Skip to content

ci: bump the actions group with 3 updates - #43

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions-2e16441d5f
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions-2e16441d5f

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 10, 2026

Copy link
Copy Markdown
Contributor

Bumps the actions group with 3 updates: getplumber/plumber, mikepenz/release-changelog-builder-action and softprops/action-gh-release.

Updates getplumber/plumber from 0.7.17 to 0.7.23

Release notes

Sourced from getplumber/plumber's releases.

v0.7.23

0.7.23 (2026-11-07)

✨ Features

  • platform: the banner names the snapshot lanes carried from an earlier pass (fa02563)

✅ Tests

  • platform: the carried-lanes order test feeds the lanes out of order (a521840)
  • platform: the carried-lanes test puts the oldest pass on the last lane (ae251b7)

v0.7.22

0.7.22 (2026-11-06)

🐛 Bug Fixes

  • platform: a merge request from a fork reports its configuration unavailable instead of invalid (8a10aea)

📚 Documentation

  • readme: drop the signing subsection and the scoring sentence (01466e1)

✅ Tests

  • cmd: the fork reason joins the resolution through one tested function (17aa1b4)

v0.7.21

0.7.21 (2026-11-05)

🐛 Bug Fixes

  • platform: a merged results pipeline resolves its configuration at the source branch head (1a8ee58)

v0.7.20

0.7.20 (2026-11-05)

🐛 Bug Fixes

  • platform: an INVALID merge from the resolve endpoint reports the git host's own errors (3beb903)

v0.7.19

0.7.19 (2026-11-05)

... (truncated)

Changelog

Sourced from getplumber/plumber's changelog.

0.7.23 (2026-11-07)

✨ Features

  • platform: the banner names the snapshot lanes carried from an earlier pass (fa02563)

✅ Tests

  • platform: the carried-lanes order test feeds the lanes out of order (a521840)
  • platform: the carried-lanes test puts the oldest pass on the last lane (ae251b7)

0.7.22 (2026-11-06)

🐛 Bug Fixes

  • platform: a merge request from a fork reports its configuration unavailable instead of invalid (8a10aea)

📚 Documentation

  • readme: drop the signing subsection and the scoring sentence (01466e1)

✅ Tests

  • cmd: the fork reason joins the resolution through one tested function (17aa1b4)

0.7.21 (2026-11-05)

🐛 Bug Fixes

  • platform: a merged results pipeline resolves its configuration at the source branch head (1a8ee58)

0.7.20 (2026-11-05)

🐛 Bug Fixes

  • platform: an INVALID merge from the resolve endpoint reports the git host's own errors (3beb903)

0.7.19 (2026-11-05)

🐛 Bug Fixes

  • github: a composite step a literal input turns off is not analyzed (eab2f54), closes #591

... (truncated)

Commits
  • ec8cb3a chore(release): 0.7.23 [skip ci]
  • a521840 test(platform): the carried-lanes order test feeds the lanes out of order
  • ae251b7 test(platform): the carried-lanes test puts the oldest pass on the last lane
  • fa02563 feat(platform): the banner names the snapshot lanes carried from an earlier pass
  • 6194d20 chore(release): 0.7.22 [skip ci]
  • 17aa1b4 test(cmd): the fork reason joins the resolution through one tested function
  • 8a10aea fix(platform): a merge request from a fork reports its configuration unavaila...
  • 01466e1 docs(readme): drop the signing subsection and the scoring sentence
  • e0a3bc0 chore(release): 0.7.21 [skip ci]
  • 1a8ee58 fix(platform): a merged results pipeline resolves its configuration at the so...
  • Additional commits viewable in compare view

Updates mikepenz/release-changelog-builder-action from 6.4.0 to 6.5.0

Release notes

Sourced from mikepenz/release-changelog-builder-action's releases.

v6.5.0

📦 Dependencies

  • chore(deps): update mikepenz/release-changelog-builder-action action to v6.4.0
  • chore(deps): update dependency undici to v8.11.2
  • chore(deps): update dependency nanoid to v6.0.2
  • chore(deps): update mikepenz/action-junit-report action to v6.6.0
  • chore(deps): update node devdependency non-major updates
  • chore(deps): update mikepenz/action-junit-report action to v6.6.1
  • chore(deps-dev): bump vite from 8.2.1 to 8.3.4 in the npm_and_yarn group across 1 directory
  • chore(deps): update dependency undici to v8.12.2 [security]
  • chore(deps): bump @​vitest/mocker from 4.1.11 to 4.1.12 in the npm_and_yarn group across 1 directory

Contributors:

Commits
  • b0db9d1 Merge pull request #1691 from mikepenz/develop
  • 3263a93 Merge pull request #1685 from mikepenz/dependabot/npm_and_yarn/npm_and_yarn-4...
  • 749722a chore(deps): bump @​vitest/mocker
  • eb419df Merge pull request #1688 from sarankumar1325/fix/single-tag-predecessor
  • 7607688 fix: keep failing when no tag precedes the matched oldest tag
  • 6ffac6f chore: rebuild dist after rebase on develop
  • 08c1bd5 fix: unify predecessor tag lookup, honor ignorePreReleases, cover edge cases
  • 78b2014 fix: use the only existing tag as predecessor for a newer release
  • d968f92 Merge pull request #1689 from mikepenz/fix/transformer-tag-sort-order
  • d87bce5 fix: keep sorted tag order when a tag transformer is configured
  • Additional commits viewable in compare view

Updates softprops/action-gh-release from 3.0.3 to 3.0.4

Release notes

Sourced from softprops/action-gh-release's releases.

v3.0.4

  • maintenance release with updated dependencies
Changelog

Sourced from softprops/action-gh-release's changelog.

3.0.4

  • maintenance release with updated dependencies

3.0.3

3.0.3 is a maintenance release with updated dependencies. It also safely classifies malformed GitHub API errors to avoid secondary failures (#822).

What's Changed

Bug fixes 🐛

Other Changes 🔄

  • dependency updates

3.0.2

3.0.2 is a patch release focused on release reliability and compatibility. It reuses existing draft releases when publishing prereleases, supports replacing release assets on Gitea, hardens streamed asset uploads, and provides clearer release-creation diagnostics. It also includes TypeScript, coverage, and tooling maintenance merged since 3.0.1.

This release fixes #795, #438, and #803. The upload transport hardening covers the historical failure reported in #790, although current hosted Node 24 runners did not reproduce it naturally. The diagnostics work is related to #786 and does not claim a reproducible release-creation fix.

What's Changed

Exciting New Features 🎉

Bug fixes 🐛

Other Changes 🔄

... (truncated)

Commits
  • 8a0cd65 release 3.0.4 (#865)
  • ac01154 chore(deps): bump the npm group across 1 directory with 4 updates (#864)
  • ca4c9d5 chore(deps): bump minimatch and glob (#862)
  • e4a57ae chore(deps): bump undici from 6.29.0 to 6.29.1 (#859)
  • ee55a0e chore(deps): bump vite from 8.3.2 to 8.3.5 (#855)
  • 8d42b22 chore(deps): bump actions/setup-node (#853)
  • 6680cc0 chore(deps): bump the npm group with 3 updates (#851)
  • 4a050ba chore(deps): bump source-map-js from 1.2.1 to 1.2.2 (#850)
  • b5a645e chore(deps): bump the npm group with 4 updates (#848)
  • d99a5de chore(deps): bump brace-expansion from 5.0.9 to 5.0.12 (#846)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the actions group with 3 updates: [getplumber/plumber](https://github.com/getplumber/plumber), [mikepenz/release-changelog-builder-action](https://github.com/mikepenz/release-changelog-builder-action) and [softprops/action-gh-release](https://github.com/softprops/action-gh-release).


Updates `getplumber/plumber` from 0.7.17 to 0.7.23
- [Release notes](https://github.com/getplumber/plumber/releases)
- [Changelog](https://github.com/getplumber/plumber/blob/main/CHANGELOG.md)
- [Commits](getplumber/plumber@2342834...ec8cb3a)

Updates `mikepenz/release-changelog-builder-action` from 6.4.0 to 6.5.0
- [Release notes](https://github.com/mikepenz/release-changelog-builder-action/releases)
- [Commits](mikepenz/release-changelog-builder-action@aa01373...b0db9d1)

Updates `softprops/action-gh-release` from 3.0.3 to 3.0.4
- [Release notes](https://github.com/softprops/action-gh-release/releases)
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md)
- [Commits](softprops/action-gh-release@efb3536...8a0cd65)

---
updated-dependencies:
- dependency-name: getplumber/plumber
  dependency-version: 0.7.23
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: mikepenz/release-changelog-builder-action
  dependency-version: 6.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: softprops/action-gh-release
  dependency-version: 3.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Nov 10, 2026
@coderabbitai

coderabbitai Bot commented Nov 10, 2026

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: Organization UI
  • Review profile: ASSERTIVE
  • Plan: Advanced
  • Run ID: 073a67e2-ab3b-473b-b2de-f6f34e47b2ab

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants