build(deps): bump the actions group across 1 directory with 7 updates by dependabot[bot] · Pull Request #44 · JacobCoffee/debug-toolbar

dependabot · 2026-02-23T07:33:23Z

Bumps the actions group with 7 updates in the / directory:

Package	From	To
actions/checkout	`6.0.1`	`6.0.2`
orhun/git-cliff-action	`4.7.0`	`4.7.1`
zizmorcore/zizmor-action	`0.3.0`	`0.5.0`
astral-sh/setup-uv	`7.1.6`	`7.3.0`
actions/setup-python	`6.1.0`	`6.2.0`
astral-sh/ruff-action	`3.5.1`	`3.6.1`
rossjrw/pr-preview-action	`1.6.3`	`1.8.1`

Updates actions/checkout from 6.0.1 to 6.0.2

Release notes

Sourced from actions/checkout's releases.

v6.0.2

What's Changed

Add orchestration_id to git user-agent when ACTIONS_ORCHESTRATION_ID is set by @TingluoHuang in actions/checkout#2355

Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in actions/checkout#2356

Full Changelog: actions/checkout@v6.0.1...v6.0.2

Changelog

Sourced from actions/checkout's changelog.

Changelog

v6.0.2

Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in actions/checkout#2356

v6.0.1

Add worktree support for persist-credentials includeIf by @ericsciple in actions/checkout#2327

v6.0.0

Persist creds to a separate file by @ericsciple in actions/checkout#2286

Update README to include Node.js 24 support details and requirements by @salmanmkc in actions/checkout#2248

v5.0.1

Port v6 cleanup to v5 by @ericsciple in actions/checkout#2301

v5.0.0

Update actions checkout to use node 24 by @salmanmkc in actions/checkout#2226

v4.3.1

Port v6 cleanup to v4 by @ericsciple in actions/checkout#2305

v4.3.0

docs: update README.md by @motss in actions/checkout#1971

Add internal repos for checking out multiple repositories by @mouismail in actions/checkout#1977

Documentation update - add recommended permissions to Readme by @benwells in actions/checkout#2043

Adjust positioning of user email note and permissions heading by @joshmgross in actions/checkout#2044

Update README.md by @nebuk89 in actions/checkout#2194

Update CODEOWNERS for actions by @TingluoHuang in actions/checkout#2224

Update package dependencies by @salmanmkc in actions/checkout#2236

v4.2.2

url-helper.ts now leverages well-known environment variables by @jww3 in actions/checkout#1941

Expand unit test coverage for isGhes by @jww3 in actions/checkout#1946

v4.2.1

Check out other refs/* by commit if provided, fall back to ref by @orhantoy in actions/checkout#1924

v4.2.0

Add Ref and Commit outputs by @lucacome in actions/checkout#1180

Dependency updates by @dependabot- actions/checkout#1777, actions/checkout#1872

v4.1.7

Bump the minor-npm-dependencies group across 1 directory with 4 updates by @dependabot in actions/checkout#1739

Bump actions/checkout from 3 to 4 by @dependabot in actions/checkout#1697

Check out other refs/* by commit by @orhantoy in actions/checkout#1774

Pin actions/checkout's own workflows to a known, good, stable version. by @jww3 in actions/checkout#1776

v4.1.6

Check platform to set archive extension appropriately by @cory-miller in actions/checkout#1732

... (truncated)

Commits

de0fac2 Fix tag handling: preserve annotations and explicit fetch-tags (#2356)
064fe7f Add orchestration_id to git user-agent when ACTIONS_ORCHESTRATION_ID is set (...
See full diff in compare view

Updates orhun/git-cliff-action from 4.7.0 to 4.7.1

Commits

c93ef52 chore(version): update git-cliff to 2.12.0
2032a55 docs(readme): add an example how to execute arbitrary git-cliff commands (#70)
See full diff in compare view

Updates zizmorcore/zizmor-action from 0.3.0 to 0.5.0

Release notes

Sourced from zizmorcore/zizmor-action's releases.

v0.5.0

What's Changed

Expose output-file as an output when advanced-security: true by @unlobito in zizmorcore/zizmor-action#87

New Contributors

@unlobito made their first contribution in zizmorcore/zizmor-action#87

Full Changelog: zizmorcore/zizmor-action@v0.4.1...v0.5.0

v0.4.1

This version fixes an error in the 0.4.0 release that prevented non-relative use of the action.

What's Changed

Fix version file path by @woodruffw in zizmorcore/zizmor-action#83

Full Changelog: zizmorcore/zizmor-action@v0.4.0...v0.4.1

v0.4.0

This new version of zizmor-action brings two major changes:

The new fail-on-no-inputs option can be used to control whether zizmor-action fails if no inputs were collected by zizmor. The default remains true, reflecting the pre-existing behavior.

The action's use of the official zizmor Docker images is now fully hash-checked internally, preventing accidental or malicious modification to the images. This also means that subsequent releases of zizmor will induce a release of this action, rather than the action always picking up the latest version by default.

What's Changed

docs: extended permissions required for internal repos by @AntoineSebert in zizmorcore/zizmor-action#61

docs: clarify description of "token" to indicate it is only used for online audits by @rmuir in zizmorcore/zizmor-action#63

Hash-check zizmor Docker images by @woodruffw in zizmorcore/zizmor-action#68

Add fail-on-no-inputs option by @woodruffw in zizmorcore/zizmor-action#67

New Contributors

@AntoineSebert made their first contribution in zizmorcore/zizmor-action#61

@rmuir made their first contribution in zizmorcore/zizmor-action#63

Full Changelog: zizmorcore/zizmor-action@v0.3.0...v0.4.0

Commits

0dce257 chore(deps): bump peter-evans/create-pull-request (#88)
fb94974 Expose output-file as an output when advanced-security: true (#87)
867562a chore(deps): bump the github-actions group with 2 updates (#85)
7462f07 Bump pins in README (#84)
1356984 Fix version file path (#83)
72469cf Bump pins in README (#80)
3aa7e2f Add fail-on-no-inputs tests (#79)
92fc377 Sync zizmor versions (#78)
5aff8ef Add fail-on-no-inputs option (#67)
4d497b9 Sync zizmor versions (#75)
Additional commits viewable in compare view

Updates astral-sh/setup-uv from 7.1.6 to 7.3.0

Release notes

Sourced from astral-sh/setup-uv's releases.

v7.3.0 🌈 New features and bug fixes for activate-environment

Changes

This release contains a few bug fixes and a new feature for the activate-environment functionality.

🐛 Bug fixes

fix: warn instead of error when no python to cache @eifinger (#762)

fix: use --clear to create venv @eifinger (#761)

🚀 Enhancements

feat: add venv-path input for activate-environment @eifinger (#746)

🧰 Maintenance

chore: update known checksums for 0.10.0 @github-actions[bot] (#759)

refactor: tilde-expansion tests as unittests and no self-hosted tests @eifinger (#760)

chore: update known checksums for 0.9.30 @github-actions[bot] (#756)

chore: update known checksums for 0.9.29 @github-actions[bot] (#748)

📚 Documentation

Fix punctuation @pm-dev563 (#747)

⬆️ Dependency updates

Bump typesafegithub/github-actions-typing from 2.2.1 to 2.2.2 @dependabot[bot] (#753)

Bump peter-evans/create-pull-request from 8.0.0 to 8.1.0 @dependabot[bot] (#751)

Bump actions/checkout from 6.0.1 to 6.0.2 @dependabot[bot] (#740)

Bump release-drafter/release-drafter from 6.1.0 to 6.2.0 @dependabot[bot] (#743)

Bump eifinger/actionlint-action from 1.9.3 to 1.10.0 @dependabot[bot] (#731)

Bump actions/setup-node from 6.1.0 to 6.2.0 @dependabot[bot] (#738)

v7.2.0 🌈 add outputs python-version and python-cache-hit

Changes

Among some minor typo fixes and quality of life features for developers of actions the main feature of this release are new outputs:

python-version: The Python version that was set (same content as existing UV_PYTHON)

python-cache-hit: A boolean value to indicate the Python cache entry was found

While implementing this it became clear, that it is easier to handle the Python binaries in a separate cache entry. The added benefit for users is that the "normal" cache containing the dependencies can be used in all runs no matter if these cache the Python binaries or not.

[!NOTE]
This release will invalidate caches that contain the Python binaries. This happens a single time.

🐛 Bug fixes

chore: remove stray space from UV_PYTHON_INSTALL_DIR message @akx (#720)

... (truncated)

Commits

eac588a Bump typesafegithub/github-actions-typing from 2.2.1 to 2.2.2 (#753)
a97c6cb Bump peter-evans/create-pull-request from 8.0.0 to 8.1.0 (#751)
02182fa fix: warn instead of error when no python to cache (#762)
a3b3eae chore: update known checksums for 0.10.0 (#759)
78cebec fix: use --clear to create venv (#761)
b6b8e2c refactor: tilde-expansion tests as unittests and no self-hosted tests (#760)
e31bec8 chore: update known checksums for 0.9.30 (#756)
db2b65e Bump actions/checkout from 6.0.1 to 6.0.2 (#740)
3511ff7 feat: add venv-path input for activate-environment (#746)
99b0f04 Fix punctuation (#747)
Additional commits viewable in compare view

Updates actions/setup-python from 6.1.0 to 6.2.0

Release notes

Sourced from actions/setup-python's releases.

v6.2.0

What's Changed

Dependency Upgrades

Upgrade dependencies to Node 24 compatible versions by @salmanmkc in actions/setup-python#1259

Upgrade urllib3 from 2.5.0 to 2.6.3 in /__tests__/data by @dependabot in actions/setup-python#1253 and actions/setup-python#1264

Full Changelog: actions/setup-python@v6...v6.2.0

Commits

a309ff8 Bump urllib3 from 2.6.0 to 2.6.3 in /tests/data (#1264)
bfe8cc5 Upgrade @actions dependencies to Node 24 compatible versions (#1259)
4f41a90 Bump urllib3 from 2.5.0 to 2.6.0 in /tests/data (#1253)
See full diff in compare view

Updates astral-sh/ruff-action from 3.5.1 to 3.6.1

Release notes

Sourced from astral-sh/ruff-action's releases.

v3.6.1 🌈 fix automatic minor tag updates

Changes

This is just a bugfix release for the release process

fix: persist credentials for git push in update-major-minor-tags workflow @eifinger-bot (#312)

🧰 Maintenance

ci: add zizmor security linting @eifinger-bot (#313)

Commits

4919ec5 fix: persist credentials for git push in update-major-minor-tags workflow (#312)
1977806 ci: add zizmor security linting (#313)
aedff8d Bump dependencies and actions (#311)
191187a Bump actions/checkout from 5.0.0 to 6.0.1 (#278)
ecac2cc Bump github/codeql-action from 3.30.5 to 4.31.10 (#294)
ddb8c29 Bump actions/setup-node from 6.0.0 to 6.2.0 (#296)
5eee2a4 search in parent dir (#306)
1d756c4 chore: update known checksums for 0.14.13/0.14.14 (#297)
fde82cb Fix CI: Pin ruff version to stable 0.13.x in test fixture (#305)
deb6320 ignore environment markers in dep specs (#295)
Additional commits viewable in compare view

Updates rossjrw/pr-preview-action from 1.6.3 to 1.8.1

Release notes

Sourced from rossjrw/pr-preview-action's releases.

v1.8.1

Changes

QR codes (added in 1.8.0) are now enabled by default. Add qr-code: false to disable it.

If you have feedback about QR codes e.g. you strongly feel they should be disabled by default, please leave your thoughts on this issue: rossjrw/pr-preview-action#130

v1.8.0

Features

Add option to add QR code to comment by @lredoban in rossjrw/pr-preview-action#98

New input parameter qr-code, default false, that toggles the behaviour and can also be used to set the QR code provider

qr.rossjrw.com (https://github.com/rossjrw/qrcode-worker) created as the default QR code provider

Bugfixes

Adjusted the timeouts for the wait-for-pages-deployment option - re-increased time for Pages build to start from 90s to 180s

v1.7.3

Bugfixes

Enable GitHub API requests to work with GHES by @Googlom in rossjrw/pr-preview-action#126

v1.7.2

Bugfixes

Adjusted the timeouts for the wait-for-pages-deployment option

Wait for Pages build to start: 180s -> 90s

Wait for Pages build to complete: 180s -> 1800s

v1.7.1

Bugfixes

Increased the timeouts for the wait-for-pages-deployment option, suggested by @eliodinino

Wait for Pages build to start: 60s -> 180s

Wait for Pages build to complete: 60s -> 180s

v1.7.0

Features

Support passing through overrides for the commit author by @FasterSpeeding in rossjrw/pr-preview-action#32

Adds two new input parameters: git-config-name and git-config-email

Add customisable commit messages for deploy and destroy actions by @bengeois in rossjrw/pr-preview-action#120

Adds two new input parameters: deploy-commit-message and remove-commit-message

Add option to wait for deploy to finish by @rossjrw in rossjrw/pr-preview-action#121, reported by @vincerubinetti in #25

Adds a new input parameter: wait-for-pages-deployment, boolean, default false (may be true in a future version)

Internal changes

Add automated integration testing by @rossjrw in rossjrw/pr-preview-action#122

Commits

ffa7509 Merge pull request #129 from rossjrw/enable-qr
5b9cf5d Move QR provider determination to comment generator
5bc2014 Enable default provider when qr-code is true
520ebf3 Enable QR codes by default
7eb2064 Automate readme screenshots
5fd5f8e Reincrease page build start timeout
b4a20f5 Update preview image
74401f0 Use QR code internally
8d0e59d Merge pull request #98 from lredoban/qr-code
66ce60d Tweak intro to mention important setup stuff
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the actions group with 7 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `6.0.1` | `6.0.2` | | [orhun/git-cliff-action](https://github.com/orhun/git-cliff-action) | `4.7.0` | `4.7.1` | | [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action) | `0.3.0` | `0.5.0` | | [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) | `7.1.6` | `7.3.0` | | [actions/setup-python](https://github.com/actions/setup-python) | `6.1.0` | `6.2.0` | | [astral-sh/ruff-action](https://github.com/astral-sh/ruff-action) | `3.5.1` | `3.6.1` | | [rossjrw/pr-preview-action](https://github.com/rossjrw/pr-preview-action) | `1.6.3` | `1.8.1` | Updates `actions/checkout` from 6.0.1 to 6.0.2 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@8e8c483...de0fac2) Updates `orhun/git-cliff-action` from 4.7.0 to 4.7.1 - [Release notes](https://github.com/orhun/git-cliff-action/releases) - [Commits](orhun/git-cliff-action@v4.7.0...c93ef52) Updates `zizmorcore/zizmor-action` from 0.3.0 to 0.5.0 - [Release notes](https://github.com/zizmorcore/zizmor-action/releases) - [Commits](zizmorcore/zizmor-action@e639db9...0dce257) Updates `astral-sh/setup-uv` from 7.1.6 to 7.3.0 - [Release notes](https://github.com/astral-sh/setup-uv/releases) - [Commits](astral-sh/setup-uv@681c641...eac588a) Updates `actions/setup-python` from 6.1.0 to 6.2.0 - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](actions/setup-python@83679a8...a309ff8) Updates `astral-sh/ruff-action` from 3.5.1 to 3.6.1 - [Release notes](https://github.com/astral-sh/ruff-action/releases) - [Commits](astral-sh/ruff-action@57714a7...4919ec5) Updates `rossjrw/pr-preview-action` from 1.6.3 to 1.8.1 - [Release notes](https://github.com/rossjrw/pr-preview-action/releases) - [Commits](rossjrw/pr-preview-action@8ff09e4...ffa7509) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 6.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: orhun/git-cliff-action dependency-version: 4.7.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: zizmorcore/zizmor-action dependency-version: 0.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: astral-sh/setup-uv dependency-version: 7.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: actions/setup-python dependency-version: 6.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: astral-sh/ruff-action dependency-version: 3.6.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: rossjrw/pr-preview-action dependency-version: 1.8.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-02-23T07:34:24Z

PR Preview Action v1.8.1
🚀 View preview at https://JacobCoffee.github.io/debug-toolbar/pr-preview/pr-44/
Built to branch `gh-pages` at 2026-02-23 07:33 UTC. Preview will be ready when the GitHub Pages deployment is complete.

dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Feb 23, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Comments

build(deps): bump the actions group across 1 directory with 7 updates#44

build(deps): bump the actions group across 1 directory with 7 updates#44
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/github_actions/actions-ae4e3dce0a

dependabot bot commented on behalf of github Feb 23, 2026

Uh oh!

github-actions bot commented Feb 23, 2026

Built to branch `gh-pages` at 2026-02-23 07:33 UTC.
Preview will be ready when the GitHub Pages deployment is complete.

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Comments

Conversation

dependabot bot commented on behalf of github Feb 23, 2026

v6.0.2

What's Changed

Changelog

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

v4.2.0

v4.1.7

v4.1.6

v0.5.0

What's Changed

New Contributors

v0.4.1

What's Changed

v0.4.0

What's Changed

New Contributors

v7.3.0 🌈 New features and bug fixes for activate-environment

Changes

🐛 Bug fixes

🚀 Enhancements

🧰 Maintenance

📚 Documentation

⬆️ Dependency updates

v7.2.0 🌈 add outputs python-version and python-cache-hit

Changes

🐛 Bug fixes

v6.2.0

What's Changed

Dependency Upgrades

v3.6.1 🌈 fix automatic minor tag updates

Changes

🧰 Maintenance

v1.8.1

Changes

v1.8.0

Features

Bugfixes

v1.7.3

Bugfixes

v1.7.2

Bugfixes

v1.7.1

Bugfixes

v1.7.0

Features

Internal changes

Uh oh!

github-actions bot commented Feb 23, 2026

Built to branch gh-pages at 2026-02-23 07:33 UTC. Preview will be ready when the GitHub Pages deployment is complete.

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Built to branch `gh-pages` at 2026-02-23 07:33 UTC.
Preview will be ready when the GitHub Pages deployment is complete.