Skip to content

chore(actions)(deps): Bump the actions group across 1 directory with 2 updates - #427

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/main/actions-b233275e6a
Open

chore(actions)(deps): Bump the actions group across 1 directory with 2 updates#427
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/main/actions-b233275e6a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 9, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the actions group with 2 updates in the / directory: actions/checkout and ikalnytskyi/action-setup-postgres.

Updates actions/checkout from 7.0.0 to 7.0.1

Release notes

Sourced from actions/checkout's releases.

v7.0.1

What's Changed

Full Changelog: actions/checkout@v7...v7.0.1

Changelog

Sourced from actions/checkout's changelog.

Changelog

v7.0.1

v7.0.0

v6.0.3

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

... (truncated)

Commits

Updates ikalnytskyi/action-setup-postgres from 8 to 9

Release notes

Sourced from ikalnytskyi/action-setup-postgres's releases.

v9

What's Changed

New Contributors

Full Changelog: ikalnytskyi/action-setup-postgres@v8...v9

Commits
  • 325155b Version 9
  • 0f1fdf5 Merge pull request #75 from ikalnytskyi/chore/bump-ci-actions
  • 289f40f Pin and bump action versions used in CI
  • 8a68e90 Merge pull request #74 from ikalnytskyi/chore/trust-aws-tap
  • 6be344a Suppress Homebrew tap trust warnings in CI
  • 016c7a7 Merge pull request #73 from ikalnytskyi/chore/drop-postgres-14
  • e80f1b2 Drop PostgreSQL 14 support
  • bc33375 Merge pull request #72 from ikalnytskyi/feat/max-connections
  • 4c78c7a Add 'max-connections' input parameter
  • 3dba498 Merge pull request #70 from ikalnytskyi/impr/uri-unsafe-credentials
  • Additional commits viewable in compare view

@dependabot @github

dependabot Bot commented on behalf of github Nov 9, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies, github-actions. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@prisma-gizmo

prisma-gizmo Bot commented Nov 9, 2026 •
edited
Loading

Copy link
Copy Markdown

✅ Gizmo reviewed 4dcc0eb — posted 0 inline comment(s) this pass.

Open findings: none

Change walkthrough

This PR is a Dependabot group bump that repins two third-party GitHub Actions across all eight workflow files: actions/checkout from the v7.0.0 commit to the v7.0.1 release commit, and ikalnytskyi/action-setup-postgres from v8 to v9. Every change is a SHA-only pin swap with the inline version comment updated to match; no inputs, permissions, or step logic are altered.

Coverage and consistency. All 17 actions/checkout@ references across ci.yml, e2e-deploy.yml (6 jobs), preview-publish.yml (2), and the four single-use workflows (cron-keep-awake-canary, dco, deploy-docs, publish, windows-assemble-smoke) are updated to the same pinned commit. A repo-wide grep confirms no stale pins of either action remain anywhere, and the composite actions under .github/actions/ reference no external actions, so nothing was missed.

Commit verification. Both new SHAs correspond to the versions named in the PR description: 3d3c42e5 is the "prep v7.0.1 release" commit of actions/checkout, and 325155bf is the "Version 9" commit of action-setup-postgres. The comment annotations (# v7.0.1, # v9) were updated in lockstep, preserving the repo's pin-by-SHA-with-comment convention.

v9 compatibility. The only consumer of action-setup-postgres is the platform-tests job in ci.yml:129, which runs on the macos-latest/windows-latest matrix and pins postgres-version: '16'. Three v9 behavior changes are therefore non-events here: dropped PostgreSQL 14 support (the workflow requests 16), disabled default cluster creation on Ubuntu (the action never runs on Ubuntu — the Linux test job uses the postgres:16 container service instead), and the URI-unsafe connection-parameter encoding change (the consumed connection-uri output carries only plain postgres credentials). The username/password/database inputs consumed by the step are unchanged between v8 and v9.

checkout v7.0.1 risk profile. The patch release's behavior changes (skip the unsafe-PR check when inputs are default, ASCII-only branch trimming, escaping git config --unset values) do not interact with any option this repo sets; all steps keep persist-credentials: false, and the two fetch-depth: 0 uses in publish.yml, dco.yml, and preview-publish.yml are unaffected by the patch.

@coderabbitai

coderabbitai Bot commented Nov 9, 2026 •
edited
Loading

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: Organization UI
  • Review profile: ASSERTIVE
  • Plan: Advanced
  • Run ID: 82c0ad3e-8958-4c8e-8a9b-80ef834cceff

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

prisma-gizmo[bot]
prisma-gizmo Bot reviewed Nov 9, 2026
View reviewed changes

@prisma-gizmo prisma-gizmo Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

New findings: none · trace

prisma-gizmo[bot]
prisma-gizmo Bot approved these changes Nov 9, 2026
View reviewed changes

@prisma-gizmo prisma-gizmo Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No Gizmo finding is open and the head commit has been reviewed. Approving.

@pkg-pr-new

pkg-pr-new Bot commented Nov 9, 2026 •
edited
Loading

Copy link
Copy Markdown

Open in StackBlitz

npm i https://pkg.pr.new/@prisma/composer@427

npm i https://pkg.pr.new/@prisma/composer-cli@427

npm i https://pkg.pr.new/@prisma/composer-prisma-cloud@427

commit: 0deac28

@dependabot
chore(actions)(deps): Bump the actions group across 1 directory with …
0deac28 
…2 updates

Bumps the actions group with 2 updates in the / directory: [actions/checkout](https://github.com/actions/checkout) and [ikalnytskyi/action-setup-postgres](https://github.com/ikalnytskyi/action-setup-postgres).


Updates `actions/checkout` from 7.0.0 to 7.0.1
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@9c091bb...3d3c42e)

Updates `ikalnytskyi/action-setup-postgres` from 8 to 9
- [Release notes](https://github.com/ikalnytskyi/action-setup-postgres/releases)
- [Commits](ikalnytskyi/action-setup-postgres@c4dda34...325155b)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: ikalnytskyi/action-setup-postgres
  dependency-version: '9'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/main/actions-b233275e6a branch from 4dcc0eb to 0deac28 Compare November 10, 2026 20:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@prisma-gizmo prisma-gizmo[bot] prisma-gizmo[bot] approved these changes

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants