notes

Sourced from actions/download-artifact's releases.

v8.0.2

What's Changed

New Contributors

Full Changelog: actions/download-artifact@v8.0.1...v8.0.2

Commits
  • 9000827 Merge pull request #493 from actions/tunc-d-prepare-download-v8-0-2
  • e455989 Prepare download-artifact v8.0.2
  • a00b90c Merge pull request #492 from actions/tunc-d-download-artifact-package-bump
  • 29bb7ce Update @​actions/artifact to 6.3.1
  • 484a0b5 Update the readme (#473)
  • See full diff in compare view

Copilot AI balanced review requested due to automatic review settings October 15, 2026 02:57
@dependabot dependabot Bot added the dependencies Dependency update (dependabot) label Oct 15, 2026
@dependabot dependabot Bot added the github_actions Pull requests that update GitHub Actions code label Oct 15, 2026
@azure-pipelines

Copy link
Copy Markdown
Azure Pipelines:
3 pipeline(s) were filtered out due to trigger conditions.
There may be pipelines that require an authorized user to comment /azp run to run.

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🔵 Needs a closer look

Compatibility of updated gh-aw runtime scripts with existing generated workflows needs CI validation and maintainer confirmation.

0 open findings

What changed in this PR

Updates GitHub Actions dependencies used by azd CI, publishing, and repository automation. No application code changes.

Changes:

  • Updates Node setup, artifact transfer, devcontainer publishing, and gh-aw actions.
  • Replaces floating checkout and Go setup tags with commit pins.
  • Refreshes action references in three generated workflows.
File Description
.github/​workflows/​vscode-ci.yml Updates Node setup and artifact upload.
.github/​workflows/​update-instructions-from-pr-reviews.lock.yml Updates gh-aw, Node, and artifact actions.
.github/​workflows/​scripts-ci.yml Updates Node setup.
.github/​workflows/​lint-ext-azure-ai-evaluations.yml Pins checkout and Go setup commits.
.github/​workflows/​issue-triage.lock.yml Updates gh-aw, Node, and artifact actions.
.github/​workflows/​extension-pr-labeler.lock.yml Updates gh-aw, Node, and artifact actions.
.github/​workflows/​devops-ext-ci.yml Updates Node setup.
.github/​workflows/​devcontainer-feature-release.yml Updates devcontainer publishing action.
.github/​workflows/​cspell-misc.yml Updates Node setup for spelling checks.
.github/​workflows/​cspell-ext.yml Updates Node setup for extension spelling checks.
.github/​workflows/​copilot-setup-steps.yml Updates gh-aw installer and Node setup actions.
.github/​workflows/​cli-ci.yml Updates Node setup and pins checkout and Go setup.
.github/​workflows/​agentics-maintenance.yml Updates gh-aw setup and installer actions.

🧠 Review effort: Balanced


💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

Copilot AI balanced review requested due to automatic review settings October 21, 2026 20:32
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/github-actions-b4a0c72388 branch from 3b01633 to 30a55e8 Compare October 21, 2026 20:32

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🔵 Needs a closer look

Compatibility between the updated gh-aw runtime scripts and existing v0.91.5-generated workflows remains unverified and needs human validation.

No open issues 🎉

Review effort: Balanced

…updates

Bumps the github-actions group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `7` | `7` |
| [github/gh-aw-actions/setup](https://github.com/github/gh-aw-actions) | `0.91.5` | `0.92.1` |
| [github/gh-aw-actions/setup-cli](https://github.com/github/gh-aw-actions) | `0.91.5` | `0.92.1` |
| [actions/setup-node](https://github.com/actions/setup-node) | `7.0.0` | `7.1.0` |
| [actions/setup-go](https://github.com/actions/setup-go) | `7.0.0` | `7.0.0` |
| [devcontainers/action](https://github.com/devcontainers/action) | `1.4.3` | `1.4.4` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact) | `7.0.1` | `7.0.2` |
| [actions/download-artifact](https://github.com/actions/download-artifact) | `8.0.1` | `8.0.2` |



Updates `actions/checkout` from 7 to 7
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v7...3d3c42e)

Updates `github/gh-aw-actions/setup` from 0.91.5 to 0.92.1
- [Release notes](https://github.com/github/gh-aw-actions/releases)
- [Changelog](https://github.com/github/gh-aw-actions/blob/main/CHANGELOG.md)
- [Commits](github/gh-aw-actions@16b4301...525e0a3)

Updates `github/gh-aw-actions/setup-cli` from 0.91.5 to 0.92.1
- [Release notes](https://github.com/github/gh-aw-actions/releases)
- [Changelog](https://github.com/github/gh-aw-actions/blob/main/CHANGELOG.md)
- [Commits](github/gh-aw-actions@16b4301...525e0a3)

Updates `actions/setup-node` from 7.0.0 to 7.1.0
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@8207627...949feb2)

Updates `actions/setup-go` from 7.0.0 to 7.0.0
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](actions/setup-go@v7...b7ad1da)

Updates `devcontainers/action` from 1.4.3 to 1.4.4
- [Release notes](https://github.com/devcontainers/action/releases)
- [Commits](devcontainers/action@1082abd...bef2cf2)

Updates `actions/upload-artifact` from 7.0.1 to 7.0.2
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@043fb46...cf430e0)

Updates `actions/download-artifact` from 8.0.1 to 8.0.2
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](actions/download-artifact@3e5f45b...9000827)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: actions/download-artifact
  dependency-version: 8.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: actions/setup-go
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: actions/setup-node
  dependency-version: 7.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: actions/upload-artifact
  dependency-version: 7.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: devcontainers/action
  dependency-version: 1.4.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: github/gh-aw-actions/setup
  dependency-version: 0.91.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: github/gh-aw-actions/setup-cli
  dependency-version: 0.91.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/github-actions-b4a0c72388 branch from 30a55e8 to c7c8b7e Compare October 22, 2026 02:57
Copilot AI balanced review requested due to automatic review settings October 22, 2026 02:57

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🔵 Needs a closer look

Compatibility between the v0.92.1 gh-aw runtime and workflows generated by v0.91.5 remains unverified and needs human validation.

No open issues 🎉

Review effort: Balanced

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Dependency update (dependabot) github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant