Skip to content

build(deps): bump the actions group across 1 directory with 3 updates - #12

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions-06a1bd35e1
Open

build(deps): bump the actions group across 1 directory with 3 updates#12
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions-06a1bd35e1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 12, 2026 •
edited
Loading

Copy link
Copy Markdown

Bumps the actions group with 3 updates in the / directory: actions/upload-artifact, supabase/setup-cli and cloudflare/wrangler-action.

Updates actions/upload-artifact from 5 to 7

Release notes

Sourced from actions/upload-artifact's releases.

v7.0.0

v7 What's new

Direct Uploads

Adds support for uploading single files directly (unzipped). Callers can set the new archive parameter to false to skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. The name parameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.

ESM

To support new versions of the @actions/* packages, we've upgraded the package to ESM.

What's Changed

New Contributors

Full Changelog: actions/upload-artifact@v6...v7.0.0

v6.0.0

v6 - What's new

[!IMPORTANT] actions/upload-artifact@v6 now runs on Node.js 24 (runs.using: node24) and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading.

Node.js 24

This release updates the runtime to Node.js 24. v5 had preliminary support for Node.js 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.

What's Changed

Full Changelog: actions/upload-artifact@v5.0.0...v6.0.0

Commits
  • cf430e0 Merge pull request #822 from actions/tunc-d-prepare-upload-v7-0-2
  • c2acded chore: prepare v7.0.2 release
  • 4687c1b Merge pull request #821 from actions/tunc-d-upload-artifact-package-bump
  • 8cbe1be Bump @​actions/artifact to 6.3.1
  • 043fb46 Merge pull request #797 from actions/yacaovsnc/update-dependency
  • 634250c Include changes in typespec/ts-http-runtime 0.3.5
  • e454baa Readme: bump all the example versions to v7 (#796)
  • 74fad66 Update the readme with direct upload details (#795)
  • bbbca2d Support direct file uploads (#764)
  • 589182c Upgrade the module to ESM and bump dependencies (#762)
  • Additional commits viewable in compare view

Updates supabase/setup-cli from 1 to 3

Release notes

Sourced from supabase/setup-cli's releases.

v3.0.0

Summary

  • Install the Supabase CLI from the npm package instead of GitHub releases.
  • Support latest, beta, and fixed npm package versions.
  • Remove the github-token input; npm is now the source of truth for CLI resolution and install.
  • Preserve caller npm configuration by running npm from the workspace while keeping the action-owned install isolated.
  • Improve musl/Alpine runtime handling for existing node and npm binaries.

Validation

  • CI and E2E passed on main before tagging.
  • All open pull requests were cleared before release.

v3 is the moving major-version alias for this release.

v2.1.2

Allow Supabase CLI v2.108.0 and newer to use its built-in image registry fallback by default. Older CLI versions retain the GHCR default, and explicit registry selections remain unchanged.

v2.1.1

Fix Alpine/Linux musl containers that do not already include the C++ runtime libraries required by Bun and the Supabase CLI shim.

  • Install missing libstdc++ and libgcc before running oven-sh/setup-bun in Alpine/musl containers.
  • Keep non-Linux and non-musl runners as no-ops.
  • Fail with a clear setup message when a musl container cannot install the required packages.

Validation: https://github.com/jgoux/setup-cli-testing/actions/runs/26172791463

v2.1.0

Fix setup-cli on Linux musl/Alpine containers.

  • Authenticate the latest Supabase CLI release lookup with the optional github-token input.
  • Use Bun musl builds on Linux musl containers.
  • Download Supabase CLI .apk assets for Linux musl and CLI versions v2.99.0+.

v2.0.1

Fix latest Supabase CLI archive resolution for v2.99.0+.

v2.0.0

This major release refreshes the action internals, CI coverage, and release pipeline while keeping usage straightforward with uses: supabase/setup-cli@v2.

Highlights

  • Switched the action implementation to a composite action flow and modernized runtime/dependency setup.
  • Improved CLI version resolution: when version is omitted, the action now detects it from root lockfiles (bun.lock, pnpm-lock.yaml, package-lock.json) and falls back to latest.
  • Expanded validation with dedicated CI + E2E workflows and updated docs/examples around @v2.
  • Hardened repository automation and supply-chain posture (pinned actions, Dependabot workflow/policy updates, licensed workflow fixes).
  • Migrated away from old bundled distribution/test setup to a cleaner Bun-based project structure.

Maintenance updates

... (truncated)

Commits
  • 689adcf chore: move to stable TypeScript 7 (#460)
  • 30e7433 feat: resolve semver ranges in the version input (#459)
  • 30c0cfb chore(deps): bump actions/setup-node from 6.4.0 to 7.0.0 (#450)
  • d239d10 feat: fall back to the GitHub release when npm cannot install the CLI (#457)
  • bea6372 feat: support next and v<N>.stable dist-tags (#456)
  • adc7f6c docs: document the v3 tag publish flow (#455)
  • 45a513f fix: allow registry fallback in supported CLI versions (#453)
  • aa3515e chore(deps): bump ruby/setup-ruby from 1.319.0 to 1.321.0 in the actions-mino...
  • c44671e chore(deps): bump ruby/setup-ruby from 1.317.0 to 1.319.0 in the actions-mino...
  • 6ffe784 chore(deps): bump ruby/setup-ruby from 1.316.0 to 1.317.0 in the actions-mino...
  • Additional commits viewable in compare view

Updates cloudflare/wrangler-action from 3 to 4

Release notes

Sourced from cloudflare/wrangler-action's releases.

v4.0.0

Major Changes

  • #412 1029e90 Thanks @​ericclemmons! - Update default Wrangler version to v4 (latest). The action now installs Wrangler v4 by default when no wranglerVersion input is specified. Users can still pin to v3 by setting wranglerVersion: "3.90.0" explicitly.

v3.15.0

Minor Changes

  • #426 febbda6 Thanks @​WillTaylorDev! - Support version ranges and tags in wranglerVersion input. You can now set wranglerVersion to values like 4, ^4.0.0, 4.x, or latest instead of only exact versions like 4.81.0.

v3.14.1

Patch Changes

v3.14.0

Minor Changes

Patch Changes

v3.13.1

Patch Changes

v3.13.0

Minor Changes

v3.12.1

Patch Changes

v3.12.0

Minor Changes

  • #312 122ee5cf5b66847e0b6cfa67ecd9e03e38a67a42 Thanks @​Maximo-Guk! - This reapplies 303 add parity with pages-action for pages deploy outputs. Thanks @​courtney-sims! - Support pages-deployment-id, pages-environment, pages-deployment-alias-url and deployment-url outputs for Pages deploys when wrangler version is >=3.81.0. deployment-alias-url was also deprecated in favour of pages-deployment-alias.

v3.11.0

Minor Changes

... (truncated)

Changelog

Sourced from cloudflare/wrangler-action's changelog.

Changelog

4.1.3

Patch Changes

4.1.2

Patch Changes

  • #453 876f5b5 Thanks @​ericclemmons! - Create GitHub releases only after their compiled action tags are ready so immutable releases do not block publishing.

4.1.1

Patch Changes

  • #451 429a99d Thanks @​podonnell-dev! - Pin Workers Preview examples and integration tests to Wrangler 4.136.3, which includes the Worker name in Preview artifacts.

4.1.0

Minor Changes

  • #450 9500699 Thanks @​podonnell-dev! - Add support for Workers Previews, including Preview artifact parsing, Preview outputs, GitHub Deployments, and job summaries for wrangler preview.

Patch Changes

  • #418 789ac84 Thanks @​vliggio! - Surface wrangler error messages in the action step output instead of showing only a generic failure message.

4.0.0

Major Changes

  • #412 1029e90 Thanks @​ericclemmons! - Update default Wrangler version to v4 (latest). The action now installs Wrangler v4 by default when no wranglerVersion input is specified. Users can still pin to v3 by setting wranglerVersion: "3.90.0" explicitly.

3.15.0

Minor Changes

  • #426 febbda6 Thanks @​WillTaylorDev! - Support version ranges and tags in wranglerVersion input. You can now set wranglerVersion to values like 4, ^4.0.0, 4.x, or latest instead of only exact versions like 4.81.0.

3.14.1

Patch Changes

3.14.0

... (truncated)

Commits
  • 953926a Automatic compilation
  • a17640a Merge pull request #457 from cloudflare/changeset-release/main
  • 8d350f6 Version Packages
  • df82e37 Merge pull request #456 from cloudflare/podonnell/preview-comms
  • d3cfe74 WC-6082 [previews] adjust wrangler guidance to v4.136.3
  • d4d1b2d Merge pull request #455 from cloudflare/changeset-release/main
  • 1e45d72 Version Packages
  • 194026b Merge pull request #453 from cloudflare/codex/fix-immutable-releases
  • 5fa9855 docs: Explain immutable release sequencing
  • d7fd981 refactor: Keep release publishing retryable
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Nov 12, 2026
@dependabot dependabot Bot changed the title build(deps): bump the actions group with 3 updates Bump the actions group across 1 directory with 3 updates Nov 13, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions-06a1bd35e1 branch from de77777 to c2c4f51 Compare November 13, 2026 21:27
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions-06a1bd35e1 branch from c2c4f51 to 157e5d4 Compare November 14, 2026 01:04
@dependabot dependabot Bot changed the title Bump the actions group across 1 directory with 3 updates build(deps): bump the actions group across 1 directory with 3 updates Nov 14, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions-06a1bd35e1 branch from 157e5d4 to 5299bac Compare November 14, 2026 01:34
@dependabot
build(deps): bump the actions group across 1 directory with 3 updates
3daf681 
Bumps the actions group with 3 updates in the / directory: [actions/upload-artifact](https://github.com/actions/upload-artifact), [supabase/setup-cli](https://github.com/supabase/setup-cli) and [cloudflare/wrangler-action](https://github.com/cloudflare/wrangler-action).


Updates `actions/upload-artifact` from 5 to 7
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@v5...v7)

Updates `supabase/setup-cli` from 1 to 3
- [Release notes](https://github.com/supabase/setup-cli/releases)
- [Commits](supabase/setup-cli@v1...v3)

Updates `cloudflare/wrangler-action` from 3 to 4
- [Release notes](https://github.com/cloudflare/wrangler-action/releases)
- [Changelog](https://github.com/cloudflare/wrangler-action/blob/main/CHANGELOG.md)
- [Commits](cloudflare/wrangler-action@v3...v4)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: cloudflare/wrangler-action
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: supabase/setup-cli
  dependency-version: '3'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions-06a1bd35e1 branch from 5299bac to 3daf681 Compare November 14, 2026 04:10

This branch was successfully deployed

1 active deployment
preview — 3daf681e Deployed Nov 14, 2026 by dependabot[bot] via Deploy web to Cloudflare #87
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@Ferrin-Y Ferrin-Y Awaiting requested review from Ferrin-Y Ferrin-Y is a code owner
@noorelmosrati noorelmosrati Awaiting requested review from noorelmosrati noorelmosrati is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants