Bump the github-actions group with 4 updates by dependabot[bot] · Pull Request #68 · Staffbase/backstage-techdocs-action

dependabot · 2026-11-01T07:02:50Z

Bumps the github-actions group with 4 updates: actions/setup-node, actions/setup-python, Staffbase/gha-workflows/.github/workflows/template_automerge_dependabot.yml and Staffbase/gha-workflows/.github/workflows/template_release_drafter.yml.

Updates actions/setup-node from 7.0.0 to 7.1.0

Release notes

Sourced from actions/setup-node's releases.

v7.1.0

What's Changed

Enhancements:

Add support for mise.toml file by @gperdomor in actions/setup-node#1421

Support absolute paths in node-version-file by @v-mahabaleshwars in actions/setup-node#1633

Bug fixes:

Add Node version validation and manifest fetch retry by @v-jitenderpalsingh in actions/setup-node#1580

Documentation updates:

README.md: bump actions/checkout to latest version 7 by @deining in actions/setup-node#1578

docs: add V7 ESM migration and NODE_AUTH_TOKEN behavior change by @v-gowridurgad in actions/setup-node#1593

Fixed cache recommendation syntax by @SubJunk in actions/setup-node#1603

Dependency updates:

Update workflow pins and migrate Node matrices to modern versions by @v-HarithaVattikuti in actions/setup-node#1583

Upgrade @actions/cache to 6.2.0 by @philip-gai in actions/setup-node#1584

Pin @types/node to v24 by @v-priyagupta108 in actions/setup-node#1585

Override brace-expansion to 5.0.8 by @v-priyagupta108 with @Copilot in actions/setup-node#1599

Upgrade actions/checkout from 7.0.0 to 7.0.1 by @dependabot in actions/setup-node#1598

Upgrade prettier from 3.8.4 to 3.9.6 by @dependabot in actions/setup-node#1590

Upgrade @vercel/ncc from 0.44.0 to 0.45.0 by @dependabot in actions/setup-node#1610

Upgrade pnpm/action-setup from 6.0.9 to 6.0.10 by @dependabot in actions/setup-node#1602

Upgrade baseline-browser-mapping from 2.10.38 to 2.11.22 by @dependabot in actions/setup-node#1629

Upgrade @types/semver from 7.7.1 to 7.8.0 by @dependabot in actions/setup-node#1616

Upgrade @typescript-eslint/parser from 8.62.0 to 8.70.0 by @dependabot in actions/setup-node#1615

Upgrade pnpm/action-setup from 6.0.10 to 6.1.0 by @dependabot in actions/setup-node#1631

Upgrade jest-each from 30.4.1 to 30.5.2 by @dependabot in actions/setup-node#1636

Upgrade eslint-plugin-n from 18.1.0 to 18.3.0 by @dependabot in actions/setup-node#1638

Update dependencies and add license files by @v-HarithaVattikuti in actions/setup-node#1642

Upgrade eslint from 10.5.0 to 10.11.0 and package.json from 7.0.0 to 7.1.0 by @dependabot in actions/setup-node#1635

New Contributors

@v-jitenderpalsingh made their first contribution in actions/setup-node#1580

@philip-gai made their first contribution in actions/setup-node#1584

@gperdomor made their first contribution in actions/setup-node#1421

@SubJunk made their first contribution in actions/setup-node#1603

Full Changelog: actions/setup-node@v7.0.0...v7.1.0

Commits

949feb2 Bump eslint from 10.5.0 to 10.11.0 and package.json from 7.0.0 to 7.1.0 (#1635)
7207c4f chore: update dependencies and add license files (#1642)
54337e0 Bump eslint-plugin-n from 18.1.0 to 18.3.0 (#1638)
fb54fa8 Bump jest-each from 30.4.1 to 30.5.2 (#1636)
7f84f1d Bump pnpm/action-setup from 6.0.10 to 6.1.0 (#1631)
0c54c7b Bump @typescript-eslint/parser from 8.62.0 to 8.70.0 (#1615)
a829419 Bump @types/semver from 7.7.1 to 7.8.0 (#1616)
680d1e4 Support absolute paths in node-version-file (#1633)
db0fb3a Bump baseline-browser-mapping from 2.10.38 to 2.11.22 (#1629)
94196ee Bump pnpm/action-setup from 6.0.9 to 6.0.10 (#1602)
Additional commits viewable in compare view

Updates actions/setup-python from 7.0.0 to 7.1.0

Release notes

Sourced from actions/setup-python's releases.

v7.1.0

What's Changed

Enhancements

Add mirror and mirror-token inputs for custom Python distribution sources by @luhenry in actions/setup-python#1302

Improve error message clarity by @v-lmvysakh in actions/setup-python#1351

Dependency Upgrade

Upgrade browserslist from 4.28.2 to 4.28.9 by @dependabot in actions/setup-python#1353

Upgrade @typescript-eslint/parser from 8.62.0 to 8.70.0 by @dependabot in actions/setup-python#1343

Upgrade eslint-plugin-jest from 29.15.2 to 29.16.6 by @dependabot in actions/setup-python#1342

Upgrade @vercel/ncc from 0.44.0 to 0.45.0 by @dependabot in actions/setup-python#1357

Upgrade @types/semver from 7.7.1 to 7.8.0 by @dependabot in actions/setup-python#1359

Upgrade undici from 6.28.0 to 6.29.0 by @dependabot in actions/setup-python#1364

Upgrade ts-jest from 29.4.11 to 29.4.14 by @dependabot in actions/setup-python#1361

Upgrade brace-expansion from 5.0.9 to 5.0.12 by @dependabot in actions/setup-python#1365

Upgrade prettier from 3.8.4 to 3.9.9 and package.json from 7.0.0 to 7.1.0 by @dependabot in actions/setup-python#1363

Upgrade @typescript-eslint/eslint-plugin from 8.62.0 to 8.71.1 by @dependabot in actions/setup-python#1369

Upgrade actions/checkout from 7.0.0 to 7.0.1 by @dependabot in actions/setup-python#1345

Upgrade cache to 6.3.0 by @v-HarithaVattikuti in actions/setup-python#1370

Resolve Basic Validation audit failures by @v-HarithaVattikuti in actions/setup-python#1347

Resolve npm audit failures by @v-HarithaVattikuti in actions/setup-python#1350

New Contributors

@luhenry made their first contribution in actions/setup-python#1302

Full Changelog: actions/setup-python@v7.0.0...v7.1.0

Commits

6d4fd22 Cache upgrade to 6.3.0 (#1370)
ec52d0a Bump @typescript-eslint/eslint-plugin from 8.62.0 to 8.71.1 (#1369)
ff73b24 Bump prettier from 3.8.4 to 3.9.9 and package.json from 7.0.0 to 7.1.0 (#1363)
0e40890 Bump brace-expansion from 5.0.9 to 5.0.12 (#1365)
3892123 Bump ts-jest from 29.4.11 to 29.4.14 (#1361)
6609657 Bump undici from 6.28.0 to 6.29.0 (#1364)
e1be392 Bump @types/semver from 7.7.1 to 7.8.0 (#1359)
06da627 Bump @vercel/ncc from 0.44.0 to 0.45.0 (#1357)
af9bcc7 Bump eslint-plugin-jest from 29.15.2 to 29.16.6 (#1342)
7aeabeb Bump @typescript-eslint/parser from 8.62.0 to 8.70.0 (#1343)
Additional commits viewable in compare view

Updates Staffbase/gha-workflows/.github/workflows/template_automerge_dependabot.yml from 17.1.0 to 19.1.0

Release notes

Sourced from Staffbase/gha-workflows/.github/workflows/template_automerge_dependabot.yml's releases.

Version 19.1.0 🌈

Changes

feat(CORE-5013): expose GAR token to image builds @michikrug (#538)

chore(DEVS-1723): pin GitHub Actions to commit SHAs @0x46616c6b (#534)

🚀 Features

feat(DEVS-1665): push images to GAR only in template_gitops @0x46616c6b (#536)

📝 Documentation

📝 Update Readme Versions @staffbase-actions[bot] (#533)

Version 19.0.0 🌈

Breaking Change

only major dependencies bump

Changes

feat(CORE-5013): expose fresh builds in gitops template @michikrug (#520)

📝 Documentation

📝 Update Readme Versions @staffbase-actions[bot] (#523)

🚨 Dependencies

chore(deps): bump release-drafter/release-drafter from 7.9.0 to 7.10.0 @dependabot[bot] (#532)

chore(deps): bump actions/create-github-app-token from 3.2.0 to 3.3.0 @dependabot[bot] (#531)

chore(deps): bump actions/setup-node from 7.0.0 to 7.1.0 @dependabot[bot] (#530)

chore(deps): bump trufflesecurity/trufflehog from 3.98.0 to 3.99.2 @dependabot[bot] (#529)

chore(deps): bump Staffbase/gha-workflows/actions/setup-artifact-registry from 18.0.0 to 18.1.0 @dependabot[bot] (#528)

chore(deps): bump release-drafter/release-drafter from 7.7.0 to 7.9.0 @dependabot[bot] (#524)

chore(deps): bump trufflesecurity/trufflehog from 3.97.1 to 3.98.0 @dependabot[bot] (#526)

chore(deps): bump Staffbase/gha-workflows/actions/setup-artifact-registry from 17.2.0 to 18.0.0 @dependabot[bot] (#525)

chore(deps): bump Staffbase/github-action-jira-release-tagging from 1.7.3 to 1.9.0 @dependabot[bot] (#527)

Version 18.1.0 🌈

Changes

🐛 Bug Fixes

Revert "Update template_autodev.yml checkout with filter blob:none" @flaxel (#522)

📝 Documentation

📝 Update Readme Versions @staffbase-actions[bot] (#519)

... (truncated)

Commits

4480e61 Merge pull request #538 from Staffbase/CORE-5013-gar-build-secret
27825d5 feat(CORE-5013): expose GAR token to image builds
eb92fbc Merge pull request #536 from Staffbase/DEVS-1665-gitops-template-gar-only
57f747c feat(DEVS-1665): push images to GAR only in template_gitops
a021f01 Merge pull request #534 from Staffbase/DEVS-1723-pin-github-actions
6a173a6 chore(DEVS-1723): pin GitHub Actions to commit SHAs
8819958 📝 update readme versions (#533)
65e1171 Merge pull request #520 from Staffbase/CORE-5013-expose-no-cache
338ad5e docs(CORE-5013): separate single-arch output example
c857bca chore(CORE-5013): pin released gitops action v10
Additional commits viewable in compare view

Updates Staffbase/gha-workflows/.github/workflows/template_release_drafter.yml from 17.1.0 to 19.1.0

Release notes

Sourced from Staffbase/gha-workflows/.github/workflows/template_release_drafter.yml's releases.

Version 19.1.0 🌈

Changes

feat(CORE-5013): expose GAR token to image builds @michikrug (#538)

chore(DEVS-1723): pin GitHub Actions to commit SHAs @0x46616c6b (#534)

🚀 Features

feat(DEVS-1665): push images to GAR only in template_gitops @0x46616c6b (#536)

📝 Documentation

📝 Update Readme Versions @staffbase-actions[bot] (#533)

Version 19.0.0 🌈

Breaking Change

only major dependencies bump

Changes

feat(CORE-5013): expose fresh builds in gitops template @michikrug (#520)

📝 Documentation

📝 Update Readme Versions @staffbase-actions[bot] (#523)

🚨 Dependencies

chore(deps): bump release-drafter/release-drafter from 7.9.0 to 7.10.0 @dependabot[bot] (#532)

chore(deps): bump actions/create-github-app-token from 3.2.0 to 3.3.0 @dependabot[bot] (#531)

chore(deps): bump actions/setup-node from 7.0.0 to 7.1.0 @dependabot[bot] (#530)

chore(deps): bump trufflesecurity/trufflehog from 3.98.0 to 3.99.2 @dependabot[bot] (#529)

chore(deps): bump Staffbase/gha-workflows/actions/setup-artifact-registry from 18.0.0 to 18.1.0 @dependabot[bot] (#528)

chore(deps): bump release-drafter/release-drafter from 7.7.0 to 7.9.0 @dependabot[bot] (#524)

chore(deps): bump trufflesecurity/trufflehog from 3.97.1 to 3.98.0 @dependabot[bot] (#526)

chore(deps): bump Staffbase/gha-workflows/actions/setup-artifact-registry from 17.2.0 to 18.0.0 @dependabot[bot] (#525)

chore(deps): bump Staffbase/github-action-jira-release-tagging from 1.7.3 to 1.9.0 @dependabot[bot] (#527)

Version 18.1.0 🌈

Changes

🐛 Bug Fixes

Revert "Update template_autodev.yml checkout with filter blob:none" @flaxel (#522)

📝 Documentation

📝 Update Readme Versions @staffbase-actions[bot] (#519)

... (truncated)

Commits

4480e61 Merge pull request #538 from Staffbase/CORE-5013-gar-build-secret
27825d5 feat(CORE-5013): expose GAR token to image builds
eb92fbc Merge pull request #536 from Staffbase/DEVS-1665-gitops-template-gar-only
57f747c feat(DEVS-1665): push images to GAR only in template_gitops
a021f01 Merge pull request #534 from Staffbase/DEVS-1723-pin-github-actions
6a173a6 chore(DEVS-1723): pin GitHub Actions to commit SHAs
8819958 📝 update readme versions (#533)
65e1171 Merge pull request #520 from Staffbase/CORE-5013-expose-no-cache
338ad5e docs(CORE-5013): separate single-arch output example
c857bca chore(CORE-5013): pin released gitops action v10
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the github-actions group with 4 updates: [actions/setup-node](https://github.com/actions/setup-node), [actions/setup-python](https://github.com/actions/setup-python), [Staffbase/gha-workflows/.github/workflows/template_automerge_dependabot.yml](https://github.com/staffbase/gha-workflows) and [Staffbase/gha-workflows/.github/workflows/template_release_drafter.yml](https://github.com/staffbase/gha-workflows). Updates `actions/setup-node` from 7.0.0 to 7.1.0 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](actions/setup-node@8207627...949feb2) Updates `actions/setup-python` from 7.0.0 to 7.1.0 - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](actions/setup-python@5fda3b9...6d4fd22) Updates `Staffbase/gha-workflows/.github/workflows/template_automerge_dependabot.yml` from 17.1.0 to 19.1.0 - [Release notes](https://github.com/staffbase/gha-workflows/releases) - [Commits](Staffbase/gha-workflows@6e6c062...4480e61) Updates `Staffbase/gha-workflows/.github/workflows/template_release_drafter.yml` from 17.1.0 to 19.1.0 - [Release notes](https://github.com/staffbase/gha-workflows/releases) - [Commits](Staffbase/gha-workflows@6e6c062...4480e61) --- updated-dependencies: - dependency-name: actions/setup-node dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: actions/setup-python dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: Staffbase/gha-workflows/.github/workflows/template_automerge_dependabot.yml dependency-version: 19.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: Staffbase/gha-workflows/.github/workflows/template_release_drafter.yml dependency-version: 19.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Nov 1, 2026

dependabot Bot requested a review from a team as a code owner November 1, 2026 07:02

dependabot Bot added the major Pull requests with breakable changes label Nov 1, 2026

dependabot Bot requested a review from weizenspreu November 1, 2026 07:02

Navigation Menu

Repository navigation

Bump the github-actions group with 4 updates - #68

Bump the github-actions group with 4 updates#68
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-15f2915ae2

dependabot Bot commented on behalf of github Nov 1, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Nov 1, 2026

v7.1.0

What's Changed

Enhancements:

Bug fixes:

Documentation updates:

Dependency updates:

New Contributors

v7.1.0

What's Changed

Enhancements

Dependency Upgrade

New Contributors

Version 19.1.0 🌈

Changes

🚀 Features

📝 Documentation

Version 19.0.0 🌈

Breaking Change

Changes

📝 Documentation

🚨 Dependencies

Version 18.1.0 🌈

Changes

🐛 Bug Fixes

📝 Documentation

Version 19.1.0 🌈

Changes

🚀 Features

📝 Documentation

Version 19.0.0 🌈

Breaking Change

Changes

📝 Documentation

🚨 Dependencies

Version 18.1.0 🌈

Changes

🐛 Bug Fixes

📝 Documentation

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants