Skip to content

build(deps): bump the github-actions group across 1 directory with 9 updates - #27958

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-35affe04dd
Open

build(deps): bump the github-actions group across 1 directory with 9 updates#27958
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-35affe04dd

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 13, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the github-actions group with 9 updates in the / directory:

Package From To
github/gh-aw/actions/setup 0.68.3 0.89.14
actions/checkout 6.0.0 7.0.1
github/gh-aw/actions/setup-cli 0.68.3 0.89.14
dawidd6/action-download-artifact 20 24
marocchino/sticky-pull-request-comment 3.0.4 3.0.5
pnpm/action-setup 5.0.0 6.1.0
actions/setup-node 6.3.0 7.0.0
actions/labeler 6.0.1 7.0.0
actions-cool/check-user-permission 2.3.0 2.4.0

Updates github/gh-aw/actions/setup from 0.68.3 to 0.89.14

Release notes

Sourced from github/gh-aw/actions/setup's releases.

v0.89.13

🌟 Release Highlights

A small maintenance release focused on logs tooling, release-notes governance, and a documentation fix.

✨ What's New

  • Wildcard support for cached logs — gh aw logs --cached-logs now accepts trailing-wildcard prefixes (e.g. logs-*), merging all matching *.jsonl shards, pruning out-of-range files, and writing fresh results to a new collision-resistant shard. Handy for teams sharing rolling log caches. (#60702)
  • Safer release-notes automation — agentic workflows that touch release notes must now go through the update-release safe output instead of direct GitHub mutations, keeping agent jobs read-only and closing off a class of unintended writes. (#60701)

📚 Documentation

  • Fixed the Artifacts reference table, which listed aw-info and prompt as current artifact names even though no compiled workflow produces them; the correct info artifact is now documented, and the legacy names are marked back-compat. (#60706)

🔧 Internal

  • Weekly blog post summarizing recent activity. (#60729)

No community-labeled issues were closed in this release window.

Generated by 🚀 Release · copilot · auto · 23.1 AIC · ⊞ 11.9K

What's Changed

Full Changelog: github/gh-aw@v0.89.12...v0.89.13

v0.89.12

🌟 Release Highlights

A small security-hardening and CI reliability release.

🐛 Bug Fixes & Improvements

  • Reduced credential blast radius in slash-command router — The generated central slash-command router workflow (.github/workflows/agentic_commands.yml) now checks out the repository with persist-credentials: false, so GITHUB_TOKEN is no longer persisted in the local git config for the lifetime of the routing job (#60685).
  • Fixed failing CI job — Resolved a failure in the "Integration: CMD Tests" GitHub Actions job to restore green CI signal (#60683).

Generated by 🚀 Release · copilot · auto · 19.3 AIC · ⊞ 11.9K

... (truncated)

Changelog

Sourced from github/gh-aw/actions/setup's changelog.

Changelog

All notable changes to this project will be documented in this file.

v0.40.1 - 2026-02-03

Move from githubnext/gh-aw to github/gh-aw

If you were a former user of the githubnext Agentic Workflows you might have to re-register the extension to reflect the new location. As the gh-aw project moved from githubnext to github please delete the old channel and register the new one.

Example:

gh extension list
NAME   REPO              VERSION
gh aw  githubnext/gh-aw  v0.36.0

gh extension upgrade --all
[aw]: already up to date


gh extension remove gh-aw


gh extension install github/gh-aw
✓ Installed extension github/gh-aw


gh extension list
NAME   REPO          VERSION
gh aw  github/gh-aw  v0.40.1

Bug Fixes

Handle 502 Bad Gateway errors in assign_to_agent handler by treating them as success. The cloud gateway may return 502 errors during agent assignment, but the assignment typically succeeds despite the error. The handler now logs 502 errors for troubleshooting but does not fail the workflow.

Add discussion interaction to smoke workflows and serialize the discussion

flag in safe-outputs handler config.

Smoke workflows now select a random discussion and post thematic comments to validate discussion comment functionality. The compiler now emits the "discussion": true flag in GH_AW_SAFE_OUTPUTS_HANDLER_CONFIG when a workflow requests discussion output, and lock files include discussions: write permission where applicable.

Add discussion interaction to smoke workflows; compiler now serializes the discussion flag into the safe-outputs handler config so workflows can post comments to discussions. Lock files include discussions: write where applicable.

Smoke workflows pick a random discussion and post a thematic comment (copilot: playful, claude: comic-book, codex: mystical oracle, opencode: space mission). This is a non-breaking tooling/workflow change.

Add discussion interaction to smoke workflows; deprecate the discussion flag and

... (truncated)

Commits
  • 97b9a7c Surface safe-output entities in logs and usage artifacts (#60788)
  • 25ea846 Add Agent of the Day blog post for September 14, 2026 (#60854)
  • 53cdd80 Clarify missing GitHub Release safe-output errors (#60845)
  • c20c996 Apply safe-output temporary IDs to repo memory (#60789)
  • 12f29c3 [instructions] Sync assign-to-agent docs with reasoning-effort field (#60800)
  • 19f3182 Test wildcard JSONL cache sharding in live logs integration (#60782)
  • 70581f4 Simplify operational-value grading to one-shot evaluators (#60682)
  • a013f5a docs: unbloat frontmatter reference (#60713)
  • aa0cabf Add weekly blog post for 2026-09-14 (#60729)
  • c3d7c9e Support wildcard cached logs files (#60702)
  • Additional commits viewable in compare view

Updates actions/checkout from 6.0.0 to 7.0.1

Release notes

Sourced from actions/checkout's releases.

v7.0.1

What's Changed

Full Changelog: actions/checkout@v7...v7.0.1

v7.0.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v6.0.3...v7.0.0

v6.1.0

What's Changed

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: actions/checkout@v6.0.3...v6.1.0

v6.0.3

What's Changed

New Contributors

Full Changelog: actions/checkout@v6...v6.0.3

v6.0.2

What's Changed

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

v7.0.1

v7.0.0

v6.0.3

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

... (truncated)

Commits

Updates github/gh-aw/actions/setup-cli from 0.68.3 to 0.89.14

Release notes

Sourced from github/gh-aw/actions/setup-cli's releases.

v0.89.13

🌟 Release Highlights

A small maintenance release focused on logs tooling, release-notes governance, and a documentation fix.

✨ What's New

  • Wildcard support for cached logs — gh aw logs --cached-logs now accepts trailing-wildcard prefixes (e.g. logs-*), merging all matching *.jsonl shards, pruning out-of-range files, and writing fresh results to a new collision-resistant shard. Handy for teams sharing rolling log caches. (#60702)
  • Safer release-notes automation — agentic workflows that touch release notes must now go through the update-release safe output instead of direct GitHub mutations, keeping agent jobs read-only and closing off a class of unintended writes. (#60701)

📚 Documentation

  • Fixed the Artifacts reference table, which listed aw-info and prompt as current artifact names even though no compiled workflow produces them; the correct info artifact is now documented, and the legacy names are marked back-compat. (#60706)

🔧 Internal

  • Weekly blog post summarizing recent activity. (#60729)

No community-labeled issues were closed in this release window.

Generated by 🚀 Release · copilot · auto · 23.1 AIC · ⊞ 11.9K

What's Changed

Full Changelog: github/gh-aw@v0.89.12...v0.89.13

v0.89.12

🌟 Release Highlights

A small security-hardening and CI reliability release.

🐛 Bug Fixes & Improvements

  • Reduced credential blast radius in slash-command router — The generated central slash-command router workflow (.github/workflows/agentic_commands.yml) now checks out the repository with persist-credentials: false, so GITHUB_TOKEN is no longer persisted in the local git config for the lifetime of the routing job (#60685).
  • Fixed failing CI job — Resolved a failure in the "Integration: CMD Tests" GitHub Actions job to restore green CI signal (#60683).

Generated by 🚀 Release · copilot · auto · 19.3 AIC · ⊞ 11.9K

... (truncated)

Changelog

Sourced from github/gh-aw/actions/setup-cli's changelog.

Changelog

All notable changes to this project will be documented in this file.

v0.40.1 - 2026-02-03

Move from githubnext/gh-aw to github/gh-aw

If you were a former user of the githubnext Agentic Workflows you might have to re-register the extension to reflect the new location. As the gh-aw project moved from githubnext to github please delete the old channel and register the new one.

Example:

gh extension list
NAME   REPO              VERSION
gh aw  githubnext/gh-aw  v0.36.0

gh extension upgrade --all
[aw]: already up to date


gh extension remove gh-aw


gh extension install github/gh-aw
✓ Installed extension github/gh-aw


gh extension list
NAME   REPO          VERSION
gh aw  github/gh-aw  v0.40.1

Bug Fixes

Handle 502 Bad Gateway errors in assign_to_agent handler by treating them as success. The cloud gateway may return 502 errors during agent assignment, but the assignment typically succeeds despite the error. The handler now logs 502 errors for troubleshooting but does not fail the workflow.

Add discussion interaction to smoke workflows and serialize the discussion

flag in safe-outputs handler config.

Smoke workflows now select a random discussion and post thematic comments to validate discussion comment functionality. The compiler now emits the "discussion": true flag in GH_AW_SAFE_OUTPUTS_HANDLER_CONFIG when a workflow requests discussion output, and lock files include discussions: write permission where applicable.

Add discussion interaction to smoke workflows; compiler now serializes the discussion flag into the safe-outputs handler config so workflows can post comments to discussions. Lock files include discussions: write where applicable.

Smoke workflows pick a random discussion and post a thematic comment (copilot: playful, claude: comic-book, codex: mystical oracle, opencode: space mission). This is a non-breaking tooling/workflow change.

Add discussion interaction to smoke workflows; deprecate the discussion flag and

... (truncated)

Commits
  • 97b9a7c Surface safe-output entities in logs and usage artifacts (#60788)
  • 25ea846 Add Agent of the Day blog post for September 14, 2026 (#60854)
  • 53cdd80 Clarify missing GitHub Release safe-output errors (#60845)
  • c20c996 Apply safe-output temporary IDs to repo memory (#60789)
  • 12f29c3 [instructions] Sync assign-to-agent docs with reasoning-effort field (#60800)
  • 19f3182 Test wildcard JSONL cache sharding in live logs integration (#60782)
  • 70581f4 Simplify operational-value grading to one-shot evaluators (#60682)
  • a013f5a docs: unbloat frontmatter reference (#60713)
  • aa0cabf Add weekly blog post for 2026-09-14 (#60729)
  • c3d7c9e Support wildcard cached logs files (#60702)
  • Additional commits viewable in compare view

Updates dawidd6/action-download-artifact from 20 to 24

Release notes

Sourced from dawidd6/action-download-artifact's releases.

v24

What's Changed

Full Changelog: dawidd6/action-download-artifact@v23...v24

v23

Info

This release is rather big. Not gonna lie to you, I've used LLMs to get there. I can't vouch for all the changes but CI confirms there should be no regressions. Please report any issues you encounter with this release. You can always revert to previous working one.

What's Changed

Full Changelog: dawidd6/action-download-artifact@v22...v23

v22

What's Changed

New Contributors

Full Changelog: dawidd6/action-download-artifact@v21...v22

v21

What's Changed

... (truncated)

Commits

Updates marocchino/sticky-pull-request-comment from 3.0.4 to 3.0.5

Release notes

Sourced from marocchino/sticky-pull-request-comment's releases.

v3.0.5

What's Changed

Full Changelog: marocchino/sticky-pull-request-comment@v3.0.4...v3.0.5

Commits
  • 5770ad5 📦️ Build
  • 2c19060 build(deps-dev): Bump @​biomejs/biome from 2.4.14 to 2.5.2 (#1730)
  • 3d24e5a build(deps-dev): Bump js-yaml from 4.1.1 to 5.2.1 (#1732)
  • 3604821 build(deps-dev): Bump @​rollup/plugin-commonjs from 29.0.2 to 29.0.3 (#1710)
  • a4d9c0f build(deps-dev): Bump @​types/node from 25.9.1 to 26.1.0 (#1731)
  • ae65a58 build(deps-dev): Bump vitest from 4.1.7 to 4.1.9 (#1719)
  • 8680321 build(deps-dev): Bump vite from 8.0.13 to 8.0.16 (#1720)
  • 5d40239 build(deps): Bump actions/checkout from 6 to 7 (#1721)
  • 39ab01d build(deps-dev): Bump rollup from 4.60.4 to 4.62.2 (#1722)
  • b2660f1 build(deps): Bump undici from 6.24.0 to 6.27.0 (#1725)
  • Additional commits viewable in compare view

Updates pnpm/action-setup from 5.0.0 to 6.1.0

Release notes

Sourced from pnpm/action-setup's releases.

v6.1.0

What's Changed

Full Changelog: pnpm/action-setup@v6.0.10...v6.1.0

v6.0.10

What's Changed

New Contributors

Full Changelog: pnpm/action-setup@v6...v6.0.10

v6.0.9

What's Changed

Full Changelog: pnpm/action-setup@v6...v6.0.9

v6.0.8

What's Changed

New Contributors

Full Changelog: pnpm/action-setup@v6.0.7...v6.0.8

v6.0.7

What's Changed

New Contributors

Full Changelog: pnpm/action-setup@v6.0.6...v6.0.7

... (truncated)

Commits
  • ea17c68 feat: support pnpm v12 (#288)
  • 0977fd9 docs: Update README to include devEngines.packageManager (#273)
  • 48261ac fix: update pnpm to v11.19.0 (#283)
  • 75677f7 ci: use pnpm 11 for pr-check (#284)
  • 769ae71 refactor: introduce restore keys for cache (#280)
  • 6fed91f docs(README): point users to the successor pnpm/setup action (#282)
  • 0ebf471 fix: update pnpm to v11.7.0 (#267)
  • 0e279bb fix: update pnpm to 11.1.1 (#248)
  • 3e83581 fix: drop patchPnpmEnv so standalone+self-update works on Windows (#258)

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Aug 13, 2026
Copilot AI lite review requested due to automatic review settings August 13, 2026 20:19
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Aug 13, 2026
@azure-pipelines

azure-pipelines Bot commented Aug 13, 2026

Copy link
Copy Markdown
Azure Pipelines:
1 pipeline(s) were filtered out due to trigger conditions.
There may be pipelines that require an authorized user to comment /azp run to run.

@github-actions github-actions Bot added area: tools area: build Build related issues area: repo Repo related work area: website base: main PRs targeted against main branch and removed dependencies Pull requests that update a dependency file base: main PRs targeted against main branch labels Aug 13, 2026
@github-actions

github-actions Bot commented Aug 13, 2026

Copy link
Copy Markdown
Contributor

Hi! Thank you for opening this PR. Want me to review it?

Based on the diff (120 lines, 17 files), I've queued these reviewers:

  • Correctness — logic errors, race conditions, lifecycle issues
  • Security — vulnerabilities, secret exposure, injection
  • API Compatibility — breaking changes, release tags, type design
  • Performance — algorithmic regressions, memory leaks
  • Testing — coverage gaps, hollow tests

How this works

  • Adjust the reviewer set by ticking/unticking boxes above. Reviewer toggles alone don't trigger anything.

  • Tick Start review below to dispatch the review fleet.

  • After review finishes, tick Start review again to request another run — it auto-resets after each dispatch.

  • This comment updates as new commits land; your reviewer selections are preserved.

  • Start review

Copilot AI reviewed Aug 13, 2026
View reviewed changes

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Note

Copilot could not run the full agentic suite for this review because it was automatically requested on a bot-authored pull request. Request a review from Copilot under Reviewers to retry with the full agentic suite. Improved support for bot-authored pull requests is coming soon.

Updates GitHub Actions workflow dependencies by bumping pinned action SHAs/versions across CI and automation workflows.

Changes:

  • Bump actions/checkout, actions/setup-node, and pnpm/action-setup pins across multiple workflows.
  • Update comment-posting and artifact-download actions (marocchino/sticky-pull-request-comment, dawidd6/action-download-artifact) to newer versions.
  • Update github/gh-aw action pins used in agent maintenance automation.

Reviewed changes

Copilot reviewed 17 out of 17 changed files in this pull request and generated 4 comments.

Show a summary per file
File Description
.github/workflows/website-validation.yml Updates checkout/node/pnpm action pins used for site build + validations.
.github/workflows/stale-branches.yml Updates checkout pin for branch cleanup workflow.
.github/workflows/release-notes-issue.yml Updates checkout/node/pnpm action pins for release notes issue automation.
.github/workflows/release-approval.yml Updates artifact download + checkout/node/pnpm pins in release approval workflow.
.github/workflows/push-tag-create-release.yml Updates checkout/node/pnpm pins for tag-driven release creation.
.github/workflows/pr-validation.yml Updates checkout pin for PR validation workflow.
.github/workflows/pr-review-fleet.yml Updates checkout/node pins and sticky comment action version.
.github/workflows/pr-review-confirm.yml Updates permission-check + checkout pins.
.github/workflows/pr-review-auto-route.yml Updates checkout pin and sticky comment action version.
.github/workflows/pr-release-branch-warning.yml Updates checkout pin and sticky comment action version.
.github/workflows/pr-labeler.yml Updates actions/labeler pin for PR labeling.
.github/workflows/pr-check-changeset.yml Updates checkout/node/pnpm pins for changeset verification.
.github/workflows/pr-bundle-size-comments.yml Updates checkout/node/pnpm pins and sticky comment action version for bundle size reporting.
.github/workflows/linkcheck-reporter.yml Updates artifact download pin and sticky comment action version for linkcheck reporting.
.github/workflows/devcontainer-prebuild-check.yml Updates checkout pin for devcontainer prebuild checks.
.github/workflows/changeset-reporter.yml Updates checkout/artifact download pins and sticky comment action version for changeset reporting.
.github/workflows/agentics-maintenance.yml Updates gh-aw setup/setup-cli pins and checkout pin for maintenance automation.

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

Comment thread .github/workflows/agentics-maintenance.yml
uses: github/gh-aw/actions/setup-cli@ce1794953e0ec42adc41b6fca05e02ab49ee21c3 # v0.68.3
uses: github/gh-aw/actions/setup-cli@53843da968225dc56e1590978a7ed6407a8438ac # v0.85.4
with:
version: v0.68.3
Comment thread .github/workflows/website-validation.yml
Comment on lines 29 to +30
# release notes: https://github.com/actions/checkout/releases/tag/v6.0.2
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
Comment thread .github/workflows/website-validation.yml
steps:
# release notes: https://github.com/actions/checkout/releases/tag/v6.0.2
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
Comment thread .github/workflows/website-validation.yml Outdated
Comment on lines +35 to +38
- uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6.0.10

# release notes: https://github.com/actions/setup-node/releases/tag/v6.3.0
- uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
- uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/github-actions-35affe04dd branch from 08f8deb to 1614427 Compare August 14, 2026 17:44
@github-actions

github-actions Bot commented Aug 14, 2026

Copy link
Copy Markdown
Contributor

Bundle size comparison

Base commit: unresolved
Head commit: 1614427151d829accba5067e3075304528b0bc5c

⚠️ Comparison unavailable.

No CI build was found for the PR HEAD commit. This shouldn't happen — the workflow only runs after the PR's Build - client packages check completes. Please report.

@dependabot
dependabot Bot force-pushed the dependabot/github_actions/github-actions-35affe04dd branch 3 times, most recently from d84d6d3 to 7f16395 Compare August 26, 2026 09:41
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/github-actions-35affe04dd branch 2 times, most recently from 546342d to 86bb95a Compare September 9, 2026 09:41
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/github-actions-35affe04dd branch from 86bb95a to 72c7dd4 Compare September 16, 2026 09:40
@dependabot
build(deps): bump the github-actions group across 1 directory with 9 …
aefd8e4 
…updates

Bumps the github-actions group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github/gh-aw/actions/setup](https://github.com/github/gh-aw) | `0.68.3` | `0.89.14` |
| [actions/checkout](https://github.com/actions/checkout) | `6.0.0` | `7.0.1` |
| [github/gh-aw/actions/setup-cli](https://github.com/github/gh-aw) | `0.68.3` | `0.89.14` |
| [dawidd6/action-download-artifact](https://github.com/dawidd6/action-download-artifact) | `20` | `24` |
| [marocchino/sticky-pull-request-comment](https://github.com/marocchino/sticky-pull-request-comment) | `3.0.4` | `3.0.5` |
| [pnpm/action-setup](https://github.com/pnpm/action-setup) | `5.0.0` | `6.1.0` |
| [actions/setup-node](https://github.com/actions/setup-node) | `6.3.0` | `7.0.0` |
| [actions/labeler](https://github.com/actions/labeler) | `6.0.1` | `7.0.0` |
| [actions-cool/check-user-permission](https://github.com/actions-cool/check-user-permission) | `2.3.0` | `2.4.0` |



Updates `github/gh-aw/actions/setup` from 0.68.3 to 0.89.14
- [Release notes](https://github.com/github/gh-aw/releases)
- [Changelog](https://github.com/github/gh-aw/blob/main/CHANGELOG.md)
- [Commits](github/gh-aw@ce17949...97b9a7c)

Updates `actions/checkout` from 6.0.0 to 7.0.1
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v6...3d3c42e)

Updates `github/gh-aw/actions/setup-cli` from 0.68.3 to 0.89.14
- [Release notes](https://github.com/github/gh-aw/releases)
- [Changelog](https://github.com/github/gh-aw/blob/main/CHANGELOG.md)
- [Commits](github/gh-aw@ce17949...97b9a7c)

Updates `dawidd6/action-download-artifact` from 20 to 24
- [Release notes](https://github.com/dawidd6/action-download-artifact/releases)
- [Commits](dawidd6/action-download-artifact@8305c0f...d63b86a)

Updates `marocchino/sticky-pull-request-comment` from 3.0.4 to 3.0.5
- [Release notes](https://github.com/marocchino/sticky-pull-request-comment/releases)
- [Commits](marocchino/sticky-pull-request-comment@0ea0beb...5770ad5)

Updates `pnpm/action-setup` from 5.0.0 to 6.1.0
- [Release notes](https://github.com/pnpm/action-setup/releases)
- [Commits](pnpm/action-setup@fc06bc1...ea17c68)

Updates `actions/setup-node` from 6.3.0 to 7.0.0
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@53b8394...8207627)

Updates `actions/labeler` from 6.0.1 to 7.0.0
- [Release notes](https://github.com/actions/labeler/releases)
- [Commits](actions/labeler@634933e...bf12e9b)

Updates `actions-cool/check-user-permission` from 2.3.0 to 2.4.0
- [Release notes](https://github.com/actions-cool/check-user-permission/releases)
- [Changelog](https://github.com/actions-cool/check-user-permission/blob/main/CHANGELOG.md)
- [Commits](actions-cool/check-user-permission@7b90a27...c21884f)

---
updated-dependencies:
- dependency-name: actions-cool/check-user-permission
  dependency-version: 2.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: actions/checkout
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/labeler
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/setup-node
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: dawidd6/action-download-artifact
  dependency-version: '21'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: github/gh-aw/actions/setup
  dependency-version: 0.85.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: github/gh-aw/actions/setup-cli
  dependency-version: 0.85.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: marocchino/sticky-pull-request-comment
  dependency-version: 3.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: pnpm/action-setup
  dependency-version: 6.0.10
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/github-actions-35affe04dd branch from 72c7dd4 to aefd8e4 Compare September 23, 2026 09:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

Copilot code review Copilot
Copilot review effort, defaults to Lite
Applies to this pull request for everyone.Learn more about Copilot code review.
Copilot left review comments

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

area: build Build related issues area: repo Repo related work area: tools area: website base: main PRs targeted against main branch github_actions Pull requests that update GitHub Actions code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant