build(deps): bump the actions group across 1 directory with 5 updates by dependabot[bot] · Pull Request #46 · marimo-team/mkdocs-marimo

dependabot · 2025-09-02T12:04:01Z

Bumps the actions group with 5 updates in the / directory:

Package	From	To
actions/checkout	`4.2.2`	`5.0.0`
prefix-dev/setup-pixi	`0.8.3`	`0.9.0`
actions/upload-artifact	`4.6.1`	`4.6.2`
actions/download-artifact	`4.1.9`	`5.0.0`
peter-evans/create-pull-request	`7.0.7`	`7.0.8`

Updates actions/checkout from 4.2.2 to 5.0.0

Release notes

Sourced from actions/checkout's releases.

v5.0.0

What's Changed

Update actions checkout to use node 24 by @salmanmkc in actions/checkout#2226

Prepare v5.0.0 release by @salmanmkc in actions/checkout#2238

⚠️ Minimum Compatible Runner Version

v2.327.1
Release Notes

Make sure your runner is updated to this version or newer to use this release.

Full Changelog: actions/checkout@v4...v5.0.0

v4.3.0

What's Changed

docs: update README.md by @motss in actions/checkout#1971

Add internal repos for checking out multiple repositories by @mouismail in actions/checkout#1977

Documentation update - add recommended permissions to Readme by @benwells in actions/checkout#2043

Adjust positioning of user email note and permissions heading by @joshmgross in actions/checkout#2044

Update README.md by @nebuk89 in actions/checkout#2194

Update CODEOWNERS for actions by @TingluoHuang in actions/checkout#2224

Update package dependencies by @salmanmkc in actions/checkout#2236

Prepare release v4.3.0 by @salmanmkc in actions/checkout#2237

New Contributors

@motss made their first contribution in actions/checkout#1971

@mouismail made their first contribution in actions/checkout#1977

@benwells made their first contribution in actions/checkout#2043

@nebuk89 made their first contribution in actions/checkout#2194

@salmanmkc made their first contribution in actions/checkout#2236

Full Changelog: actions/checkout@v4...v4.3.0

Changelog

Sourced from actions/checkout's changelog.

Changelog

V5.0.0

Update actions checkout to use node 24 by @salmanmkc in actions/checkout#2226

V4.3.0

docs: update README.md by @motss in actions/checkout#1971

Add internal repos for checking out multiple repositories by @mouismail in actions/checkout#1977

Documentation update - add recommended permissions to Readme by @benwells in actions/checkout#2043

Adjust positioning of user email note and permissions heading by @joshmgross in actions/checkout#2044

Update README.md by @nebuk89 in actions/checkout#2194

Update CODEOWNERS for actions by @TingluoHuang in actions/checkout#2224

Update package dependencies by @salmanmkc in actions/checkout#2236

v4.2.2

url-helper.ts now leverages well-known environment variables by @jww3 in actions/checkout#1941

Expand unit test coverage for isGhes by @jww3 in actions/checkout#1946

v4.2.1

Check out other refs/* by commit if provided, fall back to ref by @orhantoy in actions/checkout#1924

v4.2.0

Add Ref and Commit outputs by @lucacome in actions/checkout#1180

Dependency updates by @dependabot- actions/checkout#1777, actions/checkout#1872

v4.1.7

Bump the minor-npm-dependencies group across 1 directory with 4 updates by @dependabot in actions/checkout#1739

Bump actions/checkout from 3 to 4 by @dependabot in actions/checkout#1697

Check out other refs/* by commit by @orhantoy in actions/checkout#1774

Pin actions/checkout's own workflows to a known, good, stable version. by @jww3 in actions/checkout#1776

v4.1.6

Check platform to set archive extension appropriately by @cory-miller in actions/checkout#1732

v4.1.5

Update NPM dependencies by @cory-miller in actions/checkout#1703

Bump github/codeql-action from 2 to 3 by @dependabot in actions/checkout#1694

Bump actions/setup-node from 1 to 4 by @dependabot in actions/checkout#1696

Bump actions/upload-artifact from 2 to 4 by @dependabot in actions/checkout#1695

README: Suggest user.email to be 41898282+github-actions[bot]@users.noreply.github.com by @cory-miller in actions/checkout#1707

v4.1.4

Disable extensions.worktreeConfig when disabling sparse-checkout by @jww3 in actions/checkout#1692

Add dependabot config by @cory-miller in actions/checkout#1688

Bump the minor-actions-dependencies group with 2 updates by @dependabot in actions/checkout#1693

Bump word-wrap from 1.2.3 to 1.2.5 by @dependabot in actions/checkout#1643

v4.1.3

... (truncated)

Commits

08c6903 Prepare v5.0.0 release (#2238)
9f26565 Update actions checkout to use node 24 (#2226)
08eba0b Prepare release v4.3.0 (#2237)
631c7dc Update package dependencies (#2236)
8edcb1b Update CODEOWNERS for actions (#2224)
09d2aca Update README.md (#2194)
85e6279 Adjust positioning of user email note and permissions heading (#2044)
009b9ae Documentation update - add recommended permissions to Readme (#2043)
cbb7224 Update README.md (#1977)
3b9b8c8 docs: update README.md (#1971)
See full diff in compare view

Updates prefix-dev/setup-pixi from 0.8.3 to 0.9.0

Release notes

Sourced from prefix-dev/setup-pixi's releases.

v0.9.0

What's Changed

⬆️ Dependency updates

chore(deps): bump the nodejs group with 7 updates by @dependabot[bot] in prefix-dev/setup-pixi#218

🤷🏻 Other changes

chore: Bump to node 24 by @pavelzw in prefix-dev/setup-pixi#219

Full Changelog: prefix-dev/setup-pixi@v0.8.14...v0.9.0

v0.8.14

What's Changed

✨ New features

feat: Replace pixi-url-bearer-token by pixi-url-headers by @ytausch in prefix-dev/setup-pixi#217

Full Changelog: prefix-dev/setup-pixi@v0.8.13...v0.8.14

v0.8.13

What's Changed

✨ New features

feat: Allow specifying inputs as environment variables by @ytausch in prefix-dev/setup-pixi#214

feat: Add Support for Handlebars Templates in pixi-url by @ytausch in prefix-dev/setup-pixi#213

🤷🏻 Other changes

test: Enable failure tests by @ytausch in prefix-dev/setup-pixi#215

test: Skip tests with secrets on fork PRs by @ytausch in prefix-dev/setup-pixi#216

Full Changelog: prefix-dev/setup-pixi@v0.8.12...v0.8.13

v0.8.12

What's Changed

🐛 Bug fixes

fix: Multiple invokations of setup-pixi by @pavelzw in prefix-dev/setup-pixi#211

Full Changelog: prefix-dev/setup-pixi@v0.8.11...v0.8.12

v0.8.11

What's Changed

... (truncated)

Commits

fef5c95 chore: Bump to node 24 (#219)
6261849 chore(deps): bump the nodejs group with 7 updates (#218)
8ca4608 feat: Replace pixi-url-bearer-token by pixi-url-headers (#217)
b1ab8f2 feat: Add Support for Handlebars Templates in pixi-url (#213)
d7951c2 test: Skip tests with secrets on fork PRs (#216)
4522f64 feat: Allow specifying inputs as environment variables (#214)
a8c5cac test: Enable failure tests (#215)
307e5e5 fix: Multiple invokations of setup-pixi (#211)
273e480 feat: Add pixi-url-bearer-token to authenticate when downloading from `pixi...
c690703 Bump softprops/action-gh-release from 2.2.2 to 2.3.2 in the gh-actions group ...
Additional commits viewable in compare view

Updates actions/upload-artifact from 4.6.1 to 4.6.2

Release notes

Sourced from actions/upload-artifact's releases.

v4.6.2

What's Changed

Update to use artifact 2.3.2 package & prepare for new upload-artifact release by @salmanmkc in actions/upload-artifact#685

New Contributors

@salmanmkc made their first contribution in actions/upload-artifact#685

Full Changelog: actions/upload-artifact@v4...v4.6.2

Commits

ea165f8 Merge pull request #685 from salmanmkc/salmanmkc/3-new-upload-artifacts-release
0839620 Prepare for new release of actions/upload-artifact with new toolkit cache ver...
See full diff in compare view

Updates actions/download-artifact from 4.1.9 to 5.0.0

Release notes

Sourced from actions/download-artifact's releases.

v5.0.0

What's Changed

Update README.md by @nebuk89 in actions/download-artifact#407

BREAKING fix: inconsistent path behavior for single artifact downloads by ID by @GrantBirki in actions/download-artifact#416

v5.0.0

🚨 Breaking Change

This release fixes an inconsistency in path behavior for single artifact downloads by ID. If you're downloading single artifacts by ID, the output path may change.

What Changed

Previously, single artifact downloads behaved differently depending on how you specified the artifact:

By name: name: my-artifact → extracted to path/ (direct)

By ID: artifact-ids: 12345 → extracted to path/my-artifact/ (nested)

Now both methods are consistent:

By name: name: my-artifact → extracted to path/ (unchanged)

By ID: artifact-ids: 12345 → extracted to path/ (fixed - now direct)

Migration Guide

✅ No Action Needed If:

You download artifacts by name

You download multiple artifacts by ID

You already use merge-multiple: true as a workaround

⚠️ Action Required If:

You download single artifacts by ID and your workflows expect the nested directory structure.

Before v5 (nested structure):
- uses: actions/download-artifact@v4
  with:
    artifact-ids: 12345
    path: dist
# Files were in: dist/my-artifact/
Where my-artifact is the name of the artifact you previously uploaded

To maintain old behavior (if needed):
</tr></table> 

... (truncated)

Commits

634f93c Merge pull request #416 from actions/single-artifact-id-download-path
b19ff43 refactor: resolve download path correctly in artifact download tests (mainly ...
e262cbe bundle dist
bff23f9 update docs
fff8c14 fix download path logic when downloading a single artifact by id
448e3f8 Merge pull request #407 from actions/nebuk89-patch-1
47225c4 Update README.md
d3f86a1 Merge pull request #404 from actions/robherley/v4.3.0
fc02353 prep for v4.3.0 release
7745437 Merge pull request #402 from actions/joshmgross/download-by-id-example
Additional commits viewable in compare view

Updates peter-evans/create-pull-request from 7.0.7 to 7.0.8

Release notes

Sourced from peter-evans/create-pull-request's releases.

Create Pull Request v7.0.8

What's Changed

build(deps-dev): bump ts-jest from 29.2.5 to 29.2.6 by @dependabot in peter-evans/create-pull-request#3751

build(deps-dev): bump eslint-import-resolver-typescript from 3.8.1 to 3.8.3 by @dependabot in peter-evans/create-pull-request#3752

build(deps): bump @octokit/plugin-paginate-rest from 11.4.2 to 11.4.3 by @dependabot in peter-evans/create-pull-request#3753

build(deps-dev): bump prettier from 3.5.1 to 3.5.2 by @dependabot in peter-evans/create-pull-request#3754

fix: suppress output for some git operations by @peter-evans in peter-evans/create-pull-request#3776

Full Changelog: peter-evans/create-pull-request@v7.0.7...v7.0.8

Commits

271a8d0 fix: suppress output for some git operations (#3776)
6f7efd1 test: update cpr-example-command
13c47c5 build(deps-dev): bump prettier from 3.5.1 to 3.5.2 (#3754)
63e5829 build(deps): bump @octokit/plugin-paginate-rest from 11.4.2 to 11.4.3 (#3753)
a92c90f build(deps-dev): bump eslint-import-resolver-typescript (#3752)
b23b62d build(deps-dev): bump ts-jest from 29.2.5 to 29.2.6 (#3751)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the actions group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `4.2.2` | `5.0.0` | | [prefix-dev/setup-pixi](https://github.com/prefix-dev/setup-pixi) | `0.8.3` | `0.9.0` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4.6.1` | `4.6.2` | | [actions/download-artifact](https://github.com/actions/download-artifact) | `4.1.9` | `5.0.0` | | [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) | `7.0.7` | `7.0.8` | Updates `actions/checkout` from 4.2.2 to 5.0.0 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@11bd719...08c6903) Updates `prefix-dev/setup-pixi` from 0.8.3 to 0.9.0 - [Release notes](https://github.com/prefix-dev/setup-pixi/releases) - [Commits](prefix-dev/setup-pixi@9281528...fef5c95) Updates `actions/upload-artifact` from 4.6.1 to 4.6.2 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@4cec3d8...ea165f8) Updates `actions/download-artifact` from 4.1.9 to 5.0.0 - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](actions/download-artifact@cc20338...634f93c) Updates `peter-evans/create-pull-request` from 7.0.7 to 7.0.8 - [Release notes](https://github.com/peter-evans/create-pull-request/releases) - [Commits](peter-evans/create-pull-request@dd2324f...271a8d0) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 5.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: prefix-dev/setup-pixi dependency-version: 0.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: actions/upload-artifact dependency-version: 4.6.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: actions/download-artifact dependency-version: 5.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: peter-evans/create-pull-request dependency-version: 7.0.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2025-10-01T15:11:07Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Sep 2, 2025

dependabot bot closed this Oct 1, 2025

dependabot bot deleted the dependabot/github_actions/actions-ea52888e15 branch October 1, 2025 15:11

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

build(deps): bump the actions group across 1 directory with 5 updates#46

build(deps): bump the actions group across 1 directory with 5 updates#46
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/github_actions/actions-ea52888e15

dependabot bot commented on behalf of github Sep 2, 2025 •

edited

Loading

Uh oh!

dependabot bot commented on behalf of github Oct 1, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot bot commented on behalf of github Sep 2, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v5.0.0

What's Changed

⚠️ Minimum Compatible Runner Version

v4.3.0

What's Changed

New Contributors

Changelog

V5.0.0

V4.3.0

v4.2.2

v4.2.1

v4.2.0

v4.1.7

v4.1.6

v4.1.5

v4.1.4

v4.1.3

v0.9.0

What's Changed

⬆️ Dependency updates

🤷🏻 Other changes

v0.8.14

What's Changed

✨ New features

v0.8.13

What's Changed

✨ New features

🤷🏻 Other changes

v0.8.12

What's Changed

🐛 Bug fixes

v0.8.11

What's Changed

v4.6.2

What's Changed

New Contributors

v5.0.0

What's Changed

v5.0.0

🚨 Breaking Change

What Changed

Migration Guide

✅ No Action Needed If:

⚠️ Action Required If:

Create Pull Request v7.0.8

What's Changed

Uh oh!

dependabot bot commented on behalf of github Oct 1, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot bot commented on behalf of github Sep 2, 2025 •

edited

Loading