Skip to content

chore(deps): bump the actions-all group across 1 directory with 2 updates#192

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions-all-cf968c9c1f
Open

chore(deps): bump the actions-all group across 1 directory with 2 updates#192
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions-all-cf968c9c1f

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 30, 2026

Copy link
Copy Markdown
Contributor

Bumps the actions-all group with 2 updates in the / directory: github/gh-aw and dorny/paths-filter.

Updates github/gh-aw from 0.73.0 to 0.76.1

Release notes

Sourced from github/gh-aw's releases.

v0.76.1

🌟 Release Highlights

This release brings a new replay command for timeline log visualization, inline skill support, improved safe-outputs reliability, and Codex model updates.

✨ What's New

  • replay command — Render and stream unified timeline logs directly in your terminal for faster post-run analysis (#34835)
  • Inline skill extraction/runtime — Define and run skills inline within workflows, mirroring the inline sub-agent syntax for a more consistent authoring experience (#34874)
  • Codex default model updated to gpt-5.4 — Workflows using Codex now use the latest model by default; lockfiles have been regenerated (#34804)
  • tracker-id frontmatter documented — The tracker-id field is now fully documented in the reference, making it easier to correlate workflow runs with external tracking systems (#34799)

🐛 Bug Fixes & Improvements

  • safe-outputs push_to_pull_request_branch — Documented as append-only and now auto-linearizes merge commits before a signed push, preventing push failures on branches with merge history (#34834)
  • Codex threat-detection — Response-event logs from Codex are now correctly parsed in threat-detection result processing (#34850)
  • Step name alignment stabilized — Direct manifest reads are now permitted and agent guidance tightened to prevent step name drift (#34873)
  • Reduced duplicate frontmatter scanningParseWorkflow no longer scans frontmatter twice, improving compilation performance (#34819)
  • Build & test reliability — Integration-tagged builds and CGO fuzz jobs now correctly share test helpers, eliminating spurious CI failures (#34841, #34816)

For complete details, see CHANGELOG.

Generated by 🚀 Release · sonnet46 838.6K


What's Changed

Full Changelog: github/gh-aw@v0.76.0...v0.76.1

... (truncated)

Commits
  • 58d1bed Add inline skill extraction/runtime support mirroring inline sub-agents (#34874)
  • ccf77c4 jsweep: clean add_comment.cjs (#34866)
  • cc2e15f Stabilize Step Name Alignment by permitting direct manifest reads and tighten...
  • 1aa3c80 refactor: reuse gatewayTimestampToTime in agentEntryToTimelineEvent (#34864)
  • acaccd7 feat: add replay command for rendering unified timeline logs (#34835)
  • 796f583 fix(safe-outputs): document push_to_pull_request_branch as append-only; auto-...
  • 56207e9 Handle Codex response-event logs in threat-detection result parsing (#34850)
  • 88fa3ba Route Antigravity AWF target through Gemini provider key (#34839)
  • c948db9 [community] Update community contributions in README (#34846)
  • cdbeed6 chore(spec): daily threat spec optimizer 2026-05-26 — bump to 1.0.12 (#34845)
  • Additional commits viewable in compare view

Updates dorny/paths-filter from 3.0.2 to 4.0.1

Release notes

Sourced from dorny/paths-filter's releases.

v4.0.1

What's Changed

New Contributors

Full Changelog: dorny/paths-filter@v4.0.0...v4.0.1

v4.0.0

What's Changed

New Contributors

Full Changelog: dorny/paths-filter@v3.0.3...v4.0.0

v3.0.3

What's Changed

New Contributors

Full Changelog: dorny/paths-filter@v3...v3.0.3

Changelog

Sourced from dorny/paths-filter's changelog.

Changelog

v4.0.0

v3.0.3

v3.0.2

v3.0.1

v3.0.0

v2.11.1

v2.11.0

v2.10.2

v2.10.1

v2.10.0

v2.9.3

v2.9.2

v2.9.1

v2.9.0

... (truncated)

Commits
  • fbd0ab8 feat: add merge_group event support
  • efb1da7 feat: add dist/ freshness check to PR workflow
  • d8f7b06 Merge pull request #302 from dorny/issue-299
  • addbc14 Update README for v4
  • 9d7afb8 Update CHANGELOG for v4.0.0
  • 782470c Merge branch 'releases/v3'
  • d1c1ffe Update CHANGELOG for v3.0.3
  • ce10459 Merge pull request #294 from saschabratton/master
  • 5f40380 feat: update action runtime to node24
  • 668c092 Merge pull request #279 from wardpeet/patch-1
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies github_actions Pull requests that update GitHub Actions code labels May 30, 2026
@github-actions

github-actions Bot commented May 30, 2026

Copy link
Copy Markdown
Contributor

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

PackageVersionScoreDetails
actions/github/gh-aw/actions/setup 58d1bedbb7200f59c2d224151339e38fd8687d05 UnknownUnknown
actions/github/gh-aw/actions/setup 58d1bedbb7200f59c2d224151339e38fd8687d05 UnknownUnknown

Scanned Files

  • .github/workflows/daily-test-improver.lock.yml
  • .github/workflows/issue-triage.lock.yml

…ates

Bumps the actions-all group with 2 updates in the / directory: [github/gh-aw](https://github.com/github/gh-aw) and [dorny/paths-filter](https://github.com/dorny/paths-filter).


Updates `github/gh-aw` from 0.73.0 to 0.76.1
- [Release notes](https://github.com/github/gh-aw/releases)
- [Commits](github/gh-aw@v0.73.0...v0.76.1)

Updates `dorny/paths-filter` from 3.0.2 to 4.0.1
- [Release notes](https://github.com/dorny/paths-filter/releases)
- [Changelog](https://github.com/dorny/paths-filter/blob/master/CHANGELOG.md)
- [Commits](dorny/paths-filter@de90cc6...fbd0ab8)

---
updated-dependencies:
- dependency-name: dorny/paths-filter
  dependency-version: 4.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions-all
- dependency-name: github/gh-aw
  dependency-version: 0.74.8
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-all
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps): bump the actions-all group with 2 updates chore(deps): bump the actions-all group across 1 directory with 2 updates Jun 6, 2026
@dependabot dependabot Bot force-pushed the dependabot/github_actions/actions-all-cf968c9c1f branch from 60ae79c to 53a4bd7 Compare June 6, 2026 22:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants