Skip to content

chore(ci): bump the actions-all group across 1 directory with 5 updates - #548

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/github_actions/actions-all-fa3c142d64
Open

dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/github_actions/actions-all-fa3c142d64

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 12, 2026

Copy link
Copy Markdown
Contributor

Bumps the actions-all group with 5 updates in the / directory:

Package From To
actions/setup-java 5.7.0 6.0.1
actions-rust-lang/setup-rust-toolchain 1 2
arcboxlabs/actions/.github/workflows/fast-forward.yml 3b936594d02e187473fbc4ec5f814bbeba2049ac df45f49fc08a2237044fc03c6044b3923cae22a9
softprops/action-gh-release 3.0.2 3.0.3
vedantmgoyal9/winget-releaser 4ffc7888bffd451b357355dc214d43bb9f23917e b7370d4d152efdce803a26cc6ca9eee58cb2ad54

Updates actions/setup-java from 5.7.0 to 6.0.1

Release notes

Sourced from actions/setup-java's releases.

v6.0.1

What's Changed

New Contributors

Full Changelog: actions/setup-java@v6.0.0...v6.0.1

v6.0.0

What's Changed

... (truncated)

Commits
  • de7274f Avoid macOS GPG socket overflow on long runner paths (#1266)
  • 134912a Fix import-safe checks when scripts are run from a path with symlinks (#1265)
  • 0781fc6 Fix alpine failures by switching default back to only warn on verification fa...
  • 4889c4a Fix Temurin EA E2E signature verification (#1260)
  • 8fd3240 [WIP] Fix failing GitHub Actions job for temurin 17 (#1259)
  • 2732291 chore(deps-dev): update eslint and globals (#1256)
  • 1a8f22b chore: streamline Dependabot updates (#1255)
  • 85030b7 docs: complete v6 release highlights (#1254)
  • dd06d9c Prepare documentation for v6 release (#1253)
  • 59b3450 chore(deps): combine open Dependabot npm updates (#1252)
  • Additional commits viewable in compare view

Updates actions-rust-lang/setup-rust-toolchain from 1 to 2

Release notes

Sourced from actions-rust-lang/setup-rust-toolchain's releases.

v2.0.0

What's Changed

  • Use CARGO_BUILD_WARNINGS for enforcing warning free compilations (#98) This is a new variable supported by cargo 1.97+ and sets the build.warnings config. It allows removing the RUSTFLAGS="-D warnings" default, which will improve compatibility with target.*.rustflags and .cargo/config.toml files.

    This adds a new build-warnings input to configure the value for the build.warnings config.

  • Add error matcher for Rust panics This will highlight the location of the panic location during tests.

  • Reuse output of rustc --version --verbose calls (#103 by @​ChihweiLHBird)

New Contributors

Full Changelog: actions-rust-lang/setup-rust-toolchain@v1.17.0...v2.0.0

v1.17.0

What's Changed

New Contributors

Full Changelog: actions-rust-lang/setup-rust-toolchain@v1.16.1...v1.17.0

v1.16.1

What's Changed

Full Changelog: actions-rust-lang/setup-rust-toolchain@v1.16.0...v1.16.1

v1.16.0

What's Changed

New Contributors

Full Changelog: actions-rust-lang/setup-rust-toolchain@v1.15.4...v1.16.0

v1.15.4

What's Changed

... (truncated)

Changelog

Sourced from actions-rust-lang/setup-rust-toolchain's changelog.

[2.0.0] - 2026-09-07

  • Use CARGO_BUILD_WARNINGS for enforcing warning free compilations (#98) This is a new variable supported by cargo 1.97+ and sets the build.warnings config. It allows removing the RUSTFLAGS="-D warnings" default, which will improve compatibility with target.*.rustflags and .cargo/config.toml files.

    This adds a new build-warnings input to configure the value for the build.warnings config.

  • Add error matcher for Rust panics This will highlight the location of the panic location during tests.

  • Reuse output of rustc --version --verbose calls (#103 by @​ChihweiLHBird)

[1.17.0] - 2026-06-25

  • Add new parameter cache-targets that is propagated to Swatinem/rust-cache as cache-targets (#84). This allows disabling caching of the workspace target directory, e.g. when using sccache, while keeping the rest of the cache enabled.

[1.16.1] - 2026-05-08

  • Renamed internally used variable to avoid clashes with globally existing variables. This fixes the interference of the TOOLCHAIN variable as reported in #91.
Commits
  • ecabd13 Prepare changelog for 2.0.0 release
  • dc00391 Add error matcher for Rust panics
  • 70de7eb Merge pull request #103 from ChihweiLHBird/reuse-rustc-verbose-output
  • c420b69 Merge pull request #105 from actions-rust-lang/use-build-warnings
  • d94d10a Use CARGO_BUILD_WARNINGS for enforcing warning free compilations
  • 34430aa Reuse rustc verbose output instead of invoking rustc three times.
  • 0267444 Merge pull request #102 from actions-rust-lang/dependabot/github_actions/Swat...
  • 5fa2882 Bump Swatinem/rust-cache from 2.9.1 to 2.9.2
  • 8439c15 Merge pull request #100 from actions-rust-lang/dependabot/github_actions/acti...
  • c8f944a Bump actions/checkout from 7.0.0 to 7.0.1
  • See full diff in compare view

Updates arcboxlabs/actions/.github/workflows/fast-forward.yml from 3b936594d02e187473fbc4ec5f814bbeba2049ac to df45f49fc08a2237044fc03c6044b3923cae22a9

Commits
  • df45f49 docs(r2-publish): note the action runs on Linux runners only
  • e764b25 docs(r2-publish): state the v1/v2 split
  • 2ea8713 docs(r2-publish): consumers pin v2, the R2 publisher is a breaking input change
  • a947878 feat(r2-publish): replace b2-publish with a Cloudflare R2 publisher
  • See full diff in compare view

Updates softprops/action-gh-release from 3.0.2 to 3.0.3

Release notes

Sourced from softprops/action-gh-release's releases.

v3.0.3

3.0.3 is a maintenance release with updated dependencies. It also safely classifies malformed GitHub API errors to avoid secondary failures (#822).

What's Changed

Bug fixes 🐛

Other Changes 🔄

  • dependency updates
Changelog

Sourced from softprops/action-gh-release's changelog.

3.0.3

3.0.3 is a maintenance release with updated dependencies. It also safely classifies malformed GitHub API errors to avoid secondary failures (#822).

What's Changed

Bug fixes 🐛

Other Changes 🔄

  • dependency updates

3.0.2

3.0.2 is a patch release focused on release reliability and compatibility. It reuses existing draft releases when publishing prereleases, supports replacing release assets on Gitea, hardens streamed asset uploads, and provides clearer release-creation diagnostics. It also includes TypeScript, coverage, and tooling maintenance merged since 3.0.1.

This release fixes #795, #438, and #803. The upload transport hardening covers the historical failure reported in #790, although current hosted Node 24 runners did not reproduce it naturally. The diagnostics work is related to #786 and does not claim a reproducible release-creation fix.

What's Changed

Exciting New Features 🎉

Bug fixes 🐛

Other Changes 🔄

3.0.1

  • maintenance release with updated dependencies

... (truncated)

Commits
  • efb3536 release 3.0.3 (#840)
  • 6441963 chore(deps): bump the npm group with 2 updates (#839)
  • e5ee6bc chore(deps): bump esbuild from 0.28.1 to 0.28.2 in the npm group (#837)
  • d1e6617 chore(deps): bump undici from 6.27.0 to 6.28.0 (#831)
  • 6403751 chore(deps): bump the npm group with 2 updates (#835)
  • 7c7184b chore(deps): bump postcss from 8.5.19 to 8.5.25 (#833)
  • 0f3f0d2 chore(deps): bump brace-expansion from 5.0.8 to 5.0.9 (#832)
  • 77fb938 chore(deps): bump prettier from 3.9.5 to 3.9.6 in the npm group (#830)
  • 5a6f517 chore(deps): bump brace-expansion from 5.0.7 to 5.0.8 (#828)
  • a3c91c9 chore(deps): bump the github-actions group with 2 updates (#825)
  • Additional commits viewable in compare view

Updates vedantmgoyal9/winget-releaser from 4ffc7888bffd451b357355dc214d43bb9f23917e to b7370d4d152efdce803a26cc6ca9eee58cb2ad54

Commits
  • b7370d4 docs(funding): remove patreon
  • f29ed1f docs: add Gedochao as a contributor for bug, code, and ideas (#350)
  • c3648cc fix: add missing shell property, rm undefined variable (#346)
  • 8e11800 docs: add ReenigneArcher as a contributor for ideas (#344)
  • d381fbb feat: mv action logic to pwsh, pr url output, support repos across owners (#343)
  • a8fff44 docs: update required permissions (#341)
  • b3a5dae docs: fix allcontributors.com emoji key link (#340)
  • 7bd472b docs: add description to inputs (#335)
  • a43926e fix: cargo command not found in ubuntu-slim runner (#334)
  • 19e706d fix: pwsh doesn't sort sometimes (resolves #323)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the actions-all group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [actions/setup-java](https://github.com/actions/setup-java) | `5.7.0` | `6.0.1` |
| [actions-rust-lang/setup-rust-toolchain](https://github.com/actions-rust-lang/setup-rust-toolchain) | `1` | `2` |
| [arcboxlabs/actions/.github/workflows/fast-forward.yml](https://github.com/arcboxlabs/actions) | `3b936594d02e187473fbc4ec5f814bbeba2049ac` | `df45f49fc08a2237044fc03c6044b3923cae22a9` |
| [softprops/action-gh-release](https://github.com/softprops/action-gh-release) | `3.0.2` | `3.0.3` |
| [vedantmgoyal9/winget-releaser](https://github.com/vedantmgoyal9/winget-releaser) | `4ffc7888bffd451b357355dc214d43bb9f23917e` | `b7370d4d152efdce803a26cc6ca9eee58cb2ad54` |



Updates `actions/setup-java` from 5.7.0 to 6.0.1
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](actions/setup-java@b6effb0...de7274f)

Updates `actions-rust-lang/setup-rust-toolchain` from 1 to 2
- [Release notes](https://github.com/actions-rust-lang/setup-rust-toolchain/releases)
- [Changelog](https://github.com/actions-rust-lang/setup-rust-toolchain/blob/main/CHANGELOG.md)
- [Commits](actions-rust-lang/setup-rust-toolchain@v1...v2)

Updates `arcboxlabs/actions/.github/workflows/fast-forward.yml` from 3b936594d02e187473fbc4ec5f814bbeba2049ac to df45f49fc08a2237044fc03c6044b3923cae22a9
- [Commits](arcboxlabs/actions@3b93659...df45f49)

Updates `softprops/action-gh-release` from 3.0.2 to 3.0.3
- [Release notes](https://github.com/softprops/action-gh-release/releases)
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md)
- [Commits](softprops/action-gh-release@3d0d988...efb3536)

Updates `vedantmgoyal9/winget-releaser` from 4ffc7888bffd451b357355dc214d43bb9f23917e to b7370d4d152efdce803a26cc6ca9eee58cb2ad54
- [Release notes](https://github.com/vedantmgoyal9/winget-releaser/releases)
- [Commits](vedantmgoyal9/winget-releaser@4ffc788...b7370d4)

---
updated-dependencies:
- dependency-name: actions/setup-java
  dependency-version: 6.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions-all
- dependency-name: actions-rust-lang/setup-rust-toolchain
  dependency-version: '2'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions-all
- dependency-name: arcboxlabs/actions/.github/workflows/fast-forward.yml
  dependency-version: df45f49fc08a2237044fc03c6044b3923cae22a9
  dependency-type: direct:production
  dependency-group: actions-all
- dependency-name: softprops/action-gh-release
  dependency-version: 3.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-all
- dependency-name: vedantmgoyal9/winget-releaser
  dependency-version: b7370d4d152efdce803a26cc6ca9eee58cb2ad54
  dependency-type: direct:production
  dependency-group: actions-all
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Oct 12, 2026
@greptile-apps

greptile-apps Bot commented Oct 12, 2026 •

Copy link
Copy Markdown

RetriggerConfidence Score: 5/5

[High impact] The PR appears safe to merge; no actionable issue was established.

Summary

Updates five GitHub Actions dependencies across four workflows.

  • CI jobs use the Rust setup action's v2 release.
  • Android builds use Java setup v6.0.1.
  • Desktop releases use updated GitHub Release and WinGet actions.
  • Fast-forward merges call the shared workflow at a newer revision.

No actionable issue was established.

Reviews (1) · Last reviewed commit: "chore(ci): bump the actions-all group ac..." · Reviewed by Greptile

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants