Skip to content

chore(deps): bump the actions group with 4 updates#445

Merged
hyperpolymath merged 1 commit into
mainfrom
dependabot/github_actions/actions-5727da401d
Jun 29, 2026
Merged

chore(deps): bump the actions group with 4 updates#445
hyperpolymath merged 1 commit into
mainfrom
dependabot/github_actions/actions-5727da401d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 29, 2026

Copy link
Copy Markdown
Contributor

Bumps the actions group with 4 updates: actions/cache, erlef/setup-beam, trufflesecurity/trufflehog and dawidd6/action-send-mail.

Updates actions/cache from 5.0.5 to 6.1.0

Release notes

Sourced from actions/cache's releases.

v6.1.0

What's Changed

Full Changelog: actions/cache@v6...v6.1.0

v6.0.0

What's Changed

Full Changelog: actions/cache@v5...v6.0.0

v5.1.0

What's Changed

Full Changelog: actions/cache@v5...v5.1.0

Changelog

Sourced from actions/cache's changelog.

Releases

How to prepare a release

[!NOTE] Relevant for maintainers with write access only.

  1. Switch to a new branch from main.
  2. Run npm test to ensure all tests are passing.
  3. Update the version in https://github.com/actions/cache/blob/main/package.json.
  4. Run npm run build to update the compiled files.
  5. Update this https://github.com/actions/cache/blob/main/RELEASES.md with the new version and changes in the ## Changelog section.
  6. Run licensed cache to update the license report.
  7. Run licensed status and resolve any warnings by updating the https://github.com/actions/cache/blob/main/.licensed.yml file with the exceptions.
  8. Commit your changes and push your branch upstream.
  9. Open a pull request against main and get it reviewed and merged.
  10. Draft a new release https://github.com/actions/cache/releases use the same version number used in package.json
    1. Create a new tag with the version number.
    2. Auto generate release notes and update them to match the changes you made in RELEASES.md.
    3. Toggle the set as the latest release option.
    4. Publish the release.
  11. Navigate to https://github.com/actions/cache/actions/workflows/release-new-action-version.yml
    1. There should be a workflow run queued with the same version number.
    2. Approve the run to publish the new version and update the major tags for this action.

Changelog

6.1.0

6.0.0

  • Updated @actions/cache to ^6.0.1, @actions/core to ^3.0.1, @actions/exec to ^3.0.0, @actions/io to ^3.0.2
  • Migrated to ESM module system
  • Upgraded Jest to v30 and test infrastructure to be ESM compatible

5.0.4

  • Bump minimatch to v3.1.5 (fixes ReDoS via globstar patterns)
  • Bump undici to v6.24.1 (WebSocket decompression bomb protection, header validation fixes)
  • Bump fast-xml-parser to v5.5.6

5.0.3

5.0.2

... (truncated)

Commits
  • 55cc834 Merge pull request #1768 from jasongin/readonly-cache
  • d8cd72f Bump @​actions/cache to v6.1.0 - handle cache write error due to RO token
  • 2c8a9bd Merge pull request #1760 from actions/samirat/esm_migration_and_package_update
  • e9b91fd Prettier fixes
  • e4884b8 Rebuild dist
  • 10baf01 Fixed licenses
  • e39b386 Fix test mock return order
  • b692820 PR feedback
  • 6074912 Rebuild dist bundles as ESM to match type:module
  • 5a912e8 Fix lint and jest issues
  • Additional commits viewable in compare view

Updates erlef/setup-beam from 1.24.0 to 1.24.1

Release notes

Sourced from erlef/setup-beam's releases.

v1.24.1

What's Changed

Full Changelog: erlef/setup-beam@v1...v1.24.1

Commits
  • 54075bc Automation: update setup-beam version output to ea45c80
  • ea45c80 Remove lodash Dependency (#457)
  • b4b8d85 Automation: update setup-beam version output to 20df794
  • 20df794 Bump globals from 17.4.0 to 17.7.0 (#452)
  • 9d5c5ca Automation: update setup-beam version output to ad42943
  • ad42943 Bump prettier from 3.8.1 to 3.9.1 (#454)
  • 135c095 Automation: update setup-beam version output to a04cfbb
  • a04cfbb Bump eslint from 10.1.0 to 10.6.0 (#453)
  • cd1472f Automation: update setup-beam version output to c80fdc9
  • c80fdc9 Bump actions/checkout from 6.0.2 to 7.0.0 (#467)
  • Additional commits viewable in compare view

Updates trufflesecurity/trufflehog from 3.95.5 to 3.95.6

Release notes

Sourced from trufflesecurity/trufflehog's releases.

v3.95.6

What's Changed

New Contributors

Full Changelog: trufflesecurity/trufflehog@v3.95.4...v3.95.6

Commits
  • 30d5bb9 S3: surface bucket listing failures and fix multi-role object count (#5035)
  • f0739f1 close todo - embed small HTTP test fixtures (#5001)
  • 36d680a add filetype=sdist param so we get the correct response code (#4988)
  • 248ffd5 fix(dropbox): prevent long sl.u. tokens from being truncated before verificat...
  • afbdaa8 Fix: Resolve known dedup issues in notifierWorker (#5028)
  • 7bcf376 [INS-472] [INS-515] Add user detector to defaults.go, gate it behind feat fla...
  • 84a2b33 Fix Renovate lookup: update setup-captain version comment (#4999)
  • ac0805e [INS-469] Added Rev detectors to defaults.go and gated it behind feature flag...
  • d03d087 GitHub finegrain analyzer was improperly handling errors (#4498)
  • b64cefe set redacted value to last 4 characters of secret, to match how the secret ty...
  • Additional commits viewable in compare view

Updates dawidd6/action-send-mail from 6e502825a508b867ab2954ad6343b68787624c01 to 994f270325d4f7257aff241a35488ef54ba364a4

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the actions group with 4 updates
a8c7620 
Bumps the actions group with 4 updates: [actions/cache](https://github.com/actions/cache), [erlef/setup-beam](https://github.com/erlef/setup-beam), [trufflesecurity/trufflehog](https://github.com/trufflesecurity/trufflehog) and [dawidd6/action-send-mail](https://github.com/dawidd6/action-send-mail).


Updates `actions/cache` from 5.0.5 to 6.1.0
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](actions/cache@27d5ce7...55cc834)

Updates `erlef/setup-beam` from 1.24.0 to 1.24.1
- [Release notes](https://github.com/erlef/setup-beam/releases)
- [Commits](erlef/setup-beam@fc68ffb...54075bc)

Updates `trufflesecurity/trufflehog` from 3.95.5 to 3.95.6
- [Release notes](https://github.com/trufflesecurity/trufflehog/releases)
- [Commits](trufflesecurity/trufflehog@d411fff...30d5bb9)

Updates `dawidd6/action-send-mail` from 6e502825a508b867ab2954ad6343b68787624c01 to 994f270325d4f7257aff241a35488ef54ba364a4
- [Release notes](https://github.com/dawidd6/action-send-mail/releases)
- [Commits](dawidd6/action-send-mail@6e50282...994f270)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-version: 6.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: erlef/setup-beam
  dependency-version: 1.24.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: trufflesecurity/trufflehog
  dependency-version: 3.95.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: dawidd6/action-send-mail
  dependency-version: 994f270325d4f7257aff241a35488ef54ba364a4
  dependency-type: direct:production
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jun 29, 2026
@dependabot dependabot Bot requested a review from hyperpolymath as a code owner June 29, 2026 13:30
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jun 29, 2026
@hyperpolymath hyperpolymath merged commit 48d2119 into main Jun 29, 2026
18 of 19 checks passed
@hyperpolymath hyperpolymath deleted the dependabot/github_actions/actions-5727da401d branch June 29, 2026 13:40
@sonarqubecloud

sonarqubecloud Bot commented Jun 29, 2026

Copy link
Copy Markdown

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@hyperpolymath hyperpolymath hyperpolymath approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@hyperpolymath