chore(deps): bump the dependencies group with 6 updates by dependabot[bot] · Pull Request #474 · github-community-projects/cleanowners

dependabot · 2026-10-14T16:05:35Z

Bumps the dependencies group with 6 updates:

Package	From	To
github-community-projects/ospo-reusable-workflows/.github/workflows/auto-labeler.yaml	`2.1.0`	`2.2.0`
step-security/harden-runner	`2.21.1`	`2.22.1`
github-community-projects/contributors	`2.0.20`	`2.0.21`
github-community-projects/ospo-reusable-workflows/.github/workflows/pr-title.yaml	`2.1.0`	`2.2.0`
github-community-projects/ospo-reusable-workflows/.github/workflows/release.yaml	`2.1.0`	`2.2.0`
actions/upload-artifact	`7.0.1`	`7.0.2`

Updates github-community-projects/ospo-reusable-workflows/.github/workflows/auto-labeler.yaml from 2.1.0 to 2.2.0

Release notes

Sourced from github-community-projects/ospo-reusable-workflows/.github/workflows/auto-labeler.yaml's releases.

v2.2.0

Changelog

🚀 Features

feat(release): list every pull request on a repository's first release @jmeridth (#206)

🧰 Maintenance

chore(deps): bump mikefarah/yq from 4.53.6 to 4.54.1 in the dependencies group @dependabot[bot] (#207)

See details of all code changes since previous release

v2.1.1

Changelog

🐛 Bug Fixes

fix(release): check the release tag before creating a draft @jmeridth (#204)

🧰 Maintenance

chore(deps): bump alpine from 3.24.1 to 3.24.2 @dependabot[bot] (#203)

See details of all code changes since previous release

Commits

690dbbe feat(release): list every pull request on a repository's first release (#206)
5dd6bcc chore(deps): bump mikefarah/yq (#207)
038160c fix(release-draft): check the release tag before creating a draft (#204)
967911e chore(deps): bump alpine from 3.24.1 to 3.24.2 (#203)
See full diff in compare view

Updates step-security/harden-runner from 2.21.1 to 2.22.1

Release notes

Sourced from step-security/harden-runner's releases.

v2.22.1

What's Changed

Fixed security rules not initializing on GHES self-hosted runners

Fixed GHES connectivity in block mode by implicitly allowing the GHES hostname

Full Changelog: step-security/harden-runner@v2.22.0...v2.22.1

v2.22.0

What's Changed

Linux ARM64 support for community tier

GHES support for self-hosted VMs (enterprise tier)

MacOS and Windows runner deny list support for block policy (enterprise tier).

Full Changelog: step-security/harden-runner@v2.21.1...v2.22.0

Commits

ccd8616 Merge pull request #704 from h0x0er/jatin/ghes-endp
037ccfd implicitly add ghes endpoint in allowList
e7438c7 Merge pull request #703 from h0x0er/jatin/ghes-codebuild-fixes
afb0b33 fixes for armour rules not getting initialised
351661c Merge pull request #701 from step-security/rc-44
1dc7f2e Merge pull request #702 from h0x0er/jatin/ghes-changes-up
af5ca38 simplified ghes config creation
9a6d710 fix2
74c65ea fix
ceac816 resovled comments
Additional commits viewable in compare view

Updates github-community-projects/contributors from 2.0.20 to 2.0.21

Release notes

Sourced from github-community-projects/contributors's releases.

v2.0.21

Changelog

🐛 Bug Fixes

fix(deps): bump cryptography from 48.0.1 to 50.0.1 @jmeridth (#538)

🧰 Maintenance

chore(deps): bump urllib3 from 2.7.0 to 2.8.0 @dependabot[bot] (#542)

chore(deps): bump the dependencies group with 4 updates @dependabot[bot] (#540)

chore(deps): bump pyjwt from 2.13.0 to 2.15.0 @dependabot[bot] (#543)

chore(deps): bump types-requests from 2.33.0.20260712 to 2.33.0.20260906 @dependabot[bot] (#539)

chore(deps): bump the dependencies group with 4 updates @dependabot[bot] (#536)

chore(deps): bump python from cae66f2 to cad9a2c @dependabot[bot] (#535)

chore(deps): bump pylint from 4.0.7 to 4.0.8 in the dependencies group @dependabot[bot] (#537)

chore(deps): bump github-community-projects/ospo-reusable-workflows/.github/workflows/auto-labeler.yaml from 1.5.1 to 2.0.0 @dependabot[bot] (#532)

chore(deps): bump github-community-projects/ospo-reusable-workflows/.github/workflows/release.yaml from 1.5.1 to 2.0.0 @dependabot[bot] (#531)

chore(deps): bump the dependencies group with 4 updates @dependabot[bot] (#530)

chore(deps): bump github-community-projects/ospo-reusable-workflows/.github/workflows/pr-title.yaml from 1.5.1 to 2.0.0 @dependabot[bot] (#533)

chore(deps): bump python from ce40764 to cae66f2 @dependabot[bot] (#529)

chore(deps): bump the dependencies group with 2 updates @dependabot[bot] (#526)

See details of all code changes since previous release

Commits

6bab24b chore(deps): bump urllib3 from 2.7.0 to 2.8.0 (#542)
af1504e chore(deps): bump the dependencies group with 4 updates (#540)
fcda781 chore(deps): bump pyjwt from 2.13.0 to 2.15.0 (#543)
c52fb75 chore(deps): bump types-requests from 2.33.0.20260712 to 2.33.0.20260906 (#539)
0d1cdc1 fix(deps): bump cryptography from 48.0.1 to 50.0.1 (#538)
93fa827 chore(deps): bump the dependencies group with 4 updates (#536)
eafcfd5 chore(deps): bump python from cae66f2 to cad9a2c (#535)
ab132bd chore(deps): bump pylint from 4.0.7 to 4.0.8 in the dependencies group (#537)
a337449 chore(deps): bump github-community-projects/ospo-reusable-workflows/.github/w...
6f13292 chore(deps): bump github-community-projects/ospo-reusable-workflows/.github/w...
Additional commits viewable in compare view

Updates github-community-projects/ospo-reusable-workflows/.github/workflows/pr-title.yaml from 2.1.0 to 2.2.0

Release notes

Sourced from github-community-projects/ospo-reusable-workflows/.github/workflows/pr-title.yaml's releases.

v2.2.0

Changelog

🚀 Features

feat(release): list every pull request on a repository's first release @jmeridth (#206)

🧰 Maintenance

chore(deps): bump mikefarah/yq from 4.53.6 to 4.54.1 in the dependencies group @dependabot[bot] (#207)

See details of all code changes since previous release

v2.1.1

Changelog

🐛 Bug Fixes

fix(release): check the release tag before creating a draft @jmeridth (#204)

🧰 Maintenance

chore(deps): bump alpine from 3.24.1 to 3.24.2 @dependabot[bot] (#203)

See details of all code changes since previous release

Commits

690dbbe feat(release): list every pull request on a repository's first release (#206)
5dd6bcc chore(deps): bump mikefarah/yq (#207)
038160c fix(release-draft): check the release tag before creating a draft (#204)
967911e chore(deps): bump alpine from 3.24.1 to 3.24.2 (#203)
See full diff in compare view

Updates github-community-projects/ospo-reusable-workflows/.github/workflows/release.yaml from 2.1.0 to 2.2.0

Release notes

Sourced from github-community-projects/ospo-reusable-workflows/.github/workflows/release.yaml's releases.

v2.2.0

Changelog

🚀 Features

feat(release): list every pull request on a repository's first release @jmeridth (#206)

🧰 Maintenance

chore(deps): bump mikefarah/yq from 4.53.6 to 4.54.1 in the dependencies group @dependabot[bot] (#207)

See details of all code changes since previous release

v2.1.1

Changelog

🐛 Bug Fixes

fix(release): check the release tag before creating a draft @jmeridth (#204)

🧰 Maintenance

chore(deps): bump alpine from 3.24.1 to 3.24.2 @dependabot[bot] (#203)

See details of all code changes since previous release

Commits

690dbbe feat(release): list every pull request on a repository's first release (#206)
5dd6bcc chore(deps): bump mikefarah/yq (#207)
038160c fix(release-draft): check the release tag before creating a draft (#204)
967911e chore(deps): bump alpine from 3.24.1 to 3.24.2 (#203)
See full diff in compare view

Updates actions/upload-artifact from 7.0.1 to 7.0.2

Release notes

Sourced from actions/upload-artifact's releases.

v7.0.2

What's Changed

Improves artifact download retries when the service returns HTTP 429 (rate limiting), including honoring valid Retry-After headers.

Updates @actions/artifact to v6.3.1.

New Contributors

@tunc-d made their first contribution in actions/upload-artifact#821

Full Changelog: actions/upload-artifact@v7.0.1...v7.0.2

Commits

cf430e0 Merge pull request #822 from actions/tunc-d-prepare-upload-v7-0-2
c2acded chore: prepare v7.0.2 release
4687c1b Merge pull request #821 from actions/tunc-d-upload-artifact-package-bump
8cbe1be Bump @actions/artifact to 6.3.1
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dependencies group with 6 updates: | Package | From | To | | --- | --- | --- | | [github-community-projects/ospo-reusable-workflows/.github/workflows/auto-labeler.yaml](https://github.com/github-community-projects/ospo-reusable-workflows) | `2.1.0` | `2.2.0` | | [step-security/harden-runner](https://github.com/step-security/harden-runner) | `2.21.1` | `2.22.1` | | [github-community-projects/contributors](https://github.com/github-community-projects/contributors) | `2.0.20` | `2.0.21` | | [github-community-projects/ospo-reusable-workflows/.github/workflows/pr-title.yaml](https://github.com/github-community-projects/ospo-reusable-workflows) | `2.1.0` | `2.2.0` | | [github-community-projects/ospo-reusable-workflows/.github/workflows/release.yaml](https://github.com/github-community-projects/ospo-reusable-workflows) | `2.1.0` | `2.2.0` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `7.0.1` | `7.0.2` | Updates `github-community-projects/ospo-reusable-workflows/.github/workflows/auto-labeler.yaml` from 2.1.0 to 2.2.0 - [Release notes](https://github.com/github-community-projects/ospo-reusable-workflows/releases) - [Changelog](https://github.com/github-community-projects/ospo-reusable-workflows/blob/main/docs/release.md) - [Commits](github-community-projects/ospo-reusable-workflows@a48c75f...690dbbe) Updates `step-security/harden-runner` from 2.21.1 to 2.22.1 - [Release notes](https://github.com/step-security/harden-runner/releases) - [Commits](step-security/harden-runner@e14015d...ccd8616) Updates `github-community-projects/contributors` from 2.0.20 to 2.0.21 - [Release notes](https://github.com/github-community-projects/contributors/releases) - [Commits](github-community-projects/contributors@64e0cec...6bab24b) Updates `github-community-projects/ospo-reusable-workflows/.github/workflows/pr-title.yaml` from 2.1.0 to 2.2.0 - [Release notes](https://github.com/github-community-projects/ospo-reusable-workflows/releases) - [Changelog](https://github.com/github-community-projects/ospo-reusable-workflows/blob/main/docs/release.md) - [Commits](github-community-projects/ospo-reusable-workflows@a48c75f...690dbbe) Updates `github-community-projects/ospo-reusable-workflows/.github/workflows/release.yaml` from 2.1.0 to 2.2.0 - [Release notes](https://github.com/github-community-projects/ospo-reusable-workflows/releases) - [Changelog](https://github.com/github-community-projects/ospo-reusable-workflows/blob/main/docs/release.md) - [Commits](github-community-projects/ospo-reusable-workflows@a48c75f...690dbbe) Updates `actions/upload-artifact` from 7.0.1 to 7.0.2 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@043fb46...cf430e0) --- updated-dependencies: - dependency-name: github-community-projects/ospo-reusable-workflows/.github/workflows/auto-labeler.yaml dependency-version: 2.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: step-security/harden-runner dependency-version: 2.22.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: github-community-projects/contributors dependency-version: 2.0.21 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: github-community-projects/ospo-reusable-workflows/.github/workflows/pr-title.yaml dependency-version: 2.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: github-community-projects/ospo-reusable-workflows/.github/workflows/release.yaml dependency-version: 2.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: actions/upload-artifact dependency-version: 7.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot requested review from jmeridth and zkoppert as code owners October 14, 2026 16:05

dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Oct 14, 2026

github-actions Bot added the maintenance label Oct 14, 2026

jmeridth approved these changes Oct 14, 2026

View reviewed changes

jmeridth merged commit 9f9123c into main Oct 14, 2026
39 checks passed

jmeridth deleted the dependabot/github_actions/dependencies-7a8788c14e branch October 14, 2026 17:34

Navigation Menu

Repository navigation

chore(deps): bump the dependencies group with 6 updates - #474

chore(deps): bump the dependencies group with 6 updates#474
jmeridth merged 1 commit into
mainfrom
dependabot/github_actions/dependencies-7a8788c14e

dependabot Bot commented on behalf of github Oct 14, 2026

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Oct 14, 2026

v2.2.0

Changelog

🚀 Features

🧰 Maintenance

v2.1.1

Changelog

🐛 Bug Fixes

🧰 Maintenance

v2.22.1

What's Changed

v2.22.0

What's Changed

v2.0.21

Changelog

🐛 Bug Fixes

🧰 Maintenance

v2.2.0

Changelog

🚀 Features

🧰 Maintenance

v2.1.1

Changelog

🐛 Bug Fixes

🧰 Maintenance

v2.2.0

Changelog

🚀 Features

🧰 Maintenance

v2.1.1

Changelog

🐛 Bug Fixes

🧰 Maintenance

v7.0.2

What's Changed

New Contributors

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant