Repository navigation
chore(deps): bump the actions group across 1 directory with 2 updates - #498
dependabot[bot] wants to merge 1 commit into
Conversation
dependabot
Bot
added
dependencies
|
Important Review skippedBot user detected. To trigger a single review, invoke the
 |
Codex Review Summary: ✅ CompletedThis comment shows the latest Codex review activity on this pull request.
ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings. |
![chatgpt-codex-connector[bot]](https://avatars.githubusercontent.com/in/1144995?s=60&v=4){kind=small}
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 9606b34569
ℹ️ About Codex in GitHub
Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".
| - 'hyperpolymath/proven-cicd@a12b2b4644db1a1250bc50b58fd24c99f89f564e' | ||
| '.github/workflows/security-scan.yml': | ||
| - 'hyperpolymath/panic-attack@55ffcc9a240e937edd968487af15ab45c6f0522f' | ||
| '.github/workflows/security-scan.yml': [] |
There was a problem hiding this comment.
When the Security Scan runs on a push, schedule, or manual dispatch, .github/workflows/security-scan.yml:27 still invokes the panic-attack reusable workflow, but this change marks that workflow as having no dependencies and removes both its dependency record and its transitive actions. This drops the repository's lock coverage for the security workflow; regenerate the lock only when the canonical updater resolves 681898c9f762a2b7d8f57d55713c74208ee104a6 and records the reusable workflow rather than accepting an empty entry.
Useful? React with 👍 / 👎.
9606b34 to
c92e47a
Compare
Bumps the actions group with 2 updates in the / directory: [taiki-e/install-action](https://github.com/taiki-e/install-action) and [hyperpolymath/panic-attack/.github/workflows/scan-and-report.yml](https://github.com/hyperpolymath/panic-attack). Updates `taiki-e/install-action` from 2.87.32 to 2.90.2 - [Release notes](https://github.com/taiki-e/install-action/releases) - [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md) - [Commits](taiki-e/install-action@v2.87.32...v2.90.2) Updates `hyperpolymath/panic-attack/.github/workflows/scan-and-report.yml` from 55ffcc9a240e937edd968487af15ab45c6f0522f to 15868fee549383c063a4efcf8eaaa75616189943 - [Release notes](https://github.com/hyperpolymath/panic-attack/releases) - [Changelog](https://github.com/hyperpolymath/panic-attack/blob/main/CHANGELOG.adoc) - [Commits](hyperpolymath/panic-attack@55ffcc9...15868fe) --- updated-dependencies: - dependency-name: hyperpolymath/panic-attack/.github/workflows/scan-and-report.yml dependency-version: 681898c9f762a2b7d8f57d55713c74208ee104a6 dependency-type: direct:production dependency-group: actions - dependency-name: taiki-e/install-action dependency-version: 2.90.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions ... Signed-off-by: dependabot[bot] <support@github.com>
c92e47a to
83aa12d
Compare
|
Bumps the actions group with 2 updates in the / directory: taiki-e/install-action and hyperpolymath/panic-attack/.github/workflows/scan-and-report.yml.
Updates
taiki-e/install-actionfrom 2.87.32 to 2.90.2Release notes
Sourced from taiki-e/install-action's releases.
... (truncated)
Changelog
Sourced from taiki-e/install-action's changelog.
... (truncated)
Commits
3a3daafRelease 2.90.29002010Update yq manifestb15e87aUpdate vacuum manifest35247b9Updatetrivy@latestto 0.76.2851a180Updatetombi@latestto 1.10.06aa2ee9Update syft manifesteeedd0cUpdate rclone manifesta96a6aaUpdate protoc-gen-connect-openapi manifestca1644aUpdateprek@latestto 0.5.106ba2993Updatemise@latestto 2026.11.2Updates
hyperpolymath/panic-attack/.github/workflows/scan-and-report.ymlfrom 55ffcc9a240e937edd968487af15ab45c6f0522f to 15868fee549383c063a4efcf8eaaa75616189943Changelog
Sourced from hyperpolymath/panic-attack/.github/workflows/scan-and-report.yml's changelog.
... (truncated)
Commits
15868fedocs(ci): point lock recovery at proven-cicd-and-workflows (#289)681898cfeat(assail): route languages through a tested table; retire the vacuous PA1 ...