-
Notifications
You must be signed in to change notification settings - Fork 0
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
⬆️ (deps-ghaction): Bump the github-actions group across 1 directory with 3 updates #85
⬆️ (deps-ghaction): Bump the github-actions group across 1 directory with 3 updates #85
Conversation
…with 3 updates Bumps the github-actions group with 3 updates in the / directory: [github/codeql-action](https://github.com/github/codeql-action), [reviewdog/action-trivy](https://github.com/reviewdog/action-trivy) and [actions/upload-artifact](https://github.com/actions/upload-artifact). Updates `github/codeql-action` from 3.26.2 to 3.26.6 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@429e197...4dd1613) Updates `reviewdog/action-trivy` from 1.11.0 to 1.11.3 - [Release notes](https://github.com/reviewdog/action-trivy/releases) - [Commits](reviewdog/action-trivy@14e16b3...0e0d85c) Updates `actions/upload-artifact` from 4.3.6 to 4.4.0 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@834a144...5076954) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: reviewdog/action-trivy dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: actions/upload-artifact dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions ... Signed-off-by: dependabot[bot] <[email protected]>
Important Review skippedBot user detected. To trigger a single review, invoke the You can disable this status message by setting the TipsChatThere are 3 ways to chat with CodeRabbit:
Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments. CodeRabbit Commands (Invoked using PR comments)
Other keywords and placeholders
CodeRabbit Configuration File (
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
simply
may be insensitive, try not to use it simple retext-equality
# For most projects, this workflow file will not need changing; you simply need |
Looks like these dependencies are updatable in another way, so this is no longer needed. |
Bumps the github-actions group with 3 updates in the / directory: github/codeql-action, reviewdog/action-trivy and actions/upload-artifact.
Updates
github/codeql-action
from 3.26.2 to 3.26.6Changelog
Sourced from github/codeql-action's changelog.
... (truncated)
Commits
4dd1613
Merge pull request #2452 from github/update-v3.26.6-7233ec5e6dd9dd2d
Update changelog for v3.26.67233ec5
Merge pull request #2449 from github/update-bundle/codeql-bundle-v2.18.3a32c44d
Add changelog note2966897
Update default bundle to codeql-bundle-v2.18.3b8efe4d
Merge pull request #2435 from github/update-supported-enterprise-server-versionsab408a8
Merge branch 'main' into update-supported-enterprise-server-versions864b979
Merge pull request #2443 from github/dbartol/config-file-telemetryd36c7aa
Merge pull request #2448 from github/dependabot/npm_and_yarn/npm-09b7c43f6bb3bf514
Update checked-in dependenciesUpdates
reviewdog/action-trivy
from 1.11.0 to 1.11.3Release notes
Sourced from reviewdog/action-trivy's releases.
Commits
0e0d85c
Merge pull request #47 from reviewdog/renovate/azurerm-3.x881095d
Merge pull request #48 from reviewdog/renovate/aws-5.x74e77f0
chore(deps): update terraform aws to ~> 5.66.07c2c9e7
Merge pull request #57 from reviewdog/renovate/peter-evans-create-pull-reques...b4313c0
chore(deps): update peter-evans/create-pull-request action to v7a6b7ff5
chore(deps): update terraform azurerm to ~> 3.116.0Updates
actions/upload-artifact
from 4.3.6 to 4.4.0Release notes
Sourced from actions/upload-artifact's releases.
Commits
5076954
Merge pull request #598 from actions/joshmgross/exclude-hidden-filesd52396a
Add a warning about enablinginclude-hidden-files
710f362
Remove "merged" frominclude-hidden-files
input description3b315f2
npm run release
again 🙂3be2180
Remove another trailing comma453e8d0
Update glob license0a398c1
npm run release
a0c40cf
Update to latest@actions/glob
and fix testsacb59e4
lint
cb6558b
Exclude hidden files by defaultDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase
will rebase this PR@dependabot recreate
will recreate this PR, overwriting any edits that have been made to it@dependabot merge
will merge this PR after your CI passes on it@dependabot squash and merge
will squash and merge this PR after your CI passes on it@dependabot cancel merge
will cancel a previously requested merge and block automerging@dependabot reopen
will reopen this PR if it is closed@dependabot close
will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditions
will show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major version
will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor version
will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>
will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>
will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>
will remove the ignore condition of the specified dependency and ignore conditions