Skip to content

build(deps): bump the github-actions-dependencies group across 2 directories with 8 updates#218

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-dependencies-1e11191699
Open

build(deps): bump the github-actions-dependencies group across 2 directories with 8 updates#218
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-dependencies-1e11191699

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 22, 2026

Bumps the github-actions-dependencies group with 7 updates in the / directory:

Package From To
codecov/codecov-action 6.0.0 6.0.1
hoverkraft-tech/ci-github-common/.github/workflows/greetings.yml 0.34.2 0.35.4
hoverkraft-tech/ci-github-publish 0.23.0 0.25.0
hoverkraft-tech/ci-github-common/.github/workflows/need-fix-to-issue.yml 0.34.2 0.35.4
hoverkraft-tech/ci-github-publish/.github/workflows/prepare-release.yml 0.23.0 0.25.0
hoverkraft-tech/ci-github-common/.github/workflows/semantic-pull-request.yml 0.34.2 0.35.4
hoverkraft-tech/ci-github-common/.github/workflows/stale.yml 0.34.2 0.35.4

Bumps the github-actions-dependencies group with 1 update in the /.github/workflows/actions/setup-php directory: shivammathur/setup-php.

Updates codecov/codecov-action from 6.0.0 to 6.0.1

Release notes

Sourced from codecov/codecov-action's releases.

v6.0.1

What's Changed

Full Changelog: codecov/codecov-action@v6.0.0...v6.0.1

Changelog

Sourced from codecov/codecov-action's changelog.

v5.5.2

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.5.1..v5.5.2

v5.5.1

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.5.0..v5.5.1

v5.5.0

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.3..v5.5.0

v5.4.3

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.2..v5.4.3

v5.4.2

... (truncated)

Commits

Updates hoverkraft-tech/ci-github-common/.github/workflows/greetings.yml from 0.34.2 to 0.35.4

Release notes

Sourced from hoverkraft-tech/ci-github-common/.github/workflows/greetings.yml's releases.

0.35.4

Release Summary

actions/checkout now supports the ref input for more flexible checkout configuration.

Documentation for actions and workflows has been updated.

Breaking change(s)

There is no breaking change.

What's Changed

Full Changelog: hoverkraft-tech/ci-github-common@0.35.3...0.35.4

0.35.3

Release Summary

Adds support for specifying a destination directory name in local actions.

Internal documentation for actions and workflows was updated.

Breaking change(s)

There is no breaking change.

What's Changed

Full Changelog: hoverkraft-tech/ci-github-common@0.35.2...0.35.3

0.35.2

Release Summary

The checkout action now supports sparse-checkout input, enabling more focused repository checkouts.

Actions and workflows documentation has been updated.

Breaking changes

There is no breaking change.

What's Changed

... (truncated)

Commits
  • b553a69 docs: update actions and workflows documentation
  • 0648df1 feat(actions/checkout): add support for ref input
  • cacc612 docs: update actions and workflows documentation
  • 26b89ca feat(local-actions): allows to specify destination directory name
  • ff81510 docs: update actions and workflows documentation
  • 2d44fec feat(actions/checkout): add support for sparse-checkout input
  • b485212 docs: update actions and workflows documentation
  • 47a06db chore: bump the github-actions-dependencies group across 2 directories with 4...
  • cf0f627 chore: bump ghcr.io/devcontainers/features/docker-in-docker
  • d428923 chore: bump fast-xml-parser
  • Additional commits viewable in compare view

Updates hoverkraft-tech/ci-github-publish from 0.23.0 to 0.25.0

Release notes

Sourced from hoverkraft-tech/ci-github-publish's releases.

0.25.0

Release Summary

This release adds a new release/summarize-changelog action and introduces a release option to skip release creation when no changes are detected.

Internal updates include dependency bumps across npm packages and GitHub Actions, plus refreshed actions and workflows documentation.

Breaking change(s)

There is no breaking change.

What's Changed

Full Changelog: hoverkraft-tech/ci-github-publish@0.24.0...0.25.0

0.24.0

Release Summary

This release adds a release workflow recommendation and refreshes the actions and workflows documentation.

Internal maintenance updates devcontainer Docker-in-Docker to 3.0.0 and bumps GitHub Actions dependencies across multiple directories.

Breaking change(s)

There is no breaking change.

What's Changed

Full Changelog: hoverkraft-tech/ci-github-publish@0.23.3...0.24.0

0.23.3

Release Summary

Public actions and workflows documentation was refreshed.

Internal GitHub Actions dependencies were updated, including ci-dokumentor, pull-request-comment-trigger, and related grouped dependency bumps.

... (truncated)

Commits
  • b27c380 docs: update actions and workflows documentation
  • 995e042 feat(release): add skip-if-no-changes input to prevent release creation witho...
  • 115bdac docs: update actions and workflows documentation
  • 417f31f build(deps): Bump the github-actions-dependencies group across 8 directories ...
  • ad79e95 build(deps): Bump the npm-dependencies group across 1 directory with 4 updates
  • 377a8a8 feat(release): switch llm integration to langchain multi-provider
  • 1ebdeb2 feat(release): use npm openai package for llm summary generation
  • c3867a6 feat(release): support llm-prompt-based summary generation
  • ec61f11 feat(release): add summarize changelog action
  • 6a2562a docs: update actions and workflows documentation
  • Additional commits viewable in compare view

Updates hoverkraft-tech/ci-github-common/.github/workflows/need-fix-to-issue.yml from 0.34.2 to 0.35.4

Release notes

Sourced from hoverkraft-tech/ci-github-common/.github/workflows/need-fix-to-issue.yml's releases.

0.35.4

Release Summary

actions/checkout now supports the ref input for more flexible checkout configuration.

Documentation for actions and workflows has been updated.

Breaking change(s)

There is no breaking change.

What's Changed

Full Changelog: hoverkraft-tech/ci-github-common@0.35.3...0.35.4

0.35.3

Release Summary

Adds support for specifying a destination directory name in local actions.

Internal documentation for actions and workflows was updated.

Breaking change(s)

There is no breaking change.

What's Changed

Full Changelog: hoverkraft-tech/ci-github-common@0.35.2...0.35.3

0.35.2

Release Summary

The checkout action now supports sparse-checkout input, enabling more focused repository checkouts.

Actions and workflows documentation has been updated.

Breaking changes

There is no breaking change.

What's Changed

... (truncated)

Commits
  • b553a69 docs: update actions and workflows documentation
  • 0648df1 feat(actions/checkout): add support for ref input
  • cacc612 docs: update actions and workflows documentation
  • 26b89ca feat(local-actions): allows to specify destination directory name
  • ff81510 docs: update actions and workflows documentation
  • 2d44fec feat(actions/checkout): add support for sparse-checkout input
  • b485212 docs: update actions and workflows documentation
  • 47a06db chore: bump the github-actions-dependencies group across 2 directories with 4...
  • cf0f627 chore: bump ghcr.io/devcontainers/features/docker-in-docker
  • d428923 chore: bump fast-xml-parser
  • Additional commits viewable in compare view

Updates hoverkraft-tech/ci-github-publish/.github/workflows/prepare-release.yml from 0.23.0 to 0.25.0

Release notes

Sourced from hoverkraft-tech/ci-github-publish/.github/workflows/prepare-release.yml's releases.

0.25.0

Release Summary

This release adds a new release/summarize-changelog action and introduces a release option to skip release creation when no changes are detected.

Internal updates include dependency bumps across npm packages and GitHub Actions, plus refreshed actions and workflows documentation.

Breaking change(s)

There is no breaking change.

What's Changed

Full Changelog: hoverkraft-tech/ci-github-publish@0.24.0...0.25.0

0.24.0

Release Summary

This release adds a release workflow recommendation and refreshes the actions and workflows documentation.

Internal maintenance updates devcontainer Docker-in-Docker to 3.0.0 and bumps GitHub Actions dependencies across multiple directories.

Breaking change(s)

There is no breaking change.

What's Changed

Full Changelog: hoverkraft-tech/ci-github-publish@0.23.3...0.24.0

0.23.3

Release Summary

Public actions and workflows documentation was refreshed.

Internal GitHub Actions dependencies were updated, including ci-dokumentor, pull-request-comment-trigger, and related grouped dependency bumps.

... (truncated)

Commits
  • b27c380 docs: update actions and workflows documentation
  • 995e042 feat(release): add skip-if-no-changes input to prevent release creation witho...
  • 115bdac docs: update actions and workflows documentation
  • 417f31f build(deps): Bump the github-actions-dependencies group across 8 directories ...
  • ad79e95 build(deps): Bump the npm-dependencies group across 1 directory with 4 updates
  • 377a8a8 feat(release): switch llm integration to langchain multi-provider
  • 1ebdeb2 feat(release): use npm openai package for llm summary generation
  • c3867a6 feat(release): support llm-prompt-based summary generation
  • ec61f11 feat(release): add summarize changelog action
  • 6a2562a docs: update actions and workflows documentation
  • Additional commits viewable in compare view

Updates hoverkraft-tech/ci-github-common/.github/workflows/semantic-pull-request.yml from 0.34.2 to 0.35.4

Release notes

Sourced from hoverkraft-tech/ci-github-common/.github/workflows/semantic-pull-request.yml's releases.

0.35.4

Release Summary

actions/checkout now supports the ref input for more flexible checkout configuration.

Documentation for actions and workflows has been updated.

Breaking change(s)

There is no breaking change.

What's Changed

Full Changelog: hoverkraft-tech/ci-github-common@0.35.3...0.35.4

0.35.3

Release Summary

Adds support for specifying a destination directory name in local actions.

Internal documentation for actions and workflows was updated.

Breaking change(s)

There is no breaking change.

What's Changed

Full Changelog: hoverkraft-tech/ci-github-common@0.35.2...0.35.3

0.35.2

Release Summary

The checkout action now supports sparse-checkout input, enabling more focused repository checkouts.

Actions and workflows documentation has been updated.

Breaking changes

There is no breaking change.

What's Changed

... (truncated)

Commits
  • b553a69 docs: update actions and workflows documentation
  • 0648df1 feat(actions/checkout): add support for ref input
  • cacc612 docs: update actions and workflows documentation
  • 26b89ca feat(local-actions): allows to specify destination directory name
  • ff81510 docs: update actions and workflows documentation
  • 2d44fec feat(actions/checkout): add support for sparse-checkout input
  • b485212 docs: update actions and workflows documentation
  • 47a06db chore: bump the github-actions-dependencies group across 2 directories with 4...
  • cf0f627 chore: bump ghcr.io/devcontainers/features/docker-in-docker
  • d428923 chore: bump fast-xml-parser
  • Additional commits viewable in compare view

Updates hoverkraft-tech/ci-github-common/.github/workflows/stale.yml from 0.34.2 to 0.35.4

Release notes

Sourced from hoverkraft-tech/ci-github-common/.github/workflows/stale.yml's releases.

0.35.4

Release Summary

actions/checkout now supports the ref input for more flexible checkout configuration.

Documentation for actions and workflows has been updated.

Breaking change(s)

There is no breaking change.

What's Changed

Full Changelog: hoverkraft-tech/ci-github-common@0.35.3...0.35.4

0.35.3

Release Summary

Adds support for specifying a destination directory name in local actions.

Internal documentation for actions and workflows was updated.

Breaking change(s)

There is no breaking change.

What's Changed

Full Changelog: hoverkraft-tech/ci-github-common@0.35.2...0.35.3

0.35.2

Release Summary

The checkout action now supports sparse-checkout input, enabling more focused repository checkouts.

Actions and workflows documentation has been updated.

Breaking changes

There is no breaking change.

What's Changed

... (truncated)

Commits
  • b553a69 docs: update actions and workflows documentation
  • 0648df1 feat(actions/checkout): add support for ref input
  • cacc612 docs: update actions and workflows documentation
  • 26b89ca feat(local-actions): allows to specify destination directory name
  • ff81510 docs: update actions and workflows documentation
  • 2d44fec feat(actions/checkout): add support for sparse-checkout input
  • b485212 docs: update actions and workflows documentation
  • 47a06db chore: bump the github-actions-dependencies group across 2 directories with 4...
  • cf0f627 chore: bump ghcr.io/devcontainers/features/docker-in-docker
  • d428923 chore: bump fast-xml-parser
  • Additional commits viewable in compare view

Updates shivammathur/setup-php from 2.37.0 to 2.37.1

Release notes

Sourced from shivammathur/setup-php's releases.

2.37.1

Changelog

Security Updates

[!NOTE] This can affect workflows that pass values from users or pull requests to setup-php, for example from comments, dispatch inputs, PR titles/branches, generated matrices, or files such as .php-version and composer.json. Be especially careful with pull_request_target workflows that use any value from the pull request. Workflows that only use fixed trusted values are not expected to be affected, but updating to 2.37.1 is recommended.

[!NOTE]
This only affects workflows where the composer version is pinned like composer:2.9.7, workflows that do not pin the version or use composer:v2 are not affected as those get automatic updates. In case you pin the version, it is highly recommended to upgrade and have automation to do such timely upgrades in your workflows.

Fixes and Improvements

  • Fixed support for phalcon on Windows.

  • Fixed restoring tools when using cached using previous runs.

  • Improved enabling gearman extension on Linux.

  • Fixed fallback when installing PhpManager and VcRedist modules on Windows.

  • Fixed parsing extension inputs with backslash line continuation.

  • Improved workflow examples

    • Added workflow examples for Drupal 11 composer-managed projects and WordPress plugins.
    • Added workflow examples for Yii3 web applications and replaced Yii2 Starter Kit examples.
    • Updated workflow examples to use currently supported PHP versions.
  • Updated OS release mappings for newer Ubuntu releases.

  • Updated internal workflows for Codecov v6 and NPM trusted publishing.

  • Updated Node.js dependencies.

  • Fixed composer version in README. (#1081)

Thanks @​Pyker for the contribution

For the complete list of changes, please refer to the Full Changelog

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…ctories with 8 updates

Bumps the github-actions-dependencies group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [codecov/codecov-action](https://github.com/codecov/codecov-action) | `6.0.0` | `6.0.1` |
| [hoverkraft-tech/ci-github-common/.github/workflows/greetings.yml](https://github.com/hoverkraft-tech/ci-github-common) | `0.34.2` | `0.35.4` |
| [hoverkraft-tech/ci-github-publish](https://github.com/hoverkraft-tech/ci-github-publish) | `0.23.0` | `0.25.0` |
| [hoverkraft-tech/ci-github-common/.github/workflows/need-fix-to-issue.yml](https://github.com/hoverkraft-tech/ci-github-common) | `0.34.2` | `0.35.4` |
| [hoverkraft-tech/ci-github-publish/.github/workflows/prepare-release.yml](https://github.com/hoverkraft-tech/ci-github-publish) | `0.23.0` | `0.25.0` |
| [hoverkraft-tech/ci-github-common/.github/workflows/semantic-pull-request.yml](https://github.com/hoverkraft-tech/ci-github-common) | `0.34.2` | `0.35.4` |
| [hoverkraft-tech/ci-github-common/.github/workflows/stale.yml](https://github.com/hoverkraft-tech/ci-github-common) | `0.34.2` | `0.35.4` |

Bumps the github-actions-dependencies group with 1 update in the /.github/workflows/actions/setup-php directory: [shivammathur/setup-php](https://github.com/shivammathur/setup-php).


Updates `codecov/codecov-action` from 6.0.0 to 6.0.1
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](codecov/codecov-action@57e3a13...e79a696)

Updates `hoverkraft-tech/ci-github-common/.github/workflows/greetings.yml` from 0.34.2 to 0.35.4
- [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases)
- [Commits](hoverkraft-tech/ci-github-common@71b8594...b553a69)

Updates `hoverkraft-tech/ci-github-publish` from 0.23.0 to 0.25.0
- [Release notes](https://github.com/hoverkraft-tech/ci-github-publish/releases)
- [Commits](hoverkraft-tech/ci-github-publish@48e0c54...b27c380)

Updates `hoverkraft-tech/ci-github-common/.github/workflows/need-fix-to-issue.yml` from 0.34.2 to 0.35.4
- [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases)
- [Commits](hoverkraft-tech/ci-github-common@0.34.2...0.35.4)

Updates `hoverkraft-tech/ci-github-publish/.github/workflows/prepare-release.yml` from 0.23.0 to 0.25.0
- [Release notes](https://github.com/hoverkraft-tech/ci-github-publish/releases)
- [Commits](hoverkraft-tech/ci-github-publish@48e0c54...b27c380)

Updates `hoverkraft-tech/ci-github-common/.github/workflows/semantic-pull-request.yml` from 0.34.2 to 0.35.4
- [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases)
- [Commits](hoverkraft-tech/ci-github-common@71b8594...b553a69)

Updates `hoverkraft-tech/ci-github-common/.github/workflows/stale.yml` from 0.34.2 to 0.35.4
- [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases)
- [Commits](hoverkraft-tech/ci-github-common@0.34.2...0.35.4)

Updates `shivammathur/setup-php` from 2.37.0 to 2.37.1
- [Release notes](https://github.com/shivammathur/setup-php/releases)
- [Commits](shivammathur/setup-php@accd612...7c071df)

---
updated-dependencies:
- dependency-name: codecov/codecov-action
  dependency-version: 6.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-common/.github/workflows/greetings.yml
  dependency-version: 0.35.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-publish
  dependency-version: 0.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-common/.github/workflows/need-fix-to-issue.yml
  dependency-version: 0.35.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-publish/.github/workflows/prepare-release.yml
  dependency-version: 0.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-common/.github/workflows/semantic-pull-request.yml
  dependency-version: 0.35.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-common/.github/workflows/stale.yml
  dependency-version: 0.35.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: shivammathur/setup-php
  dependency-version: 2.37.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update Github_actions code labels May 22, 2026
@github-actions
Copy link
Copy Markdown
Contributor

Hi, thank you for creating your PR, we will check it out very soon

@codecov
Copy link
Copy Markdown

codecov Bot commented May 22, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 96.30%. Comparing base (114ff1f) to head (ad41b6c).

Additional details and impacted files
@@            Coverage Diff            @@
##               main     #218   +/-   ##
=========================================
  Coverage     96.30%   96.30%           
  Complexity      510      510           
=========================================
  Files            38       38           
  Lines          1514     1514           
=========================================
  Hits           1458     1458           
  Misses           56       56           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update Github_actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants