Skip to content

Bump the github-actions group across 1 directory with 6 updates - #56654

Merged
mthalman merged 1 commit into
mainfrom
dependabot/github_actions/github-actions-fa493f4411
Oct 28, 2026
Merged

Bump the github-actions group across 1 directory with 6 updates#56654
mthalman merged 1 commit into
mainfrom
dependabot/github_actions/github-actions-fa493f4411

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 15, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the github-actions group with 6 updates in the / directory:

Package From To
actions/upload-artifact 7.0.1 7.0.2
actions/download-artifact 8.0.1 8.0.2
dotnet/arcade/.github/workflows/backport-base.yml 1249e0a0957c31232d1fd43b5a36cabba1722062 a1e2996a5c308f9ad515414927559b43f36f1cbc
becheran/mlc 1.2.0 1.2.2
dotnet/arcade/.github/workflows/inter-branch-merge-base.yml 1249e0a0957c31232d1fd43b5a36cabba1722062 a1e2996a5c308f9ad515414927559b43f36f1cbc
actions/setup-node 7.0.0 7.1.0

Updates actions/upload-artifact from 7.0.1 to 7.0.2

Release notes

Sourced from actions/upload-artifact's releases.

v7.0.2

What's Changed

  • Improves artifact download retries when the service returns HTTP 429 (rate limiting), including honoring valid Retry-After headers.
  • Updates @​actions/artifact to v6.3.1.

New Contributors

Full Changelog: actions/upload-artifact@v7.0.1...v7.0.2

Commits
  • cf430e0 Merge pull request #822 from actions/tunc-d-prepare-upload-v7-0-2
  • c2acded chore: prepare v7.0.2 release
  • 4687c1b Merge pull request #821 from actions/tunc-d-upload-artifact-package-bump
  • 8cbe1be Bump @​actions/artifact to 6.3.1
  • See full diff in compare view

Updates actions/download-artifact from 8.0.1 to 8.0.2

Release notes

Sourced from actions/download-artifact's releases.

v8.0.2

What's Changed

New Contributors

Full Changelog: actions/download-artifact@v8.0.1...v8.0.2

Commits
  • 9000827 Merge pull request #493 from actions/tunc-d-prepare-download-v8-0-2
  • e455989 Prepare download-artifact v8.0.2
  • a00b90c Merge pull request #492 from actions/tunc-d-download-artifact-package-bump
  • 29bb7ce Update @​actions/artifact to 6.3.1
  • 484a0b5 Update the readme (#473)
  • See full diff in compare view

Updates dotnet/arcade/.github/workflows/backport-base.yml from 1249e0a0957c31232d1fd43b5a36cabba1722062 to a1e2996a5c308f9ad515414927559b43f36f1cbc

Commits
  • a1e2996 Repair Arcade links after DNCEng wiki reorganization (#17712)
  • 7103cc6 Use OneLocBuild v3 in the shared localization template (#17706)
  • 1c4a164 Update NativeAotSupported.props to allow wasm (#17702)
  • 042024f Update vulnerable cryptography packages to 10.0.13 (#17699)
  • 0af5716 Remove unused coverlet.collector dependency (#17671)
  • 7dad901 Enable client redirects in the Swagger client template (#17625)
  • 2985ec8 [main] Source code updates from dotnet/dotnet (#17678)
  • 1068161 Harden Build Failure Analysis archive extraction (#17670)
  • c946609 Fix publishing completion messages and aka.ms log ordering (#17654)
  • bd11c20 [main] Source code updates from dotnet/dotnet (#17668)
  • Additional commits viewable in compare view

Updates becheran/mlc from 1.2.0 to 1.2.2

Release notes

Sourced from becheran/mlc's releases.

v1.2.2

Full Changelog: becheran/mlc@v1.2.1...v1.2.2

v1.2.1

What's Changed

Full Changelog: becheran/mlc@v1.2.0...v1.2.1

Changelog

Sourced from becheran/mlc's changelog.

Changelog

[Unreleased] - ReleaseDate

[1.3.0] - 2026-10-20

Added

  • --quiet / -q option (and quiet in .mlc.toml) which only prints warnings, errors and the summary. The banner and all links which are ok or skipped are left out
  • --format json option (and format = "json" in .mlc.toml) which prints a single JSON document with the summary and all issues to stdout. Debug output goes to stderr in this mode
  • Documentation for AI agents and automation: README section, AGENTS.md, llms.txt and ready to copy examples for AGENTS.md, Claude Code hooks and skills, and pre-commit

Changed

  • Rust edition 2024. Building from source needs Rust 1.88 or newer, which is checked in CI
  • Invalid arguments (for example --throttle abc or an unknown markup type) and an invalid .mlc.toml print an error and exit with code 2 instead of panicking. The same exit code is used for an invalid --root-dir, which used to be 1
  • Failing to write the --csv file prints an error instead of panicking. A web link which is not a valid URL is reported as broken link instead of panicking
  • The banner is not printed anymore when --help or an invalid argument is passed
  • Warnings about not existing paths passed via --files or --ignore-path are printed to stderr instead of stdout
  • The CSV report and the list of broken links are sorted (errors first, then by file, line and column) instead of depending on which web request finished first
  • Library: mlc::run returns Result<(), mlc::Error>, the Display implementation of Config, the glob re-export of colored and the async-ness of link_validator::resolve_target_link are gone, logger::init takes a second use_stderr argument and MarkupType::file_extensions returns a slice
  • The release binary is much smaller (release profile with LTO, opt-level = "s", panic = "abort" and stripped symbols, and the unused code above). This means faster downloads in CI and a faster start
  • The docker image is based on Alpine Linux instead of Ubuntu and is about 10 times smaller. The entrypoint.sh of the GitHub Action uses sh instead of bash

Fixed

  • gitignore = false and gituntracked = false in .mlc.toml enabled the options. Now they are only enabled with true
  • --gitignore and --gituntracked now also recognize the markup files with extensions like .markdown or .htm and upper case extensions

Removed

  • Dependencies lazy_static and async-std. The standard library is used instead
  • The second, never used TLS implementation (rustls with aws-lc) and the response decoders (brotli, gzip, deflate) and charset detection of reqwest. They were compiled in, but the web links are checked with the system TLS library and only the status code of a response is looked at. The Accept-Encoding header is still sent

[1.2.2] - 2026-09-28

[1.2.1] - 2026-09-28

... (truncated)

Commits

Updates dotnet/arcade/.github/workflows/inter-branch-merge-base.yml from 1249e0a0957c31232d1fd43b5a36cabba1722062 to a1e2996a5c308f9ad515414927559b43f36f1cbc

Commits
  • a1e2996 Repair Arcade links after DNCEng wiki reorganization (#17712)
  • 7103cc6 Use OneLocBuild v3 in the shared localization template (#17706)
  • 1c4a164 Update NativeAotSupported.props to allow wasm (#17702)
  • 042024f Update vulnerable cryptography packages to 10.0.13 (#17699)
  • 0af5716 Remove unused coverlet.collector dependency (#17671)
  • 7dad901 Enable client redirects in the Swagger client template (#17625)
  • 2985ec8 [main] Source code updates from dotnet/dotnet (#17678)
  • 1068161 Harden Build Failure Analysis archive extraction (#17670)
  • c946609 Fix publishing completion messages and aka.ms log ordering (#17654)
  • bd11c20 [main] Source code updates from dotnet/dotnet (#17668)
  • Additional commits viewable in compare view

Updates actions/setup-node from 7.0.0 to 7.1.0

Release notes

Sourced from actions/setup-node's releases.

v7.1.0

What's Changed

Enhancements:

Bug fixes:

Documentation updates:

Dependency updates:

New Contributors

Full Changelog: actions/setup-node@v7.0.0...v7.1.0

Commits
  • 949feb2 Bump eslint from 10.5.0 to 10.11.0 and package.json from 7.0.0 to 7.1.0 (#1635)
  • 7207c4f chore: update dependencies and add license files (#1642)
  • 54337e0 Bump eslint-plugin-n from 18.1.0 to 18.3.0 (#1638)
  • fb54fa8 Bump jest-each from 30.4.1 to 30.5.2 (#1636)
  • 7f84f1d Bump pnpm/action-setup from 6.0.10 to 6.1.0 (#1631)
  • 0c54c7b Bump @​typescript-eslint/parser from 8.62.0 to 8.70.0 (#1615)
  • a829419 Bump @​types/semver from 7.7.1 to 7.8.0 (#1616)
  • 680d1e4 Support absolute paths in node-version-file (#1633)
  • db0fb3a Bump baseline-browser-mapping from 2.10.38 to 2.11.22 (#1629)
  • 94196ee Bump pnpm/action-setup from 6.0.9 to 6.0.10 (#1602)
  • Additional commits viewable in compare view

@dependabot
dependabot Bot requested a review from mthalman as a code owner October 15, 2026 07:56
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 15, 2026
@dependabot
dependabot Bot requested a review from lbussell as a code owner October 15, 2026 07:56
@dependabot dependabot Bot added the github_actions Pull requests that update GitHub Actions code label Oct 15, 2026
@azure-pipelines

azure-pipelines Bot commented Oct 15, 2026

Copy link
Copy Markdown
Azure Pipelines:
Successfully started running 1 pipeline(s).
2 pipeline(s) were filtered out due to trigger conditions.
There may be pipelines that require an authorized user to comment /azp run to run.

@dependabot
Bump the github-actions group across 1 directory with 6 updates
5897191 
Bumps the github-actions group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [actions/upload-artifact](https://github.com/actions/upload-artifact) | `7.0.1` | `7.0.2` |
| [actions/download-artifact](https://github.com/actions/download-artifact) | `8.0.1` | `8.0.2` |
| [dotnet/arcade/.github/workflows/backport-base.yml](https://github.com/dotnet/arcade) | `1249e0a0957c31232d1fd43b5a36cabba1722062` | `a1e2996a5c308f9ad515414927559b43f36f1cbc` |
| [becheran/mlc](https://github.com/becheran/mlc) | `1.2.0` | `1.2.2` |
| [dotnet/arcade/.github/workflows/inter-branch-merge-base.yml](https://github.com/dotnet/arcade) | `1249e0a0957c31232d1fd43b5a36cabba1722062` | `a1e2996a5c308f9ad515414927559b43f36f1cbc` |
| [actions/setup-node](https://github.com/actions/setup-node) | `7.0.0` | `7.1.0` |



Updates `actions/upload-artifact` from 7.0.1 to 7.0.2
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@043fb46...cf430e0)

Updates `actions/download-artifact` from 8.0.1 to 8.0.2
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](actions/download-artifact@3e5f45b...9000827)

Updates `dotnet/arcade/.github/workflows/backport-base.yml` from 1249e0a0957c31232d1fd43b5a36cabba1722062 to a1e2996a5c308f9ad515414927559b43f36f1cbc
- [Commits](dotnet/arcade@1249e0a...a1e2996)

Updates `becheran/mlc` from 1.2.0 to 1.2.2
- [Release notes](https://github.com/becheran/mlc/releases)
- [Changelog](https://github.com/becheran/mlc/blob/master/CHANGELOG.md)
- [Commits](becheran/mlc@7ec2482...b0d0d35)

Updates `dotnet/arcade/.github/workflows/inter-branch-merge-base.yml` from 1249e0a0957c31232d1fd43b5a36cabba1722062 to a1e2996a5c308f9ad515414927559b43f36f1cbc
- [Commits](dotnet/arcade@1249e0a...a1e2996)

Updates `actions/setup-node` from 7.0.0 to 7.1.0
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@8207627...949feb2)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: 8.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: actions/setup-node
  dependency-version: 7.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: actions/upload-artifact
  dependency-version: 7.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: becheran/mlc
  dependency-version: 1.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: dotnet/arcade/.github/workflows/backport-base.yml
  dependency-version: 1c4a1644edd3811541f70371cd9494058ba29235
  dependency-type: direct:production
  dependency-group: github-actions
- dependency-name: dotnet/arcade/.github/workflows/inter-branch-merge-base.yml
  dependency-version: 1c4a1644edd3811541f70371cd9494058ba29235
  dependency-type: direct:production
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/github-actions-fa493f4411 branch from 6bce4c3 to 5897191 Compare October 22, 2026 07:56
@mthalman
mthalman merged commit a007f46 into main Oct 28, 2026
15 checks passed
@mthalman
mthalman deleted the dependabot/github_actions/github-actions-fa493f4411 branch October 28, 2026 13:43
@dotnet-maestro dotnet-maestro Bot mentioned this pull request Oct 30, 2026
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@mthalman mthalman mthalman approved these changes
@lbussell lbussell Awaiting requested review from lbussell lbussell is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@mthalman