ci(deps): bump complytime/org-infra/.github/workflows/reusable_ci.yml from 0.3.1 to 0.4.0 by dependabot[bot] · Pull Request #146 · complytime/.github

dependabot · 2026-06-17T07:43:14Z

Bumps complytime/org-infra/.github/workflows/reusable_ci.yml from 0.3.1 to 0.4.0.

Release notes

Sourced from complytime/org-infra/.github/workflows/reusable_ci.yml's releases.

v0.4.0

org-infra 0.4.0

Central reusable GitHub Actions workflows, CI templates, compliance policy assets, and org sync tooling. Downstream repos usually consume this repo via workflow uses: pins or version tags.

Before you upgrade

Treat workflow YAML updates as potentially breaking for every consumer until you’ve reviewed them.

Use the Workflows & GitHub Actions section below for PRs that touched pipelines; for exact paths and hunks, open the compare link and narrow Files changed to .github/workflows/.

View full diff: v0.3.1 → v0.4.0

Changes

chore: add user story issue template — #322 · @beatrizmcouto

feat: add task issue template — #321 · @beatrizmcouto

ci: add PR-triggered auto-labeler workflow — #320 · @sonupreetam

fix(ci): replace cosign copy with crane copy + fresh signing (#323) — #327 · @trevor-vaughan

fix(ci): fetch live PR title for commitlint validation — #330 · @marcusburghardt

chore: add CODEOWNERS file — #333 · @marcusburghardt

fix(ci): align compliance workflow with new complyctl config path — #332 · @marcusburghardt

feat(ci): add complypack publish pipeline for ampel branch-protection policies — #314 · @marcusburghardt

fix(ci): disable SHA tags on complypack Quay promotion — #338 · @marcusburghardt

fix: add id-token permission to promote-quay job — #339 · @marcusburghardt

fix(ci): remove BuildKit provenance that causes "unknown on unknown" in Quay — #336 · @trevor-vaughan

chore(ci): remove TEMPORARY manual staging of ampel policies — #334 · @sonupreetam

Maintenance

ci(deps): bump complytime/org-infra/.github/workflows/reusable_security.yml from 0.3.0 to 0.3.1 — #326 · @dependabot[bot]

chore(deps): bump ruff from 0.15.15 to 0.15.16 — #325 · @dependabot[bot]

chore(deps): bump https://github.com/astral-sh/ruff-pre-commit from v0.15.15 to 0.15.16 — #324 · @dependabot[bot]

ci(deps): bump SonarSource/sonarqube-scan-action from 8.1.0 to 8.2.0 — #329 · @dependabot[bot]

chore(deps): bump https://github.com/astral-sh/ruff-pre-commit from v0.15.16 to 0.15.17 — #345 · @dependabot[bot]

chore(deps): bump ruff from 0.15.16 to 0.15.17 — #344 · @dependabot[bot]

chore(deps): bump pytest from 9.0.3 to 9.1.0 — #343 · @dependabot[bot]

ci(deps): bump release-drafter/release-drafter from 7.3.1 to 7.4.0 — #346 · @dependabot[bot]

Compare: v0.3.1…v0.4.0

Thanks to @beatrizmcouto, @marcusburghardt, @sonupreetam, @trevor-vaughan and dependabot[bot] for this release.

Commits

bbd7194 ci(deps): bump release-drafter/release-drafter from 7.3.1 to 7.4.0
e30c5cd chore(deps): bump pytest from 9.0.3 to 9.1.0 (#343)
29fa2ac chore(deps): bump ruff from 0.15.16 to 0.15.17 (#344)
8b5208c chore(deps): bump https://github.com/astral-sh/ruff-pre-commit (#345)
71c46a3 chore(ci): remove TEMPORARY manual staging of ampel policies (#334)
6d4b387 fix(ci): remove BuildKit provenance that causes "unknown on unknown" in Quay ...
c1bc2a2 fix: add id-token permission to promote-quay job
3fee7cb fix(ci): disable SHA tags on complypack Quay promotion
b72a180 fix(ci): update ci_test_publish_quay.yml refs for renamed workflow
12eab40 feat(ci): add latest tag to complypack publish pipeline
Additional commits viewable in compare view

github-actions · 2026-06-17T07:43:44Z

🤖 Standardized Dependabot Review Summary 🤖

This PR was processed by the organization's reusable CI pipeline.

Criterion	Status	Detail
Dependencies Review	success	View logs
Calculated Risk	medium	`complytime/org-infra/.github/workflows/reusable_ci.yml` v0.4.0
Release Age	15h	Released 15 hours ago
Dependency Usage	unavailable	Informational only — does not affect approval

Auto-approval: ⏳ Manual review required

Maintainer check list:

Ensure the PR passed all CI tests (required status checks).
Investigate failures for Major updates or any manual review requirement.
Don't overlook breaking changes and changelog information.
If the scorecard value is low, consider to contribute to make it higher. Everybody wins!
Be diligent. When in doubt, ask another maintainer for additional review.

github-actions · 2026-06-17T07:43:44Z

CRAP Load Analysis

No Go code changes detected in this PR. No CRAP impact.

github-actions · 2026-06-19T08:50:44Z

🤖 Standardized Dependabot Review Summary 🤖

This PR was processed by the organization's reusable CI pipeline.

Criterion	Status	Detail
Dependencies Review	success	View logs
Calculated Risk	medium	`complytime/org-infra/.github/workflows/reusable_ci.yml` v0.4.0
Release Age	64h	Released 64 hours ago
Dependency Usage	1 repos	Informational only — does not affect approval

Auto-approval: ✅ Approved

Maintainer check list:

Ensure the PR passed all CI tests (required status checks).
Investigate failures for Major updates or any manual review requirement.
Don't overlook breaking changes and changelog information.
If the scorecard value is low, consider to contribute to make it higher. Everybody wins!
Be diligent. When in doubt, ask another maintainer for additional review.

github-actions

Automatically approved: risk=medium, review=success, release_age=64h.

marcusburghardt

LGTM

Bumps [complytime/org-infra/.github/workflows/reusable_ci.yml](https://github.com/complytime/org-infra) from 0.3.1 to 0.4.0. - [Release notes](https://github.com/complytime/org-infra/releases) - [Commits](complytime/org-infra@2c19341...bbd7194) --- updated-dependencies: - dependency-name: complytime/org-infra/.github/workflows/reusable_ci.yml dependency-version: 0.4.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-06-19T08:53:25Z

🤖 Standardized Dependabot Review Summary 🤖

This PR was processed by the organization's reusable CI pipeline.

Criterion	Status	Detail
Dependencies Review	success	View logs
Calculated Risk	medium	`complytime/org-infra/.github/workflows/reusable_ci.yml` v0.4.0
Release Age	64h	Released 64 hours ago
Dependency Usage	unavailable	Informational only — does not affect approval

Auto-approval: ✅ Approved

Maintainer check list:

Ensure the PR passed all CI tests (required status checks).
Investigate failures for Major updates or any manual review requirement.
Don't overlook breaking changes and changelog information.
If the scorecard value is low, consider to contribute to make it higher. Everybody wins!
Be diligent. When in doubt, ask another maintainer for additional review.

github-actions

Automatically approved: risk=medium, review=success, release_age=64h.

github-actions · 2026-06-19T08:53:30Z

🤖 Standardized Dependabot Review Summary 🤖

This PR was processed by the organization's reusable CI pipeline.

Criterion	Status	Detail
Dependencies Review	success	View logs
Calculated Risk	medium	`complytime/org-infra/.github/workflows/reusable_ci.yml` v0.4.0
Release Age	64h	Released 64 hours ago
Dependency Usage	unavailable	Informational only — does not affect approval

Auto-approval: ✅ Approved

Maintainer check list:

Ensure the PR passed all CI tests (required status checks).
Investigate failures for Major updates or any manual review requirement.
Don't overlook breaking changes and changelog information.
If the scorecard value is low, consider to contribute to make it higher. Everybody wins!
Be diligent. When in doubt, ask another maintainer for additional review.

github-actions

Automatically approved: risk=medium, review=success, release_age=64h.

github-actions

Automatically approved: risk=medium, review=success, release_age=64h.

github-actions · 2026-06-19T08:53:56Z

🤖 Standardized Dependabot Review Summary 🤖

This PR was processed by the organization's reusable CI pipeline.

Criterion	Status	Detail
Dependencies Review	success	View logs
Calculated Risk	medium	`complytime/org-infra/.github/workflows/reusable_ci.yml` v0.4.0
Release Age	64h	Released 64 hours ago
Dependency Usage	1 repos	Informational only — does not affect approval

Auto-approval: ✅ Approved

Maintainer check list:

Ensure the PR passed all CI tests (required status checks).
Investigate failures for Major updates or any manual review requirement.
Don't overlook breaking changes and changelog information.
If the scorecard value is low, consider to contribute to make it higher. Everybody wins!
Be diligent. When in doubt, ask another maintainer for additional review.

dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jun 17, 2026

dependabot Bot requested a review from jflowers as a code owner June 17, 2026 07:43

dependabot Bot added the dependencies Pull requests that update a dependency file label Jun 17, 2026

dependabot Bot requested review from jpower432 and marcusburghardt as code owners June 17, 2026 07:43

dependabot Bot added the github_actions Pull requests that update GitHub Actions code label Jun 17, 2026

dependabot Bot force-pushed the dependabot/github_actions/complytime/org-infra/dot-github/workflows/reusable_ci.yml-0.4.0 branch from c4a4e3d to 914d888 Compare June 19, 2026 08:50

github-actions Bot approved these changes Jun 19, 2026

View reviewed changes

marcusburghardt approved these changes Jun 19, 2026

View reviewed changes

marcusburghardt enabled auto-merge (rebase) June 19, 2026 08:50

dependabot Bot force-pushed the dependabot/github_actions/complytime/org-infra/dot-github/workflows/reusable_ci.yml-0.4.0 branch from 914d888 to 43f849a Compare June 19, 2026 08:51

dependabot Bot force-pushed the dependabot/github_actions/complytime/org-infra/dot-github/workflows/reusable_ci.yml-0.4.0 branch from 43f849a to 8717365 Compare June 19, 2026 08:53

github-actions Bot approved these changes Jun 19, 2026

View reviewed changes

marcusburghardt merged commit df8b94b into main Jun 19, 2026
13 checks passed

marcusburghardt deleted the dependabot/github_actions/complytime/org-infra/dot-github/workflows/reusable_ci.yml-0.4.0 branch June 19, 2026 08:54

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

ci(deps): bump complytime/org-infra/.github/workflows/reusable_ci.yml from 0.3.1 to 0.4.0#146

ci(deps): bump complytime/org-infra/.github/workflows/reusable_ci.yml from 0.3.1 to 0.4.0#146
marcusburghardt merged 1 commit into
mainfrom
dependabot/github_actions/complytime/org-infra/dot-github/workflows/reusable_ci.yml-0.4.0

dependabot Bot commented on behalf of github Jun 17, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Jun 17, 2026

Uh oh!

github-actions Bot commented Jun 17, 2026

Uh oh!

github-actions Bot commented Jun 19, 2026

Uh oh!

github-actions Bot left a comment

Uh oh!

marcusburghardt left a comment

Uh oh!

github-actions Bot commented Jun 19, 2026

Uh oh!

github-actions Bot left a comment

Uh oh!

github-actions Bot commented Jun 19, 2026

Uh oh!

github-actions Bot left a comment

Uh oh!

github-actions Bot left a comment

Uh oh!

github-actions Bot commented Jun 19, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Jun 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v0.4.0

org-infra 0.4.0

Before you upgrade

Changes

Maintenance

Uh oh!

github-actions Bot commented Jun 17, 2026

Uh oh!

github-actions Bot commented Jun 17, 2026

CRAP Load Analysis

Uh oh!

github-actions Bot commented Jun 19, 2026

Uh oh!

github-actions Bot left a comment

Choose a reason for hiding this comment

Uh oh!

marcusburghardt left a comment

Choose a reason for hiding this comment

Uh oh!

github-actions Bot commented Jun 19, 2026

Uh oh!

github-actions Bot left a comment

Choose a reason for hiding this comment

Uh oh!

github-actions Bot commented Jun 19, 2026

Uh oh!

github-actions Bot left a comment

Choose a reason for hiding this comment

Uh oh!

github-actions Bot left a comment

Choose a reason for hiding this comment

Uh oh!

github-actions Bot commented Jun 19, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Jun 17, 2026 •

edited

Loading