Skip to content

chore: bump the github-actions group with 2 updates - #419

Merged
goloroden merged 2 commits into
mainfrom
dependabot/github_actions/github-actions-3dea4f5fb2
Oct 20, 2026
Merged

goloroden merged 2 commits into
mainfrom
dependabot/github_actions/github-actions-3dea4f5fb2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 16, 2026

Copy link
Copy Markdown
Contributor

Bumps the github-actions group with 2 updates: actions/setup-node and thenativeweb/get-next-version.

Updates actions/setup-node from 7.0.0 to 7.1.0

Release notes

Sourced from actions/setup-node's releases.

v7.1.0

What's Changed

Enhancements:

Bug fixes:

Documentation updates:

Dependency updates:

New Contributors

Full Changelog: actions/setup-node@v7.0.0...v7.1.0

Commits
  • 949feb2 Bump eslint from 10.5.0 to 10.11.0 and package.json from 7.0.0 to 7.1.0 (#1635)
  • 7207c4f chore: update dependencies and add license files (#1642)
  • 54337e0 Bump eslint-plugin-n from 18.1.0 to 18.3.0 (#1638)
  • fb54fa8 Bump jest-each from 30.4.1 to 30.5.2 (#1636)
  • 7f84f1d Bump pnpm/action-setup from 6.0.10 to 6.1.0 (#1631)
  • 0c54c7b Bump @​typescript-eslint/parser from 8.62.0 to 8.70.0 (#1615)
  • a829419 Bump @​types/semver from 7.7.1 to 7.8.0 (#1616)
  • 680d1e4 Support absolute paths in node-version-file (#1633)
  • db0fb3a Bump baseline-browser-mapping from 2.10.38 to 2.11.22 (#1629)
  • 94196ee Bump pnpm/action-setup from 6.0.9 to 6.0.10 (#1602)
  • Additional commits viewable in compare view

Updates thenativeweb/get-next-version from 2.8.1 to 2.8.2

Commits
  • c43a909 chore(release): Version 2.8.2 [skip ci]
  • 234eb12 fix: bump github.com/go-git/go-billy/v5 (#219)
  • cb720e5 chore: bump the github-actions group with 3 updates (#218)
  • 08e2553 chore: bump docker/setup-qemu-action in the github-actions group (#217)
  • 9527483 chore: Raise Go to 1.27.1. (#216)
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the github-actions group with 2 updates: [actions/setup-node](https://github.com/actions/setup-node) and [thenativeweb/get-next-version](https://github.com/thenativeweb/get-next-version).


Updates `actions/setup-node` from 7.0.0 to 7.1.0
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@v7.0.0...v7.1.0)

Updates `thenativeweb/get-next-version` from 2.8.1 to 2.8.2
- [Release notes](https://github.com/thenativeweb/get-next-version/releases)
- [Commits](thenativeweb/get-next-version@2.8.1...2.8.2)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: 7.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: thenativeweb/get-next-version
  dependency-version: 2.8.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from a team as a code owner October 16, 2026 03:32
@goloroden

Copy link
Copy Markdown
Member

QA fails in verifies the event hash and verifies the signature: the client cannot verify the hash of events that thenativeweb/eventsourcingdb:preview writes. Since thenativeweb/eventsourcingdb#2142, new events carry a version 2 hash (esdb:hash:v2:…), which this client does not know yet.

This is independent of this update – main fails the same way against the current preview image. It needs #418 (Verify version 2 of the event hash), so this stays open until then.

@goloroden

Copy link
Copy Markdown
Member

@dependabot rebase

@dependabot @github

dependabot Bot commented on behalf of github Oct 20, 2026

Copy link
Copy Markdown
Contributor Author

I can't perform the requested action because I don't have any knowledge about this pull request.

@goloroden
goloroden enabled auto-merge (squash) October 20, 2026 04:42
@goloroden
goloroden merged commit 39a073b into main Oct 20, 2026
3 checks passed
@goloroden
goloroden deleted the dependabot/github_actions/github-actions-3dea4f5fb2 branch October 20, 2026 04:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant