Skip to content

chore(deps): bump cpp-linter/cpp-linter-action from 2.23.1 to 2.24.0 - #638

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/cpp-linter/cpp-linter-action-2.24.0
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/cpp-linter/cpp-linter-action-2.24.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 4, 2026 •

Copy link
Copy Markdown
Contributor

Bumps cpp-linter/cpp-linter-action from 2.23.1 to 2.24.0.

Release notes

Sourced from cpp-linter/cpp-linter-action's releases.

v2.24.0

Behavior changes

  • ignore: build now only skips build/ at the repo root. Earlier versions also skipped nested folders such as src/build/, which was a bug. To skip every build folder, use ignore: '**/build'.
  • A relative database path is now resolved against the workspace (the working directory), not against repo-root. repo-root must be inside the workspace.
  • When the action downloads clang-format or clang-tidy (on Windows, or when the runner doesn't have the requested version), it now gets the newest patch release of that major version (for example, 14.0.6 instead of 14.0.0), together with clang's resource headers.

Improvements

  • windows-11-arm runners work now: cpp-linter no longer depends on pygit2, which has no Windows arm64 wheel.
  • A repo-root that is a sub-folder of the git repository works now.
  • Comments and reviews are posted through git-bot-feedback, which fixes the API URLs on GitHub Enterprise Server.

🐛 Bug fixes

📝 Documentation updates

👻 Maintenance

📦 Dependency updates

  • chore(deps): bump virtualenv from 21.14.9 to 21.14.13 in the security group across 1 directory by @dependabot[bot] in #513
  • chore(deps-dev): bump the org group across 1 directory with 2 updates by @dependabot[bot] in #512
  • chore(deps): bump the security group across 1 directory with 2 updates by @dependabot[bot] in #509
  • chore(deps-dev): bump ruff from 0.16.10 to 0.17.1 in the dev group across 1 directory by @dependabot[bot] in #502
  • chore(deps): bump hustcer/setup-nu from 3.27 to 3.28 in the actions group by @dependabot[bot] in #499
  • chore(deps-dev): bump the dev group with 2 updates by @dependabot[bot] in #500
  • chore(deps): bump the security group across 1 directory with 2 updates by @dependabot[bot] in #496
  • chore(deps-dev): bump ruff from 0.16.6 to 0.16.9 in the dev group across 1 directory by @dependabot[bot] in #483

... (truncated)

Commits
  • 774040a chore: update filelock to 4.2.4 for its security fixes (#514)
  • af7e3cf chore(deps): bump virtualenv from 21.14.9 to 21.14.13 in the security group a...
  • 87be102 chore(deps-dev): bump the org group across 1 directory with 2 updates (#512)
  • f16b974 docs: add a cpp-linter badge section and pin the badge workflow to a release ...
  • d2883e0 chore(deps): bump the security group across 1 directory with 2 updates (#509)
  • 2473aa6 chore(deps-dev): bump ruff from 0.16.10 to 0.17.1 in the dev group across 1 d...
  • d5c9433 fix: pass action inputs to run steps through env (#508)
  • 94bdce8 chore: limit workflow token permissions (#507)
  • f1da128 docs: label the home page "cpp-linter-action" in the navigation again (#506)
  • 751fb7b docs: fix outdated permissions and example workflows (#505)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note

Overview
Updates the cpp-linter GitHub Actions workflow to pin cpp-linter/cpp-linter-action at v2.24.0 (commit 774040a) instead of v2.23.1. No other workflow inputs or steps change—Boost install, CMake configure, and existing linter options (style: file, database: /home/runner/build, ignore, etc.) stay the same.

The new action version brings upstream fixes and behavior tweaks (e.g. stricter root-only build/ ignore, workspace-relative database paths, improved clang tool downloads). This repo uses an absolute database path and a custom ignore list, so those behavior changes are unlikely to alter local CI unless nested build/ folders were previously skipped unintentionally.

Reviewed by Cursor Bugbot for commit 85e965e. Bugbot is set up for automated code reviews on this repo. Configure here.

Bumps [cpp-linter/cpp-linter-action](https://github.com/cpp-linter/cpp-linter-action) from 2.23.1 to 2.24.0.
- [Release notes](https://github.com/cpp-linter/cpp-linter-action/releases)
- [Commits](cpp-linter/cpp-linter-action@8120e05...774040a)

---
updated-dependencies:
- dependency-name: cpp-linter/cpp-linter-action
  dependency-version: 2.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from a team as a code owner November 4, 2026 19:14
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Nov 4, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants