chore: bump the actions group across 1 directory with 11 updates - #208
Open
dependabot[bot] wants to merge 1 commit into
Open
chore: bump the actions group across 1 directory with 11 updates#208dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps the actions group with 11 updates in the / directory: | Package | From | To | | --- | --- | --- | | [stella/.github/.github/workflows/dependabot-bun-dedupe.yml](https://github.com/stella/.github) | `dd6e8fa51339814159486cd92b5ae3a051eb15d2` | `7c43baa7e76584907c5b6e2876e1e9962a48518e` | | [taiki-e/install-action](https://github.com/taiki-e/install-action) | `2.86.2` | `2.87.2` | | [stella/.github/.github/workflows/cla.yml](https://github.com/stella/.github) | `48aacae31829ce15216a6b766b03a92fd2e84da3` | `7c43baa7e76584907c5b6e2876e1e9962a48518e` | | [stella/.github/.github/workflows/quarantine-policy.yml](https://github.com/stella/.github) | `699affd63b2d956f71b9833fbed239245aff7e86` | `7c43baa7e76584907c5b6e2876e1e9962a48518e` | | [stella/.github/.github/workflows/quarantine-prune.yml](https://github.com/stella/.github) | `699affd63b2d956f71b9833fbed239245aff7e86` | `7c43baa7e76584907c5b6e2876e1e9962a48518e` | | [stella/.github/.github/workflows/release-policy.yml](https://github.com/stella/.github) | `0f814e1a0c6c7401778e661209553b6e15f8d92a` | `7c43baa7e76584907c5b6e2876e1e9962a48518e` | | [stella/.github/.github/workflows/changeset-release-pr.yml](https://github.com/stella/.github) | `c56b0c1d1e82f5e3fffa733a32b9a503a172ee35` | `7c43baa7e76584907c5b6e2876e1e9962a48518e` | | [stella/.github/.github/actions/pypi-publish-hardened](https://github.com/stella/.github) | `0f814e1a0c6c7401778e661209553b6e15f8d92a` | `7c43baa7e76584907c5b6e2876e1e9962a48518e` | | [stella/.github/.github/actions/pypi-publish-hardened/verify](https://github.com/stella/.github) | `0f814e1a0c6c7401778e661209553b6e15f8d92a` | `7c43baa7e76584907c5b6e2876e1e9962a48518e` | | [stella/.github/.github/workflows/npm-version-finalize.yml](https://github.com/stella/.github) | `0f814e1a0c6c7401778e661209553b6e15f8d92a` | `7c43baa7e76584907c5b6e2876e1e9962a48518e` | | [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) | `4.37.7` | `4.37.9` | Updates `stella/.github/.github/workflows/dependabot-bun-dedupe.yml` from dd6e8fa51339814159486cd92b5ae3a051eb15d2 to 7c43baa7e76584907c5b6e2876e1e9962a48518e - [Release notes](https://github.com/stella/.github/releases) - [Commits](stella/.github@dd6e8fa...7c43baa) Updates `taiki-e/install-action` from 2.86.2 to 2.87.2 - [Release notes](https://github.com/taiki-e/install-action/releases) - [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md) - [Commits](taiki-e/install-action@b6b84cf...1ed6d7b) Updates `stella/.github/.github/workflows/cla.yml` from 48aacae31829ce15216a6b766b03a92fd2e84da3 to 7c43baa7e76584907c5b6e2876e1e9962a48518e - [Release notes](https://github.com/stella/.github/releases) - [Commits](stella/.github@48aacae...7c43baa) Updates `stella/.github/.github/workflows/quarantine-policy.yml` from 699affd63b2d956f71b9833fbed239245aff7e86 to 7c43baa7e76584907c5b6e2876e1e9962a48518e - [Release notes](https://github.com/stella/.github/releases) - [Commits](stella/.github@699affd...7c43baa) Updates `stella/.github/.github/workflows/quarantine-prune.yml` from 699affd63b2d956f71b9833fbed239245aff7e86 to 7c43baa7e76584907c5b6e2876e1e9962a48518e - [Release notes](https://github.com/stella/.github/releases) - [Commits](stella/.github@699affd...7c43baa) Updates `stella/.github/.github/workflows/release-policy.yml` from 0f814e1a0c6c7401778e661209553b6e15f8d92a to 7c43baa7e76584907c5b6e2876e1e9962a48518e - [Release notes](https://github.com/stella/.github/releases) - [Commits](stella/.github@0f814e1...7c43baa) Updates `stella/.github/.github/workflows/changeset-release-pr.yml` from c56b0c1d1e82f5e3fffa733a32b9a503a172ee35 to 7c43baa7e76584907c5b6e2876e1e9962a48518e - [Release notes](https://github.com/stella/.github/releases) - [Commits](stella/.github@c56b0c1...7c43baa) Updates `stella/.github/.github/actions/pypi-publish-hardened` from 0f814e1a0c6c7401778e661209553b6e15f8d92a to 7c43baa7e76584907c5b6e2876e1e9962a48518e - [Release notes](https://github.com/stella/.github/releases) - [Commits](stella/.github@0f814e1...7c43baa) Updates `stella/.github/.github/actions/pypi-publish-hardened/verify` from 0f814e1a0c6c7401778e661209553b6e15f8d92a to 7c43baa7e76584907c5b6e2876e1e9962a48518e - [Release notes](https://github.com/stella/.github/releases) - [Commits](stella/.github@0f814e1...7c43baa) Updates `stella/.github/.github/workflows/npm-version-finalize.yml` from 0f814e1a0c6c7401778e661209553b6e15f8d92a to 7c43baa7e76584907c5b6e2876e1e9962a48518e - [Release notes](https://github.com/stella/.github/releases) - [Commits](stella/.github@0f814e1...7c43baa) Updates `github/codeql-action/upload-sarif` from 4.37.7 to 4.37.9 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@ff2f1c6...cdf488f) --- updated-dependencies: - dependency-name: stella/.github/.github/workflows/dependabot-bun-dedupe.yml dependency-version: 7c43baa7e76584907c5b6e2876e1e9962a48518e dependency-type: direct:production dependency-group: actions - dependency-name: taiki-e/install-action dependency-version: 2.87.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: stella/.github/.github/workflows/cla.yml dependency-version: 7c43baa7e76584907c5b6e2876e1e9962a48518e dependency-type: direct:production dependency-group: actions - dependency-name: stella/.github/.github/workflows/quarantine-policy.yml dependency-version: 7c43baa7e76584907c5b6e2876e1e9962a48518e dependency-type: direct:production dependency-group: actions - dependency-name: stella/.github/.github/workflows/quarantine-prune.yml dependency-version: 7c43baa7e76584907c5b6e2876e1e9962a48518e dependency-type: direct:production dependency-group: actions - dependency-name: stella/.github/.github/workflows/release-policy.yml dependency-version: 7c43baa7e76584907c5b6e2876e1e9962a48518e dependency-type: direct:production dependency-group: actions - dependency-name: stella/.github/.github/workflows/changeset-release-pr.yml dependency-version: 7c43baa7e76584907c5b6e2876e1e9962a48518e dependency-type: direct:production dependency-group: actions - dependency-name: stella/.github/.github/actions/pypi-publish-hardened dependency-version: 7c43baa7e76584907c5b6e2876e1e9962a48518e dependency-type: direct:production dependency-group: actions - dependency-name: stella/.github/.github/actions/pypi-publish-hardened/verify dependency-version: 7c43baa7e76584907c5b6e2876e1e9962a48518e dependency-type: direct:production dependency-group: actions - dependency-name: stella/.github/.github/workflows/npm-version-finalize.yml dependency-version: 7c43baa7e76584907c5b6e2876e1e9962a48518e dependency-type: direct:production dependency-group: actions - dependency-name: github/codeql-action/upload-sarif dependency-version: 4.37.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions ... Signed-off-by: dependabot[bot] <support@github.com>
Contributor
Dependency ReviewThe following issues were found:
License Issues.github/workflows/quarantine-policy.yml
OpenSSF Scorecard
Scanned Files
|
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the actions group with 11 updates in the / directory:
dd6e8fa51339814159486cd92b5ae3a051eb15d27c43baa7e76584907c5b6e2876e1e9962a48518e2.86.22.87.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.37.74.37.9Updates
stella/.github/.github/workflows/dependabot-bun-dedupe.ymlfrom dd6e8fa51339814159486cd92b5ae3a051eb15d2 to 7c43baa7e76584907c5b6e2876e1e9962a48518eCommits
7c43baachore: upgrade to Bun 1.4.12703e4dfix: preflight npm release namespaces (#100)d10f185fix: authenticate private autofix fetches (#99)8e5b187chore: make dedupe runner configurable (#98)0f814e1fix: keep PyPI trusted publishing in caller (#97)5f2b01dfix: publish PyPI through reusable workflow (#96)89ceed9fix: separate changelog from npm finalization (#95)699affdfix: enforce quarantine at lockfile ingress (#94)76807b4fix: restrict quarantine pruning to schedules (#93)8cd71d9feat: centralize package quarantine policy (#92)Updates
taiki-e/install-actionfrom 2.86.2 to 2.87.2Release notes
Sourced from taiki-e/install-action's releases.
... (truncated)
Changelog
Sourced from taiki-e/install-action's changelog.
... (truncated)
Commits
1ed6d7bRelease 2.87.20fbfc5bUpdatetypos@latestto 1.50.05f68cefUpdatetombi@latestto 1.5.0d46a5ecUpdateshfmt@latestto 3.14.0742a331Release 2.87.1c5b69cdUpdateuv@latestto 0.12.785e6400Updatetypos@latestto 1.49.191f3a12Update tombi manifest160f8b1Updatesyft@latestto 1.51.1aa48d3eUpdate shfmt manifestUpdates
stella/.github/.github/workflows/cla.ymlfrom 48aacae31829ce15216a6b766b03a92fd2e84da3 to 7c43baa7e76584907c5b6e2876e1e9962a48518eCommits
7c43baachore: upgrade to Bun 1.4.12703e4dfix: preflight npm release namespaces (#100)d10f185fix: authenticate private autofix fetches (#99)8e5b187chore: make dedupe runner configurable (#98)0f814e1fix: keep PyPI trusted publishing in caller (#97)5f2b01dfix: publish PyPI through reusable workflow (#96)89ceed9fix: separate changelog from npm finalization (#95)699affdfix: enforce quarantine at lockfile ingress (#94)76807b4fix: restrict quarantine pruning to schedules (#93)8cd71d9feat: centralize package quarantine policy (#92)Updates
stella/.github/.github/workflows/quarantine-policy.ymlfrom 699affd63b2d956f71b9833fbed239245aff7e86 to 7c43baa7e76584907c5b6e2876e1e9962a48518eCommits
7c43baachore: upgrade to Bun 1.4.12703e4dfix: preflight npm release namespaces (#100)d10f185fix: authenticate private autofix fetches (#99)8e5b187chore: make dedupe runner configurable (#98)0f814e1fix: keep PyPI trusted publishing in caller (#97)5f2b01dfix: publish PyPI through reusable workflow (#96)89ceed9fix: separate changelog from npm finalization (#95)Updates
stella/.github/.github/workflows/quarantine-prune.ymlfrom 699affd63b2d956f71b9833fbed239245aff7e86 to 7c43baa7e76584907c5b6e2876e1e9962a48518eCommits
7c43baachore: upgrade to Bun 1.4.12703e4dfix: preflight npm release namespaces (#100)d10f185fix: authenticate private autofix fetches (#99)8e5b187chore: make dedupe runner configurable (#98)0f814e1fix: keep PyPI trusted publishing in caller (#97)5f2b01dfix: publish PyPI through reusable workflow (#96)89ceed9fix: separate changelog from npm finalization (#95)Updates
stella/.github/.github/workflows/release-policy.ymlfrom 0f814e1a0c6c7401778e661209553b6e15f8d92a to 7c43baa7e76584907c5b6e2876e1e9962a48518eCommits
7c43baachore: upgrade to Bun 1.4.12703e4dfix: preflight npm release namespaces (#100)d10f185fix: authenticate private autofix fetches (#99)8e5b187chore: make dedupe runner configurable (#98)Updates
stella/.github/.github/workflows/changeset-release-pr.ymlfrom c56b0c1d1e82f5e3fffa733a32b9a503a172ee35 to 7c43baa7e76584907c5b6e2876e1e9962a48518eCommits
7c43baachore: upgrade to Bun 1.4.12703e4dfix: preflight npm release namespaces (#100)d10f185fix: authenticate private autofix fetches (#99)8e5b187chore: make dedupe runner configurable (#98)0f814e1fix: keep PyPI trusted publishing in caller (#97)5f2b01dfix: publish PyPI through reusable workflow (#96)89ceed9fix: separate changelog from npm finalization (#95)699affdfix: enforce quarantine at lockfile ingress (#94)76807b4fix: restrict quarantine pruning to schedules (#93)8cd71d9feat: centralize package quarantine policy (#92)Updates
stella/.github/.github/actions/pypi-publish-hardenedfrom 0f814e1a0c6c7401778e661209553b6e15f8d92a to 7c43baa7e76584907c5b6e2876e1e9962a48518eCommits
7c43baachore: upgrade to Bun 1.4.12703e4dfix: preflight npm release namespaces (#100)d10f185fix: authenticate private autofix fetches (#99)8e5b187chore: make dedupe runner configurable (#98)Updates
stella/.github/.github/actions/pypi-publish-hardened/verifyfrom 0f814e1a0c6c7401778e661209553b6e15f8d92a to 7c43baa7e76584907c5b6e2876e1e9962a48518eCommits
7c43baachore: upgrade to Bun 1.4.12703e4dfix: preflight npm release namespaces (#100)d10f185fix: authenticate private autofix fetches (#99)8e5b187chore: make dedupe runner configurable (#98)Updates
stella/.github/.github/workflows/npm-version-finalize.ymlfrom 0f814e1a0c6c7401778e661209553b6e15f8d92a to 7c43baa7e76584907c5b6e2876e1e9962a48518eCommits
7c43baachore: upgrade to Bun 1.4.12703e4dfix: preflight npm release namespaces (#100)d10f185fix: authenticate private autofix fetches (#99)8e5b187chore: make dedupe runner configurable (#98)Updates
github/codeql-action/upload-sariffrom 4.37.7 to 4.37.9Release notes
Sourced from github/codeql-action/upload-sarif's releases.
Changelog
Sourced from github/codeql-action/upload-sarif's changelog.
... (truncated)
Commits
cdf488fMerge pull request #4107 from github/update-v4.37.9-920ba7cd17243f38Update changelog for v4.37.9920ba7cMerge pull request #4106 from github/update-bundle/codeql-bundle-v2.26.4ecfa6e1Add changelog noteadcdf4aUpdate default bundle to codeql-bundle-v2.26.4486fec2Merge pull request #4099 from github/update-supported-enterprise-server-versions134624cMerge pull request #4101 from github/dependabot/npm_and_yarn/npm-minor-457d82...ff43db8Merge pull request #4103 from github/mergeback/v4.37.8-to-main-db488dde4605e03Rebuild099c869Update changelog and version after v4.37.8Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions