chore: bump the actions group across 1 directory with 7 updates by dependabot[bot] · Pull Request #47 · burnt-labs/github-workflows

dependabot · 2026-09-26T02:59:04Z

Bumps the actions group with 7 updates in the / directory:

Package	From	To
burnt-labs/github-workflows/.github/workflows/required-quality.yml	`3332fc8e0049b837e851778cb1fb2be1f24acb1a`	`77f180ebd9f1d11cbaaf135e24f769b98c6d3601`
burnt-labs/github-workflows/.github/workflows/cloudflare-version.yml	`3332fc8e0049b837e851778cb1fb2be1f24acb1a`	`77f180ebd9f1d11cbaaf135e24f769b98c6d3601`
cloudflare/wrangler-action	`4.0.0`	`4.1.2`
changesets/action	`1.9.0`	`2.1.2`
burnt-labs/github-workflows/.github/workflows/npm-publish.yml	`3332fc8e0049b837e851778cb1fb2be1f24acb1a`	`77f180ebd9f1d11cbaaf135e24f769b98c6d3601`
docker/setup-buildx-action	`4.2.0`	`4.4.1`
docker/build-push-action	`7.3.0`	`7.4.0`

Updates burnt-labs/github-workflows/.github/workflows/required-quality.yml from 3332fc8 to 77f180e

Commits

77f180e Merge pull request #46 from burnt-labs/work/burntbot/phala-public-url-2026092...
01ce81b Refuse to create the release CVM
081e88f Point flow callers at the pin-advance revision
See full diff in compare view

Updates burnt-labs/github-workflows/.github/workflows/cloudflare-version.yml from 3332fc8 to 77f180e

Commits

77f180e Merge pull request #46 from burnt-labs/work/burntbot/phala-public-url-2026092...
01ce81b Refuse to create the release CVM
081e88f Point flow callers at the pin-advance revision
See full diff in compare view

Updates cloudflare/wrangler-action from 4.0.0 to 4.1.2

Release notes

Sourced from cloudflare/wrangler-action's releases.

v4.1.2

Patch Changes

#453 876f5b5 Thanks @ericclemmons! - Create GitHub releases only after their compiled action tags are ready so immutable releases do not block publishing.

v4.1.1

[!WARNING] This release is broken due to a publishing issue and will fail when used in a workflow. Please update to v4.1.2 or v4. See #454 for details.

Patch Changes

#451 429a99d Thanks @podonnell-dev! - Pin Workers Preview examples and integration tests to Wrangler 4.136.3, which includes the Worker name in Preview artifacts.

v4.1.0

[!WARNING] This release is broken due to a publishing issue and will fail when used in a workflow. Please update to v4.1.2 or v4. See #454 for details.

Minor Changes

#450 9500699 Thanks @podonnell-dev! - Add support for Workers Previews, including Preview artifact parsing, Preview outputs, GitHub Deployments, and job summaries for wrangler preview.

Patch Changes

#418 789ac84 Thanks @vliggio! - Surface wrangler error messages in the action step output instead of showing only a generic failure message.

Changelog

Sourced from cloudflare/wrangler-action's changelog.

Changelog

4.1.3

Patch Changes

#456 d3cfe74 Thanks @podonnell-dev! - Document Wrangler 4.136.3 as the minimum version required for Workers Previews.

4.1.2

Patch Changes

#453 876f5b5 Thanks @ericclemmons! - Create GitHub releases only after their compiled action tags are ready so immutable releases do not block publishing.

4.1.1

Patch Changes

#451 429a99d Thanks @podonnell-dev! - Pin Workers Preview examples and integration tests to Wrangler 4.136.3, which includes the Worker name in Preview artifacts.

4.1.0

Minor Changes

#450 9500699 Thanks @podonnell-dev! - Add support for Workers Previews, including Preview artifact parsing, Preview outputs, GitHub Deployments, and job summaries for wrangler preview.

Patch Changes

#418 789ac84 Thanks @vliggio! - Surface wrangler error messages in the action step output instead of showing only a generic failure message.

4.0.0

Major Changes

#412 1029e90 Thanks @ericclemmons! - Update default Wrangler version to v4 (latest). The action now installs Wrangler v4 by default when no wranglerVersion input is specified. Users can still pin to v3 by setting wranglerVersion: "3.90.0" explicitly.

3.15.0

Minor Changes

#426 febbda6 Thanks @WillTaylorDev! - Support version ranges and tags in wranglerVersion input. You can now set wranglerVersion to values like 4, ^4.0.0, 4.x, or latest instead of only exact versions like 4.81.0.

3.14.1

Patch Changes

#358 cd6314a Thanks @penalosa! - Use secret bulk instead of deprecated secret:bulk command

3.14.0

... (truncated)

Commits

2585336 Automatic compilation
d4d1b2d Merge pull request #455 from cloudflare/changeset-release/main
1e45d72 Version Packages
194026b Merge pull request #453 from cloudflare/codex/fix-immutable-releases
5fa9855 docs: Explain immutable release sequencing
d7fd981 refactor: Keep release publishing retryable
ecefb49 fix: Verify floating tag commit
7e340a9 refactor: Let Changesets create immutable releases
876f5b5 fix: Publish compiled tags before immutable releases
4e88846 Merge pull request #452 from cloudflare/changeset-release/main
Additional commits viewable in compare view

Updates changesets/action from 1.9.0 to 2.1.2

Release notes

Sourced from changesets/action's releases.

v2.1.2

Patch Changes

#735 8833883 Thanks @bluwy! - Handle error when pushing git tags with the git CLI

#724 36f529f Thanks @bluwy! - Improve log messages

#724 36f529f Thanks @bluwy! - Fix root action double error logs

#729 ca85897 Thanks @bluwy! - Always switch and reset branch when generating version commits, similar to if push-with-git-cli is enabled

v2.1.1

Patch Changes

#721 da1ea29 Thanks @KEBABSELLER6! - Fixed typo in renamed inputs from v1 to v2

v2.1.0

Minor Changes

#718 3b7c71c Thanks @bluwy! - Add a cwd input to the root action, /select-mode, /version, /pack, and /publish sub-actions to set the current working directory to execute Changesets in. This input existed in v1 but was incorrectly removed.

Patch Changes

#716 6f58ba3 Thanks @bluwy! - Update pr-status message to link to the new faq page

v2.0.0

Major Changes

#692 cb3f011 Thanks @Andarist! - Release commits and tags are now pushed using the GitHub API by default.

Replace the commit-mode input with the boolean push-with-git-cli input. Set push-with-git-cli: true to continue using the Git CLI.

Regardless of the push mode, custom GitHub tokens must be passed explicitly through the github-token input. The GITHUB_TOKEN environment variable and credentials configured by actions/checkout or embedded in remote URLs are not substitutes for this input. When the Git CLI is enabled, github-token takes precedence over those repository credentials.

#680 ca57073 Thanks @bluwy! - Add a new push-git-tags option that complements create-github-releases to control specifically if git tags should be created but not GitHub releases.

If create-github-releases was previously set to false, which also indirectly disabled git tag creation, git tags will now be created instead by default. If this is not desired, set push-git-tags to false explicitly.

#657 4f718b5 Thanks @Andarist! - Removed compatibility support for old Changesets v1.

#681 7359107 Thanks @bluwy! - Rename the root action inputs and outputs to better match the sub-actions' conventions.

Inputs:

version -> version-script

publish -> publish-script

commit -> commit-message

title -> pr-title

branch -> pr-base-branch

... (truncated)

Changelog

Sourced from changesets/action's changelog.

@changesets/action

2.1.2

Patch Changes

#735 8833883 Thanks @bluwy! - Handle error when pushing git tags with the git CLI

#724 36f529f Thanks @bluwy! - Improve log messages

#724 36f529f Thanks @bluwy! - Fix root action double error logs

#729 ca85897 Thanks @bluwy! - Always switch and reset branch when generating version commits, similar to if push-with-git-cli is enabled

2.1.1

Patch Changes

#721 da1ea29 Thanks @KEBABSELLER6! - Fixed typo in renamed inputs from v1 to v2

2.1.0

Minor Changes

#718 3b7c71c Thanks @bluwy! - Add a cwd input to the root action, /select-mode, /version, /pack, and /publish sub-actions to set the current working directory to execute Changesets in. This input existed in v1 but was incorrectly removed.

Patch Changes

#716 6f58ba3 Thanks @bluwy! - Update pr-status message to link to the new faq page

2.0.0

Major Changes

#692 cb3f011 Thanks @Andarist! - Release commits and tags are now pushed using the GitHub API by default.

Replace the commit-mode input with the boolean push-with-git-cli input. Set push-with-git-cli: true to continue using the Git CLI.

Regardless of the push mode, custom GitHub tokens must be passed explicitly through the github-token input. The GITHUB_TOKEN environment variable and credentials configured by actions/checkout or embedded in remote URLs are not substitutes for this input. When the Git CLI is enabled, github-token takes precedence over those repository credentials.

#680 ca57073 Thanks @bluwy! - Add a new push-git-tags option that complements create-github-releases to control specifically if git tags should be created but not GitHub releases.

If create-github-releases was previously set to false, which also indirectly disabled git tag creation, git tags will now be created instead by default. If this is not desired, set push-git-tags to false explicitly.

#657 4f718b5 Thanks @Andarist! - Removed compatibility support for old Changesets v1.

#681 7359107 Thanks @bluwy! - Rename the root action inputs and outputs to better match the sub-actions' conventions.

Inputs:

... (truncated)

Commits

ae32849 v2.1.2
0138f45 Version Packages (#726)
8833883 Handle error when pushing git tags with the git CLI (#735)
e08fde7 Improve log messages (#730)
371fd77 Bump human-id in the production-dependencies group across 1 directory (#732)
85efcaf Bump actions/checkout in the github-actions group across 1 directory (#734)
5bb9d5c Bump the development-dependencies group across 1 directory with 7 updates (#733)
ca85897 Always prepare branch for version (#729)
36f529f Fix root action double error logs (#724)
d7669c8 Version Packages (#722)
Additional commits viewable in compare view

Updates burnt-labs/github-workflows/.github/workflows/npm-publish.yml from 3332fc8 to 77f180e

Commits

77f180e Merge pull request #46 from burnt-labs/work/burntbot/phala-public-url-2026092...
01ce81b Refuse to create the release CVM
081e88f Point flow callers at the pin-advance revision
See full diff in compare view

Updates docker/setup-buildx-action from 4.2.0 to 4.4.1

Release notes

Sourced from docker/setup-buildx-action's releases.

v4.4.1

Skip BuildKit image pre-pulls for explicit endpoints by @crazy-max in docker/setup-buildx-action#624

Full Changelog: docker/setup-buildx-action@v4.4.0...v4.4.1

v4.4.0

Use official Buildx releases for cloud driver by @crazy-max in docker/setup-buildx-action#606

Pull BuildKit image before builder creation by @crazy-max in docker/setup-buildx-action#609

Use shared error helpers for Buildx and Docker commands by @crazy-max in docker/setup-buildx-action#620

Bump @docker/actions-toolkit from 0.95.0 to 0.100.0 in docker/setup-buildx-action#610 docker/setup-buildx-action#618 docker/setup-buildx-action#619

Bump @humanfs/node from 0.16.7 to 0.16.8 in docker/setup-buildx-action#614

Bump js-yaml from 5.3.0 to 5.4.2 in docker/setup-buildx-action#608 docker/setup-buildx-action#617

Bump postcss-selector-parser from 7.1.1 to 7.1.5 in docker/setup-buildx-action#611

Full Changelog: docker/setup-buildx-action@v4.3.0...v4.4.0

v4.3.0

Bump @docker/actions-toolkit from 0.92.0 to 0.95.0 in docker/setup-buildx-action#595

Bump brace-expansion from 1.1.13 to 1.1.18 in docker/setup-buildx-action#600

Bump js-yaml from 5.2.0 to 5.3.0 in docker/setup-buildx-action#585

Bump postcss from 8.5.10 to 8.5.25 in docker/setup-buildx-action#598

Bump undici from 6.27.0 to 6.28.0 in docker/setup-buildx-action#601

Full Changelog: docker/setup-buildx-action@v4.2.0...v4.3.0

Commits

f87e599 Merge pull request #624 from crazy-max/skip-pull-with-endpoint
e700274 chore: update generated content
3061c91 skip BuildKit image pre-pulls for explicit endpoints
594f3bf Merge pull request #609 from crazy-max/pull-buildkit-image-before-create
bd6e702 chore: update generated content
6268c9d pull BuildKit image before builder creation
e823525 Merge pull request #621 from docker/dependabot/github_actions/codeql-actions-...
533ed8e build(deps): bump the codeql-actions group with 2 updates
bedaf13 Merge pull request #620 from crazy-max/shared-error-helpers
d5079fb chore: update generated content
Additional commits viewable in compare view

Updates docker/build-push-action from 7.3.0 to 7.4.0

Release notes

Sourced from docker/build-push-action's releases.

v7.4.0

Use the shared error helper for Buildx commands by @crazy-max in docker/build-push-action#1620

Prevent workflow command injection in metadata logs by @crazy-max in docker/build-push-action#1617

Bump @docker/actions-toolkit from 0.92.0 to 0.100.0 in docker/build-push-action#1614 docker/build-push-action#1618 docker/build-push-action#1621

Bump @humanfs/node from 0.16.7 to 0.16.8 in docker/build-push-action#1609

Bump brace-expansion from 1.1.13 to 1.1.18 in docker/build-push-action#1592

Bump csv-parse from 7.0.0 to 7.0.2 in docker/build-push-action#1613

Bump js-yaml from 4.3.0 to 4.3.2 in docker/build-push-action#1605 docker/build-push-action#1615

Bump nanoid from 3.3.16 to 3.3.18 in docker/build-push-action#1611

Bump postcss from 8.5.10 to 8.5.25 in docker/build-push-action#1590

Bump postcss-selector-parser from 7.1.1 to 7.1.5 in docker/build-push-action#1606

Bump sigstore from 4.1.0 to 4.1.1 in docker/build-push-action#1577

Bump undici from 6.27.0 to 6.28.0 in docker/build-push-action#1594

Full Changelog: docker/build-push-action@v7.3.0...v7.4.0

Commits

c3c9e26 Merge pull request #1621 from docker/dependabot/npm_and_yarn/docker/actions-t...
459b674 [dependabot skip] chore: update generated content
4dedcb2 chore(deps): Bump @docker/actions-toolkit from 0.99.0 to 0.100.0
379bf63 Merge pull request #1620 from crazy-max/buildx-error-message
9877975 chore: update generated content
7ed0556 use the shared Buildx error summary helper
91670ba Merge pull request #1618 from docker/dependabot/npm_and_yarn/docker/actions-t...
80dbc86 [dependabot skip] chore: update generated content
50cac3a chore(deps): Bump @docker/actions-toolkit from 0.98.0 to 0.99.0
03b4d6c Merge pull request #1617 from crazy-max/fix-metadata-workflow-commands
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the actions group with 7 updates in the / directory: | Package | From | To | | --- | --- | --- | | [burnt-labs/github-workflows/.github/workflows/required-quality.yml](https://github.com/burnt-labs/github-workflows) | `3332fc8e0049b837e851778cb1fb2be1f24acb1a` | `77f180ebd9f1d11cbaaf135e24f769b98c6d3601` | | [burnt-labs/github-workflows/.github/workflows/cloudflare-version.yml](https://github.com/burnt-labs/github-workflows) | `3332fc8e0049b837e851778cb1fb2be1f24acb1a` | `77f180ebd9f1d11cbaaf135e24f769b98c6d3601` | | [cloudflare/wrangler-action](https://github.com/cloudflare/wrangler-action) | `4.0.0` | `4.1.2` | | [changesets/action](https://github.com/changesets/action) | `1.9.0` | `2.1.2` | | [burnt-labs/github-workflows/.github/workflows/npm-publish.yml](https://github.com/burnt-labs/github-workflows) | `3332fc8e0049b837e851778cb1fb2be1f24acb1a` | `77f180ebd9f1d11cbaaf135e24f769b98c6d3601` | | [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `4.2.0` | `4.4.1` | | [docker/build-push-action](https://github.com/docker/build-push-action) | `7.3.0` | `7.4.0` | Updates `burnt-labs/github-workflows/.github/workflows/required-quality.yml` from 3332fc8 to 77f180e - [Release notes](https://github.com/burnt-labs/github-workflows/releases) - [Commits](3332fc8...77f180e) Updates `burnt-labs/github-workflows/.github/workflows/cloudflare-version.yml` from 3332fc8 to 77f180e - [Release notes](https://github.com/burnt-labs/github-workflows/releases) - [Commits](3332fc8...77f180e) Updates `cloudflare/wrangler-action` from 4.0.0 to 4.1.2 - [Release notes](https://github.com/cloudflare/wrangler-action/releases) - [Changelog](https://github.com/cloudflare/wrangler-action/blob/main/CHANGELOG.md) - [Commits](cloudflare/wrangler-action@ebbaa15...2585336) Updates `changesets/action` from 1.9.0 to 2.1.2 - [Release notes](https://github.com/changesets/action/releases) - [Changelog](https://github.com/changesets/action/blob/main/CHANGELOG.md) - [Commits](changesets/action@a45c4d5...ae32849) Updates `burnt-labs/github-workflows/.github/workflows/npm-publish.yml` from 3332fc8 to 77f180e - [Release notes](https://github.com/burnt-labs/github-workflows/releases) - [Commits](3332fc8...77f180e) Updates `docker/setup-buildx-action` from 4.2.0 to 4.4.1 - [Release notes](https://github.com/docker/setup-buildx-action/releases) - [Commits](docker/setup-buildx-action@bb05f3f...f87e599) Updates `docker/build-push-action` from 7.3.0 to 7.4.0 - [Release notes](https://github.com/docker/build-push-action/releases) - [Commits](docker/build-push-action@53b7df9...c3c9e26) --- updated-dependencies: - dependency-name: burnt-labs/github-workflows/.github/workflows/required-quality.yml dependency-version: 77f180e dependency-type: direct:production dependency-group: actions - dependency-name: burnt-labs/github-workflows/.github/workflows/cloudflare-version.yml dependency-version: 77f180e dependency-type: direct:production dependency-group: actions - dependency-name: cloudflare/wrangler-action dependency-version: 4.1.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: changesets/action dependency-version: 2.1.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: burnt-labs/github-workflows/.github/workflows/npm-publish.yml dependency-version: 77f180e dependency-type: direct:production dependency-group: actions - dependency-name: docker/setup-buildx-action dependency-version: 4.4.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: docker/build-push-action dependency-version: 7.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions ... Signed-off-by: dependabot[bot] <support@github.com>

Copilot

Copilot review overview

🟡 Changes recommended

Update the Changesets action invocation for the v2 input interface.

Review effort: Lite
Findings: 1

Open (1)

Update changesets/action inputs for v2 compatibility · New

What changed in this PR

Updates pinned GitHub Actions and reusable workflow revisions across deployment, publishing, and quality workflows.

Changes:

Advances internal workflow references.
Updates Wrangler, Changesets, and Docker actions.
Requires migration of changesets/action inputs to the v2 interface.

File	Description
`.github/workflows/phala-deploy.yml`	Updates workflow and Docker action pins
`.github/workflows/npm-release.yml`	Updates reusable workflow pins
`.github/workflows/npm-pr.yml`	Updates quality workflow pin
`.github/workflows/npm-main.yml`	Updates reusable workflow pins
`.github/workflows/npm-changesets.yml`	Updates quality and Changesets action pins; v2 input migration required
`.github/workflows/cloudflare-version.yml`	Updates Wrangler action pins
`.github/workflows/cloudflare-release.yml`	Updates reusable workflow pins
`.github/workflows/cloudflare-pr.yml`	Updates reusable workflow pins
`.github/workflows/cloudflare-main.yml`	Updates reusable workflow pins

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

+        uses: changesets/action@ae32849d5ba541f9ae29e40e22a623bc13562f51 # v2.1.2
        with:
          title: ${{ inputs.pr-title }}
          commit: ${{ inputs.pr-commit }}


dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Sep 26, 2026

dependabot Bot requested review from a team and a lite review from Copilot September 26, 2026 02:59

Copilot started reviewing on behalf of burnt-labs September 26, 2026 02:59 View session

Copilot AI reviewed Sep 26, 2026

View reviewed changes

Comment thread .github/workflows/npm-changesets.yml

Comment on lines +239 to 242

uses: changesets/action@ae32849d5ba541f9ae29e40e22a623bc13562f51 # v2.1.2

with:

title: ${{ inputs.pr-title }}

commit: ${{ inputs.pr-commit }}

Navigation Menu

chore: bump the actions group across 1 directory with 7 updates - #47

chore: bump the actions group across 1 directory with 7 updates#47
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions-832a919b83

dependabot Bot commented on behalf of github Sep 26, 2026

Uh oh!

Copilot AI left a comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Sep 26, 2026

v4.1.2

Patch Changes

v4.1.1

Patch Changes

v4.1.0

Minor Changes

Patch Changes

Changelog

4.1.3

Patch Changes

4.1.2

Patch Changes

4.1.1

Patch Changes

4.1.0

Minor Changes

Patch Changes

4.0.0

Major Changes

3.15.0

Minor Changes

3.14.1

Patch Changes

3.14.0

v2.1.2

Patch Changes

v2.1.1

Patch Changes

v2.1.0

Minor Changes

Patch Changes

v2.0.0

Major Changes

@​changesets/action

2.1.2

Patch Changes

2.1.1

Patch Changes

2.1.0

Minor Changes

Patch Changes

2.0.0

Major Changes

v4.4.1

v4.4.0

v4.3.0

v7.4.0

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Copilot review overview

🟡 Changes recommended

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

`@changesets/action`