Release of `dependabot-action`

[fchareyr]

Hi,

Not sure this is the right place to ask this, but issues are not open on github/dependabot-action. I am wondering why there has not been any recent release of this action. As the containers versions for the updaters are pinned in https://github.com/github/dependabot-action/blob/main/docker/containers.json, the changes made in dependabot/dependabot-core are not cascading.

Thanks!

[yeikel]

Are you experiencing any particular issue or what is your motivation behind this ask?

Is it because you need this under GHE?

I am asking because the way dependabot works right now, the image versions are injected at runtime from the backend service or from the action (not the default)

[fchareyr]

Thanks for your answer. I'm running into issues with uv as the version running in dependabot is quite old.

The action's version running on our self-hosted runner is tagged ghes-3.18.

[yeikel]

From the logs, there should be a log that says

Pulling updater images...

Not the action version, but what uv image is listed there?

Disclaimer: I ignore if this works any different in GHE but it should be very similar

[fchareyr]

Yes, it's pulling the images tagged in September 2025 (ghcr.io/dependabot/dependabot-updater-uv***v2.0.20250904090707@sha256***fb2989299756dba4ffa67322bab9c077a52eb3749eef0bae80b234d5d868863a), when the last release of the action occurred.

[yeikel]

I see, good to know. This may be a difference in how it runs in GHE which I am not familiar with.

We may have to wait for the Dependabot team to answer on this one as any workaround I can think of may cause harm and not be advisable

[yeikel]

A new release was pushed by the team: https://github.com/github/dependabot-action/releases/tag/v2.30.0