Skip to content

Bump melbinjp/docproof from 0.1.1 to 0.2.2 in the github-actions group - #44

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-e515550cad
Closed

Bump melbinjp/docproof from 0.1.1 to 0.2.2 in the github-actions group#44
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-e515550cad

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 26, 2026

Copy link
Copy Markdown

Bumps the github-actions group with 1 update: melbinjp/docproof.

Updates melbinjp/docproof from 0.1.1 to 0.2.2

Release notes

Sourced from melbinjp/docproof's releases.

v0.2.2

Full Changelog: melbinjp/docproof@v0.2.1...v0.2.2

v0.2.1

What's Changed

Full Changelog: melbinjp/docproof@v0.2.0...v0.2.1

v0.2.0

What's Changed

Full Changelog: melbinjp/docproof@v0.1.4...v0.2.0

v0.1.4

A stale path that is only a link LABEL is a display name, not a claim (#11).

see [`docs/STATE-MD-LIFECYCLE.md`](https://github.com/melbinjp/docproof/blob/HEAD/reference/state-md.md) for the field reference

The label went stale, the target resolves, and nobody following that link lands anywhere wrong. docproof already skipped the reference form [label]: target on exactly this reasoning; judging the inline form while skipping the reference form was an inconsistency, and the inline form is the common one.

Measured before it was built, across 134 cloned repositories: 137,937 inline links, 7,426 with a path-shaped label, 5,529 where the label is not in the tree and the target resolves. 4,838 of those resolve to a URL and almost all are org/repo slugs used as labels (shadcn/ui, encode/broadcaster) which were never repository paths. 687 resolve to a file on disk, which is the real class, and 4 of the 217 corpus findings sit in it.

A URL target earns no skip, and that is the whole safety of the rule: docproof cannot fetch, and when a repository deletes a file the blob URL pointing at it dies too.

Only when the label does not resolve. Skipping every label whose target works turned 85 gsd-core claims into skips to remove 3 findings; the other 82 named real files being checked correctly. Tightened, gsd-core goes 34 broken / 1085 checked to 31 / 1082.

173 tests, 3 operating systems, Python 3.10 to 3.13.

v0.1.3

... (truncated)

Commits
  • 22c1a4a 0.2.2, because its own header was not valid UTF-8 when redirected
  • d3c10bc 0.2.1, which exists so that pip install docproof resolves
  • fd63ce2 Point the README at the writing about this tool
  • 42e937d A translated docs tree is an overlay, so the untranslated page still ships
  • 13d5195 Name the other destination when a rename was a split
  • 3c1bbdf Judge link targets, which are the wrong paths a reader actually clicks
  • 2ea9eef Reading eleven false positives beat two invented mechanisms
  • 6535f49 The pre-registered test passed, and it cut my own headline by fourteen points
  • dc2f03e The gate that is worth 26 points of precision, and it is a genre not a verifier
  • 8b135f6 A directory that was emptied for good is not a directory that might refill (#29)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the github-actions group with 1 update: [melbinjp/docproof](https://github.com/melbinjp/docproof).


Updates `melbinjp/docproof` from 0.1.1 to 0.2.2
- [Release notes](https://github.com/melbinjp/docproof/releases)
- [Commits](melbinjp/docproof@v0.1.1...v0.2.2)

---
updated-dependencies:
- dependency-name: melbinjp/docproof
  dependency-version: 0.2.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Aug 26, 2026
github-actions Bot pushed a commit that referenced this pull request Sep 1, 2026
…o do (#47)

Dependabot opened #44 to move this from v0.1.1 to v0.2.2. Two things are wrong
with taking it. It is already stale, because docproof is on v0.2.4. And moving
between tags is the practice docproof's README argues against, in its own words:
a tag is movable, so whoever controls that repository can change what @v0.2.4
means without a diff for anyone to review. Azul's maintainer raised exactly that
against docproof itself, and it was fixed there.

This repository was still on a tag while the tool it runs tells everyone else
not to be. That is the shape of defect docproof exists to find, in the repository
that runs it.

Pinned to 5798f6a, which is what v0.2.4 resolves to today, with the tag in a
trailing comment so a reader can see which release it is.

Measured before bumping, not assumed: docproof v0.2.4 on this tree reports 126
claims checked and nothing contradicted, judging 15 of 17 documentation files.
@dependabot @github

dependabot Bot commented on behalf of github Sep 1, 2026

Copy link
Copy Markdown
Author

Looks like melbinjp/docproof is no longer updatable, so this is no longer needed.

@dependabot dependabot Bot closed this Sep 1, 2026
@dependabot
dependabot Bot deleted the dependabot/github_actions/github-actions-e515550cad branch September 1, 2026 10:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants