Skip to content

Bump the github-actions group with 4 updates - #611

Merged
auto-submit[bot] merged 1 commit into
mainfrom
dependabot/github_actions/github-actions-a6a5b59d63
Nov 1, 2026
Merged

Bump the github-actions group with 4 updates#611
auto-submit[bot] merged 1 commit into
mainfrom
dependabot/github_actions/github-actions-a6a5b59d63

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the github-actions group with 4 updates: dart-lang/ecosystem/.github/workflows/health.yaml, actions/setup-node, dart-lang/ecosystem/.github/workflows/post_summaries.yaml and dart-lang/setup-dart/.github/workflows/publish.yml.

Updates dart-lang/ecosystem/.github/workflows/health.yaml from 78abf72b3cfcc7c6c822032d8915153019fe79b7 to 27c2fc841818cce349e1f424af51cca9ea381f47

Commits
  • 27c2fc8 Fix publish workflow pins, add tag_prefix to health, and update docs (#480)
  • 05641a9 Restore deprecated publish.yaml workflow and firehose CLI entrypoint (#479)
  • See full diff in compare view

Updates actions/setup-node from 7.0.0 to 7.1.0

Release notes

Sourced from actions/setup-node's releases.

v7.1.0

What's Changed

Enhancements:

Bug fixes:

Documentation updates:

Dependency updates:

New Contributors

Full Changelog: actions/setup-node@v7.0.0...v7.1.0

Commits
  • 949feb2 Bump eslint from 10.5.0 to 10.11.0 and package.json from 7.0.0 to 7.1.0 (#1635)
  • 7207c4f chore: update dependencies and add license files (#1642)
  • 54337e0 Bump eslint-plugin-n from 18.1.0 to 18.3.0 (#1638)
  • fb54fa8 Bump jest-each from 30.4.1 to 30.5.2 (#1636)
  • 7f84f1d Bump pnpm/action-setup from 6.0.10 to 6.1.0 (#1631)
  • 0c54c7b Bump @​typescript-eslint/parser from 8.62.0 to 8.70.0 (#1615)
  • a829419 Bump @​types/semver from 7.7.1 to 7.8.0 (#1616)
  • 680d1e4 Support absolute paths in node-version-file (#1633)
  • db0fb3a Bump baseline-browser-mapping from 2.10.38 to 2.11.22 (#1629)
  • 94196ee Bump pnpm/action-setup from 6.0.9 to 6.0.10 (#1602)
  • Additional commits viewable in compare view

Updates dart-lang/ecosystem/.github/workflows/post_summaries.yaml from 78abf72b3cfcc7c6c822032d8915153019fe79b7 to 27c2fc841818cce349e1f424af51cca9ea381f47

Commits
  • 27c2fc8 Fix publish workflow pins, add tag_prefix to health, and update docs (#480)
  • 05641a9 Restore deprecated publish.yaml workflow and firehose CLI entrypoint (#479)
  • See full diff in compare view

Updates dart-lang/setup-dart/.github/workflows/publish.yml from a5bff6576dfc51b47eb77d4b7084bba6a4daf8d2 to a1d8526c926344e01ba48a7368788c05ac98cb29

Changelog

Sourced from dart-lang/setup-dart/.github/workflows/publish.yml's changelog.

v1.8.2-wip

  • Update publish.yml to a three-job workflow (validate, package, publish) supporting hermetic package archiving (--to-archive / --from-archive).
  • Add sdk input to publish.yml to support publishing packages that require a non-stable Dart SDK (e.g., beta or dev).

v1.8.1

  • Update workflows to pin actions/checkout to a commit SHA.
  • Harden workflow permissions to contents: read.
  • Update publish.yml reusable workflow to reference [email protected] and latest setup-flutter.
  • Bump undici to 6.28.0 and @vercel/ncc to 0.44.1.

v1.8.0

  • Add a problem matcher for dart analyze to automatically create inline annotations on GitHub pull requests.
  • Update publish.yml reusable workflow to reference [email protected] (running on Node 24) (#188[]).
  • Update GitHub Action dependencies (actions/checkout v7).
  • Bump undici to 6.27.0 and update npm dependencies.

#188: dart-lang/setup-dart#188

v1.7.2

  • Update Node.js requirement to Node 24.
  • Fix open Dependabot alerts by bumping undici to >=6.24.0.
  • Update GitHub Action dependencies (@actions/core, @actions/exec, @actions/tool-cache, @actions/http-client).
  • Update workflow actions to their latest versions (actions/checkout v6, setup-flutter).

v1.7.1

  • Roll undici dependency to address CVE-2025-22150.
  • Update to the latest npm dependencies.
  • Recompile the action using the new Dart / JavaScript interop.

v1.7.0

v1.6.5

  • Fix zip path handling on Windows 11 (#118[])

#118: dart-lang/setup-dart#118

v1.6.4

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the github-actions group with 4 updates
3d5dfc1 
Bumps the github-actions group with 4 updates: [dart-lang/ecosystem/.github/workflows/health.yaml](https://github.com/dart-lang/ecosystem), [actions/setup-node](https://github.com/actions/setup-node), [dart-lang/ecosystem/.github/workflows/post_summaries.yaml](https://github.com/dart-lang/ecosystem) and [dart-lang/setup-dart/.github/workflows/publish.yml](https://github.com/dart-lang/setup-dart).


Updates `dart-lang/ecosystem/.github/workflows/health.yaml` from 78abf72b3cfcc7c6c822032d8915153019fe79b7 to 27c2fc841818cce349e1f424af51cca9ea381f47
- [Release notes](https://github.com/dart-lang/ecosystem/releases)
- [Commits](dart-lang/ecosystem@78abf72...27c2fc8)

Updates `actions/setup-node` from 7.0.0 to 7.1.0
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@8207627...949feb2)

Updates `dart-lang/ecosystem/.github/workflows/post_summaries.yaml` from 78abf72b3cfcc7c6c822032d8915153019fe79b7 to 27c2fc841818cce349e1f424af51cca9ea381f47
- [Release notes](https://github.com/dart-lang/ecosystem/releases)
- [Commits](dart-lang/ecosystem@78abf72...27c2fc8)

Updates `dart-lang/setup-dart/.github/workflows/publish.yml` from a5bff6576dfc51b47eb77d4b7084bba6a4daf8d2 to a1d8526c926344e01ba48a7368788c05ac98cb29
- [Release notes](https://github.com/dart-lang/setup-dart/releases)
- [Changelog](https://github.com/dart-lang/setup-dart/blob/main/CHANGELOG.md)
- [Commits](dart-lang/setup-dart@a5bff65...a1d8526)

---
updated-dependencies:
- dependency-name: dart-lang/ecosystem/.github/workflows/health.yaml
  dependency-version: 27c2fc841818cce349e1f424af51cca9ea381f47
  dependency-type: direct:production
  dependency-group: github-actions
- dependency-name: actions/setup-node
  dependency-version: 7.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: dart-lang/ecosystem/.github/workflows/post_summaries.yaml
  dependency-version: 27c2fc841818cce349e1f424af51cca9ea381f47
  dependency-type: direct:production
  dependency-group: github-actions
- dependency-name: dart-lang/setup-dart/.github/workflows/publish.yml
  dependency-version: a1d8526c926344e01ba48a7368788c05ac98cb29
  dependency-type: direct:production
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot Bot added the autosubmit label Nov 1, 2026
@github-actions

github-actions Bot commented Nov 1, 2026

Copy link
Copy Markdown

PR Health

Publish ✔️
  • 2 WIP (no publish necessary).

Documentation at https://github.com/dart-lang/ecosystem/wiki/Publishing-automation.

This check can be disabled by tagging the PR with skip-publish-check.

1 similar comment
@github-actions

github-actions Bot commented Nov 1, 2026

Copy link
Copy Markdown

PR Health

Publish ✔️
  • 2 WIP (no publish necessary).

Documentation at https://github.com/dart-lang/ecosystem/wiki/Publishing-automation.

This check can be disabled by tagging the PR with skip-publish-check.

@auto-submit
auto-submit Bot merged commit f388bf5 into main Nov 1, 2026
33 checks passed
@auto-submit
auto-submit Bot deleted the dependabot/github_actions/github-actions-a6a5b59d63 branch November 1, 2026 06:57
copybara-service Bot pushed a commit to dart-lang/sdk that referenced this pull request Nov 5, 2026
@natebosch dart-scoped@luci-project-accounts.iam.gserviceaccount.com
[deps] rev core, dartdoc, ecosystem, http, native, protobuf, tools, web
cc100c0 
Revisions updated by `dart tools/rev_sdk_deps.dart`.

core (https://github.com/dart-lang/core/compare/24e09c4..36f57a9):
  36f57a99  Tue Nov 3 14:26:17 2026 +0100  Sigurd Meldgaard  [os_detect] Remove bin/os_detect.dart (dart-lang/core#1015)
  86bacfca  Tue Nov 3 05:15:19 2026 -0500  Justin White  [characters] Fix RangeError on an unpaired tail surrogate at range start (dart-lang/core#1033)

dartdoc (https://github.com/dart-lang/dartdoc/compare/db94437..2f6847b):
  2f6847bd  Thu Oct 29 11:47:04 2026 +0200  Sergey G. Grekhov  Add tests for invalid doc comments placement (dart-lang/dartdoc#4301)
  17f2f0a3  Thu Oct 29 10:16:36 2026 +0100  Sarah Zakarias  Compare base elements and unify properties in doc-reference-target-differs (dart-lang/dartdoc#4307)

dartdoc is held back at 2f6847b, before dart-lang/dartdoc#4312, because its
mock SDK version changes conflict in the google3 3-way merge with the hotfix
in cl/1005963642.

ecosystem (https://github.com/dart-lang/ecosystem/compare/f8faabf..54e1673):
  54e1673  Wed Nov 4 09:46:54 2026 +0100  Sigurd Meldgaard  fix(firehose): resolve dartExecutable via package:cli_util (dart-lang/ecosystem#469)
  d754065  Tue Nov 3 10:09:45 2026 -0800  Kevin Moore  refactor(corpus): use path.join and seal closed type hierarchies (dart-lang/ecosystem#476)

http (https://github.com/dart-lang/http/compare/8c0d66a..1f869d0):
  1f869d0  Tue Nov 3 15:51:52 2026 -0800  dependabot[bot]  chore(deps): bump the github-actions group with 8 updates (dart-lang/http#2052)
  6d7f402  Tue Nov 3 14:12:04 2026 -0800  Brian Quinlan  feat(cupertino_http): support custom trust eval (dart-lang/http#2038)
  73f8c36  Tue Nov 3 10:15:16 2026 -0800  Brian Quinlan  chore(cupertino_http): ready 3.1.1 release (dart-lang/http#2056)

native (https://github.com/dart-lang/native/compare/b442038..1838637):
  183863758  Wed Nov 4 09:01:27 2026 -0300  Daco Harkes  [hooks_runner] Add `PKG_CONFIG_PATH` to environment variables allowlist (dart-lang/native#3779)
  c9e8118d4  Wed Nov 4 08:16:20 2026 +1100  Liam Appelbe  [jni] Fix release mode segfault (dart-lang/native#3777)
  5999cf7e4  Wed Nov 4 08:16:16 2026 +1100  Liam Appelbe  [objective_c] Prepare to publish (dart-lang/native#3778)
  d294d9942  Tue Nov 3 15:15:49 2026 +0100  Michael Goderbauer  [hooks_runner] Write recorded_uses.json under directory lock in link() (dart-lang/native#3770)
  33aa5ef04  Tue Nov 3 11:42:38 2026 +1100  Liam Appelbe  [objective_c] Cheaper and safer object/block validity checks (dart-lang/native#3776)

protobuf (https://github.com/dart-lang/protobuf/compare/1d52301..19191c8):
  19191c8  Wed Nov 4 17:14:33 2026 +0100  Sigurd Meldgaard  Use dart.tool.dart2wasm in json.dart so DDC uses json_web.dart (google/protobuf.dart#1108)

tools (https://github.com/dart-lang/tools/compare/1579f8d..a342744):
  a3427446f  Wed Nov 4 15:11:35 2026 +0100  Jonas Finnemann Jensen  Update CODEOWNERS for pkgs/markdown (dart-lang/tools#2795)
  08c9afdc0  Wed Nov 4 14:40:44 2026 +0100  Jonas Finnemann Jensen  [markdown] Check URL boundary before matching in AutolinkExtensionSyntax (dart-lang/tools#2786)
  0fc5edcae  Wed Nov 4 14:35:48 2026 +0100  Jonas Finnemann Jensen  [markdown] Skip unclosed inline HTML tags before matching RegExp (dart-lang/tools#2788)
  b1f6f9956  Wed Nov 4 14:31:55 2026 +0100  Jonas Finnemann Jensen  [markdown] Defer shortcut reference link label extraction in LinkSyntax.close (dart-lang/tools#2785)
  ab135e072  Wed Nov 4 14:30:37 2026 +0100  Jonas Finnemann Jensen  [markdown] Avoid quadratic trailing-paren scan in AutolinkExtensionSyntax (dart-lang/tools#2787)
  f329bf3ea  Wed Nov 4 17:09:34 2026 +0530  Ananya Kaul  [code_builder] Separate chained cascades after nullable casts (dart-lang/tools#2704)
  0a57e3446  Wed Nov 4 05:28:40 2026 +0530  Aman Maurya  fix(coverage): allow empty coverage files from skipped test suites (`#2667`) (dart-lang/tools#2668)
  e95958f6a  Tue Nov 3 21:53:57 2026 +0000  Keerti Parthasarathy  [unified_analytics] Add root_tool and leaf_tool to every event; key consent on root_tool (dart-lang/tools#2784)
  5da06a508  Tue Nov 3 13:11:04 2026 +0100  Jonas Finnemann Jensen  [markdown] Reject unescaped '(' in parenthesized inline link titles (dart-lang/tools#2770)
  f3a5c9277  Tue Nov 3 13:09:32 2026 +0100  Jonas Finnemann Jensen  [markdown] Cap parenthesis nesting in bare inline link destinations (dart-lang/tools#2769)
  820ce5fb7  Tue Nov 3 13:04:35 2026 +0100  Jonas Finnemann Jensen  [markdown] Reject unescaped '(' in parenthesized link reference titles (dart-lang/tools#2771)
  775c5d080  Tue Nov 3 13:03:43 2026 +0100  Jonas Finnemann Jensen  [markdown] Require balanced parentheses before bare inline link titles (dart-lang/tools#2768)
  5ebd52bc5  Tue Nov 3 13:03:08 2026 +0100  Jonas Finnemann Jensen  [markdown] Reject unescaped '<' in bracketed inline link destinations (dart-lang/tools#2767)
  feb7ea928  Tue Nov 3 13:02:15 2026 +0100  Jonas Finnemann Jensen  [markdown] Fix 999-character limit in LinkParser.parseLabel (dart-lang/tools#2766)
  31888a5da  Tue Nov 3 13:01:43 2026 +0100  Jonas Finnemann Jensen  [markdown] Enforce 999-character limit in _parseReferenceLinkLabel (dart-lang/tools#2765)
  e016c5d70  Tue Nov 3 09:26:32 2026 +0100  dart-ecosystem-bot[bot]  [boring] Pin the prebuilt binaries of boring-binaries-20261101-f869fdca423c (dart-lang/tools#2778)
  8c7935573  Mon Nov 2 10:15:24 2026 -0800  Kevin Moore  [html] Move WPT selector fixtures to third_party/wpt-selectors (dart-lang/tools#2772)

web (https://github.com/dart-lang/web/compare/45166fd..f388bf5):
  f388bf5  Sun Nov 1 06:57:22 2026 +0000  dependabot[bot]  Bump the github-actions group with 4 updates (dart-lang/web#611)
  658ce2f  Sat Oct 31 12:47:20 2026 +0100  Moritz  Migrate to ecosystem health publish check and setup-dart publish workflow (dart-lang/web#610)

Change-Id: Ifcae02c4712b4b27a5a8ab1c57d8dcf13a6700cf
Reviewed-on: https://dart-review.googlesource.com/c/sdk/+/574281
Reviewed-by: Brian Quinlan <[email protected]>
Commit-Queue: Nate Bosch <[email protected]>
copybara-service Bot pushed a commit to dart-lang/sdk that referenced this pull request Nov 9, 2026
@srawlins dart-scoped@luci-project-accounts.iam.gserviceaccount.com
Revert "[deps] Roll package:web to 45166fdeb32174969888d88c0feeea9a5c…
fe6e88e 
…380036"

This reverts commit 14c3870.

There are some breaking changes that internal code is not yet ready for.

The web package was bumped again after that commit, in
cc100c0
but I believe there are no code changes. From that commit's notes:

> web (https://github.com/dart-lang/web/compare/45166fd..f388bf5):
>  f388bf5  Sun Nov 1 06:57:22 2026 +0000  dependabot[bot]  Bump the github-actions group with 4 updates (dart-lang/web#611)
>  658ce2f  Sat Oct 31 12:47:20 2026 +0100  Moritz  Migrate to ecosystem health publish check and setup-dart publish workflow (dart-lang/web#610)

Change-Id: Ic99001bb752e41891acd5836b20cd52dc27f5ff5
Reviewed-on: https://dart-review.googlesource.com/c/sdk/+/575440
Reviewed-by: Kevin Moore <[email protected]>
Reviewed-by: Ben Konyi <[email protected]>
Commit-Queue: Samuel Rawlins <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@fluttergithubbot fluttergithubbot fluttergithubbot approved these changes

Assignees

No one assigned

Labels

autosubmit

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@fluttergithubbot