Skip to content

⚙️ [Maintenance]: Consolidated GitHub Actions dependency bumps#332

Draft
Marius Storhaug (MariusStorhaug) wants to merge 5 commits into
mainfrom
maint/bump-github-actions
Draft

⚙️ [Maintenance]: Consolidated GitHub Actions dependency bumps#332
Marius Storhaug (MariusStorhaug) wants to merge 5 commits into
mainfrom
maint/bump-github-actions

Conversation

@MariusStorhaug
Copy link
Copy Markdown
Member

@MariusStorhaug Marius Storhaug (MariusStorhaug) commented May 11, 2026

All open Dependabot GitHub Actions bumps for this repository are collected into a single maintenance PR. Each action is pinned to its new full commit SHA with the version tag in a comment, following the SHA-pinning security practice.

Actions updated

Action From To
actions/download-artifact v8.0.0 v8.0.1
actions/deploy-pages v4.0.5 v5.0.0
actions/configure-pages v5.0.0 v6.0.0
PSModule/Invoke-ScriptAnalyzer v4.1.2 v4.1.3
super-linter/super-linter v8.5.0 v8.6.0

All pins use the full 40-character commit SHA with the human-readable version tag as a comment — e.g. @3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1.

Closes Dependabot PRs

This PR consolidates and supersedes the following individual Dependabot PRs, which can be closed after this merges:

Technical Details

Each Dependabot branch was cherry-picked individually onto a fresh branch from main. No merge conflicts occurred. All five changes apply cleanly to the current main (v5.5.0).

Files modified:

  • .github/workflows/Build-Docs.ymldownload-artifact v8.0.1, super-linter/slim v8.6.0
  • .github/workflows/Build-Site.ymldownload-artifact v8.0.1
  • .github/workflows/Lint-Repository.ymlsuper-linter v8.6.0
  • .github/workflows/Lint-SourceCode.ymlPSModule/Invoke-ScriptAnalyzer v4.1.3
  • .github/workflows/Linter.ymlsuper-linter v8.6.0
  • .github/workflows/Publish-Site.ymldeploy-pages v5.0.0, configure-pages v6.0.0
  • .github/workflows/Test-Module.ymldownload-artifact v8.0.1 (×2), PSModule/Invoke-ScriptAnalyzer v4.1.3
  • .github/workflows/Test-ModuleLocal.ymldownload-artifact v8.0.1

dependabot Bot added 5 commits May 11, 2026 22:16
Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 8.0.0 to 8.0.1.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](actions/download-artifact@70fc10c...3e5f45b)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: 8.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [actions/deploy-pages](https://github.com/actions/deploy-pages) from 4.0.5 to 5.0.0.
- [Release notes](https://github.com/actions/deploy-pages/releases)
- [Commits](actions/deploy-pages@d6db901...cd2ce8f)

---
updated-dependencies:
- dependency-name: actions/deploy-pages
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [actions/configure-pages](https://github.com/actions/configure-pages) from 5.0.0 to 6.0.0.
- [Release notes](https://github.com/actions/configure-pages/releases)
- [Commits](actions/configure-pages@983d773...45bfe01)

---
updated-dependencies:
- dependency-name: actions/configure-pages
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [PSModule/Invoke-ScriptAnalyzer](https://github.com/psmodule/invoke-scriptanalyzer) from 4.1.2 to 4.1.3.
- [Release notes](https://github.com/psmodule/invoke-scriptanalyzer/releases)
- [Commits](PSModule/Invoke-ScriptAnalyzer@17bb50e...6aeb1bc)

---
updated-dependencies:
- dependency-name: PSModule/Invoke-ScriptAnalyzer
  dependency-version: 4.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [super-linter/super-linter](https://github.com/super-linter/super-linter) from 8.5.0 to 8.6.0.
- [Release notes](https://github.com/super-linter/super-linter/releases)
- [Changelog](https://github.com/super-linter/super-linter/blob/main/CHANGELOG.md)
- [Commits](super-linter/super-linter@61abc07...9e86335)

---
updated-dependencies:
- dependency-name: super-linter/super-linter
  dependency-version: 8.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@github-actions
Copy link
Copy Markdown

No Significant Changes Detected

This PR does not contain changes to files that would trigger a new release:

Pattern Description
^src/ Matches files where path matches this pattern
^README\.md$ Matches files where path matches this pattern

Build, test, and publish stages will be skipped for this PR.

If you believe this is incorrect, please verify that your changes are in the correct locations.

@github-actions
Copy link
Copy Markdown

No Significant Changes Detected

This PR does not contain changes to files that would trigger a new release:

Pattern Description
^src/ Matches files where path matches this pattern
^README\.md$ Matches files where path matches this pattern

Build, test, and publish stages will be skipped for this PR.

If you believe this is incorrect, please verify that your changes are in the correct locations.

@github-actions
Copy link
Copy Markdown

Super-linter summary

Language Validation result
CHECKOV Pass ✅
GITLEAKS Pass ✅
GIT_MERGE_CONFLICT_MARKERS Pass ✅
MARKDOWN Pass ✅
NATURAL_LANGUAGE Pass ✅
POWERSHELL Pass ✅
PRE_COMMIT Pass ✅
SPELL_CODESPELL Pass ✅
TRIVY Pass ✅
YAML Pass ✅

All files and directories linted successfully

For more information, see the GitHub Actions workflow run

Powered by Super-linter

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant