Skip to content

Bump the github-actions group across 1 directory with 3 updates - #983

Merged
mosuem merged 1 commit into
mainfrom
dependabot/github_actions/github-actions-49fb612e28
Aug 5, 2026
Merged

mosuem merged 1 commit into
mainfrom
dependabot/github_actions/github-actions-49fb612e28

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 1, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the github-actions group with 3 updates in the / directory: actions/checkout, actions/stale and actions/labeler.

Updates actions/checkout from 7.0.0 to 7.0.1

Release notes

Sourced from actions/checkout's releases.

v7.0.1

What's Changed

Full Changelog: actions/checkout@v7...v7.0.1

Changelog

Sourced from actions/checkout's changelog.

Changelog

v7.0.1

v7.0.0

v6.0.3

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

... (truncated)

Commits

Updates actions/stale from 10.3.0 to 11.0.0

Release notes

Sourced from actions/stale's releases.

v11.0.0

What's Changed

Enhancement

Dependency Update

Full Changelog: actions/stale@v10...v11.0.0

v10.4.0

What's Changed

Bug Fix

Dependency Updates

New Contributors

Full Changelog: actions/stale@v10.3.0...v10.4.0

Commits
  • 4391f3d Fix 24 high severity vulnerabilities by overriding brace-expansion to 5.0.8 (...
  • eaf9131 refactor: update imports to use ES module syntax and improve test structure (...
  • 1e223db Bump undici to 6.27.0 via override, clean up stale license files, and version...
  • 9461cb1 fix: only-issue-types does not affect PRs (#1338)
  • See full diff in compare view

Updates actions/labeler from 6.1.0 to 7.0.0

Release notes

Sourced from actions/labeler's releases.

v7.0.0

What's Changed

Enhancements:

Full Changelog: actions/labeler@v6...v7.0.0

v6.2.0

What's Changed

Bug Fix

Dependency Updates

Full Changelog: actions/labeler@v6.1.0...v6.2.0

Commits
  • bf12e9b feat: migrate to ESM and update dependencies (#949)
  • b8dd2d9 Bump @​typescript-eslint/eslint-plugin from 8.59.1 to 8.61.1 (#942)
  • 53affe8 Bump js-yaml to 4.2.0, apply npm audit fix, and add undici override for 0 vul...
  • f612d9a Fix: Improve PR number validation and warning messages in input handling (#939)
  • See full diff in compare view

@dependabot dependabot Bot added the autosubmit label Aug 1, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner August 1, 2026 21:03
@github-actions github-actions Bot added the type-infra A repository infrastructure change or enhancement label Aug 1, 2026
@github-actions

github-actions Bot commented Aug 1, 2026 •

Copy link
Copy Markdown

PR Health ⚠️

Health checks are rerunning. These details are out-of-date.

@auto-submit

auto-submit Bot commented Aug 1, 2026

Copy link
Copy Markdown

autosubmit label was removed for dart-lang/core/983, because - The status or check suite zizmor-output has failed. Please fix the issues identified (or deflake) before re-applying this label.

@auto-submit auto-submit Bot removed the autosubmit label Aug 1, 2026
@dependabot dependabot Bot changed the title Bump the github-actions group with 3 updates Bump the github-actions group across 1 directory with 3 updates Aug 3, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/github-actions-49fb612e28 branch from b1583c2 to f0e92d5 Compare August 3, 2026 15:53
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/github-actions-49fb612e28 branch from f0e92d5 to fd205a4 Compare August 4, 2026 16:51
Bumps the github-actions group with 3 updates in the / directory: [actions/checkout](https://github.com/actions/checkout), [actions/stale](https://github.com/actions/stale) and [actions/labeler](https://github.com/actions/labeler).


Updates `actions/checkout` from 7.0.0 to 7.0.1
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@9c091bb...3d3c42e)

Updates `actions/stale` from 10.3.0 to 11.0.0
- [Release notes](https://github.com/actions/stale/releases)
- [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md)
- [Commits](actions/stale@eb5cf3a...4391f3d)

Updates `actions/labeler` from 6.1.0 to 7.0.0
- [Release notes](https://github.com/actions/labeler/releases)
- [Commits](actions/labeler@f27b608...bf12e9b)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: actions/labeler
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/stale
  dependency-version: 11.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/github-actions-49fb612e28 branch from fd205a4 to f2e0ee5 Compare August 5, 2026 06:22
@mosuem
mosuem merged commit ef697b9 into main Aug 5, 2026
64 checks passed
@mosuem
mosuem deleted the dependabot/github_actions/github-actions-49fb612e28 branch August 5, 2026 06:23
copybara-service Bot pushed a commit to dart-lang/sdk that referenced this pull request Aug 7, 2026
Revisions updated by `dart tools/rev_sdk_deps.dart`.

core (https://github.com/dart-lang/core/compare/fe516ee..4a5ae2b):
  4a5ae2bc  Wed Aug 5 15:49:08 2026 +0000  dependabot[bot]  Bump the github-actions group with 4 updates (dart-lang/core#988)
  30363b90  Wed Aug 5 17:37:07 2026 +0200  Moritz  Add skip-changelog-check label to dependabot PRs (dart-lang/core#987)
  ef697b97  Wed Aug 5 08:23:09 2026 +0200  dependabot[bot]  Bump the github-actions group across 1 directory with 3 updates (dart-lang/core#983)
  95bf1b9d  Wed Aug 5 08:21:09 2026 +0200  Moritz  Add pub dependabot support (dart-lang/core#986)
  b0400198  Tue Aug 4 18:48:31 2026 +0200  Moritz  Replace permissions: read-all with permissions: contents: read in workflows (dart-lang/core#985)
  e1b0a677  Mon Aug 3 17:51:19 2026 +0200  Moritz  Pin actions/checkout (dart-lang/core#984)

dartdoc (https://github.com/dart-lang/dartdoc/compare/ac96918..1fd02f7):
  1fd02f73  Sat Aug 1 18:52:23 2026 +0000  dependabot[bot]  Bump the github-actions group with 3 updates (dart-lang/dartdoc#4276)

ecosystem (https://github.com/dart-lang/ecosystem/compare/edfdb3b..ed9c592):
  ed9c592  Wed Aug 5 15:19:24 2026 +0200  Sigurd Meldgaard  Support pull requests from forks and custom branches in CI workflows (dart-lang/ecosystem#440)
  d8c8a4c  Wed Aug 5 13:09:39 2026 +0200  Sigurd Meldgaard  Support configurable tag prefix in firehose and publish.yaml (dart-lang/ecosystem#436)

http (https://github.com/dart-lang/http/compare/5d94ef5..9cb80c7):
  9cb80c7  Wed Aug 5 16:32:40 2026 -0700  Nate Bosch  Undeprecate the withCredentials field (dart-lang/http#1962)
  44496f4  Mon Aug 3 20:58:34 2026 +0300  Melih Arık  doc(http_profile): fix broken code examples in header setter docs (dart-lang/http#1954)
  49ddf11  Mon Jul 20 21:08:18 2026 +0300  Ellet  docs(readme): add close method override in UserAgentClient example (dart-lang/http#1949)
  fe4aaa9  Tue Jul 14 11:25:42 2026 -0700  Nate Bosch  Switch to feature version bump (dart-lang/http#1953)
  664fe06  Mon Jul 13 22:08:59 2026 +0200  Maurice Raguse  Support for configuring the browser `fetch` credentials mode in `BrowserClient`. (dart-lang/http#1937)

shelf (https://github.com/dart-lang/shelf/compare/6918a76..fb3f931):
  fb3f931  Sat Aug 1 20:01:06 2026 +0000  dependabot[bot]  Bump the github-actions group with 4 updates (dart-lang/shelf#537)

test (https://github.com/dart-lang/test/compare/4838365..dd426d4):
  dd426d43  Tue Aug 4 15:46:52 2026 -0700  Nate Bosch  Obfuscate the test runner connection for VM and Node tests (dart-lang/test#2704)

tools (https://github.com/dart-lang/tools/compare/b827a6e..f3ec9ed):
  f3ec9ed5  Wed Aug 5 16:36:58 2026 +0000  dependabot[bot]  Bump the github-actions group across 1 directory with 8 updates (dart-lang/tools#2496)
  6dac7b1f  Wed Aug 5 17:37:23 2026 +0200  Moritz  Add skip-changelog-check label to dependabot PRs (dart-lang/tools#2495)
  f16493da  Wed Aug 5 08:11:23 2026 +0000  dependabot[bot]  Bump analyzer from 10.2.0 to 14.1.0 in /pkgs/graphs (dart-lang/tools#2493)
  7f33666d  Wed Aug 5 08:21:24 2026 +0200  Moritz  Add pub dependabot support (dart-lang/tools#2492)
  1e3aac17  Tue Aug 4 18:52:43 2026 +0200  Moritz  Replace permissions: read-all with permissions: contents: read in workflows (dart-lang/tools#2490)
  e79e9cc4  Tue Aug 4 08:47:01 2026 -0300  Felipe Morschel  [yaml] Better recovering for list entry without `- ` prefix (dart-lang/tools#2427)
  ca89367d  Mon Aug 3 17:50:48 2026 +0200  Moritz  ci: pin unpinned GitHub Actions references to commit SHAs (dart-lang/tools#2487)
  0da8d930  Mon Aug 3 10:48:16 2026 +0200  Moritz  Update CODEOWNERS with global fallback and missing packages (dart-lang/tools#2469)
  28396db2  Mon Aug 3 09:34:24 2026 +0200  Moritz  [test_reflective_loader] Ignore unreachable_from_main in test files (dart-lang/tools#2486)
  168a6e13  Mon Aug 3 08:28:27 2026 +0200  Morgan :)  source_maps: check bounds earlier. (dart-lang/tools#2483)
  27756a9b  Fri Jul 31 17:37:37 2026 +0100  Danny Tuppeny  [test_reflective_loader] Don't add setUp/tearDown if not defined, and provide correct locations (dart-lang/tools#2341)

web (https://github.com/dart-lang/web/compare/12a9ca2..f1b9d56):
  f1b9d56  Sat Aug 1 19:43:21 2026 +0000  dependabot[bot]  Bump the github-actions group with 3 updates (dart-lang/web#566)

R=bquinlan@google.com

Change-Id: Id362bbe87d302cfb6a1b6618de12c67be72f1855
Reviewed-on: https://dart-review.googlesource.com/c/sdk/+/532380
Commit-Queue: Nate Bosch <nbosch@google.com>
Reviewed-by: Brian Quinlan <bquinlan@google.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

type-infra A repository infrastructure change or enhancement

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants