Bump the "dependencies" group with 1 updates across multiple ecosystems

[dependabot]

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

---

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

---

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

---

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

---

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

---

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

---

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

---

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

---

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

---

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

---

Bumps the dependencies group with 2 updates: jdfalk/ghcommon/.github/workflows/reusable-ci.yml and jdfalk/ghcommon/.github/workflows/reusable-release.yml.

Updates jdfalk/ghcommon/.github/workflows/reusable-ci.yml from bc6380dd1cfb1a3b8eb24c27d6cfe4a887562b5b to f297c40be781eb288aa902fd87c372c6d72ee911

Changelog

Sourced from jdfalk/ghcommon/.github/workflows/reusable-ci.yml's changelog.

Changelog

[Unreleased]

Completed

January 10, 2026 - Docker Rollout Across Action Repositories

• Completed Docker support for 11/18 action repositories representing all actions where Docker adds clear value
• Dockerized actions: detect-languages-action, load-config-action, get-frontend-config-action, package-assets-action, ci-generate-matrices-action, auto-module-tagging-action, generate-version-action, release-docker-action, release-frontend-action, release-go-action, release-protobuf-action
• Each dockerized action includes:
  • Dockerfile with pinned base image by digest
  • .dockerignore for build optimization
  • publish-docker.yml workflow for GHCR publishing with auto-versioning
  • use-docker/docker-image inputs with docker/host execution branching
  • Updated README, CHANGELOG, TODO with Docker usage instructions
• Intentionally skipped Docker for 7 actions:
  • Release orchestrators (release-python-action, release-rust-action): Require GitHub Actions ecosystem (setup-python, setup-rust) and external service publishing
  • Embedded Python actions (ci-workflow-helpers-action, pr-auto-label-action, docs-generator-action, security-summary-action, release-strategy-action): Use shell: python with code embedded in action.yml; Docker support would require significant refactoring for marginal benefit

In Progress

(No active Docker rollout work - 11/18 suitable actions completed)

Security

January 2, 2026 - Action Security Hardening

• Pinned all external GitHub Actions to full-length commit SHAs across 9 action repositories
• Updated action format to owner/action@FULL_SHA # vX.Y.Z for security + dependabot compatibility
• Audited and fetched latest versions for 15 external action dependencies:
  • GitHub official actions: checkout v6.0.1, setup-go v5.6.0, setup-node v6.1.0, setup-python v6.1.0, upload-artifact v6.0.0
  • Third-party actions: yamllint v3.1.1, gh-release v2.5.0, rust-toolchain v1.15.2, goreleaser v6.4.0, buf-setup v1.50.0
  • Docker actions: login v3.6.0, setup-buildx v3.12.0, setup-qemu v3.7.0, build-push v6.18.0, metadata v5.10.0
• Updated 9 repos with pinned hashes: get-frontend-config-action,

... (truncated)

Commits

• f297c40 docs: update docs
• b06ad4d deps(deps): bump the dependencies group with 12 updates
• 395f9b1 deps(dependabot): add multi-ecosystem-groups and Python pyproject.toml/uv docs
• 4afbbce actions(deps): bump the ci-dependencies group with 2 updates
• 268b895 actions(deps): bump jdfalk/ghcommon/.github/workflows/release-go.yml
• 638e231 actions(deps): bump jdfalk/ghcommon/.github/workflows/release-python.yml
• b15b678 actions(deps): bump jdfalk/ghcommon/.github/workflows/reusable-advanced-cache...
• 9ac1716 npm(deps-dev): bump @​types/node in the dev-dependencies group
• 2dc7f11 actions(deps): bump jdfalk/ghcommon/.github/workflows/release-rust.yml
• cd894fd actions(deps): bump jdfalk/ghcommon/.github/workflows/release-frontend.yml
• Additional commits viewable in compare view

Updates jdfalk/ghcommon/.github/workflows/reusable-release.yml from bc6380dd1cfb1a3b8eb24c27d6cfe4a887562b5b to f297c40be781eb288aa902fd87c372c6d72ee911

Changelog

Sourced from jdfalk/ghcommon/.github/workflows/reusable-release.yml's changelog.

Changelog

[Unreleased]

Completed

January 10, 2026 - Docker Rollout Across Action Repositories

• Completed Docker support for 11/18 action repositories representing all actions where Docker adds clear value
• Dockerized actions: detect-languages-action, load-config-action, get-frontend-config-action, package-assets-action, ci-generate-matrices-action, auto-module-tagging-action, generate-version-action, release-docker-action, release-frontend-action, release-go-action, release-protobuf-action
• Each dockerized action includes:
  • Dockerfile with pinned base image by digest
  • .dockerignore for build optimization
  • publish-docker.yml workflow for GHCR publishing with auto-versioning
  • use-docker/docker-image inputs with docker/host execution branching
  • Updated README, CHANGELOG, TODO with Docker usage instructions
• Intentionally skipped Docker for 7 actions:
  • Release orchestrators (release-python-action, release-rust-action): Require GitHub Actions ecosystem (setup-python, setup-rust) and external service publishing
  • Embedded Python actions (ci-workflow-helpers-action, pr-auto-label-action, docs-generator-action, security-summary-action, release-strategy-action): Use shell: python with code embedded in action.yml; Docker support would require significant refactoring for marginal benefit

In Progress

(No active Docker rollout work - 11/18 suitable actions completed)

Security

January 2, 2026 - Action Security Hardening

• Pinned all external GitHub Actions to full-length commit SHAs across 9 action repositories
• Updated action format to owner/action@FULL_SHA # vX.Y.Z for security + dependabot compatibility
• Audited and fetched latest versions for 15 external action dependencies:
  • GitHub official actions: checkout v6.0.1, setup-go v5.6.0, setup-node v6.1.0, setup-python v6.1.0, upload-artifact v6.0.0
  • Third-party actions: yamllint v3.1.1, gh-release v2.5.0, rust-toolchain v1.15.2, goreleaser v6.4.0, buf-setup v1.50.0
  • Docker actions: login v3.6.0, setup-buildx v3.12.0, setup-qemu v3.7.0, build-push v6.18.0, metadata v5.10.0
• Updated 9 repos with pinned hashes: get-frontend-config-action,

... (truncated)

Commits

• f297c40 docs: update docs
• b06ad4d deps(deps): bump the dependencies group with 12 updates
• 395f9b1 deps(dependabot): add multi-ecosystem-groups and Python pyproject.toml/uv docs
• 4afbbce actions(deps): bump the ci-dependencies group with 2 updates
• 268b895 actions(deps): bump jdfalk/ghcommon/.github/workflows/release-go.yml
• 638e231 actions(deps): bump jdfalk/ghcommon/.github/workflows/release-python.yml
• b15b678 actions(deps): bump jdfalk/ghcommon/.github/workflows/reusable-advanced-cache...
• 9ac1716 npm(deps-dev): bump @​types/node in the dev-dependencies group
• 2dc7f11 actions(deps): bump jdfalk/ghcommon/.github/workflows/release-rust.yml
• cd894fd actions(deps): bump jdfalk/ghcommon/.github/workflows/release-frontend.yml
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: ci-cd, github-actions. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.