Skip to content

[DEPENDABOT] Weekly GitHub Actions updates(deps): Bump the actions group across 1 directory with 7 updates - #1

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions-a6b1b284aa
Open

[DEPENDABOT] Weekly GitHub Actions updates(deps): Bump the actions group across 1 directory with 7 updates#1
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions-a6b1b284aa

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 6, 2026 •
edited
Loading

Copy link
Copy Markdown

Bumps the actions group with 7 updates in the / directory:

Package From To
actions/checkout 6 7
actions/setup-node 6 7
lycheeverse/lychee-action 2.8.0 2.9.0
slackapi/slack-github-action 3.0.1 4.0.0
davidanson/markdownlint-cli2-action 23 24
peter-evans/find-comment 3 4
peter-evans/create-or-update-comment 4 5

Updates actions/checkout from 6 to 7

Release notes

Sourced from actions/checkout's releases.

v7.0.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v6.0.3...v7.0.0

v6.1.0

What's Changed

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: actions/checkout@v6.0.3...v6.1.0

v6.0.3

What's Changed

New Contributors

Full Changelog: actions/checkout@v6...v6.0.3

v6.0.2

What's Changed

Full Changelog: actions/checkout@v6.0.1...v6.0.2

v6.0.1

What's Changed

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

v7.0.1

v7.0.0

v6.0.3

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

... (truncated)

Commits

Updates actions/setup-node from 6 to 7

Release notes

Sourced from actions/setup-node's releases.

v7.0.0

What's Changed

Enhancements:

Bug fixes:

Documentation updates:

Dependency update:

New Contributors

Full Changelog: actions/setup-node@v6...v7.0.0

v6.5.0

What's Changed

Full Changelog: actions/setup-node@v6.4.0...v6.5.0

v6.4.0

What's Changed

Dependency updates:

New Contributors

Full Changelog: actions/setup-node@v6...v6.4.0

v6.3.0

What's Changed

Enhancements:

... (truncated)

Commits
  • 8207627 Migrate to ESM and upgrade dependencies (#1574)
  • 04be95c Add cache-primary-key and cache-matched-key as outputs (#1577)
  • 7c2c68d docs: Update caching recommendations to mitigate cache poisoning risks (#1567)
  • 6a61c03 Merge pull request #1569 from jasongin/update-actions-cache-5.1.0
  • 30eb73b Resolve high-severity audit issues
  • 4e1a87a Update dist
  • 360237f Strict equality
  • 4f8aac5 Bump @​actions/cache to 5.1.0, log cache write denied
  • f4a67bb Only use mirrorToken in getManifest if it's provided (#1548)
  • 0355742 Remove dummy NODE_AUTH_TOKEN export (#1558)
  • Additional commits viewable in compare view

Updates lycheeverse/lychee-action from 2.8.0 to 2.9.0

Release notes

Sourced from lycheeverse/lychee-action's releases.

v2.9.0

Summary

This release updates the default lychee version from v0.23.0 to v0.24.2.

The main reason for this release is compatibility with the new lychee 0.24.x release artifacts. Starting with lychee v0.24.0, the archive layout changed, and the lychee binary may now be packaged inside a subdirectory. lychee-action now detects that layout automatically, so users can upgrade without changing their workflows.

If you use:

uses: lycheeverse/lychee-action@v2

you will get the new version once the floating v2 tag has been updated. If you pin exact versions, update to:

uses: lycheeverse/lychee-action@v2.9.0

What’s new from lychee v0.24.x

Better diagnostics

lychee now reports line and column numbers for detected links. This makes broken link reports easier to act on, especially in larger documentation sites or generated reports.

Text fragment checking

lychee can now check URL text fragments, such as links containing #:~:text=.... This helps catch links that point to a valid page but no longer points to the intended highlighted text.

Sitemap support

lychee can now read sitemap.xml inputs. This is useful for checking published websites or generated documentation sites where the sitemap is the easiest source of URLs to validate.

JUnit output

lychee now supports JUnit output. This makes it easier to integrate link checking results with CI systems and test reporting tools that understand JUnit XML.

Redirect and remap visibility

lychee can now show redirects and remaps more clearly. This helps explain why a URL was checked as a different final URL and makes debugging link-checking behavior easier.

Multiple config files

lychee now supports multiple configuration files and expanded config handling. This is useful for repositories that split documentation, website, or package-specific link-checking settings.

Timeout handling

lychee can now accept timeouts explicitly. This gives users more control over how strict their link checks should be for flaky or slow endpoints.

Fixes and reliability improvements

... (truncated)

Commits

Updates slackapi/slack-github-action from 3.0.1 to 4.0.0

Release notes

Sourced from slackapi/slack-github-action's releases.

Slack GitHub Action v4.0.0

Major Changes

  • b1974f0: build: parse yaml with more strict multiline indentation rules

    Internal dependencies of js-yaml@v5 make YAML parsing more strict and compliant with the YAML specification. Indentation is now required for values that span multiple lines against the base value.

    See the YAML line prefixes spec for the expected indentation rule:

      channel: "C0123"
  text: "first line

second line"


second line"

Patch Changes

  • 654bb72: chore: provide global fetch proxied configurations with updates to web api and webhook packages

Slack GitHub Action v3.0.5

Patch Changes

  • 96fddbe: fix: revert multiline yaml parsing indentation change

Slack GitHub Action v3.0.4

Patch Changes

Slack GitHub Action v3.0.3

Patch Changes

  • 66834e4: feat: add instrumentation to address error rates

Slack GitHub Action v3.0.2

Patch Changes

  • 79529d7: fix: resolve url.parse deprecation warning for webhook techniques
Changelog

Sourced from slackapi/slack-github-action's changelog.

4.0.0

Major Changes

  • b1974f0: build: parse yaml with more strict multiline indentation rules

    Internal dependencies of js-yaml@v5 make YAML parsing more strict and compliant with the YAML specification. Indentation is now required for values that span multiple lines against the base value.

    See the YAML line prefixes spec for the expected indentation rule:

      channel: "C0123"
  text: "first line

second line"


second line"

Patch Changes

  • 654bb72: chore: provide global fetch proxied configurations with updates to web api and webhook packages

3.0.5

Patch Changes

  • 96fddbe: fix: revert multiline yaml parsing indentation change

3.0.4

Patch Changes

3.0.3

Patch Changes

  • 66834e4: feat: add instrumentation to address error rates

3.0.2

Patch Changes

  • 79529d7: fix: resolve url.parse deprecation warning for webhook techniques
Commits
  • dcb1066 chore: release
  • 53861e0 chore: release (#645)
  • b1974f0 build!: parse yaml with more strict multiline indentation rules (#640)
  • 947ed06 build(deps): bump undici from 7.28.0 to 8.7.0 (#653)
  • 03922a9 chore: track undici-types to the resolved undici version (#652)
  • 31d473e build(deps-dev): bump typescript from 6.0.3 to 7.0.2 (#651)
  • 3ca6997 build(deps-dev): bump sinon and @​types/sinon (#649)
  • 26a5ad3 build(deps): bump actions/setup-node from 6.4.0 to 7.0.0 (#647)
  • 5092efb build(deps-dev): bump @​biomejs/biome from 2.5.3 to 2.5.4 (#650)
  • 3548c3e build(deps): bump slackapi/slack-github-action from 3.0.3 to 3.0.5 (#646)
  • Additional commits viewable in compare view

Updates davidanson/markdownlint-cli2-action from 23 to 24

Release notes

Sourced from davidanson/markdownlint-cli2-action's releases.

Update markdownlint-cli2 version (markdownlint-cli2 v0.23.2, markdownlint v0.41.1).

No release notes provided.

Update markdownlint-cli2 version (markdownlint-cli2 v0.23.1, markdownlint v0.41.1).

No release notes provided.

Update markdownlint-cli2 version (markdownlint-cli2 v0.23.0, markdownlint v0.41.0).

No release notes provided.

Add package-lock.json.

No release notes provided.

Update markdownlint-cli2 version (markdownlint-cli2 v0.22.1, markdownlint v0.40.0).

No release notes provided.

Update markdownlint-cli2 version (markdownlint-cli2 v0.22.0, markdownlint v0.40.0), update Node.js dependency to 24.

No release notes provided.

Update markdownlint version (markdownlint-cli2 v0.20.0, markdownlint v0.40.0).

No release notes provided.

Update markdownlint version (markdownlint-cli2 v0.19.0, markdownlint v0.39.0).

No release notes provided.

Update markdownlint version (markdownlint-cli2 v0.18.1, markdownlint v0.38.0).

No release notes provided.

Update markdownlint version (markdownlint-cli2 v0.17.2, markdownlint v0.37.4).

No release notes provided.

Update markdownlint version (markdownlint-cli2 v0.17.0, markdownlint v0.37.0).

No release notes provided.

Update markdownlint version (markdownlint-cli2 v0.15.0, markdownlint v0.36.1).

No release notes provided.

Update markdownlint version (markdownlint-cli2 v0.14.0, markdownlint v0.35.0).

No release notes provided.

Update markdownlint version (markdownlint-cli2 v0.13.0, markdownlint v0.34.0).

No release notes provided.

Update markdownlint version (markdownlint-cli2 v0.12.1, markdownlint v0.33.0).

Update markdownlint version (markdownlint-cli2 v0.11.0, markdownlint v0.32.1), remove deprecated "command" input.

No release notes provided.

Update markdownlint version (markdownlint-cli2 v0.10.0, markdownlint v0.31.1).

No release notes provided.

... (truncated)

Commits
  • 21c1be1 Update to version 24.2.0.
  • cb5282d Freshen generated package-lock.json file, freshen generated index.js file.
  • d36517c Add eslint-package-json/all to lint script, address new issues.
  • 57b7f61 Refactor eslint.config.mjs to use defineConfig, change eslint-plugin-n from "...
  • fe75d07 Address new lint error from previous commit, freshen generated index.js file.
  • cea0e19 Bump eslint-plugin-unicorn from 71.1.0 to 72.0.0
  • 5137af3 Freshen generated index.js file.
  • ab8971b Bump markdownlint-cli2 from 0.23.1 to 0.23.2
  • 92a0fc4 Bump actions/setup-node from 6 to 7
  • 03ca1e4 Bump eslint from 10.6.0 to 10.7.0
  • Additional commits viewable in compare view

Updates peter-evans/find-comment from 3 to 4

Release notes

Sourced from peter-evans/find-comment's releases.

Find Comment v4.0.0

⚙️ Requires Actions Runner v2.327.1 or later if you are using a self-hosted runner for Node 24 support.

What's Changed

... (truncated)

Commits
  • b30e6a3 feat: v4 (#389)
  • b4929e7 build(deps-dev): bump @​types/node from 18.19.124 to 18.19.127 (#388)
  • 1f47d94 build(deps-dev): bump @​vercel/ncc from 0.38.3 to 0.38.4 (#387)
  • a723a15 build(deps): bump actions/setup-node from 4 to 5 (#386)
  • 8bacb1b build(deps-dev): bump @​types/node from 18.19.123 to 18.19.124 (#385)
  • 048de65 build(deps): bump actions/checkout from 4 to 5 (#384)
  • c02750f build(deps-dev): bump @​types/node from 18.19.122 to 18.19.123 (#383)
  • 092c582 build(deps): bump actions/download-artifact from 4 to 5 (#382)
  • c115bb0 build(deps-dev): bump eslint-plugin-prettier from 5.5.3 to 5.5.4 (#381)
  • 8d3be5d build(deps-dev): bump @​types/node from 18.19.121 to 18.19.122 (#380)
  • Additional commits viewable in compare view

Updates peter-evans/create-or-update-comment from 4 to 5

Release notes

Sourced from peter-evans/create-or-update-comment's releases.

Create or Update Comment v5.0.0

⚙️ Requires Actions Runner v2.327.1 or later if you are using a self-hosted runner for Node 24 support.

What's Changed

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Aug 6, 2026
@github-actions

github-actions Bot commented Aug 6, 2026

Copy link
Copy Markdown

🔍 PR Change Explainer

This automated summary helps you understand what this PR changes and how it affects filecoin.io.

📊 Quick Stats
Files changed 6
Lines added +15
Lines removed -15

📝 What Changed (Plain Language)

This is a configuration change. It modifies build settings, dependencies, or project configuration.

📂 Detailed File Breakdown

Click to expand full file list

CI / GitHub Actions

  • .github/workflows/cypress-percy-test.yml
  • .github/workflows/label-pr-workflow.yml
  • .github/workflows/link-checker.yml
  • .github/workflows/markdown-linter.yml
  • .github/workflows/pr-explainer.yml
  • .github/workflows/purge-unused-assets.yml

🚀 Preview & Next Steps

  1. Wait for the Vercel preview — a preview link will appear in this PR as a separate comment from the Vercel bot
  2. Click the preview link to see exactly how your changes look on the live site
  3. Test your changes:
  4. Check the status checks below — all checks should pass (green checkmarks) before merging
  5. When ready, request a review or merge the PR
📖 Glossary (click to expand)
Term What it means
PR (Pull Request) A proposed set of changes waiting to be merged into the main website
Preview deployment A temporary version of the website showing your changes (not public)
Merge Applying your changes to the main website — this triggers a production deploy
Build The process of converting code into a working website
Status checks Automated tests that verify your changes don't break anything
Content file (.md) A Markdown file containing text content (blog posts, case studies, etc.)
Component (.tsx) A reusable piece of the website's UI (buttons, cards, headers, etc.)
Frontmatter The metadata at the top of content files (title, date, description, etc.)
Shared package Code in packages/ used across the site — changes here can affect many pages

🤖 This comment was generated automatically to help explain PR changes. If something looks wrong, ask a developer for help.

@dependabot
[DEPENDABOT] Weekly GitHub Actions updates(deps): Bump the actions gr…
9db31ae 
…oup across 1 directory with 7 updates

Bumps the actions group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `6` | `7` |
| [actions/setup-node](https://github.com/actions/setup-node) | `6` | `7` |
| [lycheeverse/lychee-action](https://github.com/lycheeverse/lychee-action) | `2.8.0` | `2.9.0` |
| [slackapi/slack-github-action](https://github.com/slackapi/slack-github-action) | `3.0.1` | `4.0.0` |
| [davidanson/markdownlint-cli2-action](https://github.com/davidanson/markdownlint-cli2-action) | `23` | `24` |
| [peter-evans/find-comment](https://github.com/peter-evans/find-comment) | `3` | `4` |
| [peter-evans/create-or-update-comment](https://github.com/peter-evans/create-or-update-comment) | `4` | `5` |



Updates `actions/checkout` from 6 to 7
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v6...v7)

Updates `actions/setup-node` from 6 to 7
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@v6...v7)

Updates `lycheeverse/lychee-action` from 2.8.0 to 2.9.0
- [Release notes](https://github.com/lycheeverse/lychee-action/releases)
- [Commits](lycheeverse/lychee-action@v2.8.0...v2.9.0)

Updates `slackapi/slack-github-action` from 3.0.1 to 4.0.0
- [Release notes](https://github.com/slackapi/slack-github-action/releases)
- [Changelog](https://github.com/slackapi/slack-github-action/blob/main/CHANGELOG.md)
- [Commits](slackapi/slack-github-action@v3.0.1...v4.0.0)

Updates `davidanson/markdownlint-cli2-action` from 23 to 24
- [Release notes](https://github.com/davidanson/markdownlint-cli2-action/releases)
- [Commits](DavidAnson/markdownlint-cli2-action@v23...v24)

Updates `peter-evans/find-comment` from 3 to 4
- [Release notes](https://github.com/peter-evans/find-comment/releases)
- [Commits](peter-evans/find-comment@v3...v4)

Updates `peter-evans/create-or-update-comment` from 4 to 5
- [Release notes](https://github.com/peter-evans/create-or-update-comment/releases)
- [Commits](peter-evans/create-or-update-comment@v4...v5)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: actions/setup-node
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: davidanson/markdownlint-cli2-action
  dependency-version: '24'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: lycheeverse/lychee-action
  dependency-version: 2.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: peter-evans/create-or-update-comment
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: peter-evans/find-comment
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: slackapi/slack-github-action
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title [DEPENDABOT] Weekly GitHub Actions updates(deps): Bump the actions group with 7 updates [DEPENDABOT] Weekly GitHub Actions updates(deps): Bump the actions group across 1 directory with 7 updates Aug 9, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions-a6b1b284aa branch from 57dc18d to 9db31ae Compare August 9, 2026 11:03
@vercel

vercel Bot commented Aug 9, 2026 •
edited
Loading

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
filecoin-io-website Error Error Aug 9, 2026 11:07am

Request Review

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants