chore: bump the actions group across 1 directory with 7 updates - #47
Open
dependabot[bot] wants to merge 1 commit into
Open
dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
dependabot
Bot
added
dependencies
There was a problem hiding this comment.
Copilot review overview
🟡 Changes recommended
Update the Changesets action invocation for the v2 input interface.
Review effort: Lite
Findings: 1
Open (1)
What changed in this PR
Updates pinned GitHub Actions and reusable workflow revisions across deployment, publishing, and quality workflows.
Changes:
- Advances internal workflow references.
- Updates Wrangler, Changesets, and Docker actions.
- Requires migration of
changesets/actioninputs to the v2 interface.
| File | Description |
|---|---|
.github/workflows/phala-deploy.yml |
Updates workflow and Docker action pins |
.github/workflows/npm-release.yml |
Updates reusable workflow pins |
.github/workflows/npm-pr.yml |
Updates quality workflow pin |
.github/workflows/npm-main.yml |
Updates reusable workflow pins |
.github/workflows/npm-changesets.yml |
Updates quality and Changesets action pins; v2 input migration required |
.github/workflows/cloudflare-version.yml |
Updates Wrangler action pins |
.github/workflows/cloudflare-release.yml |
Updates reusable workflow pins |
.github/workflows/cloudflare-pr.yml |
Updates reusable workflow pins |
.github/workflows/cloudflare-main.yml |
Updates reusable workflow pins |
💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.
Comment on lines
+239
to
242
| uses: changesets/action@ae32849d5ba541f9ae29e40e22a623bc13562f51 # v2.1.2 | ||
| with: | ||
| title: ${{ inputs.pr-title }} | ||
| commit: ${{ inputs.pr-commit }} |
Bumps the actions group with 7 updates in the / directory: | Package | From | To | | --- | --- | --- | | [burnt-labs/github-workflows/.github/workflows/required-quality.yml](https://github.com/burnt-labs/github-workflows) | `3332fc8e0049b837e851778cb1fb2be1f24acb1a` | `d3096758fcd3e5bbc5a9622b8f1f5182b80aab86` | | [burnt-labs/github-workflows/.github/workflows/cloudflare-version.yml](https://github.com/burnt-labs/github-workflows) | `bdb6a6c76b0fc229fa2a54ed91c3ddf78c2ea4ec` | `d3096758fcd3e5bbc5a9622b8f1f5182b80aab86` | | [cloudflare/wrangler-action](https://github.com/cloudflare/wrangler-action) | `4.0.0` | `4.1.3` | | [changesets/action](https://github.com/changesets/action) | `1.9.0` | `2.1.2` | | [burnt-labs/github-workflows/.github/workflows/npm-publish.yml](https://github.com/burnt-labs/github-workflows) | `3332fc8e0049b837e851778cb1fb2be1f24acb1a` | `d3096758fcd3e5bbc5a9622b8f1f5182b80aab86` | | [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `4.2.0` | `4.4.1` | | [docker/build-push-action](https://github.com/docker/build-push-action) | `7.3.0` | `7.4.0` | Updates `burnt-labs/github-workflows/.github/workflows/required-quality.yml` from 3332fc8 to d309675 - [Release notes](https://github.com/burnt-labs/github-workflows/releases) - [Commits](3332fc8...d309675) Updates `burnt-labs/github-workflows/.github/workflows/cloudflare-version.yml` from bdb6a6c to d309675 - [Release notes](https://github.com/burnt-labs/github-workflows/releases) - [Commits](bdb6a6c...d309675) Updates `cloudflare/wrangler-action` from 4.0.0 to 4.1.3 - [Release notes](https://github.com/cloudflare/wrangler-action/releases) - [Changelog](https://github.com/cloudflare/wrangler-action/blob/main/CHANGELOG.md) - [Commits](cloudflare/wrangler-action@ebbaa15...953926a) Updates `changesets/action` from 1.9.0 to 2.1.2 - [Release notes](https://github.com/changesets/action/releases) - [Changelog](https://github.com/changesets/action/blob/main/CHANGELOG.md) - [Commits](changesets/action@a45c4d5...ae32849) Updates `burnt-labs/github-workflows/.github/workflows/npm-publish.yml` from 3332fc8 to d309675 - [Release notes](https://github.com/burnt-labs/github-workflows/releases) - [Commits](3332fc8...d309675) Updates `docker/setup-buildx-action` from 4.2.0 to 4.4.1 - [Release notes](https://github.com/docker/setup-buildx-action/releases) - [Commits](docker/setup-buildx-action@bb05f3f...f87e599) Updates `docker/build-push-action` from 7.3.0 to 7.4.0 - [Release notes](https://github.com/docker/build-push-action/releases) - [Commits](docker/build-push-action@53b7df9...c3c9e26) --- updated-dependencies: - dependency-name: burnt-labs/github-workflows/.github/workflows/cloudflare-version.yml dependency-version: 77f180e dependency-type: direct:production dependency-group: actions - dependency-name: burnt-labs/github-workflows/.github/workflows/npm-publish.yml dependency-version: 77f180e dependency-type: direct:production dependency-group: actions - dependency-name: burnt-labs/github-workflows/.github/workflows/required-quality.yml dependency-version: 77f180e dependency-type: direct:production dependency-group: actions - dependency-name: changesets/action dependency-version: 2.1.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: cloudflare/wrangler-action dependency-version: 4.1.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: docker/build-push-action dependency-version: 7.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: docker/setup-buildx-action dependency-version: 4.4.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
force-pushed
the
dependabot/github_actions/actions-832a919b83
branch
from
October 2, 2026 20:12
c5ab86a to
8508bf3
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the actions group with 7 updates in the / directory:
3332fc8e0049b837e851778cb1fb2be1f24acb1ad3096758fcd3e5bbc5a9622b8f1f5182b80aab86bdb6a6c76b0fc229fa2a54ed91c3ddf78c2ea4ecd3096758fcd3e5bbc5a9622b8f1f5182b80aab864.0.04.1.31.9.02.1.23332fc8e0049b837e851778cb1fb2be1f24acb1ad3096758fcd3e5bbc5a9622b8f1f5182b80aab864.2.04.4.17.3.07.4.0Updates
burnt-labs/github-workflows/.github/workflows/required-quality.ymlfrom 3332fc8 to d309675Commits
d309675Merge pull request #48 from burnt-labs/work/burntbot/secrets-file-deploy-2026...051ebc9Keep the working-directory check on the step that now carries secrets5311f29Point Cloudflare flow callers at the secrets-file deploybdb6a6cPublish Worker secrets with the deploy, not a separate secret edit77f180eMerge pull request #46 from burnt-labs/work/burntbot/phala-public-url-2026092...01ce81bRefuse to create the release CVM081e88fPoint flow callers at the pin-advance revisionUpdates
burnt-labs/github-workflows/.github/workflows/cloudflare-version.ymlfrom bdb6a6c to d309675Commits
d309675Merge pull request #48 from burnt-labs/work/burntbot/secrets-file-deploy-2026...051ebc9Keep the working-directory check on the step that now carries secrets5311f29Point Cloudflare flow callers at the secrets-file deployUpdates
cloudflare/wrangler-actionfrom 4.0.0 to 4.1.3Release notes
Sourced from cloudflare/wrangler-action's releases.
Changelog
Sourced from cloudflare/wrangler-action's changelog.
... (truncated)
Commits
953926aAutomatic compilationa17640aMerge pull request #457 from cloudflare/changeset-release/main8d350f6Version Packagesdf82e37Merge pull request #456 from cloudflare/podonnell/preview-commsd3cfe74WC-6082 [previews] adjust wrangler guidance to v4.136.3d4d1b2dMerge pull request #455 from cloudflare/changeset-release/main1e45d72Version Packages194026bMerge pull request #453 from cloudflare/codex/fix-immutable-releases5fa9855docs: Explain immutable release sequencingd7fd981refactor: Keep release publishing retryableUpdates
changesets/actionfrom 1.9.0 to 2.1.2Release notes
Sourced from changesets/action's releases.
... (truncated)
Changelog
Sourced from changesets/action's changelog.
... (truncated)
Commits
ae32849v2.1.20138f45Version Packages (#726)8833883Handle error when pushing git tags with the git CLI (#735)e08fde7Improve log messages (#730)371fd77Bump human-id in the production-dependencies group across 1 directory (#732)85efcafBump actions/checkout in the github-actions group across 1 directory (#734)5bb9d5cBump the development-dependencies group across 1 directory with 7 updates (#733)ca85897Always prepare branch for version (#729)36f529fFix root action double error logs (#724)d7669c8Version Packages (#722)Updates
burnt-labs/github-workflows/.github/workflows/npm-publish.ymlfrom 3332fc8 to d309675Commits
d309675Merge pull request #48 from burnt-labs/work/burntbot/secrets-file-deploy-2026...051ebc9Keep the working-directory check on the step that now carries secrets5311f29Point Cloudflare flow callers at the secrets-file deploybdb6a6cPublish Worker secrets with the deploy, not a separate secret edit77f180eMerge pull request #46 from burnt-labs/work/burntbot/phala-public-url-2026092...01ce81bRefuse to create the release CVM081e88fPoint flow callers at the pin-advance revisionUpdates
docker/setup-buildx-actionfrom 4.2.0 to 4.4.1Release notes
Sourced from docker/setup-buildx-action's releases.
Commits
f87e599Merge pull request #624 from crazy-max/skip-pull-with-endpointe700274chore: update generated content3061c91skip BuildKit image pre-pulls for explicit endpoints594f3bfMerge pull request #609 from crazy-max/pull-buildkit-image-before-createbd6e702chore: update generated content6268c9dpull BuildKit image before builder creatione823525Merge pull request #621 from docker/dependabot/github_actions/codeql-actions-...533ed8ebuild(deps): bump the codeql-actions group with 2 updatesbedaf13Merge pull request #620 from crazy-max/shared-error-helpersd5079fbchore: update generated contentUpdates
docker/build-push-actionfrom 7.3.0 to 7.4.0Release notes
Sourced from docker/build-push-action's releases.
Commits
c3c9e26Merge pull request #1621 from docker/dependabot/npm_and_yarn/docker/actions-t...459b674[dependabot skip] chore: update generated content4dedcb2chore(deps): Bump@docker/actions-toolkitfrom 0.99.0 to 0.100.0379bf63Merge pull request #1620 from crazy-max/buildx-error-message9877975chore: update generated content7ed0556use the shared Buildx error summary helper91670baMerge pull request #1618 from docker/dependabot/npm_and_yarn/docker/actions-t...80dbc86[dependabot skip] chore: update generated content50cac3achore(deps): Bump@docker/actions-toolkitfrom 0.98.0 to 0.99.003b4d6cMerge pull request #1617 from crazy-max/fix-metadata-workflow-commands