dependabot[bot] opened a new pull request, #3674: URL: https://github.com/apache/iggy/pull/3674
Bumps the github-actions group with 4 updates: [actions/setup-node](https://github.com/actions/setup-node), [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv), [taiki-e/install-action](https://github.com/taiki-e/install-action) and [softprops/action-gh-release](https://github.com/softprops/action-gh-release). Updates `actions/setup-node` from 6 to 6.4.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/setup-node/releases";>actions/setup-node's releases</a>.</em></p> <blockquote> <h2>v6.4.0</h2> <h2>What's Changed</h2> <h3>Dependency updates:</h3> <ul> <li>Upgrade <a href="https://github.com/actions";><code>@actions</code></a> dependencies by <a href="https://github.com/Copilot";><code>@Copilot</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1525";>actions/setup-node#1525</a></li> <li>Update Node.js versions in versions.yml and bump package to v6.4.0 by <a href="https://github.com/priya-kinthali";><code>@priya-kinthali</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1533";>actions/setup-node#1533</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/Copilot";><code>@Copilot</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-node/pull/1525";>actions/setup-node#1525</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/setup-node/compare/v6...v6.4.0";>https://github.com/actions/setup-node/compare/v6...v6.4.0</a></p> <h2>v6.3.0</h2> <h2>What's Changed</h2> <h3>Enhancements:</h3> <ul> <li>Support parsing <code>devEngines</code> field by <a href="https://github.com/susnux";><code>@susnux</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1283";>actions/setup-node#1283</a></li> </ul> <blockquote> <p>When using node-version-file: package.json, setup-node now prefers devEngines.runtime over engines.node.</p> </blockquote> <h3>Dependency updates:</h3> <ul> <li>Fix npm audit issues by <a href="https://github.com/gowridurgad";><code>@gowridurgad</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1491";>actions/setup-node#1491</a></li> <li>Replace uuid with crypto.randomUUID() by <a href="https://github.com/trivikr";><code>@trivikr</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1378";>actions/setup-node#1378</a></li> <li>Upgrade minimatch from 3.1.2 to 3.1.5 by <a href="https://github.com/dependabot";><code>@dependabot</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1498";>actions/setup-node#1498</a></li> </ul> <h3>Bug fixes:</h3> <ul> <li>Remove hardcoded bearer for mirror-url <a href="https://github.com/marco-ippolito";><code>@marco-ippolito</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1467";>actions/setup-node#1467</a></li> <li>Scope test lockfiles by package manager and update cache tests by <a href="https://github.com/gowridurgad";><code>@gowridurgad</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1495";>actions/setup-node#1495</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/susnux";><code>@susnux</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-node/pull/1283";>actions/setup-node#1283</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/setup-node/compare/v6...v6.3.0";>https://github.com/actions/setup-node/compare/v6...v6.3.0</a></p> <h2>v6.2.0</h2> <h2>What's Changed</h2> <h3>Documentation</h3> <ul> <li>Documentation update related to absence of Lockfile by <a href="https://github.com/mahabaleshwars";><code>@mahabaleshwars</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1454";>actions/setup-node#1454</a></li> <li>Correct mirror option typos by <a href="https://github.com/MikeMcC399";><code>@MikeMcC399</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1442";>actions/setup-node#1442</a></li> <li>Readme update on checkout version v6 by <a href="https://github.com/deining";><code>@deining</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1446";>actions/setup-node#1446</a></li> <li>Readme typo fixes <a href="https://github.com/munyari";><code>@munyari</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1226";>actions/setup-node#1226</a></li> <li>Advanced document update on checkout version v6 by <a href="https://github.com/aparnajyothi-y";><code>@aparnajyothi-y</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1468";>actions/setup-node#1468</a></li> </ul> <h3>Dependency updates:</h3> <ul> <li>Upgrade <code>@actions/cache</code> to v5.0.1 by <a href="https://github.com/salmanmkc";><code>@salmanmkc</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1449";>actions/setup-node#1449</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/mahabaleshwars";><code>@mahabaleshwars</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-node/pull/1454";>actions/setup-node#1454</a></li> <li><a href="https://github.com/MikeMcC399";><code>@MikeMcC399</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-node/pull/1442";>actions/setup-node#1442</a></li> <li><a href="https://github.com/deining";><code>@deining</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-node/pull/1446";>actions/setup-node#1446</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/actions/setup-node/commit/08f58d1471bff7f3a07d167b4ad7df25d5fcfcb6";><code>08f58d1</code></a> Bump <code>@octokit/request-error</code> and <code>@actions/github</code> (<a href="https://redirect.github.com/actions/setup-node/issues/1227";>#1227</a>)</li> <li>See full diff in <a href="https://github.com/actions/setup-node/compare/v6...v6.4.0";>compare view</a></li> </ul> </details> <br /> Updates `astral-sh/setup-uv` from 8.3.0 to 8.3.1 <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/astral-sh/setup-uv/commit/f98e06938123ccabd21905ea5d0069192241f9f1";><code>f98e069</code></a> Change update-docs PR labels from 'update-docs' to 'documentation' (<a href="https://redirect.github.com/astral-sh/setup-uv/issues/945";>#945</a>)</li> <li><a href="https://github.com/astral-sh/setup-uv/commit/cd462639a967553a16241af35461402a96978d48";><code>cd46263</code></a> chore: update known checksums for 0.11.27 (<a href="https://redirect.github.com/astral-sh/setup-uv/issues/944";>#944</a>)</li> <li><a href="https://github.com/astral-sh/setup-uv/commit/11245c7e122cd1c2297e8115d1e43fe1570f6270";><code>11245c7</code></a> docs: update version references to v8.3.0 (<a href="https://redirect.github.com/astral-sh/setup-uv/issues/939";>#939</a>)</li> <li>See full diff in <a href="https://github.com/astral-sh/setup-uv/compare/d31148d669074a8d0a63714ba94f3201e7020bc3...f98e06938123ccabd21905ea5d0069192241f9f1";>compare view</a></li> </ul> </details> <br /> Updates `taiki-e/install-action` from 2.82.9 to 2.82.10 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/taiki-e/install-action/releases";>taiki-e/install-action's releases</a>.</em></p> <blockquote> <h2>2.82.10</h2> <ul> <li> <p>Update <code>tombi@latest</code> to 1.2.0.</p> </li> <li> <p>Update <code>cargo-nextest@latest</code> to 0.9.140.</p> </li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md";>taiki-e/install-action's changelog</a>.</em></p> <blockquote> <h2>[2.82.10] - 2026-07-07</h2> <ul> <li> <p>Update <code>tombi@latest</code> to 1.2.0.</p> </li> <li> <p>Update <code>cargo-nextest@latest</code> to 0.9.140.</p> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/taiki-e/install-action/commit/50414676f9f5d50a65992c6dd2ed02641263226c";><code>5041467</code></a> Release 2.82.10</li> <li><a href="https://github.com/taiki-e/install-action/commit/99a7f87ef1e6f99c941052e455bae2424b27235f";><code>99a7f87</code></a> Update uv manifest</li> <li><a href="https://github.com/taiki-e/install-action/commit/3ab022bf4858764f3ce8bda3e6a945e6269eb922";><code>3ab022b</code></a> Update <code>tombi@latest</code> to 1.2.0</li> <li><a href="https://github.com/taiki-e/install-action/commit/f2df39bdf2bef4791037b2adc3809e6fe98d2104";><code>f2df39b</code></a> Update mdbook manifest</li> <li><a href="https://github.com/taiki-e/install-action/commit/1f59d6175c5e6a275739a4aa090c645bb134e001";><code>1f59d61</code></a> Update <code>cargo-nextest@latest</code> to 0.9.140</li> <li>See full diff in <a href="https://github.com/taiki-e/install-action/compare/v2.82.9...v2.82.10";>compare view</a></li> </ul> </details> <br /> Updates `softprops/action-gh-release` from 3 to 3.0.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/softprops/action-gh-release/releases";>softprops/action-gh-release's releases</a>.</em></p> <blockquote> <h2>v3.0.1</h2> <h2>3.0.1</h2> <ul> <li>maintenance release with updated dependencies</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md";>softprops/action-gh-release's changelog</a>.</em></p> <blockquote> <h2>3.0.1</h2> <ul> <li>maintenance release with updated dependencies</li> </ul> <h2>3.0.0</h2> <p><code>3.0.0</code> is a major release that moves the action runtime from Node 20 to Node 24. Use <code>v3</code> on GitHub-hosted runners and self-hosted fleets that already support the Node 24 Actions runtime. <code>v2.6.2</code> was the final Node 20-compatible release and is no longer maintained or supported.</p> <h2>What's Changed</h2> <h3>Other Changes 🔄</h3> <ul> <li>Move the action runtime and bundle target to Node 24</li> <li>Update <code>@types/node</code> to the Node 24 line and allow future Dependabot updates</li> <li>Keep the floating major tag on <code>v3</code>; freeze <code>v2</code> at the final <code>v2.6.2</code> release</li> </ul> <h2>2.6.2</h2> <p><code>2.6.2</code> is the final <code>v2</code> release and is no longer maintained or supported. Upgrade to <code>v3</code> for the supported Node 24 runtime and current fixes.</p> <h2>What's Changed</h2> <h3>Other Changes 🔄</h3> <ul> <li>chore(deps): bump picomatch from 4.0.3 to 4.0.4 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/softprops/action-gh-release/pull/775";>softprops/action-gh-release#775</a></li> <li>chore(deps): bump brace-expansion from 5.0.4 to 5.0.5 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/softprops/action-gh-release/pull/777";>softprops/action-gh-release#777</a></li> <li>chore(deps): bump vite from 8.0.0 to 8.0.5 by <a href="https://github.com/dependabot";><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/softprops/action-gh-release/pull/781";>softprops/action-gh-release#781</a></li> </ul> <h2>2.6.1</h2> <p><code>2.6.1</code> is a patch release focused on restoring linked discussion thread creation when <code>discussion_category_name</code> is set. It fixes <code>[#764](https://github.com/softprops/action-gh-release/issues/764)</code>, where the draft-first publish flow stopped carrying the discussion category through the final publish step.</p> <p>If you still hit an issue after upgrading, please open a report with the bug template and include a minimal repro or sanitized workflow snippet where possible.</p> <h2>What's Changed</h2> <h3>Bug fixes 🐛</h3> <ul> <li>fix: preserve discussion category on publish by <a href="https://github.com/chenrui333";><code>@chenrui333</code></a> in <a href="https://redirect.github.com/softprops/action-gh-release/pull/765";>softprops/action-gh-release#765</a></li> </ul> <h2>2.6.0</h2> <p><code>2.6.0</code> is a minor release centered on <code>previous_tag</code> support for <code>generate_release_notes</code>, which lets workflows pin GitHub's comparison base explicitly instead of relying on the default range.</p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/softprops/action-gh-release/commit/b4309332981a82ec1c5618f44dd2e27cc8bfbfda";><code>b430933</code></a> release: cut v3.0.0 for Node 24 upgrade (<a href="https://redirect.github.com/softprops/action-gh-release/issues/670";>#670</a>)</li> <li><a href="https://github.com/softprops/action-gh-release/commit/c2e35e05a74208bafbfcbdae5ebc9da7236e980f";><code>c2e35e0</code></a> chore(deps): bump the npm group across 1 directory with 7 updates (<a href="https://redirect.github.com/softprops/action-gh-release/issues/783";>#783</a>)</li> <li><a href="https://github.com/softprops/action-gh-release/commit/3bb12739c298aeb8a4eeaf626c5b8d85266b0e65";><code>3bb1273</code></a> release 2.6.2</li> <li><a href="https://github.com/softprops/action-gh-release/commit/c34030fec99b0db0f2f22ce7806c445dddb6e224";><code>c34030f</code></a> chore: bump node to 24.14.1</li> <li><a href="https://github.com/softprops/action-gh-release/commit/8975bd05c0630603edb0dca2fc7544bf1c77f600";><code>8975bd0</code></a> chore(deps): bump vite from 8.0.0 to 8.0.5 (<a href="https://redirect.github.com/softprops/action-gh-release/issues/781";>#781</a>)</li> <li><a href="https://github.com/softprops/action-gh-release/commit/f71937f44d5662ac6eb861431746174a7b46a7b6";><code>f71937f</code></a> chore(deps): bump brace-expansion from 5.0.4 to 5.0.5 (<a href="https://redirect.github.com/softprops/action-gh-release/issues/777";>#777</a>)</li> <li><a href="https://github.com/softprops/action-gh-release/commit/3f0d239d58d5c226738ec0a08d0465b548dc026f";><code>3f0d239</code></a> chore(deps): bump picomatch from 4.0.3 to 4.0.4 (<a href="https://redirect.github.com/softprops/action-gh-release/issues/775";>#775</a>)</li> <li><a href="https://github.com/softprops/action-gh-release/commit/153bb8e04406b158c6c84fc1615b65b24149a1fe";><code>153bb8e</code></a> release 2.6.1</li> <li><a href="https://github.com/softprops/action-gh-release/commit/569deb874d08cd8cc0aa24af7c0b21160fe4b0e4";><code>569deb8</code></a> fix: preserve discussion category when publishing releases (<a href="https://redirect.github.com/softprops/action-gh-release/issues/765";>#765</a>)</li> <li><a href="https://github.com/softprops/action-gh-release/commit/26e8ad27a09a225049a7075d7ec1caa2df6ff332";><code>26e8ad2</code></a> release 2.6.0</li> <li>Additional commits viewable in <a href="https://github.com/softprops/action-gh-release/compare/v3...v3.0.1";>compare view</a></li> </ul> </details> <br /> You can trigger a rebase of this PR by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
