chore: bump the actions group across 1 directory with 10 updates - #148
Open
dependabot[bot] wants to merge 1 commit into
Open
chore: bump the actions group across 1 directory with 10 updates#148dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps the actions group with 10 updates in the / directory: | Package | From | To | | --- | --- | --- | | [stella/.github/.github/workflows/dependabot-bun-dedupe.yml](https://github.com/stella/.github) | `dd6e8fa51339814159486cd92b5ae3a051eb15d2` | `9e1915536efc226c5ec9d3ca0f2192be5aa6ec7e` | | [stella/.github/.github/workflows/rust-napi-ci.yml](https://github.com/stella/.github) | `48aacae31829ce15216a6b766b03a92fd2e84da3` | `9e1915536efc226c5ec9d3ca0f2192be5aa6ec7e` | | [stella/.github/.github/workflows/cla.yml](https://github.com/stella/.github) | `48aacae31829ce15216a6b766b03a92fd2e84da3` | `9e1915536efc226c5ec9d3ca0f2192be5aa6ec7e` | | [stella/.github/.github/workflows/provenance-update.yml](https://github.com/stella/.github) | `48aacae31829ce15216a6b766b03a92fd2e84da3` | `9e1915536efc226c5ec9d3ca0f2192be5aa6ec7e` | | [stella/.github/.github/workflows/release-policy.yml](https://github.com/stella/.github) | `437d9d78c38114a15c368daed7d3d1b36fd6b8fc` | `9e1915536efc226c5ec9d3ca0f2192be5aa6ec7e` | | [stella/.github/.github/workflows/changeset-release-pr.yml](https://github.com/stella/.github) | `c56b0c1d1e82f5e3fffa733a32b9a503a172ee35` | `9e1915536efc226c5ec9d3ca0f2192be5aa6ec7e` | | [stella/.github/.github/workflows/npm-version-preflight.yml](https://github.com/stella/.github) | `48aacae31829ce15216a6b766b03a92fd2e84da3` | `9e1915536efc226c5ec9d3ca0f2192be5aa6ec7e` | | [stella/.github/actions/provenance-check](https://github.com/stella/.github) | `48aacae31829ce15216a6b766b03a92fd2e84da3` | `9e1915536efc226c5ec9d3ca0f2192be5aa6ec7e` | | [stella/.github/.github/workflows/crates-io-publish.yml](https://github.com/stella/.github) | `437d9d78c38114a15c368daed7d3d1b36fd6b8fc` | `9e1915536efc226c5ec9d3ca0f2192be5aa6ec7e` | | [stella/.github/.github/workflows/npm-version-finalize.yml](https://github.com/stella/.github) | `437d9d78c38114a15c368daed7d3d1b36fd6b8fc` | `9e1915536efc226c5ec9d3ca0f2192be5aa6ec7e` | Updates `stella/.github/.github/workflows/dependabot-bun-dedupe.yml` from dd6e8fa51339814159486cd92b5ae3a051eb15d2 to 9e1915536efc226c5ec9d3ca0f2192be5aa6ec7e - [Release notes](https://github.com/stella/.github/releases) - [Commits](stella/.github@dd6e8fa...9e19155) Updates `stella/.github/.github/workflows/rust-napi-ci.yml` from 48aacae31829ce15216a6b766b03a92fd2e84da3 to 9e1915536efc226c5ec9d3ca0f2192be5aa6ec7e - [Release notes](https://github.com/stella/.github/releases) - [Commits](stella/.github@48aacae...9e19155) Updates `stella/.github/.github/workflows/cla.yml` from 48aacae31829ce15216a6b766b03a92fd2e84da3 to 9e1915536efc226c5ec9d3ca0f2192be5aa6ec7e - [Release notes](https://github.com/stella/.github/releases) - [Commits](stella/.github@48aacae...9e19155) Updates `stella/.github/.github/workflows/provenance-update.yml` from 48aacae31829ce15216a6b766b03a92fd2e84da3 to 9e1915536efc226c5ec9d3ca0f2192be5aa6ec7e - [Release notes](https://github.com/stella/.github/releases) - [Commits](stella/.github@48aacae...9e19155) Updates `stella/.github/.github/workflows/release-policy.yml` from 437d9d78c38114a15c368daed7d3d1b36fd6b8fc to 9e1915536efc226c5ec9d3ca0f2192be5aa6ec7e - [Release notes](https://github.com/stella/.github/releases) - [Commits](stella/.github@437d9d7...9e19155) Updates `stella/.github/.github/workflows/changeset-release-pr.yml` from c56b0c1d1e82f5e3fffa733a32b9a503a172ee35 to 9e1915536efc226c5ec9d3ca0f2192be5aa6ec7e - [Release notes](https://github.com/stella/.github/releases) - [Commits](stella/.github@c56b0c1...9e19155) Updates `stella/.github/.github/workflows/npm-version-preflight.yml` from 48aacae31829ce15216a6b766b03a92fd2e84da3 to 9e1915536efc226c5ec9d3ca0f2192be5aa6ec7e - [Release notes](https://github.com/stella/.github/releases) - [Commits](stella/.github@48aacae...9e19155) Updates `stella/.github/actions/provenance-check` from 48aacae31829ce15216a6b766b03a92fd2e84da3 to 9e1915536efc226c5ec9d3ca0f2192be5aa6ec7e - [Release notes](https://github.com/stella/.github/releases) - [Commits](stella/.github@48aacae...9e19155) Updates `stella/.github/.github/workflows/crates-io-publish.yml` from 437d9d78c38114a15c368daed7d3d1b36fd6b8fc to 9e1915536efc226c5ec9d3ca0f2192be5aa6ec7e - [Release notes](https://github.com/stella/.github/releases) - [Commits](stella/.github@437d9d7...9e19155) Updates `stella/.github/.github/workflows/npm-version-finalize.yml` from 437d9d78c38114a15c368daed7d3d1b36fd6b8fc to 9e1915536efc226c5ec9d3ca0f2192be5aa6ec7e - [Release notes](https://github.com/stella/.github/releases) - [Commits](stella/.github@437d9d7...9e19155) --- updated-dependencies: - dependency-name: stella/.github/.github/workflows/dependabot-bun-dedupe.yml dependency-version: 9e1915536efc226c5ec9d3ca0f2192be5aa6ec7e dependency-type: direct:production dependency-group: actions - dependency-name: stella/.github/.github/workflows/rust-napi-ci.yml dependency-version: 9e1915536efc226c5ec9d3ca0f2192be5aa6ec7e dependency-type: direct:production dependency-group: actions - dependency-name: stella/.github/.github/workflows/cla.yml dependency-version: 9e1915536efc226c5ec9d3ca0f2192be5aa6ec7e dependency-type: direct:production dependency-group: actions - dependency-name: stella/.github/.github/workflows/provenance-update.yml dependency-version: 9e1915536efc226c5ec9d3ca0f2192be5aa6ec7e dependency-type: direct:production dependency-group: actions - dependency-name: stella/.github/.github/workflows/release-policy.yml dependency-version: 9e1915536efc226c5ec9d3ca0f2192be5aa6ec7e dependency-type: direct:production dependency-group: actions - dependency-name: stella/.github/.github/workflows/changeset-release-pr.yml dependency-version: 9e1915536efc226c5ec9d3ca0f2192be5aa6ec7e dependency-type: direct:production dependency-group: actions - dependency-name: stella/.github/.github/workflows/npm-version-preflight.yml dependency-version: 9e1915536efc226c5ec9d3ca0f2192be5aa6ec7e dependency-type: direct:production dependency-group: actions - dependency-name: stella/.github/actions/provenance-check dependency-version: 9e1915536efc226c5ec9d3ca0f2192be5aa6ec7e dependency-type: direct:production dependency-group: actions - dependency-name: stella/.github/.github/workflows/crates-io-publish.yml dependency-version: 9e1915536efc226c5ec9d3ca0f2192be5aa6ec7e dependency-type: direct:production dependency-group: actions - dependency-name: stella/.github/.github/workflows/npm-version-finalize.yml dependency-version: 9e1915536efc226c5ec9d3ca0f2192be5aa6ec7e dependency-type: direct:production dependency-group: actions ... Signed-off-by: dependabot[bot] <support@github.com>
![chatgpt-codex-connector[bot]](https://avatars.githubusercontent.com/in/1144995?s=60&v=4){kind=small}
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 02fca71c38
ℹ️ About Codex in GitHub
Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".
| && (github.event_name == 'push' | ||
| || inputs.publish_to_npm)) | ||
| uses: stella/.github/.github/workflows/npm-version-finalize.yml@437d9d78c38114a15c368daed7d3d1b36fd6b8fc | ||
| uses: stella/.github/.github/workflows/npm-version-finalize.yml@9e1915536efc226c5ec9d3ca0f2192be5aa6ec7e |
There was a problem hiding this comment.
At the newly pinned 9e19155 revision, npm-version-finalize.yml no longer declares update-changelog or the CHANGELOG_APP_* secrets because changelog generation was separated from finalization, but this caller still supplies them on lines 435 and 440–441. GitHub rejects reusable-workflow calls containing undeclared inputs or secrets, so the next VERSION-triggered release cannot start the finalize job; remove those arguments, since release-pr.yml already owns changelog updates.
AGENTS.md reference: AGENTS.md:L164-L166
Useful? React with 👍 / 👎.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the actions group with 10 updates in the / directory:
dd6e8fa51339814159486cd92b5ae3a051eb15d29e1915536efc226c5ec9d3ca0f2192be5aa6ec7e48aacae31829ce15216a6b766b03a92fd2e84da39e1915536efc226c5ec9d3ca0f2192be5aa6ec7e48aacae31829ce15216a6b766b03a92fd2e84da39e1915536efc226c5ec9d3ca0f2192be5aa6ec7e48aacae31829ce15216a6b766b03a92fd2e84da39e1915536efc226c5ec9d3ca0f2192be5aa6ec7e437d9d78c38114a15c368daed7d3d1b36fd6b8fc9e1915536efc226c5ec9d3ca0f2192be5aa6ec7ec56b0c1d1e82f5e3fffa733a32b9a503a172ee359e1915536efc226c5ec9d3ca0f2192be5aa6ec7e48aacae31829ce15216a6b766b03a92fd2e84da39e1915536efc226c5ec9d3ca0f2192be5aa6ec7e48aacae31829ce15216a6b766b03a92fd2e84da39e1915536efc226c5ec9d3ca0f2192be5aa6ec7e437d9d78c38114a15c368daed7d3d1b36fd6b8fc9e1915536efc226c5ec9d3ca0f2192be5aa6ec7e437d9d78c38114a15c368daed7d3d1b36fd6b8fc9e1915536efc226c5ec9d3ca0f2192be5aa6ec7eUpdates
stella/.github/.github/workflows/dependabot-bun-dedupe.ymlfrom dd6e8fa51339814159486cd92b5ae3a051eb15d2 to 9e1915536efc226c5ec9d3ca0f2192be5aa6ec7eCommits
9e19155fix: prune quarantine exceptions with the changelog App (#104)49138dbfeat: updaters commit through the GitHub API with a signed-commit action (#103)2420b3bchore: bump the actions group with 3 updates (#102)7c43baachore: upgrade to Bun 1.4.12703e4dfix: preflight npm release namespaces (#100)d10f185fix: authenticate private autofix fetches (#99)8e5b187chore: make dedupe runner configurable (#98)0f814e1fix: keep PyPI trusted publishing in caller (#97)5f2b01dfix: publish PyPI through reusable workflow (#96)89ceed9fix: separate changelog from npm finalization (#95)Updates
stella/.github/.github/workflows/rust-napi-ci.ymlfrom 48aacae31829ce15216a6b766b03a92fd2e84da3 to 9e1915536efc226c5ec9d3ca0f2192be5aa6ec7eCommits
9e19155fix: prune quarantine exceptions with the changelog App (#104)49138dbfeat: updaters commit through the GitHub API with a signed-commit action (#103)2420b3bchore: bump the actions group with 3 updates (#102)7c43baachore: upgrade to Bun 1.4.12703e4dfix: preflight npm release namespaces (#100)d10f185fix: authenticate private autofix fetches (#99)8e5b187chore: make dedupe runner configurable (#98)0f814e1fix: keep PyPI trusted publishing in caller (#97)5f2b01dfix: publish PyPI through reusable workflow (#96)89ceed9fix: separate changelog from npm finalization (#95)Updates
stella/.github/.github/workflows/cla.ymlfrom 48aacae31829ce15216a6b766b03a92fd2e84da3 to 9e1915536efc226c5ec9d3ca0f2192be5aa6ec7eCommits
9e19155fix: prune quarantine exceptions with the changelog App (#104)49138dbfeat: updaters commit through the GitHub API with a signed-commit action (#103)2420b3bchore: bump the actions group with 3 updates (#102)7c43baachore: upgrade to Bun 1.4.12703e4dfix: preflight npm release namespaces (#100)d10f185fix: authenticate private autofix fetches (#99)8e5b187chore: make dedupe runner configurable (#98)0f814e1fix: keep PyPI trusted publishing in caller (#97)5f2b01dfix: publish PyPI through reusable workflow (#96)89ceed9fix: separate changelog from npm finalization (#95)Updates
stella/.github/.github/workflows/provenance-update.ymlfrom 48aacae31829ce15216a6b766b03a92fd2e84da3 to 9e1915536efc226c5ec9d3ca0f2192be5aa6ec7eCommits
9e19155fix: prune quarantine exceptions with the changelog App (#104)49138dbfeat: updaters commit through the GitHub API with a signed-commit action (#103)2420b3bchore: bump the actions group with 3 updates (#102)7c43baachore: upgrade to Bun 1.4.12703e4dfix: preflight npm release namespaces (#100)d10f185fix: authenticate private autofix fetches (#99)8e5b187chore: make dedupe runner configurable (#98)0f814e1fix: keep PyPI trusted publishing in caller (#97)5f2b01dfix: publish PyPI through reusable workflow (#96)89ceed9fix: separate changelog from npm finalization (#95)Updates
stella/.github/.github/workflows/release-policy.ymlfrom 437d9d78c38114a15c368daed7d3d1b36fd6b8fc to 9e1915536efc226c5ec9d3ca0f2192be5aa6ec7eCommits
9e19155fix: prune quarantine exceptions with the changelog App (#104)49138dbfeat: updaters commit through the GitHub API with a signed-commit action (#103)2420b3bchore: bump the actions group with 3 updates (#102)7c43baachore: upgrade to Bun 1.4.12703e4dfix: preflight npm release namespaces (#100)d10f185fix: authenticate private autofix fetches (#99)8e5b187chore: make dedupe runner configurable (#98)0f814e1fix: keep PyPI trusted publishing in caller (#97)5f2b01dfix: publish PyPI through reusable workflow (#96)89ceed9fix: separate changelog from npm finalization (#95)Updates
stella/.github/.github/workflows/changeset-release-pr.ymlfrom c56b0c1d1e82f5e3fffa733a32b9a503a172ee35 to 9e1915536efc226c5ec9d3ca0f2192be5aa6ec7eCommits
9e19155fix: prune quarantine exceptions with the changelog App (#104)49138dbfeat: updaters commit through the GitHub API with a signed-commit action (#103)2420b3bchore: bump the actions group with 3 updates (#102)7c43baachore: upgrade to Bun 1.4.12703e4dfix: preflight npm release namespaces (#100)d10f185fix: authenticate private autofix fetches (#99)8e5b187chore: make dedupe runner configurable (#98)0f814e1fix: keep PyPI trusted publishing in caller (#97)5f2b01dfix: publish PyPI through reusable workflow (#96)89ceed9fix: separate changelog from npm finalization (#95)Updates
stella/.github/.github/workflows/npm-version-preflight.ymlfrom 48aacae31829ce15216a6b766b03a92fd2e84da3 to 9e1915536efc226c5ec9d3ca0f2192be5aa6ec7eCommits
9e19155fix: prune quarantine exceptions with the changelog App (#104)49138dbfeat: updaters commit through the GitHub API with a signed-commit action (#103)2420b3bchore: bump the actions group with 3 updates (#102)7c43baachore: upgrade to Bun 1.4.12703e4dfix: preflight npm release namespaces (#100)d10f185fix: authenticate private autofix fetches (#99)8e5b187chore: make dedupe runner configurable (#98)0f814e1fix: keep PyPI trusted publishing in caller (#97)5f2b01dfix: publish PyPI through reusable workflow (#96)89ceed9fix: separate changelog from npm finalization (#95)Updates
stella/.github/actions/provenance-checkfrom 48aacae31829ce15216a6b766b03a92fd2e84da3 to 9e1915536efc226c5ec9d3ca0f2192be5aa6ec7eCommits
9e19155fix: prune quarantine exceptions with the changelog App (#104)49138dbfeat: updaters commit through the GitHub API with a signed-commit action (#103)2420b3bchore: bump the actions group with 3 updates (#102)7c43baachore: upgrade to Bun 1.4.12703e4dfix: preflight npm release namespaces (#100)d10f185fix: authenticate private autofix fetches (#99)8e5b187chore: make dedupe runner configurable (#98)0f814e1fix: keep PyPI trusted publishing in caller (#97)5f2b01dfix: publish PyPI through reusable workflow (#96)89ceed9fix: separate changelog from npm finalization (#95)Updates
stella/.github/.github/workflows/crates-io-publish.ymlfrom 437d9d78c38114a15c368daed7d3d1b36fd6b8fc to 9e1915536efc226c5ec9d3ca0f2192be5aa6ec7eCommits
9e19155fix: prune quarantine exceptions with the changelog App (#104)49138dbfeat: updaters commit through the GitHub API with a signed-commit action (#103)2420b3bchore: bump the actions group with 3 updates (#102)7c43baachore: upgrade to Bun 1.4.12703e4dfix: preflight npm release namespaces (#100)d10f185fix: authenticate private autofix fetches (#99)8e5b187chore: make dedupe runner configurable (#98)0f814e1fix: keep PyPI trusted publishing in caller (#97)5f2b01dfix: publish PyPI through reusable workflow (#96)89ceed9fix: separate changelog from npm finalization (#95)Updates
stella/.github/.github/workflows/npm-version-finalize.ymlfrom 437d9d78c38114a15c368daed7d3d1b36fd6b8fc to 9e1915536efc226c5ec9d3ca0f2192be5aa6ec7eCommits
9e19155fix: prune quarantine exceptions with the changelog App (#104)49138dbfeat: updaters commit through the GitHub API with a signed-commit action (#103)2420b3bchore: bump the actions group with 3 updates (#102)7c43baachore: upgrade to Bun 1.4.12703e4dfix: preflight npm release namespaces (#100)d10f185fix: authenticate private autofix fetches (#99)8e5b187chore: make dedupe runner configurable (#98)0f814e1fix: keep PyPI trusted publishing in caller (#97)5f2b01dfix: publish PyPI through reusable workflow (#96)89ceed9fix: separate changelog from npm finalization (#95)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions