deps: bump the dev-ci-tools group across 1 directory with 9 updates

dependabot[bot] · web-flow · commit c27fabf6dd3a · 2025-12-15T23:03:14.000Z
Bumps the dev-ci-tools group with 9 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `5` | `6` | | [docker/metadata-action](https://github.com/docker/metadata-action) | `5.8.0` | `5.9.0` | | [stefanzweifel/git-auto-commit-action](https://github.com/stefanzweifel/git-auto-commit-action) | `5.2.0` | `7.0.0` | | [super-linter/super-linter](https://github.com/super-linter/super-linter) | `8.0.0` | `8.2.1` | | [googleapis/release-please-action](https://github.com/googleapis/release-please-action) | `4.2.0` | `4.4.0` | | [renovatebot/github-action](https://github.com/renovatebot/github-action) | `43.0.7` | `44.0.3` | | [ossf/scorecard-action](https://github.com/ossf/scorecard-action) | `2.4.2` | `2.4.3` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4.6.2` | `5.0.0` | | [github/codeql-action](https://github.com/github/codeql-action) | `3.29.9` | `4.31.4` | Updates `actions/checkout` from 5 to 6 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@v5...v6) Updates `docker/metadata-action` from 5.8.0 to 5.9.0 - [Release notes](https://github.com/docker/metadata-action/releases) - [Commits](docker/metadata-action@v5.8.0...v5.9.0) Updates `stefanzweifel/git-auto-commit-action` from 5.2.0 to 7.0.0 - [Release notes](https://github.com/stefanzweifel/git-auto-commit-action/releases) - [Changelog](https://github.com/stefanzweifel/git-auto-commit-action/blob/master/CHANGELOG.md) - [Commits](stefanzweifel/git-auto-commit-action@v5.2.0...v7.0.0) Updates `super-linter/super-linter` from 8.0.0 to 8.2.1 - [Release notes](https://github.com/super-linter/super-linter/releases) - [Changelog](https://github.com/super-linter/super-linter/blob/main/CHANGELOG.md) - [Commits](super-linter/super-linter@v8.0.0...v8.2.1) Updates `googleapis/release-please-action` from 4.2.0 to 4.4.0 - [Release notes](https://github.com/googleapis/release-please-action/releases) - [Changelog](https://github.com/googleapis/release-please-action/blob/main/CHANGELOG.md) - [Commits](googleapis/release-please-action@v4.2.0...v4.4.0) Updates `renovatebot/github-action` from 43.0.7 to 44.0.3 - [Release notes](https://github.com/renovatebot/github-action/releases) - [Changelog](https://github.com/renovatebot/github-action/blob/main/CHANGELOG.md) - [Commits](renovatebot/github-action@v43.0.7...v44.0.3) Updates `ossf/scorecard-action` from 2.4.2 to 2.4.3 - [Release notes](https://github.com/ossf/scorecard-action/releases) - [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md) - [Commits](ossf/scorecard-action@v2.4.2...v2.4.3) Updates `actions/upload-artifact` from 4.6.2 to 5.0.0 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@v4.6.2...v5.0.0) Updates `github/codeql-action` from 3.29.9 to 4.31.4 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@v3.29.9...v4.31.4) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major dependency-group: dev-ci-tools - dependency-name: docker/metadata-action dependency-version: 5.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dev-ci-tools - dependency-name: stefanzweifel/git-auto-commit-action dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dev-ci-tools - dependency-name: super-linter/super-linter dependency-version: 8.2.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dev-ci-tools - dependency-name: googleapis/release-please-action dependency-version: 4.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dev-ci-tools - dependency-name: renovatebot/github-action dependency-version: 44.0.3 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dev-ci-tools - dependency-name: ossf/scorecard-action dependency-version: 2.4.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dev-ci-tools - dependency-name: actions/upload-artifact dependency-version: 5.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dev-ci-tools - dependency-name: github/codeql-action dependency-version: 4.31.4 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dev-ci-tools ... Signed-off-by: dependabot[bot] <support@github.com>
diff --git a/.github/workflows/build-arduino-projects.yaml b/.github/workflows/build-arduino-projects.yaml
@@ -26,7 +26,7 @@ jobs:
       cancel-in-progress: true
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - name: "Build the ${{ matrix.arduino-project.project-id }} Arduino project"
         run: |
           scripts/build-arduino-project.sh \
diff --git a/.github/workflows/build-container-images.yaml b/.github/workflows/build-container-images.yaml
@@ -38,7 +38,7 @@ jobs:
     steps:
       - name: Set up QEMU
         uses: docker/setup-qemu-action@v3
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
       - name: Validate Docker build configuration
@@ -57,7 +57,7 @@ jobs:
           "${DOCKER_BUILD_COMMAND[@]}"
       - name: Extract metadata (tags, labels) for Docker
         id: meta
-        uses: docker/metadata-action@v5.8.0
+        uses: docker/metadata-action@v5.10.0
         with:
           images: |
             ${{ env.CONTAINER_IMAGE_REGISTRY }}/${{ env.CONTAINER_IMAGE_ID }}
diff --git a/.github/workflows/build-firmware-images.yaml b/.github/workflows/build-firmware-images.yaml
@@ -30,7 +30,7 @@ jobs:
         working-directory: config/smart-desk/esphome
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - name: "Build the Smart Desk firmware image"
         run: |
           scripts/build.sh
diff --git a/.github/workflows/build-mkdocs-site.yaml b/.github/workflows/build-mkdocs-site.yaml
@@ -38,9 +38,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout the current repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: Checkout the site repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           path: "${{ inputs.site-name }}"
           repository: "${{ inputs.site-repository }}"
@@ -53,7 +53,7 @@ jobs:
           github.event.pull_request.user.login != 'dependabot[bot]' &&
           github.event_name == 'pull_request' &&
           github.ref_name != github.event.repository.default_branch
-        uses: stefanzweifel/git-auto-commit-action@v5.2.0
+        uses: stefanzweifel/git-auto-commit-action@v7.0.0
         with:
           branch: ${{ inputs.site-repository-branch }}
           commit_message: "chore: update ${{ inputs.site-name }} site"
diff --git a/.github/workflows/dependency-review.yaml b/.github/workflows/dependency-review.yaml
@@ -11,6 +11,6 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: Review dependencies
         uses: actions/dependency-review-action@v4
diff --git a/.github/workflows/documentation.yaml b/.github/workflows/documentation.yaml
@@ -33,7 +33,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout the current repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           persist-credentials: true
       - name: Build the home-lab-docs site
@@ -44,7 +44,7 @@ jobs:
           github.event.pull_request.user.login != 'dependabot[bot]' &&
           github.event_name == 'pull_request' &&
           github.ref_name != github.event.repository.default_branch
-        uses: stefanzweifel/git-auto-commit-action@v5.2.0
+        uses: stefanzweifel/git-auto-commit-action@v7.0.0
         with:
           branch: "${{ github.event.pull_request.head.ref || github.head_ref || github.ref }}"
           commit_message: "chore: update home-lab-docs site"
diff --git a/.github/workflows/lint-commit.yaml b/.github/workflows/lint-commit.yaml
@@ -15,7 +15,7 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/lint.yaml b/.github/workflows/lint.yaml
@@ -23,13 +23,13 @@ jobs:
       statuses: write
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
         with:
           fetch-depth: 0
       - name: Load super-linter configuration
         run: cat config/lint/super-linter.env >> "$GITHUB_ENV"
       - name: Super-Linter
-        uses: super-linter/super-linter@v8.0.0
+        uses: super-linter/super-linter@v8.3.0
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
@@ -42,7 +42,7 @@ jobs:
       cancel-in-progress: true
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - name: "Run pre-commit"
         run: |
           set -o errexit
@@ -66,15 +66,15 @@ jobs:
       statuses: write
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
         with:
           fetch-depth: 0
       - name: Load super-linter configuration
         run: cat config/lint/super-linter.env >> "$GITHUB_ENV"
       - name: Load super-linter fix mode configuration
         run: cat config/lint/super-linter-fix-mode.env >> "$GITHUB_ENV"
       - name: Super-Linter
-        uses: super-linter/super-linter@v8.0.0
+        uses: super-linter/super-linter@v8.3.0
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       - name: Commit and push linting fixes
@@ -85,7 +85,7 @@ jobs:
           github.event_name == 'pull_request' &&
           github.ref_name != github.event.repository.default_branch &&
           !cancelled()
-        uses: stefanzweifel/git-auto-commit-action@v5.2.0
+        uses: stefanzweifel/git-auto-commit-action@v7.0.0
         with:
           branch: ${{ github.event.pull_request.head.ref || github.head_ref || github.ref }}
           commit_message: "chore: fix linting issues"
diff --git a/.github/workflows/preview-release-notes.yml b/.github/workflows/preview-release-notes.yml
@@ -13,7 +13,7 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -21,7 +21,7 @@ jobs:
       contents: write
       pull-requests: write
     steps:
-      - uses: googleapis/release-please-action@v4.2.0
+      - uses: googleapis/release-please-action@v4.4.0
         id: release
         with:
           config-file: .github/release-please/release-please-config.json
diff --git a/.github/workflows/renovate.yaml b/.github/workflows/renovate.yaml
@@ -29,7 +29,7 @@ jobs:
       security-events: read
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
       - name: Enable dry run if required
         if: ${{ github.ref_name != github.event.repository.default_branch }}
         run: |
@@ -39,7 +39,7 @@ jobs:
           echo "Enable Renovate dry run"
           echo "RENOVATE_DRY_RUN=full" >>"${GITHUB_ENV}"
       - name: Self-hosted Renovate
-        uses: renovatebot/github-action@v43.0.7
+        uses: renovatebot/github-action@v44.2.0
         env:
           LOG_LEVEL: "debug"
         with:
diff --git a/.github/workflows/scorecard.yaml b/.github/workflows/scorecard.yaml
@@ -27,12 +27,12 @@ jobs:
 
     steps:
       - name: "Checkout code"
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           persist-credentials: false
 
       - name: "Run analysis"
-        uses: ossf/scorecard-action@v2.4.2
+        uses: ossf/scorecard-action@v2.4.3
         with:
           results_file: results.sarif
           results_format: sarif
@@ -41,14 +41,14 @@ jobs:
       # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
       # format to the repository Actions tab.
       - name: "Upload artifact"
-        uses: actions/upload-artifact@v4.6.2
+        uses: actions/upload-artifact@v6.0.0
         with:
           name: SARIF file
           path: results.sarif
           retention-days: 5
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@v3.29.9
+        uses: github/codeql-action/upload-sarif@v4.31.8
         with:
           sarif_file: results.sarif
diff --git a/.github/workflows/test-ansible.yaml b/.github/workflows/test-ansible.yaml
@@ -53,7 +53,7 @@ jobs:
           large-packages: true
           docker-images: true
           swap-storage: false
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
       - name: Run molecule
diff --git a/.github/workflows/test-shell-scripts.yaml b/.github/workflows/test-shell-scripts.yaml
@@ -24,7 +24,7 @@ jobs:
       group: ${{ github.workflow }}-${{ github.head_ref || github.ref }}-${{ github.event_name }}-${{ matrix.test_script_path }}
       cancel-in-progress: true
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
         with:
           fetch-depth: 0
       - name: Run ${{ matrix.test_script_path }}
