chore(deps): update amannn/action-semantic-pull-request action to v6 #906
Conversation
|
@launchdarkly/browser size report |
renovate
bot
force-pushed
the
renovate/amannn-action-semantic-pull-request-6.x
branch
2 times, most recently
from
7f02743 to
4462f50
Compare
renovate
bot
force-pushed
the
renovate/amannn-action-semantic-pull-request-6.x
branch
from
4462f50 to
24c1791
Compare
|
@launchdarkly/js-sdk-common size report |
|
@launchdarkly/js-client-sdk size report |
|
@launchdarkly/js-client-sdk-common size report |
renovate
bot
force-pushed
the
renovate/amannn-action-semantic-pull-request-6.x
branch
4 times, most recently
from
a838a12 to
ce5b9fa
Compare
renovate
bot
force-pushed
the
renovate/amannn-action-semantic-pull-request-6.x
branch
6 times, most recently
from
0db1c6d to
92e471a
Compare
renovate
bot
force-pushed
the
renovate/amannn-action-semantic-pull-request-6.x
branch
12 times, most recently
from
6450d52 to
17c8443
Compare
renovate
bot
force-pushed
the
renovate/amannn-action-semantic-pull-request-6.x
branch
14 times, most recently
from
8e9c25e to
30b3c29
Compare
![semgrep-code-launchdarkly[bot]](https://avatars.githubusercontent.com/u/8039656?s=60&v=4){kind=small}
.github/workflows/lint-pr-title.yml
Outdated
| runs-on: ubuntu-latest | ||
| steps: | ||
| - uses: amannn/action-semantic-pull-request@v5 | ||
| - uses: amannn/action-semantic-pull-request@v6 |
There was a problem hiding this comment.
An action sourced from a third-party repository on GitHub is not pinned to a full length commit SHA. Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps mitigate the risk of a bad actor adding a backdoor to the action's repository, as they would need to generate a SHA-1 collision for a valid Git object payload.
🍰 Fixed in commit d40403c 🍰
renovate
bot
force-pushed
the
renovate/amannn-action-semantic-pull-request-6.x
branch
10 times, most recently
from
decb21a to
05597f6
Compare
renovate
bot
force-pushed
the
renovate/amannn-action-semantic-pull-request-6.x
branch
from
05597f6 to
7e1c6ad
Compare
kinyoklion
deleted the
renovate/amannn-action-semantic-pull-request-6.x
branch
This PR contains the following updates:
v5->v6Release Notes
amannn/action-semantic-pull-request (amannn/action-semantic-pull-request)
v6Compare Source
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.
Note
Update PR title lint workflow to use amannn/action-semantic-pull-request v6 pinned to a specific commit.
/.github/workflows/lint-pr-title.ymlto useamannn/action-semantic-pull-request@48f256284bd46cdaab1048c3721360e808335d50(v6) instead of v5.Written by Cursor Bugbot for commit 7e1c6ad. This will update automatically on new commits. Configure here.