chore(deps): bump the github-actions group with 7 updates - #105
chore(deps): bump the github-actions group with 7 updates#105dependabot[bot] wants to merge 1 commit into
Conversation
Bumps the github-actions group with 7 updates: | Package | From | To | | --- | --- | --- | | [geolonia/.github/.github/workflows/reusable-release-auto-on-tag.yml](https://github.com/geolonia/.github) | `1` | `1.34.0` | | [actions/checkout](https://github.com/actions/checkout) | `7.0.0` | `7.0.1` | | [geolonia/.github/.github/workflows/reusable-bumblebee-scan.yml](https://github.com/geolonia/.github) | `1` | `1.34.0` | | [geolonia/.github/.github/workflows/reusable-secret-leak-check.yml](https://github.com/geolonia/.github) | `1` | `1.34.0` | | [geolonia/.github/.github/workflows/reusable-pinact-check.yml](https://github.com/geolonia/.github) | `1` | `1.34.0` | | [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action) | `0.5.7` | `0.6.0` | | [geolonia/.github/.github/workflows/reusable-security-suite.yml](https://github.com/geolonia/.github) | `1` | `1.34.0` | Updates `geolonia/.github/.github/workflows/reusable-release-auto-on-tag.yml` from 1 to 1.34.0 - [Release notes](https://github.com/geolonia/.github/releases) - [Commits](v1...v1.34.0) Updates `actions/checkout` from 7.0.0 to 7.0.1 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@9c091bb...3d3c42e) Updates `geolonia/.github/.github/workflows/reusable-bumblebee-scan.yml` from 1 to 1.34.0 - [Release notes](https://github.com/geolonia/.github/releases) - [Commits](v1...v1.34.0) Updates `geolonia/.github/.github/workflows/reusable-secret-leak-check.yml` from 1 to 1.34.0 - [Release notes](https://github.com/geolonia/.github/releases) - [Commits](v1...v1.34.0) Updates `geolonia/.github/.github/workflows/reusable-pinact-check.yml` from 1 to 1.34.0 - [Release notes](https://github.com/geolonia/.github/releases) - [Commits](v1...v1.34.0) Updates `zizmorcore/zizmor-action` from 0.5.7 to 0.6.0 - [Release notes](https://github.com/zizmorcore/zizmor-action/releases) - [Commits](zizmorcore/zizmor-action@192e21d...6599ee8) Updates `geolonia/.github/.github/workflows/reusable-security-suite.yml` from 1 to 1.34.0 - [Release notes](https://github.com/geolonia/.github/releases) - [Commits](v1...v1.34.0) --- updated-dependencies: - dependency-name: geolonia/.github/.github/workflows/reusable-release-auto-on-tag.yml dependency-version: 1.34.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: actions/checkout dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: geolonia/.github/.github/workflows/reusable-bumblebee-scan.yml dependency-version: 1.34.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: geolonia/.github/.github/workflows/reusable-secret-leak-check.yml dependency-version: 1.34.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: geolonia/.github/.github/workflows/reusable-pinact-check.yml dependency-version: 1.34.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: zizmorcore/zizmor-action dependency-version: 0.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: geolonia/.github/.github/workflows/reusable-security-suite.yml dependency-version: 1.34.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com>
|
Warning Review limit reachedYou’ve reached a temporary PR review limit under our Fair Usage Limits Policy. Next review available in: 19 minutes Enable usage-based reviews in Billing to review now. Otherwise, wait until the next included review is available. How can I continue?After more reviews become available, a review can be triggered using the To avoid repeated limits, reduce automatic review volume by pausing incremental auto-reviews earlier, using label-based review opt-in, excluding WIP or generated PR titles, or requesting reviews manually when the PR is ready. If your team needs uninterrupted high-volume reviews, an organization admin can enable usage-based reviews. How do review limits work?CodeRabbit enforces per-developer PR review limits for each organization. Most developers receive the normal plan review availability. For paid Pro and Pro+ PR reviews, CodeRabbit uses adaptive limits for sustained high-volume activity. When a developer's recent PR review activity reaches the 95th percentile or higher among CodeRabbit users, additional reviews become available more gradually as earlier reviews age out of the rolling window. Please refer docs for additional details. Review details⚙️ Run configurationConfiguration used: Path: .coderabbit.yaml Review profile: ASSERTIVE Plan: Pro Run ID: 📒 Files selected for processing (10)
✨ Finishing Touches🧪 Generate unit tests (beta)
Comment |
🛡️ Security suite
Warning Warnings only. These do not block the PR, but please review them. Updated for |
|
Looks like these dependencies are updatable in another way, so this is no longer needed. |
Bumps the github-actions group with 7 updates:
11.34.07.0.07.0.111.34.011.34.011.34.00.5.70.6.011.34.0Updates
geolonia/.github/.github/workflows/reusable-release-auto-on-tag.ymlfrom 1 to 1.34.0Release notes
Sourced from geolonia/.github/.github/workflows/reusable-release-auto-on-tag.yml's releases.
... (truncated)
Commits
1dd4e2dfeat: add summary report-mode + outputs to scanner reusables (#72)007ca57docs(ci): document why cdk-deploy-monitor needs each permission (#70)676d763ci(release): least-privilege caller in release-on-tag source (#69)419bfe9ci(techdocs): make publish-techdocs template standalone by default (#68)eb33e7fchore(deps): bump bumblebee default to v0.1.2 (#67)d3a81cachore(deps): bump the github-actions group across 1 directory with 3 updates ...5142150chore(betterleaks): bump pinned image to v1.5.0 (#65)Updates
actions/checkoutfrom 7.0.0 to 7.0.1Release notes
Sourced from actions/checkout's releases.
Changelog
Sourced from actions/checkout's changelog.
... (truncated)
Commits
3d3c42eprep v7.0.1 release (#2531)2880268escape values passed to --unset (#2530)12cd223trim only ascii whitespace for branch (#2521)62661c4skip running unsafe pr check if input is default (#2518)e8d4307Bump the minor-actions-dependencies group with 2 updates (#2499)631c942eslint 9 (#2474)4f1f4aeBump actions/upload-artifact from 4 to 7 (#2476)ba09753Bump actions/checkout from 6 to 7 (#2488)b9e0990Bump docker/login-action from 3.3.0 to 4.2.0 (#2479)e8cb398Bump docker/build-push-action from 6.5.0 to 7.2.0 (#2478)Updates
geolonia/.github/.github/workflows/reusable-bumblebee-scan.ymlfrom 1 to 1.34.0Release notes
Sourced from geolonia/.github/.github/workflows/reusable-bumblebee-scan.yml's releases.
... (truncated)
Commits
1dd4e2dfeat: add summary report-mode + outputs to scanner reusables (#72)007ca57docs(ci): document why cdk-deploy-monitor needs each permission (#70)676d763ci(release): least-privilege caller in release-on-tag source (#69)419bfe9ci(techdocs): make publish-techdocs template standalone by default (#68)eb33e7fchore(deps): bump bumblebee default to v0.1.2 (#67)d3a81cachore(deps): bump the github-actions group across 1 directory with 3 updates ...5142150chore(betterleaks): bump pinned image to v1.5.0 (#65)Updates
geolonia/.github/.github/workflows/reusable-secret-leak-check.ymlfrom 1 to 1.34.0Release notes
Sourced from geolonia/.github/.github/workflows/reusable-secret-leak-check.yml's releases.
... (truncated)
Commits
1dd4e2dfeat: add summary report-mode + outputs to scanner reusables (#72)007ca57docs(ci): document why cdk-deploy-monitor needs each permission (#70)676d763ci(release): least-privilege caller in release-on-tag source (#69)419bfe9ci(techdocs): make publish-techdocs template standalone by default (#68)eb33e7fchore(deps): bump bumblebee default to v0.1.2 (#67)d3a81cachore(deps): bump the github-actions group across 1 directory with 3 updates ...5142150chore(betterleaks): bump pinned image to v1.5.0 (#65)Updates
geolonia/.github/.github/workflows/reusable-pinact-check.ymlfrom 1 to 1.34.0Release notes
Sourced from geolonia/.github/.github/workflows/reusable-pinact-check.yml's releases.
... (truncated)
Commits
1dd4e2dfeat: add summary report-mode + outputs to scanner reusables (#72)007ca57docs(ci): document why cdk-deploy-monitor needs each permission (#70)676d763ci(release): least-privilege caller in release-on-tag source (#69)419bfe9ci(techdocs): make publish-techdocs template standalone by default (#68)eb33e7fchore(deps): bump bumblebee default to v0.1.2 (#67)d3a81cachore(deps): bump the github-actions group across 1 directory with 3 updates ...5142150chore(betterleaks): bump pinned image to v1.5.0 (#65)Updates
zizmorcore/zizmor-actionfrom 0.5.7 to 0.6.0Release notes
Sourced from zizmorcore/zizmor-action's releases.
Commits
6599ee8Addcollectinput (#139)bec05c8Sync zizmor versions (#137)cf59549Add issue templates (#135)f72bf17chore(deps): bump github/codeql-action/upload-sarif (#134)b2a6facci: block version sync workflow on forks (#129)2d88f44Readme: document missing inputs (#130)d81e276Fold Docker image pull output into a collapsed Actions log group (#132)8c13c53chore(deps): bump the github-actions group with 2 updates (#133)2f8e9c6README: bump versions (#128)Updates
geolonia/.github/.github/workflows/reusable-security-suite.ymlfrom 1 to 1.34.0Release notes
Sourced from geolonia/.github/.github/workflows/reusable-security-suite.yml's releases.
... (truncated)
Commits
1dd4e2dfeat: add summary report-mode + outputs to scanner reusables (#72)007ca57docs(ci): document why cdk-deploy-monitor needs each permission (#70)676d763ci(release): least-privilege caller in release-on-tag source (#69)419bfe9ci(techdocs): make publish-techdocs template standalone by default (#68)eb33e7fchore(deps): bump bumblebee default to v0.1.2 (#67)d3a81cachore(deps): bump the github-actions group across 1 directory with 3 updates ...5142150chore(betterleaks): bump pinned image to v1.5.0 (#65)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions