Repository navigation
Bump the github-actions-updates group across 1 directory with 6 updates - #34
Closed
dependabot[bot] wants to merge 1 commit into
Closed
dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps the github-actions-updates group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [lfreleng-actions/github2gerrit-action/.github/workflows/github2gerrit.yaml](https://github.com/lfreleng-actions/github2gerrit-action) | `2.4.0` | `2.4.3` | | [step-security/harden-runner](https://github.com/step-security/harden-runner) | `2.21.1` | `2.22.1` | | [lfreleng-actions/gerrit-review-action](https://github.com/lfreleng-actions/gerrit-review-action) | `1.1.3` | `1.2.0` | | [lfreleng-actions/checkout-gerrit-change-action](https://github.com/lfreleng-actions/checkout-gerrit-change-action) | `1.1.0` | `1.1.2` | | [lfreleng-actions/maven-build-action](https://github.com/lfreleng-actions/maven-build-action) | `0.4.3` | `0.5.4` | | [lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-scorecard.yaml](https://github.com/lfit/releng-reusable-workflows) | `0.10.3` | `0.10.4` | Updates `lfreleng-actions/github2gerrit-action/.github/workflows/github2gerrit.yaml` from 2.4.0 to 2.4.3 - [Release notes](https://github.com/lfreleng-actions/github2gerrit-action/releases) - [Commits](lfreleng-actions/github2gerrit-action@df12d7f...f2ffe06) Updates `step-security/harden-runner` from 2.21.1 to 2.22.1 - [Release notes](https://github.com/step-security/harden-runner/releases) - [Commits](step-security/harden-runner@e14015d...ccd8616) Updates `lfreleng-actions/gerrit-review-action` from 1.1.3 to 1.2.0 - [Release notes](https://github.com/lfreleng-actions/gerrit-review-action/releases) - [Commits](lfreleng-actions/gerrit-review-action@1e3eae7...d56b0b5) Updates `lfreleng-actions/checkout-gerrit-change-action` from 1.1.0 to 1.1.2 - [Release notes](https://github.com/lfreleng-actions/checkout-gerrit-change-action/releases) - [Commits](lfreleng-actions/checkout-gerrit-change-action@298f53b...35e98c8) Updates `lfreleng-actions/maven-build-action` from 0.4.3 to 0.5.4 - [Release notes](https://github.com/lfreleng-actions/maven-build-action/releases) - [Commits](lfreleng-actions/maven-build-action@7781c31...840adcc) Updates `lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-scorecard.yaml` from 0.10.3 to 0.10.4 - [Release notes](https://github.com/lfit/releng-reusable-workflows/releases) - [Commits](lfit/releng-reusable-workflows@87eacd1...fb90790) --- updated-dependencies: - dependency-name: lfreleng-actions/github2gerrit-action/.github/workflows/github2gerrit.yaml dependency-version: 2.4.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-updates - dependency-name: step-security/harden-runner dependency-version: 2.22.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions-updates - dependency-name: lfreleng-actions/gerrit-review-action dependency-version: 1.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions-updates - dependency-name: lfreleng-actions/checkout-gerrit-change-action dependency-version: 1.1.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-updates - dependency-name: lfreleng-actions/maven-build-action dependency-version: 0.5.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions-updates - dependency-name: lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-scorecard.yaml dependency-version: 0.10.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-updates ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
Bot
added
dependencies
|
PR: #34 Note: This metadata is also included in the Gerrit commit message for reconciliation. |
|
Change raised in Gerrit by GitHub2Gerrit: https://gerrit.onap.org/r/c/policy/models/+/148377 |
onap-github
pushed a commit
that referenced
this pull request
Oct 17, 2026
Bumps the github-actions-updates group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | lfreleng-actions/github2gerrit-action/.github/workflows/github2gerrit.yaml | `2.4.0` | `2.4.3` | | step-security/harden-runner | `2.21.1` | `2.22.1` | | lfreleng-actions/gerrit-review-action | `1.1.3` | `1.2.0` | | lfreleng-actions/checkout-gerrit-change-action | `1.1.0` | `1.1.2` | | lfreleng-actions/maven-build-action | `0.4.3` | `0.5.4` | | lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-scorecard.yaml | `0.10.3` | `0.10.4` | Updates `lfreleng-actions/github2gerrit-action/.github/workflows/github2gerrit.yaml` from 2.4.0 to 2.4.3 ## Release notes Sourced from lfreleng-actions/github2gerrit-action/.github/workflows/github2gerrit.yaml's releases. v2.4.3 🐛 Bug Fixes 🐛 Fix: Accept indented keys in .gitreview @ModeSevenIndustrialSolutions (#471) 🔧 Maintenance 🔧 Chore: Bump lfreleng-actions/harden-runner-block-action from 0.12.1 to 0.12.2 @dependabot[bot] (#465) Chore: Bump astral-sh/setup-uv from 10.1.0 to 10.2.0 @dependabot[bot] (#466) Chore: Bump lfreleng-actions/generic-workflows/.github/workflows/clear-action-cache.yaml from 0.3.1 to 0.4.0 @dependabot[bot] (#467) Chore: Bump ruff from 0.16.8 to 0.16.9 @dependabot[bot] (#468) Chore: Bump hatchling from 1.32.3 to 1.32.4 @dependabot[bot] (#469) Chore: Pre-commit autoupdate @pre-commit-ci[bot] (#470) Links Submit bugs/feature requests v2.4.2 🔧 Maintenance 🔧 Docs: Add repository AGENTS.md stub @ModeSevenIndustrialSolutions (#463) Chore: Bump pyjwt @dependabot[bot] (#464) Links Submit bugs/feature requests v2.4.1 🔧 Maintenance 🔧 Chore: Bump lfreleng-actions/python-workflows/.github/workflows/build-test-release.yaml from 0.4.0 to 0.5.0 @dependabot[bot] (#457) Chore: Bump lfreleng-actions/python-workflows/.github/workflows/build-test.yaml from 0.4.0 to 0.5.0 @dependabot[bot] (#458) Chore: Bump urllib3 from 2.7.0 to 2.8.0 @dependabot[bot] (#459) Chore: Bump hatchling from 1.32.0 to 1.32.3 @dependabot[bot] (#460) Chore: Bump ruff from 0.16.7 to 0.16.8 @dependabot[bot] (#461) Chore: pre-commit autoupdate @pre-commit-ci[bot] (#462) 🎓 Code Quality 🎓 CI: Adopt lint baseline, use $/ and test the sweep @ModeSevenIndustrialSolutions (#456) Links Submit bugs/feature requests ## Commits f2ffe06 Merge pull request #471 from modeseven-lfreleng-actions/fix/gitreview-indente db4de35 Fix: Accept indented keys in .gitreview 91abfe7 Test: Add expected-fail indented .gitreview cases 1264059 Merge pull request #470 from lfreleng-actions/pre-commit-ci-update-config 8cb068c Fix(deps): Bump mypy to 2.4.0 to match hook rev ee29402 Chore: Pre-commit autoupdate 63c3e61 Merge pull request #469 from lfreleng-actions/dependabot/uv/hatchling-1.32.4 58005de Merge pull request #468 from lfreleng-actions/dependabot/uv/ruff-0.16.9 82674d4 Merge pull request #467 from lfreleng-actions/dependabot/github_actions/lfrel 214b1f7 Merge pull request #466 from lfreleng-actions/dependabot/github_actions/astra Additional commits viewable in compare view Updates `step-security/harden-runner` from 2.21.1 to 2.22.1 ## Release notes Sourced from step-security/harden-runner's releases. v2.22.1 What's Changed Fixed security rules not initializing on GHES self-hosted runners Fixed GHES connectivity in block mode by implicitly allowing the GHES hostname Full Changelog: step-security/harden-runner@v2.22.0...v2.22.1 v2.22.0 What's Changed Linux ARM64 support for community tier GHES support for self-hosted VMs (enterprise tier) MacOS and Windows runner deny list support for block policy (enterprise tier). Full Changelog: step-security/harden-runner@v2.21.1...v2.22.0 ## Commits ccd8616 Merge pull request #704 from h0x0er/jatin/ghes-endp 037ccfd implicitly add ghes endpoint in allowList e7438c7 Merge pull request #703 from h0x0er/jatin/ghes-codebuild-fixes afb0b33 fixes for armour rules not getting initialised 351661c Merge pull request #701 from step-security/rc-44 1dc7f2e Merge pull request #702 from h0x0er/jatin/ghes-changes-up af5ca38 simplified ghes config creation 9a6d710 fix2 74c65ea fix ceac816 resovled comments Additional commits viewable in compare view Updates `lfreleng-actions/gerrit-review-action` from 1.1.3 to 1.2.0 ## Release notes Sourced from lfreleng-actions/gerrit-review-action's releases. v1.2.0 ✨ New Features ✨ Feat: Accept a custom review message @ModeSevenIndustrialSolutions (#166) 🔧 Maintenance 🔧 Chore: pre-commit autoupdate @pre-commit-ci[bot] (#147) Chore: Bump lfreleng-actions/generic-workflows/.github/workflows/release.yaml from 0.0.4 to 0.2.1 @dependabot[bot] (#148) Chore: Bump lfreleng-actions/harden-runner-block-action from 0.2.1 to 0.12.1 @dependabot[bot] (#149) Chore: pre-commit autoupdate @pre-commit-ci[bot] (#150) Chore: Bump lfreleng-actions/generic-workflows/.github/workflows/release.yaml from 0.2.1 to 0.2.2 @dependabot[bot] (#151) Chore: Bump lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-scorecard.yaml from 0.10.1 to 0.10.3 @dependabot[bot] (#152) Chore: pre-commit autoupdate @pre-commit-ci[bot] (#153) Chore: Bump lfreleng-actions/generic-workflows/.github/workflows/release.yaml from 0.2.2 to 0.3.1 @dependabot[bot] (#154) Chore: Bump step-security/harden-runner from 2.21.0 to 2.21.1 @dependabot[bot] (#155) Chore: pre-commit autoupdate @pre-commit-ci[bot] (#156) Chore: pre-commit autoupdate @pre-commit-ci[bot] (#157) Chore: pre-commit autoupdate @pre-commit-ci[bot] (#158) Docs: Add repository AGENTS.md stub @ModeSevenIndustrialSolutions (#159) Chore: Bump lfreleng-actions/harden-runner-block-action from 0.12.1 to 0.12.2 @dependabot[bot] (#160) Chore: Bump lfreleng-actions/generic-workflows/.github/workflows/release.yaml from 0.3.1 to 0.4.0 @dependabot[bot] (#161) Chore: pre-commit autoupdate @pre-commit-ci[bot] (#162) Chore: Bump release-drafter/release-drafter from 7.7.0 to 7.9.0 @dependabot[bot] (#163) Chore: Bump lfreleng-actions/generic-workflows/.github/workflows/release.yaml from 0.4.0 to 0.4.1 @dependabot[bot] (#164) Links Submit bugs/feature requests ## Commits d56b0b5 Merge pull request #166 from modeseven-lfreleng-actions/feat/review-message 50fac4b Feat: Accept a custom review message c515972 Merge pull request #164 from lfreleng-actions/dependabot/github_actions/lfrel c5c0504 Merge pull request #163 from lfreleng-actions/dependabot/github_actions/relea e73219b Chore: Bump lfreleng-actions/generic-workflows/.github/workflows/release.yaml bc5404f Chore: Bump release-drafter/release-drafter from 7.7.0 to 7.9.0 84ec102 Merge pull request #162 from lfreleng-actions/pre-commit-ci-update-config b5ec144 Chore: pre-commit autoupdate 3266f23 Merge pull request #161 from lfreleng-actions/dependabot/github_actions/lfrel d921d86 Merge pull request #160 from lfreleng-actions/dependabot/github_actions/lfrel Additional commits viewable in compare view Updates `lfreleng-actions/checkout-gerrit-change-action` from 1.1.0 to 1.1.2 ## Release notes Sourced from lfreleng-actions/checkout-gerrit-change-action's releases. v1.1.2 🐛 Bug Fixes 🐛 Fix: Remove submodules the Gerrit change drops @ModeSevenIndustrialSolutions (#159) Links Submit bugs/feature requests v1.1.1 🐛 Bug Fixes 🐛 Fix: Guarantee change parent in shallow clones @ModeSevenIndustrialSolutions (#137) Fix: Make submodules follow the Gerrit change @ModeSevenIndustrialSolutions (#155) 🔧 Maintenance 🔧 Chore: pre-commit autoupdate @pre-commit-ci[bot] (#138) Chore: Bump lfreleng-actions/generic-workflows/.github/workflows/release.yaml from 0.0.4 to 0.1.0 @dependabot[bot] (#139) Chore: Bump step-security/harden-runner from 2.20.1 to 2.21.0 @dependabot[bot] (#140) Chore: Bump lfreleng-actions/harden-runner-block-action from 0.2.1 to 0.11.1 @dependabot[bot] (#141) Chore: pre-commit autoupdate @pre-commit-ci[bot] (#143) Chore: Bump lfreleng-actions/generic-workflows/.github/workflows/release.yaml from 0.1.0 to 0.2.2 @dependabot[bot] (#144) Chore: Bump lfreleng-actions/harden-runner-block-action from 0.11.1 to 0.12.1 @dependabot[bot] (#145) Chore: Bump lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-scorecard.yaml from 0.10.1 to 0.10.3 @dependabot[bot] (#146) Chore: pre-commit autoupdate @pre-commit-ci[bot] (#147) Chore: Bump lfreleng-actions/generic-workflows/.github/workflows/release.yaml from 0.2.2 to 0.3.0 @dependabot[bot] (#148) Chore: Bump step-security/harden-runner from 2.21.0 to 2.21.1 @dependabot[bot] (#149) Chore: pre-commit autoupdate @pre-commit-ci[bot] (#150) Chore: Bump lfreleng-actions/generic-workflows/.github/workflows/release.yaml from 0.3.0 to 0.3.1 @dependabot[bot] (#151) Chore: pre-commit autoupdate @pre-commit-ci[bot] (#152) Chore: pre-commit autoupdate @pre-commit-ci[bot] (#153) Docs: Add repository AGENTS.md stub @ModeSevenIndustrialSolutions (#154) Chore: Bump lfreleng-actions/harden-runner-block-action from 0.12.1 to 0.12.2 @dependabot[bot] (#157) Chore: Bump lfreleng-actions/generic-workflows/.github/workflows/release.yaml from 0.3.1 to 0.4.0 @dependabot[bot] (#158) Links Submit bugs/feature requests ## Commits 35e98c8 Merge pull request #159 from modeseven-lfreleng-actions/fix/remove-dropped-su 17a443a Fix: Remove submodules the Gerrit change drops b9ec392 Merge pull request #155 from modeseven-lfreleng-actions/fix/gerrit-submodule- fb24d45 Merge pull request #158 from lfreleng-actions/dependabot/github_actions/lfrel be6bdee Merge pull request #157 from lfreleng-actions/dependabot/github_actions/lfrel f3ebb3d Chore: Bump lfreleng-actions/generic-workflows/.github/workflows/release.yaml 6ffaa81 Chore: Bump lfreleng-actions/harden-runner-block-action 6a6a169 Fix: Make submodules follow the Gerrit change 3f0dcf1 Merge pull request #154 from modeseven-lfreleng-actions/docs/agents-stub c734553 Docs: Add repository AGENTS.md stub Additional commits viewable in compare view Updates `lfreleng-actions/maven-build-action` from 0.4.3 to 0.5.4 ## Release notes Sourced from lfreleng-actions/maven-build-action's releases. v0.5.4 🐛 Bug Fixes 🐛 Fix: Keep step variables out of Maven @ModeSevenIndustrialSolutions (#171) Links Submit bugs/feature requests v0.5.3 🐛 Bug Fixes 🐛 Fix: Warn on a deploy repository naming m2repo @ModeSevenIndustrialSolutions (#170) 🔧 Maintenance 🔧 Chore: Pre-commit autoupdate @pre-commit-ci[bot] (#168) Links Submit bugs/feature requests v0.5.2 🐛 Bug Fixes 🐛 Fix: Build on the requested JDK distribution @ModeSevenIndustrialSolutions (#166) Fix: Restore the Maven probe and settings cleanup @ModeSevenIndustrialSolutions (#167) Links Submit bugs/feature requests v0.5.1 [!WARNING] Behaviour change: callers passing a deploy repository now fail. From this release (and in v0.5.2), the action refuses altDeploymentRepository, altSnapshotDeploymentRepository and altReleaseDeploymentRepository in mvn-opts, mvn-params, mvn-phases, mvn-profiles and MAVEN_ARGS, failing before Maven runs. That includes the long-standing -DaltDeploymentRepository=staging:"${GITHUB_WORKSPACE}"/m2repo that lfit/releng-reusable-workflows passes by default, and that many of its callers pass themselves. Fixed by #170: a value naming ${GITHUB_WORKSPACE}/m2repo now draws a warning and the build continues; anything pointing elsewhere is still refused. Upgrade to v0.5.3 rather than adopting v0.5.1 or v0.5.2 if your callers pass that argument. 🐛 Bug Fixes 🐛 Fix: Stop callers redirecting the m2repo deploy @ModeSevenIndustrialSolutions (#165) ... (truncated) ## Commits 840adcc Merge pull request #171 from modeseven-lfreleng-actions/fix/private-step-vari f9a212f Fix: Keep step variables out of Maven 0f09f80 Merge pull request #170 from modeseven-lfreleng-actions/fix/deploy-repository 8313120 Fix: Warn on a deploy repository naming m2repo 22b5900 Merge pull request #168 from lfreleng-actions/pre-commit-ci-update-config 3edfab7 Chore: Pre-commit autoupdate 01a3700 Merge pull request #167 from modeseven-lfreleng-actions/fix/maven-probe-setti 126a854 Fix: Restore the Maven probe and settings cleanup 48dded1 Merge pull request #166 from modeseven-lfreleng-actions/fix/drop-setup-maven- eb91fe5 Fix: Build on the requested JDK distribution Additional commits viewable in compare view Updates `lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-scorecard.yaml` from 0.10.3 to 0.10.4 ## Release notes Sourced from lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-scorecard.yaml's releases. v0.10.4 🐛 Bug Fixes 🐛 Fix: repair Maven merge SNAPSHOT publishing @askb (#896) Fix: declare secrets in compose-maven-merge @askb (#897) Fix: resolve concurrency key from workflow inputs @askb (#898) 🔧 Maintenance 🔧 Chore: Bump lfreleng-actions/sonarqube-cloud-scan-action from 1.4.0 to 1.5.0 @dependabot[bot] (#881) Chore: Bump lfreleng-actions/gerrit-review-action from 1.1.2 to 1.1.3 @dependabot[bot] (#882) Chore: Bump lfreleng-actions/verify-release-schema-action from 0.4.1 to 0.5.0 @dependabot[bot] (#883) Chore: Bump lfreleng-actions/pinned-versions-action from 0.2.1 to 0.3.0 @dependabot[bot] (#880) Chore: Bump lfit/releng-reusable-workflows/.github/workflows/reuse-sonatype-lifecycle.yaml @dependabot[bot] (#884) Chore: Bump lfreleng-actions/maven-build-action from 0.3.1 to 0.4.1 @dependabot[bot] (#885) Chore: Bump github/codeql-action/init from 4.37.8 to 4.37.9 @dependabot[bot] (#886) Chore: Bump lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-scorecard.yaml from 0.10.1 to 0.10.3 @dependabot[bot] (#887) Chore: Bump github/codeql-action/upload-sarif from 4.37.8 to 4.37.9 @dependabot[bot] (#888) Chore: Bump lfreleng-actions/node-build-action from 0.2.2 to 0.2.3 @dependabot[bot] (#889) Chore: Bump lfit/releng-reusable-workflows/.github/workflows/compose-jjb-verify.yaml from 0.10.1 to 0.10.3 @dependabot[bot] (#890) Chore: Bump actions/setup-java from 5.7.0 to 6.0.0 @dependabot[bot] (#891) Chore: Bump lfit/releng-reusable-workflows/.github/workflows/compose-packer-verify.yaml from 0.10.1 to 0.10.3 @dependabot[bot] (#892) Chore: Bump lfit/releng-reusable-workflows/.github/workflows/gerrit-compose-required-tox-verify.yaml from 0.10.1 to 0.10.3 @dependabot[bot] (#893) Chore: Bump lfit/releng-reusable-workflows/.github/workflows/compose-repo-linting.yaml from 0.10.1 to 0.10.3 @dependabot[bot] (#894) Chore: pre-commit linting updates @pre-commit-ci[bot] (#895) Links Submit bugs/feature requests ## Commits fb90790 Merge pull request #895 from lfit/pre-commit-ci-update-config 2136659 Merge pull request #894 from lfit/dependabot/github_actions/lfit/releng-reusa fee4926 Merge pull request #893 from lfit/dependabot/github_actions/lfit/releng-reusa 74b5ad9 Merge pull request #892 from lfit/dependabot/github_actions/lfit/releng-reusa 198d360 Merge pull request #891 from lfit/dependabot/github_actions/actions/setup-jav ce21545 Merge pull request #890 from lfit/dependabot/github_actions/lfit/releng-reusa 337e904 Merge pull request #889 from lfit/dependabot/github_actions/lfreleng-actions/ e8ffe01 Merge pull request #888 from lfit/dependabot/github_actions/github/codeql-act a59812c Merge pull request #887 from lfit/dependabot/github_actions/lfit/releng-reusa 13135d9 Merge pull request #886 from lfit/dependabot/github_actions/github/codeql-act Additional commits viewable in compare view Issue-ID: CIMAN-33 Signed-off-by: dependabot[bot] <[email protected]> Change-Id: I019d5436bafc6e535e0d4712e1e89a2cbd631cf1 GitHub-PR: #34 GitHub-Hash: 01b38a8d569a3e7f Signed-off-by: onap.gh2gerrit <[email protected]>
|
Automated PR Closure This pull request has been automatically closed by GitHub2Gerrit. The corresponding Gerrit change has been accepted and merged ✅ The changes from this PR are now part of the main codebase in Gerrit. This is an automated action performed by the GitHub2Gerrit tool. |
Contributor
Author
|
This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests. To ignore these dependencies, configure ignore rules in dependabot.yml |
dependabot
Bot
deleted the
dependabot/github_actions/github-actions-updates-6ec5c19594
branch
October 17, 2026 20:14
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the github-actions-updates group with 6 updates in the / directory:
2.4.02.4.32.21.12.22.11.1.31.2.01.1.01.1.20.4.30.5.40.10.30.10.4Updates
lfreleng-actions/github2gerrit-action/.github/workflows/github2gerrit.yamlfrom 2.4.0 to 2.4.3Release notes
Sourced from lfreleng-actions/github2gerrit-action/.github/workflows/github2gerrit.yaml's releases.
Commits
f2ffe06Merge pull request #471 from modeseven-lfreleng-actions/fix/gitreview-indente...db4de35Fix: Accept indented keys in .gitreview91abfe7Test: Add expected-fail indented .gitreview cases1264059Merge pull request #470 from lfreleng-actions/pre-commit-ci-update-config8cb068cFix(deps): Bump mypy to 2.4.0 to match hook revee29402Chore: Pre-commit autoupdate63c3e61Merge pull request #469 from lfreleng-actions/dependabot/uv/hatchling-1.32.458005deMerge pull request #468 from lfreleng-actions/dependabot/uv/ruff-0.16.982674d4Merge pull request #467 from lfreleng-actions/dependabot/github_actions/lfrel...214b1f7Merge pull request #466 from lfreleng-actions/dependabot/github_actions/astra...Updates
step-security/harden-runnerfrom 2.21.1 to 2.22.1Release notes
Sourced from step-security/harden-runner's releases.
Commits
ccd8616Merge pull request #704 from h0x0er/jatin/ghes-endp037ccfdimplicitly add ghes endpoint in allowListe7438c7Merge pull request #703 from h0x0er/jatin/ghes-codebuild-fixesafb0b33fixes for armour rules not getting initialised351661cMerge pull request #701 from step-security/rc-441dc7f2eMerge pull request #702 from h0x0er/jatin/ghes-changes-upaf5ca38simplified ghes config creation9a6d710fix274c65eafixceac816resovled commentsUpdates
lfreleng-actions/gerrit-review-actionfrom 1.1.3 to 1.2.0Release notes
Sourced from lfreleng-actions/gerrit-review-action's releases.
Commits
d56b0b5Merge pull request #166 from modeseven-lfreleng-actions/feat/review-message50fac4bFeat: Accept a custom review messagec515972Merge pull request #164 from lfreleng-actions/dependabot/github_actions/lfrel...c5c0504Merge pull request #163 from lfreleng-actions/dependabot/github_actions/relea...e73219bChore: Bump lfreleng-actions/generic-workflows/.github/workflows/release.yamlbc5404fChore: Bump release-drafter/release-drafter from 7.7.0 to 7.9.084ec102Merge pull request #162 from lfreleng-actions/pre-commit-ci-update-configb5ec144Chore: pre-commit autoupdate3266f23Merge pull request #161 from lfreleng-actions/dependabot/github_actions/lfrel...d921d86Merge pull request #160 from lfreleng-actions/dependabot/github_actions/lfrel...Updates
lfreleng-actions/checkout-gerrit-change-actionfrom 1.1.0 to 1.1.2Release notes
Sourced from lfreleng-actions/checkout-gerrit-change-action's releases.
Commits
35e98c8Merge pull request #159 from modeseven-lfreleng-actions/fix/remove-dropped-su...17a443aFix: Remove submodules the Gerrit change dropsb9ec392Merge pull request #155 from modeseven-lfreleng-actions/fix/gerrit-submodule-...fb24d45Merge pull request #158 from lfreleng-actions/dependabot/github_actions/lfrel...be6bdeeMerge pull request #157 from lfreleng-actions/dependabot/github_actions/lfrel...f3ebb3dChore: Bump lfreleng-actions/generic-workflows/.github/workflows/release.yaml6ffaa81Chore: Bump lfreleng-actions/harden-runner-block-action6a6a169Fix: Make submodules follow the Gerrit change3f0dcf1Merge pull request #154 from modeseven-lfreleng-actions/docs/agents-stubc734553Docs: Add repository AGENTS.md stubUpdates
lfreleng-actions/maven-build-actionfrom 0.4.3 to 0.5.4Release notes
Sourced from lfreleng-actions/maven-build-action's releases.
... (truncated)
Commits
840adccMerge pull request #171 from modeseven-lfreleng-actions/fix/private-step-vari...f9a212fFix: Keep step variables out of Maven0f09f80Merge pull request #170 from modeseven-lfreleng-actions/fix/deploy-repository...8313120Fix: Warn on a deploy repository naming m2repo22b5900Merge pull request #168 from lfreleng-actions/pre-commit-ci-update-config3edfab7Chore: Pre-commit autoupdate01a3700Merge pull request #167 from modeseven-lfreleng-actions/fix/maven-probe-setti...126a854Fix: Restore the Maven probe and settings cleanup48dded1Merge pull request #166 from modeseven-lfreleng-actions/fix/drop-setup-maven-...eb91fe5Fix: Build on the requested JDK distributionUpdates
lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-scorecard.yamlfrom 0.10.3 to 0.10.4Release notes
Sourced from lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-scorecard.yaml's releases.
Commits
fb90790Merge pull request #895 from lfit/pre-commit-ci-update-config2136659Merge pull request #894 from lfit/dependabot/github_actions/lfit/releng-reusa...fee4926Merge pull request #893 from lfit/dependabot/github_actions/lfit/releng-reusa...74b5ad9Merge pull request #892 from lfit/dependabot/github_actions/lfit/releng-reusa...198d360Merge pull request #891 from lfit/dependabot/github_actions/actions/setup-jav...ce21545Merge pull request #890 from lfit/dependabot/github_actions/lfit/releng-reusa...337e904Merge pull request #889 from lfit/dependabot/github_actions/lfreleng-actions/...e8ffe01Merge pull request #888 from lfit/dependabot/github_actions/github/codeql-act...a59812cMerge pull request #887 from lfit/dependabot/github_actions/lfit/releng-reusa...13135d9Merge pull request #886 from lfit/dependabot/github_actions/github/codeql-act...Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions