Skip to content

build: bump the all-actions group with 5 updates - #495

Open
dependabot[bot] wants to merge 1 commit into
dependabotchangesfrom
dependabot/github_actions/dependabotchanges/all-actions-74df551e51
Open

build: bump the all-actions group with 5 updates#495
dependabot[bot] wants to merge 1 commit into
dependabotchangesfrom
dependabot/github_actions/dependabotchanges/all-actions-74df551e51

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the all-actions group with 5 updates:

Package From To
actions/checkout 6 7
lycheeverse/lychee-action 2.8.0 2.9.0
actions/setup-python 6 7
actions/stale 10 11
MishaKav/pytest-coverage-comment 1.7.2 1.11.2

Updates actions/checkout from 6 to 7

Release notes

Sourced from actions/checkout's releases.

v7.0.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v6.0.3...v7.0.0

v6.1.0

What's Changed

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: actions/checkout@v6.0.3...v6.1.0

v6.0.3

What's Changed

New Contributors

Full Changelog: actions/checkout@v6...v6.0.3

v6.0.2

What's Changed

Full Changelog: actions/checkout@v6.0.1...v6.0.2

v6.0.1

What's Changed

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

v7.0.1

v7.0.0

v6.0.3

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

... (truncated)

Commits

Updates lycheeverse/lychee-action from 2.8.0 to 2.9.0

Release notes

Sourced from lycheeverse/lychee-action's releases.

v2.9.0

Summary

This release updates the default lychee version from v0.23.0 to v0.24.2.

The main reason for this release is compatibility with the new lychee 0.24.x release artifacts. Starting with lychee v0.24.0, the archive layout changed, and the lychee binary may now be packaged inside a subdirectory. lychee-action now detects that layout automatically, so users can upgrade without changing their workflows.

If you use:

uses: lycheeverse/lychee-action@v2

you will get the new version once the floating v2 tag has been updated. If you pin exact versions, update to:

uses: lycheeverse/lychee-action@v2.9.0

What’s new from lychee v0.24.x

Better diagnostics

lychee now reports line and column numbers for detected links. This makes broken link reports easier to act on, especially in larger documentation sites or generated reports.

Text fragment checking

lychee can now check URL text fragments, such as links containing #:~:text=.... This helps catch links that point to a valid page but no longer points to the intended highlighted text.

Sitemap support

lychee can now read sitemap.xml inputs. This is useful for checking published websites or generated documentation sites where the sitemap is the easiest source of URLs to validate.

JUnit output

lychee now supports JUnit output. This makes it easier to integrate link checking results with CI systems and test reporting tools that understand JUnit XML.

Redirect and remap visibility

lychee can now show redirects and remaps more clearly. This helps explain why a URL was checked as a different final URL and makes debugging link-checking behavior easier.

Multiple config files

lychee now supports multiple configuration files and expanded config handling. This is useful for repositories that split documentation, website, or package-specific link-checking settings.

Timeout handling

lychee can now accept timeouts explicitly. This gives users more control over how strict their link checks should be for flaky or slow endpoints.

Fixes and reliability improvements

... (truncated)

Commits

Updates actions/setup-python from 6 to 7

Release notes

Sourced from actions/setup-python's releases.

v7.0.0

What's Changed

Enhancements

Bug Fix

Dependency Upgrade

New Contributors

Full Changelog: actions/setup-python@v6...v7.0.0

v6.3.0

What's Changed

Enhancement

Dependency update

Documentation

New Contributors

Full Changelog: actions/setup-python@v6.2.0...v6.3.0

v6.2.0

What's Changed

Dependency Upgrades

... (truncated)

Commits

Updates actions/stale from 10 to 11

Release notes

Sourced from actions/stale's releases.

v11.0.0

What's Changed

Enhancement

Dependency Update

Full Changelog: actions/stale@v10...v11.0.0

v10.4.0

What's Changed

Bug Fix

Dependency Updates

New Contributors

Full Changelog: actions/stale@v10.3.0...v10.4.0

v10.3.0

What's Changed

Bug Fix

Dependency Updates

New Contributors

Full Changelog: actions/stale@v10...v10.3.0

v10.2.0

What's Changed

Bug Fix

Dependency Updates

New Contributors

Full Changelog: actions/stale@v10...v10.2.0

... (truncated)

Changelog

Sourced from actions/stale's changelog.

Changelog

[10.1.0]

What's Changed

[10.0.0]

What's Changed

Breaking Changes

Enhancement

Dependency Upgrades

Documentation changes

[9.1.0]

What's Changed

[9.0.0]

Breaking Changes

  1. Action is now stateful: If the action ends because of operations-per-run then the next run will start from the first unprocessed issue skipping the issues processed during the previous run(s). The state is reset when all the issues are processed. This should be considered for scheduling workflow runs.
  2. Version 9 of this action updated the runtime to Node.js 20. All scripts are now run with Node.js 20 instead of Node.js 16 and are affected by any breaking changes between Node.js 16 and 20.

... (truncated)

Commits
  • 4391f3d Fix 24 high severity vulnerabilities by overriding brace-expansion to 5.0.8 (...
  • eaf9131 refactor: update imports to use ES module syntax and improve test structure (...
  • See full diff in compare view

Updates MishaKav/pytest-coverage-comment from 1.7.2 to 1.11.2

Release notes

Sourced from MishaKav/pytest-coverage-comment's releases.

v1.11.2

What's Changed

  • improve the comment message when report-only-changed-files is enabled and none of the changed files appear in the coverage report — it now says "No changed files were found in the coverage report" instead of the misleading "No files were changed during this commit" (#296), thanks to @​mschoettle for contribution

Full Changelog: MishaKav/pytest-coverage-comment@v1.11.1...v1.11.2

v1.11.1

What's Changed

Full Changelog: MishaKav/pytest-coverage-comment@v1.11.0...v1.11.1

v1.11.0

What's Changed

  • add show-failed-tests input that lists failed tests (up to max-failed-tests) in the comment as a collapsible block with the test name linked to its file, a short failure reason and the pytest output
  • add max-failed-tests input to cap the number of shown failed tests (30 by default, in total across all junit files, shared with multiple-files mode)
  • add failedTestsHtml output with the rendered block, empty when the option is disabled or all tests pass

Test Results

Tests Skipped Failures Errors Time
4 0 💤 4 ❌ 0 🔥 0.122s ⏱️ 
def test_wrong_title():
        # genuine failing assertion with a string diff
        post = get_post(1)
>       assert post["title"] == "my first post"
E       AssertionError: assert 'first post' == 'my first post'
E
E         - my first post
E         ? ---
E         + first post
def test_fetch_latest_post_times_out():
        # genuine timeout raised by the module under test
</tr></table>

... (truncated)

Changelog

Sourced from MishaKav/pytest-coverage-comment's changelog.

Changelog of the Pytest Coverage Comment

Pytest Coverage Comment 1.12.1

Release Date: 2026-08-30

Changes

  • fix a rare case where the comment was still too long and failed to post — it's now always truncated to fit GitHub's limit (#301), fixes #299

Pytest Coverage Comment 1.12.0

Release Date: 2026-08-30

Changes

  • show a warning inside the comment itself when it's too long (over 65,536 characters) and the detailed coverage report gets dropped — previously the report silently disappeared and the reason was only visible in the job log. The warning links to the job log, which lists the ways to reduce the comment size (#298), thanks to @​mschoettle for contribution

Pytest Coverage Comment 1.11.2

Release Date: 2026-08-26

Changes

  • improve the comment message when report-only-changed-files is enabled and none of the changed files appear in the coverage report — it now says "No changed files were found in the coverage report" instead of the misleading "No files were changed during this commit" (#296), thanks to @​mschoettle for contribution

Pytest Coverage Comment 1.11.1

Release Date: 2026-08-22

Changes

  • bump undici from 6.27.0 to 6.28.0 (fixes three security vulnerabilities)

Pytest Coverage Comment 1.11.0

Release Date: 2026-08-02

Changes

  • add show-failed-tests input that lists failed tests (up to max-failed-tests) in the comment as a collapsible block with the test name linked to its file, a short failure reason and the pytest output (#293), requested in #26
  • add max-failed-tests input to cap the number of shown failed tests (30 by default, in total across all junit files, shared with multiple-files mode) (#293)
  • add failedTestsHtml output with the rendered block, empty when the option is disabled or all tests pass (#293)

Pytest Coverage Comment 1.10.1

Release Date: 2026-08-01

Changes

... (truncated)

Commits
  • ce64cfb Improve message when no changed files found in coverage report (#297)
  • d46d9d5 Bump undici from 6.27.0 to 6.28.0 (#294)
  • 67e0872 ci: skip badge step in live-test when the gist secret is unavailable (#295)
  • 09c28b6 Add failed tests report to JUnit output (show-failed-tests) (#293)
  • 96fbda6 chore: release v1.10.1 (#292)
  • 4f3ea85 Bump brace-expansion from 5.0.6 to 5.0.8 (#287)
  • 62e8522 Bump the npm-development group with 6 updates (#290)
  • 481dcf4 Bump schneegans/dynamic-badges-action from 1.8.0 to 1.9.0 (#289)
  • fd9adbd feat: add coverage.py JSON report support (pytest-json-coverage-path) (#286)
  • 4a4889e fix: correct coverage percentage when branch coverage is enabled (#285)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build: bump the all-actions group with 5 updates
199443c 
Bumps the all-actions group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `6` | `7` |
| [lycheeverse/lychee-action](https://github.com/lycheeverse/lychee-action) | `2.8.0` | `2.9.0` |
| [actions/setup-python](https://github.com/actions/setup-python) | `6` | `7` |
| [actions/stale](https://github.com/actions/stale) | `10` | `11` |
| [MishaKav/pytest-coverage-comment](https://github.com/mishakav/pytest-coverage-comment) | `1.7.2` | `1.11.2` |


Updates `actions/checkout` from 6 to 7
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v6...v7)

Updates `lycheeverse/lychee-action` from 2.8.0 to 2.9.0
- [Release notes](https://github.com/lycheeverse/lychee-action/releases)
- [Commits](lycheeverse/lychee-action@v2.8.0...v2.9.0)

Updates `actions/setup-python` from 6 to 7
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](actions/setup-python@v6...v7)

Updates `actions/stale` from 10 to 11
- [Release notes](https://github.com/actions/stale/releases)
- [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md)
- [Commits](actions/stale@v10...v11)

Updates `MishaKav/pytest-coverage-comment` from 1.7.2 to 1.11.2
- [Release notes](https://github.com/mishakav/pytest-coverage-comment/releases)
- [Changelog](https://github.com/MishaKav/pytest-coverage-comment/blob/main/CHANGELOG.md)
- [Commits](MishaKav/pytest-coverage-comment@dd5b80b...ce64cfb)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-actions
- dependency-name: lycheeverse/lychee-action
  dependency-version: 2.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-actions
- dependency-name: actions/setup-python
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-actions
- dependency-name: actions/stale
  dependency-version: '11'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-actions
- dependency-name: MishaKav/pytest-coverage-comment
  dependency-version: 1.11.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Sep 1, 2026
@dependabot dependabot Bot added the github_actions Pull requests that update GitHub Actions code label Sep 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@Avijit-Microsoft Avijit-Microsoft Awaiting requested review from Avijit-Microsoft Avijit-Microsoft is a code owner
@Roopan-Microsoft Roopan-Microsoft Awaiting requested review from Roopan-Microsoft Roopan-Microsoft is a code owner
@Prajwal-Microsoft Prajwal-Microsoft Awaiting requested review from Prajwal-Microsoft Prajwal-Microsoft is a code owner
@aniaroramsft Anish Arora (aniaroramsft) Awaiting requested review from aniaroramsft aniaroramsft is a code owner
@Vinay-Microsoft Vinay Sharma (Vinay-Microsoft) Awaiting requested review from Vinay-Microsoft Vinay-Microsoft is a code owner
@toherman-msft Todd Herman (toherman-msft) Awaiting requested review from toherman-msft toherman-msft is a code owner
@nchandhi nchandhi Awaiting requested review from nchandhi nchandhi is a code owner
@dgp10801 dgp10801 Awaiting requested review from dgp10801 dgp10801 is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants