Skip to content

Bump the actions group with 9 updates - #3140

Merged
aclark4life merged 1 commit into
mainfrom
dependabot/github_actions/actions-5fc13f2ed2
Oct 23, 2026
Merged

aclark4life merged 1 commit into
mainfrom
dependabot/github_actions/actions-5fc13f2ed2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 23, 2026

Copy link
Copy Markdown
Contributor

Bumps the actions group with 9 updates:

Package From To
mongodb-labs/drivers-github-tools/codeql 3.0.7 3.1.1
mongodb-labs/drivers-github-tools/setup 3.0.7 3.1.1
mongodb-labs/drivers-github-tools/create-branch 3.0.7 3.1.1
mongodb-labs/drivers-github-tools/secure-checkout 3.0.7 3.1.1
mongodb-labs/drivers-github-tools/python/pre-publish 3.0.7 3.1.1
mongodb-labs/drivers-github-tools/python/post-publish 3.0.7 3.1.1
mongodb-labs/drivers-github-tools/python/setup 3.0.7 3.1.1
mongodb-labs/drivers-evergreen-tools 1.2.0 1.3.0
zizmorcore/zizmor-action 0.6.4 0.7.1

Updates mongodb-labs/drivers-github-tools/codeql from 3.0.7 to 3.1.1

Release notes

Sourced from mongodb-labs/drivers-github-tools/codeql's releases.

v3.1.1

What's Changed

Full Changelog: mongodb-labs/drivers-github-tools@v3.1.0...v3.1.1

v3.1.0

What's Changed

Full Changelog: mongodb-labs/drivers-github-tools@v3.0.7...v3.1.0

Commits

Updates mongodb-labs/drivers-github-tools/setup from 3.0.7 to 3.1.1

Release notes

Sourced from mongodb-labs/drivers-github-tools/setup's releases.

v3.1.1

What's Changed

Full Changelog: mongodb-labs/drivers-github-tools@v3.1.0...v3.1.1

v3.1.0

What's Changed

Full Changelog: mongodb-labs/drivers-github-tools@v3.0.7...v3.1.0

Commits

Updates mongodb-labs/drivers-github-tools/create-branch from 3.0.7 to 3.1.1

Release notes

Sourced from mongodb-labs/drivers-github-tools/create-branch's releases.

v3.1.1

What's Changed

Full Changelog: mongodb-labs/drivers-github-tools@v3.1.0...v3.1.1

v3.1.0

What's Changed

Full Changelog: mongodb-labs/drivers-github-tools@v3.0.7...v3.1.0

Commits

Updates mongodb-labs/drivers-github-tools/secure-checkout from 3.0.7 to 3.1.1

Release notes

Sourced from mongodb-labs/drivers-github-tools/secure-checkout's releases.

v3.1.1

What's Changed

Full Changelog: mongodb-labs/drivers-github-tools@v3.1.0...v3.1.1

v3.1.0

What's Changed

Full Changelog: mongodb-labs/drivers-github-tools@v3.0.7...v3.1.0

Commits

Updates mongodb-labs/drivers-github-tools/python/pre-publish from 3.0.7 to 3.1.1

Release notes

Sourced from mongodb-labs/drivers-github-tools/python/pre-publish's releases.

v3.1.1

What's Changed

Full Changelog: mongodb-labs/drivers-github-tools@v3.1.0...v3.1.1

v3.1.0

What's Changed

Full Changelog: mongodb-labs/drivers-github-tools@v3.0.7...v3.1.0

Commits

Updates mongodb-labs/drivers-github-tools/python/post-publish from 3.0.7 to 3.1.1

Release notes

Sourced from mongodb-labs/drivers-github-tools/python/post-publish's releases.

v3.1.1

What's Changed

Full Changelog: mongodb-labs/drivers-github-tools@v3.1.0...v3.1.1

v3.1.0

What's Changed

Full Changelog: mongodb-labs/drivers-github-tools@v3.0.7...v3.1.0

Commits

Updates mongodb-labs/drivers-github-tools/python/setup from 3.0.7 to 3.1.1

Release notes

Sourced from mongodb-labs/drivers-github-tools/python/setup's releases.

v3.1.1

What's Changed

Full Changelog: mongodb-labs/drivers-github-tools@v3.1.0...v3.1.1

v3.1.0

What's Changed

Full Changelog: mongodb-labs/drivers-github-tools@v3.0.7...v3.1.0

Commits

Updates mongodb-labs/drivers-evergreen-tools from 1.2.0 to 1.3.0

Release notes

Sourced from mongodb-labs/drivers-evergreen-tools's releases.

v1.3.0

What's Changed

Full Changelog: mongodb-labs/drivers-evergreen-tools@v1.2.0...v1.3.0

Commits

Updates zizmorcore/zizmor-action from 0.6.4 to 0.7.1

Release notes

Sourced from zizmorcore/zizmor-action's releases.

v0.7.1

zizmor changes

Bug Fixes 🐛🔗

  • Fixed a regression in 1.31.0 where some ignore comments/configurations would no longer apply to the dangerous-triggers audit

action changes

The default version of zizmor is now 1.31.1.

What's Changed

Full Changelog: zizmorcore/zizmor-action@v0.7.0...v0.7.1

v0.7.0

Sponsorship is appreciated!

zizmor notes

Enhancements 🌱🔗

  • The typosquat-uses audit now supports pre-commit config inputs (#2437)

  • The self-hosted-runner audit is now significantly more precise (#2350)

    Many thanks to @​ubiratansoares for proposing and implementing this enhancement!

  • The dangerous-triggers audit now considers the issue_comment trigger fundamentally dangerous (#2396)

  • zizmor is now aware of the image_version workflow trigger (#2397)

  • The dangerous-triggers audit now produces more precise finding/diagnostic spans (#2402)

  • The cache-poisoning audit is now aware of pnpm/setup (#2409)

  • The unpinned-images audit now produces more precise findings when the user's workflow contains an indirect matrix (#2395)

    Many thanks to @​ubiratansoares for proposing and implementing this enhancement!

  • The cache-poisoning audit is now aware of GitHub's new cache-mode: setting, and will skip any findings that would occur when a job has an effective cache-mode: none (#2418)

  • The cache-poisoning audit now flags usages of cache-mode: write and cache-mode: write-only with dangerous triggers, i.e. triggers that give an attacker privileged code execution (#2426)

  • zizmor now uses a tree-sitter grammar for PowerShell that's more precise/capable of capturing more non-trivial PowerShell expressions (#2444)

Bug Fixes 🐛🔗

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the actions group with 9 updates:

| Package | From | To |
| --- | --- | --- |
| [mongodb-labs/drivers-github-tools/codeql](https://github.com/mongodb-labs/drivers-github-tools) | `3.0.7` | `3.1.1` |
| [mongodb-labs/drivers-github-tools/setup](https://github.com/mongodb-labs/drivers-github-tools) | `3.0.7` | `3.1.1` |
| [mongodb-labs/drivers-github-tools/create-branch](https://github.com/mongodb-labs/drivers-github-tools) | `3.0.7` | `3.1.1` |
| [mongodb-labs/drivers-github-tools/secure-checkout](https://github.com/mongodb-labs/drivers-github-tools) | `3.0.7` | `3.1.1` |
| [mongodb-labs/drivers-github-tools/python/pre-publish](https://github.com/mongodb-labs/drivers-github-tools) | `3.0.7` | `3.1.1` |
| [mongodb-labs/drivers-github-tools/python/post-publish](https://github.com/mongodb-labs/drivers-github-tools) | `3.0.7` | `3.1.1` |
| [mongodb-labs/drivers-github-tools/python/setup](https://github.com/mongodb-labs/drivers-github-tools) | `3.0.7` | `3.1.1` |
| [mongodb-labs/drivers-evergreen-tools](https://github.com/mongodb-labs/drivers-evergreen-tools) | `1.2.0` | `1.3.0` |
| [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action) | `0.6.4` | `0.7.1` |


Updates `mongodb-labs/drivers-github-tools/codeql` from 3.0.7 to 3.1.1
- [Release notes](https://github.com/mongodb-labs/drivers-github-tools/releases)
- [Commits](mongodb-labs/drivers-github-tools@11cb389...99b1cbd)

Updates `mongodb-labs/drivers-github-tools/setup` from 3.0.7 to 3.1.1
- [Release notes](https://github.com/mongodb-labs/drivers-github-tools/releases)
- [Commits](mongodb-labs/drivers-github-tools@11cb389...99b1cbd)

Updates `mongodb-labs/drivers-github-tools/create-branch` from 3.0.7 to 3.1.1
- [Release notes](https://github.com/mongodb-labs/drivers-github-tools/releases)
- [Commits](mongodb-labs/drivers-github-tools@11cb389...99b1cbd)

Updates `mongodb-labs/drivers-github-tools/secure-checkout` from 3.0.7 to 3.1.1
- [Release notes](https://github.com/mongodb-labs/drivers-github-tools/releases)
- [Commits](mongodb-labs/drivers-github-tools@11cb389...99b1cbd)

Updates `mongodb-labs/drivers-github-tools/python/pre-publish` from 3.0.7 to 3.1.1
- [Release notes](https://github.com/mongodb-labs/drivers-github-tools/releases)
- [Commits](mongodb-labs/drivers-github-tools@11cb389...99b1cbd)

Updates `mongodb-labs/drivers-github-tools/python/post-publish` from 3.0.7 to 3.1.1
- [Release notes](https://github.com/mongodb-labs/drivers-github-tools/releases)
- [Commits](mongodb-labs/drivers-github-tools@11cb389...99b1cbd)

Updates `mongodb-labs/drivers-github-tools/python/setup` from 3.0.7 to 3.1.1
- [Release notes](https://github.com/mongodb-labs/drivers-github-tools/releases)
- [Commits](mongodb-labs/drivers-github-tools@11cb389...99b1cbd)

Updates `mongodb-labs/drivers-evergreen-tools` from 1.2.0 to 1.3.0
- [Release notes](https://github.com/mongodb-labs/drivers-evergreen-tools/releases)
- [Commits](mongodb-labs/drivers-evergreen-tools@354a816...f33b31d)

Updates `zizmorcore/zizmor-action` from 0.6.4 to 0.7.1
- [Release notes](https://github.com/zizmorcore/zizmor-action/releases)
- [Commits](zizmorcore/zizmor-action@cc914d7...85b2b9f)

---
updated-dependencies:
- dependency-name: mongodb-labs/drivers-github-tools/codeql
  dependency-version: 3.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: mongodb-labs/drivers-github-tools/setup
  dependency-version: 3.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: mongodb-labs/drivers-github-tools/create-branch
  dependency-version: 3.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: mongodb-labs/drivers-github-tools/secure-checkout
  dependency-version: 3.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: mongodb-labs/drivers-github-tools/python/pre-publish
  dependency-version: 3.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: mongodb-labs/drivers-github-tools/python/post-publish
  dependency-version: 3.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: mongodb-labs/drivers-github-tools/python/setup
  dependency-version: 3.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: mongodb-labs/drivers-evergreen-tools
  dependency-version: 1.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: zizmorcore/zizmor-action
  dependency-version: 0.7.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from a team as a code owner October 23, 2026 08:54
@dependabot
dependabot Bot requested a review from sleepyStick October 23, 2026 08:54
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Oct 23, 2026
@aclark4life
aclark4life merged commit 61ede94 into main Oct 23, 2026
82 checks passed
@dependabot
dependabot Bot deleted the dependabot/github_actions/actions-5fc13f2ed2 branch October 23, 2026 23:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant