Repository navigation
build(deps): bump the github-actions group across 1 directory with 2 updates - #146
dependabot[bot] wants to merge 1 commit into
Conversation
dependabot
Bot
added
dependencies
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?s=60&v=4){kind=small}
05d7390 to
d21de13
Compare
Superseded by re-review on the latest commit.
There was a problem hiding this comment.
Nothing blocking. This commit is a rebase onto the latest main — the diff itself is unchanged from the previous revision: actions/setup-node 7.0.0 → 7.1.0 and actions/create-github-app-token 3.2.0 → 3.3.0, applied consistently across all four affected steps in ci.yml and dependabot.yml.
Both SHAs were already verified against upstream tag refs in my prior review on this PR (949feb24... = actions/setup-node@v7.1.0, 64ab729a... = actions/create-github-app-token@v3.3.0), and nothing in the diff has changed since, so that verification still stands. My earlier APPROVED review has been dismissed as superseded since it was tied to the previous commit.
…updates Bumps the github-actions group with 2 updates in the / directory: [actions/setup-node](https://github.com/actions/setup-node) and [actions/create-github-app-token](https://github.com/actions/create-github-app-token). Updates `actions/setup-node` from 7.0.0 to 7.1.0 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](actions/setup-node@8207627...949feb2) Updates `actions/create-github-app-token` from 3.2.0 to 3.3.0 - [Release notes](https://github.com/actions/create-github-app-token/releases) - [Changelog](https://github.com/actions/create-github-app-token/blob/main/CHANGELOG.md) - [Commits](actions/create-github-app-token@bcd2ba4...64ab729) --- updated-dependencies: - dependency-name: actions/create-github-app-token dependency-version: 3.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: actions/setup-node dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com>
d21de13 to
3f091dd
Compare
There was a problem hiding this comment.
Nothing blocking. This is a Dependabot SHA-pin bump of two github-actions dependencies: actions/setup-node 7.0.0 → 7.1.0 and actions/create-github-app-token 3.2.0 → 3.3.0, applied consistently across every use site in ci.yml (5 occurrences) and dependabot.yml (2 occurrences) — confirmed no stray un-bumped pin was left behind.
I independently verified both new SHAs against the upstream tag refs rather than trusting the PR body's claims:
949feb2413d6458794dcd2491c4babbbce0c15c1=actions/setup-node@v7.1.0✓64ab729a6294000f5aa4a4bc0b73d1f32bc45510=actions/create-github-app-token@v3.3.0✓
Both resolve exactly to the tags Dependabot claims. Title and description are the standard Dependabot-generated ones and already accurately describe the change, so no update was needed there.
Note for whoever reads this: this exact head commit (3f091dd1) already carries a prior APPROVED review from this bot with effectively identical content — the PR history shows that review was posted, a stale review from an earlier commit was dismissed, and now this run has independently reached the same conclusion on the same commit. This looks like a duplicate workflow trigger rather than a new revision to review; flagging it in case the double trigger itself is worth investigating.
|
🗜️ Headroom context compression
|
Bumps the github-actions group with 2 updates in the / directory: actions/setup-node and actions/create-github-app-token.
Updates
actions/setup-nodefrom 7.0.0 to 7.1.0Release notes
Sourced from actions/setup-node's releases.
Commits
949feb2Bump eslint from 10.5.0 to 10.11.0 and package.json from 7.0.0 to 7.1.0 (#1635)7207c4fchore: update dependencies and add license files (#1642)54337e0Bump eslint-plugin-n from 18.1.0 to 18.3.0 (#1638)fb54fa8Bump jest-each from 30.4.1 to 30.5.2 (#1636)7f84f1dBump pnpm/action-setup from 6.0.10 to 6.1.0 (#1631)0c54c7bBump@typescript-eslint/parserfrom 8.62.0 to 8.70.0 (#1615)a829419Bump@types/semverfrom 7.7.1 to 7.8.0 (#1616)680d1e4Support absolute paths in node-version-file (#1633)db0fb3aBump baseline-browser-mapping from 2.10.38 to 2.11.22 (#1629)94196eeBump pnpm/action-setup from 6.0.9 to 6.0.10 (#1602)Updates
actions/create-github-app-tokenfrom 3.2.0 to 3.3.0Release notes
Sourced from actions/create-github-app-token's releases.
Changelog
Sourced from actions/create-github-app-token's changelog.
Commits
64ab729chore(main): release 3.3.0 (#402)f3a828eci: create signed dist commits in release workflow (#404)655017fdocs: clarify when owner grants access to all repositories (#378)12461a3fix(deps): bump nested undici from 6.24.0 to 6.29.0 (#403)a47236ffeat: update permission inputs (#399)a69c19dfix(deps): bump the production-dependencies group across 1 directory with 3 u...d5cb7aebuild(deps): bump actions/checkout from 6 to 7 (#384)575da86build(deps): bump stefanzweifel/git-auto-commit-action from 7.1.0 to 7.2.0 in...e85f677test: omit stack traces from snapshots (#401)9419396build(deps-dev): bump c8 from 11.0.0 to 12.0.0 (#400)