Skip to content

build(deps): bump the actions group with 2 updates - #746

Merged
flavorjones merged 1 commit into
mainfrom
dependabot/github_actions/actions-4efb01dcd4
Oct 5, 2026
Merged

flavorjones merged 1 commit into
mainfrom
dependabot/github_actions/actions-4efb01dcd4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 3, 2026

Copy link
Copy Markdown
Contributor

Bumps the actions group with 2 updates: ruby/setup-ruby and vmactions/freebsd-vm.

Updates ruby/setup-ruby from 1.326.0 to 1.327.0

Release notes

Sourced from ruby/setup-ruby's releases.

v1.327.0

What's Changed

Full Changelog: ruby/setup-ruby@v1.326.0...v1.327.0

Commits

Updates vmactions/freebsd-vm from 1.5.7 to 1.5.8

Release notes

Sourced from vmactions/freebsd-vm's releases.

v1.5.8

FreeBSD on ubuntu-26.04 runners

The action's test matrix, 10.4, 11.4 and 13.2 - 15.1 across x86_64, aarch64, riscv64 and powerpc64, now runs on ubuntu-26.04 and ubuntu-26.04-arm: 313 of 314 jobs pass, and the 9p job is skipped as before. 12.4, which the matrix leaves out, passes anyvm's own FreeBSD CI on the same runners.

What failed on 26.04

With v1.5.7 on a 26.04 runner:

  • Every aarch64 job, on both runner types, timed out in the firmware. The serial log holds only the banner of 26.04's edk2 2025.11, which hangs under -cpu max: tianocore/edk2#11962

  • Every riscv64 job stopped at

    Error: QEMU binary 'qemu-system-riscv64' not found (searched PATH and common install locations).

    Since Ubuntu 25.10 the riscv64 emulator ships in a separate qemu-system-riscv package, no longer in qemu-system-misc.

  • With the emulator installed, 13.2, 13.3, 13.5, 14.0, 14.1, 14.2 and 14.3 riscv64 still hung after the last PCI device attached, before "Timecounters tick", on QEMU 10.2.1.

x86_64 and powerpc64 were not affected.

Fixes

  • anyvm 0.7.2 reads the build stamp of the host's aarch64 UEFI image and, for 2025.08 and later, boots with Ubuntu 24.04's edk2 2024.02 build instead, downloaded once and checked against a pinned sha256.
  • anyvm 0.7.2 runs 13.2 - 14.3 riscv64 with -cpu rv64,sstc=off on QEMU 10.1 and later; 14.4, 14.5 and 15.x keep Sstc.
  • The action installs qemu-system-riscv instead of qemu-system-misc for riscv64 on Ubuntu releases newer than 24.04.

Each fix engages only on a newer firmware, QEMU or Ubuntu release than 24.04 ships, so jobs on ubuntu-24.04 run as before. Details: https://github.com/anyvm-org/anyvm/releases/tag/v0.7.2

Pins

BUILDER_VERSION 2.2.8 (unchanged)

... (truncated)

Commits
  • a2f9a41 Update vmactions/freebsd-vm from base-vm
  • ed8f76b Generated from base-vm
  • e5d3e9a Bump versions from upstream releases
  • 5efb650 Update vmactions/freebsd-vm from base-vm
  • b9298c8 Generated from base-vm
  • 97e852f Update vmactions/freebsd-vm from base-vm
  • 45e1942 Generated from base-vm
  • e063108 Update vmactions/freebsd-vm from base-vm
  • 3ca395b Generated from base-vm
  • 321da73 Update version to v1.5.7
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the actions group with 2 updates: [ruby/setup-ruby](https://github.com/ruby/setup-ruby) and [vmactions/freebsd-vm](https://github.com/vmactions/freebsd-vm).


Updates `ruby/setup-ruby` from 1.326.0 to 1.327.0
- [Release notes](https://github.com/ruby/setup-ruby/releases)
- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)
- [Commits](ruby/setup-ruby@762794c...1459426)

Updates `vmactions/freebsd-vm` from 1.5.7 to 1.5.8
- [Release notes](https://github.com/vmactions/freebsd-vm/releases)
- [Commits](vmactions/freebsd-vm@4469451...a2f9a41)

---
updated-dependencies:
- dependency-name: ruby/setup-ruby
  dependency-version: 1.327.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: vmactions/freebsd-vm
  dependency-version: 1.5.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Oct 3, 2026
@flavorjones
flavorjones merged commit b265a20 into main Oct 5, 2026
135 checks passed
@flavorjones
flavorjones deleted the dependabot/github_actions/actions-4efb01dcd4 branch October 5, 2026 14:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant