Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

chore(deps): bump the github-actions-dependencies group across 3 directories with 8 updates

Open
Number: #352
Type: Pull Request
State: Open
Author: dependabot[bot] dependabot[bot]
Association: Unknown
Comments: 3
Created: November 28, 2025 at 04:04 AM UTC
(7 months ago)
Updated: November 30, 2025 at 10:00 PM UTC
(7 months ago)
Labels:
dependencies github_actions
Description:

Bumps the github-actions-dependencies group with 8 updates in the / directory:

Package From To
hoverkraft-tech/ci-github-common/.github/workflows/greetings.yml 0.30.2 0.31.0
hoverkraft-tech/ci-github-publish/.github/workflows/release-actions.yml 0.15.2 0.16.0
hoverkraft-tech/ci-github-common/.github/workflows/need-fix-to-issue.yml 0.30.2 0.31.0
hoverkraft-tech/ci-github-common/.github/workflows/semantic-pull-request.yml 0.30.2 0.31.0
hoverkraft-tech/ci-github-common/.github/workflows/linter.yml 0.30.2 0.31.0
hoverkraft-tech/ci-github-common/.github/workflows/stale.yml 0.30.2 0.31.0
hoverkraft-tech/ci-github-container/.github/workflows/docker-build-images.yml 0.29.1 0.30.0
hoverkraft-tech/ci-github-common 0.30.2 0.31.0

Bumps the github-actions-dependencies group with 1 update in the /actions/lint directory: hoverkraft-tech/ci-github-common.
Bumps the github-actions-dependencies group with 1 update in the /actions/test directory: hoverkraft-tech/ci-github-common.

Updates hoverkraft-tech/ci-github-common/.github/workflows/greetings.yml from 0.30.2 to 0.31.0

Release notes

Sourced from hoverkraft-tech/ci-github-common/.github/workflows/greetings.yml's releases.

0.31.0

Release Summary

Feature: introduces the local-workflow-actions action to simplify using local composite actions. Fix (checkout): default persist-credentials is now false to harden security and prevent unintended token persistence.

Internal: documentation for actions and workflows has been refreshed.

Breaking change(s)

The checkout step now sets persist-credentials: false by default; workflows that rely on persisted GitHub tokens for subsequent Git operations must explicitly opt in or adjust authentication.

What's Changed

Full Changelog: https://github.com/hoverkraft-tech/ci-github-common/compare/0.30.2...0.31.0

Commits
  • a55670b docs: update actions and workflows documentation
  • 09f42e4 chore(deps): bump the github-actions-dependencies group across 3 directories ...
  • e8d06f4 feat: add local-workflow-actions action
  • cdf2bbe docs: update actions and workflows documentation
  • 4faa04a fix(checkout)!: set persist-credentials to false by default for security reason
  • 26b03d1 docs: update actions and workflows documentation
  • See full diff in compare view

Updates hoverkraft-tech/ci-github-publish/.github/workflows/release-actions.yml from 0.15.2 to 0.16.0

Release notes

Sourced from hoverkraft-tech/ci-github-publish/.github/workflows/release-actions.yml's releases.

0.16.0

Release Summary

Fix: forces ArgoCD sync on redeployments when using the hoverkraft-deployment plugin to ensure reliable re-deploys without code changes. 

Internal: actions and workflows documentation refreshed. 

Breaking change(s)

No breaking changes. 

What's Changed

Full Changelog: https://github.com/hoverkraft-tech/ci-github-publish/compare/0.15.2...0.16.0

Commits
  • ed864a8 docs: update actions and workflows documentation
  • e1a381b refactor: rename plugin to hoverkraft-deployment and add conditional check
  • bc2fe44 test: add plugin entry to test template for validation
  • 472f7f3 fix: force ArgoCD sync on redeployment using plugin environment variable
  • a6df652 refactor: replace operation block with plugin env update for sync detection
  • 9c9b5d0 feat: add ArgoCD refresh behavior timestamp to force sync on every deployment
  • d2b9385 docs: update actions and workflows documentation
  • a631cc8 build(deps): Bump the github-actions-dependencies group across 5 directories ...
  • See full diff in compare view

Updates hoverkraft-tech/ci-github-common/.github/workflows/need-fix-to-issue.yml from 0.30.2 to 0.31.0

Release notes

Sourced from hoverkraft-tech/ci-github-common/.github/workflows/need-fix-to-issue.yml's releases.

0.31.0

Release Summary

Feature: introduces the local-workflow-actions action to simplify using local composite actions. Fix (checkout): default persist-credentials is now false to harden security and prevent unintended token persistence.

Internal: documentation for actions and workflows has been refreshed.

Breaking change(s)

The checkout step now sets persist-credentials: false by default; workflows that rely on persisted GitHub tokens for subsequent Git operations must explicitly opt in or adjust authentication.

What's Changed

Full Changelog: https://github.com/hoverkraft-tech/ci-github-common/compare/0.30.2...0.31.0

Commits
  • a55670b docs: update actions and workflows documentation
  • 09f42e4 chore(deps): bump the github-actions-dependencies group across 3 directories ...
  • e8d06f4 feat: add local-workflow-actions action
  • cdf2bbe docs: update actions and workflows documentation
  • 4faa04a fix(checkout)!: set persist-credentials to false by default for security reason
  • 26b03d1 docs: update actions and workflows documentation
  • See full diff in compare view

Updates hoverkraft-tech/ci-github-common/.github/workflows/semantic-pull-request.yml from 0.30.2 to 0.31.0

Release notes

Sourced from hoverkraft-tech/ci-github-common/.github/workflows/semantic-pull-request.yml's releases.

0.31.0

Release Summary

Feature: introduces the local-workflow-actions action to simplify using local composite actions. Fix (checkout): default persist-credentials is now false to harden security and prevent unintended token persistence.

Internal: documentation for actions and workflows has been refreshed.

Breaking change(s)

The checkout step now sets persist-credentials: false by default; workflows that rely on persisted GitHub tokens for subsequent Git operations must explicitly opt in or adjust authentication.

What's Changed

Full Changelog: https://github.com/hoverkraft-tech/ci-github-common/compare/0.30.2...0.31.0

Commits
  • a55670b docs: update actions and workflows documentation
  • 09f42e4 chore(deps): bump the github-actions-dependencies group across 3 directories ...
  • e8d06f4 feat: add local-workflow-actions action
  • cdf2bbe docs: update actions and workflows documentation
  • 4faa04a fix(checkout)!: set persist-credentials to false by default for security reason
  • 26b03d1 docs: update actions and workflows documentation
  • See full diff in compare view

Updates hoverkraft-tech/ci-github-common/.github/workflows/linter.yml from 0.30.2 to 0.31.0

Release notes

Sourced from hoverkraft-tech/ci-github-common/.github/workflows/linter.yml's releases.

0.31.0

Release Summary

Feature: introduces the local-workflow-actions action to simplify using local composite actions. Fix (checkout): default persist-credentials is now false to harden security and prevent unintended token persistence.

Internal: documentation for actions and workflows has been refreshed.

Breaking change(s)

The checkout step now sets persist-credentials: false by default; workflows that rely on persisted GitHub tokens for subsequent Git operations must explicitly opt in or adjust authentication.

What's Changed

Full Changelog: https://github.com/hoverkraft-tech/ci-github-common/compare/0.30.2...0.31.0

Commits
  • a55670b docs: update actions and workflows documentation
  • 09f42e4 chore(deps): bump the github-actions-dependencies group across 3 directories ...
  • e8d06f4 feat: add local-workflow-actions action
  • cdf2bbe docs: update actions and workflows documentation
  • 4faa04a fix(checkout)!: set persist-credentials to false by default for security reason
  • 26b03d1 docs: update actions and workflows documentation
  • See full diff in compare view

Updates hoverkraft-tech/ci-github-common/.github/workflows/stale.yml from 0.30.2 to 0.31.0

Release notes

Sourced from hoverkraft-tech/ci-github-common/.github/workflows/stale.yml's releases.

0.31.0

Release Summary

Feature: introduces the local-workflow-actions action to simplify using local composite actions. Fix (checkout): default persist-credentials is now false to harden security and prevent unintended token persistence.

Internal: documentation for actions and workflows has been refreshed.

Breaking change(s)

The checkout step now sets persist-credentials: false by default; workflows that rely on persisted GitHub tokens for subsequent Git operations must explicitly opt in or adjust authentication.

What's Changed

Full Changelog: https://github.com/hoverkraft-tech/ci-github-common/compare/0.30.2...0.31.0

Commits
  • a55670b docs: update actions and workflows documentation
  • 09f42e4 chore(deps): bump the github-actions-dependencies group across 3 directories ...
  • e8d06f4 feat: add local-workflow-actions action
  • cdf2bbe docs: update actions and workflows documentation
  • 4faa04a fix(checkout)!: set persist-credentials to false by default for security reason
  • 26b03d1 docs: update actions and workflows documentation
  • See full diff in compare view

Updates hoverkraft-tech/ci-github-container/.github/workflows/docker-build-images.yml from 0.29.1 to 0.30.0

Release notes

Sourced from hoverkraft-tech/ci-github-container/.github/workflows/docker-build-images.yml's releases.

0.30.0

Release Summary

Features (docker): upgraded BuildKit and Buildx.

Internal changes: CI test stability improvements for tag push and workflow_dispatch events, documentation refresh, and GitHub Actions dependency bumps.

Breaking change(s)

No breaking changes.

What's Changed

Full Changelog: https://github.com/hoverkraft-tech/ci-github-container/compare/0.29.1...0.30.0

Commits
  • 0d92511 chore(deps): bump the github-actions-dependencies group across 7 directories ...
  • e1a9e05 feat(docker): upgrade buildkit and buildx
  • 02e761d chore(deps): bump the github-actions-dependencies group across 7 directories ...
  • 83f97ee chore(deps): bump the github-actions-dependencies group across 7 directories ...
  • fd3b3f5 docs: update actions and workflows documentation
  • ce170ef ci: add workflow to check semantic pull requests
  • 2cf87c4 ci: fix failing test on workflow_dispatch event
  • 63efcb8 chore(deps): bump hoverkraft-tech/ci-github-publish/.github/workflows/release...
  • 3fe7366 docs: update actions and workflows documentation
  • 564b5a3 Revert cleanup script changes per review feedback
  • Additional commits viewable in compare view

Updates hoverkraft-tech/ci-github-common from 0.30.2 to 0.31.0

Release notes

Sourced from hoverkraft-tech/ci-github-common's releases.

0.31.0

Release Summary

Feature: introduces the local-workflow-actions action to simplify using local composite actions. Fix (checkout): default persist-credentials is now false to harden security and prevent unintended token persistence.

Internal: documentation for actions and workflows has been refreshed.

Breaking change(s)

The checkout step now sets persist-credentials: false by default; workflows that rely on persisted GitHub tokens for subsequent Git operations must explicitly opt in or adjust authentication.

What's Changed

Full Changelog: https://github.com/hoverkraft-tech/ci-github-common/compare/0.30.2...0.31.0

Commits
  • a55670b docs: update actions and workflows documentation
  • 09f42e4 chore(deps): bump the github-actions-dependencies group across 3 directories ...
  • e8d06f4 feat: add local-workflow-actions action
  • cdf2bbe docs: update actions and workflows documentation
  • 4faa04a fix(checkout)!: set persist-credentials to false by default for security reason
  • 26b03d1 docs: update actions and workflows documentation
  • See full diff in compare view

Updates hoverkraft-tech/ci-github-common from 0.30.2 to 0.31.0

Release notes

Sourced from hoverkraft-tech/ci-github-common's releases.

0.31.0

Release Summary

Feature: introduces the local-workflow-actions action to simplify using local composite actions. Fix (checkout): default persist-credentials is now false to harden security and prevent unintended token persistence.

Internal: documentation for actions and workflows has been refreshed.

Breaking change(s)

The checkout step now sets persist-credentials: false by default; workflows that rely on persisted GitHub tokens for subsequent Git operations must explicitly opt in or adjust authentication.

What's Changed

Full Changelog: https://github.com/hoverkraft-tech/ci-github-common/compare/0.30.2...0.31.0

Commits
  • a55670b docs: update actions and workflows documentation
  • 09f42e4 chore(deps): bump the github-actions-dependencies group across 3 directories ...
  • e8d06f4 feat: add local-workflow-actions action
  • cdf2bbe docs: update actions and workflows documentation
  • 4faa04a fix(checkout)!: set persist-credentials to false by default for security reason
  • 26b03d1 docs: update actions and workflows documentation
  • See full diff in compare view

Updates hoverkraft-tech/ci-github-common from 0.30.2 to 0.31.0

Release notes

Sourced from hoverkraft-tech/ci-github-common's releases.

0.31.0

Release Summary

Feature: introduces the local-workflow-actions action to simplify using local composite actions. Fix (checkout): default persist-credentials is now false to harden security and prevent unintended token persistence.

Internal: documentation for actions and workflows has been refreshed.

Breaking change(s)

The checkout step now sets persist-credentials: false by default; workflows that rely on persisted GitHub tokens for subsequent Git operations must explicitly opt in or adjust authentication.

What's Changed

Full Changelog: https://github.com/hoverkraft-tech/ci-github-common/compare/0.30.2...0.31.0

Commits
  • a55670b docs: update actions and workflows documentation
  • 09f42e4 chore(deps): bump the github-actions-dependencies group across 3 directories ...
  • e8d06f4 feat: add local-workflow-actions action
  • cdf2bbe docs: update actions and workflows documentation
  • 4faa04a fix(checkout)!: set persist-credentials to false by default for security reason
  • 26b03d1 docs: update actions and workflows documentation
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
Package Dependencies
Package:
hoverkraft-tech/ci-github-common
Ecosystem:
actions
Version Change:
0.30.2 → 0.31.0
Update Type:
Minor
Package:
hoverkraft-tech/ci-github-common/.github/workflows/need-fix-to-issue.yml
Ecosystem:
actions
Version Change:
0.30.2 → 0.31.0
Update Type:
Minor
Package:
hoverkraft-tech/ci-github-common/.github/workflows/stale.yml
Ecosystem:
actions
Version Change:
0.30.2 → 0.31.0
Update Type:
Minor
Package:
hoverkraft-tech/ci-github-common/.github/workflows/linter.yml
Ecosystem:
actions
Version Change:
0.30.2 → 0.31.0
Update Type:
Minor
Package:
hoverkraft-tech/ci-github-common/.github/workflows/greetings.yml
Ecosystem:
actions
Version Change:
0.30.2 → 0.31.0
Update Type:
Minor
Package:
hoverkraft-tech/ci-github-common/.github/workflows/semantic-pull-request.yml
Ecosystem:
actions
Version Change:
0.30.2 → 0.31.0
Update Type:
Minor
Package:
hoverkraft-tech/ci-github-publish/.github/workflows/release-actions.yml
Ecosystem:
actions
Version Change:
0.15.2 → 0.16.0
Update Type:
Minor
Package:
hoverkraft-tech/ci-github-container/.github/workflows/docker-build-images.yml
Ecosystem:
actions
Version Change:
0.29.1 → 0.30.0
Update Type:
Minor
Actions
View on GitHub View Repository All Dependabot PRs
Technical Details
ID: 11459483
UUID: 3673541387
Node ID: PR_kwDOJApAdM619usQ
Host: GitHub
Repository: hoverkraft-tech/ci-github-nodejs