Skip to content

build(deps): bump the minor-patch-dependencies group across 1 directory with 3 updates - #432

Merged
oscarbenjamin merged 1 commit into
mainfrom
dependabot/github_actions/minor-patch-dependencies-6d81f63fa3
Oct 3, 2026
Merged

oscarbenjamin merged 1 commit into
mainfrom
dependabot/github_actions/minor-patch-dependencies-6d81f63fa3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 3, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor-patch-dependencies group with 3 updates in the / directory: msys2/setup-msys2, scientific-python/upload-nightly-action and zizmorcore/zizmor-action.

Updates msys2/setup-msys2 from 2.32.0 to 2.33.0

Release notes

Sourced from msys2/setup-msys2's releases.

v2.33.0

  • Update base distribution to 20260927. [#657]
  • Due to dependency cleanups "perl" and some related libraries are no longer installed by default.
  • Add a deprecation warning for MINGW32/MINGW64. See the new suppress-deprecation-warnings option for how to silence them. [#644]
  • pacboy caching fixes [#650]
  • Update dependencies
Changelog

Sourced from msys2/setup-msys2's changelog.

Changelog

2.33.0

  • Update base distribution to 20260927. [#657]
  • Due to dependency cleanups "perl" and some related libraries are no longer installed by default.
  • Add a deprecation warning for MINGW32/MINGW64. See the new suppress-deprecation-warnings option for how to silence them. [#644]
  • pacboy caching fixes [#650]
  • Update dependencies

2.32.0

  • Update base distribution to 20260611. [#624]
  • Port from ncc to rolldown for bundling
  • Include an SBOM of the bundle
  • Update dependencies

2.31.1

  • input: allow empty input for "install" and "pacboy", meaning not packages will be installed [#589]
  • input: deprecate the special "RUNNER_TEMP" value for "location" in favor of an empty string
  • Update dependencies

2.31.0

  • Update base distribution to 20260322. [#597]
  • Update dependencies
  • Move to node24 from node20

2.30.0

  • Update base distribution to 20251213. [#565]
  • Remove folder-hash dependency [#555]
  • Update dependencies

2.29.0

  • Allow installation to C:\msys64 if it doesn't exist already. Like with the new windows-11-arm image, for example. [#542]
  • Update base distribution to 20250830. [#548]
  • Update dependencies

2.28.0

  • Update base distribution to 20250622. [#518]
  • Update dependencies

2.27.0

... (truncated)

Commits

Updates scientific-python/upload-nightly-action from 0.6.4 to 0.6.5

Release notes

Sourced from scientific-python/upload-nightly-action's releases.

0.6.5

What's Changed

New Contributors

Full Changelog: scientific-python/upload-nightly-action@0.6.4...0.6.5

Commits
  • 16fa02e MNT: Update to pixi lock spec v7 and project version v0.6.5 (#183)
  • fd44fde chore: Move requirements file under tools/ (#182)
  • 1dbb7f3 Build(deps): Bump pygithub from 2.9.1 to 2.10.0 in the python group (#180)
  • 2ca17bd Build(deps): Bump prefix-dev/setup-pixi in the actions group (#179)
  • 1a97ddf Build(deps): Bump the actions group with 3 updates (#177)
  • c88d30e Add issue-opener when wheels are almost dead (#175)
  • d770301 Build(deps): Bump the actions group with 4 updates (#174)
  • 33e7342 Add details about the consequences of not regularly uploading wheels (#173)
  • 64f2a45 Build(deps): Bump the actions group with 3 updates (#170)
  • 9aaae99 Build(deps): Bump the actions group with 4 updates (#168)
  • Additional commits viewable in compare view

Updates zizmorcore/zizmor-action from 0.6.2 to 0.6.4

Release notes

Sourced from zizmorcore/zizmor-action's releases.

v0.6.4

Sponsorship is appreciated!

zizmor 1.30.1 is now the default version.

Release notes: zizmorcore/zizmor-action#1301

v0.6.3

zizmor 1.30.0 is now the default version.

Release notes: zizmorcore/zizmor-action#1300

Commits
  • cc914d7 Sync zizmor versions (#166)
  • bae72b7 chore(deps): bump the github-actions group with 2 updates (#165)
  • 27604f9 chore(deps): bump the github-actions group with 2 updates (#164)
  • c41d665 README: bump pins (#163)
  • 70fb788 Sync zizmor versions (#162)
  • 7999d8c chore(deps): bump github/codeql-action/upload-sarif from 4.37.6 to 4.37.7 in ...
  • 2ae1ce9 chore(deps): bump github/codeql-action/upload-sarif (#160)
  • 951a5ee Skip prerelease versions in sync-zizmor-versions workflow (#158)
  • 79f0191 chore(deps): bump github/codeql-action/upload-sarif (#156)
  • 26a3ae6 sync-zizmor-versions: retry up to 5 times (#155)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…ry with 3 updates

Bumps the minor-patch-dependencies group with 3 updates in the / directory: [msys2/setup-msys2](https://github.com/msys2/setup-msys2), [scientific-python/upload-nightly-action](https://github.com/scientific-python/upload-nightly-action) and [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action).


Updates `msys2/setup-msys2` from 2.32.0 to 2.33.0
- [Release notes](https://github.com/msys2/setup-msys2/releases)
- [Changelog](https://github.com/msys2/setup-msys2/blob/main/CHANGELOG.md)
- [Commits](msys2/setup-msys2@66cd2cc...ec48f7c)

Updates `scientific-python/upload-nightly-action` from 0.6.4 to 0.6.5
- [Release notes](https://github.com/scientific-python/upload-nightly-action/releases)
- [Commits](scientific-python/upload-nightly-action@e76cfec...16fa02e)

Updates `zizmorcore/zizmor-action` from 0.6.2 to 0.6.4
- [Release notes](https://github.com/zizmorcore/zizmor-action/releases)
- [Commits](zizmorcore/zizmor-action@3dc1ecc...cc914d7)

---
updated-dependencies:
- dependency-name: msys2/setup-msys2
  dependency-version: 2.33.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch-dependencies
- dependency-name: scientific-python/upload-nightly-action
  dependency-version: 0.6.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch-dependencies
- dependency-name: zizmorcore/zizmor-action
  dependency-version: 0.6.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Oct 3, 2026
@oscarbenjamin
oscarbenjamin merged commit cb37c77 into main Oct 3, 2026
206 checks passed
@dependabot
dependabot Bot deleted the dependabot/github_actions/minor-patch-dependencies-6d81f63fa3 branch October 3, 2026 17:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant