Skip to content

Bump the github-actions-dependencies group across 1 directory with 4 updates#111

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-dependencies-2aeaf0f726
Open

Bump the github-actions-dependencies group across 1 directory with 4 updates#111
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-dependencies-2aeaf0f726

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 24, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the github-actions-dependencies group with 4 updates in the / directory: actions/checkout, codecov/codecov-action, actions/download-artifact and JetBrains/qodana-action.

Updates actions/checkout from 6 to 7

Release notes

Sourced from actions/checkout's releases.

v7.0.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v6.0.3...v7.0.0

v6.0.3

What's Changed

New Contributors

Full Changelog: actions/checkout@v6...v6.0.3

v6.0.2

What's Changed

Full Changelog: actions/checkout@v6.0.1...v6.0.2

v6.0.1

What's Changed

Full Changelog: actions/checkout@v6...v6.0.1

Changelog

Sourced from actions/checkout's changelog.

Changelog

v7.0.0

v6.0.3

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

... (truncated)

Commits

Updates codecov/codecov-action from 6 to 7

Release notes

Sourced from codecov/codecov-action's releases.

v7.0.0

⚠️ Due to migration issues with keybase, we are unable to update our keys under the codecovsecurity account. We have deleted the account and are using codecovsecops with the original gpg key

What's Changed

Full Changelog: codecov/codecov-action@v6.0.1...v7.0.0

v6.0.2

This is a copy of the v7.0.0 release to make updates easier

What's Changed

Full Changelog: codecov/codecov-action@v6.0.1...v6.0.2

v6.0.1

What's Changed

Full Changelog: codecov/codecov-action@v6.0.0...v6.0.1

Changelog

Sourced from codecov/codecov-action's changelog.

v5.5.2

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.5.1..v5.5.2

v5.5.1

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.5.0..v5.5.1

v5.5.0

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.3..v5.5.0

v5.4.3

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.2..v5.4.3

v5.4.2

... (truncated)

Commits

Updates actions/download-artifact from 7 to 8

Release notes

Sourced from actions/download-artifact's releases.

v8.0.0

v8 - What's new

[!IMPORTANT] actions/download-artifact@v8 has been migrated to an ESM module. This should be transparent to the caller but forks might need to make significant changes.

[!IMPORTANT] Hash mismatches will now error by default. Users can override this behavior with a setting change (see below).

Direct downloads

To support direct uploads in actions/upload-artifact, the action will no longer attempt to unzip all downloaded files. Instead, the action checks the Content-Type header ahead of unzipping and skips non-zipped files. Callers wishing to download a zipped file as-is can also set the new skip-decompress parameter to true.

Enforced checks (breaking)

A previous release introduced digest checks on the download. If a download hash didn't match the expected hash from the server, the action would log a warning. Callers can now configure the behavior on mismatch with the digest-mismatch parameter. To be secure by default, we are now defaulting the behavior to error which will fail the workflow run.

ESM

To support new versions of the @actions/* packages, we've upgraded the package to ESM.

What's Changed

Full Changelog: actions/download-artifact@v7...v8.0.0

Commits
  • 3e5f45b Add regression tests for CJK characters (#471)
  • e6d03f6 Add a regression test for artifact name + content-type mismatches (#472)
  • 70fc10c Merge pull request #461 from actions/danwkennedy/digest-mismatch-behavior
  • f258da9 Add change docs
  • ccc058e Fix linting issues
  • bd7976b Add a setting to specify what to do on hash mismatch and default it to error
  • ac21fcf Merge pull request #460 from actions/danwkennedy/download-no-unzip
  • 15999bf Add note about package bumps
  • 974686e Bump the version to v8 and add release notes
  • fbe48b1 Update test names to make it clearer what they do
  • Additional commits viewable in compare view

Updates JetBrains/qodana-action from 2026.1.0 to 2026.1.3

Release notes

Sourced from JetBrains/qodana-action's releases.

v2026.1.3

Changelog

  • b0eaa86 ⬆️ Bump Kotlin to 2.3.0
  • c91a70c ✨ Add Maven plugin for Qodana
  • ca746a1 🐛 QD-14658 Fix Maven integration test with reliable Python issue detection
  • 1ca399e 🧱 Update vsts/QodanaScan/index.js
  • 6975b5c ✅ QD-14666 Update GitHub Action tests to use new CLI arguments (#597)
  • ab64602 ⬆️ Update qodana to v2026.1.1 (#595)
  • ac6b2a1 🐛 QD-14655 fix cache copy error and update the component
  • f44cbf3 🐛 QD-14679 Append native cache key as prefix, not suffix
  • cfac2b9 :feature: QD-14680 Switch auto-push of dist changes to local pre-commit check
  • c3af492 🐛 QD-15013 Fix azure-dev-release workflow failure due to missing husky (#602)
  • 4861e01 ⬆️ Update qodana to v2026.1.3 (#603)
Commits
  • 4861e01 ⬆️ Update qodana to v2026.1.3 (#603)
  • c3af492 🐛 QD-15013 Fix azure-dev-release workflow failure due to missing husky (#...
  • cfac2b9 :feature: QD-14680 Switch auto-push of dist changes to local pre-commit check
  • f44cbf3 🐛 QD-14679 Append native cache key as prefix, not suffix
  • ac6b2a1 🐛 QD-14655 fix cache copy error and update the component
  • ab64602 ⬆️ Update qodana to v2026.1.1 (#595)
  • 6975b5c ✅ QD-14666 Update GitHub Action tests to use new CLI argumen...
  • 1ca399e 🧱 Update vsts/QodanaScan/index.js
  • ca746a1 🐛 QD-14658 Fix Maven integration test with reliable Python issue detection
  • c91a70c ✨ Add Maven plugin for Qodana
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jun 24, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/github-actions-dependencies-2aeaf0f726 branch from a368c94 to 27b0f02 Compare June 30, 2026 15:53
@dependabot
Bump the github-actions-dependencies group across 1 directory with 4 …
e98862f 
…updates

Bumps the github-actions-dependencies group with 4 updates in the / directory: [actions/checkout](https://github.com/actions/checkout), [codecov/codecov-action](https://github.com/codecov/codecov-action), [actions/download-artifact](https://github.com/actions/download-artifact) and [JetBrains/qodana-action](https://github.com/jetbrains/qodana-action).


Updates `actions/checkout` from 6 to 7
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v6...v7)

Updates `codecov/codecov-action` from 6 to 7
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](codecov/codecov-action@v6...v7)

Updates `actions/download-artifact` from 7 to 8
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](actions/download-artifact@v7...v8)

Updates `JetBrains/qodana-action` from 2026.1.0 to 2026.1.3
- [Release notes](https://github.com/jetbrains/qodana-action/releases)
- [Commits](JetBrains/qodana-action@v2026.1.0...v2026.1.3)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions-dependencies
- dependency-name: actions/download-artifact
  dependency-version: '8'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions-dependencies
- dependency-name: codecov/codecov-action
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions-dependencies
- dependency-name: JetBrains/qodana-action
  dependency-version: 2026.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/github-actions-dependencies-2aeaf0f726 branch from 27b0f02 to e98862f Compare July 10, 2026 15:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants