Skip to content

chore(deps): bump the actions group across 1 directory with 4 updates - #71

Merged
hyperpolymath merged 1 commit into
mainfrom
dependabot/github_actions/actions-962db3d1d9
Aug 23, 2026
Merged

chore(deps): bump the actions group across 1 directory with 4 updates#71
hyperpolymath merged 1 commit into
mainfrom
dependabot/github_actions/actions-962db3d1d9

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 21, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the actions group with 4 updates in the / directory: haskell-actions/setup, github/codeql-action, dawidd6/action-send-mail and actions/setup-java.

Updates haskell-actions/setup from 2.11.0 to 2.12.0

Commits
  • 6037f33 fix: parseYAMLBoolean for enable-stack/stack-no-global/stack-setup-ghc/disabl...
  • d07e232 fix: bump bundled ghcup from 0.1.50.2 to 0.2.6.2
  • 5873697 Bump actions/setup-node from 6 to 7
  • 482af4f Bump actions/checkout from 6 to 7
  • See full diff in compare view

Updates github/codeql-action from 4.37.3 to 4.37.7

Release notes

Sourced from github/codeql-action's releases.

v4.37.7

  • Update default CodeQL bundle version to 2.26.3. #4085

v4.37.6

  • Changed the default filepath for the new remote file address format that was introduced in CodeQL Action 4.37.0 / 3.37.0 to .github/codeql-config.yml to align it with the suggested path that is used elsewhere. #4070

v4.37.5

  • Fixed a bug where a network error while streaming the download of the CodeQL bundle could terminate the init Action instead of falling back to downloading the bundle before extracting it. #4061

v4.37.4

  • This version of the CodeQL Action adds support for the tools input for the codeql-action/init step to be specified using a github-codeql-tools repository property. This feature will gradually be rolled out following the release of this version. Once rolled out, this allows for the CodeQL CLI version that is used in GitHub-managed workflows, such as Default Setup, to be set to a custom value. For example, customers who run into issues with rate limits when a new CodeQL CLI version is released can set the value to toolcache to always use the CodeQL CLI version that is available in the runner toolcache. For Advanced Setup workflows, the value provided for tools in the workflow definition always takes precedence unless the value of the repository property starts with !. #4037
  • Update default CodeQL bundle version to 2.26.2. #4051
Changelog

Sourced from github/codeql-action's changelog.

4.37.7 - 13 Aug 2026

  • Update default CodeQL bundle version to 2.26.3. #4085

4.37.6 - 04 Aug 2026

  • Changed the default filepath for the new remote file address format that was introduced in CodeQL Action 4.37.0 / 3.37.0 to .github/codeql-config.yml to align it with the suggested path that is used elsewhere. #4070

4.37.5 - 03 Aug 2026

  • Fixed a bug where a network error while streaming the download of the CodeQL bundle could terminate the init Action instead of falling back to downloading the bundle before extracting it. #4061

4.37.4 - 29 Jul 2026

  • This version of the CodeQL Action adds support for the tools input for the codeql-action/init step to be specified using a github-codeql-tools repository property. This feature will gradually be rolled out following the release of this version. Once rolled out, this allows for the CodeQL CLI version that is used in GitHub-managed workflows, such as Default Setup, to be set to a custom value. For example, customers who run into issues with rate limits when a new CodeQL CLI version is released can set the value to toolcache to always use the CodeQL CLI version that is available in the runner toolcache. For Advanced Setup workflows, the value provided for tools in the workflow definition always takes precedence unless the value of the repository property starts with !. #4037
  • Update default CodeQL bundle version to 2.26.2. #4051
Commits
  • ff2f1c6 Merge pull request #4093 from github/update-v4.37.7-be7a3dbb8
  • 951a133 Update changelog for v4.37.7
  • be7a3db Merge pull request #4087 from github/dependabot/npm_and_yarn/npm-minor-0aa561...
  • 9310334 Merge pull request #4086 from github/mbg/thread-action-state-to-codeql
  • b4d8a54 Rebuild
  • ab5db25 Bump the npm-minor group across 1 directory with 8 updates
  • 38055a3 Drop logger from databaseInitCluster in interface
  • 1f87aed Merge pull request #4085 from github/update-bundle/codeql-bundle-v2.26.3
  • dc1b98a Make logger available to getCodeQLForCmd
  • 6f0220e Merge pull request #4084 from github/navntoft/bump-undici
  • Additional commits viewable in compare view

Updates dawidd6/action-send-mail from 3.12.0 to 18

Release notes

Sourced from dawidd6/action-send-mail's releases.

v18

What's Changed

Full Changelog: dawidd6/action-send-mail@v17...v18

v17

What's Changed

Full Changelog: dawidd6/action-send-mail@v16...v17

v16

What's Changed

Full Changelog: dawidd6/action-send-mail@v15...v16

v15

What's Changed

Full Changelog: dawidd6/action-send-mail@v14...v15

v14

What's Changed

... (truncated)

Commits
  • 94de994 fix: Use extended HELLO with github.com domain (#302)
  • 6e50282 build(deps): bump actions/checkout from 6 to 7 (#300)
  • 1d138f3 build(deps): bump nodemailer from 9.0.0 to 9.0.1 (#299)
  • 1369c5b node_modules: update (#297)
  • d86d472 build(deps): bump nodemailer from 8.0.11 to 9.0.0 (#296)
  • 19dc783 build(deps): bump nodemailer from 8.0.10 to 8.0.11 (#295)
  • 0dd1be8 build(deps): bump nodemailer from 8.0.9 to 8.0.10 (#294)
  • 6bf8b9c build(deps): bump nodemailer from 8.0.8 to 8.0.9 (#293)
  • 51e2c0d build(deps): bump nodemailer from 8.0.7 to 8.0.8 (#292)
  • 076b075 build(deps): bump brace-expansion from 5.0.5 to 5.0.6 (#291)
  • Additional commits viewable in compare view

Updates actions/setup-java from 5.6.0 to 5.7.0

Release notes

Sourced from actions/setup-java's releases.

v5.7.0

What's Changed

Full Changelog: actions/setup-java@v5.6.0...v5.7.0

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Aug 21, 2026
@dependabot dependabot Bot changed the title chore(deps): bump the actions group with 4 updates chore(deps): bump the actions group across 1 directory with 4 updates Aug 23, 2026
@dependabot
chore(deps): bump the actions group across 1 directory with 4 updates
6cb96dd 
Bumps the actions group with 4 updates in the / directory: [haskell-actions/setup](https://github.com/haskell-actions/setup), [github/codeql-action](https://github.com/github/codeql-action), [dawidd6/action-send-mail](https://github.com/dawidd6/action-send-mail) and [actions/setup-java](https://github.com/actions/setup-java).


Updates `haskell-actions/setup` from 2.11.0 to 2.12.0
- [Release notes](https://github.com/haskell-actions/setup/releases)
- [Commits](haskell-actions/setup@v2.11.0...v2.12.0)

Updates `github/codeql-action` from 4.37.3 to 4.37.7
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@v4.37.3...v4.37.7)

Updates `dawidd6/action-send-mail` from 3.12.0 to 18
- [Release notes](https://github.com/dawidd6/action-send-mail/releases)
- [Commits](dawidd6/action-send-mail@v3.12.0...v18)

Updates `actions/setup-java` from 5.6.0 to 5.7.0
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](actions/setup-java@v5.6.0...v5.7.0)

---
updated-dependencies:
- dependency-name: actions/setup-java
  dependency-version: 5.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: dawidd6/action-send-mail
  dependency-version: '18'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: github/codeql-action
  dependency-version: 4.37.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: haskell-actions/setup
  dependency-version: 2.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions-962db3d1d9 branch from bc0c4c1 to 6cb96dd Compare August 23, 2026 14:43
@hyperpolymath
hyperpolymath merged commit b556a64 into main Aug 23, 2026
19 of 21 checks passed
@hyperpolymath
hyperpolymath deleted the dependabot/github_actions/actions-962db3d1d9 branch August 23, 2026 18:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@hyperpolymath hyperpolymath hyperpolymath approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@hyperpolymath