Bump the actions group across 1 directory with 6 updates by dependabot[bot] · Pull Request #2558 · huggingface/smolagents

dependabot · 2026-07-21T18:35:01Z

Bumps the actions group with 6 updates in the / directory:

Package	From	To
huggingface/doc-builder/.github/workflows/build_main_documentation.yml	`0f4784322c564503c4a4d67ccb7fba29e32f111a`	`6108e850ae1cf2f71bb0815a600bcd50c39abfa7`
huggingface/doc-builder/.github/workflows/build_pr_documentation.yml	`0f4784322c564503c4a4d67ccb7fba29e32f111a`	`6108e850ae1cf2f71bb0815a600bcd50c39abfa7`
actions/checkout	`6.0.3`	`7.0.0`
actions/setup-python	`6`	`6.3.0`
trufflesecurity/trufflehog	`3.95.5`	`3.95.9`
huggingface/doc-builder/.github/workflows/upload_pr_documentation.yml	`0f4784322c564503c4a4d67ccb7fba29e32f111a`	`6108e850ae1cf2f71bb0815a600bcd50c39abfa7`

Updates huggingface/doc-builder/.github/workflows/build_main_documentation.yml from 0f4784322c564503c4a4d67ccb7fba29e32f111a to 6108e850ae1cf2f71bb0815a600bcd50c39abfa7

Commits

6108e85 Add reachy_mini mock-deps registry entry (#807)
See full diff in compare view

Updates huggingface/doc-builder/.github/workflows/build_pr_documentation.yml from 0f4784322c564503c4a4d67ccb7fba29e32f111a to 6108e850ae1cf2f71bb0815a600bcd50c39abfa7

Commits

6108e85 Add reachy_mini mock-deps registry entry (#807)
See full diff in compare view

Updates actions/checkout from 6.0.3 to 7.0.0

Release notes

Sourced from actions/checkout's releases.

v7.0.0

What's Changed

block checking out fork pr for pull_request_target and workflow_run by @aiqiaoy in actions/checkout#2454

Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @dependabot[bot] in actions/checkout#2458

Bump flatted from 3.3.1 to 3.4.2 by @dependabot[bot] in actions/checkout#2460

Bump js-yaml from 4.1.0 to 4.2.0 by @dependabot[bot] in actions/checkout#2461

Bump @actions/core and @actions/tool-cache and Remove uuid by @dependabot[bot] in actions/checkout#2459

upgrade module to esm and update dependencies by @aiqiaoy in actions/checkout#2463

Bump the minor-npm-dependencies group across 1 directory with 3 updates by @dependabot[bot] in actions/checkout#2462

getting ready for checkout v7 release by @aiqiaoy in actions/checkout#2464

update error wording by @aiqiaoy in actions/checkout#2467

New Contributors

@aiqiaoy made their first contribution in actions/checkout#2454

Full Changelog: actions/checkout@v6.0.3...v7.0.0

v6.1.0

What's Changed

[BREAKING] backport allow-unsafe-pr-checkout to v6 by @aiqiaoy in actions/checkout#2500

backport fixes to releases-v6 by @aiqiaoy in actions/checkout#2527

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: actions/checkout@v6.0.3...v6.1.0

Commits

3d3c42e prep v7.0.1 release (#2531)
2880268 escape values passed to --unset (#2530)
12cd223 trim only ascii whitespace for branch (#2521)
62661c4 skip running unsafe pr check if input is default (#2518)
e8d4307 Bump the minor-actions-dependencies group with 2 updates (#2499)
631c942 eslint 9 (#2474)
4f1f4ae Bump actions/upload-artifact from 4 to 7 (#2476)
ba09753 Bump actions/checkout from 6 to 7 (#2488)
b9e0990 Bump docker/login-action from 3.3.0 to 4.2.0 (#2479)
e8cb398 Bump docker/build-push-action from 6.5.0 to 7.2.0 (#2478)
Additional commits viewable in compare view

Updates actions/setup-python from 6 to 6.3.0

Release notes

Sourced from actions/setup-python's releases.

v6.3.0

What's Changed

Enhancement

Add RHEL support and include Linux distro in cache keys by @priyagupta108 in actions/setup-python#1323

Fix pip cache error handling on Windows by @priyagupta108 in actions/setup-python#1040

Dependency update

Upgrade minimatch from 3.1.2 to 3.1.5 by @dependabot in actions/setup-python#1281

Upgrade actions dependencies by @gowridurgad with @Copilot in actions/setup-python#1303

Upgrade @actions/cache to 5.1.0, log cache write denied by @jasongin in actions/setup-python#1324

Upgrade dependency versions and test workflow configuration by @HarithaVattikuti in actions/setup-python#1322

Documentation

Update advanced-usage.md by @Dunky-Z in actions/setup-python#811

New Contributors

@gowridurgad with @Copilot made their first contribution in actions/setup-python#1303

@jasongin made their first contribution in actions/setup-python#1324

@Dunky-Z made their first contribution in actions/setup-python#811

Full Changelog: actions/setup-python@v6.2.0...v6.3.0

v6.2.0

What's Changed

Dependency Upgrades

Upgrade dependencies to Node 24 compatible versions by @salmanmkc in actions/setup-python#1259

Upgrade urllib3 from 2.5.0 to 2.6.3 in /__tests__/data by @dependabot in actions/setup-python#1253 and actions/setup-python#1264

Full Changelog: actions/setup-python@v6...v6.2.0

v6.1.0

What's Changed

Enhancements:

Add support for pip-install input by @gowridurgad in actions/setup-python#1201

Add graalpy early-access and windows builds by @timfel in actions/setup-python#880

Dependency and Documentation updates:

Enhanced wording and updated example usage for allow-prereleases by @yarikoptic in actions/setup-python#979

Upgrade urllib3 from 1.26.19 to 2.5.0 and document breaking changes in v6 by @dependabot in actions/setup-python#1139

Upgrade typescript from 5.4.2 to 5.9.3 and Documentation update by @dependabot in actions/setup-python#1094

Upgrade actions/publish-action from 0.3.0 to 0.4.0 & Documentation update for pip-install input by @dependabot in actions/setup-python#1199

Upgrade requests from 2.32.2 to 2.32.4 by @dependabot in actions/setup-python#1130

Upgrade prettier from 3.5.3 to 3.6.2 by @dependabot in actions/setup-python#1234

Upgrade @types/node from 24.1.0 to 24.9.1 and update macos-13 to macos-15-intel by @dependabot in actions/setup-python#1235

New Contributors

@yarikoptic made their first contribution in actions/setup-python#979

Full Changelog: actions/setup-python@v6...v6.1.0

Commits

See full diff in compare view

Updates trufflesecurity/trufflehog from 3.95.5 to 3.95.9

Release notes

Sourced from trufflesecurity/trufflehog's releases.

v3.95.9

What's Changed

feat: add OpenRouter detector by @McPatate in trufflesecurity/trufflehog#4500

Integrations fully codeowns detectors by @trufflesteeeve in trufflesecurity/trufflehog#5104

[INS-332] Add New Relic Insights Insert key detector by @mustansir14 in trufflesecurity/trufflehog#4778

[INS-351] Added Duffel Token Detector by @MuneebUllahKhan222 in trufflesecurity/trufflehog#4795

[INS-341] Added Shippo detector by @MuneebUllahKhan222 in trufflesecurity/trufflehog#4820

[INS-467] Add IPinfo detector to default detectors list by @mustansir14 in trufflesecurity/trufflehog#4970

fix: reject --include-repos/--exclude-repos with --repo in github scan by @kashifkhan0771 in trufflesecurity/trufflehog#5112

[INS-468] Add improved lob detector to defaults.go by @mustansir14 in trufflesecurity/trufflehog#4971

feat(action): add image input to allow registry mirror overrides by @eightseventhreethree in trufflesecurity/trufflehog#4965

feat: Support archived repo exclusion from GH org scans by @hibare in trufflesecurity/trufflehog#4875

[INT-715] Retry transient failures when verifying OpenAI keys by @bill-rich in trufflesecurity/trufflehog#5117

[INS-410] Added batch token detector by @MuneebUllahKhan222 in trufflesecurity/trufflehog#4824

[INT-650] Don't log as error when git diff is too long by @bill-rich in trufflesecurity/trufflehog#5113

New Contributors

@McPatate made their first contribution in trufflesecurity/trufflehog#4500

@eightseventhreethree made their first contribution in trufflesecurity/trufflehog#4965

Full Changelog: trufflesecurity/trufflehog@v3.95.8...v3.95.9

v3.95.8

What's Changed

removed "unauthorized" as exception for rotated graphana secrets by @jordanTunstill in trufflesecurity/trufflehog#5068

fix(azuresastoken): match SAS tokens regardless of parameter order by @genisis0x in trufflesecurity/trufflehog#5043

Add prometheus metrics for engine channels and workers by @mcastorina in trufflesecurity/trufflehog#5095

[INS-465] Skip unverified JWT Detector results when feature flag is enabled by @MuneebUllahKhan222 in trufflesecurity/trufflehog#5072

[INS-334] Octopus Deploy detector by @MuneebUllahKhan222 in trufflesecurity/trufflehog#4787

Fix Syntax error in feature.go by @MuneebUllahKhan222 in trufflesecurity/trufflehog#5109

Include encoded resume info instead of clobbering it by @bill-rich in trufflesecurity/trufflehog#5110

Full Changelog: trufflesecurity/trufflehog@v3.95.7...v3.95.8

v3.95.7

What's Changed

fix(sources/filesystem): order resume comparison by path component by @genisis0x in trufflesecurity/trufflehog#5041

test(handlers): point APK test fixture at trufflehog-test-assets by @amanfcp in trufflesecurity/trufflehog#5053

fixed regex typo that was causing conf uuid's to be surfaced as non-live atlassian secrets. by @jordanTunstill in trufflesecurity/trufflehog#5029

Fix GitHub App cross-org member enumeration using per-installation tokens by @dustin-decker in trufflesecurity/trufflehog#4774

fix: add git worktree support in PrepareRepo by @andoniaf in trufflesecurity/trufflehog#4690

[INS-406] Braintrust detector by @MuneebUllahKhan222 in trufflesecurity/trufflehog#4826

huggingface: add bucket scanning by @julien-c in trufflesecurity/trufflehog#5017

Skip reverification results during deduplication by @mcastorina in trufflesecurity/trufflehog#5069

chore(renovate): bump shared config to v1.0.3 by @bryanbeverly in trufflesecurity/trufflehog#5044

Add scan_all_installations option for multi-org GitHub App scanning by @dustin-decker in trufflesecurity/trufflehog#4775

Expose SecretParts in the JSON output by @bradlarsen in trufflesecurity/trufflehog#5073

[INS-497] Add Pganalyze Read Key Detector by @MuneebUllahKhan222 in trufflesecurity/trufflehog#4993

[INS-197] Add redhatpyxis api key detector by @MuneebUllahKhan222 in trufflesecurity/trufflehog#4995

... (truncated)

Commits

27b0417 Don't log as error when git diff is too long (#5113)
d328285 [INS-410] Added batch token detector (#4824)
33d9dad [INT-715] Retry transient failures when verifying OpenAI keys (#5117)
d7dcc6d feat: Support archived repo exclusion from GH org scans (#4875)
f845f18 feat(action): add image input to allow registry mirror overrides (#4965)
6c97970 [INS-468] Add improved lob detector to defaults.go (#4971)
1675e17 fix: reject --include-repos/--exclude-repos with --repo in github scan (#5112)
5c27626 [INS-467] Add IPinfo detector to default detectors list (#4970)
53e6391 [INS-341] Added Shippo detector (#4820)
d3b5487 [INS-351] Added Duffel Token Detector (#4795)
Additional commits viewable in compare view

Updates huggingface/doc-builder/.github/workflows/upload_pr_documentation.yml from 0f4784322c564503c4a4d67ccb7fba29e32f111a to 6108e850ae1cf2f71bb0815a600bcd50c39abfa7

Commits

6108e85 Add reachy_mini mock-deps registry entry (#807)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the actions group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [huggingface/doc-builder/.github/workflows/build_main_documentation.yml](https://github.com/huggingface/doc-builder) | `0f4784322c564503c4a4d67ccb7fba29e32f111a` | `6108e850ae1cf2f71bb0815a600bcd50c39abfa7` | | [huggingface/doc-builder/.github/workflows/build_pr_documentation.yml](https://github.com/huggingface/doc-builder) | `0f4784322c564503c4a4d67ccb7fba29e32f111a` | `6108e850ae1cf2f71bb0815a600bcd50c39abfa7` | | [actions/checkout](https://github.com/actions/checkout) | `6.0.3` | `7.0.0` | | [actions/setup-python](https://github.com/actions/setup-python) | `6` | `6.3.0` | | [trufflesecurity/trufflehog](https://github.com/trufflesecurity/trufflehog) | `3.95.5` | `3.95.9` | | [huggingface/doc-builder/.github/workflows/upload_pr_documentation.yml](https://github.com/huggingface/doc-builder) | `0f4784322c564503c4a4d67ccb7fba29e32f111a` | `6108e850ae1cf2f71bb0815a600bcd50c39abfa7` | Updates `huggingface/doc-builder/.github/workflows/build_main_documentation.yml` from 0f4784322c564503c4a4d67ccb7fba29e32f111a to 6108e850ae1cf2f71bb0815a600bcd50c39abfa7 - [Release notes](https://github.com/huggingface/doc-builder/releases) - [Commits](huggingface/doc-builder@0f47843...6108e85) Updates `huggingface/doc-builder/.github/workflows/build_pr_documentation.yml` from 0f4784322c564503c4a4d67ccb7fba29e32f111a to 6108e850ae1cf2f71bb0815a600bcd50c39abfa7 - [Release notes](https://github.com/huggingface/doc-builder/releases) - [Commits](huggingface/doc-builder@0f47843...6108e85) Updates `actions/checkout` from 6.0.3 to 7.0.0 - [Release notes](https://github.com/actions/checkout/releases) - [Commits](actions/checkout@v6.0.3...v7) Updates `actions/setup-python` from 6 to 6.3.0 - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](actions/setup-python@v6...v6.3.0) Updates `trufflesecurity/trufflehog` from 3.95.5 to 3.95.9 - [Release notes](https://github.com/trufflesecurity/trufflehog/releases) - [Commits](trufflesecurity/trufflehog@d411fff...27b0417) Updates `huggingface/doc-builder/.github/workflows/upload_pr_documentation.yml` from 0f4784322c564503c4a4d67ccb7fba29e32f111a to 6108e850ae1cf2f71bb0815a600bcd50c39abfa7 - [Release notes](https://github.com/huggingface/doc-builder/releases) - [Commits](huggingface/doc-builder@0f47843...6108e85) --- updated-dependencies: - dependency-name: huggingface/doc-builder/.github/workflows/build_main_documentation.yml dependency-version: 6108e850ae1cf2f71bb0815a600bcd50c39abfa7 dependency-type: direct:production dependency-group: actions - dependency-name: huggingface/doc-builder/.github/workflows/build_pr_documentation.yml dependency-version: 6108e850ae1cf2f71bb0815a600bcd50c39abfa7 dependency-type: direct:production dependency-group: actions - dependency-name: actions/checkout dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/setup-python dependency-version: 6.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: trufflesecurity/trufflehog dependency-version: 3.95.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: huggingface/doc-builder/.github/workflows/upload_pr_documentation.yml dependency-version: 6108e850ae1cf2f71bb0815a600bcd50c39abfa7 dependency-type: direct:production dependency-group: actions ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jul 21, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the actions group across 1 directory with 6 updates#2558

Bump the actions group across 1 directory with 6 updates#2558
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions-19dca6f032

dependabot Bot commented on behalf of github Jul 21, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 21, 2026

v7.0.0

What's Changed

New Contributors

v6.1.0

What's Changed

v6.3.0

What's Changed

Enhancement

Dependency update

Documentation

New Contributors

v6.2.0

What's Changed

Dependency Upgrades

v6.1.0

What's Changed

Enhancements:

Dependency and Documentation updates:

New Contributors

v3.95.9

What's Changed

New Contributors

v3.95.8

What's Changed

v3.95.7

What's Changed

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants