guillaume.hausknecht/arcenal-agent

Watch

Fork 0

chore(actions)(deps): bump the actions-minor-patch group across 1 directory with 5 updates #1

Open

dependabot[bot] wants to merge 1 commit from dependabot/github_actions/actions-minor-patch-5760f6059a into arcenal

dependabot[bot] commented

2026-09-03 12:52:18 +00:00

(Migrated from github.com)

Bumps the actions-minor-patch group with 5 updates in the / directory:

Package	From	To
hadolint/hadolint-action	`3.1.0`	`3.5.0`
docker/build-push-action	`7.1.0`	`7.4.0`
docker/login-action	`4.1.0`	`4.6.0`
cachix/install-nix-action	`31.11.0`	`31.11.1`
google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml	`2.3.8`	`2.6.0`

Updates hadolint/hadolint-action from 3.1.0 to 3.5.0

Release notes

Sourced from hadolint/hadolint-action's releases.

v3.5.0

3.5.0 (2026-08-24)

Features

Bump Hadolint to v2.15.1 (941db07)

v3.4.0

3.4.0 (2026-07-30)

Features

Bump Hadolint to v2.15.0 (2a66e89)

v3.3.0

3.3.0 (2025-09-22)

Features

trigger release workflow (2332a7b)

v3.2.0

3.2.0 (2025-09-03)

Features

new minor release (3fc49fb)

Commits

06be81b Merge pull request #107 from gizero/bump-hadolint-base-image-to-2.15.1
941db07 feat: Bump Hadolint to v2.15.1
d0e9595 Merge pull request #106 from m-ildefons/gh-78
df662ab Problem Matcher: Capture code and severity
32c6895 Merge pull request #85 from rjbell4/patch-1
146301c Merge pull request #105 from m-ildefons/gh-100
df8eaaf CI: run integration tests with different runners
2a66e89 feat: Bump Hadolint to v2.15.0
2332a7b feat: trigger release workflow
2bfd2b9 Don't trigger release workflow on Tag
Additional commits viewable in compare view

Updates docker/build-push-action from 7.1.0 to 7.4.0

Release notes

Sourced from docker/build-push-action's releases.

v7.4.0

Use the shared error helper for Buildx commands by @crazy-max in docker/build-push-action#1620

Prevent workflow command injection in metadata logs by @crazy-max in docker/build-push-action#1617

Bump @docker/actions-toolkit from 0.92.0 to 0.100.0 in docker/build-push-action#1614 docker/build-push-action#1618 docker/build-push-action#1621

Bump @humanfs/node from 0.16.7 to 0.16.8 in docker/build-push-action#1609

Bump brace-expansion from 1.1.13 to 1.1.18 in docker/build-push-action#1592

Bump csv-parse from 7.0.0 to 7.0.2 in docker/build-push-action#1613

Bump js-yaml from 4.3.0 to 4.3.2 in docker/build-push-action#1605 docker/build-push-action#1615

Bump nanoid from 3.3.16 to 3.3.18 in docker/build-push-action#1611

Bump postcss from 8.5.10 to 8.5.25 in docker/build-push-action#1590

Bump postcss-selector-parser from 7.1.1 to 7.1.5 in docker/build-push-action#1606

Bump sigstore from 4.1.0 to 4.1.1 in docker/build-push-action#1577

Bump undici from 6.27.0 to 6.28.0 in docker/build-push-action#1594

Full Changelog: https://github.com/docker/build-push-action/compare/v7.3.0...v7.4.0

v7.3.0

Preserve names in esbuild bundle by @crazy-max in docker/build-push-action#1567

Bump @docker/actions-toolkit from 0.90.0 to 0.92.0 in docker/build-push-action#1545 docker/build-push-action#1572

Bump @sigstore/core from 3.1.0 to 3.2.1 in docker/build-push-action#1568

Bump js-yaml from 4.1.1 to 4.3.0 in docker/build-push-action#1566

Bump tmp from 0.2.5 to 0.2.7 in docker/build-push-action#1547

Bump undici from 6.24.1 to 6.27.0 in docker/build-push-action#1564

Bump vite from 7.3.2 to 7.3.6 in docker/build-push-action#1563

Full Changelog: https://github.com/docker/build-push-action/compare/v7.2.0...v7.3.0

v7.2.0

Bump @actions/core from 3.0.0 to 3.0.1 in docker/build-push-action#1525

Bump @docker/actions-toolkit from 0.87.0 to 0.90.0 in docker/build-push-action#1517

Bump brace-expansion from 2.0.2 to 5.0.6 in docker/build-push-action#1534

Bump fast-xml-builder from 1.1.4 to 1.2.0 in docker/build-push-action#1529

Bump fast-xml-parser from 5.5.7 to 5.8.0 in docker/build-push-action#1521

Bump postcss from 8.5.6 to 8.5.10 in docker/build-push-action#1526

Bump tar from 6.2.1 to 7.5.15 in docker/build-push-action#1533

Full Changelog: https://github.com/docker/build-push-action/compare/v7.1.0...v7.2.0

Commits

c3c9e26 Merge pull request #1621 from docker/dependabot/npm_and_yarn/docker/actions-t...
459b674 [dependabot skip] chore: update generated content
4dedcb2 chore(deps): Bump @docker/actions-toolkit from 0.99.0 to 0.100.0
379bf63 Merge pull request #1620 from crazy-max/buildx-error-message
9877975 chore: update generated content
7ed0556 use the shared Buildx error summary helper
91670ba Merge pull request #1618 from docker/dependabot/npm_and_yarn/docker/actions-t...
80dbc86 [dependabot skip] chore: update generated content
50cac3a chore(deps): Bump @docker/actions-toolkit from 0.98.0 to 0.99.0
03b4d6c Merge pull request #1617 from crazy-max/fix-metadata-workflow-commands
Additional commits viewable in compare view

Updates docker/login-action from 4.1.0 to 4.6.0

Release notes

Sourced from docker/login-action's releases.

v4.6.0

Harden buildx scoped config path handling by @crazy-max in docker/login-action#1059

Bump @aws-sdk/client-ecr and @aws-sdk/client-ecr-public to 3.1095.0 in docker/login-action#1051

Bump js-yaml from 5.2.1 to 5.2.2 in docker/login-action#1057

Bump postcss from 8.5.10 to 8.5.22 in docker/login-action#1056

Full Changelog: https://github.com/docker/login-action/compare/v4.5.2...v4.6.0

v4.5.2

Surface Docker Hub OIDC error responses by @crazy-max in docker/login-action#1058

Full Changelog: https://github.com/docker/login-action/compare/v4.5.1...v4.5.2

v4.5.1

Support dhi.io as Docker Hub OIDC registry by @crazy-max in docker/login-action#1054

Full Changelog: https://github.com/docker/login-action/compare/v4.5.0...v4.5.1

v4.5.0

Docker Hub OIDC login support by @crazy-max in docker/login-action#1048

Bump @aws-sdk/client-ecr and @aws-sdk/client-ecr-public to 3.1091.0 in docker/login-action#1037

Bump @docker/actions-toolkit from 0.92.0 to 0.94.0 in docker/login-action#1044 docker/login-action#1050

Bump brace-expansion from 1.1.13 to 1.1.16 in docker/login-action#1046

Bump js-yaml from 5.2.0 to 5.2.1 in docker/login-action#1038

Full Changelog: https://github.com/docker/login-action/compare/v4.4.0...v4.5.0

v4.4.0

Skip empty registry-auth secret mask by @crazy-max in docker/login-action#1035

Bump @aws-sdk/client-ecr and @aws-sdk/client-ecr-public to 3.1077.0 docker/login-action#1034

Full Changelog: https://github.com/docker/login-action/compare/v4.3.0...v4.4.0

v4.3.0

Preserve names in esbuild bundle by @crazy-max in docker/login-action#1022

Bump @aws-sdk/client-ecr and @aws-sdk/client-ecr-public to 3.1076.0 docker/login-action#999 docker/login-action#1030

Bump @docker/actions-toolkit from 0.90.0 to 0.92.0 in docker/login-action#1004 docker/login-action#1027

Bump @sigstore/core from 3.1.0 to 3.2.1 in docker/login-action#1023

Bump @sigstore/verify from 3.1.0 to 3.1.1 in docker/login-action#1029

Bump http-proxy-agent and https-proxy-agent to 9.1.0 in docker/login-action#1017

Bump js-yaml from 4.1.1 to 5.2.0 in docker/login-action#1028

Bump sigstore from 4.1.0 to 4.1.1 in docker/login-action#1031

Bump tmp from 0.2.5 to 0.2.7 in docker/login-action#1002

Bump undici from 6.24.1 to 6.27.0 in docker/login-action#1020

Bump vite from 7.3.3 to 7.3.6 in docker/login-action#1019

Full Changelog: https://github.com/docker/login-action/compare/v4.2.0...v4.3.0

v4.2.0

Bump @actions/core from 3.0.0 to 3.0.1 in docker/login-action#976

... (truncated)

Commits

dbcb813 Merge pull request #1051 from docker/dependabot/npm_and_yarn/aws-sdk-dependen...
5bcb015 [dependabot skip] chore: update generated content
b30b2f2 build(deps): bump the aws-sdk-dependencies group across 1 directory with 2 up...
9087f1e Merge pull request #1057 from docker/dependabot/npm_and_yarn/js-yaml-5.2.2
0009830 [dependabot skip] chore: update generated content
2325523 build(deps): bump js-yaml from 5.2.1 to 5.2.2
4ec1d4a Merge pull request #1056 from docker/dependabot/npm_and_yarn/postcss-8.5.22
5fc99ba Merge pull request #1053 from docker/dependabot/github_actions/aws-actions/co...
e512bd5 Merge pull request #1052 from docker/dependabot/github_actions/codeql-actions...
a146c91 Merge pull request #1059 from crazy-max/harden-buildx-scope-paths
Additional commits viewable in compare view

Updates cachix/install-nix-action from 31.11.0 to 31.11.1

Release notes

Sourced from cachix/install-nix-action's releases.

v31.11.1

What's Changed

nix: 2.35.1 -> 2.35.2 by @github-actions[bot] in cachix/install-nix-action#281 Fixes a crash (Assertion '!awake.empty()' failed) that could abort builds.

Full Changelog: https://github.com/cachix/install-nix-action/compare/v31.11.0...v31.11.1

Commits

13d8dd5 fix(ci): skip latest installer on x86_64-darwin
875018f Merge pull request #281 from cachix/create-pull-request/patch
6624a11 nix: 2.35.1 -> 2.35.2
See full diff in compare view

Updates google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml from 2.3.8 to 2.6.0

Release notes

Sourced from google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml's releases.

v2.6.0

What's Changed

Fix JSON results export by @thomasleplus in google/osv-scanner-action#142

Fail the job when a scan does not complete by @alimony in google/osv-scanner-action#139

chore: Update to v2.6.0 by @another-rex in google/osv-scanner-action#144

New Contributors

@alimony made their first contribution in google/osv-scanner-action#139

@thomasleplus made their first contribution in google/osv-scanner-action#142

Full Changelog: https://github.com/google/osv-scanner-action/compare/v2.5.1...v2.6.0

v2.5.1

This updates OSV-Scanner to v2.3.8.

What's Changed

Update actions/checkout action to v7 by @renovate-bot in google/osv-scanner-action#133

Fixes:

Preserve package namespaces when querying osv.dev API (fixes #2978).

Re-add support for the OSV_SCANNER_LOCAL_DB_CACHE_DIRECTORY environment variable (fixes #2983).

Fix local vulnerability matching (--offline-vulnerabilities) not working when network capability is NetworkOnline.

Full Changelog: https://github.com/google/osv-scanner-action/compare/v2.5.0...v2.5.1

v2.5.0

This updates OSV-Scanner to v2.5.0 as well as:

What's Changed

feat: gate reusable workflow outputs with a flag by @another-rex in google/osv-scanner-action#130

Pin download-artifact action to SHA by @SVilgelm in google/osv-scanner-action#127

feat: add runs-on input to reusable workflows by @BeyondEvil in google/osv-scanner-action#131

fix: address zizmor warnings by @another-rex in google/osv-scanner-action#135

fix: add GOTOOLCHAIN=auto env to osv-scanner calls by @another-rex in google/osv-scanner-action#138

New Contributors

@SVilgelm made their first contribution in google/osv-scanner-action#127

@BeyondEvil made their first contribution in google/osv-scanner-action#131

Full Changelog: https://github.com/google/osv-scanner-action/compare/v2.3.8...v2.5.0

Commits

a345acf Merge pull request #144 from google/update-to-v2.6.0
6b289e0 Update unified workflow example to point to v2.6.0 reusable workflows
c7c7bcb Update reusable workflows to point to v2.6.0 actions
7f58dd6 "Update actions to use v2.6.0 osv-scanner image"
8e5cf47 Merge pull request #139 from alimony/fail-closed-on-incomplete-scan
bf5f924 Merge remote-tracking branch 'upstream/main' into fail-closed-on-incomplete-scan
ffa0a5f Merge pull request #142 from google/fix-json-export-code
259ba4a Fix JSON results export
6e4298e Merge pull request #141 from google/update-to-v2.5.1
5957b4e Update unified workflow example to point to v2.5.1 reusable workflows
Additional commits viewable in compare view

Bumps the actions-minor-patch group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [hadolint/hadolint-action](https://github.com/hadolint/hadolint-action) | `3.1.0` | `3.5.0` | | [docker/build-push-action](https://github.com/docker/build-push-action) | `7.1.0` | `7.4.0` | | [docker/login-action](https://github.com/docker/login-action) | `4.1.0` | `4.6.0` | | [cachix/install-nix-action](https://github.com/cachix/install-nix-action) | `31.11.0` | `31.11.1` | | [google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml](https://github.com/google/osv-scanner-action) | `2.3.8` | `2.6.0` | Updates `hadolint/hadolint-action` from 3.1.0 to 3.5.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/hadolint/hadolint-action/releases">hadolint/hadolint-action's releases</a>.</em></p> <blockquote> <h2>v3.5.0</h2> <h1><a href="https://github.com/hadolint/hadolint-action/compare/v3.4.0...v3.5.0">3.5.0</a> (2026-08-24)</h1> <h3>Features</h3> <ul> <li>Bump Hadolint to v2.15.1 (<a href="https://github.com/hadolint/hadolint-action/commit/941db0791d5d2906c0688cdfeb142afc2026e9a5">941db07</a>)</li> </ul> <h2>v3.4.0</h2> <h1><a href="https://github.com/hadolint/hadolint-action/compare/v3.3.0...v3.4.0">3.4.0</a> (2026-07-30)</h1> <h3>Features</h3> <ul> <li>Bump Hadolint to v2.15.0 (<a href="https://github.com/hadolint/hadolint-action/commit/2a66e89f53d0771bb131a7fa31f3136336094aa6">2a66e89</a>)</li> </ul> <h2>v3.3.0</h2> <h1><a href="https://github.com/hadolint/hadolint-action/compare/v3.2.0...v3.3.0">3.3.0</a> (2025-09-22)</h1> <h3>Features</h3> <ul> <li>trigger release workflow (<a href="https://github.com/hadolint/hadolint-action/commit/2332a7b74a6de0dda2e2221d575162eba76ba5e5">2332a7b</a>)</li> </ul> <h2>v3.2.0</h2> <h1><a href="https://github.com/hadolint/hadolint-action/compare/v3.1.0...v3.2.0">3.2.0</a> (2025-09-03)</h1> <h3>Features</h3> <ul> <li>new minor release (<a href="https://github.com/hadolint/hadolint-action/commit/3fc49fb50d59c6ab7917a2e4195dba633e515b29">3fc49fb</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/hadolint/hadolint-action/commit/06be81baf89a55ffd0e24b8f04a4185738dd3387"><code>06be81b</code></a> Merge pull request <a href="https://redirect.github.com/hadolint/hadolint-action/issues/107">#107</a> from gizero/bump-hadolint-base-image-to-2.15.1</li> <li><a href="https://github.com/hadolint/hadolint-action/commit/941db0791d5d2906c0688cdfeb142afc2026e9a5"><code>941db07</code></a> feat: Bump Hadolint to v2.15.1</li> <li><a href="https://github.com/hadolint/hadolint-action/commit/d0e9595267e318f60cfb87e46a36191931e75083"><code>d0e9595</code></a> Merge pull request <a href="https://redirect.github.com/hadolint/hadolint-action/issues/106">#106</a> from m-ildefons/<a href="https://redirect.github.com/hadolint/hadolint-action/issues/78">gh-78</a></li> <li><a href="https://github.com/hadolint/hadolint-action/commit/df662ab7a1f3ea4c2fe010d242dbda3a079a57b5"><code>df662ab</code></a> Problem Matcher: Capture code and severity</li> <li><a href="https://github.com/hadolint/hadolint-action/commit/32c6895df40d4c982b0de822c4c8536908def4d8"><code>32c6895</code></a> Merge pull request <a href="https://redirect.github.com/hadolint/hadolint-action/issues/85">#85</a> from rjbell4/patch-1</li> <li><a href="https://github.com/hadolint/hadolint-action/commit/146301c88f3177f4e61f3049a62b1c839939a00a"><code>146301c</code></a> Merge pull request <a href="https://redirect.github.com/hadolint/hadolint-action/issues/105">#105</a> from m-ildefons/<a href="https://redirect.github.com/hadolint/hadolint-action/issues/100">gh-100</a></li> <li><a href="https://github.com/hadolint/hadolint-action/commit/df8eaaf67fe22a4499b3883b6d87ad304d4d355e"><code>df8eaaf</code></a> CI: run integration tests with different runners</li> <li><a href="https://github.com/hadolint/hadolint-action/commit/2a66e89f53d0771bb131a7fa31f3136336094aa6"><code>2a66e89</code></a> feat: Bump Hadolint to v2.15.0</li> <li><a href="https://github.com/hadolint/hadolint-action/commit/2332a7b74a6de0dda2e2221d575162eba76ba5e5"><code>2332a7b</code></a> feat: trigger release workflow</li> <li><a href="https://github.com/hadolint/hadolint-action/commit/2bfd2b95f895100db2ca84c3054a8ce50f1fc611"><code>2bfd2b9</code></a> Don't trigger release workflow on Tag</li> <li>Additional commits viewable in <a href="https://github.com/hadolint/hadolint-action/compare/54c9adbab1582c2ef04b2016b760714a4bfde3cf...06be81baf89a55ffd0e24b8f04a4185738dd3387">compare view</a></li> </ul> </details> <br /> Updates `docker/build-push-action` from 7.1.0 to 7.4.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/docker/build-push-action/releases">docker/build-push-action's releases</a>.</em></p> <blockquote> <h2>v7.4.0</h2> <ul> <li>Use the shared error helper for Buildx commands by <a href="https://github.com/crazy-max"><code>@crazy-max</code></a> in <a href="https://redirect.github.com/docker/build-push-action/pull/1620">docker/build-push-action#1620</a></li> <li>Prevent workflow command injection in metadata logs by <a href="https://github.com/crazy-max"><code>@crazy-max</code></a> in <a href="https://redirect.github.com/docker/build-push-action/pull/1617">docker/build-push-action#1617</a></li> <li>Bump <code>@docker/actions-toolkit</code> from 0.92.0 to 0.100.0 in <a href="https://redirect.github.com/docker/build-push-action/pull/1614">docker/build-push-action#1614</a> <a href="https://redirect.github.com/docker/build-push-action/pull/1618">docker/build-push-action#1618</a> <a href="https://redirect.github.com/docker/build-push-action/pull/1621">docker/build-push-action#1621</a></li> <li>Bump <code>@humanfs/node</code> from 0.16.7 to 0.16.8 in <a href="https://redirect.github.com/docker/build-push-action/pull/1609">docker/build-push-action#1609</a></li> <li>Bump brace-expansion from 1.1.13 to 1.1.18 in <a href="https://redirect.github.com/docker/build-push-action/pull/1592">docker/build-push-action#1592</a></li> <li>Bump csv-parse from 7.0.0 to 7.0.2 in <a href="https://redirect.github.com/docker/build-push-action/pull/1613">docker/build-push-action#1613</a></li> <li>Bump js-yaml from 4.3.0 to 4.3.2 in <a href="https://redirect.github.com/docker/build-push-action/pull/1605">docker/build-push-action#1605</a> <a href="https://redirect.github.com/docker/build-push-action/pull/1615">docker/build-push-action#1615</a></li> <li>Bump nanoid from 3.3.16 to 3.3.18 in <a href="https://redirect.github.com/docker/build-push-action/pull/1611">docker/build-push-action#1611</a></li> <li>Bump postcss from 8.5.10 to 8.5.25 in <a href="https://redirect.github.com/docker/build-push-action/pull/1590">docker/build-push-action#1590</a></li> <li>Bump postcss-selector-parser from 7.1.1 to 7.1.5 in <a href="https://redirect.github.com/docker/build-push-action/pull/1606">docker/build-push-action#1606</a></li> <li>Bump sigstore from 4.1.0 to 4.1.1 in <a href="https://redirect.github.com/docker/build-push-action/pull/1577">docker/build-push-action#1577</a></li> <li>Bump undici from 6.27.0 to 6.28.0 in <a href="https://redirect.github.com/docker/build-push-action/pull/1594">docker/build-push-action#1594</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/docker/build-push-action/compare/v7.3.0...v7.4.0">https://github.com/docker/build-push-action/compare/v7.3.0...v7.4.0</a></p> <h2>v7.3.0</h2> <ul> <li>Preserve names in esbuild bundle by <a href="https://github.com/crazy-max"><code>@crazy-max</code></a> in <a href="https://redirect.github.com/docker/build-push-action/pull/1567">docker/build-push-action#1567</a></li> <li>Bump <code>@docker/actions-toolkit</code> from 0.90.0 to 0.92.0 in <a href="https://redirect.github.com/docker/build-push-action/pull/1545">docker/build-push-action#1545</a> <a href="https://redirect.github.com/docker/build-push-action/pull/1572">docker/build-push-action#1572</a></li> <li>Bump <code>@sigstore/core</code> from 3.1.0 to 3.2.1 in <a href="https://redirect.github.com/docker/build-push-action/pull/1568">docker/build-push-action#1568</a></li> <li>Bump js-yaml from 4.1.1 to 4.3.0 in <a href="https://redirect.github.com/docker/build-push-action/pull/1566">docker/build-push-action#1566</a></li> <li>Bump tmp from 0.2.5 to 0.2.7 in <a href="https://redirect.github.com/docker/build-push-action/pull/1547">docker/build-push-action#1547</a></li> <li>Bump undici from 6.24.1 to 6.27.0 in <a href="https://redirect.github.com/docker/build-push-action/pull/1564">docker/build-push-action#1564</a></li> <li>Bump vite from 7.3.2 to 7.3.6 in <a href="https://redirect.github.com/docker/build-push-action/pull/1563">docker/build-push-action#1563</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/docker/build-push-action/compare/v7.2.0...v7.3.0">https://github.com/docker/build-push-action/compare/v7.2.0...v7.3.0</a></p> <h2>v7.2.0</h2> <ul> <li>Bump <code>@actions/core</code> from 3.0.0 to 3.0.1 in <a href="https://redirect.github.com/docker/build-push-action/pull/1525">docker/build-push-action#1525</a></li> <li>Bump <code>@docker/actions-toolkit</code> from 0.87.0 to 0.90.0 in <a href="https://redirect.github.com/docker/build-push-action/pull/1517">docker/build-push-action#1517</a></li> <li>Bump brace-expansion from 2.0.2 to 5.0.6 in <a href="https://redirect.github.com/docker/build-push-action/pull/1534">docker/build-push-action#1534</a></li> <li>Bump fast-xml-builder from 1.1.4 to 1.2.0 in <a href="https://redirect.github.com/docker/build-push-action/pull/1529">docker/build-push-action#1529</a></li> <li>Bump fast-xml-parser from 5.5.7 to 5.8.0 in <a href="https://redirect.github.com/docker/build-push-action/pull/1521">docker/build-push-action#1521</a></li> <li>Bump postcss from 8.5.6 to 8.5.10 in <a href="https://redirect.github.com/docker/build-push-action/pull/1526">docker/build-push-action#1526</a></li> <li>Bump tar from 6.2.1 to 7.5.15 in <a href="https://redirect.github.com/docker/build-push-action/pull/1533">docker/build-push-action#1533</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/docker/build-push-action/compare/v7.1.0...v7.2.0">https://github.com/docker/build-push-action/compare/v7.1.0...v7.2.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/docker/build-push-action/commit/c3c9e263c25d99ce0380d002d59b67737d91b0dc"><code>c3c9e26</code></a> Merge pull request <a href="https://redirect.github.com/docker/build-push-action/issues/1621">#1621</a> from docker/dependabot/npm_and_yarn/docker/actions-t...</li> <li><a href="https://github.com/docker/build-push-action/commit/459b6741834dcd35f946352017e7675bd2089d42"><code>459b674</code></a> [dependabot skip] chore: update generated content</li> <li><a href="https://github.com/docker/build-push-action/commit/4dedcb23c91d79c1629bf53ec2c3bcfffef5b34e"><code>4dedcb2</code></a> chore(deps): Bump <code>@docker/actions-toolkit</code> from 0.99.0 to 0.100.0</li> <li><a href="https://github.com/docker/build-push-action/commit/379bf63a979bd70751945601fa04c50674509952"><code>379bf63</code></a> Merge pull request <a href="https://redirect.github.com/docker/build-push-action/issues/1620">#1620</a> from crazy-max/buildx-error-message</li> <li><a href="https://github.com/docker/build-push-action/commit/9877975c9e0b0b661592ff61049069507f9bc2f6"><code>9877975</code></a> chore: update generated content</li> <li><a href="https://github.com/docker/build-push-action/commit/7ed0556ffafb8eb312463411ef0a84a1dfe24d94"><code>7ed0556</code></a> use the shared Buildx error summary helper</li> <li><a href="https://github.com/docker/build-push-action/commit/91670ba5a4df99a24efff8637a78c83fd1b0f6b1"><code>91670ba</code></a> Merge pull request <a href="https://redirect.github.com/docker/build-push-action/issues/1618">#1618</a> from docker/dependabot/npm_and_yarn/docker/actions-t...</li> <li><a href="https://github.com/docker/build-push-action/commit/80dbc8614a5c0ce4356740f69179cf829ecdc79a"><code>80dbc86</code></a> [dependabot skip] chore: update generated content</li> <li><a href="https://github.com/docker/build-push-action/commit/50cac3a3b6f55e6015d6483d1dd72a3ecb90d20d"><code>50cac3a</code></a> chore(deps): Bump <code>@docker/actions-toolkit</code> from 0.98.0 to 0.99.0</li> <li><a href="https://github.com/docker/build-push-action/commit/03b4d6cac0163b44733e1fa60adfd6da560ee4d1"><code>03b4d6c</code></a> Merge pull request <a href="https://redirect.github.com/docker/build-push-action/issues/1617">#1617</a> from crazy-max/fix-metadata-workflow-commands</li> <li>Additional commits viewable in <a href="https://github.com/docker/build-push-action/compare/bcafcacb16a39f128d818304e6c9c0c18556b85f...c3c9e263c25d99ce0380d002d59b67737d91b0dc">compare view</a></li> </ul> </details> <br /> Updates `docker/login-action` from 4.1.0 to 4.6.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/docker/login-action/releases">docker/login-action's releases</a>.</em></p> <blockquote> <h2>v4.6.0</h2> <ul> <li>Harden buildx scoped config path handling by <a href="https://github.com/crazy-max"><code>@crazy-max</code></a> in <a href="https://redirect.github.com/docker/login-action/pull/1059">docker/login-action#1059</a></li> <li>Bump <code>@aws-sdk/client-ecr</code> and <code>@aws-sdk/client-ecr-public</code> to 3.1095.0 in <a href="https://redirect.github.com/docker/login-action/pull/1051">docker/login-action#1051</a></li> <li>Bump js-yaml from 5.2.1 to 5.2.2 in <a href="https://redirect.github.com/docker/login-action/pull/1057">docker/login-action#1057</a></li> <li>Bump postcss from 8.5.10 to 8.5.22 in <a href="https://redirect.github.com/docker/login-action/pull/1056">docker/login-action#1056</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/docker/login-action/compare/v4.5.2...v4.6.0">https://github.com/docker/login-action/compare/v4.5.2...v4.6.0</a></p> <h2>v4.5.2</h2> <ul> <li>Surface Docker Hub OIDC error responses by <a href="https://github.com/crazy-max"><code>@crazy-max</code></a> in <a href="https://redirect.github.com/docker/login-action/pull/1058">docker/login-action#1058</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/docker/login-action/compare/v4.5.1...v4.5.2">https://github.com/docker/login-action/compare/v4.5.1...v4.5.2</a></p> <h2>v4.5.1</h2> <ul> <li>Support <code>dhi.io</code> as Docker Hub OIDC registry by <a href="https://github.com/crazy-max"><code>@crazy-max</code></a> in <a href="https://redirect.github.com/docker/login-action/pull/1054">docker/login-action#1054</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/docker/login-action/compare/v4.5.0...v4.5.1">https://github.com/docker/login-action/compare/v4.5.0...v4.5.1</a></p> <h2>v4.5.0</h2> <ul> <li><a href="https://github.com/docker/login-action#docker-hub">Docker Hub OIDC</a> login support by <a href="https://github.com/crazy-max"><code>@crazy-max</code></a> in <a href="https://redirect.github.com/docker/login-action/pull/1048">docker/login-action#1048</a></li> <li>Bump <code>@aws-sdk/client-ecr</code> and <code>@aws-sdk/client-ecr-public</code> to 3.1091.0 in <a href="https://redirect.github.com/docker/login-action/pull/1037">docker/login-action#1037</a></li> <li>Bump <code>@docker/actions-toolkit</code> from 0.92.0 to 0.94.0 in <a href="https://redirect.github.com/docker/login-action/pull/1044">docker/login-action#1044</a> <a href="https://redirect.github.com/docker/login-action/pull/1050">docker/login-action#1050</a></li> <li>Bump brace-expansion from 1.1.13 to 1.1.16 in <a href="https://redirect.github.com/docker/login-action/pull/1046">docker/login-action#1046</a></li> <li>Bump js-yaml from 5.2.0 to 5.2.1 in <a href="https://redirect.github.com/docker/login-action/pull/1038">docker/login-action#1038</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/docker/login-action/compare/v4.4.0...v4.5.0">https://github.com/docker/login-action/compare/v4.4.0...v4.5.0</a></p> <h2>v4.4.0</h2> <ul> <li>Skip empty <code>registry-auth</code> secret mask by <a href="https://github.com/crazy-max"><code>@crazy-max</code></a> in <a href="https://redirect.github.com/docker/login-action/pull/1035">docker/login-action#1035</a></li> <li>Bump <code>@aws-sdk/client-ecr</code> and <code>@aws-sdk/client-ecr-public</code> to 3.1077.0 <a href="https://redirect.github.com/docker/login-action/pull/1034">docker/login-action#1034</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/docker/login-action/compare/v4.3.0...v4.4.0">https://github.com/docker/login-action/compare/v4.3.0...v4.4.0</a></p> <h2>v4.3.0</h2> <ul> <li>Preserve names in esbuild bundle by <a href="https://github.com/crazy-max"><code>@crazy-max</code></a> in <a href="https://redirect.github.com/docker/login-action/pull/1022">docker/login-action#1022</a></li> <li>Bump <code>@aws-sdk/client-ecr</code> and <code>@aws-sdk/client-ecr-public</code> to 3.1076.0 <a href="https://redirect.github.com/docker/login-action/pull/999">docker/login-action#999</a> <a href="https://redirect.github.com/docker/login-action/pull/1030">docker/login-action#1030</a></li> <li>Bump <code>@docker/actions-toolkit</code> from 0.90.0 to 0.92.0 in <a href="https://redirect.github.com/docker/login-action/pull/1004">docker/login-action#1004</a> <a href="https://redirect.github.com/docker/login-action/pull/1027">docker/login-action#1027</a></li> <li>Bump <code>@sigstore/core</code> from 3.1.0 to 3.2.1 in <a href="https://redirect.github.com/docker/login-action/pull/1023">docker/login-action#1023</a></li> <li>Bump <code>@sigstore/verify</code> from 3.1.0 to 3.1.1 in <a href="https://redirect.github.com/docker/login-action/pull/1029">docker/login-action#1029</a></li> <li>Bump http-proxy-agent and https-proxy-agent to 9.1.0 in <a href="https://redirect.github.com/docker/login-action/pull/1017">docker/login-action#1017</a></li> <li>Bump js-yaml from 4.1.1 to 5.2.0 in <a href="https://redirect.github.com/docker/login-action/pull/1028">docker/login-action#1028</a></li> <li>Bump sigstore from 4.1.0 to 4.1.1 in <a href="https://redirect.github.com/docker/login-action/pull/1031">docker/login-action#1031</a></li> <li>Bump tmp from 0.2.5 to 0.2.7 in <a href="https://redirect.github.com/docker/login-action/pull/1002">docker/login-action#1002</a></li> <li>Bump undici from 6.24.1 to 6.27.0 in <a href="https://redirect.github.com/docker/login-action/pull/1020">docker/login-action#1020</a></li> <li>Bump vite from 7.3.3 to 7.3.6 in <a href="https://redirect.github.com/docker/login-action/pull/1019">docker/login-action#1019</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/docker/login-action/compare/v4.2.0...v4.3.0">https://github.com/docker/login-action/compare/v4.2.0...v4.3.0</a></p> <h2>v4.2.0</h2> <ul> <li>Bump <code>@actions/core</code> from 3.0.0 to 3.0.1 in <a href="https://redirect.github.com/docker/login-action/pull/976">docker/login-action#976</a></li> </ul>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/docker/login-action/commit/dbcb813823bdd20940b903addbd779551569679f"><code>dbcb813</code></a> Merge pull request <a href="https://redirect.github.com/docker/login-action/issues/1051">#1051</a> from docker/dependabot/npm_and_yarn/aws-sdk-dependen...</li> <li><a href="https://github.com/docker/login-action/commit/5bcb015ee6ec720ecdeaef2dc1164122e9b209fc"><code>5bcb015</code></a> [dependabot skip] chore: update generated content</li> <li><a href="https://github.com/docker/login-action/commit/b30b2f2d3196c1714318ba0c3c3bec211d949752"><code>b30b2f2</code></a> build(deps): bump the aws-sdk-dependencies group across 1 directory with 2 up...</li> <li><a href="https://github.com/docker/login-action/commit/9087f1e6d666fe0292409e3c819680c18526e108"><code>9087f1e</code></a> Merge pull request <a href="https://redirect.github.com/docker/login-action/issues/1057">#1057</a> from docker/dependabot/npm_and_yarn/js-yaml-5.2.2</li> <li><a href="https://github.com/docker/login-action/commit/0009830ea169ca16c24c0ea4cac1c325bfa3aee4"><code>0009830</code></a> [dependabot skip] chore: update generated content</li> <li><a href="https://github.com/docker/login-action/commit/23255232d3e43c8f0052d9a0dba82a515a88ce92"><code>2325523</code></a> build(deps): bump js-yaml from 5.2.1 to 5.2.2</li> <li><a href="https://github.com/docker/login-action/commit/4ec1d4a769e8b05a89a7396551dc38b329211688"><code>4ec1d4a</code></a> Merge pull request <a href="https://redirect.github.com/docker/login-action/issues/1056">#1056</a> from docker/dependabot/npm_and_yarn/postcss-8.5.22</li> <li><a href="https://github.com/docker/login-action/commit/5fc99ba47bca274c5a499688f71c7ea79c0ea1b3"><code>5fc99ba</code></a> Merge pull request <a href="https://redirect.github.com/docker/login-action/issues/1053">#1053</a> from docker/dependabot/github_actions/aws-actions/co...</li> <li><a href="https://github.com/docker/login-action/commit/e512bd59d16c53d79ea5c0f0e345fe554453c4bb"><code>e512bd5</code></a> Merge pull request <a href="https://redirect.github.com/docker/login-action/issues/1052">#1052</a> from docker/dependabot/github_actions/codeql-actions...</li> <li><a href="https://github.com/docker/login-action/commit/a146c91b8f371700d323bae808af7cbdc2766ed5"><code>a146c91</code></a> Merge pull request <a href="https://redirect.github.com/docker/login-action/issues/1059">#1059</a> from crazy-max/harden-buildx-scope-paths</li> <li>Additional commits viewable in <a href="https://github.com/docker/login-action/compare/4907a6ddec9925e35a0a9e82d7399ccc52663121...dbcb813823bdd20940b903addbd779551569679f">compare view</a></li> </ul> </details> <br /> Updates `cachix/install-nix-action` from 31.11.0 to 31.11.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/cachix/install-nix-action/releases">cachix/install-nix-action's releases</a>.</em></p> <blockquote> <h2>v31.11.1</h2> <h2>What's Changed</h2> <ul> <li>nix: 2.35.1 -> 2.35.2 by <a href="https://github.com/github-actions"><code>@github-actions</code></a>[bot] in <a href="https://redirect.github.com/cachix/install-nix-action/pull/281">cachix/install-nix-action#281</a> Fixes a crash (<a href="https://redirect.github.com/NixOS/nix/issues/16005"><code>Assertion '!awake.empty()' failed</code></a>) that could abort builds.</li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/cachix/install-nix-action/compare/v31.11.0...v31.11.1">https://github.com/cachix/install-nix-action/compare/v31.11.0...v31.11.1</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/cachix/install-nix-action/commit/13d8dd58da0234aa297dedd986986ccb8e7f3e24"><code>13d8dd5</code></a> fix(ci): skip latest installer on x86_64-darwin</li> <li><a href="https://github.com/cachix/install-nix-action/commit/875018fe555aee647c21ea81888659240cd8e27b"><code>875018f</code></a> Merge pull request <a href="https://redirect.github.com/cachix/install-nix-action/issues/281">#281</a> from cachix/create-pull-request/patch</li> <li><a href="https://github.com/cachix/install-nix-action/commit/6624a11f6c07674a3ff71d2431865aecf3587190"><code>6624a11</code></a> nix: 2.35.1 -> 2.35.2</li> <li>See full diff in <a href="https://github.com/cachix/install-nix-action/compare/630ae543ea3a38a9a4166f03376c02c50f408342...13d8dd58da0234aa297dedd986986ccb8e7f3e24">compare view</a></li> </ul> </details> <br /> Updates `google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml` from 2.3.8 to 2.6.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/osv-scanner-action/releases">google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml's releases</a>.</em></p> <blockquote> <h2>v2.6.0</h2> <h2>What's Changed</h2> <ul> <li>Fix JSON results export by <a href="https://github.com/thomasleplus"><code>@thomasleplus</code></a> in <a href="https://redirect.github.com/google/osv-scanner-action/pull/142">google/osv-scanner-action#142</a></li> <li>Fail the job when a scan does not complete by <a href="https://github.com/alimony"><code>@alimony</code></a> in <a href="https://redirect.github.com/google/osv-scanner-action/pull/139">google/osv-scanner-action#139</a></li> <li>chore: Update to v2.6.0 by <a href="https://github.com/another-rex"><code>@another-rex</code></a> in <a href="https://redirect.github.com/google/osv-scanner-action/pull/144">google/osv-scanner-action#144</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/alimony"><code>@alimony</code></a> made their first contribution in <a href="https://redirect.github.com/google/osv-scanner-action/pull/139">google/osv-scanner-action#139</a></li> <li><a href="https://github.com/thomasleplus"><code>@thomasleplus</code></a> made their first contribution in <a href="https://redirect.github.com/google/osv-scanner-action/pull/142">google/osv-scanner-action#142</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/google/osv-scanner-action/compare/v2.5.1...v2.6.0">https://github.com/google/osv-scanner-action/compare/v2.5.1...v2.6.0</a></p> <h2>v2.5.1</h2> <p>This updates OSV-Scanner to v2.3.8.</p> <h2>What's Changed</h2> <ul> <li>Update actions/checkout action to v7 by <a href="https://github.com/renovate-bot"><code>@renovate-bot</code></a> in <a href="https://redirect.github.com/google/osv-scanner-action/pull/133">google/osv-scanner-action#133</a></li> </ul> <h3>Fixes:</h3> <ul> <li>Preserve package namespaces when querying osv.dev API (fixes <a href="https://redirect.github.com/google/osv-scanner/issues/2978">#2978</a>).</li> <li>Re-add support for the <code>OSV_SCANNER_LOCAL_DB_CACHE_DIRECTORY</code> environment variable (fixes <a href="https://redirect.github.com/google/osv-scanner/issues/2983">#2983</a>).</li> <li>Fix local vulnerability matching (<code>--offline-vulnerabilities</code>) not working when network capability is <code>NetworkOnline</code>.</li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/google/osv-scanner-action/compare/v2.5.0...v2.5.1">https://github.com/google/osv-scanner-action/compare/v2.5.0...v2.5.1</a></p> <h2>v2.5.0</h2> <p>This updates OSV-Scanner to v2.5.0 as well as:</p> <h2>What's Changed</h2> <ul> <li>feat: gate reusable workflow outputs with a flag by <a href="https://github.com/another-rex"><code>@another-rex</code></a> in <a href="https://redirect.github.com/google/osv-scanner-action/pull/130">google/osv-scanner-action#130</a></li> <li>Pin download-artifact action to SHA by <a href="https://github.com/SVilgelm"><code>@SVilgelm</code></a> in <a href="https://redirect.github.com/google/osv-scanner-action/pull/127">google/osv-scanner-action#127</a></li> <li>feat: add runs-on input to reusable workflows by <a href="https://github.com/BeyondEvil"><code>@BeyondEvil</code></a> in <a href="https://redirect.github.com/google/osv-scanner-action/pull/131">google/osv-scanner-action#131</a></li> <li>fix: address zizmor warnings by <a href="https://github.com/another-rex"><code>@another-rex</code></a> in <a href="https://redirect.github.com/google/osv-scanner-action/pull/135">google/osv-scanner-action#135</a></li> <li>fix: add GOTOOLCHAIN=auto env to osv-scanner calls by <a href="https://github.com/another-rex"><code>@another-rex</code></a> in <a href="https://redirect.github.com/google/osv-scanner-action/pull/138">google/osv-scanner-action#138</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/SVilgelm"><code>@SVilgelm</code></a> made their first contribution in <a href="https://redirect.github.com/google/osv-scanner-action/pull/127">google/osv-scanner-action#127</a></li> <li><a href="https://github.com/BeyondEvil"><code>@BeyondEvil</code></a> made their first contribution in <a href="https://redirect.github.com/google/osv-scanner-action/pull/131">google/osv-scanner-action#131</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/google/osv-scanner-action/compare/v2.3.8...v2.5.0">https://github.com/google/osv-scanner-action/compare/v2.3.8...v2.5.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/osv-scanner-action/commit/a345acffa64b0eaede81a3d9aae6141214d9c8fc"><code>a345acf</code></a> Merge pull request <a href="https://redirect.github.com/google/osv-scanner-action/issues/144">#144</a> from google/update-to-v2.6.0</li> <li><a href="https://github.com/google/osv-scanner-action/commit/6b289e01b25bdfc0e015b18fe26dacf9b14925bc"><code>6b289e0</code></a> Update unified workflow example to point to v2.6.0 reusable workflows</li> <li><a href="https://github.com/google/osv-scanner-action/commit/c7c7bcb0773cc4678a674ada03a66cc5c4325476"><code>c7c7bcb</code></a> Update reusable workflows to point to v2.6.0 actions</li> <li><a href="https://github.com/google/osv-scanner-action/commit/7f58dd6750d78fc29a900ba64b1a0f946f62fba4"><code>7f58dd6</code></a> "Update actions to use v2.6.0 osv-scanner image"</li> <li><a href="https://github.com/google/osv-scanner-action/commit/8e5cf47b818121e8b405931c82126c2630b0b20d"><code>8e5cf47</code></a> Merge pull request <a href="https://redirect.github.com/google/osv-scanner-action/issues/139">#139</a> from alimony/fail-closed-on-incomplete-scan</li> <li><a href="https://github.com/google/osv-scanner-action/commit/bf5f9247efc2c6371208619929a5ec5092acb63c"><code>bf5f924</code></a> Merge remote-tracking branch 'upstream/main' into fail-closed-on-incomplete-scan</li> <li><a href="https://github.com/google/osv-scanner-action/commit/ffa0a5f39214d80778c9b494822d94d0d9668458"><code>ffa0a5f</code></a> Merge pull request <a href="https://redirect.github.com/google/osv-scanner-action/issues/142">#142</a> from google/fix-json-export-code</li> <li><a href="https://github.com/google/osv-scanner-action/commit/259ba4a9934b98dab293dece8e6dd02c7118257a"><code>259ba4a</code></a> Fix JSON results export</li> <li><a href="https://github.com/google/osv-scanner-action/commit/6e4298ebc4db23e847df9b2e2de2939d6f066c67"><code>6e4298e</code></a> Merge pull request <a href="https://redirect.github.com/google/osv-scanner-action/issues/141">#141</a> from google/update-to-v2.5.1</li> <li><a href="https://github.com/google/osv-scanner-action/commit/5957b4e7a8725730a37d973099c16b9fe44cfc5f"><code>5957b4e</code></a> Update unified workflow example to point to v2.5.1 reusable workflows</li> <li>Additional commits viewable in <a href="https://github.com/google/osv-scanner-action/compare/9a498708959aeaef5ef730655706c5a1df1edbc2...a345acffa64b0eaede81a3d9aae6141214d9c8fc">compare view</a></li> </ul> </details> <br />

dependabot[bot] commented

2026-09-03 12:52:19 +00:00

(Migrated from github.com)

Labels

The following labels could not be found: dependencies, github-actions. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

### Labels The following labels could not be found: `dependencies`, `github-actions`. Please create them before Dependabot can add them to a pull request. Please fix the above issues or remove invalid values from `dependabot.yml`.

github-actions[bot] commented

2026-09-03 12:52:49 +00:00

(Migrated from github.com)

૮ >ﻌ< ა ci review

_{ran on f58a962 — chore(actions)(deps): bump the actions-minor-patch group acr}

❌ Job failures

Check contributors / check-attribution · View job

Job Check contributors / check-attribution failed.

Check uv.lock / uv lock --check · View job

Job Check uv.lock / uv lock --check failed.

OS-specific tests / macOS-only tests · View job

Job OS-specific tests / macOS-only tests failed.

Python lints / Windows footguns (blocking) · View job

Job Python lints / Windows footguns (blocking) failed.

Python tests / e2e · View job

Job Python tests / e2e failed.

Review label gate / Review label gate · View job

Job Review label gate / Review label gate failed.

debug info

CI timings

CI timings · View report · View job

Wall time 1440m18s (no baseline yet).

# ૮ >ﻌ< ა ci review <sub>ran on [f58a962](https://github.com/arcenal-coder/arcenal-agent/pull/1/commits/f58a962a14b4ab65cf7d4e0ef54902b664d47fb4) — chore(actions)(deps): bump the actions-minor-patch group acr</sub> ## ❌ Job failures ### Check contributors / check-attribution · [View job](https://github.com/arcenal-coder/arcenal-agent/actions/runs/37342510655/job/111872925399) Job **Check contributors / check-attribution** failed. --- ### Check uv.lock / uv lock --check · [View job](https://github.com/arcenal-coder/arcenal-agent/actions/runs/37342510655/job/111872927971) Job **Check uv.lock / uv lock --check** failed. --- ### OS-specific tests / macOS-only tests · [View job](https://github.com/arcenal-coder/arcenal-agent/actions/runs/37342510655/job/111872927340) Job **OS-specific tests / macOS-only tests** failed. --- ### Python lints / Windows footguns (blocking) · [View job](https://github.com/arcenal-coder/arcenal-agent/actions/runs/37342510655/job/111872926874) Job **Python lints / Windows footguns (blocking)** failed. --- ### Python tests / e2e · [View job](https://github.com/arcenal-coder/arcenal-agent/actions/runs/37342510655/job/111872926808) Job **Python tests / e2e** failed. --- ### Review label gate / Review label gate · [View job](https://github.com/arcenal-coder/arcenal-agent/actions/runs/37342510655/job/111873215420) Job **Review label gate / Review label gate** failed. --- ### debug info <details> <summary>CI timings</summary> ### CI timings · [View report](https://github.com/arcenal-coder/arcenal-agent/actions/runs/37342510655/artifacts/11428206412) · [View job](https://github.com/arcenal-coder/arcenal-agent/actions/runs/37342510655/job/112385598667) Wall time 1440m18s (no baseline yet). </details>

github-advanced-security[bot] commented

2026-09-03 12:52:49 +00:00

(Migrated from github.com)

You are seeing this message because GitHub Code Scanning has recently been set up for this repository, or this pull request contains the workflow file for the Code Scanning tool.

What Enabling Code Scanning Means:

The 'Security' tab will display more code scanning analysis results (e.g., for the default branch).
Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results.
You will be able to see the analysis results for the pull request's branch on this overview once the scans have completed and the checks have passed.

For more information about GitHub Code Scanning, check out the documentation.

You are seeing this message because GitHub Code Scanning has recently been set up for this repository, or this pull request contains the workflow file for the Code Scanning tool. ### What Enabling Code Scanning Means: - The 'Security' tab will display more code scanning analysis results (e.g., for the default branch). - Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. - You will be able to see the analysis results for the pull request's branch on this [overview](/arcenal-coder/arcenal-agent/security/code-scanning?query=pr%3A1+is%3Aopen) once the scans have completed and the checks have passed. For more information about GitHub Code Scanning, check out [the documentation](https://docs.github.com/code-security/code-scanning/introduction-to-code-scanning/about-code-scanning).

This pull request can be merged automatically.

You are not authorized to merge this pull request.

View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.

git fetch -u origin "dependabot/github_actions/actions-minor-patch-5760f6059a:dependabot/github_actions/actions-minor-patch-5760f6059a"

git switch "dependabot/github_actions/actions-minor-patch-5760f6059a"

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch "arcenal"

git merge --no-ff "dependabot/github_actions/actions-minor-patch-5760f6059a"

git switch "dependabot/github_actions/actions-minor-patch-5760f6059a"

git rebase "arcenal"

git switch "arcenal"

git merge --ff-only "dependabot/github_actions/actions-minor-patch-5760f6059a"

git switch "dependabot/github_actions/actions-minor-patch-5760f6059a"

git rebase "arcenal"

git switch "arcenal"

git merge --no-ff "dependabot/github_actions/actions-minor-patch-5760f6059a"

git switch "arcenal"

git merge --squash "dependabot/github_actions/actions-minor-patch-5760f6059a"