Skip to content

chore(test): bump tests/helper/bats-core from ae4b94d to 52439eb - #4

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/submodules/tests/helper/bats-core-52439eb
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/submodules/tests/helper/bats-core-52439eb

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 1, 2026 •

Copy link
Copy Markdown

Bumps tests/helper/bats-core from ae4b94d to 52439eb.

Commits
  • 52439eb Merge pull request #1263 from darettau/fix-summary-color
  • 7f8f547 fix: color summary red when tests did not run
  • f768219 docs: note summary color fix in the changelog
  • 542f20b test: cover summary color for timed out and not run tests
  • 8c46f56 fix: color summary by outcome, not just failure count
  • 5d99e45 Merge pull request #1258 from bats-hardened/upstream-pr/07-normalize-BATS_LIB...
  • 5897893 docs: reference PR #1258 in the changelog
  • 7298541 fix(windows): normalize BATS_LIB_PATH from Windows processes
  • 8c56b90 test(windows): cover inherited BATS_LIB_PATH
  • cb6045e Merge pull request #1250 from aprylewu/fix/load-failure-stack-trace
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependabot Dependabot: dependabot dependencies Dependabot: dependencies tests Dependabot: tests labels Oct 1, 2026
karlspace added a commit that referenced this pull request Oct 7, 2026
Since 9e5d780 gitleaks actually runs here (scan-type 'secrets'), and
that exposes a gap the old 'full' value hid: GitHub runs Dependabot
pull requests like fork PRs and withholds Actions secrets. With
GITLEAKS_LICENSE empty, gitleaks-action refuses to scan an organisation
repository ("missing gitleaks license"), the module reports the scan
as unknown and the Security workflow fails. That is already the case
for every Dependabot PR in OT-CAN2IP and XPD-AIModelSync; without this
guard PR #4 here would turn red on its next update.

* secret-scan job skipped for pull_request events whose actor is
  dependabot[bot]; human PRs, pushes, schedule and dispatch unchanged
* The summary gate accepts exactly that skip and nothing else, so a
  gitleaks job that is skipped for any other reason still fails
* Coverage is kept: the push run scans the same commits when the PR
  lands on main, and the weekly schedule scans the full history

The guard can go once GITLEAKS_LICENSE also exists as an org-level
Dependabot secret.
@karlspace

Copy link
Copy Markdown
Contributor

@dependabot rebase

Bumps [tests/helper/bats-core](https://github.com/bats-core/bats-core) from `ae4b94d` to `52439eb`.
- [Release notes](https://github.com/bats-core/bats-core/releases)
- [Commits](bats-core/bats-core@ae4b94d...52439eb)

---
updated-dependencies:
- dependency-name: tests/helper/bats-core
  dependency-version: 52439ebfac39987dd43e26502aa4aa19f2753d4a
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/submodules/tests/helper/bats-core-52439eb branch from 0baccff to 86caf18 Compare October 7, 2026 22:48
@dependabot @github

dependabot Bot commented on behalf of github Nov 1, 2026

Copy link
Copy Markdown
Author

Superseded by #6.

@dependabot dependabot Bot closed this Nov 1, 2026
@dependabot
dependabot Bot deleted the dependabot/submodules/tests/helper/bats-core-52439eb branch November 1, 2026 06:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependabot Dependabot: dependabot dependencies Dependabot: dependencies tests Dependabot: tests

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant