chore(deps): bump the github-actions group with 5 updates by dependabot[bot] · Pull Request #857 · docker/model-runner

dependabot · 2026-04-13T06:57:45Z

Bumps the github-actions group with 5 updates:

Package	From	To
peter-evans/create-pull-request	`8.1.0`	`8.1.1`
docker/bake-action	`7.0.0`	`7.1.0`
docker/cagent-action	`1.3.2`	`1.3.4`
actions/upload-artifact	`7.0.0`	`7.0.1`
docker/build-push-action	`7.0.0`	`7.1.0`

Updates peter-evans/create-pull-request from 8.1.0 to 8.1.1

Release notes

Sourced from peter-evans/create-pull-request's releases.

Create Pull Request v8.1.1

What's Changed

build(deps-dev): bump the npm group with 2 updates by @dependabot[bot] in peter-evans/create-pull-request#4305

build(deps): bump minimatch by @dependabot[bot] in peter-evans/create-pull-request#4311

build(deps): bump the github-actions group with 2 updates by @dependabot[bot] in peter-evans/create-pull-request#4316

build(deps): bump @tootallnate/once and jest-environment-jsdom by @dependabot[bot] in peter-evans/create-pull-request#4323

build(deps-dev): bump undici from 6.23.0 to 6.24.0 by @dependabot[bot] in peter-evans/create-pull-request#4328

build(deps-dev): bump flatted from 3.3.1 to 3.4.2 by @dependabot[bot] in peter-evans/create-pull-request#4334

build(deps): bump picomatch by @dependabot[bot] in peter-evans/create-pull-request#4339

build(deps-dev): bump handlebars from 4.7.8 to 4.7.9 by @dependabot[bot] in peter-evans/create-pull-request#4344

build(deps-dev): bump the npm group with 3 updates by @dependabot[bot] in peter-evans/create-pull-request#4349

fix: retry post-creation API calls on 422 eventual consistency errors by @peter-evans in peter-evans/create-pull-request#4356

Full Changelog: peter-evans/create-pull-request@v8.1.0...v8.1.1

Commits

5f6978f fix: retry post-creation API calls on 422 eventual consistency errors (#4356)
d32e88d build(deps-dev): bump the npm group with 3 updates (#4349)
8170bcc build(deps-dev): bump handlebars from 4.7.8 to 4.7.9 (#4344)
0041819 build(deps): bump picomatch (#4339)
b993918 build(deps-dev): bump flatted from 3.3.1 to 3.4.2 (#4334)
36d7c84 build(deps-dev): bump undici from 6.23.0 to 6.24.0 (#4328)
a45d1fb build(deps): bump @tootallnate/once and jest-environment-jsdom (#4323)
3499eb6 build(deps): bump the github-actions group with 2 updates (#4316)
3f3b473 build(deps): bump minimatch (#4311)
6699836 build(deps-dev): bump the npm group with 2 updates (#4305)
See full diff in compare view

Updates docker/bake-action from 7.0.0 to 7.1.0

Release notes

Sourced from docker/bake-action's releases.

v7.1.0

Git context query format support by @crazy-max in docker/bake-action#416

Update actions/github-script from v7 to v8 in matrix subaction by @socheatsok78 in docker/bake-action#398

Bump @docker/actions-toolkit from 0.79.0 to 0.87.0 by @crazy-max in docker/bake-action#416

Bump brace-expansion from 1.1.12 to 1.1.13 in docker/bake-action#411

Bump fast-xml-parser from 5.4.2 to 5.5.9 in docker/bake-action#400

Bump flatted from 3.3.3 to 3.4.2 in docker/bake-action#403

Bump glob from 10.3.12 to 10.5.0 in docker/bake-action#401

Bump handlebars from 4.7.8 to 4.7.9 in docker/bake-action#410

Bump lodash from 4.17.23 to 4.18.1 in docker/bake-action#419

Bump picomatch from 4.0.3 to 4.0.4 in docker/bake-action#407

Bump undici from 6.23.0 to 6.24.1 in docker/bake-action#395

Bump vite from 7.3.1 to 7.3.2 in docker/bake-action#417

Full Changelog: docker/bake-action@v7.0.0...v7.1.0

Commits

a66e1c8 Merge pull request #417 from docker/dependabot/npm_and_yarn/vite-7.3.2
316cfbb Merge pull request #419 from docker/dependabot/npm_and_yarn/lodash-4.18.1
1e84aeb chore: update generated content
69478a6 chore(deps): Bump lodash from 4.17.23 to 4.18.1
9c52192 Merge pull request #416 from crazy-max/refactor-git-context
b48ae06 Merge pull request #418 from docker/dependabot/github_actions/crazy-max-dot-g...
07be208 chore(deps): Bump the crazy-max-dot-github group with 2 updates
b3f5862 chore: update generated content
561e713 refactor: use new gitContext for bake source resolution
cc33948 bump @docker/actions-toolkit from 0.79.0 to 0.87.0
Additional commits viewable in compare view

Updates docker/cagent-action from 1.3.2 to 1.3.4

Release notes

Sourced from docker/cagent-action's releases.

v1.3.4

What's Changed

limit token usage by @derekmisler in docker/cagent-action#123

Full Changelog: docker/cagent-action@v1.3.3...v1.3.4

v1.3.3

What's Changed

chore: pin all self-refs to full SHAs and update release flow by @derekmisler in docker/cagent-action#115

fix: replace SHA in comment example with @VERSION placeholder by @derekmisler in docker/cagent-action#118

chore: update Docker Agent to v1.40.0 by @docker-agent[bot] in docker/cagent-action#120

use official github action for generating app token by @derekmisler in docker/cagent-action#121

chore: update Docker Agent to v1.42.0 by @docker-agent[bot] in docker/cagent-action#122

Full Changelog: docker/cagent-action@v1.3.2...v1.3.3

Commits

f4853bd release: v1.3.4
5adb558 limit token usage (#123)
2a100d8 chore: update Docker Agent to v1.42.0 (#122)
d0b94dd use official github action for generating app token (#121)
3eae98c chore: update Docker Agent to v1.40.0 (#120)
f954a4b fix: replace SHA in comment example with @VERSION placeholder (#118)
adf7f89 chore: pin all self-refs to full SHAs and update release flow (#115)
See full diff in compare view

Updates actions/upload-artifact from 7.0.0 to 7.0.1

Release notes

Sourced from actions/upload-artifact's releases.

v7.0.1

What's Changed

Update the readme with direct upload details by @danwkennedy in actions/upload-artifact#795

Readme: bump all the example versions to v7 by @danwkennedy in actions/upload-artifact#796

Include changes in typespec/ts-http-runtime 0.3.5 by @yacaovsnc in actions/upload-artifact#797

Full Changelog: actions/upload-artifact@v7...v7.0.1

Commits

043fb46 Merge pull request #797 from actions/yacaovsnc/update-dependency
634250c Include changes in typespec/ts-http-runtime 0.3.5
e454baa Readme: bump all the example versions to v7 (#796)
74fad66 Update the readme with direct upload details (#795)
See full diff in compare view

Updates docker/build-push-action from 7.0.0 to 7.1.0

Release notes

Sourced from docker/build-push-action's releases.

v7.1.0

Git context query format support by @crazy-max in docker/build-push-action#1505

Bump @docker/actions-toolkit from 0.79.0 to 0.87.0 by @crazy-max in docker/build-push-action#1505

Bump brace-expansion from 1.1.12 to 1.1.13 in docker/build-push-action#1500

Bump fast-xml-parser from 5.4.2 to 5.5.7 in docker/build-push-action#1489

Bump flatted from 3.3.3 to 3.4.2 in docker/build-push-action#1491

Bump glob from 10.3.12 to 10.5.0 in docker/build-push-action#1490

Bump handlebars from 4.7.8 to 4.7.9 in docker/build-push-action#1497

Bump lodash from 4.17.23 to 4.18.1 in docker/build-push-action#1510

Bump picomatch from 4.0.3 to 4.0.4 in docker/build-push-action#1496

Bump undici from 6.23.0 to 6.24.1 in docker/build-push-action#1486

Bump vite from 7.3.1 to 7.3.2 in docker/build-push-action#1509

Full Changelog: docker/build-push-action@v7.0.0...v7.1.0

Commits

bcafcac Merge pull request #1509 from docker/dependabot/npm_and_yarn/vite-7.3.2
18e62f1 Merge pull request #1510 from docker/dependabot/npm_and_yarn/lodash-4.18.1
46580d2 chore: update generated content
3f80b25 chore(deps): Bump lodash from 4.17.23 to 4.18.1
efeec95 Merge pull request #1505 from crazy-max/refactor-git-context
ddf04b0 Merge pull request #1511 from docker/dependabot/github_actions/crazy-max-dot-...
db08d97 chore(deps): Bump the crazy-max-dot-github group with 2 updates
ef1fb96 Merge pull request #1508 from docker/dependabot/github_actions/docker/login-a...
2d8f2a1 chore: update generated content
919ac7b fix test since secrets are not written to temp path anymore
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the github-actions group with 5 updates: | Package | From | To | | --- | --- | --- | | [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) | `8.1.0` | `8.1.1` | | [docker/bake-action](https://github.com/docker/bake-action) | `7.0.0` | `7.1.0` | | [docker/cagent-action](https://github.com/docker/cagent-action) | `1.3.2` | `1.3.4` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `7.0.0` | `7.0.1` | | [docker/build-push-action](https://github.com/docker/build-push-action) | `7.0.0` | `7.1.0` | Updates `peter-evans/create-pull-request` from 8.1.0 to 8.1.1 - [Release notes](https://github.com/peter-evans/create-pull-request/releases) - [Commits](peter-evans/create-pull-request@c0f553f...5f6978f) Updates `docker/bake-action` from 7.0.0 to 7.1.0 - [Release notes](https://github.com/docker/bake-action/releases) - [Commits](docker/bake-action@8249049...a66e1c8) Updates `docker/cagent-action` from 1.3.2 to 1.3.4 - [Release notes](https://github.com/docker/cagent-action/releases) - [Commits](docker/cagent-action@b4ccf4c...f4853bd) Updates `actions/upload-artifact` from 7.0.0 to 7.0.1 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@bbbca2d...043fb46) Updates `docker/build-push-action` from 7.0.0 to 7.1.0 - [Release notes](https://github.com/docker/build-push-action/releases) - [Commits](docker/build-push-action@d08e5c3...bcafcac) --- updated-dependencies: - dependency-name: peter-evans/create-pull-request dependency-version: 8.1.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: docker/bake-action dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: docker/cagent-action dependency-version: 1.3.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: actions/upload-artifact dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: docker/build-push-action dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Apr 13, 2026

ilopezluna approved these changes Apr 13, 2026

View reviewed changes

ilopezluna merged commit dd589d2 into main Apr 13, 2026
11 of 12 checks passed

ilopezluna deleted the dependabot/github_actions/github-actions-e4dcbc5333 branch April 13, 2026 07:23

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump the github-actions group with 5 updates#857

chore(deps): bump the github-actions group with 5 updates#857
ilopezluna merged 1 commit intomainfrom
dependabot/github_actions/github-actions-e4dcbc5333

dependabot bot commented on behalf of github Apr 13, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot bot commented on behalf of github Apr 13, 2026

Create Pull Request v8.1.1

What's Changed

v7.1.0

v1.3.4

What's Changed

v1.3.3

What's Changed

v7.0.1

What's Changed

v7.1.0

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant