Bump the github-actions group across 1 directory with 6 updates by dependabot[bot] · Pull Request #1650 · python-discord/site

dependabot · 2026-09-18T05:54:17Z

Bumps the github-actions group with 6 updates in the / directory:

Package	From	To
docker/setup-buildx-action	`4.2.0`	`4.4.0`
docker/login-action	`4.5.1`	`4.6.0`
docker/build-push-action	`7.3.0`	`7.4.0`
Azure/k8s-deploy	`7.0.0`	`7.0.1`
astral-sh/setup-uv	`9.0.0`	`10.1.0`
coverallsapp/github-action	`2.3.7`	`2.3.8`

Updates docker/setup-buildx-action from 4.2.0 to 4.4.0

Release notes

Sourced from docker/setup-buildx-action's releases.

v4.4.0

Use official Buildx releases for cloud driver by @crazy-max in docker/setup-buildx-action#606

Pull BuildKit image before builder creation by @crazy-max in docker/setup-buildx-action#609

Use shared error helpers for Buildx and Docker commands by @crazy-max in docker/setup-buildx-action#620

Bump @docker/actions-toolkit from 0.95.0 to 0.100.0 in docker/setup-buildx-action#610 docker/setup-buildx-action#618 docker/setup-buildx-action#619

Bump @humanfs/node from 0.16.7 to 0.16.8 in docker/setup-buildx-action#614

Bump js-yaml from 5.3.0 to 5.4.2 in docker/setup-buildx-action#608 docker/setup-buildx-action#617

Bump postcss-selector-parser from 7.1.1 to 7.1.5 in docker/setup-buildx-action#611

Full Changelog: docker/setup-buildx-action@v4.3.0...v4.4.0

v4.3.0

Bump @docker/actions-toolkit from 0.92.0 to 0.95.0 in docker/setup-buildx-action#595

Bump brace-expansion from 1.1.13 to 1.1.18 in docker/setup-buildx-action#600

Bump js-yaml from 5.2.0 to 5.3.0 in docker/setup-buildx-action#585

Bump postcss from 8.5.10 to 8.5.25 in docker/setup-buildx-action#598

Bump undici from 6.27.0 to 6.28.0 in docker/setup-buildx-action#601

Full Changelog: docker/setup-buildx-action@v4.2.0...v4.3.0

Commits

594f3bf Merge pull request #609 from crazy-max/pull-buildkit-image-before-create
bd6e702 chore: update generated content
6268c9d pull BuildKit image before builder creation
e823525 Merge pull request #621 from docker/dependabot/github_actions/codeql-actions-...
533ed8e build(deps): bump the codeql-actions group with 2 updates
bedaf13 Merge pull request #620 from crazy-max/shared-error-helpers
d5079fb chore: update generated content
226a616 use shared error helpers for Buildx and Docker commands
77ce7f4 Merge pull request #619 from docker/dependabot/npm_and_yarn/docker/actions-to...
0dc1dc9 [dependabot skip] chore: update generated content
Additional commits viewable in compare view

Updates docker/login-action from 4.5.1 to 4.6.0

Release notes

Sourced from docker/login-action's releases.

v4.6.0

Harden buildx scoped config path handling by @crazy-max in docker/login-action#1059

Bump @aws-sdk/client-ecr and @aws-sdk/client-ecr-public to 3.1095.0 in docker/login-action#1051

Bump js-yaml from 5.2.1 to 5.2.2 in docker/login-action#1057

Bump postcss from 8.5.10 to 8.5.22 in docker/login-action#1056

Full Changelog: docker/login-action@v4.5.2...v4.6.0

v4.5.2

Surface Docker Hub OIDC error responses by @crazy-max in docker/login-action#1058

Full Changelog: docker/login-action@v4.5.1...v4.5.2

Commits

dbcb813 Merge pull request #1051 from docker/dependabot/npm_and_yarn/aws-sdk-dependen...
5bcb015 [dependabot skip] chore: update generated content
b30b2f2 build(deps): bump the aws-sdk-dependencies group across 1 directory with 2 up...
9087f1e Merge pull request #1057 from docker/dependabot/npm_and_yarn/js-yaml-5.2.2
0009830 [dependabot skip] chore: update generated content
2325523 build(deps): bump js-yaml from 5.2.1 to 5.2.2
4ec1d4a Merge pull request #1056 from docker/dependabot/npm_and_yarn/postcss-8.5.22
5fc99ba Merge pull request #1053 from docker/dependabot/github_actions/aws-actions/co...
e512bd5 Merge pull request #1052 from docker/dependabot/github_actions/codeql-actions...
a146c91 Merge pull request #1059 from crazy-max/harden-buildx-scope-paths
Additional commits viewable in compare view

Updates docker/build-push-action from 7.3.0 to 7.4.0

Release notes

Sourced from docker/build-push-action's releases.

v7.4.0

Use the shared error helper for Buildx commands by @crazy-max in docker/build-push-action#1620

Prevent workflow command injection in metadata logs by @crazy-max in docker/build-push-action#1617

Bump @docker/actions-toolkit from 0.92.0 to 0.100.0 in docker/build-push-action#1614 docker/build-push-action#1618 docker/build-push-action#1621

Bump @humanfs/node from 0.16.7 to 0.16.8 in docker/build-push-action#1609

Bump brace-expansion from 1.1.13 to 1.1.18 in docker/build-push-action#1592

Bump csv-parse from 7.0.0 to 7.0.2 in docker/build-push-action#1613

Bump js-yaml from 4.3.0 to 4.3.2 in docker/build-push-action#1605 docker/build-push-action#1615

Bump nanoid from 3.3.16 to 3.3.18 in docker/build-push-action#1611

Bump postcss from 8.5.10 to 8.5.25 in docker/build-push-action#1590

Bump postcss-selector-parser from 7.1.1 to 7.1.5 in docker/build-push-action#1606

Bump sigstore from 4.1.0 to 4.1.1 in docker/build-push-action#1577

Bump undici from 6.27.0 to 6.28.0 in docker/build-push-action#1594

Full Changelog: docker/build-push-action@v7.3.0...v7.4.0

Commits

c3c9e26 Merge pull request #1621 from docker/dependabot/npm_and_yarn/docker/actions-t...
459b674 [dependabot skip] chore: update generated content
4dedcb2 chore(deps): Bump @docker/actions-toolkit from 0.99.0 to 0.100.0
379bf63 Merge pull request #1620 from crazy-max/buildx-error-message
9877975 chore: update generated content
7ed0556 use the shared Buildx error summary helper
91670ba Merge pull request #1618 from docker/dependabot/npm_and_yarn/docker/actions-t...
80dbc86 [dependabot skip] chore: update generated content
50cac3a chore(deps): Bump @docker/actions-toolkit from 0.98.0 to 0.99.0
03b4d6c Merge pull request #1617 from crazy-max/fix-metadata-workflow-commands
Additional commits viewable in compare view

Updates Azure/k8s-deploy from 7.0.0 to 7.0.1

Release notes

Sourced from Azure/k8s-deploy's releases.

v7.0.1

Security

#560 Fix command injection in az aks command invoke for private clusters: argv is now POSIX-quoted instead of flattened with join(' '), so manifest resource names, the namespace input and the workflow annotation payload can no longer escape into the run-command pod's high-privilege service account

#552 Bump js-yaml from 5.2.1 to 5.2.2

#551 Bump postcss from 8.5.15 to 8.5.25

#550 Bump js-yaml from 4.2.0 to 4.3.0

#548 Bump the actions group across 1 directory with 6 updates

#547 Bump the actions group across 1 directory with 5 updates

Fixed

#543 Strip trailing colon from the parsed NewReplicaSet name in rollout status output

#560 Honour the caller's silent flag in PrivateKubectl.execute; command output was previously written to the debug log unconditionally

Changed

#560 Remove the unused minimist dependency

#555 Document that the k8s-bake example requires k8s-bake v4.1.1+, which writes its baked manifest inside GITHUB_WORKSPACE

Changelog

Sourced from Azure/k8s-deploy's changelog.

Changelog

[7.0.1] - 2026-08-31

Security

#560 Fix command injection in az aks command invoke for private clusters: argv is now POSIX-quoted instead of flattened with join(' '), so manifest resource names, the namespace input and the workflow annotation payload can no longer escape into the run-command pod's high-privilege service account

#552 Bump js-yaml from 5.2.1 to 5.2.2

#551 Bump postcss from 8.5.15 to 8.5.25

#550 Bump js-yaml from 4.2.0 to 4.3.0

#548 Bump the actions group across 1 directory with 6 updates

#547 Bump the actions group across 1 directory with 5 updates

Fixed

#543 Strip trailing colon from the parsed NewReplicaSet name in rollout status output

#560 Honour the caller's silent flag in PrivateKubectl.execute; command output was previously written to the debug log unconditionally

Changed

#560 Remove the unused minimist dependency

#555 Document that the k8s-bake example requires k8s-bake v4.1.1+, which writes its baked manifest inside GITHUB_WORKSPACE

[7.0.0] - 2026-06-23

Changed

#528 Confine manifest paths to GITHUB_WORKSPACE (breaking: workflows passing manifests: paths outside the workspace now fail with a clear error)

#527 Pin release workflow to commit SHA for supply chain safety

Security

#528 Harden URL fetcher error handling in writeYamlFromURLToFile

#537 Bump undici from 6.25.0 to 6.27.0

#536 Bump actions/checkout in /.github/workflows in the actions group

#534 Bump the actions group with 3 updates

#533 Bump esbuild from 0.28.0 to 0.28.1

#532 Bump github/codeql-action in /.github/workflows in the actions group

#531 Bump @types/node from 25.9.1 to 25.9.2 in the actions group

#530 Bump the actions group in /.github/workflows with 2 updates

#529 Bump the actions group with 2 updates

#526 Bump the actions group in /.github/workflows with 2 updates

#525 Bump the actions group with 2 updates

#524 Bump @types/node from 25.7.0 to 25.9.0 in the actions group

#523 Bump github/codeql-action in /.github/workflows in the actions group

[6.0.0] - 2026-04-17

Changed

... (truncated)

Commits

bf1ec05 build
b5ce824 release: v7.0.1 (#562)
0fc36d5 fix az aks private cluster command args (#560)
75a6f52 docs: require k8s-bake v4.1.1+ in the bake example (#555)
4fa6d56 chore(deps): bump js-yaml from 5.2.1 to 5.2.2 (#552)
13a4861 chore(deps): bump the actions group across 1 directory with 5 updates (#547)
b36de25 chore(deps-dev): bump postcss from 8.5.15 to 8.5.25 (#551)
31e169e chore(deps): bump js-yaml from 4.2.0 to 4.3.0 (#550)
109ba6e chore(deps): bump the actions group across 1 directory with 6 updates (#548)
df63ede fix: strip colon from parsed NewReplicaSet name (#543)
See full diff in compare view

Updates astral-sh/setup-uv from 9.0.0 to 10.1.0

Release notes

Sourced from astral-sh/setup-uv's releases.

v10.1.0 🌈 New output python-runtime-idand respect NO_PROXY

Changes

This release adds more bheind the scene security improvements and also 2 small improvements.

NO_PROXY

This action now respects no_proxy/NO_PROXY environment variables which were previously ignored.

New output python-runtime-id

The new output python-runtime-id can be used to know which python version exactly was installed if you use activate-environment. See pyca/cryptography#15572 for details on why this can be useful.

🐛 Bug fixes

fix: respect no proxy directive @mj0nez (#1037)

Use JSON + a typed wrapper instead of TS codegen @woodruffw (#1025)

🚀 Enhancements

Expose a Python "identity" output @woodruffw (#1036)

Verify downloads with astral-sh/versions checksums @zaniebot (#1033)

🧰 Maintenance

chore: update known checksums for 0.12.12 @github-actions[bot] (#1041)

chore: update known checksums for 0.12.10/0.12.11 @github-actions[bot] (#1038)

chore: update known checksums for 0.12.9 @github-actions[bot] (#1035)

chore: update known checksums for 0.12.7/0.12.8 @github-actions[bot] (#1031)

chore: update known checksums for 0.12.6 @github-actions[bot] (#1030)

chore: update known checksums for 0.12.5 @github-actions[bot] (#1020)

Use self-repo syntax for all in-repo actions/reusable workflows @woodruffw (#1024)

Pin one-shot tools @woodruffw (#1022)

ci: remove obsolete direct push attempts @eifinger (#1019)

📚 Documentation

docs: update version references to v10.0.1 @github-actions[bot] (#1018)

⬆️ Dependency updates

chore(deps-dev): roll up Dependabot updates @eifinger (#1043)

Harden npm install defaults @zaniebot (#1026)

Add dependency cooldowns @woodruffw (#1021)

v10.0.1 🌈 Tolerate transient manifest timeouts

Changes

Thank you @arguile- for making this action more resilient.

... (truncated)

Commits

bec219d chore(deps-dev): roll up Dependabot updates (#1043)
b90ec40 fix: respect no proxy directive (#1037)
421feb6 chore: update known checksums for 0.12.12 (#1041)
f634bf4 Expose a Python "identity" output (#1036)
a6772c8 chore: update known checksums for 0.12.10/0.12.11 (#1038)
e105c8f chore: update known checksums for 0.12.9 (#1035)
cd13f92 Verify downloads with astral-sh/versions checksums (#1033)
3aef7b9 chore: update known checksums for 0.12.7/0.12.8 (#1031)
d08d816 chore: update known checksums for 0.12.6 (#1030)
19b4d1e Harden npm install defaults (#1026)
Additional commits viewable in compare view

Updates coverallsapp/github-action from 2.3.7 to 2.3.8

Release notes

Sourced from coverallsapp/github-action's releases.

v2.3.8

What's Changed

README.md: Update GitHub Actions by @cclauss in coverallsapp/github-action#259

Spelling by @jsoref in coverallsapp/github-action#258

Fix macOS install for Homebrew 6.0.0 tap trust requirement by @afinetooth in coverallsapp/github-action#265

New Contributors

@jsoref made their first contribution in coverallsapp/github-action#258

Full Changelog: coverallsapp/github-action@v2...v2.3.8

Commits

8d6379e Fix macOS install for Homebrew 6.0.0 tap trust requirement (#265)
0a51d2e Spelling (#258)
dc7137b README.md: Update GitHub Actions (#259)
ba6dae8 Revise README for clarity on integrations and support
a5a505e Update README with new sections and information
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the github-actions group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `4.2.0` | `4.4.0` | | [docker/login-action](https://github.com/docker/login-action) | `4.5.1` | `4.6.0` | | [docker/build-push-action](https://github.com/docker/build-push-action) | `7.3.0` | `7.4.0` | | [Azure/k8s-deploy](https://github.com/azure/k8s-deploy) | `7.0.0` | `7.0.1` | | [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) | `9.0.0` | `10.1.0` | | [coverallsapp/github-action](https://github.com/coverallsapp/github-action) | `2.3.7` | `2.3.8` | Updates `docker/setup-buildx-action` from 4.2.0 to 4.4.0 - [Release notes](https://github.com/docker/setup-buildx-action/releases) - [Commits](docker/setup-buildx-action@bb05f3f...594f3bf) Updates `docker/login-action` from 4.5.1 to 4.6.0 - [Release notes](https://github.com/docker/login-action/releases) - [Commits](docker/login-action@abd2ef4...dbcb813) Updates `docker/build-push-action` from 7.3.0 to 7.4.0 - [Release notes](https://github.com/docker/build-push-action/releases) - [Commits](docker/build-push-action@53b7df9...c3c9e26) Updates `Azure/k8s-deploy` from 7.0.0 to 7.0.1 - [Release notes](https://github.com/azure/k8s-deploy/releases) - [Changelog](https://github.com/Azure/k8s-deploy/blob/main/CHANGELOG.md) - [Commits](Azure/k8s-deploy@51ca02a...bf1ec05) Updates `astral-sh/setup-uv` from 9.0.0 to 10.1.0 - [Release notes](https://github.com/astral-sh/setup-uv/releases) - [Commits](astral-sh/setup-uv@c771a70...bec219d) Updates `coverallsapp/github-action` from 2.3.7 to 2.3.8 - [Release notes](https://github.com/coverallsapp/github-action/releases) - [Commits](coverallsapp/github-action@5cbfd81...8d6379e) --- updated-dependencies: - dependency-name: docker/setup-buildx-action dependency-version: 4.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: docker/login-action dependency-version: 4.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: docker/build-push-action dependency-version: 7.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: Azure/k8s-deploy dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: astral-sh/setup-uv dependency-version: 10.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: coverallsapp/github-action dependency-version: 2.3.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com>

netlify · 2026-09-18T05:54:23Z

✅ Deploy Preview for pydis-static ready!

Name	Link
🔨 Latest commit	`2283974`
🔍 Latest deploy log	https://app.netlify.com/projects/pydis-static/deploys/6aacd20c0b6e3a00082c8095
😎 Deploy Preview	https://deploy-preview-1650--pydis-static.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.
🤖 Make changes	Run an agent on this branch

To edit notification comments on pull requests, go to your Netlify project configuration.

coveralls · 2026-09-18T05:56:21Z

coverage: 100.0%. remained the same — dependabot/github_actions/github-actions-5af935a404 into main

dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Sep 18, 2026

dependabot Bot requested a review from MarkKoz as a code owner September 18, 2026 05:54

dependabot Bot added github_actions Pull requests that update GitHub Actions code dependencies Pull requests that update a dependency file labels Sep 18, 2026

python-discord-policy-bot Bot requested a review from a team September 18, 2026 05:54

Navigation Menu

Uh oh!

Bump the github-actions group across 1 directory with 6 updates - #1650

Bump the github-actions group across 1 directory with 6 updates#1650
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-5af935a404

dependabot Bot commented on behalf of github Sep 18, 2026 •

edited

Loading

Uh oh!

netlify Bot commented Sep 18, 2026 •

edited

Loading

Uh oh!

coveralls commented Sep 18, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Sep 18, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v4.4.0

v4.3.0

v4.6.0

v4.5.2

v7.4.0

v7.0.1

Security

Fixed

Changed

Changelog

[7.0.1] - 2026-08-31

Security

Fixed

Changed

[7.0.0] - 2026-06-23

Changed

Security

[6.0.0] - 2026-04-17

Changed

v10.1.0 🌈 New output python-runtime-idand respect NO_PROXY

Changes

NO_PROXY

New output python-runtime-id

🐛 Bug fixes

🚀 Enhancements

🧰 Maintenance

📚 Documentation

⬆️ Dependency updates

v10.0.1 🌈 Tolerate transient manifest timeouts

Changes

v2.3.8

What's Changed

New Contributors

Uh oh!

netlify Bot commented Sep 18, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

✅ Deploy Preview for pydis-static ready!

Uh oh!

coveralls commented Sep 18, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Sep 18, 2026 •

edited

Loading

v10.1.0 🌈 New output `python-runtime-id`and respect NO_PROXY

New output `python-runtime-id`

netlify Bot commented Sep 18, 2026 •

edited

Loading