An open index of dependabot pull requests across open source projects.

build(deps): bump the actions group with 4 updates

Closed
Number: #1
Type: Pull Request
State: Closed
Author: dependabot[bot] dependabot[bot]
Association: Contributor
Comments: 1
Created: July 27, 2025 at 12:45 PM UTC
(about 2 months ago)
Updated: August 06, 2025 at 04:32 PM UTC
(about 1 month ago)
Closed: August 06, 2025 at 04:32 PM UTC
(about 1 month ago)
Time to Close: 10 days
Labels:
dependencies github_actions
Description:

Bumps the actions group with 4 updates: actions/checkout, actions/upload-artifact, actions/setup-java and KyleMayes/install-llvm-action.

Updates actions/checkout from 3 to 4

Release notes

Sourced from actions/checkout's releases.

v4.0.0

What's Changed

New Contributors

Full Changelog: https://github.com/actions/checkout/compare/v3...v4.0.0

v3.6.0

What's Changed

New Contributors

Full Changelog: https://github.com/actions/checkout/compare/v3.5.3...v3.6.0

v3.5.3

What's Changed

New Contributors

Full Changelog: https://github.com/actions/checkout/compare/v3...v3.5.3

v3.5.2

What's Changed

Full Changelog: https://github.com/actions/checkout/compare/v3.5.1...v3.5.2

v3.5.1

What's Changed

New Contributors

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

v4.2.2

v4.2.1

v4.2.0

v4.1.7

v4.1.6

v4.1.5

v4.1.4

v4.1.3

v4.1.2

v4.1.1

v4.1.0

... (truncated)

Commits

Updates actions/upload-artifact from 3 to 4

Release notes

Sourced from actions/upload-artifact's releases.

v4.0.0

What's Changed

The release of upload-artifact@v4 and download-artifact@v4 are major changes to the backend architecture of Artifacts. They have numerous performance and behavioral improvements.

ℹ️ However, this is a major update that includes breaking changes. Artifacts created with versions v3 and below are not compatible with the v4 actions. Uploads and downloads must use the same major actions versions. There are also key differences from previous versions that may require updates to your workflows.

For more information, please see:

  1. The changelog post.
  2. The README.
  3. The migration documentation.
  4. As well as the underlying npm package, @​actions/artifact documentation.

New Contributors

Full Changelog: https://github.com/actions/upload-artifact/compare/v3...v4.0.0

v3.2.1

What's Changed

This fixes the include-hidden-files input introduced in https://github.com/actions/upload-artifact/releases/tag/v3.2.0

Full Changelog: https://github.com/actions/upload-artifact/compare/v3.2.0...v3.2.1

v3.2.1-node20

What's Changed

This fixes the include-hidden-files input introduced in https://github.com/actions/upload-artifact/releases/tag/v3.2.0-node20

Full Changelog: https://github.com/actions/upload-artifact/compare/v3.2.0-node20...v3.2.1-node20

v3.2.0

Notice: Breaking Changes :warning:

We will no longer include hidden files and folders by default in the upload-artifact action of this version. This reduces the risk that credentials are accidentally uploaded into artifacts. Customers who need to continue to upload these files can use a new option, include-hidden-files, to continue to do so.

See "Notice of upcoming deprecations and breaking changes in GitHub Actions runners" changelog and this issue for more details.

What's Changed

... (truncated)

Commits
  • ea165f8 Merge pull request #685 from salmanmkc/salmanmkc/3-new-upload-artifacts-release
  • 0839620 Prepare for new release of actions/upload-artifact with new toolkit cache ver...
  • 4cec3d8 Merge pull request #673 from actions/yacaovsnc/artifact_2.2.2
  • e9fad96 license cache update for artifact
  • b26fd06 Update to use artifact 2.2.2 package
  • 65c4c4a Merge pull request #662 from actions/yacaovsnc/add_variable_for_concurrency_a...
  • 0207619 move files back to satisfy licensed ci
  • 1ecca81 licensed cache updates
  • 9742269 Expose env vars to controll concurrency and timeout
  • 6f51ac0 Merge pull request #656 from bdehamer/bdehamer/artifact-digest
  • Additional commits viewable in compare view

Updates actions/setup-java from 3 to 4

Release notes

Sourced from actions/setup-java's releases.

v4.0.0

What's Changed

In the scope of this release, the version of the Node.js runtime was updated to 20. The majority of dependencies were updated to the latest versions. From now on, the code for the setup-java will run on Node.js 20 instead of Node.js 16.

Breaking changes

Non-breaking changes

New Contributors

Full Changelog: https://github.com/actions/setup-java/compare/v3...v4.0.0

v3.14.1

What's Changed

Full Changelog: https://github.com/actions/setup-java/compare/v3...v3.14.1

v3.14.0

What's Changed

  • Upgrade @​action/cache to 4.0.3 by @​aparnajyothi-y in actions/setup-java#790. In scope of this release we updated actions/cache package to ensure continued support and compatibility, as older versions of the package are now deprecated. For more information please refer to the toolkit/cache.

Full Changelog: https://github.com/actions/setup-java/compare/v3...v3.14.0

v3.13.0

What's changed

In the scope of this release, support for Dragonwell JDK was added by @​Accelerator1996 in actions/setup-java#532

steps:
 - name: Checkout
   uses: actions/checkout@v3
 - name: Setup-java
   uses: actions/setup-java@v3
   with:
     distribution: 'dragonwell'
     java-version: '17'

... (truncated)

Commits
  • c5195ef actions/cache upgrade to 4.0.3 (#773)
  • dd38875 Bump ts-jest from 29.1.2 to 29.2.5 (#743)
  • 148017a Bump @​actions/glob from 0.4.0 to 0.5.0 (#744)
  • 3b6c050 Remove duplicated GraalVM section in documentation (#716)
  • b8ebb8b upgrade @​action/cache from 4.0.0 to 4.0.2 (#766)
  • 799ee7c Add Documentation to Recommend Using GraalVM JDK 17 Version to 17.0.12 to Ali...
  • 3a4f6e1 Bump @​types/jest from 29.5.12 to 29.5.14 (#729)
  • 25f376e Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 (#727)
  • d4e4b6b Bump @​actions/http-client from 2.2.1 to 2.2.3 (#728)
  • 28b532b Create dependabot.yml (#722)
  • Additional commits viewable in compare view

Updates KyleMayes/install-llvm-action from 1 to 2

Release notes

Sourced from KyleMayes/install-llvm-action's releases.

v2.0.0

Migrating from v1

  • Support for LLVM and Clang 3.5 through 7.0 has been removed (use 7.1 or later)
  • The download-url input has been renamed to mirror-url
  • The force-version and ubuntu-version inputs have been replaced with the force-url input

Other Changes

  • Added arch input
  • Added support for various missing LLVM and Clang versions up to 18.1.2

v1.9.0

  • Add support for LLVM 17 (binaries not available for macOS runners)
  • Update dependencies and use node20 runner
  • Fix downloadUrl option usage on Linux and Windows runners (#57)

v1.8.3

No release notes provided.

v1.8.2

No release notes provided.

v1.8.1

No release notes provided.

v1.8.0

  • Support for LLVM 15.0.7
  • Support for LLVM 16.0.0 (except on macOS because LLVM 16.0.0 was not released for that platform)

v1.7.0

No release notes provided.

v1.6.1

No release notes provided.

v1.6.0

No release notes provided.

v1.5.5

No release notes provided.

v1.5.4

No release notes provided.

v1.5.3

No release notes provided.

v1.5.2

No release notes provided.

... (truncated)

Changelog

Sourced from KyleMayes/install-llvm-action's changelog.

[2.0.7] - 2025-05-02

  • Added support for LLVM and Clang 20 (and some more 18 and 19 versions)

[2.0.6] - 2025-02-24

  • Added support for LLVM and Clang 19

[2.0.5] - 2024-09-08

  • Added support for LLVM and Clang 18.1.8 on ARM64 macOS
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
Pull Request Statistics
Commits:
1
Files Changed:
2
Additions:
+4
Deletions:
-4
Package Dependencies
Ecosystem:
actions
Version Change:
3 → 4
Ecosystem:
actions
Version Change:
3 → 4
Ecosystem:
actions
Version Change:
3 → 4
Ecosystem:
actions
Version Change:
1 → 2
Technical Details
ID: 4181838
UUID: 2698257589
Node ID: PR_kwDOPTkn6s6g1CS1
Host: GitHub
Repository: xhgg606/https-github.com-Winkmoon-KernelSU
Mergeable: Yes
Merge State: Unstable