chore(deps): bump the github-actions group with 3 updates by dependabot[bot] · Pull Request #95 · dodopayments/dualmark

dependabot · 2026-09-15T11:55:11Z

Bumps the github-actions group with 3 updates: actions/checkout, fastly/compute-actions and changesets/action.

Updates actions/checkout from 4 to 7

Release notes

Sourced from actions/checkout's releases.

v7.0.0

What's Changed

block checking out fork pr for pull_request_target and workflow_run by @aiqiaoy in actions/checkout#2454

Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @dependabot[bot] in actions/checkout#2458

Bump flatted from 3.3.1 to 3.4.2 by @dependabot[bot] in actions/checkout#2460

Bump js-yaml from 4.1.0 to 4.2.0 by @dependabot[bot] in actions/checkout#2461

Bump @actions/core and @actions/tool-cache and Remove uuid by @dependabot[bot] in actions/checkout#2459

upgrade module to esm and update dependencies by @aiqiaoy in actions/checkout#2463

Bump the minor-npm-dependencies group across 1 directory with 3 updates by @dependabot[bot] in actions/checkout#2462

getting ready for checkout v7 release by @aiqiaoy in actions/checkout#2464

update error wording by @aiqiaoy in actions/checkout#2467

New Contributors

@aiqiaoy made their first contribution in actions/checkout#2454

Full Changelog: actions/checkout@v6.0.3...v7.0.0

v6.1.0

What's Changed

[BREAKING] backport allow-unsafe-pr-checkout to v6 by @aiqiaoy in actions/checkout#2500

backport fixes to releases-v6 by @aiqiaoy in actions/checkout#2527

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: actions/checkout@v6.0.3...v6.1.0

v6.0.3

What's Changed

Update changelog by @ericsciple in actions/checkout#2357

fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in actions/checkout#2414

Fix checkout init for SHA-256 repositories by @yaananth in actions/checkout#2439

Update changelog for v6.0.3 by @yaananth in actions/checkout#2446

New Contributors

@yaananth made their first contribution in actions/checkout#2414

Full Changelog: actions/checkout@v6...v6.0.3

v6.0.2

What's Changed

Add orchestration_id to git user-agent when ACTIONS_ORCHESTRATION_ID is set by @TingluoHuang in actions/checkout#2355

Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in actions/checkout#2356

Full Changelog: actions/checkout@v6.0.1...v6.0.2

v6.0.1

What's Changed

Update all references from v5 and v4 to v6 by @ericsciple in actions/checkout#2314

Add worktree support for persist-credentials includeIf by @ericsciple in actions/checkout#2327

Clarify v6 README by @ericsciple in actions/checkout#2328

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

v7.0.1

Skip running unsafe pr check if input is default by @aiqiaoy in actions/checkout#2518

Trim only ascii whitespace for branch by @aiqiaoy in actions/checkout#2521

Escape values passed to --unset by @aiqiaoy in actions/checkout#2530

Various dependency updates

v7.0.0

Block checking out fork PR for pull_request_target and workflow_run by @aiqiaoy in actions/checkout#2454

Various dependency updates

v6.0.3

Fix checkout init for SHA-256 repositories by @yaananth in actions/checkout#2439

fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in actions/checkout#2414

v6.0.2

Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in actions/checkout#2356

v6.0.1

Add worktree support for persist-credentials includeIf by @ericsciple in actions/checkout#2327

v6.0.0

Persist creds to a separate file by @ericsciple in actions/checkout#2286

Update README to include Node.js 24 support details and requirements by @salmanmkc in actions/checkout#2248

v5.0.1

Port v6 cleanup to v5 by @ericsciple in actions/checkout#2301

v5.0.0

Update actions checkout to use node 24 by @salmanmkc in actions/checkout#2226

v4.3.1

Port v6 cleanup to v4 by @ericsciple in actions/checkout#2305

v4.3.0

docs: update README.md by @motss in actions/checkout#1971

Add internal repos for checking out multiple repositories by @mouismail in actions/checkout#1977

Documentation update - add recommended permissions to Readme by @benwells in actions/checkout#2043

Adjust positioning of user email note and permissions heading by @joshmgross in actions/checkout#2044

Update README.md by @nebuk89 in actions/checkout#2194

Update CODEOWNERS for actions by @TingluoHuang in actions/checkout#2224

Update package dependencies by @salmanmkc in actions/checkout#2236

v4.2.2

url-helper.ts now leverages well-known environment variables by @jww3 in actions/checkout#1941

Expand unit test coverage for isGhes by @jww3 in actions/checkout#1946

v4.2.1

Check out other refs/* by commit if provided, fall back to ref by @orhantoy in actions/checkout#1924

... (truncated)

Commits

3d3c42e prep v7.0.1 release (#2531)
2880268 escape values passed to --unset (#2530)
12cd223 trim only ascii whitespace for branch (#2521)
62661c4 skip running unsafe pr check if input is default (#2518)
e8d4307 Bump the minor-actions-dependencies group with 2 updates (#2499)
631c942 eslint 9 (#2474)
4f1f4ae Bump actions/upload-artifact from 4 to 7 (#2476)
ba09753 Bump actions/checkout from 6 to 7 (#2488)
b9e0990 Bump docker/login-action from 3.3.0 to 4.2.0 (#2479)
e8cb398 Bump docker/build-push-action from 6.5.0 to 7.2.0 (#2478)
Additional commits viewable in compare view

Updates fastly/compute-actions from 3 to 14

Release notes

Sourced from fastly/compute-actions's releases.

v14

What's Changed

Define a composite action instead of abusing pre/main/post steps by @kailan in fastly/compute-actions#93

Upgrade used Node version to node24 by @lewiscowper in fastly/compute-actions#106

Dependency updates

New Contributors

@NisseBoman made their first contribution in fastly/compute-actions#88

@case made their first contribution in fastly/compute-actions#90

@lewiscowper made their first contribution in fastly/compute-actions#106

Full Changelog: fastly/compute-actions@v13...v14

v13

What's Changed

Update commands for Fastly CLI version 14. by @kpfleming in fastly/compute-actions#85

Prepare version 13. by @kpfleming in fastly/compute-actions#86

Full Changelog: fastly/compute-actions@v12...v13

v12

What's Changed

build(deps): bump undici from 5.28.4 to 5.28.5 by @dependabot[bot] in fastly/compute-actions#72

build(deps): bump @octokit/request from 9.1.3 to 9.2.2 by @dependabot[bot] in fastly/compute-actions#74

build(deps): bump @octokit/plugin-paginate-rest from 11.3.5 to 11.4.2 by @dependabot[bot] in fastly/compute-actions#75

Update version number of actions/checkout in README.md by @mattcone in fastly/compute-actions#76

'npm ci' should be used in automation instead of 'npm install'. by @kpfleming in fastly/compute-actions#78

feat(actions/setup): support arm64 releases of viceroy by @cee-dub in fastly/compute-actions#82

build(deps): bump undici from 5.28.5 to 5.29.0 by @dependabot[bot] in fastly/compute-actions#80

New Contributors

@mattcone made their first contribution in fastly/compute-actions#76

@cee-dub made their first contribution in fastly/compute-actions#82

Full Changelog: fastly/compute-actions@v11...v12

v11

What's Changed

Remove artifact upload functionality by @kailan in fastly/compute-actions#70

Bump cross-spawn from 7.0.3 to 7.0.6 by @dependabot in fastly/compute-actions#69

New Contributors

@remore made their first contribution in fastly/compute-actions#65

Full Changelog: fastly/compute-actions@v10...v11

v10

What's Changed

... (truncated)

Commits

a25cf83 Merge pull request #112 from fastly/composite-references
a12fe30 Use absolute reference in composite action
6a164b9 Merge pull request #111 from fastly/release-v14
e7667bd Update self version references
254e6a7 Bump @actions/checkout in test workflow
abc4fe0 Update dependencies
ffdd77e Merge pull request #106 from lewiscowper/upgrade-to-node-24
1ddb03d Upgrade used Node version to node24
c2ae83a Merge pull request #93 from fastly/lifecycle
09f2578 Merge pull request #100 from fastly/bump-deps
Additional commits viewable in compare view

Updates changesets/action from 1 to 2

Release notes

Sourced from changesets/action's releases.

v2.0.0

Major Changes

#692 cb3f011 Thanks @Andarist! - Release commits and tags are now pushed using the GitHub API by default.

Replace the commit-mode input with the boolean push-with-git-cli input. Set push-with-git-cli: true to continue using the Git CLI.

Regardless of the push mode, custom GitHub tokens must be passed explicitly through the github-token input. The GITHUB_TOKEN environment variable and credentials configured by actions/checkout or embedded in remote URLs are not substitutes for this input. When the Git CLI is enabled, github-token takes precedence over those repository credentials.

#680 ca57073 Thanks @bluwy! - Add a new push-git-tags option that complements create-github-releases to control specifically if git tags should be created but not GitHub releases.

If create-github-releases was previously set to false, which also indirectly disabled git tag creation, git tags will now be created instead by default. If this is not desired, set push-git-tags to false explicitly.

#657 4f718b5 Thanks @Andarist! - Removed compatibility support for old Changesets v1.

#681 7359107 Thanks @bluwy! - Rename the root action inputs and outputs to better match the sub-actions' conventions.

Inputs:

version -> version-script

publish -> publish-script

commit -> commit-message

title -> pr-title

branch -> pr-base-branch

Outputs:

pull-request-number -> pr-number

#674 164652b Thanks @bluwy! - Remove support for passing custom GitHub token through the GITHUB_TOKEN environment variable. It should be passed to the github-token input instead.

#659 5649ff4 Thanks @bluwy! - Remove cwd option for changesets/action. Use the step working-directory option instead to change the directory.

#673 823cf74 Thanks @bluwy! - Update to Changesets v3 packages

#695 469993c Thanks @bluwy! - Removed .npmrc handling when the NPM_TOKEN environment variable is set.

Authentication should be handled via Trusted Publishing instead. If a token is still needed, use actions/setup-node to set it up instead via the registry-url option. Check out the updated action README for more information of setting up npm authentication in GitHub Actions.

#668 0eae789 Thanks @bluwy! - Rename the input and output names to kebab-case instead of camelCase to match the official GitHub actions pattern

Minor Changes

#656 a12d90d Thanks @bluwy! - Add new /select-mode, /version, and /publish sub-actions to better control version and publish steps

#678 f71ae04 Thanks @Andarist! - Published packages detection done through stdout parsing was replaced with one based on the shared output file using CHANGESETS_OUTPUT environment variable. When using custom scripts this environment variable should always be passed down to the Changesets CLI invocations.

Patch Changes

#699 5b307d3 Thanks @Andarist! - Validate that projects use Changesets CLI v3 and direct Changesets CLI v2 users to changesets/action@v1.

... (truncated)

Changelog

Sourced from changesets/action's changelog.

@changesets/action

2.1.2

Patch Changes

#735 8833883 Thanks @bluwy! - Handle error when pushing git tags with the git CLI

#724 36f529f Thanks @bluwy! - Improve log messages

#724 36f529f Thanks @bluwy! - Fix root action double error logs

#729 ca85897 Thanks @bluwy! - Always switch and reset branch when generating version commits, similar to if push-with-git-cli is enabled

2.1.1

Patch Changes

#721 da1ea29 Thanks @KEBABSELLER6! - Fixed typo in renamed inputs from v1 to v2

2.1.0

Minor Changes

#718 3b7c71c Thanks @bluwy! - Add a cwd input to the root action, /select-mode, /version, /pack, and /publish sub-actions to set the current working directory to execute Changesets in. This input existed in v1 but was incorrectly removed.

Patch Changes

#716 6f58ba3 Thanks @bluwy! - Update pr-status message to link to the new faq page

2.0.0

Major Changes

#692 cb3f011 Thanks @Andarist! - Release commits and tags are now pushed using the GitHub API by default.

Replace the commit-mode input with the boolean push-with-git-cli input. Set push-with-git-cli: true to continue using the Git CLI.

Regardless of the push mode, custom GitHub tokens must be passed explicitly through the github-token input. The GITHUB_TOKEN environment variable and credentials configured by actions/checkout or embedded in remote URLs are not substitutes for this input. When the Git CLI is enabled, github-token takes precedence over those repository credentials.

#680 ca57073 Thanks @bluwy! - Add a new push-git-tags option that complements create-github-releases to control specifically if git tags should be created but not GitHub releases.

If create-github-releases was previously set to false, which also indirectly disabled git tag creation, git tags will now be created instead by default. If this is not desired, set push-git-tags to false explicitly.

#657 4f718b5 Thanks @Andarist! - Removed compatibility support for old Changesets v1.

#681 7359107 Thanks @bluwy! - Rename the root action inputs and outputs to better match the sub-actions' conventions.

Inputs:

... (truncated)

Commits

ae32849 v2.1.2
0138f45 Version Packages (#726)
8833883 Handle error when pushing git tags with the git CLI (#735)
e08fde7 Improve log messages (#730)
371fd77 Bump human-id in the production-dependencies group across 1 directory (#732)
85efcaf Bump actions/checkout in the github-actions group across 1 directory (#734)
5bb9d5c Bump the development-dependencies group across 1 directory with 7 updates (#733)
ca85897 Always prepare branch for version (#729)
36f529f Fix root action double error logs (#724)
d7669c8 Version Packages (#722)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the github-actions group with 3 updates: [actions/checkout](https://github.com/actions/checkout), [fastly/compute-actions](https://github.com/fastly/compute-actions) and [changesets/action](https://github.com/changesets/action). Updates `actions/checkout` from 4 to 7 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@v4...v7) Updates `fastly/compute-actions` from 3 to 14 - [Release notes](https://github.com/fastly/compute-actions/releases) - [Changelog](https://github.com/fastly/compute-actions/blob/main/RELEASE.md) - [Commits](fastly/compute-actions@v3...v14) Updates `changesets/action` from 1 to 2 - [Release notes](https://github.com/changesets/action/releases) - [Changelog](https://github.com/changesets/action/blob/main/CHANGELOG.md) - [Commits](changesets/action@v1...v2) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: fastly/compute-actions dependency-version: '14' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: changesets/action dependency-version: '2' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-09-15T11:55:12Z

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

vercel · 2026-09-15T11:55:13Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
dualmark	Ready	Preview	Sep 15, 2026 11:56am UTC

vercel Bot deployed to Preview September 15, 2026 11:56 View deployment

Navigation Menu

Repository navigation

chore(deps): bump the github-actions group with 3 updates - #95

chore(deps): bump the github-actions group with 3 updates#95
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-7ff07f7ae2

dependabot Bot commented on behalf of github Sep 15, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Sep 15, 2026

Uh oh!

vercel Bot commented Sep 15, 2026 •

edited

Loading

Uh oh!

This branch was successfully deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Sep 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v7.0.0

What's Changed

New Contributors

v6.1.0

What's Changed

v6.0.3

What's Changed

New Contributors

v6.0.2

What's Changed

v6.0.1

What's Changed

Changelog

v7.0.1

v7.0.0

v6.0.3

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

v14

What's Changed

New Contributors

v13

What's Changed

v12

What's Changed

New Contributors

v11

What's Changed

New Contributors

v10

What's Changed

v2.0.0

Major Changes

Minor Changes

Patch Changes

@​changesets/action

2.1.2

Patch Changes

2.1.1

Patch Changes

2.1.0

Minor Changes

Patch Changes

2.0.0

Major Changes

Uh oh!

dependabot Bot commented on behalf of github Sep 15, 2026

Labels

Uh oh!

vercel Bot commented Sep 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

This branch was successfully deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Sep 15, 2026 •

edited

Loading

`@changesets/action`

vercel Bot commented Sep 15, 2026 •

edited

Loading