build(deps): bump the github-actions group with 5 updates by dependabot[bot] · Pull Request #121 · codefly-dev/service-object-storage

dependabot · 2026-10-30T10:15:25Z

Bumps the github-actions group with 5 updates:

Package	From	To
codefly-dev/core/.github/workflows/agent-ci.yml	`0.19.5`	`0.19.8`
codefly-dev/core/.github/workflows/go-service-ci.yml	`0.19.5`	`0.19.8`
codefly-dev/core/.github/actions/publish-service-image	`0.19.5`	`0.19.8`
docker/login-action	`4.6.0`	`4.7.0`
codefly-dev/core/.github/workflows/go-service-release.yml	`0.19.5`	`0.19.8`

Updates codefly-dev/core/.github/workflows/agent-ci.yml from 0.19.5 to 0.19.8

Release notes

Sourced from codefly-dev/core/.github/workflows/agent-ci.yml's releases.

v0.19.8

CLI-agent compatibility

Protocol version: 1 (independent of the Core module version). Startup protocol version: 2. Server capabilities: container-recovery-scope/v1.

Contract unchanged from v0.19.7. No agent rebuild is required solely for this Core bump.

Host-supported operation contracts: artifact-execution/v1, codefly.dev/docker-build-recipe/v4, codefly.dev/docker-build-recipe/v5, codefly.dev/docker-build-recipe/v6, configuration-value-template/v1, deployment-composition-provenance/v1, runtime-backend-declaration/v1, runtime-init-dependency-mappings/v1, runtime-init-image/v1, runtime-started-artifact/v1. This is not an executor advertisement. Selected executors must implement and advertise the required operation contract before dispatch.

The CLI selects required capabilities for each operation. A matching protocol does not replace capability checks or this run's recovery-scope acknowledgement.

v0.19.7

CLI-agent compatibility

Protocol version: 1 (independent of the Core module version). Startup protocol version: 2. Server capabilities: container-recovery-scope/v1.

Contract unchanged from v0.19.6. No agent rebuild is required solely for this Core bump.

Host-supported operation contracts: artifact-execution/v1, codefly.dev/docker-build-recipe/v4, codefly.dev/docker-build-recipe/v5, codefly.dev/docker-build-recipe/v6, configuration-value-template/v1, deployment-composition-provenance/v1, runtime-backend-declaration/v1, runtime-init-dependency-mappings/v1, runtime-init-image/v1, runtime-started-artifact/v1. This is not an executor advertisement. Selected executors must implement and advertise the required operation contract before dispatch.

The CLI selects required capabilities for each operation. A matching protocol does not replace capability checks or this run's recovery-scope acknowledgement.

v0.19.6

CLI-agent compatibility

Protocol version: 1 (independent of the Core module version). Startup protocol version: 2. Server capabilities: container-recovery-scope/v1.

Contract unchanged from v0.19.5. No agent rebuild is required solely for this Core bump.

Host-supported operation contracts: artifact-execution/v1, codefly.dev/docker-build-recipe/v4, codefly.dev/docker-build-recipe/v5, codefly.dev/docker-build-recipe/v6, configuration-value-template/v1, deployment-composition-provenance/v1, runtime-init-dependency-mappings/v1, runtime-init-image/v1, runtime-started-artifact/v1. This is not an executor advertisement. Selected executors must implement and advertise the required operation contract before dispatch.

The CLI selects required capabilities for each operation. A matching protocol does not replace capability checks or this run's recovery-scope acknowledgement.

Commits

a06da5f release: v0.19.8 with durable runtime ownership and verified acquisition (#819)
5ec1112 feat(imagepolicy): add target policies and CGO-aware semantic options (#859)
557f6a3 Merge pull request #858 from codefly-dev/release/v0.19.7
b84a56b release: v0.19.7 — the Darwin boot id names the boot session, not the clock (...
b71ee8c Merge pull request #856 from gael-obin/fix/foreign-method-service-selector
fa6e1ae fix(module): allow foreign methods to select their serving service
a30335b Merge pull request #821 from codefly-dev/issue-820-a-plugin-cannot-declare-wh...
a8599bd Merge pull request #802 from codefly-dev/fix/darwin-boot-id-drifts-with-clock
276e54d Merge pull request #806 from codefly-dev/fix/tool-proposal-without-continuation
7ea404b Merge pull request #824 from codefly-dev/build/goreleaser-action-7.3.0
Additional commits viewable in compare view

Updates codefly-dev/core/.github/workflows/go-service-ci.yml from 0.19.5 to 0.19.8

Release notes

Sourced from codefly-dev/core/.github/workflows/go-service-ci.yml's releases.

v0.19.8

CLI-agent compatibility

Protocol version: 1 (independent of the Core module version). Startup protocol version: 2. Server capabilities: container-recovery-scope/v1.

Contract unchanged from v0.19.7. No agent rebuild is required solely for this Core bump.

Host-supported operation contracts: artifact-execution/v1, codefly.dev/docker-build-recipe/v4, codefly.dev/docker-build-recipe/v5, codefly.dev/docker-build-recipe/v6, configuration-value-template/v1, deployment-composition-provenance/v1, runtime-backend-declaration/v1, runtime-init-dependency-mappings/v1, runtime-init-image/v1, runtime-started-artifact/v1. This is not an executor advertisement. Selected executors must implement and advertise the required operation contract before dispatch.

The CLI selects required capabilities for each operation. A matching protocol does not replace capability checks or this run's recovery-scope acknowledgement.

v0.19.7

CLI-agent compatibility

Protocol version: 1 (independent of the Core module version). Startup protocol version: 2. Server capabilities: container-recovery-scope/v1.

Contract unchanged from v0.19.6. No agent rebuild is required solely for this Core bump.

Host-supported operation contracts: artifact-execution/v1, codefly.dev/docker-build-recipe/v4, codefly.dev/docker-build-recipe/v5, codefly.dev/docker-build-recipe/v6, configuration-value-template/v1, deployment-composition-provenance/v1, runtime-backend-declaration/v1, runtime-init-dependency-mappings/v1, runtime-init-image/v1, runtime-started-artifact/v1. This is not an executor advertisement. Selected executors must implement and advertise the required operation contract before dispatch.

The CLI selects required capabilities for each operation. A matching protocol does not replace capability checks or this run's recovery-scope acknowledgement.

v0.19.6

CLI-agent compatibility

Protocol version: 1 (independent of the Core module version). Startup protocol version: 2. Server capabilities: container-recovery-scope/v1.

Contract unchanged from v0.19.5. No agent rebuild is required solely for this Core bump.

Host-supported operation contracts: artifact-execution/v1, codefly.dev/docker-build-recipe/v4, codefly.dev/docker-build-recipe/v5, codefly.dev/docker-build-recipe/v6, configuration-value-template/v1, deployment-composition-provenance/v1, runtime-init-dependency-mappings/v1, runtime-init-image/v1, runtime-started-artifact/v1. This is not an executor advertisement. Selected executors must implement and advertise the required operation contract before dispatch.

The CLI selects required capabilities for each operation. A matching protocol does not replace capability checks or this run's recovery-scope acknowledgement.

Commits

a06da5f release: v0.19.8 with durable runtime ownership and verified acquisition (#819)
5ec1112 feat(imagepolicy): add target policies and CGO-aware semantic options (#859)
557f6a3 Merge pull request #858 from codefly-dev/release/v0.19.7
b84a56b release: v0.19.7 — the Darwin boot id names the boot session, not the clock (...
b71ee8c Merge pull request #856 from gael-obin/fix/foreign-method-service-selector
fa6e1ae fix(module): allow foreign methods to select their serving service
a30335b Merge pull request #821 from codefly-dev/issue-820-a-plugin-cannot-declare-wh...
a8599bd Merge pull request #802 from codefly-dev/fix/darwin-boot-id-drifts-with-clock
276e54d Merge pull request #806 from codefly-dev/fix/tool-proposal-without-continuation
7ea404b Merge pull request #824 from codefly-dev/build/goreleaser-action-7.3.0
Additional commits viewable in compare view

Updates codefly-dev/core/.github/actions/publish-service-image from 0.19.5 to 0.19.8

Release notes

Sourced from codefly-dev/core/.github/actions/publish-service-image's releases.

v0.19.8

CLI-agent compatibility

Protocol version: 1 (independent of the Core module version). Startup protocol version: 2. Server capabilities: container-recovery-scope/v1.

Contract unchanged from v0.19.7. No agent rebuild is required solely for this Core bump.

Host-supported operation contracts: artifact-execution/v1, codefly.dev/docker-build-recipe/v4, codefly.dev/docker-build-recipe/v5, codefly.dev/docker-build-recipe/v6, configuration-value-template/v1, deployment-composition-provenance/v1, runtime-backend-declaration/v1, runtime-init-dependency-mappings/v1, runtime-init-image/v1, runtime-started-artifact/v1. This is not an executor advertisement. Selected executors must implement and advertise the required operation contract before dispatch.

The CLI selects required capabilities for each operation. A matching protocol does not replace capability checks or this run's recovery-scope acknowledgement.

v0.19.7

CLI-agent compatibility

Protocol version: 1 (independent of the Core module version). Startup protocol version: 2. Server capabilities: container-recovery-scope/v1.

Contract unchanged from v0.19.6. No agent rebuild is required solely for this Core bump.

Host-supported operation contracts: artifact-execution/v1, codefly.dev/docker-build-recipe/v4, codefly.dev/docker-build-recipe/v5, codefly.dev/docker-build-recipe/v6, configuration-value-template/v1, deployment-composition-provenance/v1, runtime-backend-declaration/v1, runtime-init-dependency-mappings/v1, runtime-init-image/v1, runtime-started-artifact/v1. This is not an executor advertisement. Selected executors must implement and advertise the required operation contract before dispatch.

The CLI selects required capabilities for each operation. A matching protocol does not replace capability checks or this run's recovery-scope acknowledgement.

v0.19.6

CLI-agent compatibility

Protocol version: 1 (independent of the Core module version). Startup protocol version: 2. Server capabilities: container-recovery-scope/v1.

Contract unchanged from v0.19.5. No agent rebuild is required solely for this Core bump.

Host-supported operation contracts: artifact-execution/v1, codefly.dev/docker-build-recipe/v4, codefly.dev/docker-build-recipe/v5, codefly.dev/docker-build-recipe/v6, configuration-value-template/v1, deployment-composition-provenance/v1, runtime-init-dependency-mappings/v1, runtime-init-image/v1, runtime-started-artifact/v1. This is not an executor advertisement. Selected executors must implement and advertise the required operation contract before dispatch.

The CLI selects required capabilities for each operation. A matching protocol does not replace capability checks or this run's recovery-scope acknowledgement.

Commits

a06da5f release: v0.19.8 with durable runtime ownership and verified acquisition (#819)
5ec1112 feat(imagepolicy): add target policies and CGO-aware semantic options (#859)
557f6a3 Merge pull request #858 from codefly-dev/release/v0.19.7
b84a56b release: v0.19.7 — the Darwin boot id names the boot session, not the clock (...
b71ee8c Merge pull request #856 from gael-obin/fix/foreign-method-service-selector
fa6e1ae fix(module): allow foreign methods to select their serving service
a30335b Merge pull request #821 from codefly-dev/issue-820-a-plugin-cannot-declare-wh...
a8599bd Merge pull request #802 from codefly-dev/fix/darwin-boot-id-drifts-with-clock
276e54d Merge pull request #806 from codefly-dev/fix/tool-proposal-without-continuation
7ea404b Merge pull request #824 from codefly-dev/build/goreleaser-action-7.3.0
Additional commits viewable in compare view

Updates docker/login-action from 4.6.0 to 4.7.0

Release notes

Sourced from docker/login-action's releases.

v4.7.0

Preserve explicit ECR settings in registry-auth by @crazy-max in docker/login-action#1089

Use registry hosts for scoped credentials by @crazy-max in docker/login-action#1088

Raise Docker Hub OIDC max expiry to 6 hours by @crazy-max in docker/login-action#1068

Log Docker Hub OIDC token exchange progress by @crazy-max in docker/login-action#1061

Bump @aws-sdk/client-ecr and @aws-sdk/client-ecr-public to 3.1154.0 in docker/login-action#1093

Bump @docker/actions-toolkit from 0.94.0 to 0.107.0 in docker/login-action#1100

Bump @humanfs/node from 0.16.7 to 0.16.8 in docker/login-action#1077

Bump csv-parse from 7.0.1 to 7.0.3 in docker/login-action#1078

Bump handlebars from 4.7.9 to 4.7.10 in docker/login-action#1091

Bump js-yaml from 5.2.2 to 5.5.0 in docker/login-action#1066

Bump postcss from 8.5.22 to 8.5.26 in docker/login-action#1071

Bump postcss-selector-parser from 7.1.1 to 7.1.6 in docker/login-action#1092

Bump source-map-js from 1.2.1 to 1.2.2 in docker/login-action#1090

Bump undici from 6.27.0 to 6.29.1 in docker/login-action#1085

Bump uuid from 14.0.1 to 14.0.3 in docker/login-action#1096

Full Changelog: docker/login-action@v4.6.0...v4.7.0

Commits

81c6f93 Merge pull request #1100 from docker/dependabot/npm_and_yarn/docker/actions-t...
1b16c8d Merge pull request #1096 from docker/dependabot/npm_and_yarn/uuid-14.0.3
ac86b5e [dependabot skip] chore: update generated content
1476d84 build(deps): bump @docker/actions-toolkit from 0.94.0 to 0.107.0
503cee6 Merge pull request #1095 from docker/dependabot/github_actions/actions/create...
f093535 Merge pull request #1099 from docker/dependabot/github_actions/codecov/codeco...
d5ae7f1 Merge pull request #1098 from docker/dependabot/github_actions/docker/bake-ac...
6f97507 Merge pull request #1097 from docker/dependabot/github_actions/docker/bake-ac...
006d61f Merge pull request #1094 from docker/dependabot/github_actions/codeql-actions...
93f5f52 Merge pull request #1093 from docker/dependabot/npm_and_yarn/aws-sdk-dependen...
Additional commits viewable in compare view

Updates codefly-dev/core/.github/workflows/go-service-release.yml from 0.19.5 to 0.19.8

Release notes

Sourced from codefly-dev/core/.github/workflows/go-service-release.yml's releases.

v0.19.8

CLI-agent compatibility

Protocol version: 1 (independent of the Core module version). Startup protocol version: 2. Server capabilities: container-recovery-scope/v1.

Contract unchanged from v0.19.7. No agent rebuild is required solely for this Core bump.

Host-supported operation contracts: artifact-execution/v1, codefly.dev/docker-build-recipe/v4, codefly.dev/docker-build-recipe/v5, codefly.dev/docker-build-recipe/v6, configuration-value-template/v1, deployment-composition-provenance/v1, runtime-backend-declaration/v1, runtime-init-dependency-mappings/v1, runtime-init-image/v1, runtime-started-artifact/v1. This is not an executor advertisement. Selected executors must implement and advertise the required operation contract before dispatch.

The CLI selects required capabilities for each operation. A matching protocol does not replace capability checks or this run's recovery-scope acknowledgement.

v0.19.7

CLI-agent compatibility

Protocol version: 1 (independent of the Core module version). Startup protocol version: 2. Server capabilities: container-recovery-scope/v1.

Contract unchanged from v0.19.6. No agent rebuild is required solely for this Core bump.

Host-supported operation contracts: artifact-execution/v1, codefly.dev/docker-build-recipe/v4, codefly.dev/docker-build-recipe/v5, codefly.dev/docker-build-recipe/v6, configuration-value-template/v1, deployment-composition-provenance/v1, runtime-backend-declaration/v1, runtime-init-dependency-mappings/v1, runtime-init-image/v1, runtime-started-artifact/v1. This is not an executor advertisement. Selected executors must implement and advertise the required operation contract before dispatch.

The CLI selects required capabilities for each operation. A matching protocol does not replace capability checks or this run's recovery-scope acknowledgement.

v0.19.6

CLI-agent compatibility

Protocol version: 1 (independent of the Core module version). Startup protocol version: 2. Server capabilities: container-recovery-scope/v1.

Contract unchanged from v0.19.5. No agent rebuild is required solely for this Core bump.

Host-supported operation contracts: artifact-execution/v1, codefly.dev/docker-build-recipe/v4, codefly.dev/docker-build-recipe/v5, codefly.dev/docker-build-recipe/v6, configuration-value-template/v1, deployment-composition-provenance/v1, runtime-init-dependency-mappings/v1, runtime-init-image/v1, runtime-started-artifact/v1. This is not an executor advertisement. Selected executors must implement and advertise the required operation contract before dispatch.

The CLI selects required capabilities for each operation. A matching protocol does not replace capability checks or this run's recovery-scope acknowledgement.

Commits

a06da5f release: v0.19.8 with durable runtime ownership and verified acquisition (#819)
5ec1112 feat(imagepolicy): add target policies and CGO-aware semantic options (#859)
557f6a3 Merge pull request #858 from codefly-dev/release/v0.19.7
b84a56b release: v0.19.7 — the Darwin boot id names the boot session, not the clock (...
b71ee8c Merge pull request #856 from gael-obin/fix/foreign-method-service-selector
fa6e1ae fix(module): allow foreign methods to select their serving service
a30335b Merge pull request #821 from codefly-dev/issue-820-a-plugin-cannot-declare-wh...
a8599bd Merge pull request #802 from codefly-dev/fix/darwin-boot-id-drifts-with-clock
276e54d Merge pull request #806 from codefly-dev/fix/tool-proposal-without-continuation
7ea404b Merge pull request #824 from codefly-dev/build/goreleaser-action-7.3.0
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the github-actions group with 5 updates: | Package | From | To | | --- | --- | --- | | [codefly-dev/core/.github/workflows/agent-ci.yml](https://github.com/codefly-dev/core) | `0.19.5` | `0.19.8` | | [codefly-dev/core/.github/workflows/go-service-ci.yml](https://github.com/codefly-dev/core) | `0.19.5` | `0.19.8` | | [codefly-dev/core/.github/actions/publish-service-image](https://github.com/codefly-dev/core) | `0.19.5` | `0.19.8` | | [docker/login-action](https://github.com/docker/login-action) | `4.6.0` | `4.7.0` | | [codefly-dev/core/.github/workflows/go-service-release.yml](https://github.com/codefly-dev/core) | `0.19.5` | `0.19.8` | Updates `codefly-dev/core/.github/workflows/agent-ci.yml` from 0.19.5 to 0.19.8 - [Release notes](https://github.com/codefly-dev/core/releases) - [Changelog](https://github.com/codefly-dev/core/blob/main/docs/releaseupdate.md) - [Commits](codefly-dev/core@ce29e08...a06da5f) Updates `codefly-dev/core/.github/workflows/go-service-ci.yml` from 0.19.5 to 0.19.8 - [Release notes](https://github.com/codefly-dev/core/releases) - [Changelog](https://github.com/codefly-dev/core/blob/main/docs/releaseupdate.md) - [Commits](codefly-dev/core@ce29e08...a06da5f) Updates `codefly-dev/core/.github/actions/publish-service-image` from 0.19.5 to 0.19.8 - [Release notes](https://github.com/codefly-dev/core/releases) - [Changelog](https://github.com/codefly-dev/core/blob/main/docs/releaseupdate.md) - [Commits](codefly-dev/core@ce29e08...a06da5f) Updates `docker/login-action` from 4.6.0 to 4.7.0 - [Release notes](https://github.com/docker/login-action/releases) - [Commits](docker/login-action@dbcb813...81c6f93) Updates `codefly-dev/core/.github/workflows/go-service-release.yml` from 0.19.5 to 0.19.8 - [Release notes](https://github.com/codefly-dev/core/releases) - [Changelog](https://github.com/codefly-dev/core/blob/main/docs/releaseupdate.md) - [Commits](codefly-dev/core@ce29e08...a06da5f) --- updated-dependencies: - dependency-name: codefly-dev/core/.github/workflows/agent-ci.yml dependency-version: 0.19.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: codefly-dev/core/.github/workflows/go-service-ci.yml dependency-version: 0.19.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: codefly-dev/core/.github/actions/publish-service-image dependency-version: 0.19.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: docker/login-action dependency-version: 4.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: codefly-dev/core/.github/workflows/go-service-release.yml dependency-version: 0.19.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Oct 30, 2026

Navigation Menu

Repository navigation

build(deps): bump the github-actions group with 5 updates - #121

build(deps): bump the github-actions group with 5 updates#121
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-474da366c2

dependabot Bot commented on behalf of github Oct 30, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 30, 2026

v0.19.8

CLI-agent compatibility

v0.19.7

CLI-agent compatibility

v0.19.6

CLI-agent compatibility

v0.19.8

CLI-agent compatibility

v0.19.7

CLI-agent compatibility

v0.19.6

CLI-agent compatibility

v0.19.8

CLI-agent compatibility

v0.19.7

CLI-agent compatibility

v0.19.6

CLI-agent compatibility

v4.7.0

v0.19.8

CLI-agent compatibility

v0.19.7

CLI-agent compatibility

v0.19.6

CLI-agent compatibility

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants