[dependabot]

Bumps the github-actions group with 4 updates: step-security/harden-runner, actions/setup-node, actions/upload-artifact and actions/download-artifact.

Updates step-security/harden-runner from 2.21.1 to 2.22.1

Release notes

Sourced from step-security/harden-runner's releases.

v2.22.1

What's Changed

• Fixed security rules not initializing on GHES self-hosted runners
• Fixed GHES connectivity in block mode by implicitly allowing the GHES hostname

Full Changelog: step-security/harden-runner@v2.22.0...v2.22.1

v2.22.0

What's Changed

• Linux ARM64 support for community tier
• GHES support for self-hosted VMs (enterprise tier)
• MacOS and Windows runner deny list support for block policy (enterprise tier).

Full Changelog: step-security/harden-runner@v2.21.1...v2.22.0

Commits

• ccd8616 Merge pull request #704 from h0x0er/jatin/ghes-endp
• 037ccfd implicitly add ghes endpoint in allowList
• e7438c7 Merge pull request #703 from h0x0er/jatin/ghes-codebuild-fixes
• afb0b33 fixes for armour rules not getting initialised
• 351661c Merge pull request #701 from step-security/rc-44
• 1dc7f2e Merge pull request #702 from h0x0er/jatin/ghes-changes-up
• af5ca38 simplified ghes config creation
• 9a6d710 fix2
• 74c65ea fix
• ceac816 resovled comments
• Additional commits viewable in compare view

Updates actions/setup-node from 7.0.0 to 7.1.0

Release notes

Sourced from actions/setup-node's releases.

v7.1.0

What's Changed

Enhancements:

• Add support for mise.toml file by @​gperdomor in actions/setup-node#1421
• Support absolute paths in node-version-file by @​v-mahabaleshwars in actions/setup-node#1633

Bug fixes:

• Add Node version validation and manifest fetch retry by @​v-jitenderpalsingh in actions/setup-node#1580

Documentation updates:

• README.md: bump actions/checkout to latest version 7 by @​deining in actions/setup-node#1578
• docs: add V7 ESM migration and NODE_AUTH_TOKEN behavior change by @​v-gowridurgad in actions/setup-node#1593
• Fixed cache recommendation syntax by @​SubJunk in actions/setup-node#1603

Dependency updates:

• Update workflow pins and migrate Node matrices to modern versions by @​v-HarithaVattikuti in actions/setup-node#1583
• Upgrade @​actions/cache to 6.2.0 by @​philip-gai in actions/setup-node#1584
• Pin @​types/node to v24 by @​v-priyagupta108 in actions/setup-node#1585
• Override brace-expansion to 5.0.8 by @​v-priyagupta108 with @​Copilot in actions/setup-node#1599
• Upgrade actions/checkout from 7.0.0 to 7.0.1 by @​dependabot in actions/setup-node#1598
• Upgrade prettier from 3.8.4 to 3.9.6 by @​dependabot in actions/setup-node#1590
• Upgrade @​vercel/ncc from 0.44.0 to 0.45.0 by @​dependabot in actions/setup-node#1610
• Upgrade pnpm/action-setup from 6.0.9 to 6.0.10 by @​dependabot in actions/setup-node#1602
• Upgrade baseline-browser-mapping from 2.10.38 to 2.11.22 by @​dependabot in actions/setup-node#1629
• Upgrade @​types/semver from 7.7.1 to 7.8.0 by @​dependabot in actions/setup-node#1616
• Upgrade @​typescript-eslint/parser from 8.62.0 to 8.70.0 by @​dependabot in actions/setup-node#1615
• Upgrade pnpm/action-setup from 6.0.10 to 6.1.0 by @​dependabot in actions/setup-node#1631
• Upgrade jest-each from 30.4.1 to 30.5.2 by @​dependabot in actions/setup-node#1636
• Upgrade eslint-plugin-n from 18.1.0 to 18.3.0 by @​dependabot in actions/setup-node#1638
• Update dependencies and add license files by @​v-HarithaVattikuti in actions/setup-node#1642
• Upgrade eslint from 10.5.0 to 10.11.0 and package.json from 7.0.0 to 7.1.0 by @​dependabot in actions/setup-node#1635

New Contributors

• @​v-jitenderpalsingh made their first contribution in actions/setup-node#1580
• @​philip-gai made their first contribution in actions/setup-node#1584
• @​gperdomor made their first contribution in actions/setup-node#1421
• @​SubJunk made their first contribution in actions/setup-node#1603

Full Changelog: actions/setup-node@v7.0.0...v7.1.0

Commits

• 949feb2 Bump eslint from 10.5.0 to 10.11.0 and package.json from 7.0.0 to 7.1.0 (#1635)
• 7207c4f chore: update dependencies and add license files (#1642)
• 54337e0 Bump eslint-plugin-n from 18.1.0 to 18.3.0 (#1638)
• fb54fa8 Bump jest-each from 30.4.1 to 30.5.2 (#1636)
• 7f84f1d Bump pnpm/action-setup from 6.0.10 to 6.1.0 (#1631)
• 0c54c7b Bump @​typescript-eslint/parser from 8.62.0 to 8.70.0 (#1615)
• a829419 Bump @​types/semver from 7.7.1 to 7.8.0 (#1616)
• 680d1e4 Support absolute paths in node-version-file (#1633)
• db0fb3a Bump baseline-browser-mapping from 2.10.38 to 2.11.22 (#1629)
• 94196ee Bump pnpm/action-setup from 6.0.9 to 6.0.10 (#1602)
• Additional commits viewable in compare view

Updates actions/upload-artifact from 7.0.1 to 7.0.2

Release notes

Sourced from actions/upload-artifact's releases.

v7.0.2

What's Changed

• Improves artifact download retries when the service returns HTTP 429 (rate limiting), including honoring valid Retry-After headers.
• Updates @​actions/artifact to v6.3.1.

New Contributors

• @​tunc-d made their first contribution in actions/upload-artifact#821

Full Changelog: actions/upload-artifact@v7.0.1...v7.0.2

Commits

• cf430e0 Merge pull request #822 from actions/tunc-d-prepare-upload-v7-0-2
• c2acded chore: prepare v7.0.2 release
• 4687c1b Merge pull request #821 from actions/tunc-d-upload-artifact-package-bump
• 8cbe1be Bump @​actions/artifact to 6.3.1
• See full diff in compare view

Updates actions/download-artifact from 8.0.1 to 8.0.2

Release notes

Sourced from actions/download-artifact's releases.

v8.0.2

What's Changed

• Update the readme by @​danwkennedy in actions/download-artifact#473
• Improves artifact download retries when the service returns HTTP 429 (rate limiting), including honoring valid Retry-After headers.
• Update @​actions/artifact to 6.3.1 by @​tunc-d in actions/download-artifact#492
• Prepare download-artifact v8.0.2 by @​tunc-d in actions/download-artifact#493

New Contributors

• @​tunc-d made their first contribution in actions/download-artifact#492

Full Changelog: actions/download-artifact@v8.0.1...v8.0.2

Commits

• 9000827 Merge pull request #493 from actions/tunc-d-prepare-download-v8-0-2
• e455989 Prepare download-artifact v8.0.2
• a00b90c Merge pull request #492 from actions/tunc-d-download-artifact-package-bump
• 29bb7ce Update @​actions/artifact to 6.3.1
• 484a0b5 Update the readme (#473)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[github-actions]

IDE Compatibility Matrix

✅ pass ❌ fail 🚫 unavailable ❓ no test yet

Generated from the real-IDE integration bench (:ide-integration-tests).

Tool	CL	IU	RD
PSI / Navigation
search_symbols	✅	✅	🚫
get_file_outline	✅	✅	❓
find_references	✅	✅	❓
go_to_declaration	✅	✅	❓
get_documentation	✅	✅	❓
get_symbol_info	✅	✅	❓
get_class_outline	❓	❓	❓
Code Quality
get_highlights	✅	✅	✅
get_problems	✅	✅	✅
get_compilation_errors	✅	✅	✅
get_available_actions	❓	❓	❓
apply_action	❓	❓	❓
apply_quickfix	❓	❓	❓
format_code	❓	❓	❓
optimize_imports	❓	❓	❓
suppress_inspection	❓	❓	❓
Refactoring
get_type_hierarchy	🚫	✅	❓
get_call_hierarchy	🚫	✅	❓
find_implementations	🚫	✅	❓
find_super_methods	❓	❓	❓
refactor	❓	❓	❓
convert_java_to_kotlin	❓	❓	❓
Testing
run_tests	❓	❓	❓
list_tests	❓	❓	❓
run_configuration	❓	❓	❓
get_coverage	❓	❓	❓
Debug
debug_session_start	❓	❓	❓
breakpoint_manage	❓	❓	❓
debug_evaluate	❓	❓	❓
debug_snapshot	❓	❓	❓
debug_inspect_frame	❓	❓	❓
debug_variable_detail	❓	❓	❓
debug_read_console	❓	❓	❓
debug_step	❓	❓	❓
debug_run_to_line	❓	❓	❓
Build
read_build_output	❓	❓	❓
reload_project_model	❓	❓	❓

Logged IDE errors (non-gating)

Scraped from the IDE log during the run. These do not fail a matrix cell (the cell reflects the tool's MCP response) — they are listed for visibility while the bench matures.

⚠️ CL — (java.lang.InterruptedException: null)

Test: com.github.catatafishen.agentbridge.integration.GetHighlightsIntegrationTest.get_highlights returns a non-error response ⏎ You can find logs and other useful info in CI artifacts under the path getHighlights ⏎ java.lang.InterruptedException ⏎ at kotlinx.coroutines.BlockingCoroutine.joinBlocking(Builders.kt:124) ⏎ at kotlinx.coroutines.BuildersKt__BuildersKt.runBlocking$BuildersKt__BuildersKt(Builders.kt:87) ⏎ at kotlinx.coroutines.BuildersKt__BuildersKt.runBlockingWithParallelismCompensation(Builders.kt:63) ⏎ at kotlinx.coroutines.BuildersKt.runBlockingWithParallelismCompensation(Unknown Source) ⏎ at kotlinx.coroutines.internal.intellij.IntellijCoroutines.runBlockingWithParallelismCompensation(intellij.kt:48)

⚠️ CL — (java.lang.IllegalStateException: There is no ProgressIndicator or Job in this thread, the current job is not cancellable.)

Test: com.github.catatafishen.agentbridge.integration.GetHighlightsIntegrationTest.get_highlights returns a non-error response ⏎ You can find logs and other useful info in CI artifacts under the path getHighlights ⏎ java.lang.IllegalStateException: There is no ProgressIndicator or Job in this thread, the current job is not cancellable. ⏎ at com.intellij.openapi.progress.CoroutinesKt.runBlockingCancellable$lambda$0(coroutines.kt:153) ⏎ at com.intellij.openapi.progress.ContextKt.prepareThreadContext$lambda$0(context.kt:93) ⏎ at com.intellij.concurrency.ThreadContext.resetThreadContext(threadContext.kt:294) ⏎ at com.intellij.openapi.progress.ContextKt.prepareThreadContext(context.kt:92) ⏎ at com.intellij.openapi.progress.CoroutinesKt.runBlockingCancellable(coroutines.kt:151)