Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 28, 2025

Bumps the github-actions-dependencies group with 7 updates:

Package From To
hoverkraft-tech/ci-github-nodejs/.github/workflows/continuous-integration.yml 0.20.0 0.20.4
hoverkraft-tech/ci-github-common/.github/workflows/greetings.yml 0.30.1 0.31.0
hoverkraft-tech/ci-github-common/.github/workflows/need-fix-to-issue.yml 0.30.1 0.31.0
hoverkraft-tech/ci-github-nodejs 0.20.0 0.20.4
hoverkraft-tech/ci-github-publish 0.14.1 0.16.0
hoverkraft-tech/ci-github-common/.github/workflows/semantic-pull-request.yml 0.30.1 0.31.0
hoverkraft-tech/ci-github-common/.github/workflows/stale.yml 0.30.1 0.31.0

Updates hoverkraft-tech/ci-github-nodejs/.github/workflows/continuous-integration.yml from 0.20.0 to 0.20.4

Release notes

Sourced from hoverkraft-tech/ci-github-nodejs/.github/workflows/continuous-integration.yml's releases.

0.20.4

Release Summary

Features (dependencies-cache): added support for Vitest. Fixes (build): uploaded artifacts now include hidden files.

Internal changes: documentation for actions and workflows was refreshed.

Breaking change(s)

No breaking changes.

What's Changed

Full Changelog: hoverkraft-tech/ci-github-nodejs@0.20.3...0.20.4

0.20.3

Release Summary

Features (dependencies-cache): added support for Astro and Docusaurus. Fixes (continuous-integration): improved support for working-directory, ensuring workflows run correctly in subdirectories.

Internal changes: documentation for actions and workflows was refreshed.

Breaking change(s)

No breaking changes.

What's Changed

Full Changelog: hoverkraft-tech/ci-github-nodejs@0.20.2...0.20.3

0.20.2

Release Summary

No new features in this release. Fixes (continuous-integration): improved support for working-directory, ensuring workflows execute correctly from subdirectories.

Internal changes: documentation for actions and workflows was refreshed, and GitHub Actions dependencies were bumped across multiple directories.

Breaking change(s)

No breaking changes.

... (truncated)

Commits
  • ce2467e fix(build): uploaded artifact includes hidden files
  • ac622b3 docs: update actions and workflows documentation
  • 2761801 feat(dependencies-cache): add support for Vitest
  • 5098771 docs: update actions and workflows documentation
  • 1a631c9 docs: update actions and workflows documentation
  • 37ee7d1 feat(dependencies-cache): add support for Astro and Docusaurus
  • d79105e docs: update actions and workflows documentation
  • 8497527 fix(continuous-integration): improve support for working-directory
  • e96599d docs: update actions and workflows documentation
  • a7d1843 chore(deps): bump the github-actions-dependencies group across 3 directories ...
  • Additional commits viewable in compare view

Updates hoverkraft-tech/ci-github-common/.github/workflows/greetings.yml from 0.30.1 to 0.31.0

Release notes

Sourced from hoverkraft-tech/ci-github-common/.github/workflows/greetings.yml's releases.

0.31.0

Release Summary

Feature: introduces the local-workflow-actions action to simplify using local composite actions. Fix (checkout): default persist-credentials is now false to harden security and prevent unintended token persistence.

Internal: documentation for actions and workflows has been refreshed.

Breaking change(s)

The checkout step now sets persist-credentials: false by default; workflows that rely on persisted GitHub tokens for subsequent Git operations must explicitly opt in or adjust authentication.

What's Changed

Full Changelog: hoverkraft-tech/ci-github-common@0.30.2...0.31.0

0.30.2

Release Summary

parse-ci-reports: adds support for Prettier and Astro check outputs and improves the Markdown report for clearer, broader reporting coverage. parse-ci-reports: fixes report discovery by excluding node_modules from search patterns to avoid noisy matches.

Public vs internal separation:

Internal: documentation updated for actions/workflows and GitHub Actions dependencies bumped.

Breaking change(s)

No breaking changes.

What's Changed

Full Changelog: hoverkraft-tech/ci-github-common@0.30.1...0.30.2

Commits
  • a55670b docs: update actions and workflows documentation
  • 09f42e4 chore(deps): bump the github-actions-dependencies group across 3 directories ...
  • e8d06f4 feat: add local-workflow-actions action
  • cdf2bbe docs: update actions and workflows documentation
  • 4faa04a fix(checkout)!: set persist-credentials to false by default for security reason
  • 26b03d1 docs: update actions and workflows documentation
  • 5e8d0e6 chore(deps): bump the github-actions-dependencies group across 1 directory wi...
  • 5977b10 feat(parse-ci-reports): add support for astro check output
  • 9217828 Add node_modules exclusion to ReportPathResolver
  • 801c4ae feat(parse-ci-reports): add support for prettier check output
  • Additional commits viewable in compare view

Updates hoverkraft-tech/ci-github-common/.github/workflows/need-fix-to-issue.yml from 0.30.1 to 0.31.0

Release notes

Sourced from hoverkraft-tech/ci-github-common/.github/workflows/need-fix-to-issue.yml's releases.

0.31.0

Release Summary

Feature: introduces the local-workflow-actions action to simplify using local composite actions. Fix (checkout): default persist-credentials is now false to harden security and prevent unintended token persistence.

Internal: documentation for actions and workflows has been refreshed.

Breaking change(s)

The checkout step now sets persist-credentials: false by default; workflows that rely on persisted GitHub tokens for subsequent Git operations must explicitly opt in or adjust authentication.

What's Changed

Full Changelog: hoverkraft-tech/ci-github-common@0.30.2...0.31.0

0.30.2

Release Summary

parse-ci-reports: adds support for Prettier and Astro check outputs and improves the Markdown report for clearer, broader reporting coverage. parse-ci-reports: fixes report discovery by excluding node_modules from search patterns to avoid noisy matches.

Public vs internal separation:

Internal: documentation updated for actions/workflows and GitHub Actions dependencies bumped.

Breaking change(s)

No breaking changes.

What's Changed

Full Changelog: hoverkraft-tech/ci-github-common@0.30.1...0.30.2

Commits
  • a55670b docs: update actions and workflows documentation
  • 09f42e4 chore(deps): bump the github-actions-dependencies group across 3 directories ...
  • e8d06f4 feat: add local-workflow-actions action
  • cdf2bbe docs: update actions and workflows documentation
  • 4faa04a fix(checkout)!: set persist-credentials to false by default for security reason
  • 26b03d1 docs: update actions and workflows documentation
  • 5e8d0e6 chore(deps): bump the github-actions-dependencies group across 1 directory wi...
  • 5977b10 feat(parse-ci-reports): add support for astro check output
  • 9217828 Add node_modules exclusion to ReportPathResolver
  • 801c4ae feat(parse-ci-reports): add support for prettier check output
  • Additional commits viewable in compare view

Updates hoverkraft-tech/ci-github-nodejs from 0.20.0 to 0.20.4

Release notes

Sourced from hoverkraft-tech/ci-github-nodejs's releases.

0.20.4

Release Summary

Features (dependencies-cache): added support for Vitest. Fixes (build): uploaded artifacts now include hidden files.

Internal changes: documentation for actions and workflows was refreshed.

Breaking change(s)

No breaking changes.

What's Changed

Full Changelog: hoverkraft-tech/ci-github-nodejs@0.20.3...0.20.4

0.20.3

Release Summary

Features (dependencies-cache): added support for Astro and Docusaurus. Fixes (continuous-integration): improved support for working-directory, ensuring workflows run correctly in subdirectories.

Internal changes: documentation for actions and workflows was refreshed.

Breaking change(s)

No breaking changes.

What's Changed

Full Changelog: hoverkraft-tech/ci-github-nodejs@0.20.2...0.20.3

0.20.2

Release Summary

No new features in this release. Fixes (continuous-integration): improved support for working-directory, ensuring workflows execute correctly from subdirectories.

Internal changes: documentation for actions and workflows was refreshed, and GitHub Actions dependencies were bumped across multiple directories.

Breaking change(s)

No breaking changes.

... (truncated)

Commits
  • ce2467e fix(build): uploaded artifact includes hidden files
  • ac622b3 docs: update actions and workflows documentation
  • 2761801 feat(dependencies-cache): add support for Vitest
  • 5098771 docs: update actions and workflows documentation
  • 1a631c9 docs: update actions and workflows documentation
  • 37ee7d1 feat(dependencies-cache): add support for Astro and Docusaurus
  • d79105e docs: update actions and workflows documentation
  • 8497527 fix(continuous-integration): improve support for working-directory
  • e96599d docs: update actions and workflows documentation
  • a7d1843 chore(deps): bump the github-actions-dependencies group across 3 directories ...
  • Additional commits viewable in compare view

Updates hoverkraft-tech/ci-github-publish from 0.14.1 to 0.16.0

Release notes

Sourced from hoverkraft-tech/ci-github-publish's releases.

0.16.0

Release Summary

Fix: forces ArgoCD sync on redeployments when using the hoverkraft-deployment plugin to ensure reliable re-deploys without code changes. 

Internal: actions and workflows documentation refreshed. 

Breaking change(s)

No breaking changes. 

What's Changed

Full Changelog: hoverkraft-tech/ci-github-publish@0.15.2...0.16.0

0.15.2

Release Summary

Fix (release-actions): the release workflow now safely handles missing CHANGED_FILES when matching changed files, improving stability.

Internal: documentation updates refine actions/workflows docs and clarify the deploy/jekyll action behavior and inputs.

Breaking change(s)

No breaking changes.

What's Changed

Full Changelog: hoverkraft-tech/ci-github-publish@0.15.1...0.15.2

0.15.1

Release Summary

Fix (deploy/github-pages): corrected the download artifact input to ensure GitHub Pages deployments use the proper parameter for retrieval.

Internal changes: documentation for actions and workflows was refreshed.

Breaking change(s)

There is no breaking change.

What's Changed

... (truncated)

Commits
  • ed864a8 docs: update actions and workflows documentation
  • e1a381b refactor: rename plugin to hoverkraft-deployment and add conditional check
  • bc2fe44 test: add plugin entry to test template for validation
  • 472f7f3 fix: force ArgoCD sync on redeployment using plugin environment variable
  • a6df652 refactor: replace operation block with plugin env update for sync detection
  • 9c9b5d0 feat: add ArgoCD refresh behavior timestamp to force sync on every deployment
  • d2b9385 docs: update actions and workflows documentation
  • a631cc8 build(deps): Bump the github-actions-dependencies group across 5 directories ...
  • dbdcce2 docs: update actions and workflows documentation
  • ba137e2 Format pages input examples with YAML code fence
  • Additional commits viewable in compare view

Updates hoverkraft-tech/ci-github-common/.github/workflows/semantic-pull-request.yml from 0.30.1 to 0.31.0

Release notes

Sourced from hoverkraft-tech/ci-github-common/.github/workflows/semantic-pull-request.yml's releases.

0.31.0

Release Summary

Feature: introduces the local-workflow-actions action to simplify using local composite actions. Fix (checkout): default persist-credentials is now false to harden security and prevent unintended token persistence.

Internal: documentation for actions and workflows has been refreshed.

Breaking change(s)

The checkout step now sets persist-credentials: false by default; workflows that rely on persisted GitHub tokens for subsequent Git operations must explicitly opt in or adjust authentication.

What's Changed

Full Changelog: hoverkraft-tech/ci-github-common@0.30.2...0.31.0

0.30.2

Release Summary

parse-ci-reports: adds support for Prettier and Astro check outputs and improves the Markdown report for clearer, broader reporting coverage. parse-ci-reports: fixes report discovery by excluding node_modules from search patterns to avoid noisy matches.

Public vs internal separation:

Internal: documentation updated for actions/workflows and GitHub Actions dependencies bumped.

Breaking change(s)

No breaking changes.

What's Changed

Full Changelog: hoverkraft-tech/ci-github-common@0.30.1...0.30.2

Commits
  • a55670b docs: update actions and workflows documentation
  • 09f42e4 chore(deps): bump the github-actions-dependencies group across 3 directories ...
  • e8d06f4 feat: add local-workflow-actions action
  • cdf2bbe docs: update actions and workflows documentation
  • 4faa04a fix(checkout)!: set persist-credentials to false by default for security reason
  • 26b03d1 docs: update actions and workflows documentation
  • 5e8d0e6 chore(deps): bump the github-actions-dependencies group across 1 directory wi...
  • 5977b10 feat(parse-ci-reports): add support for astro check output
  • 9217828 Add node_modules exclusion to ReportPathResolver
  • 801c4ae feat(parse-ci-reports): add support for prettier check output
  • Additional commits viewable in compare view

Updates hoverkraft-tech/ci-github-common/.github/workflows/stale.yml from 0.30.1 to 0.31.0

Release notes

Sourced from hoverkraft-tech/ci-github-common/.github/workflows/stale.yml's releases.

0.31.0

Release Summary

Feature: introduces the local-workflow-actions action to simplify using local composite actions. Fix (checkout): default persist-credentials is now false to harden security and prevent unintended token persistence.

Internal: documentation for actions and workflows has been refreshed.

Breaking change(s)

The checkout step now sets persist-credentials: false by default; workflows that rely on persisted GitHub tokens for subsequent Git operations must explicitly opt in or adjust authentication.

What's Changed

Full Changelog: hoverkraft-tech/ci-github-common@0.30.2...0.31.0

0.30.2

Release Summary

parse-ci-reports: adds support for Prettier and Astro check outputs and improves the Markdown report for clearer, broader reporting coverage. parse-ci-reports: fixes report discovery by excluding node_modules from search patterns to avoid noisy matches.

Public vs internal separation:

Internal: documentation updated for actions/workflows and GitHub Actions dependencies bumped.

Breaking change(s)

No breaking changes.

What's Changed

Full Changelog: hoverkraft-tech/ci-github-common@0.30.1...0.30.2

Commits
  • a55670b docs: update actions and workflows documentation
  • 09f42e4 chore(deps): bump the github-actions-dependencies group across 3 directories ...
  • e8d06f4 feat: add local-workflow-actions action
  • cdf2bbe docs: update actions and workflows documentation
  • 4faa04a fix(checkout)!: set persist-credentials to false by default for security reason
  • 26b03d1 docs: update actions and workflows documentation
  • 5e8d0e6 chore(deps): bump the github-actions-dependencies group across 1 directory wi...
  • 5977b10 feat(parse-ci-reports): add support for astro check output
  • 9217828 Add node_modules exclusion to ReportPathResolver
  • 801c4ae feat(parse-ci-reports): add support for prettier check output
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the github-actions-dependencies group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [hoverkraft-tech/ci-github-nodejs/.github/workflows/continuous-integration.yml](https://github.com/hoverkraft-tech/ci-github-nodejs) | `0.20.0` | `0.20.4` |
| [hoverkraft-tech/ci-github-common/.github/workflows/greetings.yml](https://github.com/hoverkraft-tech/ci-github-common) | `0.30.1` | `0.31.0` |
| [hoverkraft-tech/ci-github-common/.github/workflows/need-fix-to-issue.yml](https://github.com/hoverkraft-tech/ci-github-common) | `0.30.1` | `0.31.0` |
| [hoverkraft-tech/ci-github-nodejs](https://github.com/hoverkraft-tech/ci-github-nodejs) | `0.20.0` | `0.20.4` |
| [hoverkraft-tech/ci-github-publish](https://github.com/hoverkraft-tech/ci-github-publish) | `0.14.1` | `0.16.0` |
| [hoverkraft-tech/ci-github-common/.github/workflows/semantic-pull-request.yml](https://github.com/hoverkraft-tech/ci-github-common) | `0.30.1` | `0.31.0` |
| [hoverkraft-tech/ci-github-common/.github/workflows/stale.yml](https://github.com/hoverkraft-tech/ci-github-common) | `0.30.1` | `0.31.0` |


Updates `hoverkraft-tech/ci-github-nodejs/.github/workflows/continuous-integration.yml` from 0.20.0 to 0.20.4
- [Release notes](https://github.com/hoverkraft-tech/ci-github-nodejs/releases)
- [Commits](hoverkraft-tech/ci-github-nodejs@a9809af...ce2467e)

Updates `hoverkraft-tech/ci-github-common/.github/workflows/greetings.yml` from 0.30.1 to 0.31.0
- [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases)
- [Commits](hoverkraft-tech/ci-github-common@c314229...a55670b)

Updates `hoverkraft-tech/ci-github-common/.github/workflows/need-fix-to-issue.yml` from 0.30.1 to 0.31.0
- [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases)
- [Commits](hoverkraft-tech/ci-github-common@c314229...a55670b)

Updates `hoverkraft-tech/ci-github-nodejs` from 0.20.0 to 0.20.4
- [Release notes](https://github.com/hoverkraft-tech/ci-github-nodejs/releases)
- [Commits](hoverkraft-tech/ci-github-nodejs@a9809af...ce2467e)

Updates `hoverkraft-tech/ci-github-publish` from 0.14.1 to 0.16.0
- [Release notes](https://github.com/hoverkraft-tech/ci-github-publish/releases)
- [Commits](hoverkraft-tech/ci-github-publish@0.14.1...ed864a8)

Updates `hoverkraft-tech/ci-github-common/.github/workflows/semantic-pull-request.yml` from 0.30.1 to 0.31.0
- [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases)
- [Commits](hoverkraft-tech/ci-github-common@c314229...a55670b)

Updates `hoverkraft-tech/ci-github-common/.github/workflows/stale.yml` from 0.30.1 to 0.31.0
- [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases)
- [Commits](hoverkraft-tech/ci-github-common@c314229...a55670b)

---
updated-dependencies:
- dependency-name: hoverkraft-tech/ci-github-nodejs/.github/workflows/continuous-integration.yml
  dependency-version: 0.20.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-common/.github/workflows/greetings.yml
  dependency-version: 0.31.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-common/.github/workflows/need-fix-to-issue.yml
  dependency-version: 0.31.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-nodejs
  dependency-version: 0.20.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-publish
  dependency-version: 0.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-common/.github/workflows/semantic-pull-request.yml
  dependency-version: 0.31.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-common/.github/workflows/stale.yml
  dependency-version: 0.31.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update Github_actions code labels Nov 28, 2025
@github-actions
Copy link

Hi, thank you for creating your PR, we will check it out very soon

@codecov
Copy link

codecov bot commented Nov 28, 2025

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 89.03%. Comparing base (e49f690) to head (05e1e4b).
⚠️ Report is 6 commits behind head on main.

Additional details and impacted files
@@           Coverage Diff           @@
##             main    #1673   +/-   ##
=======================================
  Coverage   89.03%   89.03%           
=======================================
  Files          31       31           
  Lines         757      757           
  Branches      136      132    -4     
=======================================
  Hits          674      674           
  Misses         83       83           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Dec 4, 2025

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Dec 4, 2025
@dependabot dependabot bot deleted the dependabot/github_actions/github-actions-dependencies-4f22c1cd31 branch December 4, 2025 15:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update Github_actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant