Bump the github-actions group with 3 updates by dependabot[bot] · Pull Request #2689 · dart-lang/test

dependabot · 2026-07-01T03:43:05Z

Bumps the github-actions group with 3 updates: actions/cache, actions/checkout and github/codeql-action/upload-sarif.

Updates actions/cache from 5.0.5 to 6.1.0

Release notes

Sourced from actions/cache's releases.

v6.1.0

What's Changed

Bump @actions/cache to v6.1.0 - handle read-only cache access by @jasongin in actions/cache#1768

Full Changelog: actions/cache@v6...v6.1.0

v6.0.0

What's Changed

Update packages, migrate to ESM by @Samirat in actions/cache#1760

Full Changelog: actions/cache@v5...v6.0.0

v5.1.0

What's Changed

Bump @actions/cache to v5.1.0 - handle read-only cache access by @jasongin in actions/cache#1775

Full Changelog: actions/cache@v5...v5.1.0

Changelog

Sourced from actions/cache's changelog.

Releases

How to prepare a release

[!NOTE] Relevant for maintainers with write access only.

Switch to a new branch from main.

Run npm test to ensure all tests are passing.

Update the version in https://github.com/actions/cache/blob/main/package.json.

Run npm run build to update the compiled files.

Update this https://github.com/actions/cache/blob/main/RELEASES.md with the new version and changes in the ## Changelog section.

Run licensed cache to update the license report.

Run licensed status and resolve any warnings by updating the https://github.com/actions/cache/blob/main/.licensed.yml file with the exceptions.

Commit your changes and push your branch upstream.

Open a pull request against main and get it reviewed and merged.

Draft a new release https://github.com/actions/cache/releases use the same version number used in package.json

Create a new tag with the version number.

Auto generate release notes and update them to match the changes you made in RELEASES.md.

Toggle the set as the latest release option.

Publish the release.

Navigate to https://github.com/actions/cache/actions/workflows/release-new-action-version.yml

There should be a workflow run queued with the same version number.

Approve the run to publish the new version and update the major tags for this action.

Changelog

6.1.0

Bump @actions/cache to v6.1.0 to pick up actions/toolkit#2435 Handle cache write error due to read-only token

Switch redundant "Cache save failed" warning to debug log in save-only

6.0.0

Updated @actions/cache to ^6.0.1, @actions/core to ^3.0.1, @actions/exec to ^3.0.0, @actions/io to ^3.0.2

Migrated to ESM module system

Upgraded Jest to v30 and test infrastructure to be ESM compatible

5.0.4

Bump minimatch to v3.1.5 (fixes ReDoS via globstar patterns)

Bump undici to v6.24.1 (WebSocket decompression bomb protection, header validation fixes)

Bump fast-xml-parser to v5.5.6

5.0.3

Bump @actions/cache to v5.0.5 (Resolves: https://github.com/actions/cache/security/dependabot/33)

Bump @actions/core to v2.0.3

5.0.2

... (truncated)

Commits

55cc834 Merge pull request #1768 from jasongin/readonly-cache
d8cd72f Bump @actions/cache to v6.1.0 - handle cache write error due to RO token
2c8a9bd Merge pull request #1760 from actions/samirat/esm_migration_and_package_update
e9b91fd Prettier fixes
e4884b8 Rebuild dist
10baf01 Fixed licenses
e39b386 Fix test mock return order
b692820 PR feedback
6074912 Rebuild dist bundles as ESM to match type:module
5a912e8 Fix lint and jest issues
Additional commits viewable in compare view

Updates actions/checkout from 6.0.2 to 7.0.0

Release notes

Sourced from actions/checkout's releases.

v7.0.0

What's Changed

block checking out fork pr for pull_request_target and workflow_run by @aiqiaoy in actions/checkout#2454

Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @dependabot[bot] in actions/checkout#2458

Bump flatted from 3.3.1 to 3.4.2 by @dependabot[bot] in actions/checkout#2460

Bump js-yaml from 4.1.0 to 4.2.0 by @dependabot[bot] in actions/checkout#2461

Bump @actions/core and @actions/tool-cache and Remove uuid by @dependabot[bot] in actions/checkout#2459

upgrade module to esm and update dependencies by @aiqiaoy in actions/checkout#2463

Bump the minor-npm-dependencies group across 1 directory with 3 updates by @dependabot[bot] in actions/checkout#2462

getting ready for checkout v7 release by @aiqiaoy in actions/checkout#2464

update error wording by @aiqiaoy in actions/checkout#2467

New Contributors

@aiqiaoy made their first contribution in actions/checkout#2454

Full Changelog: actions/checkout@v6.0.3...v7.0.0

v6.0.3

What's Changed

Update changelog by @ericsciple in actions/checkout#2357

fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in actions/checkout#2414

Fix checkout init for SHA-256 repositories by @yaananth in actions/checkout#2439

Update changelog for v6.0.3 by @yaananth in actions/checkout#2446

New Contributors

@yaananth made their first contribution in actions/checkout#2414

Full Changelog: actions/checkout@v6...v6.0.3

Changelog

Sourced from actions/checkout's changelog.

Changelog

v7.0.0

Block checking out fork PR for pull_request_target and workflow_run by @aiqiaoy in actions/checkout#2454

Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @dependabot[bot] in actions/checkout#2458

Bump flatted from 3.3.1 to 3.4.2 by @dependabot[bot] in actions/checkout#2460

Bump js-yaml from 4.1.0 to 4.2.0 by @dependabot[bot] in actions/checkout#2461

Bump @actions/core and @actions/tool-cache and Remove uuid by @dependabot[bot] in actions/checkout#2459

upgrade module to esm and update dependencies by @aiqiaoy in actions/checkout#2463

Bump the minor-npm-dependencies group across 1 directory with 3 updates by @dependabot[bot] in actions/checkout#2462

v6.0.3

Fix checkout init for SHA-256 repositories by @yaananth in actions/checkout#2439

fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in actions/checkout#2414

v6.0.2

Fix tag handling: preserve annotations and explicit fetch-tags by @ericsciple in actions/checkout#2356

v6.0.1

Add worktree support for persist-credentials includeIf by @ericsciple in actions/checkout#2327

v6.0.0

Persist creds to a separate file by @ericsciple in actions/checkout#2286

Update README to include Node.js 24 support details and requirements by @salmanmkc in actions/checkout#2248

v5.0.1

Port v6 cleanup to v5 by @ericsciple in actions/checkout#2301

v5.0.0

Update actions checkout to use node 24 by @salmanmkc in actions/checkout#2226

v4.3.1

Port v6 cleanup to v4 by @ericsciple in actions/checkout#2305

v4.3.0

docs: update README.md by @motss in actions/checkout#1971

Add internal repos for checking out multiple repositories by @mouismail in actions/checkout#1977

Documentation update - add recommended permissions to Readme by @benwells in actions/checkout#2043

Adjust positioning of user email note and permissions heading by @joshmgross in actions/checkout#2044

Update README.md by @nebuk89 in actions/checkout#2194

Update CODEOWNERS for actions by @TingluoHuang in actions/checkout#2224

Update package dependencies by @salmanmkc in actions/checkout#2236

v4.2.2

url-helper.ts now leverages well-known environment variables by @jww3 in actions/checkout#1941

Expand unit test coverage for isGhes by @jww3 in actions/checkout#1946

v4.2.1

Check out other refs/* by commit if provided, fall back to ref by @orhantoy in actions/checkout#1924

... (truncated)

Commits

9c091bb update error wording (#2467)
1044a6d getting ready for checkout v7 release (#2464)
f028218 Bump the minor-npm-dependencies group across 1 directory with 3 updates (#2462)
d914b26 upgrade module to esm and update dependencies (#2463)
537c7ef Bump @actions/core and @actions/tool-cache and Remove uuid (#2459)
130a169 Bump js-yaml from 4.1.0 to 4.2.0 (#2461)
7d09575 Bump flatted from 3.3.1 to 3.4.2 (#2460)
0f9f3aa Bump actions/publish-immutable-action (#2458)
f9e715a block checking out fork pr for pull_request_target and workflow_run (#2454)
df4cb1c Update changelog for v6.0.3 (#2446)
Additional commits viewable in compare view

Updates github/codeql-action/upload-sarif from 4.36.0 to 4.36.2

Release notes

Sourced from github/codeql-action/upload-sarif's releases.

v4.36.2

Cache CodeQL CLI version information across Actions steps. #3943

Reduce requests while waiting for analysis processing by using exponential backoff when polling SARIF processing status. #3937

Update default CodeQL bundle version to 2.25.6. #3948

v4.36.1

No user facing changes.

Changelog

Sourced from github/codeql-action/upload-sarif's changelog.

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

[UNRELEASED]

No user facing changes.

4.36.2 - 04 Jun 2026

Cache CodeQL CLI version information across Actions steps. #3943

Reduce requests while waiting for analysis processing by using exponential backoff when polling SARIF processing status. #3937

Update default CodeQL bundle version to 2.25.6. #3948

4.36.1 - 02 Jun 2026

No user facing changes.

4.36.0 - 22 May 2026

Breaking change: Bump the minimum required CodeQL bundle version to 2.19.4. #3894

Add support for SHA-256 Git object IDs. #3893

Update default CodeQL bundle version to 2.25.5. #3926

4.35.5 - 15 May 2026

We have improved how the JavaScript bundles for the CodeQL Action are generated to avoid duplication across bundles and reduce the size of the repository by around 70%. This should have no effect on the runtime behaviour of the CodeQL Action. #3899

For performance and accuracy reasons, improved incremental analysis will now only be enabled on a pull request when diff-informed analysis is also enabled for that run. If diff-informed analysis is unavailable (for example, because the PR diff ranges could not be computed), the action will fall back to a full analysis. #3791

If multiple inputs are provided for the GitHub-internal analysis-kinds input, only code-scanning will be enabled. The analysis-kinds input is experimental, for GitHub-internal use only, and may change without notice at any time. #3892

Added an experimental change which, when running a Code Scanning analysis for a PR with improved incremental analysis enabled, prefers CodeQL CLI versions that have a cached overlay-base database for the configured languages. This speeds up analysis for a repository when there is not yet a cached overlay-base database for the latest CLI version. We expect to roll this change out to everyone in May. #3880

4.35.4 - 07 May 2026

Update default CodeQL bundle version to 2.25.4. #3881

4.35.3 - 01 May 2026

Upcoming breaking change: Add a deprecation warning for customers using CodeQL version 2.19.3 and earlier. These versions of CodeQL were discontinued on 9 April 2026 alongside GitHub Enterprise Server 3.15, and will be unsupported by the next minor release of the CodeQL Action. #3837

Configurations for private registries that use Cloudsmith or GCP OIDC are now accepted. #3850

Best-effort connection tests for private registries now use GET requests instead of HEAD for better compatibility with various registry implementations. For NuGet feeds, the test is now always performed against the service index. #3853

Fixed a bug where two diagnostics produced within the same millisecond could overwrite each other on disk, causing one of them to be lost. #3852

Update default CodeQL bundle version to 2.25.3. #3865

4.35.2 - 15 Apr 2026

The undocumented TRAP cache cleanup feature that could be enabled using the CODEQL_ACTION_CLEANUP_TRAP_CACHES environment variable is deprecated and will be removed in May 2026. If you are affected by this, we recommend disabling TRAP caching by passing the trap-caching: false input to the init Action. #3795

The Git version 2.36.0 requirement for improved incremental analysis now only applies to repositories that contain submodules. #3789

Python analysis on GHES no longer extracts the standard library, relying instead on models of the standard library. This should result in significantly faster extraction and analysis times, while the effect on alerts should be minimal. #3794

Fixed a bug in the validation of OIDC configurations for private registries that was added in CodeQL Action 4.33.0 / 3.33.0. #3807

Update default CodeQL bundle version to 2.25.2. #3823

... (truncated)

Commits

8aad20d Merge pull request #3949 from github/update-v4.36.2-dcb947ce1
f521b08 Add additional changelog notes
8aeff0f Update changelog for v4.36.2
dcb947c Merge pull request #3948 from github/update-bundle/codeql-bundle-v2.25.6
c251bce Add changelog note
62953c1 Update default bundle to codeql-bundle-v2.25.6
423b570 Merge pull request #3946 from github/dependabot/npm_and_yarn/npm-minor-5d507a...
c35d1b1 Merge pull request #3947 from github/dependabot/github_actions/dot-github/wor...
cb1a588 Merge pull request #3937 from github/robertbrignull/waitForProcessing_backoff
ba47406 Merge pull request #3943 from github/henrymercer/cache-cli-version-info
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the github-actions group with 3 updates: [actions/cache](https://github.com/actions/cache), [actions/checkout](https://github.com/actions/checkout) and [github/codeql-action/upload-sarif](https://github.com/github/codeql-action). Updates `actions/cache` from 5.0.5 to 6.1.0 - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](actions/cache@27d5ce7...55cc834) Updates `actions/checkout` from 6.0.2 to 7.0.0 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@de0fac2...9c091bb) Updates `github/codeql-action/upload-sarif` from 4.36.0 to 4.36.2 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@7211b7c...8aad20d) --- updated-dependencies: - dependency-name: actions/cache dependency-version: 6.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/checkout dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: github/codeql-action/upload-sarif dependency-version: 4.36.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-07-01T03:44:13Z

PR Health

Changelog Entry ✔️

Package	Changed Files

Changes to files need to be accounted for in their respective changelogs.

This check can be disabled by tagging the PR with skip-changelog-check.

Hold back `dart-lang/http` which has deprecations that break CI. Revisions updated by `dart tools/rev_sdk_deps.dart`. core (https://github.com/dart-lang/core/compare/25926e8..fe516ee): fe516ee1 Mon Jul 27 20:19:16 2026 +0200 Moritz Consolidate no-response workflow into no_response.yml (dart-lang/core#982) 2deeeade Mon Jul 27 18:05:47 2026 +0530 Abhishak Kumar Malviya fix: async cache storing exception fixed (dart-lang/core#548) bed8f40e Fri Jul 24 11:29:13 2026 -0700 Nate Bosch Add `value` getter to `Result` (dart-lang/core#969) dartdoc (https://github.com/dart-lang/dartdoc/compare/1d56f26..c771ad2): c771ad2a Tue Jul 7 12:36:55 2026 +0200 Sarah Zakarias bump to 9.0.8 (dart-lang/dartdoc#4270) 38d079a2 Tue Jul 7 12:09:52 2026 +0200 Sigurd Meldgaard Fix RangeError when stripping doc-imports from files with CRLF line endings (dart-lang/dartdoc#4268) 794a1d38 Mon Jul 6 13:48:14 2026 +0200 Sarah Zakarias bump to 9.0.7 (dart-lang/dartdoc#4269) b9c94739 Mon Jul 6 13:29:28 2026 +0200 Sarah Zakarias Add interactive copy-to-clipboard button to code snippets (dart-lang/dartdoc#4267) 9831db9b Fri Jul 3 11:44:06 2026 +0200 Sarah Zakarias Add support and styling for custom <callout-box> HTML tags (dart-lang/dartdoc#4264) f52f910f Wed Jul 1 18:55:26 2026 +0000 dependabot[bot] Bump the github-actions group with 3 updates (dart-lang/dartdoc#4265) 36b1aebc Wed Jul 1 12:14:01 2026 +0200 Sarah Zakarias Bump to 9.0.6 (dart-lang/dartdoc#4263) ecosystem (https://github.com/dart-lang/ecosystem/compare/848b3bf..edfdb3b): edfdb3b Thu Jul 23 17:27:43 2026 +0200 Moritz Add want-lgtm reusable workflow (dart-lang/ecosystem#432) a6c8ef0 Thu Jul 23 14:29:53 2026 +0200 Moritz Validate target PR number and comment ownership in post_summaries workflow (dart-lang/ecosystem#434) 80a9928 Thu Jul 23 13:49:48 2026 +0200 Moritz Fix canary workflow (dart-lang/ecosystem#433) 910d668 Wed Jul 15 18:04:05 2026 +0200 Moritz Pass GITHUB_TOKEN to firehose:comment steps in workflows (dart-lang/ecosystem#431) 980c6df Sat Jul 11 00:20:55 2026 +0200 Moritz Fix `-WIP` ending detection (dart-lang/ecosystem#430) 60c0f67 Wed Jul 8 20:38:35 2026 +0200 Moritz Run `pub get` before `dart format` in groundskeeper (dart-lang/ecosystem#429) bcef699 Tue Jul 7 10:17:24 2026 +0200 Moritz Fix `groundskeeper` workflow (dart-lang/ecosystem#428) 77def11 Fri Jul 3 11:43:12 2026 +0200 Moritz Simplify groundskeeper (dart-lang/ecosystem#426) 3dd606a Wed Jul 1 18:19:25 2026 +0000 dependabot[bot] Bump the github-actions group with 3 updates (dart-lang/ecosystem#427) d6ec975 Wed Jul 1 14:41:23 2026 +0200 Moritz Add changelog updater (dart-lang/ecosystem#424) f8a4fbb Wed Jul 1 10:00:59 2026 +0200 Moritz Add `Groundskeeper` workflow (dart-lang/ecosystem#425) i18n (https://github.com/dart-lang/i18n/compare/d0683bd..e1b5a79): e1b5a798 Tue Jul 14 13:10:29 2026 +0200 Moritz Add weekday API (dart-lang/i18n#1071) 04b78e38 Thu Jul 9 14:16:22 2026 +0200 Moritz Add stale workflow (dart-lang/i18n#1069) 01e20101 Thu Jul 9 13:42:08 2026 +0200 Moritz Add stale workflow 03efda51 Thu Jul 9 13:19:31 2026 +0200 Moritz Update ICU4X (dart-lang/i18n#1068) 4d8a1b39 Tue Jul 7 11:23:06 2026 +0200 Moritz feat(intl4x): add locale.dart entrypoint exposing only Locale (dart-lang/i18n#1067) b2b7ce08 Mon Jul 6 03:23:28 2026 -0700 Copybara-Service Merge pull request `#1038` from donny-dont:patch-1 cca1dc44 Mon Jul 6 03:10:59 2026 -0700 Copybara-Service Merge pull request `#1040` from suxoikorm:main 28352851 Mon Jul 6 02:40:25 2026 -0700 Copybara-Service Merge pull request `#1062` from AbdeMohlbi:issue_116 9f8e7998 Mon Jul 6 02:16:05 2026 -0700 Copybara-Service Merge pull request `#1050` from LaijieJi:patch-1 be8e2c0d Fri Jul 3 14:50:28 2026 +0200 Moritz Merge branch 'main' into issue_116 8b119830 Fri Jul 3 14:33:33 2026 +0200 Moritz Merge branch 'main' into patch-1 96aab97a Fri Jul 3 14:30:55 2026 +0200 Moritz Merge branch 'main' into main 9e700b2a Thu Jul 2 09:37:45 2026 +0200 Moritz Merge branch 'main' into patch-1 a6f174b8 Wed Jul 1 08:32:07 2026 -0700 Googler No public description fb1feb18 Wed Jul 1 08:32:33 2026 -0700 Copybara-Service Merge pull request `#1058` from dart-lang:upgrade_analyzer 77926a26 Thu May 7 20:52:55 2026 +0100 abdessalem gemini has a point c2f96cba Thu May 7 20:45:40 2026 +0100 abdessalem revert the formating changes ebb0a441 Thu May 7 20:41:40 2026 +0100 abdessalem update select documentation to clarify other fallback behavior and when `ArgumentError` is thrown b13c2d48 Mon Mar 9 10:35:50 2026 +0100 Moritz Merge branch 'main' into patch-1 6581675f Mon Feb 9 09:13:25 2026 +0100 Laijie Fix typo in number_format.dart documentation 69d1e6a6 Thu Jan 29 15:25:06 2026 +0400 Luka Katsadze Merge branch 'main' into main 55a61fa6 Fri Dec 19 15:51:58 2025 -0800 Don Olmstead Escape text direction code points a140f2ef Mon Dec 29 21:42:09 2025 +0400 Luka Katsadze fix: correct formatting of Georgian Lari symbol entry in changelog 76a370c5 Mon Dec 29 21:34:35 2025 +0400 Luka Katsadze chore: update changelog 9df0c191 Mon Dec 29 21:31:39 2025 +0400 Luka Katsadze feat: add georgian lari symbol support shelf (https://github.com/dart-lang/shelf/compare/71248e7..6918a76): 6918a76 Mon Jul 20 18:45:56 2026 -0700 Kevin Moore feat(compliance): add GitHub Actions Job Summary to test runs (dart-lang/shelf#527) e9c742d Mon Jul 20 20:28:03 2026 +0300 Yusuf İhsan Görgel fix: join multiple Cookie header values with '; ' instead of ',' (`#521`) (dart-lang/shelf#536) 833433e Mon Jul 6 16:59:42 2026 -0700 Kevin Moore chore: standardize min SDK to ^3.9.0 and unify lints 7af986e Wed Jul 1 12:27:06 2026 +0000 dependabot[bot] Bump the github-actions group with 2 updates (dart-lang/shelf#535) test (https://github.com/dart-lang/test/compare/bd92e63..5fcd6f4): 5fcd6f40 Thu Jul 23 16:01:06 2026 -0700 Nate Bosch Remove unnecessary remote debugging flag (dart-lang/test#2705) 72d6dfcc Thu Jul 23 14:02:30 2026 -0700 Nate Bosch Launch browsers with redirecting files (dart-lang/test#2703) 8ab38846 Thu Jul 23 13:50:10 2026 -0700 Nate Bosch Disable more backgrounding features on chromium (dart-lang/test#2680) d835f706 Wed Jul 22 16:30:46 2026 -0700 Nate Bosch Only print debug URL when debugging (dart-lang/test#2702) 9abe202a Tue Jul 21 11:56:41 2026 -0700 Nate Bosch Ignore dart2js output for successful compiles (dart-lang/test#2701) ce557ba1 Mon Jul 20 16:25:56 2026 -0700 Nate Bosch Group messages with passing tests (dart-lang/test#2699) d79747cd Fri Jul 17 13:10:12 2026 -0700 Jacob MacDonald Make workflow files more secure (dart-lang/test#2698) 91ca13f0 Wed Jul 8 14:17:45 2026 -0700 Nate Bosch Support DART_TEST_REPORTER environment variable (dart-lang/test#2692) dcb06ac7 Wed Jul 1 03:50:42 2026 +0000 dependabot[bot] Bump the github-actions group with 3 updates (dart-lang/test#2689) tools (https://github.com/dart-lang/tools/compare/3f850c4..01f45d8): 01f45d85 Thu Jul 23 16:49:10 2026 -0700 Nate Bosch [glob] Limit expansion during option flattening (dart-lang/tools#2477) acc91d65 Thu Jul 23 16:00:59 2026 -0700 Kevin Moore Add tests for PoolResource and close, and fix allowRelease leak (dart-lang/tools#2368) 0e54bd66 Thu Jul 23 15:25:22 2026 -0700 Nate Bosch Parse hosted URLs as URLs (dart-lang/tools#2476) 7e124963 Wed Jul 22 15:01:34 2026 -0700 Sam Rawlins Markdown: optimize email regex (dart-lang/tools#2474) 906d9d4e Wed Jul 22 13:25:24 2026 -0700 Sam Rawlins Markdown: More tag filter tests (dart-lang/tools#2473) 588fbad4 Wed Jul 22 10:54:42 2026 -0700 Sam Rawlins Expand HTML filter regexp to include more characters that would denote an HTML tag (dart-lang/tools#2472) e4f20cc7 Wed Jul 22 09:33:59 2026 -0700 Sam Rawlins Respect enableTagfilter when inlineOnly is passed (dart-lang/tools#2471) c4082344 Wed Jul 22 07:41:06 2026 -0700 Jacob MacDonald add legend to multiselect dialogs (dart-lang/tools#2470) a2ecf08f Thu Jul 16 09:30:49 2026 -0700 Jacob MacDonald add an event type for events coming from package:skills (dart-lang/tools#2468) 6a85977a Mon Jul 13 10:12:17 2026 -0700 Kevin Moore [api_summary] Support latest analyzer version (dart-lang/tools#2460) 58b0fd0a Mon Jul 13 11:01:18 2026 +0200 Moritz Add no-response workflow (dart-lang/tools#2459) dc9ef3a9 Wed Jul 8 17:03:20 2026 -0700 Kevin Moore chore(html): use MIT license header instead of BSD (dart-lang/tools#2458) web (https://github.com/dart-lang/web/compare/eb8c3fc..12a9ca2): 12a9ca2 Sun Jul 19 19:27:25 2026 -0700 Kevin Moore test(js_interop_gen): reformat integration test goldens for dart_style 3.1.12 (dart-lang/web#565) 6b5e93a Wed Jul 1 06:55:34 2026 +0000 dependabot[bot] Bump actions/checkout from 6.0.2 to 7.0.0 in the github-actions group (dart-lang/web#563) b8f47ab Tue Jun 30 16:50:11 2026 -0700 Kevin Moore [chore] Improve notice about updating the js_type_supertypes.dart (dart-lang/web#562) Change-Id: I18fe6d51ce221bb7985b57711089e6b9651b2637 Tested:Package roll Reviewed-on: https://dart-review.googlesource.com/c/sdk/+/523862 Auto-Submit: Nate Bosch <nbosch@google.com> Reviewed-by: Ben Konyi <bkonyi@google.com> Reviewed-by: Daco Harkes <dacoharkes@google.com> Commit-Queue: Nate Bosch <nbosch@google.com>

…, web" This reverts commit 2610f35. Reason for revert: Failures during Dart -> Flutter rolls ``` +0 -1: test smoke test -- this test SHOULD FAIL [E] Expected: true Actual: <false> package:matcher/src/expect/expect.dart 187:31 fail package:matcher/src/expect/expect.dart 182:3 _expect package:matcher/src/expect/expect.dart 65:3 expect flutter/testing/smoke_test_failure/fail_test.dart 9:5 main.<fn> package:test_api/src/backend/declarer.dart 253:25 Declarer.test.<fn>.<fn> ===== asynchronous gap =========================== package:test_api/src/backend/declarer.dart 250:11 Declarer.test.<fn> ===== asynchronous gap =========================== package:test_api/src/backend/invoker.dart 318:9 Invoker._waitForOutstandingCallbacks.<fn> ``` Failure Link: https://logs.chromium.org/logs/flutter/buildbucket/cr-buildbucket/8674893380073937889/+/u/test:_Host_Tests_for_host_debug__2_/stdout Also, wide-spread timeouts on Dart CI: #63923 Original change's description: > [deps] rev core, dartdoc, ecosystem, i18n, shelf, test, tools, web > > Hold back `dart-lang/http` which has deprecations that break CI. > > Revisions updated by `dart tools/rev_sdk_deps.dart`. > > core (https://github.com/dart-lang/core/compare/25926e8..fe516ee): > fe516ee1 Mon Jul 27 20:19:16 2026 +0200 Moritz Consolidate no-response workflow into no_response.yml (dart-lang/core#982) > 2deeeade Mon Jul 27 18:05:47 2026 +0530 Abhishak Kumar Malviya fix: async cache storing exception fixed (dart-lang/core#548) > bed8f40e Fri Jul 24 11:29:13 2026 -0700 Nate Bosch Add `value` getter to `Result` (dart-lang/core#969) > > dartdoc (https://github.com/dart-lang/dartdoc/compare/1d56f26..c771ad2): > c771ad2a Tue Jul 7 12:36:55 2026 +0200 Sarah Zakarias bump to 9.0.8 (dart-lang/dartdoc#4270) > 38d079a2 Tue Jul 7 12:09:52 2026 +0200 Sigurd Meldgaard Fix RangeError when stripping doc-imports from files with CRLF line endings (dart-lang/dartdoc#4268) > 794a1d38 Mon Jul 6 13:48:14 2026 +0200 Sarah Zakarias bump to 9.0.7 (dart-lang/dartdoc#4269) > b9c94739 Mon Jul 6 13:29:28 2026 +0200 Sarah Zakarias Add interactive copy-to-clipboard button to code snippets (dart-lang/dartdoc#4267) > 9831db9b Fri Jul 3 11:44:06 2026 +0200 Sarah Zakarias Add support and styling for custom <callout-box> HTML tags (dart-lang/dartdoc#4264) > f52f910f Wed Jul 1 18:55:26 2026 +0000 dependabot[bot] Bump the github-actions group with 3 updates (dart-lang/dartdoc#4265) > 36b1aebc Wed Jul 1 12:14:01 2026 +0200 Sarah Zakarias Bump to 9.0.6 (dart-lang/dartdoc#4263) > > ecosystem (https://github.com/dart-lang/ecosystem/compare/848b3bf..edfdb3b): > edfdb3b Thu Jul 23 17:27:43 2026 +0200 Moritz Add want-lgtm reusable workflow (dart-lang/ecosystem#432) > a6c8ef0 Thu Jul 23 14:29:53 2026 +0200 Moritz Validate target PR number and comment ownership in post_summaries workflow (dart-lang/ecosystem#434) > 80a9928 Thu Jul 23 13:49:48 2026 +0200 Moritz Fix canary workflow (dart-lang/ecosystem#433) > 910d668 Wed Jul 15 18:04:05 2026 +0200 Moritz Pass GITHUB_TOKEN to firehose:comment steps in workflows (dart-lang/ecosystem#431) > 980c6df Sat Jul 11 00:20:55 2026 +0200 Moritz Fix `-WIP` ending detection (dart-lang/ecosystem#430) > 60c0f67 Wed Jul 8 20:38:35 2026 +0200 Moritz Run `pub get` before `dart format` in groundskeeper (dart-lang/ecosystem#429) > bcef699 Tue Jul 7 10:17:24 2026 +0200 Moritz Fix `groundskeeper` workflow (dart-lang/ecosystem#428) > 77def11 Fri Jul 3 11:43:12 2026 +0200 Moritz Simplify groundskeeper (dart-lang/ecosystem#426) > 3dd606a Wed Jul 1 18:19:25 2026 +0000 dependabot[bot] Bump the github-actions group with 3 updates (dart-lang/ecosystem#427) > d6ec975 Wed Jul 1 14:41:23 2026 +0200 Moritz Add changelog updater (dart-lang/ecosystem#424) > f8a4fbb Wed Jul 1 10:00:59 2026 +0200 Moritz Add `Groundskeeper` workflow (dart-lang/ecosystem#425) > > i18n (https://github.com/dart-lang/i18n/compare/d0683bd..e1b5a79): > e1b5a798 Tue Jul 14 13:10:29 2026 +0200 Moritz Add weekday API (dart-lang/i18n#1071) > 04b78e38 Thu Jul 9 14:16:22 2026 +0200 Moritz Add stale workflow (dart-lang/i18n#1069) > 01e20101 Thu Jul 9 13:42:08 2026 +0200 Moritz Add stale workflow > 03efda51 Thu Jul 9 13:19:31 2026 +0200 Moritz Update ICU4X (dart-lang/i18n#1068) > 4d8a1b39 Tue Jul 7 11:23:06 2026 +0200 Moritz feat(intl4x): add locale.dart entrypoint exposing only Locale (dart-lang/i18n#1067) > b2b7ce08 Mon Jul 6 03:23:28 2026 -0700 Copybara-Service Merge pull request `#1038` from donny-dont:patch-1 > cca1dc44 Mon Jul 6 03:10:59 2026 -0700 Copybara-Service Merge pull request `#1040` from suxoikorm:main > 28352851 Mon Jul 6 02:40:25 2026 -0700 Copybara-Service Merge pull request `#1062` from AbdeMohlbi:issue_116 > 9f8e7998 Mon Jul 6 02:16:05 2026 -0700 Copybara-Service Merge pull request `#1050` from LaijieJi:patch-1 > be8e2c0d Fri Jul 3 14:50:28 2026 +0200 Moritz Merge branch 'main' into issue_116 > 8b119830 Fri Jul 3 14:33:33 2026 +0200 Moritz Merge branch 'main' into patch-1 > 96aab97a Fri Jul 3 14:30:55 2026 +0200 Moritz Merge branch 'main' into main > 9e700b2a Thu Jul 2 09:37:45 2026 +0200 Moritz Merge branch 'main' into patch-1 > a6f174b8 Wed Jul 1 08:32:07 2026 -0700 Googler No public description > fb1feb18 Wed Jul 1 08:32:33 2026 -0700 Copybara-Service Merge pull request `#1058` from dart-lang:upgrade_analyzer > 77926a26 Thu May 7 20:52:55 2026 +0100 abdessalem gemini has a point > c2f96cba Thu May 7 20:45:40 2026 +0100 abdessalem revert the formating changes > ebb0a441 Thu May 7 20:41:40 2026 +0100 abdessalem update select documentation to clarify other fallback behavior and when `ArgumentError` is thrown > b13c2d48 Mon Mar 9 10:35:50 2026 +0100 Moritz Merge branch 'main' into patch-1 > 6581675f Mon Feb 9 09:13:25 2026 +0100 Laijie Fix typo in number_format.dart documentation > 69d1e6a6 Thu Jan 29 15:25:06 2026 +0400 Luka Katsadze Merge branch 'main' into main > 55a61fa6 Fri Dec 19 15:51:58 2025 -0800 Don Olmstead Escape text direction code points > a140f2ef Mon Dec 29 21:42:09 2025 +0400 Luka Katsadze fix: correct formatting of Georgian Lari symbol entry in changelog > 76a370c5 Mon Dec 29 21:34:35 2025 +0400 Luka Katsadze chore: update changelog > 9df0c191 Mon Dec 29 21:31:39 2025 +0400 Luka Katsadze feat: add georgian lari symbol support > > shelf (https://github.com/dart-lang/shelf/compare/71248e7..6918a76): > 6918a76 Mon Jul 20 18:45:56 2026 -0700 Kevin Moore feat(compliance): add GitHub Actions Job Summary to test runs (dart-lang/shelf#527) > e9c742d Mon Jul 20 20:28:03 2026 +0300 Yusuf İhsan Görgel fix: join multiple Cookie header values with '; ' instead of ',' (`#521`) (dart-lang/shelf#536) > 833433e Mon Jul 6 16:59:42 2026 -0700 Kevin Moore chore: standardize min SDK to ^3.9.0 and unify lints > 7af986e Wed Jul 1 12:27:06 2026 +0000 dependabot[bot] Bump the github-actions group with 2 updates (dart-lang/shelf#535) > > test (https://github.com/dart-lang/test/compare/bd92e63..5fcd6f4): > 5fcd6f40 Thu Jul 23 16:01:06 2026 -0700 Nate Bosch Remove unnecessary remote debugging flag (dart-lang/test#2705) > 72d6dfcc Thu Jul 23 14:02:30 2026 -0700 Nate Bosch Launch browsers with redirecting files (dart-lang/test#2703) > 8ab38846 Thu Jul 23 13:50:10 2026 -0700 Nate Bosch Disable more backgrounding features on chromium (dart-lang/test#2680) > d835f706 Wed Jul 22 16:30:46 2026 -0700 Nate Bosch Only print debug URL when debugging (dart-lang/test#2702) > 9abe202a Tue Jul 21 11:56:41 2026 -0700 Nate Bosch Ignore dart2js output for successful compiles (dart-lang/test#2701) > ce557ba1 Mon Jul 20 16:25:56 2026 -0700 Nate Bosch Group messages with passing tests (dart-lang/test#2699) > d79747cd Fri Jul 17 13:10:12 2026 -0700 Jacob MacDonald Make workflow files more secure (dart-lang/test#2698) > 91ca13f0 Wed Jul 8 14:17:45 2026 -0700 Nate Bosch Support DART_TEST_REPORTER environment variable (dart-lang/test#2692) > dcb06ac7 Wed Jul 1 03:50:42 2026 +0000 dependabot[bot] Bump the github-actions group with 3 updates (dart-lang/test#2689) > > tools (https://github.com/dart-lang/tools/compare/3f850c4..01f45d8): > 01f45d85 Thu Jul 23 16:49:10 2026 -0700 Nate Bosch [glob] Limit expansion during option flattening (dart-lang/tools#2477) > acc91d65 Thu Jul 23 16:00:59 2026 -0700 Kevin Moore Add tests for PoolResource and close, and fix allowRelease leak (dart-lang/tools#2368) > 0e54bd66 Thu Jul 23 15:25:22 2026 -0700 Nate Bosch Parse hosted URLs as URLs (dart-lang/tools#2476) > 7e124963 Wed Jul 22 15:01:34 2026 -0700 Sam Rawlins Markdown: optimize email regex (dart-lang/tools#2474) > 906d9d4e Wed Jul 22 13:25:24 2026 -0700 Sam Rawlins Markdown: More tag filter tests (dart-lang/tools#2473) > 588fbad4 Wed Jul 22 10:54:42 2026 -0700 Sam Rawlins Expand HTML filter regexp to include more characters that would denote an HTML tag (dart-lang/tools#2472) > e4f20cc7 Wed Jul 22 09:33:59 2026 -0700 Sam Rawlins Respect enableTagfilter when inlineOnly is passed (dart-lang/tools#2471) > c4082344 Wed Jul 22 07:41:06 2026 -0700 Jacob MacDonald add legend to multiselect dialogs (dart-lang/tools#2470) > a2ecf08f Thu Jul 16 09:30:49 2026 -0700 Jacob MacDonald add an event type for events coming from package:skills (dart-lang/tools#2468) > 6a85977a Mon Jul 13 10:12:17 2026 -0700 Kevin Moore [api_summary] Support latest analyzer version (dart-lang/tools#2460) > 58b0fd0a Mon Jul 13 11:01:18 2026 +0200 Moritz Add no-response workflow (dart-lang/tools#2459) > dc9ef3a9 Wed Jul 8 17:03:20 2026 -0700 Kevin Moore chore(html): use MIT license header instead of BSD (dart-lang/tools#2458) > > web (https://github.com/dart-lang/web/compare/eb8c3fc..12a9ca2): > 12a9ca2 Sun Jul 19 19:27:25 2026 -0700 Kevin Moore test(js_interop_gen): reformat integration test goldens for dart_style 3.1.12 (dart-lang/web#565) > 6b5e93a Wed Jul 1 06:55:34 2026 +0000 dependabot[bot] Bump actions/checkout from 6.0.2 to 7.0.0 in the github-actions group (dart-lang/web#563) > b8f47ab Tue Jun 30 16:50:11 2026 -0700 Kevin Moore [chore] Improve notice about updating the js_type_supertypes.dart (dart-lang/web#562) > > Change-Id: I18fe6d51ce221bb7985b57711089e6b9651b2637 > Tested:Package roll > Reviewed-on: https://dart-review.googlesource.com/c/sdk/+/523862 > Auto-Submit: Nate Bosch <nbosch@google.com> > Reviewed-by: Ben Konyi <bkonyi@google.com> > Reviewed-by: Daco Harkes <dacoharkes@google.com> > Commit-Queue: Nate Bosch <nbosch@google.com> TEST=ci Change-Id: I0b07e7fe893a6bf78832c5d3d114f33080ab66e8 Reviewed-on: https://dart-review.googlesource.com/c/sdk/+/529340 Commit-Queue: Alexander Markov <alexmarkov@google.com> Reviewed-by: Daco Harkes <dacoharkes@google.com>

dependabot Bot added the autosubmit label Jul 1, 2026

github-actions Bot added the type-infra A repository infrastructure change or enhancement label Jul 1, 2026

fluttergithubbot approved these changes Jul 1, 2026

View reviewed changes

auto-submit Bot merged commit dcb06ac into master Jul 1, 2026
86 checks passed

auto-submit Bot deleted the dependabot/github_actions/github-actions-32aca97838 branch July 1, 2026 03:50

Navigation Menu

Uh oh!

Bump the github-actions group with 3 updates - #2689

Bump the github-actions group with 3 updates#2689
auto-submit[bot] merged 1 commit into
masterfrom
dependabot/github_actions/github-actions-32aca97838

dependabot Bot commented on behalf of github Jul 1, 2026

Uh oh!

github-actions Bot commented Jul 1, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 1, 2026

v6.1.0

What's Changed

v6.0.0

What's Changed

v5.1.0

What's Changed

Releases

How to prepare a release

Changelog

6.1.0

6.0.0

5.0.4

5.0.3

5.0.2

v7.0.0

What's Changed

New Contributors

v6.0.3

What's Changed

New Contributors

Changelog

v7.0.0

v6.0.3

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

v4.36.2

v4.36.1

CodeQL Action Changelog

[UNRELEASED]

4.36.2 - 04 Jun 2026

4.36.1 - 02 Jun 2026

4.36.0 - 22 May 2026

4.35.5 - 15 May 2026

4.35.4 - 07 May 2026

4.35.3 - 01 May 2026

4.35.2 - 15 Apr 2026

Uh oh!

github-actions Bot commented Jul 1, 2026

PR Health

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant