Skip to content

build(deps): bump the actions group with 8 updates - #135

Merged
jourdain merged 1 commit into
masterfrom
dependabot/github_actions/actions-46a8923bd2
Aug 31, 2026
Merged

build(deps): bump the actions group with 8 updates#135
jourdain merged 1 commit into
masterfrom
dependabot/github_actions/actions-46a8923bd2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 31, 2026

Copy link
Copy Markdown
Contributor

Bumps the actions group with 8 updates:

Package From To
actions/checkout 4 7
conda-incubator/setup-miniconda 2 4
actions/setup-node 4 7
tauri-apps/tauri-action 0 1
actions/attest-build-provenance 2.2.3 4.2.2
actions/configure-pages 3 6
actions/upload-pages-artifact 3 5
actions/deploy-pages 4 5

Updates actions/checkout from 4 to 7

Release notes

Sourced from actions/checkout's releases.

v7.0.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v6.0.3...v7.0.0

v6.1.0

What's Changed

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: actions/checkout@v6.0.3...v6.1.0

v6.0.3

What's Changed

New Contributors

Full Changelog: actions/checkout@v6...v6.0.3

v6.0.2

What's Changed

Full Changelog: actions/checkout@v6.0.1...v6.0.2

v6.0.1

What's Changed

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

v7.0.1

v7.0.0

v6.0.3

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

... (truncated)

Commits

Updates conda-incubator/setup-miniconda from 2 to 4

Release notes

Sourced from conda-incubator/setup-miniconda's releases.

Version 4.0.0

Breaking Changes

  • #459: Upgrade action runtime to Node.js 24.x (requires runners with Node 24 support; this is the reason for the v4 major bump)
  • #450: Switch action build to ESM (for @actions/exec v3)

Features and Enhancements

  • #469: Add conda-init input to optionally skip conda init and document activation for restricted environments
  • #482: Add channels parsing utility and URL validation
  • #481: Enable stricter TypeScript checks and typing
  • #480: Add more tests, increase coverage, add Codecov integration and coverage badge
  • #479: Add TypeDoc-based API docs, generation and checks; configure GitHub Pages and Netlify previews

Fixes

  • #465: Fix double channel configuration being applied
  • #467: Speed up Windows post-run cleanup by moving the extracted packages directory instead of removing files one by one
  • #470: Fix name-version-build syntax expansion and add tests
  • #475: Split shell init and activation of the test environment to remove spurious warning
  • #498: Skip Netlify preview for Dependabot PRs

Performance

  • #486: Remove HTML index scraping for Miniconda version validation
  • #487: Parallelize Windows takeown calls with Promise.all
  • #488: Replace isDefaultEnvironment subprocess with local YAML reads
  • #489: Replace conda config subprocesses with direct .condarc YAML writes

Tasks and Maintenance

  • #444: Bump conda-incubator/setup-miniconda from 3.2.0 to 3.3.0
  • #445: Bump actions/checkout from 6.0.1 to 6.0.2
  • #449: Bump @​actions/exec from 2.0.0 to 3.0.0
  • #456, #484, #491: Bump actions/upload-artifact
  • #460: Bump actions/download-artifact from 7.0.0 to 8.0.1
  • #464: Update dependencies for actions and packages
  • #466: Bump @​actions/tool-cache from 2.0.2 to 4.0.0
  • #473: Bump flatted from 3.2.9 to 3.4.2
  • #476: Bump picomatch
  • #477: Bump conda-incubator/installer from 0.1.0 to 0.1.1
  • #485: Bump vite from 8.0.0 to 8.0.8
  • #492: Bump actions/upload-pages-artifact from 3 to 5

... (truncated)

Changelog

Sourced from conda-incubator/setup-miniconda's changelog.

v4.0.1 (2026-04-24)

Fixes

  • Fix MultipleKeysError on conda 25.11+ when a user-supplied condarc-file already declares auto_activate: now only one of auto_activate / auto_activate_base is written to .condarc, preferring whichever key the user's existing condarc uses.
  • Add auto_activate to the boolean coercion set so its value is serialized as a YAML boolean when it is the chosen canonical key.
  • Add local_repodata_ttl to KNOWN_CONDARC_KEYS to silence a spurious "Unrecognized condarc key" warning for a valid conda key.

[v4.0.0] (2026-04-23)

Breaking Changes

  • #459[459]: Upgrade action runtime to Node.js 24.x (requires runners with Node 24 support; this is the reason for the v4 major bump)
  • #450[450]: Switch action build to ESM (for @actions/exec v3)

Features and Enhancements

  • #469[469]: Add conda-init input to optionally skip conda init and document activation for restricted environments
  • #482[482]: Add channels parsing utility and URL validation
  • #481[481]: Enable stricter TypeScript checks and typing
  • #480[480]: Add more tests, increase coverage, add Codecov integration and coverage badge
  • #479[479]: Add TypeDoc-based API docs, generation and checks; configure GitHub Pages and Netlify previews

Fixes

  • #465[465]: Fix double channel configuration being applied
  • #467[467]: Speed up Windows post-run cleanup by moving the extracted packages directory instead of removing files one by one
  • #470[470]: Fix name-version-build syntax expansion and add tests
  • #475[475]: Split shell init and activation of the test environment to remove spurious warning

Performance

  • #486[486]: Remove HTML index scraping for Miniconda version validation
  • #487[487]: Parallelize Windows takeown calls with Promise.all
  • #488[488]: Replace isDefaultEnvironment subprocess with local YAML reads
  • #489[489]: Replace conda config subprocesses with direct .condarc YAML writes

... (truncated)

Commits
  • 8ee1f36 Fix MultipleKeysError when user condarc declares auto_activate (#500)
  • bce0bd8 Prepare v4 release (#499)
  • 78fb0ff ci(docs): skip Netlify preview for Dependabot PRs (#498)
  • d32e72e Bump @​actions/core from 3.0.0 to 3.0.1 (#496)
  • 3e251ae Bump actions/upload-artifact from 4 to 7 (#491)
  • 7ff02ae Bump actions/upload-pages-artifact from 3 to 5 (#492)
  • 65b62b8 Bump actions/deploy-pages from 4 to 5 (#494)
  • 1eb4d38 Bump marocchino/sticky-pull-request-comment from 2 to 3 (#493)
  • bfb6f7e Bump codecov/codecov-action from 5 to 6 (#495)
  • 77236ef Merge pull request #489 from conda-incubator/perf/direct-condarc-write
  • Additional commits viewable in compare view

Updates actions/setup-node from 4 to 7

Release notes

Sourced from actions/setup-node's releases.

v7.0.0

What's Changed

Enhancements:

Bug fixes:

Documentation updates:

Dependency update:

New Contributors

Full Changelog: actions/setup-node@v6...v7.0.0

v6.5.0

What's Changed

Full Changelog: actions/setup-node@v6.4.0...v6.5.0

v6.4.0

What's Changed

Dependency updates:

New Contributors

Full Changelog: actions/setup-node@v6...v6.4.0

v6.3.0

What's Changed

Enhancements:

... (truncated)

Commits
  • 8207627 Migrate to ESM and upgrade dependencies (#1574)
  • 04be95c Add cache-primary-key and cache-matched-key as outputs (#1577)
  • 7c2c68d docs: Update caching recommendations to mitigate cache poisoning risks (#1567)
  • 6a61c03 Merge pull request #1569 from jasongin/update-actions-cache-5.1.0
  • 30eb73b Resolve high-severity audit issues
  • 4e1a87a Update dist
  • 360237f Strict equality
  • 4f8aac5 Bump @​actions/cache to 5.1.0, log cache write denied
  • f4a67bb Only use mirrorToken in getManifest if it's provided (#1548)
  • 0355742 Remove dummy NODE_AUTH_TOKEN export (#1558)
  • Additional commits viewable in compare view

Updates tauri-apps/tauri-action from 0 to 1

Release notes

Sourced from tauri-apps/tauri-action's releases.

action v1.0.0

[1.0.0]

  • db4399e (#1194 by @​FabianLars) Breaking Change: .app.tar.gz & .app.tar.gz.sig files will now include the app version like all other bundles/installers.
  • 53c8863 (#1315 by @​FabianLars) The download urls in latest.json will now use the github url instead of the browser download url.
  • 9b64567 (#1167 by @​FabianLars) Breaking Change: Drop support for Tauri v1 and unstable v2 (alpha, beta, rc) versions.
  • 9491f9d (#1177 by @​FabianLars) Breaking Change: The action will now fail if draft: true is set but the relevant release is not a draft.
  • ab62863 (#1176 by @​FabianLars) The frontend lockfile detection will now move up the file tree to fix issues in workspaces.
  • adb8bd3 (#1170 by @​FabianLars) Breaking Change: Remove includeRelease and includeDebug. You can switch to debug builds via args: --debug. To upload release and debug builds, run tauri-action twice, preferably in a job matrix for concurrent builds.
  • eea1890 (#1175 by @​FabianLars) Improved runner detection to prevent silent fails if runner (npm, pnpm, yarn, bun) was not installed while a lockfile was present.
  • acc588b (#1203 by @​FabianLars) Added initial Android & iOS support. This only includes building (=== running tauri android|ios build), installing dependencies and uploading to stores must be done manually.
  • 2e37e06 (#1174 by @​FabianLars) Use npm exec instead of npm run if @tauri-apps/cli was detected with no tauri script in package.json.
  • 1898cf4 (#1186 by @​FabianLars) Fiixed an issue that caused outdated signatures for macos universal builds in latest.json when re-running the action on the same release multiple times.
  • 5c7403d (#1326 by @​FabianLars) Expose mainBinaryName in releaseAssetNamePattern and workflowArtifactNamePattern.
  • 5d35c8e (#1189 by @​FabianLars) The upload release assets will now have the original file as its label which will show as the filename on the GitHub Release page and will be used internally to update assets on reruns and to get the download urls for latest.json
  • c18827e (#1183 by @​FabianLars) Breaking Change: Renamed assetNamePattern to releaseAssetNamePattern.
  • 766720b (#1172 by @​FabianLars) Breaking Change: Removed the feature to automatically initialize a Tauri project.
  • 25f3730 (#1208 by @​FabianLars) Breaking Change: Renamed includeUpdaterJson to uploadUpdaterJson for consistency with other similar options.
  • 53c8863 (#1315 by @​FabianLars) Removed Gitea support.
  • 6d11c27 (#1185 by @​FabianLars) Breaking Change: Removed updaterJsonKeepUniversal. This is now always enabled.
  • 7485c95 (#1169 by @​FabianLars) Switch from unmaintained @iarna/toml to smol-toml. No user-facing changes.
  • 8236c82 (#1277 by @​FabianLars) Semi-Breaking Change: The action will now update the name and body of existing releases.
  • 05c1b09 (#1178 by @​FabianLars) Added built-in variant of actions/upload-artifact to easily upload each bundle as a seperate archive. This may be removed once actions/upload-artifact#331 lands.
  • 6434f9a (#1296 by @​Ludea) Added initial support for vite+.

action v0.6.2

[0.6.2]

  • 73e111f (#1288) The action can now detect the workspace root correctly if the tauri project is configured as the cargo workspace root.

action v0.6.1

[0.6.1]

action v0.6.0

[0.6.0]

  • e918a06 (#1133) Encode tagName option value in latest.json URL.
  • 45acc19 (#1164) Add generateReleaseNotes config to use GitHub's release notes API to auto generate the release name and/or body.
  • 59a1a70 (#1166) Fix default file name pattern to match tauri's file names again.
  • 08112f7 (#1106) Added experimental support for Gitea hosted instances.
  • 08112f7 (#1106) Added a config to set the GitHub API URL which should help users with self-hosted instances and those using GitHub Enterprise.
  • b067139 (#1130) The action now uses node v24 which raises the minimum GitHub runner version to v2.327.1.

action v0.5.25

... (truncated)

Changelog

Sourced from tauri-apps/tauri-action's changelog.

[0.5.21]

Commits
  • 1deb371 Apply Version Updates From Current Changes (#1191)
  • 35033cf chore(deps): update dependency @​vercel/ncc to v0.44.0 (#1323)
  • 5ead4aa refactor: simplify createArtifact function (#1327)
  • 7899682 ci: update actions (#1328)
  • f201b79 chore(deps): update dependency @​types/node to v24.13.2 (#1320)
  • 5c7403d feat: default naming scheme for mobile assets, closes #1317 (#1326)
  • 71e781d chore(deps): update dependency @​biomejs/biome to v2.5.1 (#1318)
  • f51677a chore(deps): update dependency smol-toml to v1.7.0 (#1324)
  • 61337b4 chore(deps): update dependency @​types/node to v24.12.3 (#1316)
  • 53c8863 refactor: Use github api as download url in latest.json (#1315)
  • Additional commits viewable in compare view

Updates actions/attest-build-provenance from 2.2.3 to 4.2.2

Release notes

Sourced from actions/attest-build-provenance's releases.

v4.2.2

[!NOTE] As of version 4, actions/attest-build-provenance is simply a wrapper on top of actions/attest.

Existing applications may continue to use the attest-build-provenance action, but new implementations should use actions/attest instead.

What's Changed

Full Changelog: actions/attest-build-provenance@v4.1.1...v4.2.2

v4.1.1

[!NOTE] As of version 4, actions/attest-build-provenance is simply a wrapper on top of actions/attest.

Existing applications may continue to use the attest-build-provenance action, but new implementations should use actions/attest instead.

What's Changed

Full Changelog: actions/attest-build-provenance@v4.1.0...v4.1.1

v4.1.0

[!NOTE] As of version 4, actions/attest-build-provenance is simply a wrapper on top of actions/attest.

Existing applications may continue to use the attest-build-provenance action, but new implementations should use actions/attest instead.

What's Changed

Full Changelog: actions/attest-build-provenance@v4.0.0...v4.1.0

v4.0.0

[!NOTE] As of version 4, actions/attest-build-provenance is simply a wrapper on top of actions/attest.

Existing applications may continue to use the attest-build-provenance action, but new implementations should use actions/attest instead.

What's Changed

... (truncated)

Commits

Updates actions/configure-pages from 3 to 6

Release notes

Sourced from actions/configure-pages's releases.

v6.0.0

Changelog

See details of all code changes since previous release.

v5.0.0

Breaking Changes

⚠️ This version contains breaking changes! ⚠️

Full Changelog

See details of all code changes since previous relea...

Description has been truncated

Bumps the actions group with 8 updates:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `4` | `7` |
| [conda-incubator/setup-miniconda](https://github.com/conda-incubator/setup-miniconda) | `2` | `4` |
| [actions/setup-node](https://github.com/actions/setup-node) | `4` | `7` |
| [tauri-apps/tauri-action](https://github.com/tauri-apps/tauri-action) | `0` | `1` |
| [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance) | `2.2.3` | `4.2.2` |
| [actions/configure-pages](https://github.com/actions/configure-pages) | `3` | `6` |
| [actions/upload-pages-artifact](https://github.com/actions/upload-pages-artifact) | `3` | `5` |
| [actions/deploy-pages](https://github.com/actions/deploy-pages) | `4` | `5` |


Updates `actions/checkout` from 4 to 7
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v4...v7)

Updates `conda-incubator/setup-miniconda` from 2 to 4
- [Release notes](https://github.com/conda-incubator/setup-miniconda/releases)
- [Changelog](https://github.com/conda-incubator/setup-miniconda/blob/main/CHANGELOG.md)
- [Commits](conda-incubator/setup-miniconda@v2...v4)

Updates `actions/setup-node` from 4 to 7
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@v4...v7)

Updates `tauri-apps/tauri-action` from 0 to 1
- [Release notes](https://github.com/tauri-apps/tauri-action/releases)
- [Changelog](https://github.com/tauri-apps/tauri-action/blob/dev/CHANGELOG.md)
- [Commits](tauri-apps/tauri-action@v0...v1)

Updates `actions/attest-build-provenance` from 2.2.3 to 4.2.2
- [Release notes](https://github.com/actions/attest-build-provenance/releases)
- [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md)
- [Commits](actions/attest-build-provenance@v2.2.3...v4.2.2)

Updates `actions/configure-pages` from 3 to 6
- [Release notes](https://github.com/actions/configure-pages/releases)
- [Commits](actions/configure-pages@v3...v6)

Updates `actions/upload-pages-artifact` from 3 to 5
- [Release notes](https://github.com/actions/upload-pages-artifact/releases)
- [Commits](actions/upload-pages-artifact@v3...v5)

Updates `actions/deploy-pages` from 4 to 5
- [Release notes](https://github.com/actions/deploy-pages/releases)
- [Commits](actions/deploy-pages@v4...v5)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: conda-incubator/setup-miniconda
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: actions/setup-node
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: tauri-apps/tauri-action
  dependency-version: '1'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: actions/attest-build-provenance
  dependency-version: 4.2.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: actions/configure-pages
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: actions/upload-pages-artifact
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: actions/deploy-pages
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Aug 31, 2026
@jourdain
jourdain merged commit 846ed7c into master Aug 31, 2026
1 check failed
@jourdain
jourdain deleted the dependabot/github_actions/actions-46a8923bd2 branch August 31, 2026 16:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant