Repository navigation
chore(deps): bump the actions group across 1 directory with 2 updates - #498
dependabot[bot] wants to merge 1 commit into
Conversation
|
Important Review skippedBot user detected. To trigger a single review, invoke the
|
Codex Review Summary: ✅ CompletedThis comment shows the latest Codex review activity on this pull request.
ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings. |
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 9606b34569
ℹ️ About Codex in GitHub
Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".
| - 'hyperpolymath/proven-cicd@a12b2b4644db1a1250bc50b58fd24c99f89f564e' | ||
| '.github/workflows/security-scan.yml': | ||
| - 'hyperpolymath/panic-attack@55ffcc9a240e937edd968487af15ab45c6f0522f' | ||
| '.github/workflows/security-scan.yml': [] |
There was a problem hiding this comment.
Keep the bumped reusable workflow in actions.lock
When the Security Scan runs on a push, schedule, or manual dispatch, .github/workflows/security-scan.yml:27 still invokes the panic-attack reusable workflow, but this change marks that workflow as having no dependencies and removes both its dependency record and its transitive actions. This drops the repository's lock coverage for the security workflow; regenerate the lock only when the canonical updater resolves 681898c9f762a2b7d8f57d55713c74208ee104a6 and records the reusable workflow rather than accepting an empty entry.
Useful? React with 👍 / 👎.
c92e47a to
83aa12d
Compare
Bumps the actions group with 2 updates in the / directory: [taiki-e/install-action](https://github.com/taiki-e/install-action) and [hyperpolymath/panic-attack/.github/workflows/scan-and-report.yml](https://github.com/hyperpolymath/panic-attack). Updates `taiki-e/install-action` from 2.87.32 to 2.90.3 - [Release notes](https://github.com/taiki-e/install-action/releases) - [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md) - [Commits](taiki-e/install-action@v2.87.32...v2.90.3) Updates `hyperpolymath/panic-attack/.github/workflows/scan-and-report.yml` from 55ffcc9a240e937edd968487af15ab45c6f0522f to 0ebbc93a5bd298cf82ccf95b3897cfe9bf86092e - [Release notes](https://github.com/hyperpolymath/panic-attack/releases) - [Changelog](https://github.com/hyperpolymath/panic-attack/blob/main/CHANGELOG.adoc) - [Commits](hyperpolymath/panic-attack@55ffcc9...0ebbc93) --- updated-dependencies: - dependency-name: hyperpolymath/panic-attack/.github/workflows/scan-and-report.yml dependency-version: 681898c9f762a2b7d8f57d55713c74208ee104a6 dependency-type: direct:production dependency-group: actions - dependency-name: taiki-e/install-action dependency-version: 2.90.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions ... Signed-off-by: dependabot[bot] <support@github.com>
83aa12d to
902b1fe
Compare
|



Bumps the actions group with 2 updates in the / directory: taiki-e/install-action and hyperpolymath/panic-attack/.github/workflows/scan-and-report.yml.
Updates
taiki-e/install-actionfrom 2.87.32 to 2.90.3Release notes
Sourced from taiki-e/install-action's releases.
... (truncated)
Changelog
Sourced from taiki-e/install-action's changelog.
... (truncated)
Commits
cfdb7edRelease 2.90.30a71219Updateyq@latestto 4.54.24072c98Updatevacuum@latestto 0.39.3d429e9bUpdatesyft@latestto 1.57.024c2628Updaterclone@latestto 1.76.0ab9bbc8Updateprotoc-gen-connect-openapi@latestto 0.30.04bff33fUpdatemise@latestto 2026.11.3cdf8dc3Updatekingfisher@latestto 2.17.0b8b14a4Updatebiome@latestto 2.6.63a3daafRelease 2.90.2Updates
hyperpolymath/panic-attack/.github/workflows/scan-and-report.ymlfrom 55ffcc9a240e937edd968487af15ab45c6f0522f to 0ebbc93a5bd298cf82ccf95b3897cfe9bf86092eChangelog
Sourced from hyperpolymath/panic-attack/.github/workflows/scan-and-report.yml's changelog.
... (truncated)
Commits
0ebbc93docs(clade): uuid follows the GitHub path, it is not immortal (#290)15868fedocs(ci): point lock recovery at proven-cicd-and-workflows (#289)681898cfeat(assail): route languages through a tested table; retire the vacuous PA1 ...