Bump the github-actions group with 3 updates - #566
Merged
auto-submit[bot] merged 2 commits intoAug 1, 2026
Conversation
Bumps the github-actions group with 3 updates: [actions/checkout](https://github.com/actions/checkout), [actions/setup-node](https://github.com/actions/setup-node) and [actions/stale](https://github.com/actions/stale). Updates `actions/checkout` from 7.0.0 to 7.0.1 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@9c091bb...3d3c42e) Updates `actions/setup-node` from 6 to 7 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](actions/setup-node@v6...v7) Updates `actions/stale` from 10.3.0 to 11.0.0 - [Release notes](https://github.com/actions/stale/releases) - [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md) - [Commits](actions/stale@eb5cf3a...4391f3d) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: actions/setup-node dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/stale dependency-version: 11.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com>
fluttergithubbot
approved these changes
Aug 1, 2026
|
autosubmit label was removed for dart-lang/web/566, because - The status or check suite zizmor-output has failed. Please fix the issues identified (or deflake) before re-applying this label. |
* Replace overly broad read-all permissions with explicit contents: read across all workflows. * Pin setup-node action reference to exact commit SHA in js_interop_gen.yaml.
auto-submit
Bot
deleted the
dependabot/github_actions/github-actions-326e433563
branch
August 1, 2026 19:43
copybara-service Bot
pushed a commit
to dart-lang/sdk
that referenced
this pull request
Aug 7, 2026
Revisions updated by `dart tools/rev_sdk_deps.dart`. core (https://github.com/dart-lang/core/compare/fe516ee..4a5ae2b): 4a5ae2bc Wed Aug 5 15:49:08 2026 +0000 dependabot[bot] Bump the github-actions group with 4 updates (dart-lang/core#988) 30363b90 Wed Aug 5 17:37:07 2026 +0200 Moritz Add skip-changelog-check label to dependabot PRs (dart-lang/core#987) ef697b97 Wed Aug 5 08:23:09 2026 +0200 dependabot[bot] Bump the github-actions group across 1 directory with 3 updates (dart-lang/core#983) 95bf1b9d Wed Aug 5 08:21:09 2026 +0200 Moritz Add pub dependabot support (dart-lang/core#986) b0400198 Tue Aug 4 18:48:31 2026 +0200 Moritz Replace permissions: read-all with permissions: contents: read in workflows (dart-lang/core#985) e1b0a677 Mon Aug 3 17:51:19 2026 +0200 Moritz Pin actions/checkout (dart-lang/core#984) dartdoc (https://github.com/dart-lang/dartdoc/compare/ac96918..1fd02f7): 1fd02f73 Sat Aug 1 18:52:23 2026 +0000 dependabot[bot] Bump the github-actions group with 3 updates (dart-lang/dartdoc#4276) ecosystem (https://github.com/dart-lang/ecosystem/compare/edfdb3b..ed9c592): ed9c592 Wed Aug 5 15:19:24 2026 +0200 Sigurd Meldgaard Support pull requests from forks and custom branches in CI workflows (dart-lang/ecosystem#440) d8c8a4c Wed Aug 5 13:09:39 2026 +0200 Sigurd Meldgaard Support configurable tag prefix in firehose and publish.yaml (dart-lang/ecosystem#436) http (https://github.com/dart-lang/http/compare/5d94ef5..9cb80c7): 9cb80c7 Wed Aug 5 16:32:40 2026 -0700 Nate Bosch Undeprecate the withCredentials field (dart-lang/http#1962) 44496f4 Mon Aug 3 20:58:34 2026 +0300 Melih Arık doc(http_profile): fix broken code examples in header setter docs (dart-lang/http#1954) 49ddf11 Mon Jul 20 21:08:18 2026 +0300 Ellet docs(readme): add close method override in UserAgentClient example (dart-lang/http#1949) fe4aaa9 Tue Jul 14 11:25:42 2026 -0700 Nate Bosch Switch to feature version bump (dart-lang/http#1953) 664fe06 Mon Jul 13 22:08:59 2026 +0200 Maurice Raguse Support for configuring the browser `fetch` credentials mode in `BrowserClient`. (dart-lang/http#1937) shelf (https://github.com/dart-lang/shelf/compare/6918a76..fb3f931): fb3f931 Sat Aug 1 20:01:06 2026 +0000 dependabot[bot] Bump the github-actions group with 4 updates (dart-lang/shelf#537) test (https://github.com/dart-lang/test/compare/4838365..dd426d4): dd426d43 Tue Aug 4 15:46:52 2026 -0700 Nate Bosch Obfuscate the test runner connection for VM and Node tests (dart-lang/test#2704) tools (https://github.com/dart-lang/tools/compare/b827a6e..f3ec9ed): f3ec9ed5 Wed Aug 5 16:36:58 2026 +0000 dependabot[bot] Bump the github-actions group across 1 directory with 8 updates (dart-lang/tools#2496) 6dac7b1f Wed Aug 5 17:37:23 2026 +0200 Moritz Add skip-changelog-check label to dependabot PRs (dart-lang/tools#2495) f16493da Wed Aug 5 08:11:23 2026 +0000 dependabot[bot] Bump analyzer from 10.2.0 to 14.1.0 in /pkgs/graphs (dart-lang/tools#2493) 7f33666d Wed Aug 5 08:21:24 2026 +0200 Moritz Add pub dependabot support (dart-lang/tools#2492) 1e3aac17 Tue Aug 4 18:52:43 2026 +0200 Moritz Replace permissions: read-all with permissions: contents: read in workflows (dart-lang/tools#2490) e79e9cc4 Tue Aug 4 08:47:01 2026 -0300 Felipe Morschel [yaml] Better recovering for list entry without `- ` prefix (dart-lang/tools#2427) ca89367d Mon Aug 3 17:50:48 2026 +0200 Moritz ci: pin unpinned GitHub Actions references to commit SHAs (dart-lang/tools#2487) 0da8d930 Mon Aug 3 10:48:16 2026 +0200 Moritz Update CODEOWNERS with global fallback and missing packages (dart-lang/tools#2469) 28396db2 Mon Aug 3 09:34:24 2026 +0200 Moritz [test_reflective_loader] Ignore unreachable_from_main in test files (dart-lang/tools#2486) 168a6e13 Mon Aug 3 08:28:27 2026 +0200 Morgan :) source_maps: check bounds earlier. (dart-lang/tools#2483) 27756a9b Fri Jul 31 17:37:37 2026 +0100 Danny Tuppeny [test_reflective_loader] Don't add setUp/tearDown if not defined, and provide correct locations (dart-lang/tools#2341) web (https://github.com/dart-lang/web/compare/12a9ca2..f1b9d56): f1b9d56 Sat Aug 1 19:43:21 2026 +0000 dependabot[bot] Bump the github-actions group with 3 updates (dart-lang/web#566) R=bquinlan@google.com Change-Id: Id362bbe87d302cfb6a1b6618de12c67be72f1855 Reviewed-on: https://dart-review.googlesource.com/c/sdk/+/532380 Commit-Queue: Nate Bosch <nbosch@google.com> Reviewed-by: Brian Quinlan <bquinlan@google.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the github-actions group with 3 updates: actions/checkout, actions/setup-node and actions/stale.
Updates
actions/checkoutfrom 7.0.0 to 7.0.1Release notes
Sourced from actions/checkout's releases.
Changelog
Sourced from actions/checkout's changelog.
... (truncated)
Commits
3d3c42eprep v7.0.1 release (#2531)2880268escape values passed to --unset (#2530)12cd223trim only ascii whitespace for branch (#2521)62661c4skip running unsafe pr check if input is default (#2518)e8d4307Bump the minor-actions-dependencies group with 2 updates (#2499)631c942eslint 9 (#2474)4f1f4aeBump actions/upload-artifact from 4 to 7 (#2476)ba09753Bump actions/checkout from 6 to 7 (#2488)b9e0990Bump docker/login-action from 3.3.0 to 4.2.0 (#2479)e8cb398Bump docker/build-push-action from 6.5.0 to 7.2.0 (#2478)Updates
actions/setup-nodefrom 6 to 7Release notes
Sourced from actions/setup-node's releases.
... (truncated)
Commits
8207627Migrate to ESM and upgrade dependencies (#1574)04be95cAdd cache-primary-key and cache-matched-key as outputs (#1577)7c2c68ddocs: Update caching recommendations to mitigate cache poisoning risks (#1567)6a61c03Merge pull request #1569 from jasongin/update-actions-cache-5.1.030eb73bResolve high-severity audit issues4e1a87aUpdate dist360237fStrict equality4f8aac5Bump@actions/cacheto 5.1.0, log cache write deniedf4a67bbOnly usemirrorTokeningetManifestif it's provided (#1548)0355742Remove dummy NODE_AUTH_TOKEN export (#1558)Updates
actions/stalefrom 10.3.0 to 11.0.0Release notes
Sourced from actions/stale's releases.
Commits
4391f3dFix 24 high severity vulnerabilities by overriding brace-expansion to 5.0.8 (...eaf9131refactor: update imports to use ES module syntax and improve test structure (...1e223dbBump undici to 6.27.0 via override, clean up stale license files, and version...9461cb1fix:only-issue-typesdoes not affect PRs (#1338)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions