Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 15, 2025

Bumps the gh-actions-packages group with 12 updates in the / directory:

Package From To
actions/checkout 4.2.2 5.0.0
actions/github-script 7.0.1 8.0.0
DataDog/ensure-ci-success 2.2.0 2.3.0
ruby/setup-ruby 1.245.0 1.257.0
actions/download-artifact 4.3.0 5.0.0
actions/create-github-app-token 2.0.6 2.1.4
github/codeql-action 3.29.2 3.30.3
planetscale/ghcommit-action 0.2.15 0.2.17
DeterminateSystems/nix-installer-action 18 20
actions/labeler 5.0.0 6.0.1
DataDog/system-tests 1fc343b8835463376056ad83d6e1bd5dddefb777 b457fd40ebb0db049fcbd605206e2dd9a5a2925f
actions/upload-pages-artifact 3.0.1 4.0.0

Updates actions/checkout from 4.2.2 to 5.0.0

Release notes

Sourced from actions/checkout's releases.

v5.0.0

What's Changed

⚠️ Minimum Compatible Runner Version

v2.327.1
Release Notes

Make sure your runner is updated to this version or newer to use this release.

Full Changelog: actions/checkout@v4...v5.0.0

v4.3.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v4...v4.3.0

Changelog

Sourced from actions/checkout's changelog.

Changelog

V5.0.0

V4.3.0

v4.2.2

v4.2.1

v4.2.0

v4.1.7

v4.1.6

v4.1.5

v4.1.4

v4.1.3

... (truncated)

Commits

Updates actions/github-script from 7.0.1 to 8.0.0

Release notes

Sourced from actions/github-script's releases.

v8.0.0

What's Changed

⚠️ Minimum Compatible Runner Version

v2.327.1
Release Notes

Make sure your runner is updated to this version or newer to use this release.

New Contributors

Full Changelog: actions/github-script@v7.1.0...v8.0.0

v7.1.0

What's Changed

New Contributors

Full Changelog: actions/github-script@v7...v7.1.0

Commits
  • ed59741 Merge pull request #653 from actions/sneha-krip/readme-for-v8
  • 2dc352e Bold minimum Actions Runner version in README
  • 01e118c Update README for Node 24 runtime requirements
  • 8b222ac Apply suggestion from @​salmanmkc
  • adc0eea README for updating actions/github-script from v7 to v8
  • 20fe497 Merge pull request #637 from actions/node24
  • e7b7f22 update licenses
  • 2c81ba0 Update Node.js version support to 24.x
  • f28e40c Merge pull request #610 from actions/nebuk89-patch-1
  • 1ae9958 Update README.md
  • Additional commits viewable in compare view

Updates DataDog/ensure-ci-success from 2.2.0 to 2.3.0

Release notes

Sourced from DataDog/ensure-ci-success's releases.

v2.3.0

What's Changed

New Contributors

Full Changelog: DataDog/ensure-ci-success@v2...v2.3.0

Commits

Updates ruby/setup-ruby from 1.245.0 to 1.257.0

Release notes

Sourced from ruby/setup-ruby's releases.

v1.257.0

What's Changed

Full Changelog: ruby/setup-ruby@v1.256.0...v1.257.0

v1.256.0

What's Changed

Full Changelog: ruby/setup-ruby@v1.255.0...v1.256.0

v1.255.0

What's Changed

New Contributors

Full Changelog: ruby/setup-ruby@v1.254.0...v1.255.0

v1.254.0

What's Changed

New Contributors

Full Changelog: ruby/setup-ruby@v1.253.0...v1.254.0

v1.253.0

What's Changed

Full Changelog: ruby/setup-ruby@v1.252.0...v1.253.0

v1.252.0

What's Changed

Full Changelog: ruby/setup-ruby@v1.251.0...v1.252.0

... (truncated)

Commits
  • 4451173 Remove workaround for old truffleruby version from 2021
  • 805f878 Remove failing test
  • ab85640 Add jruby-9.4.14.0
  • c2e9820 Update README.md
  • efbf473 Add JRuby for Windows on Arm
  • bd28d36 Merge pull request #797 from ruby/dependabot/github_actions/actions/checkout-5
  • 3c08d92 Bump actions/checkout from 4 to 5
  • 829114f Add jruby-10.0.2.0
  • 76da337 Update GitHub-hosted runners link
  • 2973a4b Merge pull request #794 from fkmy/update-readme
  • Additional commits viewable in compare view

Updates actions/download-artifact from 4.3.0 to 5.0.0

Release notes

Sourced from actions/download-artifact's releases.

v5.0.0

What's Changed

v5.0.0

🚨 Breaking Change

This release fixes an inconsistency in path behavior for single artifact downloads by ID. If you're downloading single artifacts by ID, the output path may change.

What Changed

Previously, single artifact downloads behaved differently depending on how you specified the artifact:

  • By name: name: my-artifact → extracted to path/ (direct)
  • By ID: artifact-ids: 12345 → extracted to path/my-artifact/ (nested)

Now both methods are consistent:

  • By name: name: my-artifact → extracted to path/ (unchanged)
  • By ID: artifact-ids: 12345 → extracted to path/ (fixed - now direct)

Migration Guide

✅ No Action Needed If:
  • You download artifacts by name
  • You download multiple artifacts by ID
  • You already use merge-multiple: true as a workaround
⚠️ Action Required If:

You download single artifacts by ID and your workflows expect the nested directory structure.

Before v5 (nested structure):

- uses: actions/download-artifact@v4
  with:
    artifact-ids: 12345
    path: dist
# Files were in: dist/my-artifact/

Where my-artifact is the name of the artifact you previously uploaded

To maintain old behavior (if needed):

</tr></table> 

... (truncated)

Commits
  • 634f93c Merge pull request #416 from actions/single-artifact-id-download-path
  • b19ff43 refactor: resolve download path correctly in artifact download tests (mainly ...
  • e262cbe bundle dist
  • bff23f9 update docs
  • fff8c14 fix download path logic when downloading a single artifact by id
  • 448e3f8 Merge pull request #407 from actions/nebuk89-patch-1
  • 47225c4 Update README.md
  • See full diff in compare view

Updates actions/create-github-app-token from 2.0.6 to 2.1.4

Release notes

Sourced from actions/create-github-app-token's releases.

v2.1.4

2.1.4 (2025-09-13)

Bug Fixes

  • deps: bump @​octokit/auth-app from 7.2.1 to 8.0.1 (#257) (bef1eaf)

v2.1.3

2.1.3 (2025-09-13)

Bug Fixes

  • deps: bump undici from 7.8.0 to 7.10.0 in the production-dependencies group (#254) (f3d5ec2)

v2.1.2

2.1.2 (2025-09-12)

Bug Fixes

  • deps: bump @​octokit/request from 9.2.3 to 10.0.2 (#256) (5d7307b)

v2.1.1

2.1.1 (2025-08-11)

Bug Fixes

v2.1.0

2.1.0 (2025-08-08)

Features

Commits
  • 6701853 build(release): 2.1.4 [skip ci]
  • bef1eaf fix(deps): bump @​octokit/auth-app from 7.2.1 to 8.0.1 (#257)
  • 1526738 build(release): 2.1.3 [skip ci]
  • f3d5ec2 fix(deps): bump undici from 7.8.0 to 7.10.0 in the production-dependencies gr...
  • def152b build(release): 2.1.2 [skip ci]
  • 5d7307b fix(deps): bump @​octokit/request from 9.2.3 to 10.0.2 (#256)
  • 525760a build(deps): bump stefanzweifel/git-auto-commit-action from 5.2.0 to 6.0.1 (#...
  • 8ab05a8 Add beta branch support for releases (#282)
  • d00315e build(deps): bump actions/checkout from 4 to 5 (#279)
  • fcc6c28 build(deps-dev): bump dotenv from 16.5.0 to 17.2.1 (#269)
  • Additional commits viewable in compare view

Updates github/codeql-action from 3.29.2 to 3.30.3

Release notes

Sourced from github/codeql-action's releases.

v3.30.3

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.30.3 - 10 Sep 2025

No user facing changes.

See the full CHANGELOG.md for more information.

v3.30.2

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.30.2 - 09 Sep 2025

  • Fixed a bug which could cause language autodetection to fail. #3084
  • Experimental: The quality-queries input that was added in 3.29.2 as part of an internal experiment is now deprecated and will be removed in an upcoming version of the CodeQL Action. It has been superseded by a new analysis-kinds input, which is part of the same internal experiment. Do not use this in production as it is subject to change at any time. #3064

See the full CHANGELOG.md for more information.

v3.30.1

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.30.1 - 05 Sep 2025

  • Update default CodeQL bundle version to 2.23.0. #3077

See the full CHANGELOG.md for more information.

v3.30.0

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.30.0 - 01 Sep 2025

  • Reduce the size of the CodeQL Action, speeding up workflows by approximately 4 seconds. #3054

See the full CHANGELOG.md for more information.

v3.29.11

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

... (truncated)

Changelog

Sourced from github/codeql-action's changelog.

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

[UNRELEASED]

  • We have improved the CodeQL Action's ability to validate that the workflow it is used in does not use different versions of the CodeQL Action for different workflow steps. Mixing different versions of the CodeQL Action in the same workflow is unsupported and can lead to unpredictable results. A warning will now be emitted from the codeql-action/init step if different versions of the CodeQL Action are detected in the workflow file. Additionally, an error will now be thrown by the other CodeQL Action steps if they load a configuration file that was generated by a different version of the codeql-action/init step. #3099 and #3100
  • We added support for reducing the size of dependency caches for Java analyses, which will reduce cache usage and speed up workflows. This will be enabled automatically at a later time. #3107

3.30.3 - 10 Sep 2025

No user facing changes.

3.30.2 - 09 Sep 2025

  • Fixed a bug which could cause language autodetection to fail. #3084
  • Experimental: The quality-queries input that was added in 3.29.2 as part of an internal experiment is now deprecated and will be removed in an upcoming version of the CodeQL Action. It has been superseded by a new analysis-kinds input, which is part of the same internal experiment. Do not use this in production as it is subject to change at any time. #3064

3.30.1 - 05 Sep 2025

  • Update default CodeQL bundle version to 2.23.0. #3077

3.30.0 - 01 Sep 2025

  • Reduce the size of the CodeQL Action, speeding up workflows by approximately 4 seconds. #3054

3.29.11 - 21 Aug 2025

  • Update default CodeQL bundle version to 2.22.4. #3044

3.29.10 - 18 Aug 2025

No user facing changes.

3.29.9 - 12 Aug 2025

No user facing changes.

3.29.8 - 08 Aug 2025

  • Fix an issue where the Action would autodetect unsupported languages such as HTML. #3015

3.29.7 - 07 Aug 2025

This release rolls back 3.29.6 to address issues with language autodetection. It is identical to 3.29.5.

3.29.6 - 07 Aug 2025

  • The cleanup-level input to the analyze Action is now deprecated. The CodeQL Action has written a limited amount of intermediate results to the database since version 2.2.5, and now automatically manages cleanup. #2999
  • Update default CodeQL bundle version to 2.22.3. #3000

... (truncated)

Commits
  • 192325c Merge pull request #3104 from github/update-v3.30.3-b660efdcf
  • e68956d Update changelog for v3.30.3
  • b660efd Merge pull request #3103 from github/mbg/fix/category-check
  • e49458b Fix runInterpretResultsFor using the wrong AnalysisConfig for category fix
  • f374a62 Merge pull request #3098 from github/kaspersv/increase-overlay-base-size-limit
  • 5efa438 Merge pull request #3101 from github/mbg/public-repo-notice-in-pr-template
  • 8a84a62 Overlay: Increase size limit for cached overlay base database
  • eb50a88 Merge pull request #3097 from github/redsun82/only-dump-sarif
  • 4c53461 Tweak sarif dump log
  • dae3742 Dump soon to be uploaded SARIF on request
  • Additional commits viewable in compare view

Updates planetscale/ghcommit-action from 0.2.15 to 0.2.17

Release notes

Sourced from planetscale/ghcommit-action's releases.

v0.2.17

What's Changed

🏕 Changes

Full Changelog: planetscale/ghcommit-action@v0.2.16...v0.2.17

v0.2.16

What's Changed

🏕 Changes

Full Changelog: planetscale/ghcommit-action@v0.2.15...v0.2.16

Commits
  • 322be96 🤖 Bump version in Dockerfile
  • a115be6 Merge pull request #117 from planetscale/renovate/all-minor-patch-digest
  • 5e99462 chore(deps): update all non-major dependencies
  • 7c35cae 🤖 Bump version in Dockerfile
  • 5e1ee0b Merge pull request #116 from planetscale/renovate/all-minor-patch-digest
  • e8c8953 chore(deps): update all non-major dependencies
  • 42c13ff chore(deps): update docker/setup-buildx-action digest to e468171 (#115)
  • 13187a6 chore(deps): update planetscale/ghcommit-action action to v0.2.15 (#114)
  • 70bcba6 Merge pull request #113 from planetscale/jw-reno
  • 8e280db gha/validate-reno: switch to latest node lts
  • See full diff in compare view

Updates DeterminateSystems/nix-installer-action from 18 to 20

Release notes

Sourced from DeterminateSystems/nix-installer-action's releases.

v20

What's Changed

Full Changelog: DeterminateSystems/nix-installer-action@v19...v20

v19

What's Changed

Full Changelog: DeterminateSystems/nix-installer-action@v18...v19

Commits
  • 786fff0 Apply fixups from CodeRabbit review (#200)
  • f161ab0 Treat FlakeHub logins as a funnel (#199)
  • 61ce789 Merge pull request #198 from DeterminateSystems/gustavderdrache/push-mzwwpswk...
  • 44f3801 Improve messages for when auth isn't available
  • cb6d4e8 Standardize login failure events
  • e686131 Record events if authentication is skipped
  • 2c3a298 Report the number of nix builds that passed / failed (#196)
  • 18b667a Update detsys-ts for: `Capture the version of Nix in addition to the nix st...
  • 428f3c6 Update detsys-ts for: `Merge pull request #106 from DeterminateSystems/fix-...
  • 90bb610 Update detsys-ts for: `Await the request promise so we can cover it with th...
  • See full diff in compare view

Updates actions/labeler from 5.0.0 to 6.0.1

Release notes

Sourced from actions/labeler's releases.

v6.0.1

What's Changed

New Contributors

Full Changelog: actions/labeler@v6.0.0...v6.0.1

v6.0.0

What's Changed

Breaking Changes

Dependency Upgrades

@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Sep 15, 2025
@dependabot dependabot bot requested a review from a team as a code owner September 15, 2025 07:43
@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Sep 15, 2025
Copy link

github-actions bot commented Sep 15, 2025

👋 Hey @DataDog/ruby-guild, please fill "Change log entry" section in the pull request description.

If changes need to be present in CHANGELOG.md you can state it this way

**Change log entry**

Yes. A brief summary to be placed into the CHANGELOG.md

(possible answers Yes/Yep/Yeah)

Or you can opt out like that

**Change log entry**

None.

(possible answers No/Nope/None)

Visited at: 2025-09-22 08:01:35 UTC

@github-actions github-actions bot added the dev/github Github repository maintenance and automation label Sep 15, 2025
@pr-commenter
Copy link

pr-commenter bot commented Sep 15, 2025

Benchmarks

Benchmark execution time: 2025-09-22 07:58:17

Comparing candidate commit e552607 in PR branch dependabot/github_actions/gh-actions-packages-7c152800a8 with baseline commit a097724 in branch master.

Found 0 performance improvements and 0 performance regressions! Performance is the same for 44 metrics, 2 unstable metrics.

@dependabot dependabot bot force-pushed the dependabot/github_actions/gh-actions-packages-7c152800a8 branch from 42e151e to 1f9131f Compare September 17, 2025 12:26
Bumps the gh-actions-packages group with 12 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `4.2.2` | `5.0.0` |
| [actions/github-script](https://github.com/actions/github-script) | `7.0.1` | `8.0.0` |
| [DataDog/ensure-ci-success](https://github.com/datadog/ensure-ci-success) | `2.2.0` | `2.3.0` |
| [ruby/setup-ruby](https://github.com/ruby/setup-ruby) | `1.245.0` | `1.257.0` |
| [actions/download-artifact](https://github.com/actions/download-artifact) | `4.3.0` | `5.0.0` |
| [actions/create-github-app-token](https://github.com/actions/create-github-app-token) | `2.0.6` | `2.1.4` |
| [github/codeql-action](https://github.com/github/codeql-action) | `3.29.2` | `3.30.3` |
| [planetscale/ghcommit-action](https://github.com/planetscale/ghcommit-action) | `0.2.15` | `0.2.17` |
| [DeterminateSystems/nix-installer-action](https://github.com/determinatesystems/nix-installer-action) | `18` | `20` |
| [actions/labeler](https://github.com/actions/labeler) | `5.0.0` | `6.0.1` |
| [DataDog/system-tests](https://github.com/datadog/system-tests) | `1fc343b8835463376056ad83d6e1bd5dddefb777` | `b457fd40ebb0db049fcbd605206e2dd9a5a2925f` |
| [actions/upload-pages-artifact](https://github.com/actions/upload-pages-artifact) | `3.0.1` | `4.0.0` |



Updates `actions/checkout` from 4.2.2 to 5.0.0
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@11bd719...08c6903)

Updates `actions/github-script` from 7.0.1 to 8.0.0
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](actions/github-script@60a0d83...ed59741)

Updates `DataDog/ensure-ci-success` from 2.2.0 to 2.3.0
- [Release notes](https://github.com/datadog/ensure-ci-success/releases)
- [Commits](DataDog/ensure-ci-success@4a4b720...b0d931a)

Updates `ruby/setup-ruby` from 1.245.0 to 1.257.0
- [Release notes](https://github.com/ruby/setup-ruby/releases)
- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)
- [Commits](ruby/setup-ruby@a4effe4...4451173)

Updates `actions/download-artifact` from 4.3.0 to 5.0.0
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](actions/download-artifact@d3f86a1...634f93c)

Updates `actions/create-github-app-token` from 2.0.6 to 2.1.4
- [Release notes](https://github.com/actions/create-github-app-token/releases)
- [Commits](actions/create-github-app-token@df432ce...6701853)

Updates `github/codeql-action` from 3.29.2 to 3.30.3
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@181d5ee...192325c)

Updates `planetscale/ghcommit-action` from 0.2.15 to 0.2.17
- [Release notes](https://github.com/planetscale/ghcommit-action/releases)
- [Commits](planetscale/ghcommit-action@6a383e7...322be96)

Updates `DeterminateSystems/nix-installer-action` from 18 to 20
- [Release notes](https://github.com/determinatesystems/nix-installer-action/releases)
- [Commits](DeterminateSystems/nix-installer-action@c723f3a...786fff0)

Updates `actions/labeler` from 5.0.0 to 6.0.1
- [Release notes](https://github.com/actions/labeler/releases)
- [Commits](actions/labeler@8558fd7...634933e)

Updates `DataDog/system-tests` from 1fc343b8835463376056ad83d6e1bd5dddefb777 to b457fd40ebb0db049fcbd605206e2dd9a5a2925f
- [Changelog](https://github.com/DataDog/system-tests/blob/main/CHANGELOG.md)
- [Commits](DataDog/system-tests@1fc343b...b457fd4)

Updates `actions/upload-pages-artifact` from 3.0.1 to 4.0.0
- [Release notes](https://github.com/actions/upload-pages-artifact/releases)
- [Commits](actions/upload-pages-artifact@56afc60...7b1f4a7)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gh-actions-packages
- dependency-name: actions/github-script
  dependency-version: 8.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gh-actions-packages
- dependency-name: DataDog/ensure-ci-success
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gh-actions-packages
- dependency-name: ruby/setup-ruby
  dependency-version: 1.257.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gh-actions-packages
- dependency-name: actions/download-artifact
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gh-actions-packages
- dependency-name: actions/create-github-app-token
  dependency-version: 2.1.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gh-actions-packages
- dependency-name: github/codeql-action
  dependency-version: 3.30.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gh-actions-packages
- dependency-name: planetscale/ghcommit-action
  dependency-version: 0.2.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gh-actions-packages
- dependency-name: DeterminateSystems/nix-installer-action
  dependency-version: '20'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gh-actions-packages
- dependency-name: actions/labeler
  dependency-version: 6.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gh-actions-packages
- dependency-name: DataDog/system-tests
  dependency-version: b457fd40ebb0db049fcbd605206e2dd9a5a2925f
  dependency-type: direct:production
  dependency-group: gh-actions-packages
- dependency-name: actions/upload-pages-artifact
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gh-actions-packages
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/github_actions/gh-actions-packages-7c152800a8 branch from 1f9131f to e552607 Compare September 22, 2025 07:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file dev/github Github repository maintenance and automation github_actions Pull requests that update GitHub Actions code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants