build(deps): bump the actions group across 1 directory with 6 updates by dependabot[bot] · Pull Request #43 · JacobCoffee/debug-toolbar

dependabot · 2026-02-02T07:48:20Z

Bumps the actions group with 6 updates in the / directory:

Package	From	To
actions/checkout	`6.0.1`	`6.0.2`
zizmorcore/zizmor-action	`0.3.0`	`0.4.1`
astral-sh/setup-uv	`7.1.6`	`7.2.1`
actions/setup-python	`6.1.0`	`6.2.0`
astral-sh/ruff-action	`3.5.1`	`3.6.1`
rossjrw/pr-preview-action	`1.6.3`	`1.8.1`

Updates actions/checkout from 6.0.1 to 6.0.2

Release notes

Sourced from actions/checkout's releases.

v6.0.2

What's Changed

Add orchestration_id to git user-agent when ACTIONS_ORCHESTRATION_ID is set by @TingluoHuang in actions/checkout#2355

Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in actions/checkout#2356

Full Changelog: actions/checkout@v6.0.1...v6.0.2

Changelog

Sourced from actions/checkout's changelog.

Changelog

v6.0.2

Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in actions/checkout#2356

v6.0.1

Add worktree support for persist-credentials includeIf by @ericsciple in actions/checkout#2327

v6.0.0

Persist creds to a separate file by @ericsciple in actions/checkout#2286

Update README to include Node.js 24 support details and requirements by @salmanmkc in actions/checkout#2248

v5.0.1

Port v6 cleanup to v5 by @ericsciple in actions/checkout#2301

v5.0.0

Update actions checkout to use node 24 by @salmanmkc in actions/checkout#2226

v4.3.1

Port v6 cleanup to v4 by @ericsciple in actions/checkout#2305

v4.3.0

docs: update README.md by @motss in actions/checkout#1971

Add internal repos for checking out multiple repositories by @mouismail in actions/checkout#1977

Documentation update - add recommended permissions to Readme by @benwells in actions/checkout#2043

Adjust positioning of user email note and permissions heading by @joshmgross in actions/checkout#2044

Update README.md by @nebuk89 in actions/checkout#2194

Update CODEOWNERS for actions by @TingluoHuang in actions/checkout#2224

Update package dependencies by @salmanmkc in actions/checkout#2236

v4.2.2

url-helper.ts now leverages well-known environment variables by @jww3 in actions/checkout#1941

Expand unit test coverage for isGhes by @jww3 in actions/checkout#1946

v4.2.1

Check out other refs/* by commit if provided, fall back to ref by @orhantoy in actions/checkout#1924

v4.2.0

Add Ref and Commit outputs by @lucacome in actions/checkout#1180

Dependency updates by @dependabot- actions/checkout#1777, actions/checkout#1872

v4.1.7

Bump the minor-npm-dependencies group across 1 directory with 4 updates by @dependabot in actions/checkout#1739

Bump actions/checkout from 3 to 4 by @dependabot in actions/checkout#1697

Check out other refs/* by commit by @orhantoy in actions/checkout#1774

Pin actions/checkout's own workflows to a known, good, stable version. by @jww3 in actions/checkout#1776

v4.1.6

Check platform to set archive extension appropriately by @cory-miller in actions/checkout#1732

... (truncated)

Commits

de0fac2 Fix tag handling: preserve annotations and explicit fetch-tags (#2356)
064fe7f Add orchestration_id to git user-agent when ACTIONS_ORCHESTRATION_ID is set (...
See full diff in compare view

Updates zizmorcore/zizmor-action from 0.3.0 to 0.4.1

Release notes

Sourced from zizmorcore/zizmor-action's releases.

v0.4.1

This version fixes an error in the 0.4.0 release that prevented non-relative use of the action.

What's Changed

Fix version file path by @woodruffw in zizmorcore/zizmor-action#83

Full Changelog: zizmorcore/zizmor-action@v0.4.0...v0.4.1

v0.4.0

This new version of zizmor-action brings two major changes:

The new fail-on-no-inputs option can be used to control whether zizmor-action fails if no inputs were collected by zizmor. The default remains true, reflecting the pre-existing behavior.

The action's use of the official zizmor Docker images is now fully hash-checked internally, preventing accidental or malicious modification to the images. This also means that subsequent releases of zizmor will induce a release of this action, rather than the action always picking up the latest version by default.

What's Changed

docs: extended permissions required for internal repos by @AntoineSebert in zizmorcore/zizmor-action#61

docs: clarify description of "token" to indicate it is only used for online audits by @rmuir in zizmorcore/zizmor-action#63

Hash-check zizmor Docker images by @woodruffw in zizmorcore/zizmor-action#68

Add fail-on-no-inputs option by @woodruffw in zizmorcore/zizmor-action#67

New Contributors

@AntoineSebert made their first contribution in zizmorcore/zizmor-action#61

@rmuir made their first contribution in zizmorcore/zizmor-action#63

Full Changelog: zizmorcore/zizmor-action@v0.3.0...v0.4.0

Commits

1356984 Fix version file path (#83)
72469cf Bump pins in README (#80)
3aa7e2f Add fail-on-no-inputs tests (#79)
92fc377 Sync zizmor versions (#78)
5aff8ef Add fail-on-no-inputs option (#67)
4d497b9 Sync zizmor versions (#75)
5fa0711 Fix sync-zizmor-versions (#69)
c823f2c Hash-check zizmor Docker images (#68)
706c51b chore(deps): bump github/codeql-action in the github-actions group (#66)
cb3d8e8 chore(deps): bump actions/checkout in the github-actions group (#65)
Additional commits viewable in compare view

Updates astral-sh/setup-uv from 7.1.6 to 7.2.1

Release notes

Sourced from astral-sh/setup-uv's releases.

v7.2.0 🌈 add outputs python-version and python-cache-hit

Changes

Among some minor typo fixes and quality of life features for developers of actions the main feature of this release are new outputs:

python-version: The Python version that was set (same content as existing UV_PYTHON)

python-cache-hit: A boolean value to indicate the Python cache entry was found

While implementing this it became clear, that it is easier to handle the Python binaries in a separate cache entry. The added benefit for users is that the "normal" cache containing the dependencies can be used in all runs no matter if these cache the Python binaries or not.

[!NOTE]
This release will invalidate caches that contain the Python binaries. This happens a single time.

🐛 Bug fixes

chore: remove stray space from UV_PYTHON_INSTALL_DIR message @akx (#720)

🚀 Enhancements

add outputs python-version and python-cache-hit @eifinger (#728)

Add action typings with validation @krzema12 (#721)

🧰 Maintenance

fix: use uv_build backend for old-python-constraint-project @eifinger (#729)

chore: update known checksums for 0.9.22 @github-actions[bot] (#727)

chore: update known checksums for 0.9.21 @github-actions[bot] (#726)

chore: update known checksums for 0.9.20 @github-actions[bot] (#725)

chore: update known checksums for 0.9.18 @github-actions[bot] (#718)

⬆️ Dependency updates

Bump peter-evans/create-pull-request from 7.0.9 to 8.0.0 @dependabot[bot] (#719)

Bump github/codeql-action from 4.31.6 to 4.31.9 @dependabot[bot] (#723)

Commits

803947b chore: update known checksums for 0.9.28 (#744)
24553ac chore: update known checksums for 0.9.27 (#742)
085087a Bump zizmorcore/zizmor-action from 0.3.0 to 0.4.1 (#741)
9cfd029 chore: update known checksums for 0.9.26 (#734)
dd9d55b chore: update known checksums for 0.9.25 (#733)
8512ad0 Clarify impact of using actions/setup-python (#732)
cc55817 chore: update known checksums for 0.9.24 (#730)
61cb8a9 add outputs python-version and python-cache-hit (#728)
11050ed fix: use uv_build backend for old-python-constraint-project (#729)
1d22faf Bump peter-evans/create-pull-request from 7.0.9 to 8.0.0 (#719)
Additional commits viewable in compare view

Updates actions/setup-python from 6.1.0 to 6.2.0

Release notes

Sourced from actions/setup-python's releases.

v6.2.0

What's Changed

Dependency Upgrades

Upgrade dependencies to Node 24 compatible versions by @salmanmkc in actions/setup-python#1259

Upgrade urllib3 from 2.5.0 to 2.6.3 in /__tests__/data by @dependabot in actions/setup-python#1253 and actions/setup-python#1264

Full Changelog: actions/setup-python@v6...v6.2.0

Commits

a309ff8 Bump urllib3 from 2.6.0 to 2.6.3 in /tests/data (#1264)
bfe8cc5 Upgrade @actions dependencies to Node 24 compatible versions (#1259)
4f41a90 Bump urllib3 from 2.5.0 to 2.6.0 in /tests/data (#1253)
See full diff in compare view

Updates astral-sh/ruff-action from 3.5.1 to 3.6.1

Release notes

Sourced from astral-sh/ruff-action's releases.

v3.6.1 🌈 fix automatic minor tag updates

Changes

This is just a bugfix release for the release process

fix: persist credentials for git push in update-major-minor-tags workflow @eifinger-bot (#312)

🧰 Maintenance

ci: add zizmor security linting @eifinger-bot (#313)

Commits

4919ec5 fix: persist credentials for git push in update-major-minor-tags workflow (#312)
1977806 ci: add zizmor security linting (#313)
aedff8d Bump dependencies and actions (#311)
191187a Bump actions/checkout from 5.0.0 to 6.0.1 (#278)
ecac2cc Bump github/codeql-action from 3.30.5 to 4.31.10 (#294)
ddb8c29 Bump actions/setup-node from 6.0.0 to 6.2.0 (#296)
5eee2a4 search in parent dir (#306)
1d756c4 chore: update known checksums for 0.14.13/0.14.14 (#297)
fde82cb Fix CI: Pin ruff version to stable 0.13.x in test fixture (#305)
deb6320 ignore environment markers in dep specs (#295)
Additional commits viewable in compare view

Updates rossjrw/pr-preview-action from 1.6.3 to 1.8.1

Release notes

Sourced from rossjrw/pr-preview-action's releases.

v1.8.1

Changes

QR codes (added in 1.8.0) are now enabled by default. Add qr-code: false to disable it.

If you have feedback about QR codes e.g. you strongly feel they should be disabled by default, please leave your thoughts on this issue: rossjrw/pr-preview-action#130

v1.8.0

Features

Add option to add QR code to comment by @lredoban in rossjrw/pr-preview-action#98

New input parameter qr-code, default false, that toggles the behaviour and can also be used to set the QR code provider

qr.rossjrw.com (https://github.com/rossjrw/qrcode-worker) created as the default QR code provider

Bugfixes

Adjusted the timeouts for the wait-for-pages-deployment option - re-increased time for Pages build to start from 90s to 180s

v1.7.3

Bugfixes

Enable GitHub API requests to work with GHES by @Googlom in rossjrw/pr-preview-action#126

v1.7.2

Bugfixes

Adjusted the timeouts for the wait-for-pages-deployment option

Wait for Pages build to start: 180s -> 90s

Wait for Pages build to complete: 180s -> 1800s

v1.7.1

Bugfixes

Increased the timeouts for the wait-for-pages-deployment option, suggested by @eliodinino

Wait for Pages build to start: 60s -> 180s

Wait for Pages build to complete: 60s -> 180s

v1.7.0

Features

Support passing through overrides for the commit author by @FasterSpeeding in rossjrw/pr-preview-action#32

Adds two new input parameters: git-config-name and git-config-email

Add customisable commit messages for deploy and destroy actions by @bengeois in rossjrw/pr-preview-action#120

Adds two new input parameters: deploy-commit-message and remove-commit-message

Add option to wait for deploy to finish by @rossjrw in rossjrw/pr-preview-action#121, reported by @vincerubinetti in #25

Adds a new input parameter: wait-for-pages-deployment, boolean, default false (may be true in a future version)

Internal changes

Add automated integration testing by @rossjrw in rossjrw/pr-preview-action#122

Commits

ffa7509 Merge pull request #129 from rossjrw/enable-qr
5b9cf5d Move QR provider determination to comment generator
5bc2014 Enable default provider when qr-code is true
520ebf3 Enable QR codes by default
7eb2064 Automate readme screenshots
5fd5f8e Reincrease page build start timeout
b4a20f5 Update preview image
74401f0 Use QR code internally
8d0e59d Merge pull request #98 from lredoban/qr-code
66ce60d Tweak intro to mention important setup stuff
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the actions group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `6.0.1` | `6.0.2` | | [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action) | `0.3.0` | `0.4.1` | | [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) | `7.1.6` | `7.2.1` | | [actions/setup-python](https://github.com/actions/setup-python) | `6.1.0` | `6.2.0` | | [astral-sh/ruff-action](https://github.com/astral-sh/ruff-action) | `3.5.1` | `3.6.1` | | [rossjrw/pr-preview-action](https://github.com/rossjrw/pr-preview-action) | `1.6.3` | `1.8.1` | Updates `actions/checkout` from 6.0.1 to 6.0.2 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@8e8c483...de0fac2) Updates `zizmorcore/zizmor-action` from 0.3.0 to 0.4.1 - [Release notes](https://github.com/zizmorcore/zizmor-action/releases) - [Commits](zizmorcore/zizmor-action@e639db9...1356984) Updates `astral-sh/setup-uv` from 7.1.6 to 7.2.1 - [Release notes](https://github.com/astral-sh/setup-uv/releases) - [Commits](astral-sh/setup-uv@681c641...803947b) Updates `actions/setup-python` from 6.1.0 to 6.2.0 - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](actions/setup-python@83679a8...a309ff8) Updates `astral-sh/ruff-action` from 3.5.1 to 3.6.1 - [Release notes](https://github.com/astral-sh/ruff-action/releases) - [Commits](astral-sh/ruff-action@57714a7...4919ec5) Updates `rossjrw/pr-preview-action` from 1.6.3 to 1.8.1 - [Release notes](https://github.com/rossjrw/pr-preview-action/releases) - [Commits](rossjrw/pr-preview-action@8ff09e4...ffa7509) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 6.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: zizmorcore/zizmor-action dependency-version: 0.4.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: astral-sh/setup-uv dependency-version: 7.2.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: actions/setup-python dependency-version: 6.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: astral-sh/ruff-action dependency-version: 3.6.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: rossjrw/pr-preview-action dependency-version: 1.8.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-02-02T07:49:29Z

PR Preview Action v1.8.1
🚀 View preview at https://JacobCoffee.github.io/debug-toolbar/pr-preview/pr-43/
Built to branch `gh-pages` at 2026-02-02 07:48 UTC. Preview will be ready when the GitHub Pages deployment is complete.

dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Feb 2, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

build(deps): bump the actions group across 1 directory with 6 updates#43

build(deps): bump the actions group across 1 directory with 6 updates#43
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/github_actions/actions-a46987a46b

dependabot bot commented on behalf of github Feb 2, 2026

Uh oh!

github-actions bot commented Feb 2, 2026

Built to branch `gh-pages` at 2026-02-02 07:48 UTC.
Preview will be ready when the GitHub Pages deployment is complete.

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot bot commented on behalf of github Feb 2, 2026

v6.0.2

What's Changed

Changelog

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

v4.2.0

v4.1.7

v4.1.6

v0.4.1

What's Changed

v0.4.0

What's Changed

New Contributors

v7.2.0 🌈 add outputs python-version and python-cache-hit

Changes

🐛 Bug fixes

🚀 Enhancements

🧰 Maintenance

⬆️ Dependency updates

v6.2.0

What's Changed

Dependency Upgrades

v3.6.1 🌈 fix automatic minor tag updates

Changes

🧰 Maintenance

v1.8.1

Changes

v1.8.0

Features

Bugfixes

v1.7.3

Bugfixes

v1.7.2

Bugfixes

v1.7.1

Bugfixes

v1.7.0

Features

Internal changes

Uh oh!

github-actions bot commented Feb 2, 2026

Built to branch gh-pages at 2026-02-02 07:48 UTC. Preview will be ready when the GitHub Pages deployment is complete.

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Built to branch `gh-pages` at 2026-02-02 07:48 UTC.
Preview will be ready when the GitHub Pages deployment is complete.