Skip to content

build(deps): bump the actions group across 1 directory with 2 updates#139

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions-5531dce30a
Open

build(deps): bump the actions group across 1 directory with 2 updates#139
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions-5531dce30a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 8, 2026

Copy link
Copy Markdown
Contributor

Bumps the actions group with 2 updates in the / directory: docker/setup-buildx-action and openai/codex-action.

Updates docker/setup-buildx-action from 4.1.0 to 4.2.0

Release notes

Sourced from docker/setup-buildx-action's releases.

v4.2.0

Full Changelog: docker/setup-buildx-action@v4.1.0...v4.2.0

Commits
  • bb05f3f Merge pull request #580 from docker/dependabot/npm_and_yarn/docker/actions-to...
  • 321c814 [dependabot skip] chore: update generated content
  • b9a36ef build(deps): bump @​docker/actions-toolkit from 0.91.0 to 0.92.0
  • ebeab24 Merge pull request #570 from docker/dependabot/npm_and_yarn/undici-6.27.0
  • 5c7b8ae [dependabot skip] chore: update generated content
  • 037e618 build(deps): bump undici from 6.25.0 to 6.27.0
  • 66080e5 Merge pull request #577 from docker/dependabot/npm_and_yarn/sigstore-4.1.1
  • 409aef0 Merge pull request #562 from docker/dependabot/npm_and_yarn/js-yaml-4.2.0
  • 49c6e42 build(deps): bump sigstore from 4.1.0 to 4.1.1
  • 2211273 [dependabot skip] chore: update generated content
  • Additional commits viewable in compare view

Updates openai/codex-action from 1.8 to 1.11

Changelog

Sourced from openai/codex-action's changelog.

codex-action Changelog

v1.11 (2026-07-04)

  • #116 keep the permission profile helper backward compatible

v1.10 (2026-07-02)

  • #113 add Codex permission profile support

v1.9 (2026-06-22)

  • #85 update the internal setup-node pin to v6.3.0

v1.8 (2026-04-29)

  • #91 tighten what bots are allowed

v1.7 (2026-04-24)

  • #89 restrict bot permission bypass

v1.6 (2026-03-16)

  • #77 enable GitHub-hosted Linux bubblewrap support

v1.5 (2026-03-16)

  • #74 harden shell interpolation in action workflows

v1.4 (2025-11-19)

  • #58 revert #56 and use the latest stable version of Codex CLI again

v1.3 (2025-11-19)

  • #56 temporarily set the default version of Codex CLI to 0.58.0

v1.2 (2025-11-07)

  • #52 add baseUrl to Octokit constructor, if appropriate, for GHE

v1.1 (2025-11-05)

  • #47 added support for Azure via the new responses-api-endpoint parameter
  • #36 added effort parameter
  • #45 pin the commit hash of the actions/setup-node action used by openai/codex-action

v1.0 (2025-10-06)

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jul 8, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions-5531dce30a branch from 066c8e9 to 973763e Compare July 15, 2026 16:45
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions-5531dce30a branch from 973763e to c1b1ee4 Compare July 20, 2026 18:52
Bumps the actions group with 2 updates in the / directory: [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) and [openai/codex-action](https://github.com/openai/codex-action).


Updates `docker/setup-buildx-action` from 4.1.0 to 4.2.0
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](docker/setup-buildx-action@d7f5e7f...bb05f3f)

Updates `openai/codex-action` from 1.8 to 1.11
- [Changelog](https://github.com/openai/codex-action/blob/main/CHANGELOG.md)
- [Commits](openai/codex-action@e0fdf01...52fe01e)

---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: openai/codex-action
  dependency-version: '1.11'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions-5531dce30a branch from c1b1ee4 to d2c29f5 Compare July 22, 2026 16:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants