Skip to content

chore(deps): Bump the github-actions-dependencies group with 2 updates - #81

Merged
JerrettDavis merged 1 commit into
mainfrom
dependabot/github_actions/github-actions-dependencies-d9eed0fe78
Jul 22, 2026
Merged

chore(deps): Bump the github-actions-dependencies group with 2 updates#81
JerrettDavis merged 1 commit into
mainfrom
dependabot/github_actions/github-actions-dependencies-d9eed0fe78

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 20, 2026

Copy link
Copy Markdown
Contributor

Bumps the github-actions-dependencies group with 2 updates: actions/setup-dotnet and github/codeql-action.

Updates actions/setup-dotnet from 5 to 6

Release notes

Sourced from actions/setup-dotnet's releases.

v6.0.0

What's Changed

New Contributors

Full Changelog: actions/setup-dotnet@v5...v6.0.0

v5.4.0

What's Changed

Enhancements

Documentation

Bug Fixes

Dependency Updates

New Contributors

Full Changelog: actions/setup-dotnet@v5...v5.4.0

v5.3.0

What's Changed

Enhancements

Dependency Updates

... (truncated)

Commits

Updates github/codeql-action from 4.37.0 to 4.37.1

Release notes

Sourced from github/codeql-action's releases.

v4.37.1

  • Upcoming breaking change: Add a deprecation warning for customers using CodeQL version 2.20.6 and earlier. These versions of CodeQL were discontinued on 1 July 2026 alongside GitHub Enterprise Server 3.16, and will be unsupported by the next minor release of the CodeQL Action. #3956
  • Update default CodeQL bundle version to 2.26.1. #4019
Changelog

Sourced from github/codeql-action's changelog.

4.37.1 - 16 Jul 2026

  • Upcoming breaking change: Add a deprecation warning for customers using CodeQL version 2.20.6 and earlier. These versions of CodeQL were discontinued on 1 July 2026 alongside GitHub Enterprise Server 3.16, and will be unsupported by the next minor release of the CodeQL Action. #3956
  • Update default CodeQL bundle version to 2.26.1. #4019
Commits
  • 7188fc3 Merge pull request #4020 from github/update-v4.37.1-9e7c07009
  • c8b5f69 Update changelog for v4.37.1
  • 9e7c070 Merge pull request #4014 from github/mbg/explicit-remote-prefix
  • 3492b7e Change REMOTE_PATH_PREFIX to remote=
  • 3654baa Merge remote-tracking branch 'origin/main' into mbg/explicit-remote-prefix
  • 2d682ac Merge pull request #4017 from github/dependabot/github_actions/dot-github/wor...
  • 23f6a50 Merge pull request #4009 from github/mbg/action-state/additions
  • 1ee3c75 Merge pull request #4018 from github/dependabot/github_actions/dot-github/wor...
  • e053684 Merge pull request #4015 from github/dependabot/npm_and_yarn/npm-minor-fd2e83...
  • 6803c56 Merge pull request #4019 from github/update-bundle/codeql-bundle-v2.26.1
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the github-actions-dependencies group with 2 updates: [actions/setup-dotnet](https://github.com/actions/setup-dotnet) and [github/codeql-action](https://github.com/github/codeql-action).


Updates `actions/setup-dotnet` from 5 to 6
- [Release notes](https://github.com/actions/setup-dotnet/releases)
- [Commits](actions/setup-dotnet@v5...v6)

Updates `github/codeql-action` from 4.37.0 to 4.37.1
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@v4.37.0...v4.37.1)

---
updated-dependencies:
- dependency-name: actions/setup-dotnet
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions-dependencies
- dependency-name: github/codeql-action
  dependency-version: 4.37.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from JerrettDavis as a code owner July 20, 2026 11:08
@dependabot @github

dependabot Bot commented on behalf of github Jul 20, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: ci. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@github-actions

Copy link
Copy Markdown

⚠️ Deprecation Warning: The deny-licenses option is deprecated for possible removal in the next major release. For more information, see issue 997.

Dependency Review

The following issues were found:
  • ✅ 0 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ⚠️ 1 package(s) with unknown licenses.
See the Details below.

License Issues

.github/workflows/pr-validation.yml

PackageVersionLicenseIssue Type
actions/setup-dotnet6.*.*NullUnknown License
Denied Licenses: GPL-2.0, GPL-3.0, AGPL-3.0

OpenSSF Scorecard

PackageVersionScoreDetails
actions/actions/setup-dotnet 6.*.* 🟢 6.6
Details
CheckScoreReason
Binary-Artifacts🟢 10no binaries found in the repo
Maintained🟢 1012 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Code-Review🟢 10all changesets reviewed
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
License🟢 10license file detected
Pinned-Dependencies🟢 8dependency not pinned by hash detected -- score normalized to 8
Fuzzing⚠️ 0project is not fuzzed
Signed-Releases⚠️ -1no releases found
Security-Policy🟢 9security policy file detected
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
SAST🟢 9SAST tool is not run on all commits -- score normalized to 9

Scanned Files

  • .github/workflows/pr-validation.yml

@github-actions

Copy link
Copy Markdown

Code Coverage

Summary
  Generated on: 07/20/2026 - 11:13:29
  Coverage date: 07/20/2026 - 11:13:22 - 07/20/2026 - 11:13:27
  Parser: MultiReport (8x Cobertura)
  Assemblies: 7
  Classes: 59
  Files: 56
  Line coverage: 74.5%
  Covered lines: 1339
  Uncovered lines: 457
  Coverable lines: 1796
  Total lines: 5078
  Branch coverage: 59.5% (492 of 826)
  Covered branches: 492
  Total branches: 826
  Method coverage: 85.2% (225 of 264)
  Full method coverage: 71.5% (189 of 264)
  Covered methods: 225
  Fully covered methods: 189
  Total methods: 264

JD.SemanticKernel.Extensions.Compaction                                          98.1%
  JD.SemanticKernel.Extensions.Compaction.CompactionFilter                        100%
  JD.SemanticKernel.Extensions.Compaction.CompactionOptions                       100%
  JD.SemanticKernel.Extensions.Compaction.ContextPercentageTrigger               87.5%
  JD.SemanticKernel.Extensions.Compaction.HierarchicalSummarizationStrategy      97.7%
  JD.SemanticKernel.Extensions.Compaction.ServiceCollectionExtensions             100%
  JD.SemanticKernel.Extensions.Compaction.TokenEstimator                          100%
  JD.SemanticKernel.Extensions.Compaction.TokenThresholdTrigger                   100%

JD.SemanticKernel.Extensions.Hooks                                               76.5%
  JD.SemanticKernel.Extensions.Hooks.CommandHookExecutor                            0%
  JD.SemanticKernel.Extensions.Hooks.ExtensionEvent                               100%
  JD.SemanticKernel.Extensions.Hooks.ExtensionEventBus                            100%
  JD.SemanticKernel.Extensions.Hooks.HookBuilder                                  100%
  JD.SemanticKernel.Extensions.Hooks.HookDefinition                               100%
  JD.SemanticKernel.Extensions.Hooks.HookParser                                  83.9%
  JD.SemanticKernel.Extensions.Hooks.KernelBuilderExtensions                     32.2%
  JD.SemanticKernel.Extensions.Hooks.SkHookFilter                                 100%
  JD.SemanticKernel.Extensions.Hooks.SkPromptHookFilter                           100%

JD.SemanticKernel.Extensions.Mcp                                                 60.4%
  JD.SemanticKernel.Extensions.Mcp.Discovery.ClaudeCodeMcpDiscoveryProvider       100%
  JD.SemanticKernel.Extensions.Mcp.Discovery.ClaudeDesktopMcpDiscoveryProvider    4.3%
  JD.SemanticKernel.Extensions.Mcp.Discovery.CodexMcpDiscoveryProvider           18.1%
  JD.SemanticKernel.Extensions.Mcp.Discovery.CopilotMcpDiscoveryProvider          4.7%
  JD.SemanticKernel.Extensions.Mcp.Discovery.FileMcpDiscoveryProvider            92.8%
  JD.SemanticKernel.Extensions.Mcp.Discovery.JdCanonicalMcpDiscoveryProvider     93.1%
  JD.SemanticKernel.Extensions.Mcp.Discovery.McpConfigParser                     73.9%
  JD.SemanticKernel.Extensions.Mcp.Discovery.VsCodeMcpDiscoveryProvider          86.6%
  JD.SemanticKernel.Extensions.Mcp.KernelBuilderMcpExtensions                       0%
  JD.SemanticKernel.Extensions.Mcp.KernelIntegration.McpKernelPluginFactory         0%
  JD.SemanticKernel.Extensions.Mcp.McpClientRegistry                                0%
  JD.SemanticKernel.Extensions.Mcp.McpInvocationResult                            100%
  JD.SemanticKernel.Extensions.Mcp.McpServerDefinition                            100%
  JD.SemanticKernel.Extensions.Mcp.McpToolDefinition                              100%
  JD.SemanticKernel.Extensions.Mcp.McpToolParameter                              93.3%
  JD.SemanticKernel.Extensions.Mcp.Registry.McpRegistry                           100%
  JD.SemanticKernel.Extensions.Mcp.Transport.HttpMcpClient                       87.6%
  JD.SemanticKernel.Extensions.Mcp.Transport.McpResponseParser                   90.3%
  JD.SemanticKernel.Extensions.Mcp.Transport.StdioMcpClient                      56.5%

JD.SemanticKernel.Extensions.Memory                                              94.5%
  JD.SemanticKernel.Extensions.Memory.InMemoryBackend                            96.1%
  JD.SemanticKernel.Extensions.Memory.MemoryRecord                                100%
  JD.SemanticKernel.Extensions.Memory.MemoryResult                                100%
  JD.SemanticKernel.Extensions.Memory.MemorySearchOptions                         100%
  JD.SemanticKernel.Extensions.Memory.MmrReranker                                96.9%
  JD.SemanticKernel.Extensions.Memory.QueryExpander                               100%
  JD.SemanticKernel.Extensions.Memory.SemanticMemory                             92.5%
  JD.SemanticKernel.Extensions.Memory.SemanticMemoryOptions                       100%
  JD.SemanticKernel.Extensions.Memory.ServiceCollectionExtensions                76.9%
  JD.SemanticKernel.Extensions.Memory.TemporalDecayScorer                         100%

JD.SemanticKernel.Extensions.Memory.Sqlite                                       94.9%
  JD.SemanticKernel.Extensions.Memory.Sqlite.ServiceCollectionExtensions          100%
  JD.SemanticKernel.Extensions.Memory.Sqlite.SqliteMemoryBackend                 94.7%

JD.SemanticKernel.Extensions.Plugins                                             74.5%
  JD.SemanticKernel.Extensions.Plugins.KernelBuilderExtensions                      0%
  JD.SemanticKernel.Extensions.Plugins.LoadedPlugin                               100%
  JD.SemanticKernel.Extensions.Plugins.PluginDependencyResolver                   100%
  JD.SemanticKernel.Extensions.Plugins.PluginLoader                              96.8%
  JD.SemanticKernel.Extensions.Plugins.PluginLoadOptions                            0%
  JD.SemanticKernel.Extensions.Plugins.PluginManifest                             100%

JD.SemanticKernel.Extensions.Skills                                              84.1%
  JD.SemanticKernel.Extensions.Skills.KernelBuilderExtensions                       0%
  JD.SemanticKernel.Extensions.Skills.SkillDefinition                             100%
  JD.SemanticKernel.Extensions.Skills.SkillKernelFunction                         100%
  JD.SemanticKernel.Extensions.Skills.SkillLoader                                 100%
  JD.SemanticKernel.Extensions.Skills.SkillLoadOptions                              0%
  JD.SemanticKernel.Extensions.Skills.SkillParser                                97.2%

@github-actions

Copy link
Copy Markdown

Test Results

243 tests   217 ✅  6s ⏱️
  8 suites   26 💤
  8 files      0 ❌

Results for commit fc6bad7.

@JerrettDavis
JerrettDavis merged commit 2b72634 into main Jul 22, 2026
12 checks passed
@JerrettDavis
JerrettDavis deleted the dependabot/github_actions/github-actions-dependencies-d9eed0fe78 branch July 22, 2026 04:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant