chore(deps): bump the github-actions group across 1 directory with 3 updates - #327
chore(deps): bump the github-actions group across 1 directory with 3 updates#327dependabot[bot] wants to merge 1 commit into
Conversation
dependabot
Bot
added
dependencies
dependabot
Bot
added
dependencies
|
[APPROVALNOTIFIER] This PR is NOT APPROVED This pull-request has been approved by: dependabot[bot] The full list of commands accepted by this bot can be found here. DetailsNeeds approval from an approver in each of these files:Approvers can indicate their approval by writing |
|
Hi Dependabot (@dependabot)[bot]. Thanks for your PR. I'm waiting for a Azure member to verify that this patch is reasonable to test. If it is, they should reply with Regular contributors should join the org to skip this step. Once the patch is verified, the new status will be reflected by the I understand the commands that are listed here. DetailsInstructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. |
There was a problem hiding this comment.
Pull request overview
This PR updates pinned GitHub Actions SHAs in the Dependabot remediation workflow to the latest versions described in the PR metadata, keeping the workflow dependencies current and reproducible.
Changes:
- Bump
github/gh-aw-actions/setupfrom v0.83.1 to v0.87.5 (pinned SHA update). - Bump
actions/checkoutto v7.0.1 across the workflow (including from v5.1.0 in one job). - Bump
actions/setup-gofrom v5.6.0 to v7.0.0 (pinned SHA update).
💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.
…updates Bumps the github-actions group with 3 updates in the / directory: [github/gh-aw-actions/setup](https://github.com/github/gh-aw-actions), [actions/checkout](https://github.com/actions/checkout) and [actions/setup-go](https://github.com/actions/setup-go). Updates `github/gh-aw-actions/setup` from 0.83.1 to 0.88.3 - [Release notes](https://github.com/github/gh-aw-actions/releases) - [Changelog](https://github.com/github/gh-aw-actions/blob/main/CHANGELOG.md) - [Commits](github/gh-aw-actions@8bdba80...49459c7) Updates `actions/checkout` from 5.1.0 to 7.0.1 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@v5.1.0...3d3c42e) Updates `actions/setup-go` from 5.6.0 to 7.0.0 - [Release notes](https://github.com/actions/setup-go/releases) - [Commits](actions/setup-go@40f1582...b7ad1da) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/setup-go dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: github/gh-aw-actions/setup dependency-version: 0.87.5 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
changed the title
fac7979 to
3b2ff1e
Compare
There was a problem hiding this comment.
🟡 Changes recommended
The workflow’s pinned action SHAs were updated but the gh-aw generated header metadata/manifest in the same file remains stale/inconsistent and should be regenerated to match.
Once you've addressed the issues Copilot identified, you can request another Copilot review.
Review details
- Files reviewed: 1/1 changed files
- Comments generated: 1
- Review effort level: Lite
| - name: Setup Scripts | ||
| id: setup | ||
| uses: github/gh-aw-actions/setup@8bdba8075360648fe6802302a5b4e016361dc6ac # v0.83.1 | ||
| uses: github/gh-aw-actions/setup@49459c75b37a0b82b4ecb15e1079972cc3353bc9 # v0.88.3 |
Bumps the github-actions group with 3 updates in the / directory: github/gh-aw-actions/setup, actions/checkout and actions/setup-go.
Updates
github/gh-aw-actions/setupfrom 0.83.1 to 0.88.3Release notes
Sourced from github/gh-aw-actions/setup's releases.
... (truncated)
Commits
49459c7chore: sync actions from gh-aw@v0.88.3 (#229)9271a18chore: sync actions from gh-aw@v0.88.2 (#227)afc709fchore: sync actions from gh-aw@v0.88.0 (#224)bc8c008chore: sync actions from gh-aw@v0.87.10 (#222)49dc896chore: sync actions from gh-aw@v0.87.9 (#220)1aa033cchore: sync actions from gh-aw@v0.87.6 (#219)2a78d04chore: sync actions from gh-aw@v0.87.5 (#218)ea4b911chore: sync actions from gh-aw@v0.87.4 (#217)b304200chore: sync actions from gh-aw@v0.87.2 (#216)423b3dcchore: sync actions from gh-aw@v0.87.1 (#215)Updates
actions/checkoutfrom 5.1.0 to 7.0.1Release notes
Sourced from actions/checkout's releases.
... (truncated)
Changelog
Sourced from actions/checkout's changelog.
... (truncated)
Commits
3d3c42eprep v7.0.1 release (#2531)2880268escape values passed to --unset (#2530)12cd223trim only ascii whitespace for branch (#2521)62661c4skip running unsafe pr check if input is default (#2518)e8d4307Bump the minor-actions-dependencies group with 2 updates (#2499)631c942eslint 9 (#2474)4f1f4aeBump actions/upload-artifact from 4 to 7 (#2476)ba09753Bump actions/checkout from 6 to 7 (#2488)b9e0990Bump docker/login-action from 3.3.0 to 4.2.0 (#2479)e8cb398Bump docker/build-push-action from 6.5.0 to 7.2.0 (#2478)Updates
actions/setup-gofrom 5.6.0 to 7.0.0Release notes
Sourced from actions/setup-go's releases.
... (truncated)
Commits
b7ad1dachore(deps): bump@actions/cacheto 6.2.0 (#771)0778a10Migrate to ESM and upgrade dependencies (#763)924ae3achore: bump version to 6.5.0 in package.json and package-lock.json (#762)e91cc3bBump@actions/cacheto 5.1.0, log cache write denied (#758)4a2405echore: update@types/nodeand@typescript-eslintdependencies to latest versi...78961f6chore: update@actionsdependencies and refresh license cache (#744)4a36011docs: fix Microsoft build of Go link (#734)8f19afcfeat: add go-download-base-url input for custom Go distributions (#721)27fdb26Bump minimatch from 3.1.2 to 3.1.5 (#727)def8c39Rearrange README.md, add advanced-usage.md (#724)