Skip to content

build(deps): bump oras-project/setup-oras from 1.2.3 to 2.0.1 - #5

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/oras-project/setup-oras-2.0.1
Open

build(deps): bump oras-project/setup-oras from 1.2.3 to 2.0.1#5
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/oras-project/setup-oras-2.0.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 23, 2026

Copy link
Copy Markdown

Bumps oras-project/setup-oras from 1.2.3 to 2.0.1.

Release notes

Sourced from oras-project/setup-oras's releases.

v2.0.1

Highlights

What's Changed

  • chore: update releases.json for 1.3.2 (#167)
  • chore: update releases.json for 1.3.3 (#182)
  • feat: automate releases.json updates via GitHub Actions workflow (#171)
  • fix: retry post-creation API calls on 422 eventual consistency errors
  • ci: sign automated release-update commits (#183)
  • chore(deps): Bump @​actions/core to 3.0.1, esbuild to 0.28.1, typescript to 6.0.3, actions/checkout to v7, and @​types/node

Full Changelog: oras-project/setup-oras@v2.0.0...v2.0.1

v2.0.0

Highlights

What's Changed

  • Add version 1.3.1 with checksums (#150)
  • feat: migrate action runtime from node20 to node24 (#153)
  • fix: pin undici to >=6.24.1 to address CVEs (#157)
  • chore(deps): bump @​actions/core to 3.x and @​actions/tool-cache to 4.x (#159)
  • chore(deps): Bump @​actions/core from 1.11.1 to 2.0.1 (#130)
  • chore(deps): Bump typescript from 5.9.2 to 6.0.2 (#151)
  • chore(deps): Bump actions/checkout from 5 to 6 (#128)
  • chore(deps): Bump actions/setup-node from 5 to 6 (#123)
  • chore(deps): Bump @​types/node from 24.12.0 to 25.5.2 (multiple PRs)

Full Changelog: oras-project/setup-oras@v1.2.4...v2.0.0

v1.2.4

Highlights

Other Changes

  • Update dependencies

What's Changed

... (truncated)

Commits
  • 1d808f7 chore: update releases.json for 1.3.3 (#182)
  • b38537d ci: sign automated release-update commits (#183)
  • 6f3b32c chore(deps): Bump @​types/node from 26.0.1 to 26.1.0 (#181)
  • fb503f0 chore(deps): Bump @​types/node from 26.0.0 to 26.0.1 (#180)
  • 4aa197c chore(deps): Bump @​types/node from 25.9.3 to 26.0.0 (#178)
  • 0c499ae chore(deps): Bump actions/checkout from 6 to 7 (#179)
  • 82faa22 chore(deps): Bump @​types/node from 25.9.2 to 25.9.3 (#177)
  • f8710a5 chore(deps): Bump esbuild from 0.28.0 to 0.28.1 (#176)
  • ce8d0d5 chore(deps): Bump @​types/node from 25.9.1 to 25.9.2 (#175)
  • ae76689 chore(deps): Bump peter-evans/create-pull-request from 7 to 8 (#173)
  • Additional commits viewable in compare view

@dependabot @github

dependabot Bot commented on behalf of github Jul 23, 2026

Copy link
Copy Markdown
Author

Labels

The following labels could not be found: dependencies, github-actions. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot
dependabot Bot changed the base branch from codex/open-source-v1-candidate to main July 25, 2026 05:42
Bumps [oras-project/setup-oras](https://github.com/oras-project/setup-oras) from 1.2.3 to 2.0.1.
- [Release notes](https://github.com/oras-project/setup-oras/releases)
- [Commits](oras-project/setup-oras@8d34698...1d808f7)

---
updated-dependencies:
- dependency-name: oras-project/setup-oras
  dependency-version: 2.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/oras-project/setup-oras-2.0.1 branch from b6f7940 to e571e6e Compare July 27, 2026 16:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants