Repository navigation
build(deps): bump the github-actions group across 1 directory with 2 updates - #146
dependabot[bot] wants to merge 1 commit into
Conversation
dependabot
Bot
added
dependencies
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?s=60&v=4){kind=small}
05d7390 to
d21de13
Compare
Superseded by re-review on the latest commit.
d21de13 to
3f091dd
Compare
3f091dd to
1722456
Compare
Superseded by re-review on the latest commit.
1722456 to
d5c91f4
Compare
d5c91f4 to
0420ddd
Compare
0420ddd to
c4c4e06
Compare
…updates Bumps the github-actions group with 2 updates in the / directory: [actions/setup-node](https://github.com/actions/setup-node) and [actions/create-github-app-token](https://github.com/actions/create-github-app-token). Updates `actions/setup-node` from 7.0.0 to 7.1.0 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](actions/setup-node@8207627...949feb2) Updates `actions/create-github-app-token` from 3.2.0 to 3.3.0 - [Release notes](https://github.com/actions/create-github-app-token/releases) - [Changelog](https://github.com/actions/create-github-app-token/blob/main/CHANGELOG.md) - [Commits](actions/create-github-app-token@bcd2ba4...64ab729) --- updated-dependencies: - dependency-name: actions/create-github-app-token dependency-version: 3.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: actions/setup-node dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com>
c4c4e06 to
e2d6ddd
Compare
Superseded by re-review on the latest commit.
There was a problem hiding this comment.
Nothing blocking. Re-reviewed at head e2d6ddd: git diff against the current main tip (422c42e, v1.19.0) shows the PR's own content is still exactly the same 7-line bump as every prior review — actions/setup-node 7.0.0→7.1.0 (5 call sites in ci.yml) and actions/create-github-app-token 3.2.0→3.3.0 (1 call site in dependabot.yml).
Re-verified both pinned SHAs independently again:
actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1=refs/tags/v7.1.0✓actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510=refs/tags/v3.3.0✓
Title and description are still the standard, accurate Dependabot-generated ones; no edit needed.
Cleared the body of and dismissed all four of my own prior live reviews on this PR (5722155945, 5737349353, 5737427579, 5786792707) before submitting this one. In previous turns I'd left reviews alone when their reported commit_id happened to equal the then-current head, reasoning that made them "not stale." That was the wrong test: none of those reviews were ever a verdict on this revision, and this repository's commit_id field on an existing review keeps getting updated by GitHub to track the current head as the branch is rebased — three of the four showed the head two commits ago, not this one, once I re-checked just now. Dismissing unconditionally, as the instructions actually specify, is the correct behaviour going forward rather than gating on that field.
|
🗜️ Headroom context compression
|
Bumps the github-actions group with 2 updates in the / directory: actions/setup-node and actions/create-github-app-token.
Updates
actions/setup-nodefrom 7.0.0 to 7.1.0Release notes
Sourced from actions/setup-node's releases.
Commits
949feb2Bump eslint from 10.5.0 to 10.11.0 and package.json from 7.0.0 to 7.1.0 (#1635)7207c4fchore: update dependencies and add license files (#1642)54337e0Bump eslint-plugin-n from 18.1.0 to 18.3.0 (#1638)fb54fa8Bump jest-each from 30.4.1 to 30.5.2 (#1636)7f84f1dBump pnpm/action-setup from 6.0.10 to 6.1.0 (#1631)0c54c7bBump@typescript-eslint/parserfrom 8.62.0 to 8.70.0 (#1615)a829419Bump@types/semverfrom 7.7.1 to 7.8.0 (#1616)680d1e4Support absolute paths in node-version-file (#1633)db0fb3aBump baseline-browser-mapping from 2.10.38 to 2.11.22 (#1629)94196eeBump pnpm/action-setup from 6.0.9 to 6.0.10 (#1602)Updates
actions/create-github-app-tokenfrom 3.2.0 to 3.3.0Release notes
Sourced from actions/create-github-app-token's releases.
Changelog
Sourced from actions/create-github-app-token's changelog.
Commits
64ab729chore(main): release 3.3.0 (#402)f3a828eci: create signed dist commits in release workflow (#404)655017fdocs: clarify when owner grants access to all repositories (#378)12461a3fix(deps): bump nested undici from 6.24.0 to 6.29.0 (#403)a47236ffeat: update permission inputs (#399)a69c19dfix(deps): bump the production-dependencies group across 1 directory with 3 u...d5cb7aebuild(deps): bump actions/checkout from 6 to 7 (#384)575da86build(deps): bump stefanzweifel/git-auto-commit-action from 7.1.0 to 7.2.0 in...e85f677test: omit stack traces from snapshots (#401)9419396build(deps-dev): bump c8 from 11.0.0 to 12.0.0 (#400)