Bump the github-actions group across 1 directory with 6 updates by dependabot[bot] · Pull Request #366 · valkey-io/libvalkey

dependabot · 2026-10-12T16:17:09Z

Bumps the github-actions group with 6 updates in the / directory:

Package	From	To
vmactions/freebsd-vm	`1.5.7`	`1.5.9`
vmactions/solaris-vm	`1.4.0`	`1.4.1`
lukka/get-cmake	`4.4.2`	`4.4.4`
msys2/setup-msys2	`2.32.0`	`2.33.0`
release-drafter/release-drafter	`7.7.0`	`7.10.0`
taiki-e/install-action	`2.87.15`	`2.87.27`

Updates vmactions/freebsd-vm from 1.5.7 to 1.5.9

Release notes

Sourced from vmactions/freebsd-vm's releases.

v1.5.9

Optional key suffix for the cache-after-prepare cache

New input cache-after-prepare-key-suffix: an optional value that is appended as-is to the cache key of the image cached after prepare. Changing it discards that cache and runs prepare again, without editing prepare itself. Requested in vmactions/freebsd-vm#167

Usage
  - uses: actions/checkout@v7
  - uses: vmactions/freebsd-vm@v1
    with:
      cache-after-prepare: true
      cache-after-prepare-key-suffix: deps-${{ hashFiles('deps.sh') }}
      prepare: |
        sh deps.sh
The input is optional and empty by default. Left out, every cache key stays the same as in v1.5.8, so existing caches stay valid.

The prepare script and the sync method are still part of the key; the suffix is only added at the end.

hashFiles() is evaluated on the runner, relative to the workspace, so check out first. It returns an empty string when no file matches, and the key then no longer follows the file.

Pins

BUILDER_VERSION 2.2.8 (unchanged) ANYVM_VERSION 0.7.2 (unchanged)

v1.5.8

FreeBSD on ubuntu-26.04 runners

The action's test matrix, 10.4, 11.4 and 13.2 - 15.1 across x86_64, aarch64, riscv64 and powerpc64, now runs on ubuntu-26.04 and ubuntu-26.04-arm: 313 of 314 jobs pass, and the 9p job is skipped as before. 12.4, which the matrix leaves out, passes anyvm's own FreeBSD CI on the same runners.

What failed on 26.04

With v1.5.7 on a 26.04 runner:

... (truncated)

Commits

c46abac Update vmactions/freebsd-vm from base-vm
83496ce Generated from base-vm
abc5072 Sync from base-builder
c6d9b09 Update vmactions/freebsd-vm from base-vm
6d69158 Generated from base-vm
d1c0bc5 Update version to v1.5.8
6f16425 Update vmactions/freebsd-vm from base-vm
6f0e5ed Generated from base-vm
eec490e Update vmactions/freebsd-vm from base-vm
40859e1 Generated from base-vm
Additional commits viewable in compare view

Updates vmactions/solaris-vm from 1.4.0 to 1.4.1

Release notes

Sourced from vmactions/solaris-vm's releases.

v1.4.1

Solaris on ubuntu-26.04 runners

The action is now tested on ubuntu-26.04 runners: its test matrix has moved there from 24.04, and 30 of 32 jobs pass; the 9p and sshfs jobs are skipped as before. The runtime moves to anyvm 0.7.2, the release that brings Ubuntu 26.04 host support: https://github.com/anyvm-org/anyvm/releases/tag/v0.7.2

Fixed: a lost network probe no longer fails as "Unsupported OS"

vmactions/freebsd-vm#163: a job failed after three minutes with

Error: Unsupported OS: freebsd. Builder repository anyvm-org/freebsd-builder not found.

although the image exists. A single failed probe of the release download URL sent the run down the GitHub REST API. The action never passed a token, so that request was unauthenticated and shared the 60/hour per-IP limit with every other job on the runner IP; the 403 was retried for three minutes and then reported as an unsupported OS. This action took the same path. Two changes close it:

New input: token. It defaults to github.token and is handed to the VM runtime, so the release lookup is authenticated (1000 requests per hour per repository instead of 60 shared). Nothing to change in your workflow; set it only if you want a different token.

anyvm 0.7.1: the release-URL probe retries transient failures and only a 404 means the image is absent; a rate-limited 403 or a 429 stops the retry loop at once and reports the reset time; "the API could not be asked" and "this repository does not exist" are distinct outcomes, so a connectivity failure is reported as one; and the Authorization header no longer follows a cross-host redirect.

Pins

BUILDER_VERSION 2.0.8 (unchanged) ANYVM_VERSION 0.6.9 -> 0.7.2

Commits

87d3c43 Update vmactions/solaris-vm from base-vm
47fb879 Generated from base-vm
9e45202 Bump versions from upstream releases
98d3d23 Update vmactions/solaris-vm from base-vm
0e84a3f Generated from base-vm
f2c895b Update vmactions/solaris-vm from base-vm
a0332fb Generated from base-vm
805cce6 Bump versions from upstream releases
d1193e8 Update vmactions/solaris-vm from base-vm
275406f Generated from base-vm
Additional commits viewable in compare view

Updates lukka/get-cmake from 4.4.2 to 4.4.4

Commits

a89e43e New CMake version(s): cmake-v4.4.4
e22dd04 Restrict catalog PR creation to main
df5af53 Namespace the cache entries by a collision resistant digest
d520f90 Prove that the CMake manifest does list every tracked asset
2bc13fd Feed the hasher explicitly instead of ending it as a pipeline destination
a4ab8fe Fail catalog generation when a release publishes no checksum of its own
0661582 Namespace the cache key and reject unverifiable packages before any lookup
25048e9 Rebuild dist/
e1ba19e Document the integrity verification of the downloaded archives
f3fcbbb Fail the build when dist/ is out of sync with the sources
Additional commits viewable in compare view

Updates msys2/setup-msys2 from 2.32.0 to 2.33.0

Release notes

Sourced from msys2/setup-msys2's releases.

v2.33.0

Update base distribution to 20260927. [#657]

Due to dependency cleanups "perl" and some related libraries are no longer installed by default.

Add a deprecation warning for MINGW32/MINGW64. See the new suppress-deprecation-warnings option for how to silence them. [#644]

pacboy caching fixes [#650]

Update dependencies

Changelog

Sourced from msys2/setup-msys2's changelog.

Changelog

2.33.0

Update base distribution to 20260927. [#657]

Due to dependency cleanups "perl" and some related libraries are no longer installed by default.

Add a deprecation warning for MINGW32/MINGW64. See the new suppress-deprecation-warnings option for how to silence them. [#644]

pacboy caching fixes [#650]

Update dependencies

2.32.0

Update base distribution to 20260611. [#624]

Port from ncc to rolldown for bundling

Include an SBOM of the bundle

Update dependencies

2.31.1

input: allow empty input for "install" and "pacboy", meaning not packages will be installed [#589]

input: deprecate the special "RUNNER_TEMP" value for "location" in favor of an empty string

Update dependencies

2.31.0

Update base distribution to 20260322. [#597]

Update dependencies

Move to node24 from node20

2.30.0

Update base distribution to 20251213. [#565]

Remove folder-hash dependency [#555]

Update dependencies

2.29.0

Allow installation to C:\msys64 if it doesn't exist already. Like with the new windows-11-arm image, for example. [#542]

Update base distribution to 20250830. [#548]

Update dependencies

2.28.0

Update base distribution to 20250622. [#518]

Update dependencies

2.27.0

... (truncated)

Commits

ec48f7c v2.33.0 d34ca6fb9f66412423e0ade249ca8a35b3715726
See full diff in compare view

Updates release-drafter/release-drafter from 7.7.0 to 7.10.0

Release notes

Sourced from release-drafter/release-drafter's releases.

v7.10.0

What's Changed

New

feat(check-pr): validate base and proposed configuration (#1809) @jetersen

feat(replacers): select PR body sections by heading (#1808) @jetersen

feat: scope replacers to change titles (#1805) @jetersen

feat: scope replacers to pull request bodies (#1804) @jetersen

feat: add change-body-escapes (#1797) @jetersen

Dependency Updates

chore(deps): update dependency knip to 6.39.0 (#1830) @renovate[bot]

chore(deps): update dependency @biomejs/biome to 2.5.15 (#1829) @renovate[bot]

chore(deps): update vitest to 5.0.3 (#1827) @renovate[bot]

chore(deps): lock file maintenance (#1826) @renovate[bot]

fix(deps): update dependency @octokit/plugin-paginate-rest to 16.0.0 (#1813) @renovate[bot]

chore(deps): update dependency @graphql-codegen/typescript-operations to 6.1.9 (#1818) @renovate[bot]

chore(deps): update dependency testcontainers to 12.2.0 (#1812) @renovate[bot]

chore(deps): update graphql-codegen (#1810) @renovate[bot]

fix(deps): update dependency undici to 6.29.0 (#1796) @renovate[bot]

chore(deps): update dependency @types/node to 24.19.0 (#1798) @renovate[bot]

chore(deps): update vitest to 5.0.2 (#1795) @renovate[bot]

Maintenance

fix: authorize publication at the original release commit (#1793) @jetersen

fix: handle missing release tags during discovery (#1792) @jetersen

fix: publish merged release PRs from main pushes (#1791) @jetersen

test: run GitLab conformance against GitLab CE 19.4.1 (#1825) @jetersen

test: use the GitLab image that caches Mustermann's encoded characters (#1824) @jetersen

ci: speed up forge conformance with a preseeded GitLab image (#1819) @jetersen

ci: run workflows on Ubuntu 26.04 and cache node_modules (#1823) @jetersen

test: expand coverage and reduce test runtime (#1794) @jetersen

ci: report actionlint findings on its workflow job (#1817) @jetersen

build: simplify tooling validation and coverage reporting (#1816) @jetersen

build: simplify workspace dependency checks (#1815) @jetersen

refactor: use runtime fetch in the public facade (#1800) @jetersen

test: allow dependency version updates in package consumer contract (#1799) @jetersen

Documentation

docs: simplify agent guidance and require the PR template (#1807) @jetersen

docs: summarize deployment options and add npm branding (#1802) @jetersen

... (truncated)

Commits

978bb0b chore: release v7.10.0 (#1828)
7875ba4 chore(deps): update dependency knip to 6.39.0 (#1830)
cab3fb0 chore(deps): update dependency @biomejs/biome to 2.5.15 (#1829)
eea1614 chore(deps): update vitest to 5.0.3 (#1827)
c91bcd7 chore(deps): lock file maintenance (#1826)
9fece4e test: run GitLab conformance against GitLab CE 19.4.1 (#1825)
f8732bf test: use the GitLab image that caches Mustermann's encoded characters (#1824)
20ee3a7 feat(check-pr): validate base and proposed configuration (#1809)
4248c85 fix(deps): update dependency @octokit/plugin-paginate-rest to 16.0.0 (#1813)
988dde1 feat(replacers): select PR body sections by heading (#1808)
Additional commits viewable in compare view

Updates taiki-e/install-action from 2.87.15 to 2.87.27

Release notes

Sourced from taiki-e/install-action's releases.

2.87.27

Update vacuum@latest to 0.32.0.

Update uv@latest to 0.12.24.

Update typos@latest to 1.51.1.

Update tombi@latest to 1.7.3.

Update syft@latest to 1.54.1.

Update release-plz@latest to 0.3.170.

Update mise@latest to 2026.10.4.

Update kingfisher@latest to 2.11.1.

Update hyperfine@latest to 2.0.0.

Update dprint@latest to 0.61.1.

Update cargo-nextest@latest to 0.9.148.

Update cargo-neat@latest to 0.6.0.

Update cargo-binstall@latest to 1.25.2.

2.87.26

Update tombi@latest to 1.7.2.

Update prek@latest to 0.5.5.

Update mise@latest to 2026.10.3.

Update kache@latest to 1.0.0.

Update hyperfine@latest to 1.21.0.

2.87.25

Update uv@latest to 0.12.23.

Update mise@latest to 2026.10.2.

Update kingfisher@latest to 2.10.0.

Update dprint@latest to 0.60.1.

Update cargo-semver-checks@latest to 0.51.0.

Update cargo-binstall@latest to 1.25.1.

... (truncated)

Changelog

Sourced from taiki-e/install-action's changelog.

Changelog

All notable changes to this project will be documented in this file.

This project adheres to Semantic Versioning.

[Unreleased]

[2.87.28] - 2026-10-12

Update dprint@latest to 0.62.0.

Update vacuum@latest to 0.33.0.

Update uv@latest to 0.13.0.

Update tombi@latest to 1.8.1.

Update release-plz@latest to 0.3.171.

Update rclone@latest to 1.75.2.

Update mise@latest to 2026.10.7.

Update cargo-binstall@latest to 1.25.3.

[2.87.27] - 2026-10-09

Update vacuum@latest to 0.32.0.

Update uv@latest to 0.12.24.

Update typos@latest to 1.51.1.

Update tombi@latest to 1.7.3.

Update syft@latest to 1.54.1.

Update release-plz@latest to 0.3.170.

Update mise@latest to 2026.10.4.

Update kingfisher@latest to 2.11.1.

Update hyperfine@latest to 2.0.0.

... (truncated)

Commits

ab68953 Release 2.87.27
62530fd Update vacuum@latest to 0.32.0
f684ea4 Update uv@latest to 0.12.24
8aa87a0 Update typos@latest to 1.51.1
5ffcf43 Update tombi@latest to 1.7.3
9926636 Update syft@latest to 1.54.1
4647f42 Update release-plz@latest to 0.3.170
df02560 Update rclone manifest
d7c82f4 Update mise@latest to 2026.10.4
a6142d0 Update kingfisher@latest to 2.11.1
Additional commits viewable in compare view

Most Recent Ignore Conditions Applied to This Pull Request

Dependency Name	Ignore Conditions
taiki-e/install-action	[< 2.63, > 2.62.12]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the github-actions group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [vmactions/freebsd-vm](https://github.com/vmactions/freebsd-vm) | `1.5.7` | `1.5.9` | | [vmactions/solaris-vm](https://github.com/vmactions/solaris-vm) | `1.4.0` | `1.4.1` | | [lukka/get-cmake](https://github.com/lukka/get-cmake) | `4.4.2` | `4.4.4` | | [msys2/setup-msys2](https://github.com/msys2/setup-msys2) | `2.32.0` | `2.33.0` | | [release-drafter/release-drafter](https://github.com/release-drafter/release-drafter) | `7.7.0` | `7.10.0` | | [taiki-e/install-action](https://github.com/taiki-e/install-action) | `2.87.15` | `2.87.27` | Updates `vmactions/freebsd-vm` from 1.5.7 to 1.5.9 - [Release notes](https://github.com/vmactions/freebsd-vm/releases) - [Commits](vmactions/freebsd-vm@4469451...c46abac) Updates `vmactions/solaris-vm` from 1.4.0 to 1.4.1 - [Release notes](https://github.com/vmactions/solaris-vm/releases) - [Commits](vmactions/solaris-vm@a11f407...87d3c43) Updates `lukka/get-cmake` from 4.4.2 to 4.4.4 - [Release notes](https://github.com/lukka/get-cmake/releases) - [Changelog](https://github.com/lukka/get-cmake/blob/main/RELEASE_PROCESS.md) - [Commits](lukka/get-cmake@fffaaaf...a89e43e) Updates `msys2/setup-msys2` from 2.32.0 to 2.33.0 - [Release notes](https://github.com/msys2/setup-msys2/releases) - [Changelog](https://github.com/msys2/setup-msys2/blob/main/CHANGELOG.md) - [Commits](msys2/setup-msys2@66cd2cc...ec48f7c) Updates `release-drafter/release-drafter` from 7.7.0 to 7.10.0 - [Release notes](https://github.com/release-drafter/release-drafter/releases) - [Commits](release-drafter/release-drafter@34d8067...978bb0b) Updates `taiki-e/install-action` from 2.87.15 to 2.87.27 - [Release notes](https://github.com/taiki-e/install-action/releases) - [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md) - [Commits](taiki-e/install-action@4076c08...ab68953) --- updated-dependencies: - dependency-name: vmactions/freebsd-vm dependency-version: 1.5.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: vmactions/solaris-vm dependency-version: 1.4.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: lukka/get-cmake dependency-version: 4.4.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: msys2/setup-msys2 dependency-version: 2.33.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: release-drafter/release-drafter dependency-version: 7.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: taiki-e/install-action dependency-version: 2.87.27 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-10-26T05:49:14Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Oct 12, 2026

dependabot Bot closed this Oct 26, 2026

dependabot Bot deleted the dependabot/github_actions/github-actions-8567d93837 branch October 26, 2026 05:49

Navigation Menu

Repository navigation

Bump the github-actions group across 1 directory with 6 updates - #366

Bump the github-actions group across 1 directory with 6 updates#366
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-8567d93837

dependabot Bot commented on behalf of github Oct 12, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Oct 26, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v1.5.9

Usage

Pins

v1.5.8

What failed on 26.04

v1.4.1

Fixed: a lost network probe no longer fails as "Unsupported OS"

Pins

v2.33.0

Changelog

2.33.0

2.32.0

2.31.1

2.31.0

2.30.0

2.29.0

2.28.0

2.27.0

v7.10.0

What's Changed

New

Dependency Updates

Maintenance

Documentation

2.87.27

2.87.26

2.87.25

Changelog

[Unreleased]

[2.87.28] - 2026-10-12

[2.87.27] - 2026-10-09

Uh oh!

dependabot Bot commented on behalf of github Oct 26, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Oct 12, 2026 •

edited

Loading