Repository navigation
Bump the github-actions-updates group with 2 updates - #35
Closed
dependabot[bot] wants to merge 1 commit into
Closed
dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps the github-actions-updates group with 2 updates: [lfreleng-actions/github2gerrit-action/.github/workflows/github2gerrit.yaml](https://github.com/lfreleng-actions/github2gerrit-action) and [lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-scorecard.yaml](https://github.com/lfit/releng-reusable-workflows). Updates `lfreleng-actions/github2gerrit-action/.github/workflows/github2gerrit.yaml` from 2.0.0 to 2.1.0 - [Release notes](https://github.com/lfreleng-actions/github2gerrit-action/releases) - [Commits](lfreleng-actions/github2gerrit-action@f44ab26...3d548cc) Updates `lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-scorecard.yaml` from 0.10.2 to 0.10.3 - [Release notes](https://github.com/lfit/releng-reusable-workflows/releases) - [Commits](lfit/releng-reusable-workflows@dd7e7f1...87eacd1) --- updated-dependencies: - dependency-name: lfreleng-actions/github2gerrit-action/.github/workflows/github2gerrit.yaml dependency-version: 2.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions-updates - dependency-name: lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-scorecard.yaml dependency-version: 0.10.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-updates ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
Bot
added
dependencies
|
PR: #35 Note: This metadata is also included in the Gerrit commit message for reconciliation. |
|
Change raised in Gerrit by GitHub2Gerrit: https://gerrit.onap.org/r/c/policy/docker/+/147321 |
onap-github
pushed a commit
that referenced
this pull request
Sep 3, 2026
Bumps the github-actions-updates group with 2 updates: lfreleng-actions/github2gerrit-action/.github/workflows/github2gerrit.yaml and lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-scorecard.yaml. Updates `lfreleng-actions/github2gerrit-action/.github/workflows/github2gerrit.yaml` from 2.0.0 to 2.1.0 ## Release notes Sourced from lfreleng-actions/github2gerrit-action/.github/workflows/github2gerrit.yaml's releases. v2.1.0 ✨ New Features ✨ Feat: Gate fork PR transfer on maintainer approval @ModeSevenIndustrialSolutions (#390) 🐛 Bug Fixes 🐛 Fix: Authorise @github2gerrit comment directives @ModeSevenIndustrialSolutions (#389) 🔧 Maintenance 🔧 Chore: pre-commit autoupdate @pre-commit-ci[bot] (#388) Links Submit bugs/feature requests ## Commits 3d548cc Merge pull request #390 from modeseven-lfreleng-actions/feat/fork-approval-gate bfdb90e Fix: Address Copilot review feedback b65bf61 Feat: Gate fork PR transfer on maintainer approval a485b30 Merge pull request #389 from modeseven-lfreleng-actions/fix/pr-command-author 411afac Fix: Authorise @github2gerrit comment directives 9d659e2 Merge pull request #388 from lfreleng-actions/pre-commit-ci-update-config da33e11 Chore: pre-commit autoupdate See full diff in compare view Updates `lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-scorecard.yaml` from 0.10.2 to 0.10.3 ## Release notes Sourced from lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-scorecard.yaml's releases. v0.10.3 🔧 Maintenance 🔧 Chore: Bump harden-runner allow-list to v0.16.0 @ModeSevenIndustrialSolutions (#879) Chore: Bump lfreleng-actions/harden-runner-block-action from 0.2.1 to 0.12.1 @dependabot[bot] (#868) Chore: Bump lfreleng-actions/draft-release-promote-action from 0.1.4 to 0.1.5 @dependabot[bot] (#869) Chore: Bump lfreleng-actions/tox-run-action from 0.1.2 to 0.1.3 @dependabot[bot] (#866) Chore: Bump github/codeql-action/upload-sarif from 4.37.7 to 4.37.8 @dependabot[bot] (#870) Chore: Bump 1password/load-secrets-action from 5.0.0 to 5.0.1 @dependabot[bot] (#867) Chore: Bump lfreleng-actions/inject-issue-id-action from 0.1.2 to 0.1.3 @dependabot[bot] (#871) Chore: Bump lfreleng-actions/docker-save-images-action from 0.1.1 to 0.2.0 @dependabot[bot] (#872) Chore: Bump lfreleng-actions/checkout-gerrit-change-action from 1.0.2 to 1.1.0 @dependabot[bot] (#873) Chore: Bump lfreleng-actions/tag-push-verify-action from 0.1.2 to 0.1.3 @dependabot[bot] (#874) Chore: Bump lfreleng-actions/openssf-scorecard-summary-action from 0.1.1 to 0.1.2 @dependabot[bot] (#875) Chore: Bump github/codeql-action/init from 4.37.7 to 4.37.8 @dependabot[bot] (#876) Chore: Bump github/codeql-action/analyze from 4.37.7 to 4.37.8 @dependabot[bot] (#877) Chore: pre-commit linting updates @pre-commit-ci[bot] (#878) Links Submit bugs/feature requests ## Commits 87eacd1 Merge pull request #878 from lfit/pre-commit-ci-update-config e80cc27 Merge pull request #877 from lfit/dependabot/github_actions/github/codeql-act 8cf781e Merge pull request #876 from lfit/dependabot/github_actions/github/codeql-act 9e5b39e Merge pull request #875 from lfit/dependabot/github_actions/lfreleng-actions/ 3d515a0 Merge pull request #874 from lfit/dependabot/github_actions/lfreleng-actions/ 75daab7 Merge pull request #873 from lfit/dependabot/github_actions/lfreleng-actions/ 7b22cd2 Merge pull request #872 from lfit/dependabot/github_actions/lfreleng-actions/ 3d8ec4f Merge pull request #871 from lfit/dependabot/github_actions/lfreleng-actions/ 685f654 Merge pull request #867 from lfit/dependabot/github_actions/1password/load-se ecfca7e Merge pull request #870 from lfit/dependabot/github_actions/github/codeql-act Additional commits viewable in compare view Issue-ID: CIMAN-33 Signed-off-by: dependabot[bot] <[email protected]> Change-Id: I942b304ee3ea070052e2a16599b8b75c6f6f1756 GitHub-PR: #35 GitHub-Hash: 2c3968644ff9eef6 Signed-off-by: onap.gh2gerrit <[email protected]>
|
Automated PR Closure This pull request has been automatically closed by GitHub2Gerrit. The corresponding Gerrit change has been accepted and merged ✅ The changes from this PR are now part of the main codebase in Gerrit. This is an automated action performed by the GitHub2Gerrit tool. |
Contributor
Author
|
This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests. To ignore these dependencies, configure ignore rules in dependabot.yml |
dependabot
Bot
deleted the
dependabot/github_actions/github-actions-updates-b5fa15ccd2
branch
September 3, 2026 10:32
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the github-actions-updates group with 2 updates: lfreleng-actions/github2gerrit-action/.github/workflows/github2gerrit.yaml and lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-scorecard.yaml.
Updates
lfreleng-actions/github2gerrit-action/.github/workflows/github2gerrit.yamlfrom 2.0.0 to 2.1.0Release notes
Sourced from lfreleng-actions/github2gerrit-action/.github/workflows/github2gerrit.yaml's releases.
Commits
3d548ccMerge pull request #390 from modeseven-lfreleng-actions/feat/fork-approval-gatebfdb90eFix: Address Copilot review feedbackb65bf61Feat: Gate fork PR transfer on maintainer approvala485b30Merge pull request #389 from modeseven-lfreleng-actions/fix/pr-command-author...411afacFix: Authorise@github2gerritcomment directives9d659e2Merge pull request #388 from lfreleng-actions/pre-commit-ci-update-configda33e11Chore: pre-commit autoupdateUpdates
lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-scorecard.yamlfrom 0.10.2 to 0.10.3Release notes
Sourced from lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-scorecard.yaml's releases.
Commits
87eacd1Merge pull request #878 from lfit/pre-commit-ci-update-confige80cc27Merge pull request #877 from lfit/dependabot/github_actions/github/codeql-act...8cf781eMerge pull request #876 from lfit/dependabot/github_actions/github/codeql-act...9e5b39eMerge pull request #875 from lfit/dependabot/github_actions/lfreleng-actions/...3d515a0Merge pull request #874 from lfit/dependabot/github_actions/lfreleng-actions/...75daab7Merge pull request #873 from lfit/dependabot/github_actions/lfreleng-actions/...7b22cd2Merge pull request #872 from lfit/dependabot/github_actions/lfreleng-actions/...3d8ec4fMerge pull request #871 from lfit/dependabot/github_actions/lfreleng-actions/...685f654Merge pull request #867 from lfit/dependabot/github_actions/1password/load-se...ecfca7eMerge pull request #870 from lfit/dependabot/github_actions/github/codeql-act...Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions