Skip to content

Bump the "all" group with 2 updates across multiple ecosystems#1023

Merged
MikeMcQuaid merged 1 commit intomainfrom
dependabot/all-e843d21461
Mar 16, 2026
Merged

Bump the "all" group with 2 updates across multiple ecosystems#1023
MikeMcQuaid merged 1 commit intomainfrom
dependabot/all-e843d21461

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Mar 16, 2026

Bumps the all group with 4 updates: github/codeql-action, docker/setup-buildx-action, docker/login-action and docker/build-push-action.

Updates github/codeql-action from 4.32.4 to 4.32.6

Release notes

Sourced from github/codeql-action's releases.

v4.32.6

  • Update default CodeQL bundle version to 2.24.3. #3548

v4.32.5

  • Repositories owned by an organization can now set up the github-codeql-disable-overlay custom repository property to disable improved incremental analysis for CodeQL. First, create a custom repository property with the name github-codeql-disable-overlay and the type "True/false" in the organization's settings. Then in the repository's settings, set this property to true to disable improved incremental analysis. For more information, see Managing custom properties for repositories in your organization. This feature is not yet available on GitHub Enterprise Server. #3507
  • Added an experimental change so that when improved incremental analysis fails on a runner — potentially due to insufficient disk space — the failure is recorded in the Actions cache so that subsequent runs will automatically skip improved incremental analysis until something changes (e.g. a larger runner is provisioned or a new CodeQL version is released). We expect to roll this change out to everyone in March. #3487
  • The minimum memory check for improved incremental analysis is now skipped for CodeQL 2.24.3 and later, which has reduced peak RAM usage. #3515
  • Reduced log levels for best-effort private package registry connection check failures to reduce noise from workflow annotations. #3516
  • Added an experimental change which lowers the minimum disk space requirement for improved incremental analysis, enabling it to run on standard GitHub Actions runners. We expect to roll this change out to everyone in March. #3498
  • Added an experimental change which allows the start-proxy action to resolve the CodeQL CLI version from feature flags instead of using the linked CLI bundle version. We expect to roll this change out to everyone in March. #3512
  • The previously experimental changes from versions 4.32.3, 4.32.4, 3.32.3 and 3.32.4 are now enabled by default. #3503, #3504
Changelog

Sourced from github/codeql-action's changelog.

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

[UNRELEASED]

  • Upcoming change: Starting April 2026, the CodeQL Action will skip collecting file coverage information on pull requests to improve analysis performance. File coverage information will still be computed on non-PR analyses. Pull request analyses will log a warning about this upcoming change. #3562

    To opt out of this change:

    • Repositories owned by an organization: Create a custom repository property with the name github-codeql-file-coverage-on-prs and the type "True/false", then set this property to true in the repository's settings. For more information, see Managing custom properties for repositories in your organization. Alternatively, if you are using an advanced setup workflow, you can set the CODEQL_ACTION_FILE_COVERAGE_ON_PRS environment variable to true in your workflow.
    • User-owned repositories using default setup: Switch to an advanced setup workflow and set the CODEQL_ACTION_FILE_COVERAGE_ON_PRS environment variable to true in your workflow.
    • User-owned repositories using advanced setup: Set the CODEQL_ACTION_FILE_COVERAGE_ON_PRS environment variable to true in your workflow.

  • Fixed a bug which caused the CodeQL Action to fail loading repository properties if a "Multi select" repository property was configured for the repository. #3557

  • The CodeQL Action now loads custom repository properties on GitHub Enterprise Server, enabling the customization of features such as github-codeql-disable-overlay that was previously only available on GitHub.com. #3559

  • Once private package registries can be configured with OIDC-based authentication for organizations, the CodeQL Action will now be able to accept such configurations. #3563

  • Fixed the retry mechanism for database uploads. Previously this would fail with the error "Response body object should not be disturbed or locked". #3564

4.32.6 - 05 Mar 2026

  • Update default CodeQL bundle version to 2.24.3. #3548

4.32.5 - 02 Mar 2026

  • Repositories owned by an organization can now set up the github-codeql-disable-overlay custom repository property to disable improved incremental analysis for CodeQL. First, create a custom repository property with the name github-codeql-disable-overlay and the type "True/false" in the organization's settings. Then in the repository's settings, set this property to true to disable improved incremental analysis. For more information, see Managing custom properties for repositories in your organization. This feature is not yet available on GitHub Enterprise Server. #3507
  • Added an experimental change so that when improved incremental analysis fails on a runner — potentially due to insufficient disk space — the failure is recorded in the Actions cache so that subsequent runs will automatically skip improved incremental analysis until something changes (e.g. a larger runner is provisioned or a new CodeQL version is released). We expect to roll this change out to everyone in March. #3487
  • The minimum memory check for improved incremental analysis is now skipped for CodeQL 2.24.3 and later, which has reduced peak RAM usage. #3515
  • Reduced log levels for best-effort private package registry connection check failures to reduce noise from workflow annotations. #3516
  • Added an experimental change which lowers the minimum disk space requirement for improved incremental analysis, enabling it to run on standard GitHub Actions runners. We expect to roll this change out to everyone in March. #3498
  • Added an experimental change which allows the start-proxy action to resolve the CodeQL CLI version from feature flags instead of using the linked CLI bundle version. We expect to roll this change out to everyone in March. #3512
  • The previously experimental changes from versions 4.32.3, 4.32.4, 3.32.3 and 3.32.4 are now enabled by default. #3503, #3504

4.32.4 - 20 Feb 2026

  • Update default CodeQL bundle version to 2.24.2. #3493
  • Added an experimental change which improves how certificates are generated for the authentication proxy that is used by the CodeQL Action in Default Setup when private package registries are configured. This is expected to generate more widely compatible certificates and should have no impact on analyses which are working correctly already. We expect to roll this change out to everyone in February. #3473
  • When the CodeQL Action is run with debugging enabled in Default Setup and private package registries are configured, the "Setup proxy for registries" step will output additional diagnostic information that can be used for troubleshooting. #3486
  • Added a setting which allows the CodeQL Action to enable network debugging for Java programs. This will help GitHub staff support customers with troubleshooting issues in GitHub-managed CodeQL workflows, such as Default Setup. This setting can only be enabled by GitHub staff. #3485
  • Added a setting which enables GitHub-managed workflows, such as Default Setup, to use a nightly CodeQL CLI release instead of the latest, stable release that is used by default. This will help GitHub staff support customers whose analyses for a given repository or organization require early access to a change in an upcoming CodeQL CLI release. This setting can only be enabled by GitHub staff. #3484

4.32.3 - 13 Feb 2026

  • Added experimental support for testing connections to private package registries. This feature is not currently enabled for any analysis. In the future, it may be enabled by default for Default Setup. #3466

4.32.2 - 05 Feb 2026

  • Update default CodeQL bundle version to 2.24.1. #3460

4.32.1 - 02 Feb 2026

... (truncated)

Commits
  • 0d579ff Merge pull request #3551 from github/update-v4.32.6-72d2d850d
  • d4c6be7 Update changelog for v4.32.6
  • 72d2d85 Merge pull request #3548 from github/update-bundle/codeql-bundle-v2.24.3
  • 23f983c Merge pull request #3544 from github/dependabot/github_actions/dot-github/wor...
  • 832e97c Merge pull request #3545 from github/dependabot/github_actions/dot-github/wor...
  • 5ef38c0 Merge pull request #3546 from github/dependabot/npm_and_yarn/tar-7.5.10
  • 80c9cda Add changelog note
  • f2669dd Update default bundle to codeql-bundle-v2.24.3
  • bd03c44 Merge branch 'main' into dependabot/github_actions/dot-github/workflows/actio...
  • 102d762 Bump tar from 7.5.7 to 7.5.10
  • Additional commits viewable in compare view

Updates docker/setup-buildx-action from 3.12.0 to 4.0.0

Release notes

Sourced from docker/setup-buildx-action's releases.

v4.0.0

Full Changelog: docker/setup-buildx-action@v3.12.0...v4.0.0

Commits
  • 4d04d5d Merge pull request #485 from docker/dependabot/npm_and_yarn/docker/actions-to...
  • cd74e05 chore: update generated content
  • eee38ec build(deps): bump @​docker/actions-toolkit from 0.77.0 to 0.79.0
  • 7a83f65 Merge pull request #484 from docker/dependabot/github_actions/docker/setup-qe...
  • a5aa967 Merge pull request #464 from crazy-max/rm-deprecated
  • e73d53f build(deps): bump docker/setup-qemu-action from 3 to 4
  • 28a438e Merge pull request #483 from crazy-max/node24
  • 034e9d3 chore: update generated content
  • b4664d8 remove deprecated inputs/outputs
  • a8257de node 24 as default runtime
  • Additional commits viewable in compare view

Updates docker/login-action from 3.7.0 to 4.0.0

Release notes

Sourced from docker/login-action's releases.

v4.0.0

Full Changelog: docker/login-action@v3.7.0...v4.0.0

Commits
  • b45d80f Merge pull request #929 from crazy-max/node24
  • 176cb9c node 24 as default runtime
  • cad8984 Merge pull request #920 from docker/dependabot/npm_and_yarn/aws-sdk-dependenc...
  • 92cbcb2 chore: update generated content
  • 5a2d6a7 build(deps): bump the aws-sdk-dependencies group with 2 updates
  • 44512b6 Merge pull request #928 from docker/dependabot/npm_and_yarn/docker/actions-to...
  • 28737a5 chore: update generated content
  • dac0793 build(deps): bump @​docker/actions-toolkit from 0.76.0 to 0.77.0
  • 62029f3 Merge pull request #919 from docker/dependabot/npm_and_yarn/actions/core-3.0.0
  • 08c8f06 chore: update generated content
  • Additional commits viewable in compare view

Updates docker/build-push-action from 6.19.2 to 7.0.0

Release notes

Sourced from docker/build-push-action's releases.

v7.0.0

Full Changelog: docker/build-push-action@v6.19.2...v7.0.0

Commits
  • d08e5c3 Merge pull request #1479 from docker/dependabot/npm_and_yarn/docker/actions-t...
  • cbd2dff chore: update generated content
  • f76f51f chore(deps): Bump @​docker/actions-toolkit from 0.78.0 to 0.79.0
  • 7d03e66 Merge pull request #1473 from crazy-max/rm-deprecated-envs
  • 98f853d chore: update generated content
  • cadccf6 remove deprecated envs
  • 03fe877 Merge pull request #1478 from docker/dependabot/github_actions/docker/setup-b...
  • 827e366 chore(deps): Bump docker/setup-buildx-action from 3 to 4
  • e25db87 Merge pull request #1474 from crazy-max/rm-export-build-tool
  • 1ac2573 Merge pull request #1470 from crazy-max/node24
  • Additional commits viewable in compare view

Bumps the all group with 10 updates:

Package From To
sorbet-runtime 0.6.12997 0.6.13028
rubocop 1.85.0 1.85.1
sorbet 0.6.12997 0.6.13028
sorbet-static-and-runtime 0.6.12997 0.6.13028
rspec-rails 8.0.3 8.0.4
action_text-trix 2.1.16 2.1.17
rubocop-ast 1.49.0 1.49.1
sorbet-static 0.6.12997 0.6.13028
tailwindcss-ruby 4.2.0 4.2.1
timeout 0.6.0 0.6.1

Updates sorbet-runtime from 0.6.12997 to 0.6.13028

Release notes

Sourced from sorbet-runtime's releases.

sorbet 0.6.13027.20260313161605-d2d0ae246

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13027', :group => :development
gem 'sorbet-runtime', '0.6.13027'

sorbet 0.6.13026.20260313113732-4b7ca5a7b

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13026', :group => :development
gem 'sorbet-runtime', '0.6.13026'

sorbet 0.6.13025.20260313103129-0a0442711

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13025', :group => :development
gem 'sorbet-runtime', '0.6.13025'

sorbet 0.6.13024.20260313052628-289a079b5

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13024', :group => :development
gem 'sorbet-runtime', '0.6.13024'

sorbet 0.6.13023.20260312210213-1b424aff1

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13023', :group => :development
gem 'sorbet-runtime', '0.6.13023'

sorbet 0.6.13022.20260312180843-6f0ea1402

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13022', :group => :development
gem 'sorbet-runtime', '0.6.13022'

sorbet 0.6.13021.20260312133523-fd325a603

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13021', :group => :development
gem 'sorbet-runtime', '0.6.13021'

sorbet 0.6.13020.20260312092927-67b867fc3

... (truncated)

Commits

Updates rubocop from 1.85.0 to 1.85.1

Release notes

Sourced from rubocop's releases.

RuboCop v1.85.1

Bug fixes

  • #14958: Fix false positives in Style/FileOpen when File.open is passed as an argument or returned from a method. (@​sferik)
  • #14973: Fix Style/ReduceToHash false positive when accumulator is read in key/value. (@​sferik)
  • #14964: Fix false positives in Style/RedundantParentheses when parenthesizing a range in a block body. (@​koic)

Changes

Changelog

Sourced from rubocop's changelog.

1.85.1 (2026-03-03)

Bug fixes

  • #14958: Fix false positives in Style/FileOpen when File.open is passed as an argument or returned from a method. ([@​sferik][])
  • #14973: Fix Style/ReduceToHash false positive when accumulator is read in key/value. ([@​sferik][])
  • #14964: Fix false positives in Style/RedundantParentheses when parenthesizing a range in a block body. ([@​koic][])

Changes

Commits
  • fd07672 Cut 1.85.1
  • 5c41f90 Update Changelog
  • 5e8e492 Merge pull request #14975 from sferik/fix_14973
  • 90f3780 Fix Style/ReduceToHash false positive when accumulator is read in key/value
  • 90c7959 Merge pull request #14972 from lovro-bikic/relevant-options-digest-cache
  • 3c20e8d Cache relevant options digest
  • e305f79 Merge pull request #14969 from lovro-bikic/autoload-formatter-constants
  • 3f0a304 Autoload formatters; they're required only when actually used
  • eb973f4 Merge pull request #14966 from koic/fix_false_positives_in_style_redundant_pa...
  • 3338a40 [Fix #14964] Fix false positives in Style/RedundantParentheses
  • Additional commits viewable in compare view

Updates sorbet from 0.6.12997 to 0.6.13028

Release notes

Sourced from sorbet's releases.

sorbet 0.6.13027.20260313161605-d2d0ae246

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13027', :group => :development
gem 'sorbet-runtime', '0.6.13027'

sorbet 0.6.13026.20260313113732-4b7ca5a7b

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13026', :group => :development
gem 'sorbet-runtime', '0.6.13026'

sorbet 0.6.13025.20260313103129-0a0442711

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13025', :group => :development
gem 'sorbet-runtime', '0.6.13025'

sorbet 0.6.13024.20260313052628-289a079b5

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13024', :group => :development
gem 'sorbet-runtime', '0.6.13024'

sorbet 0.6.13023.20260312210213-1b424aff1

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13023', :group => :development
gem 'sorbet-runtime', '0.6.13023'

sorbet 0.6.13022.20260312180843-6f0ea1402

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13022', :group => :development
gem 'sorbet-runtime', '0.6.13022'

sorbet 0.6.13021.20260312133523-fd325a603

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13021', :group => :development
gem 'sorbet-runtime', '0.6.13021'

sorbet 0.6.13020.20260312092927-67b867fc3

... (truncated)

Commits

Updates sorbet-static-and-runtime from 0.6.12997 to 0.6.13028

Release notes

Sourced from sorbet-static-and-runtime's releases.

sorbet 0.6.13027.20260313161605-d2d0ae246

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13027', :group => :development
gem 'sorbet-runtime', '0.6.13027'

sorbet 0.6.13026.20260313113732-4b7ca5a7b

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13026', :group => :development
gem 'sorbet-runtime', '0.6.13026'

sorbet 0.6.13025.20260313103129-0a0442711

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13025', :group => :development
gem 'sorbet-runtime', '0.6.13025'

sorbet 0.6.13024.20260313052628-289a079b5

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13024', :group => :development
gem 'sorbet-runtime', '0.6.13024'

sorbet 0.6.13023.20260312210213-1b424aff1

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13023', :group => :development
gem 'sorbet-runtime', '0.6.13023'

sorbet 0.6.13022.20260312180843-6f0ea1402

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13022', :group => :development
gem 'sorbet-runtime', '0.6.13022'

sorbet 0.6.13021.20260312133523-fd325a603

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13021', :group => :development
gem 'sorbet-runtime', '0.6.13021'

sorbet 0.6.13020.20260312092927-67b867fc3

... (truncated)

Commits

Updates rspec-rails from 8.0.3 to 8.0.4

Changelog

Sourced from rspec-rails's changelog.

8.0.4 / 2026-03-10

Full Changelog

Released to relax version constraint for rspec to allow 4.0.0.beta1.

Commits

Updates action_text-trix from 2.1.16 to 2.1.17

Release notes

Sourced from action_text-trix's releases.

v2.1.17

Security

Bug fixes

Infrastructure/CI

Chores

New Contributors

Full Changelog: basecamp/trix@v2.1.16...v2.1.17

Commits
  • 2e46d51 v2.1.17
  • 53197ab Merge pull request #1282 from basecamp/h1-3581911-serialized-attr
  • 3229c29 Fix stored XSS via data-trix-serialized-attributes sanitizer bypass (H1 #3581...
  • 7069343 Merge pull request #1239 from Cromian/patch-1
  • d9dbf0a Merge pull request #1280 from basecamp/fix-bullets-merging-with-prior-element
  • bef13e2 Fix bullets merging with prior elements when the first node is removed
  • 194a36c Merge pull request #1275 from basecamp/flavorjones/wtr-failure-messages
  • c94abe6 Use source-map to get better test failure messages
  • 6f6ab9a Test runner reporter emits failure details
  • 1d2d1a3 Merge pull request #1276 from basecamp/flavorjones/ci-green-20260109
  • Additional commits viewable in compare view

Updates rubocop-ast from 1.49.0 to 1.49.1

Changelog

Sourced from rubocop-ast's changelog.

1.49.1 (2026-03-11)

Bug fixes

  • #399: Fix unification variables not persisting in any-order nodes. ([@​marcandre][])
Commits

Updates sorbet-static from 0.6.12997 to 0.6.13028

Release notes

Sourced from sorbet-static's releases.

sorbet 0.6.13027.20260313161605-d2d0ae246

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13027', :group => :development
gem 'sorbet-runtime', '0.6.13027'

sorbet 0.6.13026.20260313113732-4b7ca5a7b

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13026', :group => :development
gem 'sorbet-runtime', '0.6.13026'

sorbet 0.6.13025.20260313103129-0a0442711

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13025', :group => :development
gem 'sorbet-runtime', '0.6.13025'

sorbet 0.6.13024.20260313052628-289a079b5

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13024', :group => :development
gem 'sorbet-runtime', '0.6.13024'

sorbet 0.6.13023.20260312210213-1b424aff1

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13023', :group => :development
gem 'sorbet-runtime', '0.6.13023'

sorbet 0.6.13022.20260312180843-6f0ea1402

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13022', :group => :development
gem 'sorbet-runtime', '0.6.13022'

sorbet 0.6.13021.20260312133523-fd325a603

To use Sorbet add this line to your Gemfile:

gem 'sorbet', '0.6.13021', :group => :development
gem 'sorbet-runtime', '0.6.13021'

sorbet 0.6.13020.20260312092927-67b867fc3

... (truncated)

Commits

Updates tailwindcss-ruby from 4.2.0 to 4.2.1

Release notes

Sourced from tailwindcss-ruby's releases.

v4.2.1

Changelog

Sourced from tailwindcss-ruby's changelog.

v4.2.1

Commits
  • 16fd116 Merge pull request #105 from flavorjones/bot-dep-tailwindcss-v4.2.1
  • 1c95aab dep: update to Tailwind CSS v4.2.1
  • 5e84094 ci: skeleton workflows so I can iterate in a PR
  • 9adac31 dev: Add a dependabot file for actions and bundler
  • 5adb316 Merge pull request #98 from flavorjones/flavorjones/harden-github-actions
  • d070836 ci: harden github actions
  • 239a04b dep(dev): bundle update
  • See full diff in compare view

Updates timeout from 0.6.0 to 0.6.1

Release notes

Sourced from timeout's releases.

v0.6.1

What's Changed

New Contributors

Full Changelog: ruby/timeout@v0.6.0...v0.6.1

Commits
  • 951e802 Bump version to 0.6.1
  • 9b93553 Remove warnings
  • e4aa360 Fix timing-dependent test
  • 55d7c84 Compatibility with Fiber scheduler. (#97)
  • 35504ba Merge pull request #98 from ruby/dependabot/github_actions/step-security/hard...
  • 5c0e61e Bump step-security/harden-runner from 2.15.0 to 2.15.1
  • f4e1caf Merge pull request #96 from ruby/dependabot/github_actions/step-security/hard...
  • 7960b04 Bump step-security/harden-runner from 2.14.2 to 2.15.0
  • 29e4fd3 Merge pull request #95 from ruby/dependabot/github_actions/step-security/hard...
  • ccbc5e6 Bump step-security/harden-runner from 2.14.1 to 2.14.2
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps): bump the all group with 4 updates
1dd93a1 
Bumps the all group with 4 updates: [github/codeql-action](https://github.com/github/codeql-action), [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action), [docker/login-action](https://github.com/docker/login-action) and [docker/build-push-action](https://github.com/docker/build-push-action).


Updates `github/codeql-action` from 4.32.4 to 4.32.6
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@89a39a4...0d579ff)

Updates `docker/setup-buildx-action` from 3.12.0 to 4.0.0
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](docker/setup-buildx-action@8d2750c...4d04d5d)

Updates `docker/login-action` from 3.7.0 to 4.0.0
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](docker/login-action@c94ce9f...b45d80f)

Updates `docker/build-push-action` from 6.19.2 to 7.0.0
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](docker/build-push-action@10e90e3...d08e5c3)
build(deps): bump the all group with 10 updates

Bumps the all group with 10 updates:

| Package | From | To |
| --- | --- | --- |
| [sorbet-runtime](https://github.com/sorbet/sorbet) | `0.6.12997` | `0.6.13028` |
| [rubocop](https://github.com/rubocop/rubocop) | `1.85.0` | `1.85.1` |
| [sorbet](https://github.com/sorbet/sorbet) | `0.6.12997` | `0.6.13028` |
| [sorbet-static-and-runtime](https://github.com/sorbet/sorbet) | `0.6.12997` | `0.6.13028` |
| [rspec-rails](https://github.com/rspec/rspec-rails) | `8.0.3` | `8.0.4` |
| [action_text-trix](https://github.com/basecamp/trix) | `2.1.16` | `2.1.17` |
| [rubocop-ast](https://github.com/rubocop/rubocop-ast) | `1.49.0` | `1.49.1` |
| [sorbet-static](https://github.com/sorbet/sorbet) | `0.6.12997` | `0.6.13028` |
| [tailwindcss-ruby](https://github.com/flavorjones/tailwindcss-ruby) | `4.2.0` | `4.2.1` |
| [timeout](https://github.com/ruby/timeout) | `0.6.0` | `0.6.1` |


Updates `sorbet-runtime` from 0.6.12997 to 0.6.13028
- [Release notes](https://github.com/sorbet/sorbet/releases)
- [Commits](https://github.com/sorbet/sorbet/commits)

Updates `rubocop` from 1.85.0 to 1.85.1
- [Release notes](https://github.com/rubocop/rubocop/releases)
- [Changelog](https://github.com/rubocop/rubocop/blob/master/CHANGELOG.md)
- [Commits](rubocop/rubocop@v1.85.0...v1.85.1)

Updates `sorbet` from 0.6.12997 to 0.6.13028
- [Release notes](https://github.com/sorbet/sorbet/releases)
- [Commits](https://github.com/sorbet/sorbet/commits)

Updates `sorbet-static-and-runtime` from 0.6.12997 to 0.6.13028
- [Release notes](https://github.com/sorbet/sorbet/releases)
- [Commits](https://github.com/sorbet/sorbet/commits)

Updates `rspec-rails` from 8.0.3 to 8.0.4
- [Changelog](https://github.com/rspec/rspec-rails/blob/main/Changelog.md)
- [Commits](rspec/rspec-rails@v8.0.3...v8.0.4)

Updates `action_text-trix` from 2.1.16 to 2.1.17
- [Release notes](https://github.com/basecamp/trix/releases)
- [Commits](basecamp/trix@v2.1.16...v2.1.17)

Updates `rubocop-ast` from 1.49.0 to 1.49.1
- [Release notes](https://github.com/rubocop/rubocop-ast/releases)
- [Changelog](https://github.com/rubocop/rubocop-ast/blob/master/CHANGELOG.md)
- [Commits](rubocop/rubocop-ast@v1.49.0...v1.49.1)

Updates `sorbet-static` from 0.6.12997 to 0.6.13028
- [Release notes](https://github.com/sorbet/sorbet/releases)
- [Commits](https://github.com/sorbet/sorbet/commits)

Updates `tailwindcss-ruby` from 4.2.0 to 4.2.1
- [Release notes](https://github.com/flavorjones/tailwindcss-ruby/releases)
- [Changelog](https://github.com/flavorjones/tailwindcss-ruby/blob/main/CHANGELOG.md)
- [Commits](flavorjones/tailwindcss-ruby@v4.2.0...v4.2.1)

Updates `timeout` from 0.6.0 to 0.6.1
- [Release notes](https://github.com/ruby/timeout/releases)
- [Commits](ruby/timeout@v0.6.0...v0.6.1)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.32.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: docker/setup-buildx-action
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: docker/login-action
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: docker/build-push-action
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: sorbet-runtime
  dependency-version: 0.6.13028
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: rubocop
  dependency-version: 1.85.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: sorbet
  dependency-version: 0.6.13028
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: sorbet-static-and-runtime
  dependency-version: 0.6.13028
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: rspec-rails
  dependency-version: 8.0.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: action_text-trix
  dependency-version: 2.1.17
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: rubocop-ast
  dependency-version: 1.49.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: sorbet-static
  dependency-version: 0.6.13028
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: tailwindcss-ruby
  dependency-version: 4.2.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: timeout
  dependency-version: 0.6.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies github_actions Pull requests that update GitHub Actions code labels Mar 16, 2026
@MikeMcQuaid MikeMcQuaid merged commit cfb38d6 into main Mar 16, 2026
7 checks passed
@MikeMcQuaid MikeMcQuaid deleted the dependabot/all-e843d21461 branch March 16, 2026 08:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies github_actions Pull requests that update GitHub Actions code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@MikeMcQuaid