Skip to content

ci: bump the github-actions group with 4 updates#7

Merged
matcra587 merged 3 commits into
mainfrom
dependabot/github_actions/github-actions-3cbf1e2ad0
May 7, 2026
Merged

ci: bump the github-actions group with 4 updates#7
matcra587 merged 3 commits into
mainfrom
dependabot/github_actions/github-actions-3cbf1e2ad0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 7, 2026

Copy link
Copy Markdown

Bumps the github-actions group with 4 updates: matcra587/github-actions/.github/workflows/workflow-lint.yml, matcra587/github-actions/.github/workflows/go-test.yml, matcra587/github-actions/.github/workflows/go-lint.yml and matcra587/github-actions/.github/workflows/md-lint.yml.

Updates matcra587/github-actions/.github/workflows/workflow-lint.yml from 8b104684e72bef79fca78b294accb5f789d3f202 to 22fb9659d28a51b321f2eb580483d8fd27d20f89

Commits

Updates matcra587/github-actions/.github/workflows/go-test.yml from 8b104684e72bef79fca78b294accb5f789d3f202 to 22fb9659d28a51b321f2eb580483d8fd27d20f89

Commits

Updates matcra587/github-actions/.github/workflows/go-lint.yml from 8b104684e72bef79fca78b294accb5f789d3f202 to 22fb9659d28a51b321f2eb580483d8fd27d20f89

Commits

Updates matcra587/github-actions/.github/workflows/md-lint.yml from 8b104684e72bef79fca78b294accb5f789d3f202 to 22fb9659d28a51b321f2eb580483d8fd27d20f89

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot @github

dependabot Bot commented on behalf of github May 7, 2026

Copy link
Copy Markdown
Author

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@matcra587

Copy link
Copy Markdown
Owner

Fix: rebased onto current main and granted security-events: write to the workflow-lint caller because the nested zizmor job declares that permission.

@matcra587 matcra587 force-pushed the dependabot/github_actions/github-actions-3cbf1e2ad0 branch from bf06503 to 37552f1 Compare May 7, 2026 01:41
@matcra587

Copy link
Copy Markdown
Owner

Fix: updated the shared workflow pins to github-actions@67f0de0 (workflow-lint/v0.1.0), which makes zizmor permissions caller-controlled.

@matcra587 matcra587 force-pushed the dependabot/github_actions/github-actions-3cbf1e2ad0 branch from 37552f1 to decca80 Compare May 7, 2026 01:46
@matcra587 matcra587 merged commit b7cfb97 into main May 7, 2026
6 checks passed
@matcra587 matcra587 deleted the dependabot/github_actions/github-actions-3cbf1e2ad0 branch May 7, 2026 03:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant