Skip to content

Bump the all-github-actions group across 1 directory with 4 updates - #217

Open
dependabot[bot] wants to merge 3 commits into
mainfrom
dependabot/github_actions/all-github-actions-16caaec4d3
Open

Bump the all-github-actions group across 1 directory with 4 updates#217
dependabot[bot] wants to merge 3 commits into
mainfrom
dependabot/github_actions/all-github-actions-16caaec4d3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the all-github-actions group with 4 updates in the / directory: actions/checkout, codecov/codecov-action, julia-actions/julia-downgrade-compat and crate-ci/typos.

Updates actions/checkout from 6 to 7

Release notes

Sourced from actions/checkout's releases.

v7.0.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v6.0.3...v7.0.0

v6.1.0

What's Changed

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: actions/checkout@v6.0.3...v6.1.0

v6.0.3

What's Changed

New Contributors

Full Changelog: actions/checkout@v6...v6.0.3

v6.0.2

What's Changed

Full Changelog: actions/checkout@v6.0.1...v6.0.2

v6.0.1

What's Changed

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

v7.0.1

v7.0.0

v6.0.3

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

... (truncated)

Commits

Updates codecov/codecov-action from 6 to 7

Release notes

Sourced from codecov/codecov-action's releases.

v7.0.0

⚠️ Due to migration issues with keybase, we are unable to update our keys under the codecovsecurity account. We have deleted the account and are using codecovsecops with the original gpg key

What's Changed

Full Changelog: codecov/codecov-action@v6.0.1...v7.0.0

v6.0.2

This is a copy of the v7.0.0 release to make updates easier

What's Changed

Full Changelog: codecov/codecov-action@v6.0.1...v6.0.2

v6.0.1

What's Changed

Full Changelog: codecov/codecov-action@v6.0.0...v6.0.1

Changelog

Sourced from codecov/codecov-action's changelog.

v5.5.2

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.5.1..v5.5.2

v5.5.1

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.5.0..v5.5.1

v5.5.0

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.3..v5.5.0

v5.4.3

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.2..v5.4.3

v5.4.2

... (truncated)

Commits

Updates julia-actions/julia-downgrade-compat from 2 to 2.6.2

Release notes

Sourced from julia-actions/julia-downgrade-compat's releases.

v2.6.2

Bug-fix release.

What's changed

  • Resolve recursive path-source dependency floors (#56) — fixes minimum-version resolution for dependencies configured via [sources]/path, including ones selected only by [targets].test. The action now follows active path sources recursively so local monorepo dependencies stay local throughout the locked build and test, reconstructs hard/weak dependencies and extension triggers for path entries instead of losing them on re-resolution, and intersects root/local compat constraints (reporting a conflict if they don't overlap) rather than silently picking one. On Julia 1.11+ and 1.10, test-only path packages' hard non-local dependencies are promoted to root [deps] so Pkg.test can't independently upgrade them above the locked minimum even with allow_reresolve=false. Also fixes a compat-serialization bug where an intersected open-upper-bound range (e.g. two >= constraints) produced an invalid version specifier string on Julia 1.11+ due to a rendering difference from 1.10. See the new "Local path sources" section in the README for details.

Full changelog: julia-actions/julia-downgrade-compat@v2.6.1...v2.6.2

v2.6.1

What's Changed

Full Changelog: julia-actions/julia-downgrade-compat@v2...v2.6.1

v2.6.0

What's Changed

Full Changelog: julia-actions/julia-downgrade-compat@v2...v2.6.0

v2.5.2

Bug-fix release.

What's changed

  • Strip [sources] packages from the merged project before resolution (#51) — fixes unknown package UUID: … resolver errors in the [extras]+[targets].test "merged resolution" path. create_merged_project starts from deepcopy(main_project), so a source package listed directly in the main project's [deps] — a monorepo root or sublibrary that depends on its own unregistered in-repo siblings and pins them via [sources] — survived the deepcopy in [deps]/[compat]/[sources]. The resolver then received those siblings as deps and errored before resolving anything (a caller-supplied skip list does not help, since it only governs [compat] rewriting). The fix mirrors remove_source_packages_from_project from the non-merged path: source packages are stripped from the merged project's [deps]/[compat]/[sources] and re-added to the manifest as path deps after resolution, so the resolved environment stays complete. Reproduced on SciML/OptimalUncertaintyQuantification.jl (a lib/ monorepo); both the root and sublibraries now resolve where the released action errored. Adds a regression test (full suite 101/101).

Full changelog: julia-actions/julia-downgrade-compat@v2.5.1...v2.5.2

v2.5.1

Bug-fix release.

What's changed

  • Dedupe main package in manifest after merged resolution (#50) — fixes the "Invalid manifest format … is ambiguous" error introduced in v2.5.0 (#49). For projects using old-style test deps ([extras] + [targets].test) where a test extra transitively depends on the main package, the merged resolve emitted a registry stanza for the main package and the action then appended a second, path-based stanza — leaving two stanzas with the same UUID and breaking Pkg.Types.EnvCache re-parsing. The fix removes any resolver-emitted stanza matching the main package's UUID before appending the path stanza (mirroring the existing [sources] dedupe), so exactly one stanza remains. This was breaking SciML downgrade CI (e.g. LinearSolve.jl).

Full changelog: julia-actions/julia-downgrade-compat@v2.5.0...v2.5.1

v2.5.0

No release notes provided.

v2.4.0

What's Changed

... (truncated)

Commits

Updates crate-ci/typos from 1.47.0 to 1.48.0

Release notes

Sourced from crate-ci/typos's releases.

v1.48.0

[1.48.0] - 2026-06-30

Features

  • Updated the dictionary with the June 2026 changes

v1.47.2

[1.47.2] - 2026-06-04

Fixes

  • Don't correct inferrable
  • Correct unused inferible variant

v1.47.1

[1.47.1] - 2026-06-03

Fixes

  • Don't correct requestors
Changelog

Sourced from crate-ci/typos's changelog.

[1.48.0] - 2026-06-30

Features

  • Updated the dictionary with the June 2026 changes

[1.47.2] - 2026-06-04

Fixes

  • Don't correct inferrable
  • Correct unused inferible variant

[1.47.1] - 2026-06-03

Fixes

  • Don't correct requestors
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the all-github-actions group across 1 directory with 4 updates
7016d7d 
Bumps the all-github-actions group with 4 updates in the / directory: [actions/checkout](https://github.com/actions/checkout), [codecov/codecov-action](https://github.com/codecov/codecov-action), [julia-actions/julia-downgrade-compat](https://github.com/julia-actions/julia-downgrade-compat) and [crate-ci/typos](https://github.com/crate-ci/typos).


Updates `actions/checkout` from 6 to 7
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v6...v7)

Updates `codecov/codecov-action` from 6 to 7
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](codecov/codecov-action@v6...v7)

Updates `julia-actions/julia-downgrade-compat` from 2 to 2.6.2
- [Release notes](https://github.com/julia-actions/julia-downgrade-compat/releases)
- [Changelog](https://github.com/julia-actions/julia-downgrade-compat/blob/main/devdocs/release.md)
- [Commits](julia-actions/julia-downgrade-compat@v2...v2.6.2)

Updates `crate-ci/typos` from 1.47.0 to 1.48.0
- [Release notes](https://github.com/crate-ci/typos/releases)
- [Changelog](https://github.com/crate-ci/typos/blob/master/CHANGELOG.md)
- [Commits](crate-ci/typos@v1.47.0...v1.48.0)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-github-actions
- dependency-name: codecov/codecov-action
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-github-actions
- dependency-name: julia-actions/julia-downgrade-compat
  dependency-version: 2.6.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-github-actions
- dependency-name: crate-ci/typos
  dependency-version: 1.48.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Aug 1, 2026
@codecov

codecov Bot commented Aug 1, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

JoshuaLampert
JoshuaLampert requested changes Aug 16, 2026
View reviewed changes
Comment thread .github/workflows/Downgrade.yml Outdated
@JoshuaLampert
Apply suggestions from code review
ae277e3 
Co-authored-by: Joshua Lampert <51029046+JoshuaLampert@users.noreply.github.com>
@JoshuaLampert
Merge branch 'main' into dependabot/github_actions/all-github-actions…
15d0598 
…-16caaec4d3
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@JoshuaLampert JoshuaLampert JoshuaLampert requested changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@JoshuaLampert