Repository navigation
build(deps): bump schubergphilis/mcvs-general-action from 0.7.1 to 0.7.2 in the github-actions-all group - #59
Conversation
Bumps the github-actions-all group with 1 update: [schubergphilis/mcvs-general-action](https://github.com/schubergphilis/mcvs-general-action). Updates `schubergphilis/mcvs-general-action` from 0.7.1 to 0.7.2 - [Release notes](https://github.com/schubergphilis/mcvs-general-action/releases) - [Commits](schubergphilis/mcvs-general-action@c367827...5a7badc) --- updated-dependencies: - dependency-name: schubergphilis/mcvs-general-action dependency-version: 0.7.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-all ... Signed-off-by: dependabot[bot] <support@github.com>
sbp-bvanb
left a comment
There was a problem hiding this comment.
🤖 pr-reviewer report
Branch: dependabot/github_actions/github-actions-all-e46aef1ddd → main | Head: 30788f8 | Commits: 1 | Files: 1
Verdict: ❌ Changes requested
Dependabot bumps schubergphilis/mcvs-general-action from v0.7.1 to v0.7.2 in .github/workflows/general.yml. The new SHA 5a7badc matches the v0.7.2 tag.
Blocking
- [git] PR title —
build(deps): bump schubergphilis/mcvs-general-action from 0.7.1 to 0.7.2 in the github-actions-all groupis 104 characters (limit 72) and uses typebuild, which is not in the allowed listfeat|fix|docs|style|refactor|test|chore|ci. The squash merge turns this title into the commit onmain. Before merging, change the title to something likechore(deps): bump mcvs-general-action to v0.7.2. - [git] Commit
30788f8— the subjectbuild(deps): bump schubergphilis/mcvs-general-actionuses the non-allowed typebuild. A squash merge with the corrected title replaces this subject. To stop this coming back, addcommit-message: {prefix: chore, include: scope}to each entry in.github/dependabot.yml. Dependabot copiesbuild(deps)from earlier commits in the repo history (e.g. #41, #42, #43, #51).
Checks
- Git: fail (title length and commit type; branch is not
main; description gives the reason and the release notes) - Correctness: pass (pinned SHA matches tag v0.7.2; patch bump, inputs unchanged)
- Security: pass (action stays pinned to a full commit SHA)
- Maintainability: pass
- Over-engineering: pass
- N/A: Terraform, Chef, Docker, Claude plugins
🤖 doc-reviewer report
Branch: dependabot/github_actions/github-actions-all-e46aef1ddd → main | Head: 30788f8 | Docs: 0
Verdict: ❌ Changes requested
The PR only bumps a workflow action, but the existing README has no ## Quickstart and holds reference, usage notes and migration material, and there is no docs/ directory for them.
Blocking
- [quickstart]
README.md:10: there is no## Quickstartsection. The concrete steps are under## Usage. Rename it to## Quickstartand keep only the workflow snippet (lines 12-30). - [lean]
README.md:34: the inputs/options reference table does not belong in the README. Move it todocs/configuration.mdand link it. - [lean]
README.md:49: the usage notes (token handling,.python-version, tool dependencies) do not belong in the README. Move them todocs/configuration.mdand link it. - [lean]
README.md:60: the uv workspace example section does not belong in the README. Move it todocs/uv-workspace.md(ordocs/configuration.md) and link it. - [lean]
README.md:72: the Migrating to v0.3.0 section does not belong in the README. Move it todocs/migrating.mdand link it.
Checks
- README: pass
- Quickstart: fail (no
## Quickstartsection) - Lean: fail (4 sections)
- docs/ linked: pass (0 pages)
- Links: pass (2 checked)
🤖 dependency-reviewer report
Branch: dependabot/github_actions/github-actions-all-e46aef1ddd → main | Head: 30788f8 | Dependencies: 2
Verdict:
The bump to mcvs-general-action v0.7.2 is already behind v0.7.3; actions/checkout is current.
Should fix
- [outdated]
.github/workflows/general.yml:20—schubergphilis/mcvs-general-action@v0.7.2, latestv0.7.3. Bump toschubergphilis/mcvs-general-action@9705f65655a1848a02c368b91d14185b065ebdb5 # v0.7.3.
Checks
- Up to date: 1
- Outdated: 1
🤖 github-actions-reviewer report
Branch: dependabot/github_actions/github-actions-all-e46aef1ddd → main | Head: 30788f8 | Actions: 2
Verdict: ✅ Approved
Bumps schubergphilis/mcvs-general-action from v0.7.1 to v0.7.2 in .github/workflows/general.yml.
Checks
- Pinning: pass
- Version comments: pass (2 verified)
Generated by mcvs_review 3.1.0 (pr-reviewer, doc-reviewer, dependency-reviewer, github-actions-reviewer) at commit 30788f8.
| - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 | ||
| # yamllint disable-line rule:line-length | ||
| - uses: schubergphilis/mcvs-general-action@c367827038743325c7f56a9490b5e3df59060986 # v0.7.1 | ||
| - uses: schubergphilis/mcvs-general-action@5a7badc4df54a0f496bcaa033a840fbd22a1cf00 # v0.7.2 |
There was a problem hiding this comment.
Should fix (dependency-reviewer) — .github/workflows/general.yml:20 — schubergphilis/mcvs-general-action@v0.7.2, latest v0.7.3. Bump to schubergphilis/mcvs-general-action@9705f65655a1848a02c368b91d14185b065ebdb5 # v0.7.3.
|
Looks like schubergphilis/mcvs-general-action is updatable in another way, so this is no longer needed. |
Bumps the github-actions-all group with 1 update: schubergphilis/mcvs-general-action.
Updates
schubergphilis/mcvs-general-actionfrom 0.7.1 to 0.7.2Release notes
Sourced from schubergphilis/mcvs-general-action's releases.
Commits
5a7badcci: cancel outdated PR runs and cap job duration (#65)ea2d3ebbuild(deps-dev): bump the github-actions-all group (#64)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions