Skip to content

Bump the actions group across 1 directory with 4 updates#3176

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/github_actions/actions-7122aea7a1
Open

Bump the actions group across 1 directory with 4 updates#3176
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/github_actions/actions-7122aea7a1

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Apr 6, 2026

Bumps the actions group with 4 updates in the / directory: step-security/harden-runner, chainguard-dev/actions, sigstore/cosign-installer and actions/setup-go.

Updates step-security/harden-runner from 2.16.0 to 2.16.1

Release notes

Sourced from step-security/harden-runner's releases.

v2.16.1

What's Changed

Enterprise tier: Added support for direct IP addresses in the allow list Community tier: Migrated Harden Runner telemetry to a new endpoint

Full Changelog: step-security/harden-runner@v2.16.0...v2.16.1

Commits

Updates chainguard-dev/actions from 1.6.9 to 1.6.13

Release notes

Sourced from chainguard-dev/actions's releases.

v1.6.13

What's Changed

Full Changelog: chainguard-dev/actions@v1.6.12...v1.6.13

v1.6.12

What's Changed

Full Changelog: chainguard-dev/actions@v1.6.11...v1.6.12

v1.6.11

What's Changed

New Contributors

Full Changelog: chainguard-dev/actions@v1.6.10...v1.6.11

v1.6.10

What's Changed

... (truncated)

Commits
  • f45211d otel-export: rebuild dist (#837)
  • 1fae06d build(deps): bump actions/setup-go from 6.3.0 to 6.4.0 (#832)
  • ced5ce6 build(deps): bump actions/setup-go from 6.3.0 to 6.4.0 in /boilerplate (#833)
  • 05fa44b build(deps): bump actions/setup-go from 6.3.0 to 6.4.0 in /setup-melange (#834)
  • 639681a build(deps): bump reviewdog/action-actionlint from 1.71.0 to 1.72.0 (#835)
  • 47f6945 build(deps): bump step-security/harden-runner from 2.16.0 to 2.16.1 (#836)
  • f73e9b4 build(deps): bump chainguard-dev/actions from 1.6.10 to 1.6.11 (#826)
  • a38dee0 build(deps): bump chainguard-dev/actions from 1.6.10 to 1.6.11 in /gofmt (#827)
  • 72c160d build(deps): bump chainguard-dev/actions in /goimports (#828)
  • 22da6a8 build(deps): bump chainguard-dev/actions in /inky-build-pkg (#829)
  • Additional commits viewable in compare view

Updates sigstore/cosign-installer from 4.1.0 to 4.1.1

Release notes

Sourced from sigstore/cosign-installer's releases.

v4.1.1

What's Changed

Full Changelog: sigstore/cosign-installer@v4.1.0...v4.1.1

Commits

Updates actions/setup-go from 6.3.0 to 6.4.0

Release notes

Sourced from actions/setup-go's releases.

v6.4.0

What's Changed

Enhancement

Dependency update

Documentation update

New Contributors

Full Changelog: actions/setup-go@v6...v6.4.0

Commits

@dependabot dependabot bot added dependencies Pull requests that update a dependency file github-actions security labels Apr 6, 2026
@dependabot dependabot bot requested a review from a team as a code owner April 6, 2026 17:08
@dependabot dependabot bot added dependencies Pull requests that update a dependency file github-actions security labels Apr 6, 2026
@netlify
Copy link
Copy Markdown

netlify bot commented Apr 6, 2026

Deploy Preview for ornate-narwhal-088216 ready!

Name Link
🔨 Latest commit 4bd443a
🔍 Latest deploy log https://app.netlify.com/projects/ornate-narwhal-088216/deploys/69d437e0b620c30008b2ad1b
😎 Deploy Preview https://deploy-preview-3176--ornate-narwhal-088216.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

Bumps the actions group with 4 updates in the / directory: [step-security/harden-runner](https://github.com/step-security/harden-runner), [chainguard-dev/actions](https://github.com/chainguard-dev/actions), [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) and [actions/setup-go](https://github.com/actions/setup-go).


Updates `step-security/harden-runner` from 2.16.0 to 2.16.1
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](step-security/harden-runner@fa2e9d6...fe10465)

Updates `chainguard-dev/actions` from 1.6.9 to 1.6.13
- [Release notes](https://github.com/chainguard-dev/actions/releases)
- [Commits](chainguard-dev/actions@d67380d...f45211d)

Updates `sigstore/cosign-installer` from 4.1.0 to 4.1.1
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](sigstore/cosign-installer@ba7bc0a...cad07c2)

Updates `actions/setup-go` from 6.3.0 to 6.4.0
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](actions/setup-go@4b73464...4a36011)

---
updated-dependencies:
- dependency-name: step-security/harden-runner
  dependency-version: 2.16.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: chainguard-dev/actions
  dependency-version: 1.6.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: sigstore/cosign-installer
  dependency-version: 4.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: actions/setup-go
  dependency-version: 6.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/github_actions/actions-7122aea7a1 branch from 7d20915 to 4bd443a Compare April 6, 2026 22:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github-actions security

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants