build(deps): bump the actions group across 1 directory with 6 updates by dependabot[bot] · Pull Request #4882 · ansys/pyfluent

dependabot · 2026-02-01T12:27:00Z

Bumps the actions group with 6 updates in the / directory:

Package	From	To
actions/checkout	`6.0.1`	`6.0.2`
actions/setup-python	`6.1.0`	`6.2.0`
ansys/actions	`10.1.5`	`10.2.4`
actions/cache	`5.0.1`	`5.0.3`
docker/login-action	`3.6.0`	`3.7.0`
github/codeql-action	`4.31.9`	`4.32.0`

Updates actions/checkout from 6.0.1 to 6.0.2

Release notes

Sourced from actions/checkout's releases.

v6.0.2

What's Changed

Add orchestration_id to git user-agent when ACTIONS_ORCHESTRATION_ID is set by @TingluoHuang in actions/checkout#2355

Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in actions/checkout#2356

Full Changelog: actions/checkout@v6.0.1...v6.0.2

Changelog

Sourced from actions/checkout's changelog.

Changelog

v6.0.2

Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in actions/checkout#2356

v6.0.1

Add worktree support for persist-credentials includeIf by @ericsciple in actions/checkout#2327

v6.0.0

Persist creds to a separate file by @ericsciple in actions/checkout#2286

Update README to include Node.js 24 support details and requirements by @salmanmkc in actions/checkout#2248

v5.0.1

Port v6 cleanup to v5 by @ericsciple in actions/checkout#2301

v5.0.0

Update actions checkout to use node 24 by @salmanmkc in actions/checkout#2226

v4.3.1

Port v6 cleanup to v4 by @ericsciple in actions/checkout#2305

v4.3.0

docs: update README.md by @motss in actions/checkout#1971

Add internal repos for checking out multiple repositories by @mouismail in actions/checkout#1977

Documentation update - add recommended permissions to Readme by @benwells in actions/checkout#2043

Adjust positioning of user email note and permissions heading by @joshmgross in actions/checkout#2044

Update README.md by @nebuk89 in actions/checkout#2194

Update CODEOWNERS for actions by @TingluoHuang in actions/checkout#2224

Update package dependencies by @salmanmkc in actions/checkout#2236

v4.2.2

url-helper.ts now leverages well-known environment variables by @jww3 in actions/checkout#1941

Expand unit test coverage for isGhes by @jww3 in actions/checkout#1946

v4.2.1

Check out other refs/* by commit if provided, fall back to ref by @orhantoy in actions/checkout#1924

v4.2.0

Add Ref and Commit outputs by @lucacome in actions/checkout#1180

Dependency updates by @dependabot- actions/checkout#1777, actions/checkout#1872

v4.1.7

Bump the minor-npm-dependencies group across 1 directory with 4 updates by @dependabot in actions/checkout#1739

Bump actions/checkout from 3 to 4 by @dependabot in actions/checkout#1697

Check out other refs/* by commit by @orhantoy in actions/checkout#1774

Pin actions/checkout's own workflows to a known, good, stable version. by @jww3 in actions/checkout#1776

v4.1.6

Check platform to set archive extension appropriately by @cory-miller in actions/checkout#1732

... (truncated)

Commits

de0fac2 Fix tag handling: preserve annotations and explicit fetch-tags (#2356)
064fe7f Add orchestration_id to git user-agent when ACTIONS_ORCHESTRATION_ID is set (...
See full diff in compare view

Updates actions/setup-python from 6.1.0 to 6.2.0

Release notes

Sourced from actions/setup-python's releases.

v6.2.0

What's Changed

Dependency Upgrades

Upgrade dependencies to Node 24 compatible versions by @salmanmkc in actions/setup-python#1259

Upgrade urllib3 from 2.5.0 to 2.6.3 in /__tests__/data by @dependabot in actions/setup-python#1253 and actions/setup-python#1264

Full Changelog: actions/setup-python@v6...v6.2.0

Commits

a309ff8 Bump urllib3 from 2.6.0 to 2.6.3 in /tests/data (#1264)
bfe8cc5 Upgrade @actions dependencies to Node 24 compatible versions (#1259)
4f41a90 Bump urllib3 from 2.5.0 to 2.6.0 in /tests/data (#1253)
See full diff in compare view

Updates ansys/actions from 10.1.5 to 10.2.4

Release notes

Sourced from ansys/actions's releases.

v10.2.4

If you are migrating the actions of your project to a new major release, breaking changes can be expected. To make sure everything is compatible with your current workflow, refer to the Migration Guide for v10 to find out more about new features and potential breaking changes.

Full Changelog: ansys/actions@v10.2.3...v10.2.4

v10.2.3

If you are migrating the actions of your project to a new major release, breaking changes can be expected. To make sure everything is compatible with your current workflow, refer to the Migration Guide for v10 to find out more about new features and potential breaking changes.

Full Changelog: ansys/actions@v10.2.2...v10.2.3

v10.2.2

If you are migrating the actions of your project to a new major release, breaking changes can be expected. To make sure everything is compatible with your current workflow, refer to the Migration Guide for v10 to find out more about new features and potential breaking changes.

Full Changelog: ansys/actions@v10.2.1...v10.2.2

v10.2.1

If you are migrating the actions of your project to a new major release, breaking changes can be expected. To make sure everything is compatible with your current workflow, refer to the Migration Guide for v10 to find out more about new features and potential breaking changes.

Full Changelog: ansys/actions@v10.2.0...v10.2.1

v10.2.0

If you are migrating the actions of your project to a new major release, breaking changes can be expected. To make sure everything is compatible with your current workflow, refer to the Migration Guide for v10 to find out more about new features and potential breaking changes.

What's Changed

docs: update v6 changes by @SMoraisAnsys in ansys/actions#463

docs: Add code spell hook changes in vale migration guide by @dipinknair in ansys/actions#464

docs: implementing changelog as part of the documentation by @RobPasMue in ansys/actions#465

fix: Update the sitemap with .html suffix to entries by @Revathyvenugopal162 in ansys/actions#468

fix: docs for changelog setup on RST by @RobPasMue in ansys/actions#469

fix: canonical link injection in HTML files by @jorgepiloto in ansys/actions#472

docs: fixing links and removing empty table by @clatapie in ansys/actions#471

feat: enable validate-build option to build-library action by @RobPasMue in ansys/actions#473

fix: fail doc-style action when wrong Vale config is present by @jorgepiloto in ansys/actions#470

fix: vale check by @RobPasMue in ansys/actions#474

fix: remove unnecessary curly brackets in doc-deploy-changelog docs by @klmcadams in ansys/actions#476

feat: vale ignore towncrier directory by @klmcadams in ansys/actions#478

fix: check pyproject.toml file exists before opening it by @klmcadams in ansys/actions#480

fix: typo in ci/cd by @RobPasMue in ansys/actions#482

chore: gh-pages does not exist message for doc-deploy-dev by @klmcadams in ansys/actions#475

feat: use github context action_path for vulnerabilities action by @RobPasMue in ansys/actions#483

... (truncated)

Commits

36cd867 release: v10.2.4
86dff28 fix: code-style
176c592 chore: updating CHANGELOG for v10.2.4
6041fa8 release: v10.2.4
56f3545 fix: upload artifacts even if failure happens before (when requested) (#1134)
41f86da chore: updating CHANGELOG for v10.2.3
9e3af25 release: v10.2.3
b5e97f8 build(actions): bump actions/setup-python from 6.0.0 to 6.1.0 in /_setup-pyth...
0b58c71 build(actions): bump the build-related-actions group across 2 directories wit...
6e055f9 build(actions): bump quarto-dev/quarto-actions from 2.1.9 to 2.2.0 in /_doc-b...
Additional commits viewable in compare view

Updates actions/cache from 5.0.1 to 5.0.3

Release notes

Sourced from actions/cache's releases.

v5.0.3

What's Changed

Bump @actions/cache to v5.0.5 (Resolves: https://github.com/actions/cache/security/dependabot/33)

Bump @actions/core to v2.0.3

Full Changelog: actions/cache@v5...v5.0.3

v.5.0.2

v5.0.2

What's Changed

When creating cache entries, 429s returned from the cache service will not be retried.

Changelog

Sourced from actions/cache's changelog.

Releases

How to prepare a release

[!NOTE]
Relevant for maintainers with write access only.

Switch to a new branch from main.

Run npm test to ensure all tests are passing.

Update the version in https://github.com/actions/cache/blob/main/package.json.

Run npm run build to update the compiled files.

Update this https://github.com/actions/cache/blob/main/RELEASES.md with the new version and changes in the ## Changelog section.

Run licensed cache to update the license report.

Run licensed status and resolve any warnings by updating the https://github.com/actions/cache/blob/main/.licensed.yml file with the exceptions.

Commit your changes and push your branch upstream.

Open a pull request against main and get it reviewed and merged.

Draft a new release https://github.com/actions/cache/releases use the same version number used in package.json

Create a new tag with the version number.

Auto generate release notes and update them to match the changes you made in RELEASES.md.

Toggle the set as the latest release option.

Publish the release.

Navigate to https://github.com/actions/cache/actions/workflows/release-new-action-version.yml

There should be a workflow run queued with the same version number.

Approve the run to publish the new version and update the major tags for this action.

Changelog

5.0.3

Bump @actions/cache to v5.0.5 (Resolves: https://github.com/actions/cache/security/dependabot/33)

Bump @actions/core to v2.0.3

5.0.2

Bump @actions/cache to v5.0.3 #1692

5.0.1

Update @azure/storage-blob to ^12.29.1 via @actions/cache@5.0.1 #1685

5.0.0

[!IMPORTANT] actions/cache@v5 runs on the Node.js 24 runtime and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading.

4.3.0

Bump @actions/cache to v4.1.0

... (truncated)

Commits

cdf6c1f Merge pull request #1695 from actions/Link-/prepare-5.0.3
a1bee22 Add review for the @actions/http-client license
4695763 Add licensed output
dc73bb9 Upgrade dependencies and address security warnings
345d5c2 Add 5.0.3 builds
8b402f5 Merge pull request #1692 from GhadimiR/main
304ab5a license for httpclient
609fc19 Update licensed record for cache
b22231e Build
93150cd Add PR link to releases
Additional commits viewable in compare view

Updates docker/login-action from 3.6.0 to 3.7.0

Release notes

Sourced from docker/login-action's releases.

v3.7.0

Add scope input to set scopes for the authentication token by @crazy-max in docker/login-action#912

Add support for AWS European Sovereign Cloud ECR by @dphi in docker/login-action#914

Ensure passwords are redacted with registry-auth input by @crazy-max in docker/login-action#911

build(deps): bump lodash from 4.17.21 to 4.17.23 in docker/login-action#915

Full Changelog: docker/login-action@v3.6.0...v3.7.0

Commits

c94ce9f Merge pull request #915 from docker/dependabot/npm_and_yarn/lodash-4.17.23
8339c95 Merge pull request #912 from docker/scope
c83e932 build(deps): bump lodash from 4.17.21 to 4.17.23
b268aa5 chore: update generated content
a603229 documentation for scope input
7567f92 Add scope input to set scopes for the authentication token
0567fa5 Merge pull request #914 from dphi/add-support-for-amazonaws.eu
f6ef577 feat: add support for AWS European Sovereign Cloud ECR registries
916386b Merge pull request #911 from crazy-max/ensure-redact
5b3f94a chore: update generated content
Additional commits viewable in compare view

Updates github/codeql-action from 4.31.9 to 4.32.0

Release notes

Sourced from github/codeql-action's releases.

v4.32.0

Update default CodeQL bundle version to 2.24.0. #3425

v4.31.11

When running a Default Setup workflow with Actions debugging enabled, the CodeQL Action will now use more unique names when uploading logs from the Dependabot authentication proxy as workflow artifacts. This ensures that the artifact names do not clash between multiple jobs in a build matrix. #3409

Improved error handling throughout the CodeQL Action. #3415

Added experimental support for automatically excluding generated files from the analysis. This feature is not currently enabled for any analysis. In the future, it may be enabled by default for some GitHub-managed analyses. #3318

The changelog extracts that are included with releases of the CodeQL Action are now shorter to avoid duplicated information from appearing in Dependabot PRs. #3403

v4.31.10

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.10 - 12 Jan 2026

Update default CodeQL bundle version to 2.23.9. #3393

See the full CHANGELOG.md for more information.

Changelog

Sourced from github/codeql-action's changelog.

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

[UNRELEASED]

No user facing changes.

4.32.0 - 26 Jan 2026

Update default CodeQL bundle version to 2.24.0. #3425

4.31.11 - 23 Jan 2026

When running a Default Setup workflow with Actions debugging enabled, the CodeQL Action will now use more unique names when uploading logs from the Dependabot authentication proxy as workflow artifacts. This ensures that the artifact names do not clash between multiple jobs in a build matrix. #3409

Improved error handling throughout the CodeQL Action. #3415

Added experimental support for automatically excluding generated files from the analysis. This feature is not currently enabled for any analysis. In the future, it may be enabled by default for some GitHub-managed analyses. #3318

The changelog extracts that are included with releases of the CodeQL Action are now shorter to avoid duplicated information from appearing in Dependabot PRs. #3403

4.31.10 - 12 Jan 2026

Update default CodeQL bundle version to 2.23.9. #3393

4.31.9 - 16 Dec 2025

No user facing changes.

4.31.8 - 11 Dec 2025

Update default CodeQL bundle version to 2.23.8. #3354

4.31.7 - 05 Dec 2025

Update default CodeQL bundle version to 2.23.7. #3343

4.31.6 - 01 Dec 2025

No user facing changes.

4.31.5 - 24 Nov 2025

Update default CodeQL bundle version to 2.23.6. #3321

4.31.4 - 18 Nov 2025

No user facing changes.

4.31.3 - 13 Nov 2025

CodeQL Action v3 will be deprecated in December 2026. The Action now logs a warning for customers who are running v3 but could be running v4. For more information, see Upcoming deprecation of CodeQL Action v3.

... (truncated)

Commits

b20883b Merge pull request #3428 from github/update-v4.32.0-e3b8227a2
c9aa45d Update changelog for v4.32.0
e3b8227 Merge pull request #3427 from github/henrymercer/bump-for-new-minor-series
8a01181 Compare minor version number
80e1425 Bump minor version for CLI v2.24.0
b748848 Bump the Action minor version number on new CodeQL minor version series
5e767ef Merge pull request #3425 from github/update-bundle/codeql-bundle-v2.24.0
9752869 Add changelog note
c62c214 Update default bundle to codeql-bundle-v2.24.0
25a224b Merge pull request #3423 from github/mbg/ci/yq-windows
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

.github/workflows/ci.yml

      pull-requests: write
    steps:
-      - uses: ansys/actions/doc-deploy-changelog@v10.2
+      - uses: ansys/actions/doc-deploy-changelog@v10.2.4


.github/workflows/ci.yml

    steps:
      - name: Running Vale
-        uses: ansys/actions/doc-style@v10.2
+        uses: ansys/actions/doc-style@v10.2.4


.github/workflows/ci.yml

    steps:
      - name: "Run PyAnsys code style checks"
-        uses: ansys/actions/code-style@v10.2
+        uses: ansys/actions/code-style@v10.2.4


.github/workflows/ci.yml

    runs-on: ubuntu-latest
    steps:
-      - uses: ansys/actions/check-pr-title@v10.2
+      - uses: ansys/actions/check-pr-title@v10.2.4


.github/workflows/ci.yml

    steps:
      - name: Build wheelhouse and perform smoke test
-        uses: ansys/actions/build-wheelhouse@v10.2
+        uses: ansys/actions/build-wheelhouse@v10.2.4


.github/workflows/doc-build-dev-nightly.yml

    steps:
      - name: "Deploy development documentation"
-        uses: ansys/actions/doc-deploy-dev@v10.2
+        uses: ansys/actions/doc-deploy-dev@v10.2.4


.github/workflows/doc-build-release.yml

    steps:
      - name: "Deploy release documentation"
-        uses: ansys/actions/doc-deploy-stable@v10.2
+        uses: ansys/actions/doc-deploy-stable@v10.2.4


.github/workflows/label.yml

    runs-on: ubuntu-latest
    steps:
-      - uses: ansys/actions/doc-changelog@v10.2
+      - uses: ansys/actions/doc-changelog@v10.2.4


Bumps the actions group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `6.0.1` | `6.0.2` | | [actions/setup-python](https://github.com/actions/setup-python) | `6.1.0` | `6.2.0` | | [ansys/actions](https://github.com/ansys/actions) | `10.1.5` | `10.2.4` | | [actions/cache](https://github.com/actions/cache) | `5.0.1` | `5.0.3` | | [docker/login-action](https://github.com/docker/login-action) | `3.6.0` | `3.7.0` | | [github/codeql-action](https://github.com/github/codeql-action) | `4.31.9` | `4.32.0` | Updates `actions/checkout` from 6.0.1 to 6.0.2 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@8e8c483...de0fac2) Updates `actions/setup-python` from 6.1.0 to 6.2.0 - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](actions/setup-python@83679a8...a309ff8) Updates `ansys/actions` from 10.1.5 to 10.2.4 - [Release notes](https://github.com/ansys/actions/releases) - [Commits](ansys/actions@v10.1.5...v10.2.4) Updates `actions/cache` from 5.0.1 to 5.0.3 - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](actions/cache@9255dc7...cdf6c1f) Updates `docker/login-action` from 3.6.0 to 3.7.0 - [Release notes](https://github.com/docker/login-action/releases) - [Commits](docker/login-action@5e57cd1...c94ce9f) Updates `github/codeql-action` from 4.31.9 to 4.32.0 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@5d4e8d1...b20883b) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 6.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: actions/setup-python dependency-version: 6.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: ansys/actions dependency-version: 10.2.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: actions/cache dependency-version: 5.0.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: docker/login-action dependency-version: 3.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: github/codeql-action dependency-version: 4.32.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added the maintenance General maintenance of the repo (libraries, cicd, etc) label Feb 1, 2026

dependabot bot requested review from hpohekar, mayankansys, mkundu1, prmukherj and seanpearsonuk as code owners February 1, 2026 12:27

github-actions bot added the CI/CD label Feb 1, 2026

github-advanced-security bot found potential problems Feb 1, 2026

View reviewed changes

dependabot bot force-pushed the dependabot/github_actions/actions-bbd2b66827 branch from 661c4f0 to e163140 Compare February 4, 2026 21:38

dependabot bot force-pushed the dependabot/github_actions/actions-bbd2b66827 branch from 19d12e3 to 8af0395 Compare February 5, 2026 18:53

chore: adding changelog file 4882.dependencies.md [dependabot-skip]

50a8444

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

build(deps): bump the actions group across 1 directory with 6 updates#4882

build(deps): bump the actions group across 1 directory with 6 updates#4882
dependabot[bot] wants to merge 2 commits intomainfrom
dependabot/github_actions/actions-bbd2b66827

dependabot bot commented on behalf of github Feb 1, 2026 •

edited

Loading

Uh oh!

Check warning

Check warning

Check warning

Check warning

Check warning

Check warning

Check warning

Check warning

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot bot commented on behalf of github Feb 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v6.0.2

What's Changed

Changelog

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

v4.2.0

v4.1.7

v4.1.6

v6.2.0

What's Changed

Dependency Upgrades

v10.2.4

v10.2.3

v10.2.2

v10.2.1

v10.2.0

What's Changed

v5.0.3

What's Changed

v.5.0.2

v5.0.2

What's Changed

Releases

How to prepare a release

Changelog

5.0.3

5.0.2

5.0.1

5.0.0

4.3.0

v3.7.0

v4.32.0

v4.31.11

v4.31.10

CodeQL Action Changelog

4.31.10 - 12 Jan 2026

CodeQL Action Changelog

[UNRELEASED]

4.32.0 - 26 Jan 2026

4.31.11 - 23 Jan 2026

4.31.10 - 12 Jan 2026

4.31.9 - 16 Dec 2025

4.31.8 - 11 Dec 2025

4.31.7 - 05 Dec 2025

4.31.6 - 01 Dec 2025

4.31.5 - 24 Nov 2025

4.31.4 - 18 Nov 2025

4.31.3 - 13 Nov 2025

Uh oh!

Check warning

Uh oh!

Check warning

Uh oh!

Check warning

Uh oh!

Check warning

Uh oh!

Check warning

Uh oh!

Check warning

Uh oh!

Check warning

Uh oh!

Check warning

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

dependabot bot commented on behalf of github Feb 1, 2026 •

edited

Loading