Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

chore(deps): bump the github-actions-dependencies group across 1 directory with 2 updates

Open
Number: #282
Type: Pull Request
State: Open
Author: dependabot[bot] dependabot[bot]
Association: Unknown
Comments: 1
Created: November 07, 2025 at 04:03 AM UTC
(7 months ago)
Updated: November 07, 2025 at 04:04 AM UTC
(7 months ago)
Labels:
dependencies github_actions
Description:

Bumps the github-actions-dependencies group with 2 updates in the / directory: hoverkraft-tech/ci-github-publish/.github/workflows/release-actions.yml and hoverkraft-tech/ci-github-container/.github/workflows/docker-build-images.yml.

Updates hoverkraft-tech/ci-github-publish/.github/workflows/release-actions.yml from 0.13.1 to 0.14.0

Release notes

Sourced from hoverkraft-tech/ci-github-publish/.github/workflows/release-actions.yml's releases.

0.14.0

Release Summary

No public user-facing changes.

Internal: documentation on actions/workflows was refreshed and the workflow toolkit now depends on hoverkraft-tech/ci-github-container 0.29.0, aligning with recent CI improvements.

Breaking change(s)

Adopting ci-github-container 0.29.0 pulls in a change where image cleanup is handled by a dedicated wrapper action; if your publish workflows rely on custom cleanup steps, review and update them accordingly.

What's Changed

Full Changelog: https://github.com/hoverkraft-tech/ci-github-publish/compare/0.13.1...0.14.0

Commits
  • 38963f3 build(deps): Bump hoverkraft-tech/ci-github-container
  • 9bec103 ci: fix url endpoint for check tests
  • d62405b docs: update actions and workflows documentation
  • See full diff in compare view

Updates hoverkraft-tech/ci-github-container/.github/workflows/docker-build-images.yml from 0.28.0 to 0.29.0

Release notes

Sourced from hoverkraft-tech/ci-github-container/.github/workflows/docker-build-images.yml's releases.

0.29.0

Release Summary

In docker-build-images, caching and signing were optimized and tagging made explicit to reduce unnecessary package versions and prepare for OCI 1.1 referrers. A new dedicated image-cleanup action replaces previous custom deletion logic, simplifying GHCR maintenance.

Internal: CI/doc updates, dependency bumps, linter cleanup, sync-docs integration, and stabilized registry-caching tests improve reliability and consistency.

Breaking change(s)

Image cleanup now uses a dedicated wrapper action (actions/docker/clean-images) around dataaxiom/ghcr-cleanup-action; workflows using custom cleanup steps must switch to this wrapper and review inputs.

What's Changed

New Contributors

Full Changelog: https://github.com/hoverkraft-tech/ci-github-container/compare/0.28.0...0.29.0

Commits
  • e44dc00 chore(deps): bump docker/setup-docker-action
  • ea9c6c7 chore: fix licence link
  • 30cfe87 docs: update actions and workflows documentation
  • 2408dd0 ci: improve tests to pass with workflow_dispatch event
  • c318439 ci: improve tests to pass with workflow_dispatch event
  • 0cbf7fe docs: update actions and workflows documentation
  • 06772f1 chore(deps): bump helm/kind-action
  • 4c1fccb fix(helm/generate-docs): lint generated files
  • 6cf2f10 fix(helm/generate-docs): lint generated files
  • b91bf11 fix(helm/generate-docs): lint generated files
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
Package Dependencies
Package:
hoverkraft-tech/ci-github-publish/.github/workflows/release-actions.yml
Ecosystem:
actions
Version Change:
0.13.1 → 0.14.0
Update Type:
Minor
Package:
hoverkraft-tech/ci-github-container/.github/workflows/docker-build-images.yml
Ecosystem:
actions
Version Change:
0.28.0 → 0.29.0
Update Type:
Minor
Actions
View on GitHub View Repository All Dependabot PRs
Technical Details
ID: 10880737
UUID: 3598594195
Node ID: PR_kwDOJApAdM6yCzlH
Host: GitHub
Repository: hoverkraft-tech/ci-github-nodejs