Bump the github-actions group with 15 updates#6342
Merged
Conversation
hyoklee
previously approved these changes
Apr 2, 2026
lrknox
reviewed
Apr 2, 2026
| uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 | ||
|
|
||
| - name: Build and test on OpenBSD | ||
| uses: vmactions/openbsd-vm@9004791062e748d95cc87e499e77485f91888ce1 # v1.3.8 |
Collaborator
There was a problem hiding this comment.
I'm beginning to think this is a problem on our side with the way the workflow is setup and may need fixing. I don't see any similar issue reports on vmactions/openbsd-vm that suggest anything
Collaborator
There was a problem hiding this comment.
Do you want to hold merging this PR for fixing it or merge it with the older vmactions/openbsd-vm and pursue the fix afterward? It passes all tests now.
Updates the requirements on [actions/checkout](https://github.com/actions/checkout), [actions/download-artifact](https://github.com/actions/download-artifact), [actions/cache](https://github.com/actions/cache), [lukka/get-cmake](https://github.com/lukka/get-cmake), [actions/setup-java](https://github.com/actions/setup-java), [EndBug/add-and-commit](https://github.com/endbug/add-and-commit), [github/codeql-action](https://github.com/github/codeql-action), [advanced-security/filter-sarif](https://github.com/advanced-security/filter-sarif), [codespell-project/actions-codespell](https://github.com/codespell-project/actions-codespell), [azure/trusted-signing-action](https://github.com/azure/trusted-signing-action), [vmactions/freebsd-vm](https://github.com/vmactions/freebsd-vm), [julia-actions/setup-julia](https://github.com/julia-actions/setup-julia), [msys2/setup-msys2](https://github.com/msys2/setup-msys2), [vmactions/openbsd-vm](https://github.com/vmactions/openbsd-vm) and [softprops/action-gh-release](https://github.com/softprops/action-gh-release) to permit the latest version. Updates `actions/checkout` from 6.0.1 to 6.0.2 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@8e8c483...de0fac2) Updates `actions/download-artifact` from 8.0.0 to 8.0.1 - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](actions/download-artifact@70fc10c...3e5f45b) Updates `actions/cache` from 5.0.3 to 5.0.4 - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](actions/cache@cdf6c1f...6682284) Updates `lukka/get-cmake` from 4.2.3 to 4.3.1 - [Release notes](https://github.com/lukka/get-cmake/releases) - [Changelog](https://github.com/lukka/get-cmake/blob/main/RELEASE_PROCESS.md) - [Commits](lukka/get-cmake@f176ccd...ea83089) Updates `actions/setup-java` from 5.1.0 to 5.2.0 - [Release notes](https://github.com/actions/setup-java/releases) - [Commits](actions/setup-java@v5.1.0...be666c2) Updates `EndBug/add-and-commit` from 9.1.4 to 10.0.0 - [Release notes](https://github.com/endbug/add-and-commit/releases) - [Commits](EndBug/add-and-commit@a94899b...290ea2c) Updates `github/codeql-action` to 89a39a4e59826350b863aa6b6252a07ad50cf83e - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/commits/89a39a4e59826350b863aa6b6252a07ad50cf83e) Updates `advanced-security/filter-sarif` from 1.0.1 to 1.1 - [Release notes](https://github.com/advanced-security/filter-sarif/releases) - [Commits](advanced-security/filter-sarif@f3b8118...2da736f) Updates `codespell-project/actions-codespell` from bca0a5887de255a8903221c67b6478c7501c5edc to cf810cf4cbd6cdefe6ef86e55b64d524a16654a7 - [Release notes](https://github.com/codespell-project/actions-codespell/releases) - [Commits](codespell-project/actions-codespell@bca0a58...cf810cf) Updates `azure/trusted-signing-action` from 1.1.0 to 1.2.0 - [Release notes](https://github.com/azure/trusted-signing-action/releases) - [Commits](https://github.com/azure/trusted-signing-action/compare/87c2e83e6868da99d3380aa309851b32ed9a8346...b443cf8ea4124818d2ea9f043cba29fc3ec47b16) Updates `vmactions/freebsd-vm` from 1.4.2 to 1.4.4 - [Release notes](https://github.com/vmactions/freebsd-vm/releases) - [Commits](vmactions/freebsd-vm@c9f815b...7ca82f7) Updates `julia-actions/setup-julia` from 2.6.1 to 2.7.0 - [Release notes](https://github.com/julia-actions/setup-julia/releases) - [Commits](julia-actions/setup-julia@5c9647d...4c0cb0f) Updates `msys2/setup-msys2` from 2.30.0 to 2.31.0 - [Release notes](https://github.com/msys2/setup-msys2/releases) - [Changelog](https://github.com/msys2/setup-msys2/blob/main/CHANGELOG.md) - [Commits](msys2/setup-msys2@4f806de...cafece8) Updates `vmactions/openbsd-vm` from 1.3.4 to 1.3.8 - [Release notes](https://github.com/vmactions/openbsd-vm/releases) - [Commits](vmactions/openbsd-vm@271a1ba...9004791) Updates `softprops/action-gh-release` from 2.5.0 to 2.6.1 - [Release notes](https://github.com/softprops/action-gh-release/releases) - [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md) - [Commits](softprops/action-gh-release@a06a81a...153bb8e) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 6.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: actions/download-artifact dependency-version: 8.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: actions/cache dependency-version: 5.0.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: lukka/get-cmake dependency-version: 4.3.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: actions/setup-java dependency-version: 5.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: EndBug/add-and-commit dependency-version: 10.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: github/codeql-action dependency-version: 89a39a4e59826350b863aa6b6252a07ad50cf83e dependency-type: direct:production dependency-group: github-actions - dependency-name: advanced-security/filter-sarif dependency-version: '1.1' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: codespell-project/actions-codespell dependency-version: cf810cf4cbd6cdefe6ef86e55b64d524a16654a7 dependency-type: direct:production dependency-group: github-actions - dependency-name: azure/trusted-signing-action dependency-version: 1.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: vmactions/freebsd-vm dependency-version: 1.4.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: julia-actions/setup-julia dependency-version: 2.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: msys2/setup-msys2 dependency-version: 2.31.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: vmactions/openbsd-vm dependency-version: 1.3.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: softprops/action-gh-release dependency-version: 2.6.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com>
…h newer version.
d27d96f to
1a58f33
Compare
lrknox
approved these changes
Apr 8, 2026
brtnfld
pushed a commit
to brtnfld/hdf5
that referenced
this pull request
Apr 17, 2026
Updates the requirements on [actions/checkout](https://github.com/actions/checkout), [actions/download-artifact](https://github.com/actions/download-artifact), [actions/cache](https://github.com/actions/cache), [lukka/get-cmake](https://github.com/lukka/get-cmake), [actions/setup-java](https://github.com/actions/setup-java), [EndBug/add-and-commit](https://github.com/endbug/add-and-commit), [github/codeql-action](https://github.com/github/codeql-action), [advanced-security/filter-sarif](https://github.com/advanced-security/filter-sarif), [codespell-project/actions-codespell](https://github.com/codespell-project/actions-codespell), [azure/trusted-signing-action](https://github.com/azure/trusted-signing-action), [vmactions/freebsd-vm](https://github.com/vmactions/freebsd-vm), [julia-actions/setup-julia](https://github.com/julia-actions/setup-julia), [msys2/setup-msys2](https://github.com/msys2/setup-msys2), [vmactions/openbsd-vm](https://github.com/vmactions/openbsd-vm) and [softprops/action-gh-release](https://github.com/softprops/action-gh-release) to permit the latest version. * Keep vmactions/openbsd-vm@271a1ba # v1.3.4 until ssh doesn't fail with newer version.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Updates the requirements on actions/checkout, actions/download-artifact, actions/cache, lukka/get-cmake, actions/setup-java, EndBug/add-and-commit, github/codeql-action, advanced-security/filter-sarif, codespell-project/actions-codespell, azure/trusted-signing-action, vmactions/freebsd-vm, julia-actions/setup-julia, msys2/setup-msys2, vmactions/openbsd-vm and softprops/action-gh-release to permit the latest version.
Updates
actions/checkoutfrom 6.0.1 to 6.0.2Release notes
Sourced from actions/checkout's releases.
Changelog
Sourced from actions/checkout's changelog.
... (truncated)
Commits
de0fac2Fix tag handling: preserve annotations and explicit fetch-tags (#2356)064fe7fAdd orchestration_id to git user-agent when ACTIONS_ORCHESTRATION_ID is set (...Updates
actions/download-artifactfrom 8.0.0 to 8.0.1Release notes
Sourced from actions/download-artifact's releases.
Commits
3e5f45bAdd regression tests for CJK characters (#471)e6d03f6Add a regression test for artifact name + content-type mismatches (#472)Updates
actions/cachefrom 5.0.3 to 5.0.4Release notes
Sourced from actions/cache's releases.
Changelog
Sourced from actions/cache's changelog.
... (truncated)
Commits
6682284Merge pull request #1738 from actions/prepare-v5.0.4e340396Update RELEASES8a67110Add licenses1865903Update dependencies & patch security vulnerabilities5656298Merge pull request #1722 from RyPeck/patch-14e380d1Fix cache key in examples.md for bun.lockb7e8d49Merge pull request #1701 from actions/Link-/fix-proxy-integration-tests984a21bAdd traffic sanity check stepacf2f1fFix resolution95a07c5Add wait for proxyUpdates
lukka/get-cmakefrom 4.2.3 to 4.3.1Release notes
Sourced from lukka/get-cmake's releases.
Commits
ea83089New CMake version(s): cmake-v4.3.1b783061New CMake version(s): cmake-v4.3.09004e45Migrate to Node 246e70939New CMake version(s): cmake-rc-v4.3.0-rc3 (#242)9cd6c6bNew CMake version(s): cmake-rc-v4.3.0-rc2 (#241)7697ef7Bump actions/upload-artifact from 6 to 7 (#239)54f69bfBump actions/download-artifact from 7 to 8 (#240)b9a171aBump actions/upload-artifact from 5 to 6 (#227)2b80711Bump actions/download-artifact from 6 to 7 (#228)30c1a5fBump minimatch from 3.1.2 to 3.1.5 (#238)Updates
actions/setup-javafrom 5.1.0 to 5.2.0Release notes
Sourced from actions/setup-java's releases.
Commits
be666c2Chore: Version Update and Checkout Update to v6 (#973)f7a6fefBump actions/checkout from 5 to 6 (#961)d81c4e4Upgrade@actions/cacheto v5 (#968)1b1bbe1readme update (#972)5d7b214Retry on HTTP 522 Connection timed out (#964)Updates
EndBug/add-and-commitfrom 9.1.4 to 10.0.0Release notes
Sourced from EndBug/add-and-commit's releases.
... (truncated)
Commits
290ea2c10.0.05190a0adocs: prepare for v109ac3878chore: npm audit fix7b015bddocs: add CodeReaper as a contributor for maintenance (#723)300836dchore(deps-dev): bump flatted from 3.3.3 to 3.4.2 (#722)f6e20edfeat!: use node version 24 (#720)6280653chore(deps-dev): bump jest from 30.2.0 to 30.3.0 (#721)1539a6achore(deps): bump@actions/corefrom 2.0.2 to 3.0.0 (#716)af611ddchore(deps): bump minimatch (#718)2df77c1chore(deps-dev): bump eslint-plugin-prettier from 5.5.4 to 5.5.5 (#712)Updates
github/codeql-actionto 89a39a4e59826350b863aa6b6252a07ad50cf83eChangelog
Sourced from github/codeql-action's changelog.
... (truncated)
Commits
Updates
advanced-security/filter-sariffrom 1.0.1 to 1.1Release notes
Sourced from advanced-security/filter-sarif's releases.
Commits
2da736fMerge pull request #17 from advanced-security/copilot/add-severity-filter-optionb82026bRemove [DEBUG] print statements from production codef15e3e4Update action.ymlf74eb20Refactor collect_rule_severities to streamline rule processing and enhance de...da97499Fix severity filter: results no longer incorrectly filtered when level is mis...be31281Initial plan for severity filter bug fix4bddfd6Address code review: use env var for shell safety, fix double stripe304681Add optional severity filter for SARIF alerts36dc0ceInitial plan59d0a64Merge pull request #14 from aibaars/patch-1Updates
codespell-project/actions-codespellfrom bca0a5887de255a8903221c67b6478c7501c5edc to cf810cf4cbd6cdefe6ef86e55b64d524a16654a7Commits
cf810cf[pre-commit.ci] pre-commit autoupdate (#94)Updates
azure/trusted-signing-actionfrom 1.1.0 to 1.2.0Release notes
Sourced from azure/trusted-signing-action's releases.
Commits
b443cf8Update internal actions/cache to v5.0.4 (#126)6c581ebrefactor: disable az credential types by default except cli and env vars (#122)dd27d98docs: update examples to remove azps session (#123)Updates
vmactions/freebsd-vmfrom 1.4.2 to 1.4.4Release notes
Sourced from vmactions/freebsd-vm's releases.
Commits
7ca82f7Update version to v1.4.33cdba10Update vmactions/freebsd-vm from base vmd70c9bbGenerated from base-vm71a2675add 14.4e7cf4faUpdate vmactions/freebsd-vm from base vme4d0539Generated from base-vm59f9135add 14.421246b7Update vmactions/freebsd-vm from base vma4aff0fGenerated from base-vmb1f8968Update version to v1.4.3Updates
julia-actions/setup-juliafrom 2.6.1 to 2.7.0Release notes
Sourced from julia-actions/setup-julia's releases.