Skip to content

Bump the github-actions group across 1 directory with 9 updates - #368

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-3052496a87
Open

Bump the github-actions group across 1 directory with 9 updates#368
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-3052496a87

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 2, 2026

Copy link
Copy Markdown
Contributor

Bumps the github-actions group with 9 updates in the / directory:

Package From To
vmactions/freebsd-vm 1.5.7 1.5.9
vmactions/solaris-vm 1.4.0 1.4.2
lukka/get-cmake 4.4.2 4.4.5
cygwin/cygwin-install-action 6.1 7
msys2/setup-msys2 2.32.0 2.33.0
vapier/coverity-scan-action 1.9.0 1.10.0
release-drafter/release-drafter 7.7.0 7.10.0
rojopolis/spellcheck-github-actions 0.66.0 0.68.0
taiki-e/install-action 2.87.15 2.88.1

Updates vmactions/freebsd-vm from 1.5.7 to 1.5.9

Release notes

Sourced from vmactions/freebsd-vm's releases.

v1.5.9

Optional key suffix for the cache-after-prepare cache

New input cache-after-prepare-key-suffix: an optional value that is appended as-is to the cache key of the image cached after prepare. Changing it discards that cache and runs prepare again, without editing prepare itself. Requested in vmactions/freebsd-vm#167

Usage

  - uses: actions/checkout@v7
  - uses: vmactions/freebsd-vm@v1
    with:
      cache-after-prepare: true
      cache-after-prepare-key-suffix: deps-${{ hashFiles('deps.sh') }}
      prepare: |
        sh deps.sh

  • The input is optional and empty by default. Left out, every cache key stays the same as in v1.5.8, so existing caches stay valid.
  • The prepare script and the sync method are still part of the key; the suffix is only added at the end.
  • hashFiles() is evaluated on the runner, relative to the workspace, so check out first. It returns an empty string when no file matches, and the key then no longer follows the file.

Pins

BUILDER_VERSION 2.2.8 (unchanged) ANYVM_VERSION 0.7.2 (unchanged)

v1.5.8

FreeBSD on ubuntu-26.04 runners

The action's test matrix, 10.4, 11.4 and 13.2 - 15.1 across x86_64, aarch64, riscv64 and powerpc64, now runs on ubuntu-26.04 and ubuntu-26.04-arm: 313 of 314 jobs pass, and the 9p job is skipped as before. 12.4, which the matrix leaves out, passes anyvm's own FreeBSD CI on the same runners.

What failed on 26.04

With v1.5.7 on a 26.04 runner:

... (truncated)

Commits
  • c46abac Update vmactions/freebsd-vm from base-vm
  • 83496ce Generated from base-vm
  • abc5072 Sync from base-builder
  • c6d9b09 Update vmactions/freebsd-vm from base-vm
  • 6d69158 Generated from base-vm
  • d1c0bc5 Update version to v1.5.8
  • 6f16425 Update vmactions/freebsd-vm from base-vm
  • 6f0e5ed Generated from base-vm
  • eec490e Update vmactions/freebsd-vm from base-vm
  • 40859e1 Generated from base-vm
  • Additional commits viewable in compare view

Updates vmactions/solaris-vm from 1.4.0 to 1.4.2

Release notes

Sourced from vmactions/solaris-vm's releases.

v1.4.2

Solaris: non-root users can write the nfs-synced folder

The runtime moves to anyvm 0.7.4, whose nfs fix is the reason for this release: https://github.com/anyvm-org/anyvm/releases/tag/v0.7.4 On ubuntu-26.04 runners 23 of 25 test jobs pass; the 9p and sshfs jobs are skipped as before.

Fixed: non-root users could not write the nfs share

vmactions/solaris-vm#70: with sync: nfs, a build run as an ordinary user created in the guest failed with "Permission denied", while the same workflow worked on FreeBSD. The nfs export mapped only guest root to the runner user; any other guest account kept its own uid and met the runner-owned workspace as "other". FreeBSD worked by coincidence: its first pw useradd hands out uid 1001, the GitHub runner's own uid. Solaris useradd hands out 1000.

anyvm 0.7.4 now maps every guest uid to the runner user: the kernel nfs export of a Linux runner gets all_squash, and on other hosts the user-space nfsd 0.1.1 runs with -all_squash. Files any guest user creates are owned by the runner user on the host, as files from guest root already were. Nothing to change in your workflow.

The test matrix now checks this on every release: a guest user with uid 4321 creates, appends to and renames a file in the share, and the runner checks its content and that the runner user owns it.

New input: cache-after-prepare-key-suffix

Optional, empty by default. A non-empty value is appended to the cache-after-prepare key, so changing it rebuilds the prepared image. Use it when prepare runs a script from your repository, which the key vmactions/freebsd-vm#167

cache-after-prepare-key-suffix: deps-${{ hashFiles('ci/deps.sh') }}

Existing prepared-image caches stay valid when the input is not set.

Pins

BUILDER_VERSION 2.0.8 (unchanged) ANYVM_VERSION 0.7.2 -> 0.7.4

v1.4.1

Solaris on ubuntu-26.04 runners

... (truncated)

Commits
  • 1c16697 Update vmactions/solaris-vm from base-vm
  • 27dc585 Generated from base-vm
  • a1e7c0a Update vmactions/solaris-vm from base-vm
  • df6a72e Generated from base-vm
  • 3b4f00d Bump versions from upstream releases
  • 02dfac6 Update vmactions/solaris-vm from base-vm
  • 21fd16c Generated from base-vm
  • 1ac891c Update vmactions/solaris-vm from base-vm
  • dad0f22 Generated from base-vm
  • 1b672bd Update version to v1.4.1
  • Additional commits viewable in compare view

Updates lukka/get-cmake from 4.4.2 to 4.4.5

Release notes

Sourced from lukka/get-cmake's releases.

CMake v4.4.5

The get-cmake action downloads and caches CMake and Ninja on your workflows. Versions can be specified using semantic versioning ranges using cmakeVersion and ninjaVersion inputs.

Changes:

  • latest is now using CMake version v4.4.5, use this one-liner e.g.: uses: lukka/get-cmake@latest

Enjoy!

Commits
  • f86dd60 New tool version(s): cmake-v4.4.5
  • c9ccb81 Accept nonstandard Latest release tags
  • 82f652f Handle Windows line endings in release workflow tests
  • 5024ca0 Address release publication review safeguards
  • 68f339c Cover complete version update ranges across all merge strategies
  • c9e51f7 Generate deterministic CMake, RC and Ninja releases with regression coverage
  • cdfb3e7 Wire CMake RC and Ninja workflows into shared release publication
  • e30231f Document GitHub release publication and recovery
  • 139a546 Publish GitHub releases from automatic and manual release workflows
  • da37b03 New CMake version(s): cmake-rc-v4.5.0-rc1
  • Additional commits viewable in compare view

Updates cygwin/cygwin-install-action from 6.1 to 7

Release notes

Sourced from cygwin/cygwin-install-action's releases.

v7

What's Changed

New Contributors

Full Changelog: cygwin/cygwin-install-action@v6.0.0...v7

Commits
  • 5a1b0cd Bump actions/checkout from 6.0.2 to 7.0.0 in the github-actions group
  • a3d7294 Add some testing of signing certificate validation
  • 2dde27a Add new CodeSign certificate fingerprint
  • 781ea34 Fix tests for change in MSYS2 bash OSTYPE
  • 4ef15ca [ci] Update GitHub Action Eun/http-server-action unsed in test
  • a0ef6ef Add a note documenting lack of package name validation
  • ce2abe9 Bump actions/checkout from 6.0.1 to 6.0.2 in the github-actions group
  • f1658bf Revert "Temporarily switch mirror site to mirrorservice.org"
  • b09c8ce Temporarily switch mirror site to mirrorservice.org
  • 2566376 Fix, and test, Invoke-WebRequest-With-Retry
  • Additional commits viewable in compare view

Updates msys2/setup-msys2 from 2.32.0 to 2.33.0

Release notes

Sourced from msys2/setup-msys2's releases.

v2.33.0

  • Update base distribution to 20260927. [#657]
  • Due to dependency cleanups "perl" and some related libraries are no longer installed by default.
  • Add a deprecation warning for MINGW32/MINGW64. See the new suppress-deprecation-warnings option for how to silence them. [#644]
  • pacboy caching fixes [#650]
  • Update dependencies
Changelog

Sourced from msys2/setup-msys2's changelog.

Changelog

2.33.0

  • Update base distribution to 20260927. [#657]
  • Due to dependency cleanups "perl" and some related libraries are no longer installed by default.
  • Add a deprecation warning for MINGW32/MINGW64. See the new suppress-deprecation-warnings option for how to silence them. [#644]
  • pacboy caching fixes [#650]
  • Update dependencies

2.32.0

  • Update base distribution to 20260611. [#624]
  • Port from ncc to rolldown for bundling
  • Include an SBOM of the bundle
  • Update dependencies

2.31.1

  • input: allow empty input for "install" and "pacboy", meaning not packages will be installed [#589]
  • input: deprecate the special "RUNNER_TEMP" value for "location" in favor of an empty string
  • Update dependencies

2.31.0

  • Update base distribution to 20260322. [#597]
  • Update dependencies
  • Move to node24 from node20

2.30.0

  • Update base distribution to 20251213. [#565]
  • Remove folder-hash dependency [#555]
  • Update dependencies

2.29.0

  • Allow installation to C:\msys64 if it doesn't exist already. Like with the new windows-11-arm image, for example. [#542]
  • Update base distribution to 20250830. [#548]
  • Update dependencies

2.28.0

  • Update base distribution to 20250622. [#518]
  • Update dependencies

2.27.0

... (truncated)

Commits

Updates vapier/coverity-scan-action from 1.9.0 to 1.10.0

Release notes

Sourced from vapier/coverity-scan-action's releases.

Support coverity capture

What's Changed

  • Support coverity capture for interpreted languages #18
  • Support disabling cov-build for interpreted languages #18

Full Changelog: vapier/coverity-scan-action@v1.9.0...v1.10.0

Commits

Updates release-drafter/release-drafter from 7.7.0 to 7.10.0

Release notes

Sourced from release-drafter/release-drafter's releases.

v7.10.0

What's Changed

New

Dependency Updates

Maintenance

Documentation

... (truncated)

Commits
  • 978bb0b chore: release v7.10.0 (#1828)
  • 7875ba4 chore(deps): update dependency knip to 6.39.0 (#1830)
  • cab3fb0 chore(deps): update dependency @​biomejs/biome to 2.5.15 (#1829)
  • eea1614 chore(deps): update vitest to 5.0.3 (#1827)
  • c91bcd7 chore(deps): lock file maintenance (#1826)
  • 9fece4e test: run GitLab conformance against GitLab CE 19.4.1 (#1825)
  • f8732bf test: use the GitLab image that caches Mustermann's encoded characters (#1824)
  • 20ee3a7 feat(check-pr): validate base and proposed configuration (#1809)
  • 4248c85 fix(deps): update dependency @​octokit/plugin-paginate-rest to 16.0.0 (#1813)
  • 988dde1 feat(replacers): select PR body sections by heading (#1808)
  • Additional commits viewable in compare view

Updates rojopolis/spellcheck-github-actions from 0.66.0 to 0.68.0

Release notes

Sourced from rojopolis/spellcheck-github-actions's releases.

0.68.0

What's Changed

Full Changelog: rojopolis/spellcheck-github-actions@0.67.0...0.68.0

0.67.0

What's Changed

Full Changelog: rojopolis/spellcheck-github-actions@0.66.0...0.67.0

Changelog

Sourced from rojopolis/spellcheck-github-actions's changelog.

Change Log for spellcheck-github-actions

0.68.0, 2026-10-24, maintenance release, update not required

  • Refreshed transitive Python dependency pins via PR #410: beautifulsoup4 4.12.3 to 4.15.0, Markdown 3.8.1 to 3.11.2, lxml 6.1.1 to 6.1.3, bracex 3.0.1 to 3.2, wcmatch 11.0 to 11.2, PyYAML 6.0.2 to 6.0.3, six 1.16.0 to 1.17.0, and webencodings 0.5.1 to 0.6.1. Also pulls in a new transitive dependency, typing-extensions 4.16.0, now required by the newer beautifulsoup4. None of these are pinned in requirements.in, so this is the same refresh Dependabot would otherwise have produced piecemeal under its lockfile-only strategy.

  • Bumped pymdown-extensions from 11.0.1 to 12.3 via PR #411. This is a major version bump with a documented BREAK in pymdown-extensions 12.0: BetterEm, Tilde, Caret, and Mark were rewritten with different nesting/escaping semantics. This repository's own pipeline configuration (spellcheck.yaml, examples/markdown.yml) only enables pymdownx.superfences, which is unaffected by that break and only gained new features across this range (a reset hook in 12.1, title_mode in 12.2/12.3). pyspelling itself does not depend on pymdown-extensions.

0.67.0, 2026-10-24, maintenance release, update not required

  • Docker image updated to Python 3.14.8-slim-trixie via PR #406 from Dependabot.

  • Bumped the core component PySpelling from 2.12.1 to 2.13 via PR #407. This release of PySpelling adds support for Python 3.15, drops support for Python 3.9 and 3.10, and introduces a new css_nostrict option for the XML/HTML filter to allow more relaxed CSS rules given soupsieve's new stricter defaults. This repository's own pyspelling.filters.html configuration (type selectors only) is unaffected, so the new option was not adopted. Pulls in soupsieve bumped from 2.9.2 to 3.0.4 transitively. See the release notes for PySpelling 2.13.

0.66.0, 2026-08-11, maintenance release, update not required

  • Docker image updated to Python 3.14.7-slim-trixie via PR #391 from Dependabot.

0.65.0, 2026-08-08, security release, update recommended

  • Bumped lxml from 5.4.0 to 6.1.1 to address CVE-2026-41066 (XXE via iterparse()/ETCompatXMLParser defaulting resolve_entities=True) and libxslt vulnerabilities CVE-2025-7424 and CVE-2025-11731, via PR #388 from Dependabot.

  • Bumped pymdown-extensions from 10.21.3 to 11.0.1 to address CVE-2026-67422 (ReDoS in the caret, tilde, betterem, and magiclink inline processors) and CVE-2026-61632 (path traversal in the b64 extension).

  • Bumped soupsieve from 2.6 to 2.9.2 to address CVE-2026-49476 (memory exhaustion via large comma-separated selector lists) and CVE-2026-49477 (ReDoS via the selector parser).

0.64.0, 2026-07-31, maintenance release, update not required

  • Adopted pip-compile (pip-tools) for Python dependency management via PR #380. requirements.in is now the source of truth for direct dependencies (pyspelling, pymdown-extensions); requirements.txt is generated from it rather than hand-maintained, so transitive pins can no longer silently fall out of sync the way bracex did in issue #378.

    • backrefs and zipp are dropped from requirements.txt. Neither is part of the resolved dependency graph for pyspelling + pymdown-extensions on the Python version this image ships (verified against each package's own declared metadata and the installed package list in the built image) — they were stale manual pins, not active dependencies. In particular, zipp was originally pinned in PR #204 to patch CVE-2024-5569; that dependency chain (pyspelling → importlib-metadata → zipp) no longer exists, so removing the pin does not reintroduce the vulnerability — the package simply isn't installed, pinned or not.

    • .github/dependabot.yml's pip ecosystem entry already set versioning-strategy: lockfile-only, which expects exactly this requirements.in/requirements.txt split; this change makes that existing setting apply as intended.

0.63.1, 2026-07-30, bug fix release, update recommended

  • Fixed sources glob patterns that combine brace expansion with the SPLIT/GLOBSTAR flags (e.g. **/*.{c,h}|!build/**) silently matching zero files and causing the action to fail with RuntimeError: None of the source targets from the configuration match any files. The pinned bracex dependency (2.5.post1) predated the version wcmatch requires for correct parsing of such patterns; bumped to 3.0.1 via PR #379. Addresses issue #378, reported by @​arkq.

0.63.0, 2026-07-01, maintenance release, update not required

  • Docker based image updated for Python 3.14.6 slim trixie via PR #364 from Dependabot.

0.62.0, 2026-06-19, security release, update recommended

  • Bumped lxml from 5.3.0 to 5.4.0 to address known CVEs via PR #357.

  • Bumped pymdown-extensions to patched version 10.21.3 via PR #358.

  • Bumped Markdown from 3.7 to 3.8.1 to patched version via PR #359.

... (truncated)

Commits
  • f2df388 Merge pull request #412 from rojopolis/release/0.68.0
  • 18eee54 Prepare release 0.68.0
  • d359a14 Merge pull request #411 from rojopolis/deps/pymdown-extensions-12.3
  • e2836b9 Add CHANGELOG.md entry for upcoming 0.68.0 release
  • c88675b Bump pymdown-extensions from 11.0.1 to 12.3
  • 0065676 Merge pull request #410 from rojopolis/deps/transitive-refresh
  • 8952318 Refresh transitive Python dependency pins
  • 8dd140a Merge pull request #408 from rojopolis/release/0.67.0
  • e42fae1 Fix CI spellcheck failure: use repository instead of repo's in CHANGELOG
  • 94b211c Prepare release 0.67.0
  • Additional commits viewable in compare view

Updates taiki-e/install-action from 2.87.15 to 2.88.1

Release notes

Sourced from taiki-e/install-action's releases.

2.88.1

  • Update wasmtime@latest to 50.0.1.

  • Update vacuum@latest to 0.36.0.

  • Update tombi@latest to 1.9.8.

  • Update mise@latest to 2026.10.23.

  • Update kingfisher@latest to 2.15.0.

  • Update espup@latest to 0.19.0.

  • Update deepsource@latest to 0.10.2.

  • Update biome@latest to 2.6.4.

2.88.0

2.87.33

  • Update vacuum@latest to 0.35.4.

  • Update uv@latest to 0.13.6.

  • Update trunk@latest to 0.22.1.

  • Update tombi@latest to 1.9.6.

  • Update release-plz@latest to 0.4.2.

  • Update mise@latest to 2026.10.21.

  • Update cargo-nextest@latest to 0.9.150.

  • Update cargo-about@latest to 0.9.3.

2.87.32

  • Update wild@latest to 0.11.0.

  • Update vacuum@latest to 0.35.2.

  • Update tombi@latest to 1.9.5.

  • Update sccache@latest to 0.19.0.

  • Update release-plz@latest to 0.4.1.

  • Update mise@latest to 2026.10.19.

... (truncated)

Changelog

Sourced from taiki-e/install-action's changelog.

Changelog

All notable changes to this project will be documented in this file.

This project adheres to Semantic Versioning.

[Unreleased]

[2.89.0] - 2026-11-01

  • Support yq. (#2036, thanks @​FirelightFlagboy)

  • Support mold. (#2044, thanks @​FirelightFlagboy)

  • Fix an error when old cargo-binstall had already been installed at non-standard location. (#2048)

  • Update wasm-tools@latest to 1.263.0.

  • Update wasm-pack@latest to 0.15.1.

  • Update wasm-bindgen@latest to 0.2.130.

  • Update vacuum@latest to 0.36.1.

  • Update prek@latest to 0.5.9.

  • Update mise@latest to 2026.10.25.

  • Update kingfisher@latest to 2.16.0.

  • Update cargo-binstall@latest to 1.26.2.

[2.88.1] - 2026-10-30

  • Update wasmtime@latest to 50.0.1.

  • Update vacuum@latest to 0.36.0.

  • Update tombi@latest to 1.9.8.

  • Update mise@latest to 2026.10.23.

  • Update kingfisher@latest to 2.15.0.

  • Update espup@latest to 0.19.0.

... (truncated)

Commits
  • 68a389c Release 2.88.1
  • e31c3b8 Update wasmtime manifest
  • e30a869 Update wasmtime@latest to 50.0.1
  • bca7759 Update tombi@latest to 1.9.8
  • 53e7fa7 ci: Mark deepsource as glibc_pre_2_34_incompat
  • 8f5b3ba Update wasmtime manifest
  • c6e228d Update wasm-pack manifest
  • 46c9dcf Update wasm-bindgen manifest
  • 4136a69 Update vacuum@latest to 0.36.0
  • bf9426f Update tombi@latest to 1.9.7
  • Additional commits viewable in compare view

Most Recent Ignore Conditions Applied to This Pull Request
Dependency Name Ignore Conditions
taiki-e/install-action [< 2.63, > 2.62.12]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the github-actions group across 1 directory with 9 updates
a947b47 
Bumps the github-actions group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [vmactions/freebsd-vm](https://github.com/vmactions/freebsd-vm) | `1.5.7` | `1.5.9` |
| [vmactions/solaris-vm](https://github.com/vmactions/solaris-vm) | `1.4.0` | `1.4.2` |
| [lukka/get-cmake](https://github.com/lukka/get-cmake) | `4.4.2` | `4.4.5` |
| [cygwin/cygwin-install-action](https://github.com/cygwin/cygwin-install-action) | `6.1` | `7` |
| [msys2/setup-msys2](https://github.com/msys2/setup-msys2) | `2.32.0` | `2.33.0` |
| [vapier/coverity-scan-action](https://github.com/vapier/coverity-scan-action) | `1.9.0` | `1.10.0` |
| [release-drafter/release-drafter](https://github.com/release-drafter/release-drafter) | `7.7.0` | `7.10.0` |
| [rojopolis/spellcheck-github-actions](https://github.com/rojopolis/spellcheck-github-actions) | `0.66.0` | `0.68.0` |
| [taiki-e/install-action](https://github.com/taiki-e/install-action) | `2.87.15` | `2.88.1` |



Updates `vmactions/freebsd-vm` from 1.5.7 to 1.5.9
- [Release notes](https://github.com/vmactions/freebsd-vm/releases)
- [Commits](vmactions/freebsd-vm@4469451...c46abac)

Updates `vmactions/solaris-vm` from 1.4.0 to 1.4.2
- [Release notes](https://github.com/vmactions/solaris-vm/releases)
- [Commits](vmactions/solaris-vm@a11f407...1c16697)

Updates `lukka/get-cmake` from 4.4.2 to 4.4.5
- [Release notes](https://github.com/lukka/get-cmake/releases)
- [Changelog](https://github.com/lukka/get-cmake/blob/main/RELEASE_PROCESS.md)
- [Commits](lukka/get-cmake@fffaaaf...f86dd60)

Updates `cygwin/cygwin-install-action` from 6.1 to 7
- [Release notes](https://github.com/cygwin/cygwin-install-action/releases)
- [Commits](cygwin/cygwin-install-action@3f0a3f9...5a1b0cd)

Updates `msys2/setup-msys2` from 2.32.0 to 2.33.0
- [Release notes](https://github.com/msys2/setup-msys2/releases)
- [Changelog](https://github.com/msys2/setup-msys2/blob/main/CHANGELOG.md)
- [Commits](msys2/setup-msys2@66cd2cc...ec48f7c)

Updates `vapier/coverity-scan-action` from 1.9.0 to 1.10.0
- [Release notes](https://github.com/vapier/coverity-scan-action/releases)
- [Commits](vapier/coverity-scan-action@1b6fd4e...8fe7b0a)

Updates `release-drafter/release-drafter` from 7.7.0 to 7.10.0
- [Release notes](https://github.com/release-drafter/release-drafter/releases)
- [Commits](release-drafter/release-drafter@34d8067...978bb0b)

Updates `rojopolis/spellcheck-github-actions` from 0.66.0 to 0.68.0
- [Release notes](https://github.com/rojopolis/spellcheck-github-actions/releases)
- [Changelog](https://github.com/rojopolis/spellcheck-github-actions/blob/master/CHANGELOG.md)
- [Commits](rojopolis/spellcheck-github-actions@c1934c5...f2df388)

Updates `taiki-e/install-action` from 2.87.15 to 2.88.1
- [Release notes](https://github.com/taiki-e/install-action/releases)
- [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md)
- [Commits](taiki-e/install-action@4076c08...68a389c)

---
updated-dependencies:
- dependency-name: vmactions/freebsd-vm
  dependency-version: 1.5.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: vmactions/solaris-vm
  dependency-version: 1.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: lukka/get-cmake
  dependency-version: 4.4.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: cygwin/cygwin-install-action
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: msys2/setup-msys2
  dependency-version: 2.33.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: vapier/coverity-scan-action
  dependency-version: 1.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: release-drafter/release-drafter
  dependency-version: 7.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: rojopolis/spellcheck-github-actions
  dependency-version: 0.68.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: taiki-e/install-action
  dependency-version: 2.88.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Nov 2, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants