chore(deps): bump the actions group across 1 directory with 21 updates

Bumps the actions group with 21 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `4` | `7` |
| [actions/setup-go](https://github.com/actions/setup-go) | `6` | `7` |
| [pnpm/action-setup](https://github.com/pnpm/action-setup) | `4` | `6` |
| [github/codeql-action](https://github.com/github/codeql-action) | `3` | `4` |
| [actions/add-to-project](https://github.com/actions/add-to-project) | `1.0.1` | `2.0.0` |
| [tspascoal/get-user-teams-membership](https://github.com/tspascoal/get-user-teams-membership) | `3` | `4` |
| [actions/setup-node](https://github.com/actions/setup-node) | `4` | `7` |
| [docker/setup-docker-action](https://github.com/docker/setup-docker-action) | `4` | `5` |
| [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `3` | `4` |
| [docker/setup-compose-action](https://github.com/docker/setup-compose-action) | `1` | `2` |
| [nrwl/nx-set-shas](https://github.com/nrwl/nx-set-shas) | `4` | `5` |
| [codecov/codecov-action](https://github.com/codecov/codecov-action) | `4.3.0` | `7.1.1` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4` | `7` |
| [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) | `3` | `4` |
| [docker/login-action](https://github.com/docker/login-action) | `3` | `4` |
| [docker/metadata-action](https://github.com/docker/metadata-action) | `5` | `6` |
| [docker/build-push-action](https://github.com/docker/build-push-action) | `6` | `7` |
| [actions/github-script](https://github.com/actions/github-script) | `7` | `9` |
| [changesets/action](https://github.com/changesets/action) | `1` | `2` |
| [actions/download-artifact](https://github.com/actions/download-artifact) | `4` | `8` |
| [cycjimmy/semantic-release-action](https://github.com/cycjimmy/semantic-release-action) | `4` | `6` |



Updates `actions/checkout` from 4 to 7
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v4...v7)

Updates `actions/setup-go` from 6 to 7
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](https://github.com/actions/setup-go/compare/v6...v7)

Updates `pnpm/action-setup` from 4 to 6
- [Release notes](https://github.com/pnpm/action-setup/releases)
- [Commits](https://github.com/pnpm/action-setup/compare/v4...v6)

Updates `github/codeql-action` from 3 to 4
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/v3...v4)

Updates `actions/add-to-project` from 1.0.1 to 2.0.0
- [Release notes](https://github.com/actions/add-to-project/releases)
- [Commits](https://github.com/actions/add-to-project/compare/v1.0.1...v2.0.0)

Updates `tspascoal/get-user-teams-membership` from 3 to 4
- [Release notes](https://github.com/tspascoal/get-user-teams-membership/releases)
- [Commits](https://github.com/tspascoal/get-user-teams-membership/compare/v3...v4)

Updates `actions/setup-node` from 4 to 7
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/v4...v7)

Updates `docker/setup-docker-action` from 4 to 5
- [Release notes](https://github.com/docker/setup-docker-action/releases)
- [Commits](https://github.com/docker/setup-docker-action/compare/v4...v5)

Updates `docker/setup-buildx-action` from 3 to 4
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](https://github.com/docker/setup-buildx-action/compare/v3...v4)

Updates `docker/setup-compose-action` from 1 to 2
- [Release notes](https://github.com/docker/setup-compose-action/releases)
- [Commits](https://github.com/docker/setup-compose-action/compare/v1...v2)

Updates `nrwl/nx-set-shas` from 4 to 5
- [Release notes](https://github.com/nrwl/nx-set-shas/releases)
- [Commits](https://github.com/nrwl/nx-set-shas/compare/v4...v5)

Updates `codecov/codecov-action` from 4.3.0 to 7.1.1
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codecov/codecov-action/compare/v4.3.0...v7.1.1)

Updates `actions/upload-artifact` from 4 to 7
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v4...v7)

Updates `docker/setup-qemu-action` from 3 to 4
- [Release notes](https://github.com/docker/setup-qemu-action/releases)
- [Commits](https://github.com/docker/setup-qemu-action/compare/v3...v4)

Updates `docker/login-action` from 3 to 4
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](https://github.com/docker/login-action/compare/v3...v4)

Updates `docker/metadata-action` from 5 to 6
- [Release notes](https://github.com/docker/metadata-action/releases)
- [Commits](https://github.com/docker/metadata-action/compare/v5...v6)

Updates `docker/build-push-action` from 6 to 7
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](https://github.com/docker/build-push-action/compare/v6...v7)

Updates `actions/github-script` from 7 to 9
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](https://github.com/actions/github-script/compare/v7...v9)

Updates `changesets/action` from 1 to 2
- [Release notes](https://github.com/changesets/action/releases)
- [Changelog](https://github.com/changesets/action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/changesets/action/compare/v1...v2)

Updates `actions/download-artifact` from 4 to 8
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](https://github.com/actions/download-artifact/compare/v4...v8)

Updates `cycjimmy/semantic-release-action` from 4 to 6
- [Release notes](https://github.com/cycjimmy/semantic-release-action/releases)
- [Changelog](https://github.com/cycjimmy/semantic-release-action/blob/main/docs/CHANGELOG.md)
- [Commits](https://github.com/cycjimmy/semantic-release-action/compare/v4...v6)

---
updated-dependencies:
- dependency-name: actions/add-to-project
  dependency-version: 2.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: actions/checkout
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: actions/download-artifact
  dependency-version: '8'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: actions/github-script
  dependency-version: '9'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: actions/setup-go
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: actions/setup-node
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: actions/upload-artifact
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: changesets/action
  dependency-version: '2'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: codecov/codecov-action
  dependency-version: 7.1.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: cycjimmy/semantic-release-action
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: docker/build-push-action
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: docker/login-action
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: docker/metadata-action
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: docker/setup-buildx-action
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: docker/setup-compose-action
  dependency-version: '2'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: docker/setup-docker-action
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: docker/setup-qemu-action
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: github/codeql-action
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: nrwl/nx-set-shas
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: pnpm/action-setup
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: tspascoal/get-user-teams-membership
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
This commit is contained in:
dependabot[bot] authored and GitHub committed 2026-10-07 02:07:05 +00:00
1 parent 8a54a2a0c6
commit 8b55d7a5f9
7 files changed
+56 -56

No files matched your search

+6 -6
View File
@@ -26,15 +26,15 @@ jobs:
language: [go,javascript]
steps:
- name: Checkout Repository
uses: actions/checkout@v4
uses: actions/checkout@v7
- if: matrix.language == 'go'
name: Install Go
uses: actions/setup-go@v6
uses: actions/setup-go@v7
with:
go-version-file: go.mod
- if: matrix.language == 'go'
name: Set up pnpm
uses: pnpm/action-setup@v4
uses: pnpm/action-setup@v6
- name: Generate gRPC Stubs and Static Assets
if: matrix.language == 'go'
run: |
@@ -42,7 +42,7 @@ jobs:
pnpm nx run-many --nxBail --projects @zitadel/api --targets generate-stubs generate-statik generate-assets
# Initializes the CodeQL tools for scanning.
- name: Initialize CodeQL
uses: github/codeql-action/init@v3
uses: github/codeql-action/init@v4
# Override language selection by uncommenting this and choosing your languages
with:
languages: ${{ matrix.language }}
@@ -60,6 +60,6 @@ jobs:
# autobuild does not work anymore
# and to be able to compile without an actual console build, we just need a placeholder in the console dist folder
- name: Autobuild
uses: github/codeql-action/autobuild@v3
uses: github/codeql-action/autobuild@v4
- name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@v3
uses: github/codeql-action/analyze@v4
+3 -3
View File
@@ -14,21 +14,21 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: add issue
uses: actions/add-to-project@v1.0.1
uses: actions/add-to-project@v2.0.0
if: ${{ github.event_name == 'issues' }}
with:
# You can target a repository in a different organization
# to the issue
project-url: https://github.com/orgs/zitadel/projects/2
github-token: ${{ secrets.ADD_TO_PROJECT_PAT }}
- uses: tspascoal/get-user-teams-membership@v3
- uses: tspascoal/get-user-teams-membership@v4
id: checkUserMember
if: github.actor != 'dependabot[bot]'
with:
username: ${{ github.actor }}
GITHUB_TOKEN: ${{ secrets.ADD_TO_PROJECT_PAT }}
- name: add pr
uses: actions/add-to-project@v1.0.1
uses: actions/add-to-project@v2.0.0
if: ${{ github.event_name == 'pull_request_target' && github.actor != 'dependabot[bot]' && !contains(steps.checkUserMember.outputs.teams, 'engineers')}}
with:
# You can target a repository in a different organization
+12 -12
View File
@@ -19,7 +19,7 @@ jobs:
environment: ${{ github.ref_protected == 'true' && 'Protected' || null }}
steps:
- name: Checkout Repository
uses: actions/checkout@v4
uses: actions/checkout@v7
with:
fetch-depth: 0
filter: tree:0
@@ -27,34 +27,34 @@ jobs:
if: ${{ github.ref != 'refs/heads/main' }}
run: git fetch origin main:main
- name: Set up Go
uses: actions/setup-go@v6
uses: actions/setup-go@v7
with:
go-version-file: go.mod
- name: Set up pnpm
uses: pnpm/action-setup@v4
uses: pnpm/action-setup@v6
with:
run_install: false
- name: Set up Node.js
uses: actions/setup-node@v4
uses: actions/setup-node@v7
with:
node-version: ${{ inputs.node_version }}
cache: "pnpm"
- name: Set up Docker
uses: docker/setup-docker-action@v4
uses: docker/setup-docker-action@v5
with:
version: v28.3.2
- name: Set up Docker Buildx
uses: docker/setup-buildx-action@v3
uses: docker/setup-buildx-action@v4
with:
version: v0.28.0
- name: Set up Docker Compose
uses: docker/setup-compose-action@v1
uses: docker/setup-compose-action@v2
with:
version: v2.38.2
- name: Install dependencies
run: pnpm install --frozen-lockfile
- name: Set SHAs for nx affected commands
uses: nrwl/nx-set-shas@v4
uses: nrwl/nx-set-shas@v5
# The Depot runner image points /etc/resolv.conf directly at public DNS (8.8.8.8),
# bypassing the systemd-resolved stub, so *.integration.localhost (synthesized by
# systemd-resolved) no longer resolves and all API integration tests hang.
@@ -80,14 +80,14 @@ jobs:
NX_CLOUD_ACCESS_TOKEN: ${{ secrets.NX_CLOUD_ACCESS_TOKEN || secrets.NX_CLOUD_ACCESS_TOKEN_READONLY }}
run: pnpm nx fix-ci
- name: Publish API Unit Test Coverage
uses: codecov/codecov-action@v4.3.0
uses: codecov/codecov-action@v7.1.1
with:
file: profile.api.test-unit.cov
name: api-test-unit
flags: api-test-unit
token: ${{ secrets.CODECOV_TOKEN }}
- name: Publish API Integration Test Coverage
uses: codecov/codecov-action@v4.3.0
uses: codecov/codecov-action@v7.1.1
with:
file: profile.api.test-integration.cov
name: api-test-integration
@@ -95,13 +95,13 @@ jobs:
token: ${{ secrets.CODECOV_TOKEN }}
- name: Upload API Integration Test Race Logs
if: failure() || cancelled()
uses: actions/upload-artifact@v4
uses: actions/upload-artifact@v7
with:
name: api-integration-test-race-logs
path: |
.artifacts/api-test-integration/race.log.*
- name: Upload Functional UI Test Artifacts
uses: actions/upload-artifact@v4
uses: actions/upload-artifact@v7
if: failure() || cancelled()
with:
name: functional-ui-tests
+22 -22
View File
@@ -50,20 +50,20 @@ jobs:
packages: write
steps:
- name: Checkout Repository
uses: actions/checkout@v4
uses: actions/checkout@v7
with:
fetch-depth: 0
filter: tree:0
- name: Set up Go
uses: actions/setup-go@v6
uses: actions/setup-go@v7
with:
go-version-file: go.mod
- name: Set up pnpm
uses: pnpm/action-setup@v4
uses: pnpm/action-setup@v6
with:
run_install: false
- name: Set up Node.js
uses: actions/setup-node@v4
uses: actions/setup-node@v7
with:
node-version: ${{ inputs.node_version }}
cache: "pnpm"
@@ -80,7 +80,7 @@ jobs:
NX_CLOUD_ACCESS_TOKEN: ${{ secrets.NX_CLOUD_ACCESS_TOKEN || secrets.NX_CLOUD_ACCESS_TOKEN_READONLY }}
run: pnpm nx fix-ci
- name: Upload all platform archives
uses: actions/upload-artifact@v4
uses: actions/upload-artifact@v7
with:
name: zitadel-archives
path: .artifacts/pack
@@ -104,20 +104,20 @@ jobs:
push_ghcr: false
steps:
- name: Checkout Repository
uses: actions/checkout@v4
uses: actions/checkout@v7
with:
fetch-depth: 0
filter: tree:0
- name: Set up Go
uses: actions/setup-go@v6
uses: actions/setup-go@v7
with:
go-version-file: go.mod
- name: Set up pnpm
uses: pnpm/action-setup@v4
uses: pnpm/action-setup@v6
with:
run_install: false
- name: Set up Node.js
uses: actions/setup-node@v4
uses: actions/setup-node@v7
with:
node-version: ${{ inputs.node_version }}
cache: "pnpm"
@@ -130,20 +130,20 @@ jobs:
NX_CLOUD_ACCESS_TOKEN: ${{ secrets.NX_CLOUD_ACCESS_TOKEN || secrets.NX_CLOUD_ACCESS_TOKEN_READONLY }}
run: pnpm nx run-many --nxBail -p @zitadel/api -t pack-linux-amd64,pack-linux-arm64
- name: Set up QEMU
uses: docker/setup-qemu-action@v3
uses: docker/setup-qemu-action@v4
- name: Set up Docker Buildx
uses: docker/setup-buildx-action@v3
uses: docker/setup-buildx-action@v4
with:
version: v0.28.0
- name: Login to Docker registry
if: matrix.push_ghcr
uses: docker/login-action@v3
uses: docker/login-action@v4
with:
registry: ghcr.io
username: ${{ github.actor }}
password: ${{ secrets.GITHUB_TOKEN }}
- name: Login to Google Artifact Registry
uses: docker/login-action@v3
uses: docker/login-action@v4
with:
registry: europe-docker.pkg.dev
username: _json_key_base64
@@ -164,7 +164,7 @@ jobs:
echo "EOF" >> "$GITHUB_OUTPUT"
- name: Generate Standard Tags and Labels from the GitHub Context for the API Scratch Container Image
id: scratch-meta
uses: docker/metadata-action@v5
uses: docker/metadata-action@v6
with:
images: ${{ steps.api-images.outputs.list }}
labels: ${{ env.default_labels}}
@@ -172,7 +172,7 @@ jobs:
type=sha,prefix=,suffix=${{ matrix.tag_suffix }},format=long
- name: Build and Push the SHA-tagged API Scratch Container Image
id: build-scratch
uses: docker/build-push-action@v6
uses: docker/build-push-action@v7
timeout-minutes: 3
with:
context: .
@@ -186,7 +186,7 @@ jobs:
tags: ${{ steps.scratch-meta.outputs.tags }}
- name: Generate Standard Tags and Labels from the GitHub Context for the API Debug Container Image
id: debug-meta
uses: docker/metadata-action@v5
uses: docker/metadata-action@v6
with:
images: ${{ steps.api-images.outputs.list }}
labels: ${{ env.default_labels}}
@@ -195,7 +195,7 @@ jobs:
- name: Build and Push the SHA-tagged API Debug Container Image
if: matrix.push_ghcr
id: build-debug
uses: docker/build-push-action@v6
uses: docker/build-push-action@v7
timeout-minutes: 5
with:
context: .
@@ -210,7 +210,7 @@ jobs:
outputs: type=image,name=${{ inputs.image_name_github_api }},name-canonical=true
- name: Build and Push the SHA-tagged API Debug Container Image (GAR only)
if: ${{ !matrix.push_ghcr }}
uses: docker/build-push-action@v6
uses: docker/build-push-action@v7
timeout-minutes: 5
with:
context: .
@@ -228,7 +228,7 @@ jobs:
- name: Generate Standard Tags and Labels from the GitHub Context for the Login Container Image
if: matrix.push_ghcr
id: login-meta
uses: docker/metadata-action@v5
uses: docker/metadata-action@v6
with:
images: |
${{ inputs.image_name_github_login }}
@@ -241,7 +241,7 @@ jobs:
- name: Build and Push the SHA-tagged Login Container Image
if: matrix.push_ghcr
id: build-login
uses: docker/build-push-action@v6
uses: docker/build-push-action@v7
timeout-minutes: 3
with:
context: apps/login
@@ -257,7 +257,7 @@ jobs:
- name: Generate tags for FIPS Login image
if: ${{ !matrix.push_ghcr }}
id: login-fips-meta
uses: docker/metadata-action@v5
uses: docker/metadata-action@v6
with:
images: ${{ inputs.image_name_google_login }}
labels: |
@@ -267,7 +267,7 @@ jobs:
type=sha,prefix=,suffix=-fips,format=long
- name: Build and Push FIPS Login image (GAR only)
if: ${{ !matrix.push_ghcr }}
uses: docker/build-push-action@v6
uses: docker/build-push-action@v7
timeout-minutes: 3
with:
context: apps/login
+1 -1
View File
@@ -6,7 +6,7 @@ jobs:
comment:
runs-on: ubuntu-latest
steps:
- uses: actions/github-script@v7
- uses: actions/github-script@v9
with:
script: |
const content = `### Thanks for your contribution @${{ github.event.pull_request.user.login }}! 🎉
+9 -9
View File
@@ -54,7 +54,7 @@ jobs:
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
- name: Publish Release
uses: actions/github-script@v7
uses: actions/github-script@v9
with:
github-token: ${{ secrets.GITHUB_TOKEN }}
script: |
@@ -73,20 +73,20 @@ jobs:
steps:
-
name: Set up QEMU
uses: docker/setup-qemu-action@v3
uses: docker/setup-qemu-action@v4
-
name: Set up Docker Buildx
uses: docker/setup-buildx-action@v3
uses: docker/setup-buildx-action@v4
-
name: Login to Docker registry
uses: docker/login-action@v3
uses: docker/login-action@v4
with:
registry: ghcr.io
username: ${{ github.actor }}
password: ${{ secrets.GITHUB_TOKEN }}
-
name: Login to Google Artifact Registry
uses: docker/login-action@v3
uses: docker/login-action@v4
with:
registry: europe-docker.pkg.dev
username: _json_key_base64
@@ -188,22 +188,22 @@ jobs:
continue-on-error: true
steps:
- name: Checkout code
uses: actions/checkout@v4
uses: actions/checkout@v7
- name: Set up Node.js
uses: actions/setup-node@v4
uses: actions/setup-node@v7
with:
node-version: '20'
- name: Install pnpm
uses: pnpm/action-setup@v4
uses: pnpm/action-setup@v6
- name: Install dependencies
working-directory: login
run: pnpm install --frozen-lockfile
- name: Create Release Pull Request
uses: changesets/action@v1
uses: changesets/action@v2
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
with:
+3 -3
View File
@@ -26,17 +26,17 @@ jobs:
steps:
-
name: Checkout Repository
uses: actions/checkout@v4
uses: actions/checkout@v7
-
name: Download Artifacts
uses: actions/download-artifact@v4
uses: actions/download-artifact@v8
if: ${{ !inputs.dry_run }}
with:
name: zitadel-archives
path: .artifacts/pack
-
name: Run Semantic Release
uses: cycjimmy/semantic-release-action@v4
uses: cycjimmy/semantic-release-action@v6
id: semantic
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}