chore(deps): bump the github-actions group across 1 directory with 4 updates by dependabot[bot] · Pull Request #97 · geolonia/.github

dependabot · 2026-07-20T18:46:52Z

Bumps the github-actions group with 4 updates in the / directory: geolonia/.github/.github/workflows/reusable-backstage-techdocs.yml, actions/setup-python, aws-actions/configure-aws-credentials and geolonia/.github/.github/workflows/reusable-route-issue.yml.

Updates geolonia/.github/.github/workflows/reusable-backstage-techdocs.yml from 1.16.0 to 1.34.0

Release notes

Sourced from geolonia/.github/.github/workflows/reusable-backstage-techdocs.yml's releases.

v1.34.0

What's Changed

feat(techdocs): allow AWS account ID via vars (drop caller secrets block) by @dkastl in geolonia/.github#95

Full Changelog: v1...v1.34.0

v1.33.0

What's Changed

feat: fail the Security Suite on error-severity findings by @dkastl in geolonia/.github#93

Full Changelog: v1...v1.33.0

v1.32.0

What's Changed

fix: float suite refs on @v1 + keep v1 lightweight + document the real root cause by @dkastl in geolonia/.github#92

Full Changelog: v1.31...v1.32.0

v1.31.0

What's Changed

fix: bump required-workflow ref to v1.30.0 (whole tree now immutable) [2/2] by @dkastl in geolonia/.github#90

Full Changelog: v1...v1.31.0

v1.30.0

What's Changed

fix: SHA-pin suite sub-reusables (required-workflow tree must be immutable) [1/2] by @dkastl in geolonia/.github#89

Full Changelog: v1...v1.30.0

v1.29.0

What's Changed

fix: pin required-workflow reusable ref to a SHA (unbreak org-wide Security Suite) by @dkastl in geolonia/.github#88

Full Changelog: v1...v1.29.0

v1.28.0

What's Changed

fix: drive geolonia/.github zizmor findings to zero (harden shared workflows) by @dkastl in geolonia/.github#87

Full Changelog: v1...v1.28.0

v1.27.0

... (truncated)

Commits

6793909 feat(techdocs): allow AWS account ID via vars, not just secrets (#95)
0d06c91 feat: fail the Security Suite on error-severity findings (TODO 2) (#93)
bc7186f fix: float suite refs on @v1 + keep v1 lightweight + document the real root c...
e247b95 fix: bump required-workflow ref to v1.30.0 (whole tree now immutable) [2/2] (...
76db4b3 fix: SHA-pin suite sub-reusables (required-workflow tree must be immutable) [...
0d7d0f2 fix: pin required-workflow reusable ref to a SHA (unbreak org-wide suite) (#88)
82a98a9 fix: drive geolonia/.github zizmor findings to zero (harden shared workflows)...
82a16d0 feat: float Security Suite self-references on @v1 (end the release treadmill)...
0a6c079 feat: show zizmor severity breakdown (errors/warnings/notices) (#85)
21fe5e0 chore: bump suite callers to reusable-security-suite@v1.25.0 (#84)
Additional commits viewable in compare view

Updates actions/setup-python from 6.2.0 to 6.3.0

Release notes

Sourced from actions/setup-python's releases.

v6.3.0

What's Changed

Enhancement

Add RHEL support and include Linux distro in cache keys by @priyagupta108 in actions/setup-python#1323

Fix pip cache error handling on Windows by @priyagupta108 in actions/setup-python#1040

Dependency update

Upgrade minimatch from 3.1.2 to 3.1.5 by @dependabot in actions/setup-python#1281

Upgrade actions dependencies by @gowridurgad with @Copilot in actions/setup-python#1303

Upgrade @actions/cache to 5.1.0, log cache write denied by @jasongin in actions/setup-python#1324

Upgrade dependency versions and test workflow configuration by @HarithaVattikuti in actions/setup-python#1322

Documentation

Update advanced-usage.md by @Dunky-Z in actions/setup-python#811

New Contributors

@gowridurgad with @Copilot made their first contribution in actions/setup-python#1303

@jasongin made their first contribution in actions/setup-python#1324

@Dunky-Z made their first contribution in actions/setup-python#811

Full Changelog: actions/setup-python@v6.2.0...v6.3.0

Commits

ece7cb0 Fix pip cache error handling on Windows. (#1040)
1d18d7a Update advanced-usage.md (#811)
d2b357a Update dependency versions and test workflow configuration (#1322)
8f639b1 Merge pull request #1324 from jasongin/update-actions-cache-5.1.0
6731c2b Resolve high-severity audit issues
0cb1a84 Add RHEL support and include Linux distro in cache keys (#1323)
dc6eab6 Update dist
6f4b74b Strict equality
fa8bde1 Bump @actions/cache to 5.1.0, log cache write denied
c8813ba Upgrade @actions dependencies and update licenses (#1303)
Additional commits viewable in compare view

Updates aws-actions/configure-aws-credentials from 6.2.0 to 6.2.2

Release notes

Sourced from aws-actions/configure-aws-credentials's releases.

v6.2.2

6.2.2 (2026-07-07)

Miscellaneous Chores

release 6.2.2 (d01d678)

v6.2.1

6.2.1 (2026-06-26)

Bug Fixes

enforce allowed-account-ids on all auth paths (#1847) (4d281fb)

Changelog

Sourced from aws-actions/configure-aws-credentials's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

6.2.2 (2026-07-07)

Miscellaneous Chores

release 6.2.2 (d01d678)

6.2.1 (2026-06-26)

Bug Fixes

enforce allowed-account-ids on all auth paths (#1847) (4d281fb)

6.2.0 (2026-06-01)

Features

add additional session tags by default (#1775) (e0ba768)

add more retry logic and better logging (#1764) (540d0c1)

add regex validation to role-session-name (#1765) (e354499)

Allow custom session tags to be passed when assuming a role (#1759) (61f50f6)

expose run id in STS client user-agent (#1774) (29d1be3)

support custom STS endpoints (#1762) (8d52d05)

Bug Fixes

skip credential check on output-env-credentials: false (#1778) (58e7c47)

assumeRole failing from session tag size too large (#1808) (d6f5dc3)

6.1.3 (2026-05-28)

Bug Fixes

fix: allow kubelet token symlink in #1805

6.1.2 (2026-05-26)

Bug Fixes

additional filesystem checks (#1799) (c39f282)

6.1.1 (2026-05-05)

Miscellaneous Chores

... (truncated)

Commits

517a711 chore(main): release 6.2.2 (#1876)
d01d678 chore: release 6.2.2
8efa52b chore(deps-dev): bump vitest dependencies (#1874)
8e1eed5 chore(deps-dev): bump @smithy/property-provider from 4.4.4 to 4.4.6 (#1869)
112421a chore(deps-dev): bump @biomejs/biome from 2.5.1 to 2.5.2 (#1868)
fbc01c6 chore(deps-dev): bump @types/node from 26.0.1 to 26.1.0 (#1871)
b12ca87 chore(deps-dev): bump memfs from 4.57.8 to 4.58.0 (#1873)
d314f7f chore: Update dist
a53b65b chore(deps): bump @aws-sdk/client-sts from 3.1076.0 to 3.1080.0 (#1867)
338d2c1 chore(deps-dev): bump sigstore from 4.1.0 to 4.1.1 (#1864)
Additional commits viewable in compare view

Updates geolonia/.github/.github/workflows/reusable-route-issue.yml from 1.16.0 to 1.34.0

Release notes

Sourced from geolonia/.github/.github/workflows/reusable-route-issue.yml's releases.

v1.34.0

What's Changed

feat(techdocs): allow AWS account ID via vars (drop caller secrets block) by @dkastl in geolonia/.github#95

Full Changelog: v1...v1.34.0

v1.33.0

What's Changed

feat: fail the Security Suite on error-severity findings by @dkastl in geolonia/.github#93

Full Changelog: v1...v1.33.0

v1.32.0

What's Changed

fix: float suite refs on @v1 + keep v1 lightweight + document the real root cause by @dkastl in geolonia/.github#92

Full Changelog: v1.31...v1.32.0

v1.31.0

What's Changed

fix: bump required-workflow ref to v1.30.0 (whole tree now immutable) [2/2] by @dkastl in geolonia/.github#90

Full Changelog: v1...v1.31.0

v1.30.0

What's Changed

fix: SHA-pin suite sub-reusables (required-workflow tree must be immutable) [1/2] by @dkastl in geolonia/.github#89

Full Changelog: v1...v1.30.0

v1.29.0

What's Changed

fix: pin required-workflow reusable ref to a SHA (unbreak org-wide Security Suite) by @dkastl in geolonia/.github#88

Full Changelog: v1...v1.29.0

v1.28.0

What's Changed

fix: drive geolonia/.github zizmor findings to zero (harden shared workflows) by @dkastl in geolonia/.github#87

Full Changelog: v1...v1.28.0

v1.27.0

... (truncated)

Commits

6793909 feat(techdocs): allow AWS account ID via vars, not just secrets (#95)
0d06c91 feat: fail the Security Suite on error-severity findings (TODO 2) (#93)
bc7186f fix: float suite refs on @v1 + keep v1 lightweight + document the real root c...
e247b95 fix: bump required-workflow ref to v1.30.0 (whole tree now immutable) [2/2] (...
76db4b3 fix: SHA-pin suite sub-reusables (required-workflow tree must be immutable) [...
0d7d0f2 fix: pin required-workflow reusable ref to a SHA (unbreak org-wide suite) (#88)
82a98a9 fix: drive geolonia/.github zizmor findings to zero (harden shared workflows)...
82a16d0 feat: float Security Suite self-references on @v1 (end the release treadmill)...
0a6c079 feat: show zizmor severity breakdown (errors/warnings/notices) (#85)
21fe5e0 chore: bump suite callers to reusable-security-suite@v1.25.0 (#84)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Summary by CodeRabbit

Chores
- Updated automated publishing, deployment monitoring, and issue-routing workflows to use newer action versions.
- Improved the reliability and maintainability of TechDocs publishing and AWS credential configuration.
- Preserved existing workflow behavior, permissions, triggers, and routing configuration.

…updates Bumps the github-actions group with 4 updates in the / directory: [geolonia/.github/.github/workflows/reusable-backstage-techdocs.yml](https://github.com/geolonia/.github), [actions/setup-python](https://github.com/actions/setup-python), [aws-actions/configure-aws-credentials](https://github.com/aws-actions/configure-aws-credentials) and [geolonia/.github/.github/workflows/reusable-route-issue.yml](https://github.com/geolonia/.github). Updates `geolonia/.github/.github/workflows/reusable-backstage-techdocs.yml` from 1.16.0 to 1.34.0 - [Release notes](https://github.com/geolonia/.github/releases) - [Commits](92c8c6d...6793909) Updates `actions/setup-python` from 6.2.0 to 6.3.0 - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](actions/setup-python@a309ff8...ece7cb0) Updates `aws-actions/configure-aws-credentials` from 6.2.0 to 6.2.2 - [Release notes](https://github.com/aws-actions/configure-aws-credentials/releases) - [Changelog](https://github.com/aws-actions/configure-aws-credentials/blob/main/CHANGELOG.md) - [Commits](aws-actions/configure-aws-credentials@e7f100c...517a711) Updates `geolonia/.github/.github/workflows/reusable-route-issue.yml` from 1.16.0 to 1.34.0 - [Release notes](https://github.com/geolonia/.github/releases) - [Commits](92c8c6d...6793909) --- updated-dependencies: - dependency-name: geolonia/.github/.github/workflows/reusable-backstage-techdocs.yml dependency-version: 1.34.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: actions/setup-python dependency-version: 6.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: aws-actions/configure-aws-credentials dependency-version: 6.2.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: geolonia/.github/.github/workflows/reusable-route-issue.yml dependency-version: 1.34.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com>

coderabbitai · 2026-07-20T18:47:22Z

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: ASSERTIVE

Plan: Pro

Run ID: 701099d5-c124-47a9-9383-9023558819ea

📥 Commits

Reviewing files that changed from the base of the PR and between 6793909 and 215b9ac.

📒 Files selected for processing (4)

.github/workflows/publish-techdocs.yml
.github/workflows/reusable-backstage-techdocs.yml
.github/workflows/reusable-cdk-deploy-monitor.yml
.github/workflows/route-issue.yml

Walkthrough

GitHub Actions references are updated to newer pinned revisions for TechDocs publishing, CDK deployment monitoring, and issue routing workflows. Existing workflow structure, permissions, credentials configuration, and command logic remain unchanged.

Changes

Workflow pin updates

Layer / File(s)	Summary
Action version updates `.github/workflows/reusable-backstage-techdocs.yml`, `.github/workflows/reusable-cdk-deploy-monitor.yml`	Updates `actions/setup-python` to v6.3.0 and `aws-actions/configure-aws-credentials` to v6.2.2.
Reusable workflow reference updates `.github/workflows/publish-techdocs.yml`, `.github/workflows/route-issue.yml`	Updates reusable workflow references from v1.16.0 to v1.34.0.

Estimated code review effort: 1 (Trivial) | ~3 minutes

Suggested reviewers: dkastl

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title matches the PR’s main change: a Dependabot bump of four GitHub Actions updates in .github/workflows.
Description check	✅ Passed	The description clearly summarizes the four dependency updates and includes release-note details, so it is mostly complete.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

Create PR with unit tests
Commit unit tests in branch dependabot/github_actions/github-actions-c4548a47a6

_{Comment @coderabbitai help to get the list of available commands.}

github-actions · 2026-07-20T18:47:25Z

🛡️ Security suite

Check	Result
✅ Supply chain · `bumblebee`	No exposure matches
✅ Secrets · `betterleaks`	No secrets in diff
✅ Action pinning · `pinact`	All actions pinned
✅ Actions audit · `zizmor`	No findings

Note

All security checks passed.

_{Updated for 215b9ac · workflow run}

dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jul 20, 2026

dkastl merged commit 7ae6278 into main Jul 21, 2026
6 checks passed

dkastl deleted the dependabot/github_actions/github-actions-c4548a47a6 branch July 21, 2026 22:17

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump the github-actions group across 1 directory with 4 updates#97

chore(deps): bump the github-actions group across 1 directory with 4 updates#97
dkastl merged 1 commit into
mainfrom
dependabot/github_actions/github-actions-c4548a47a6

dependabot Bot commented on behalf of github Jul 20, 2026 •

edited by coderabbitai Bot

Loading

Uh oh!

coderabbitai Bot commented Jul 20, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Jul 20, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 20, 2026 • edited by coderabbitai Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v1.34.0

What's Changed

v1.33.0

What's Changed

v1.32.0

What's Changed

v1.31.0

What's Changed

v1.30.0

What's Changed

v1.29.0

What's Changed

v1.28.0

What's Changed

v1.27.0

v6.3.0

What's Changed

Enhancement

Dependency update

Documentation

New Contributors

v6.2.2

6.2.2 (2026-07-07)

Miscellaneous Chores

v6.2.1

6.2.1 (2026-06-26)

Bug Fixes

Changelog

6.2.2 (2026-07-07)

Miscellaneous Chores

6.2.1 (2026-06-26)

Bug Fixes

6.2.0 (2026-06-01)

Features

Bug Fixes

6.1.3 (2026-05-28)

Bug Fixes

6.1.2 (2026-05-26)

Bug Fixes

6.1.1 (2026-05-05)

Miscellaneous Chores

v1.34.0

What's Changed

v1.33.0

What's Changed

v1.32.0

What's Changed

v1.31.0

What's Changed

v1.30.0

What's Changed

v1.29.0

What's Changed

v1.28.0

What's Changed

v1.27.0

Summary by CodeRabbit

Uh oh!

coderabbitai Bot commented Jul 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Walkthrough

Changes

Uh oh!

github-actions Bot commented Jul 20, 2026

🛡️ Security suite

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Jul 20, 2026 •

edited by coderabbitai Bot

Loading

coderabbitai Bot commented Jul 20, 2026 •

edited

Loading