Skip to content

build(deps): bump the github-actions group across 1 directory with 5 updates - #860

Merged
lens0021 merged 1 commit into
mainfrom
dependabot/github_actions/github-actions-ab9b11f962
Oct 19, 2026
Merged

lens0021 merged 1 commit into
mainfrom
dependabot/github_actions/github-actions-ab9b11f962

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 19, 2026

Copy link
Copy Markdown
Contributor

Bumps the github-actions group with 5 updates in the / directory:

Package From To
actions/upload-artifact 7.0.1 7.0.2
actions/download-artifact 8.0.1 8.0.2
rvben/rumdl 0.2.78 0.2.79
astral-sh/setup-uv 10.2.0 10.3.0
shivammathur/setup-php 2.37.2 2.40.0

Updates actions/upload-artifact from 7.0.1 to 7.0.2

Release notes

Sourced from actions/upload-artifact's releases.

v7.0.2

What's Changed

  • Improves artifact download retries when the service returns HTTP 429 (rate limiting), including honoring valid Retry-After headers.
  • Updates @​actions/artifact to v6.3.1.

New Contributors

Full Changelog: actions/upload-artifact@v7.0.1...v7.0.2

Commits
  • cf430e0 Merge pull request #822 from actions/tunc-d-prepare-upload-v7-0-2
  • c2acded chore: prepare v7.0.2 release
  • 4687c1b Merge pull request #821 from actions/tunc-d-upload-artifact-package-bump
  • 8cbe1be Bump @​actions/artifact to 6.3.1
  • See full diff in compare view

Updates actions/download-artifact from 8.0.1 to 8.0.2

Release notes

Sourced from actions/download-artifact's releases.

v8.0.2

What's Changed

New Contributors

Full Changelog: actions/download-artifact@v8.0.1...v8.0.2

Commits
  • 9000827 Merge pull request #493 from actions/tunc-d-prepare-download-v8-0-2
  • e455989 Prepare download-artifact v8.0.2
  • a00b90c Merge pull request #492 from actions/tunc-d-download-artifact-package-bump
  • 29bb7ce Update @​actions/artifact to 6.3.1
  • 484a0b5 Update the readme (#473)
  • See full diff in compare view

Updates rvben/rumdl from 0.2.78 to 0.2.79

Release notes

Sourced from rvben/rumdl's releases.

v0.2.79

Added

  • MD095: detect confusable link destinations with accurate source spans (7937059)
  • MD060: add stable configurable table-cell padding (b2323fd)
  • MD013: add opt-in sentence-pack reflow (#915) (d736ced)
  • code-block-tools: add format-mode = "pipeline" to chain formatters (b1da3de)
  • docs: add question search and aggregate usage tracking (aaabeaa)

Fixed

  • MD013: count only rewritten prose in list sentence warnings (276f266)
  • MD013: preserve reflow structure and expand scheduled fuzz coverage (73a9731)
  • MD013: preserve source sentence breaks and emphasis step labels (042d304)
  • MD013: keep emphasized step labels within their sentence (c1d1073)
  • MD013: keep a deep continuation line from setting a list item's indent (fc8cacd)
  • MD013: preserve document structure during reflow (79e8b95)
  • preserve Markdown content across lint fixes (37dc5e7)
  • MD013: read the code spans of a paragraph whose first line is indented (4879938)
  • MD013: keep a code span whole where only a reader without math sees it (7f22aa9)
  • MD013: keep a footnote's hard breaks and the lines its paragraph runs on into (224509d)
  • MD013: keep a quoted item's marker where a later line sits short of its content (84309ba)
  • MD013: recognize ) ordered list markers (2c9cced)
  • MD013: leave a paragraph as written where a code span runs into indentation (66a0855)
  • MD013: keep a code span whole across a line that looks like a block start (efc637d)
  • MD013: keep a heading inside a list item on its own line (fbe3671)
  • MD013: keep the indentation of HTML text in a list item (dd1dbf5)
  • MD013: run an HTML block on past its closing tag to a blank line (cfc5840)
  • lint_context: run an HTML block opened by a closing tag to a blank line (f1d4b66)
  • MD013: keep a line after a lone task checkbox out of the item (bf1712c)
  • lint_context: run an HTML block closed on its opening line to a blank line (28f5927)
  • MD013: keep an item paragraph's indentation over a lazy line (2065813)
  • MD013: end a list item at a line after its HTML block (0b1694b)
  • MD013: strip enclosing item indentation from a lazy line in a code span (2926426)
  • MD013: never start a wrapped line with a table delimiter row (071a070)
  • MD013: drop extra marker padding before an item line kept as written (4a1aae9)
  • MD013: keep a link reference definition that opens a list item paragraph (d579c9b)
  • MD013: reflow a lazy continuation line with its list item (f55ebb2)
  • MD013: keep a list item's marker spacing when reflow leaves lines it owns (236d7b7)
  • MD013: keep a wrapped inline tag from opening an HTML block (0d0b3e8)
  • MD013: keep code span whitespace across container line breaks (2de3893)
  • MD013: split CJK sentences only where the line break renders as the gap (8c21758)
  • parser: continue a GFM table until a blank line or another block (803e69c)
  • MD056: close a padded row that had no closing pipe (4064ec6)
  • parser: recognize every CommonMark type-6 tag as an HTML block start (937186a)
  • MD013: keep a list item's paragraph and the HTML block after it tight (98b1aa4)
  • MD013: stop reflow ending a wrapped line in a literal backslash (48ddcb9)
  • MD013: stop reflow splitting a list item paragraph at a NOTE: line (2b6120b)
  • MD013: drop a continuation line's indentation when reflow joins it (5b1666d)

... (truncated)

Changelog

Sourced from rvben/rumdl's changelog.

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[Unreleased]

Added

  • Opt-in code-block tool version verification against uv.lock, declared pyproject.toml constraints, or pre-commit/prek hook revisions for Ruff, Black, djLint and SQLFluff. Supports automatic source selection and one configurable policy for mismatched or unresolved versions.
  • MD013 link-text-punctuation = "trailing" optionally recognizes sentence endings in link text and image alt text while keeping each construct intact. When enabled, semantic reflow also preserves detected sentence boundaries when merging short lines.
  • MD063 style = "consistent" infers heading capitalization per document while respecting ignored words, proper names, level filters, and inline disables.
  • Independent code blocks can share the existing worker pool when error policies permit parallel execution, preserving tool order and applying formatted replacements together from their original source ranges.
  • MD013 break-words adds project-specific or localized words to the semantic reflow defaults, with case-insensitive Unicode matching.

Changed

  • Code-block formatting warnings appear in source order, including single-worker runs.
  • MD013 semantic reflow joins wrapped list and blockquote prose consistently with paragraphs, including items containing only one semantic sentence.

Fixed

  • Silent formatting applies native list-indentation fixes when display-math delimiters span blocks and close inside a code span.
  • MD013 semantic break words keep offsets in the original Unicode text, avoiding incorrect splits after characters whose lowercase forms change byte length.
  • MD013 semantic reflow keeps balanced parenthetical asides together during sentence detection and counts them as single units in paragraph diagnostics. Overlong asides prefer inner sentence boundaries before further width wrapping; explicit hard breaks remain separate reflow segments.

0.3.0 - 2026-10-17

Changed

  • 2.4–4.7× faster rumdl fmt than 0.2.79 on frozen documentation

... (truncated)

Commits
  • a7a8434 chore: bump version to v0.2.79
  • ba3faeb ci: bootstrap prebuilt tools for nightly formatting tests
  • 5a7a527 docs(MD095): format Unicode source URLs as rustdoc links
  • 7937059 feat(MD095): detect confusable link destinations with accurate source spans
  • b2323fd feat(MD060): add stable configurable table-cell padding
  • f10ef49 docs(contributing): document and synchronize new-rule registration
  • 276f266 fix(MD013): count only rewritten prose in list sentence warnings
  • 73a9731 fix(MD013): preserve reflow structure and expand scheduled fuzz coverage
  • 042d304 fix(MD013): preserve source sentence breaks and emphasis step labels
  • c1d1073 fix(MD013): keep emphasized step labels within their sentence
  • Additional commits viewable in compare view

Updates astral-sh/setup-uv from 10.2.0 to 10.3.0

Release notes

Sourced from astral-sh/setup-uv's releases.

v10.3.0 🌈 Add Python architecture selection

Changes

This release adds the python-arch input to select a Python architecture independently of the Python version. With uv 0.13.0 or later, set python-arch: x86_64 to use x64 Python on Windows ARM64 runners.

It also includes embedded checksums for uv releases through 0.13.0.

🚀 Enhancements

🧰 Maintenance

⬆️ Dependency updates

Commits

Updates shivammathur/setup-php from 2.37.2 to 2.40.0

Release notes

Sourced from shivammathur/setup-php's releases.

2.40.0

Changelog

  • Added support for PHP 8.7 nightly builds. This installs PHP builds from the master branch of php/php-src.
- name: Setup PHP 8.7
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.7'
  • Added support for Ubuntu 26.04 (ubuntu-26.04). (#1083)

  • Added support for pinning tools to SHA-256 and SHA-512 checksums. (#1098, #1099)

- name: Setup PHP with tools pinned to checksums
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.5'
    tools: >
      composer:2.9.8@sha256:59b2c50e10cafa0d8efc19ede9a326d782f096c674a26baf98cf042ce23de890,
      phpunit:12.5.0@sha512:76430b433bd57f96e5fbbabaefc0c82e3a5b19b1a366bd836614344c441a7a87575d77faa07e0e58ecec52061af67584b036adc4311f0764bd4414bc62be4684
  • Fixed support for Couchbase, Oracle, and IBM extensions on Ubuntu 26.04. (#1123)

  • Added support for cpx. (#1104)

- name: Setup PHP with cpx
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.5'
    tools: cpx
  • Added support for Laravel Cloud CLI. (#1106)
- name: Setup PHP with Laravel Cloud CLI
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.5'
    tools: laravel-cloud
  • Added configurable verbose logging using the verbose environment variable. Set it to true or v to show command output, or vv or vvv to also enable tracing. Also, deprecated the verbose and more-verbose tags in favor of this environment variable. (#1077, #1118, #1119)

... (truncated)

Commits
  • eb7c497 Bump version to 2.40.0
  • 7d671ba Resolve PHP formula aliases before invoking Homebrew
  • 57747c1 Allow opt-in builds cache on Blacksmith and Depot runners
  • 421f97f Keep verbose tests in TypeScript
  • dc7811a Bump Node.js dependencies
  • 7932293 Bump the github-actions group with 3 updates (#1130)
  • 87d00bd Default "Are you willing to submit a PR?" to "No" (#1126)
  • f458a14 Remove macOS 14 from README runner listings
  • bc12f5c Switch to homebrew-extensions for geos on macOS [skip ci]
  • bbf0b63 Try Brew extension installs before refreshing Homebrew
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…updates

Bumps the github-actions group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [actions/upload-artifact](https://github.com/actions/upload-artifact) | `7.0.1` | `7.0.2` |
| [actions/download-artifact](https://github.com/actions/download-artifact) | `8.0.1` | `8.0.2` |
| [rvben/rumdl](https://github.com/rvben/rumdl) | `0.2.78` | `0.2.79` |
| [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) | `10.2.0` | `10.3.0` |
| [shivammathur/setup-php](https://github.com/shivammathur/setup-php) | `2.37.2` | `2.40.0` |



Updates `actions/upload-artifact` from 7.0.1 to 7.0.2
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@043fb46...cf430e0)

Updates `actions/download-artifact` from 8.0.1 to 8.0.2
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](actions/download-artifact@3e5f45b...9000827)

Updates `rvben/rumdl` from 0.2.78 to 0.2.79
- [Release notes](https://github.com/rvben/rumdl/releases)
- [Changelog](https://github.com/rvben/rumdl/blob/main/CHANGELOG.md)
- [Commits](rvben/rumdl@9c4cc2a...a7a8434)

Updates `astral-sh/setup-uv` from 10.2.0 to 10.3.0
- [Release notes](https://github.com/astral-sh/setup-uv/releases)
- [Commits](astral-sh/setup-uv@c18668a...1c37ad0)

Updates `shivammathur/setup-php` from 2.37.2 to 2.40.0
- [Release notes](https://github.com/shivammathur/setup-php/releases)
- [Commits](shivammathur/setup-php@f3e473d...eb7c497)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: 7.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: actions/download-artifact
  dependency-version: 8.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: rvben/rumdl
  dependency-version: 0.2.79
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: astral-sh/setup-uv
  dependency-version: 10.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: shivammathur/setup-php
  dependency-version: 2.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Oct 19, 2026
@lens0021
lens0021 merged commit 5191d31 into main Oct 19, 2026
28 checks passed
@lens0021
lens0021 deleted the dependabot/github_actions/github-actions-ab9b11f962 branch October 19, 2026 13:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant