Skip to content

Bump the github_actions group across 1 directory with 4 updates - #1452

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github_actions-67f17a1e0e
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github_actions-67f17a1e0e

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 9, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the github_actions group with 4 updates in the / directory: aws-actions/amazon-ecs-render-task-definition, actions/labeler, hadolint/hadolint-action and sonarsource/sonarqube-scan-action.

Updates aws-actions/amazon-ecs-render-task-definition from 1.9.0 to 1.9.1

Release notes

Sourced from aws-actions/amazon-ecs-render-task-definition's releases.

v1.9.1

See the changelog for details about the changes included in this release.

Changelog

Sourced from aws-actions/amazon-ecs-render-task-definition's changelog.

1.9.1 (2026-10-05)

Bug Fixes

Commits
  • 8d79160 chore(release): 1.9.1
  • 64880be fix: parse task definition file as JSON (#507)
  • eefb9da chore: Bump @​aws-sdk/client-ecs from 3.1136.0 to 3.1141.0 (#505)
  • 96e1958 chore: Bump undici from 6.28.0 to 6.29.0 (#504)
  • 1fb8eee chore: Bump @​aws-sdk/client-ecs from 3.1106.0 to 3.1136.0 (#492)
  • b2332d7 chore: Bump @​babel/core from 7.26.0 to 7.29.7 (#502)
  • 938802c chore: Bump @​humanfs/node from 0.16.6 to 0.16.8 (#495)
  • 8b50f83 chore: Bump browserslist from 4.24.2 to 4.29.0 (#496)
  • 026c4f1 chore: Bump js-yaml from 3.14.1 to 3.15.2 (#499)
  • 340266a chore: Bump brace-expansion from 1.1.11 to 1.1.18 (#491)
  • Additional commits viewable in compare view

Updates actions/labeler from 6 to 7

Release notes

Sourced from actions/labeler's releases.

v7.0.0

What's Changed

Enhancements:

Full Changelog: actions/labeler@v6...v7.0.0

v6.2.0

What's Changed

Bug Fix

Dependency Updates

Full Changelog: actions/labeler@v6.1.0...v6.2.0

v6.1.0

Enhancements

  • Add changed-files-labels-limit and max-files-changed configuration options to cap the number of labels added by @​bluca in actions/labeler#923

Bug Fixes

Dependency Updates

New Contributors

Full Changelog: actions/labeler@v6...v6.1.0

v6.0.1

What's Changed

New Contributors

Full Changelog: actions/labeler@v6.0.0...v6.0.1

Commits

Updates hadolint/hadolint-action from 3.3.0 to 3.5.0

Release notes

Sourced from hadolint/hadolint-action's releases.

v3.5.0

3.5.0 (2026-08-24)

Features

  • Bump Hadolint to v2.15.1 (941db07)

v3.4.0

3.4.0 (2026-07-30)

Features

  • Bump Hadolint to v2.15.0 (2a66e89)
Commits
  • 06be81b Merge pull request #107 from gizero/bump-hadolint-base-image-to-2.15.1
  • 941db07 feat: Bump Hadolint to v2.15.1
  • d0e9595 Merge pull request #106 from m-ildefons/gh-78
  • df662ab Problem Matcher: Capture code and severity
  • 32c6895 Merge pull request #85 from rjbell4/patch-1
  • 146301c Merge pull request #105 from m-ildefons/gh-100
  • df8eaaf CI: run integration tests with different runners
  • 2a66e89 feat: Bump Hadolint to v2.15.0
  • 75bb911 fixup! Update hadolint.sh
  • 631cc83 Update repository reference in problem-matcher.json
  • See full diff in compare view

Updates sonarsource/sonarqube-scan-action from 8.2.1 to 8.3.0

Release notes

Sourced from sonarsource/sonarqube-scan-action's releases.

v8.3.0

What's Changed

New Contributors

Full Changelog: SonarSource/sonarqube-scan-action@v8.2.2...v8.3.0

v8.2.2

What's Changed

Full Changelog: SonarSource/sonarqube-scan-action@v8.2.1...v8.2.2

Commits
  • d209202 Update GitHub Actions dependencies (major) (#271)
  • 0333cb3 Update dependency @​actions/exec to v3 (#270)
  • da4450e Update npm dependencies (#268)
  • c5094d1 SQSCANGHA-168 Update actions/cache action to v5.1.0 (#269)
  • 001613f SQSCANGHA-162 Configure Renovate (#267)
  • 6abe0a7 SQSCANGHA-165 Fix GPG key retrieval through HTTPS proxies (#265)
  • ba9859e SQSCANGHA-159 Bump undici from 6.24.1 to 6.28.1 (#261)
  • 5bc5285 Rename code-quality teams to code-orchestration in CODEOWNERS
  • ad82103 SQSCANGHA-158 NO-JIRA Bump actions/checkout from 7.0.0 to 7.0.1 (#260)
  • 7451daf SQSCANGHA-157 NO-JIRA Bump actions/setup-node from 6.4.0 to 7.0.0 (#259)
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the github_actions group with 4 updates in the / directory: [aws-actions/amazon-ecs-render-task-definition](https://github.com/aws-actions/amazon-ecs-render-task-definition), [actions/labeler](https://github.com/actions/labeler), [hadolint/hadolint-action](https://github.com/hadolint/hadolint-action) and [sonarsource/sonarqube-scan-action](https://github.com/sonarsource/sonarqube-scan-action).


Updates `aws-actions/amazon-ecs-render-task-definition` from 1.9.0 to 1.9.1
- [Release notes](https://github.com/aws-actions/amazon-ecs-render-task-definition/releases)
- [Changelog](https://github.com/aws-actions/amazon-ecs-render-task-definition/blob/master/CHANGELOG.md)
- [Commits](aws-actions/amazon-ecs-render-task-definition@v1.9.0...v1.9.1)

Updates `actions/labeler` from 6 to 7
- [Release notes](https://github.com/actions/labeler/releases)
- [Commits](actions/labeler@v6...v7)

Updates `hadolint/hadolint-action` from 3.3.0 to 3.5.0
- [Release notes](https://github.com/hadolint/hadolint-action/releases)
- [Commits](hadolint/hadolint-action@v3.3.0...v3.5.0)

Updates `sonarsource/sonarqube-scan-action` from 8.2.1 to 8.3.0
- [Release notes](https://github.com/sonarsource/sonarqube-scan-action/releases)
- [Commits](SonarSource/sonarqube-scan-action@v8.2.1...v8.3.0)

---
updated-dependencies:
- dependency-name: aws-actions/amazon-ecs-render-task-definition
  dependency-version: 1.9.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github_actions
- dependency-name: actions/labeler
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github_actions
- dependency-name: hadolint/hadolint-action
  dependency-version: 3.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github_actions
- dependency-name: sonarsource/sonarqube-scan-action
  dependency-version: 8.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github_actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Oct 9, 2026
@sonarqubecloud

sonarqubecloud Bot commented Oct 9, 2026

Copy link
Copy Markdown

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants