Skip to content

Bump the github-actions-minor-patch group across 1 directory with 3 updates#716

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-minor-patch-78e538a18a
Open

Bump the github-actions-minor-patch group across 1 directory with 3 updates#716
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-minor-patch-78e538a18a

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 15, 2026

Bumps the github-actions-minor-patch group with 3 updates in the / directory: github/gh-aw, actions/upload-artifact and actions/download-artifact.

Updates github/gh-aw from 0.51.6 to 0.77.5

Release notes

Sourced from github/gh-aw's releases.

v0.77.5

🌟 Release Highlights

This release tightens the daily effective-workflow guardrail with smarter configuration gating, structured diagnostics, and a bug fix for artifact client setup — plus a project-level UTC offset feature for more accurate timestamps across timezones.

✨ What's New

  • Project UTC offset for timestamps (#36142) — Rendered timestamps and expiration messages now respect a configured project UTC offset, so deadlines and expiry notices display correctly for teams in any timezone.
  • Structured diagnostics in daily ET guardrail (#36164) — The daily effective-workflow guardrail now emits structured diagnostic output, making it easier to understand and debug guardrail evaluation results.
  • close_discussion safe output in Daily Regulatory workflow (#36155) — The Daily Regulatory workflow can now close discussions as part of its safe-output actions, completing the full discussion lifecycle.
  • New fmterrorfnoverbs linter (#36146) — A new Go linter enforces correct verb usage in fmt.Errorf calls, catching a common class of formatting mistakes at lint time.

🐛 Bug Fixes & Improvements

  • Gate ET guardrail on explicit configuration (#36179) — The daily effective-workflow guardrail and its artifact client setup are now only activated when explicitly configured, preventing unnecessary overhead in workflows that do not use this feature.
  • Fix @actions/artifact install for ET guardrail (#36153) — Resolved a missing dependency that caused failures when the daily-effective-workflow guardrail was enabled.
  • Deploy command refactor (#36144) — Deploy command orchestration in pkg/cli was refactored to satisfy largefunc linter limits, improving maintainability without changing behavior.
  • Parser test coverage (#36149) — Frontmatter extraction tests migrated to testify with additional coverage, strengthening the parser test suite.

For complete details, see CHANGELOG.

Generated by 🚀 Release · sonnet46 659.7K


What's Changed

Full Changelog: github/gh-aw@v0.77.4...v0.77.5

v0.77.4

🌟 Release Highlights

This release delivers Anthropic WIF authentication, a new copilot-sdk engine, expanded aw.yml manifest capabilities, and a battery of reliability fixes across safe-outputs, threat-detection, and workflow compilation.

✨ What's New

... (truncated)

Commits
  • f990bbb Gate daily ET guardrail and artifact client setup on explicit configuration (...
  • ff60ee5 Weekly blog post – 2026-06-01 (#36178)
  • 4f17e34 Add structured diagnostics to the daily workflow ET guardrail (#36164)
  • 65d045e [blog] Agent of the Day – 2026-06-01 (#36158)
  • 7b11cb6 Enable close_discussion safe output in Daily Regulatory workflow (#36155)
  • faa33b8 test(parser): migrate frontmatter_extraction_test.go to testify + add missing...
  • 73ad414 Refactor deploy command orchestration to satisfy largefunc limits in `pkg/cli...
  • e270a5c [linter-miner] feat(linters): add fmterrorfnoverbs linter (#36146)
  • 9f10a06 Fix: install @​actions/artifact when daily-effective-workflow guardrail is con...
  • ecca252 Add project UTC offset support for rendered timestamps and expiration message...
  • Additional commits viewable in compare view

Updates actions/upload-artifact from 7.0.0 to 7.0.1

Release notes

Sourced from actions/upload-artifact's releases.

v7.0.1

What's Changed

Full Changelog: actions/upload-artifact@v7...v7.0.1

Commits
  • 043fb46 Merge pull request #797 from actions/yacaovsnc/update-dependency
  • 634250c Include changes in typespec/ts-http-runtime 0.3.5
  • e454baa Readme: bump all the example versions to v7 (#796)
  • 74fad66 Update the readme with direct upload details (#795)
  • See full diff in compare view

Updates actions/download-artifact from 8.0.0 to 8.0.1

Release notes

Sourced from actions/download-artifact's releases.

v8.0.1

What's Changed

Full Changelog: actions/download-artifact@v8...v8.0.1

Commits

@dependabot dependabot Bot added debt Technical debt or repo cleanup dependencies Pull requests that update a dependency file no-changelog Exclude from release notes labels Apr 15, 2026
@dependabot dependabot Bot force-pushed the dependabot/github_actions/github-actions-minor-patch-78e538a18a branch 2 times, most recently from c07afaf to 32959fd Compare April 29, 2026 14:17
@dependabot dependabot Bot force-pushed the dependabot/github_actions/github-actions-minor-patch-78e538a18a branch from 32959fd to 531c097 Compare May 6, 2026 14:21
@dependabot dependabot Bot force-pushed the dependabot/github_actions/github-actions-minor-patch-78e538a18a branch from 531c097 to bbfa09a Compare May 13, 2026 14:38
…pdates

Bumps the github-actions-minor-patch group with 3 updates in the / directory: [github/gh-aw](https://github.com/github/gh-aw), [actions/upload-artifact](https://github.com/actions/upload-artifact) and [actions/download-artifact](https://github.com/actions/download-artifact).


Updates `github/gh-aw` from 0.51.6 to 0.77.5
- [Release notes](https://github.com/github/gh-aw/releases)
- [Changelog](https://github.com/github/gh-aw/blob/main/CHANGELOG.md)
- [Commits](github/gh-aw@33cd6c7...f990bbb)

Updates `actions/upload-artifact` from 7.0.0 to 7.0.1
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@bbbca2d...043fb46)

Updates `actions/download-artifact` from 8.0.0 to 8.0.1
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](actions/download-artifact@70fc10c...3e5f45b)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: 8.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions-minor-patch
- dependency-name: actions/upload-artifact
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions-minor-patch
- dependency-name: github/gh-aw
  dependency-version: 0.68.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/github_actions/github-actions-minor-patch-78e538a18a branch from bbfa09a to b50f4a0 Compare June 4, 2026 02:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

debt Technical debt or repo cleanup dependencies Pull requests that update a dependency file no-changelog Exclude from release notes

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants