Repository navigation
Bump the github-actions-updates group with 3 updates - #46
Closed
dependabot[bot] wants to merge 1 commit into
Closed
dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps the github-actions-updates group with 3 updates: [lfreleng-actions/github2gerrit-action/.github/workflows/github2gerrit.yaml](https://github.com/lfreleng-actions/github2gerrit-action), [lfreleng-actions/maven-build-action](https://github.com/lfreleng-actions/maven-build-action) and [lfreleng-actions/sonatype-lifecycle-scan-action](https://github.com/lfreleng-actions/sonatype-lifecycle-scan-action). Updates `lfreleng-actions/github2gerrit-action/.github/workflows/github2gerrit.yaml` from 2.2.1 to 2.4.0 - [Release notes](https://github.com/lfreleng-actions/github2gerrit-action/releases) - [Commits](lfreleng-actions/github2gerrit-action@eda09b8...df12d7f) Updates `lfreleng-actions/maven-build-action` from 0.4.2 to 0.4.3 - [Release notes](https://github.com/lfreleng-actions/maven-build-action/releases) - [Commits](lfreleng-actions/maven-build-action@3c48aed...7781c31) Updates `lfreleng-actions/sonatype-lifecycle-scan-action` from 0.2.1 to 0.2.2 - [Release notes](https://github.com/lfreleng-actions/sonatype-lifecycle-scan-action/releases) - [Commits](lfreleng-actions/sonatype-lifecycle-scan-action@bfe8863...71c04eb) --- updated-dependencies: - dependency-name: lfreleng-actions/github2gerrit-action/.github/workflows/github2gerrit.yaml dependency-version: 2.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions-updates - dependency-name: lfreleng-actions/maven-build-action dependency-version: 0.4.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-updates - dependency-name: lfreleng-actions/sonatype-lifecycle-scan-action dependency-version: 0.2.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-updates ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
|
PR: #46 Note: This metadata is also included in the Gerrit commit message for reconciliation. |
|
Change raised in Gerrit by GitHub2Gerrit: https://gerrit.onap.org/r/c/policy/parent/+/147940 |
onap-github
pushed a commit
that referenced
this pull request
Oct 5, 2026
Bumps the github-actions-updates group with 3 updates: lfreleng-actions/github2gerrit-action/.github/workflows/github2gerrit.yaml, lfreleng-actions/maven-build-action and lfreleng-actions/sonatype-lifecycle-scan-action. Updates `lfreleng-actions/github2gerrit-action/.github/workflows/github2gerrit.yaml` from 2.2.1 to 2.4.0 ## Release notes Sourced from lfreleng-actions/github2gerrit-action/.github/workflows/github2gerrit.yaml's releases. v2.4.0 ✨ New Features ✨ Feat: Sweep approved fork PRs on a schedule @ModeSevenIndustrialSolutions (#455) Links Submit bugs/feature requests v2.3.0 ✨ New Features ✨ Feat: Fan out bulk sweeps and skip transferred forks @ModeSevenIndustrialSolutions (#454) Links Submit bugs/feature requests v2.2.2 🐛 Bug Fixes 🐛 Fix: Settle one effective Gerrit host in derivation @ModeSevenIndustrialSolutions (#446) Fix: Give the Gerrit port its own precedence @ModeSevenIndustrialSolutions (#449) 🔧 Maintenance 🔧 Chore: Bump astral-sh/setup-uv from 10.0.1 to 10.1.0 @dependabot[bot] (#450) Chore: Bump ruff from 0.16.6 to 0.16.7 @dependabot[bot] (#451) Build: Sync mypy hook pins from uv.lock instead of testing them @ModeSevenIndustrialSolutions (#447) Chore: pre-commit autoupdate @pre-commit-ci[bot] (#453) 🎓 Code Quality 🎓 Test: Assert the whole no-change message, not the host @ModeSevenIndustrialSolutions (#452) Links Submit bugs/feature requests ## Commits df12d7f Merge pull request #455 from modeseven-lfreleng-actions/feat/scheduled-sweep 56d3246 Feat: Sweep approved fork PRs on a schedule 2fbfa39 Test: Share the reusable workflow test harness a483c25 Merge pull request #454 from modeseven-lfreleng-actions/feat/sweep-fan-out-id edb2d7b Fix: Address Copilot review feedback bced4e6 Feat: Fan bulk dispatch out to a job per PR 48bbc46 Feat: Record fork transfers so sweeps skip them 5f84610 Merge pull request #453 from lfreleng-actions/pre-commit-ci-update-config e6edf55 Chore: pre-commit autoupdate 047f4cd Merge pull request #449 from modeseven-lfreleng-actions/fix/gerrit-port-prece Additional commits viewable in compare view Updates `lfreleng-actions/maven-build-action` from 0.4.2 to 0.4.3 ## Release notes Sourced from lfreleng-actions/maven-build-action's releases. v0.4.3 🔧 Maintenance 🔧 Chore: Bump lfreleng-actions/generic-workflows/.github/workflows/clear-action-cache.yaml from 0.1.0 to 0.2.2 @dependabot[bot] (#142) Chore: Bump lfreleng-actions/harden-runner-block-action from 0.11.1 to 0.12.1 @dependabot[bot] (#140) Chore: Bump step-security/harden-runner from 2.20.1 to 2.21.0 @dependabot[bot] (#141) Chore: Bump lfreleng-actions/generic-workflows/.github/workflows/release.yaml from 0.1.0 to 0.2.2 @dependabot[bot] (#143) Chore: Bump lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-scorecard.yaml from 0.10.1 to 0.10.3 @dependabot[bot] (#144) Chore: pre-commit autoupdate @pre-commit-ci[bot] (#145) Chore: Bump lfreleng-actions/generic-workflows/.github/workflows/release.yaml from 0.2.2 to 0.3.0 @dependabot[bot] (#146) Chore: Bump s4u/setup-maven-action from 1.20.0 to 1.21.0 @dependabot[bot] (#147) Chore: Bump lfreleng-actions/generic-workflows/.github/workflows/clear-action-cache.yaml from 0.2.2 to 0.3.0 @dependabot[bot] (#148) Chore: Bump step-security/harden-runner from 2.21.0 to 2.21.1 @dependabot[bot] (#149) Chore: Bump actions/setup-java from 5.7.0 to 6.0.0 @dependabot[bot] (#150) Chore: pre-commit autoupdate @pre-commit-ci[bot] (#151) Chore: Bump lfreleng-actions/generic-workflows/.github/workflows/clear-action-cache.yaml from 0.3.0 to 0.3.1 @dependabot[bot] (#152) Chore: Bump lfreleng-actions/generic-workflows/.github/workflows/release.yaml from 0.3.0 to 0.3.1 @dependabot[bot] (#153) Chore: Bump actions/setup-java from 6.0.0 to 6.0.1 @dependabot[bot] (#154) Chore: pre-commit autoupdate @pre-commit-ci[bot] (#155) Links Submit bugs/feature requests ## Commits 7781c31 Merge pull request #155 from lfreleng-actions/pre-commit-ci-update-config 853195e Chore: pre-commit autoupdate 516893d Merge pull request #154 from lfreleng-actions/dependabot/github_actions/actio f8ce718 Merge pull request #153 from lfreleng-actions/dependabot/github_actions/lfrel 4b35f8b Merge pull request #152 from lfreleng-actions/dependabot/github_actions/lfrel 7285454 Chore: Bump actions/setup-java from 6.0.0 to 6.0.1 ae9d152 Chore: Bump lfreleng-actions/generic-workflows/.github/workflows/release.yaml 6008d80 Chore: Bump lfreleng-actions/generic-workflows/.github/workflows/clear-action d6e6324 Merge pull request #151 from lfreleng-actions/pre-commit-ci-update-config 228e1dd Chore: pre-commit autoupdate Additional commits viewable in compare view Updates `lfreleng-actions/sonatype-lifecycle-scan-action` from 0.2.1 to 0.2.2 ## Release notes Sourced from lfreleng-actions/sonatype-lifecycle-scan-action's releases. v0.2.2 🔧 Maintenance 🔧 Chore: Bump lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-scorecard.yaml from 0.10.1 to 0.10.3 @dependabot[bot] (#178) Chore: Bump actions/setup-java from 5.7.0 to 6.0.0 @dependabot[bot] (#179) Chore: Bump lfreleng-actions/generic-workflows/.github/workflows/release.yaml from 0.1.0 to 0.2.2 @dependabot[bot] (#180) Chore: pre-commit autoupdate @pre-commit-ci[bot] (#181) Chore: Bump step-security/harden-runner from 2.21.0 to 2.21.1 @dependabot[bot] (#182) Chore: Bump lfreleng-actions/generic-workflows/.github/workflows/release.yaml from 0.2.2 to 0.3.0 @dependabot[bot] (#183) Chore: pre-commit autoupdate @pre-commit-ci[bot] (#184) Chore: Bump lfreleng-actions/generic-workflows/.github/workflows/release.yaml from 0.3.0 to 0.3.1 @dependabot[bot] (#185) Chore: Bump actions/setup-java from 6.0.0 to 6.0.1 @dependabot[bot] (#186) Chore: Bump sonatype/actions/setup-iq-cli from 1.14.0 to 1.14.1 @dependabot[bot] (#187) Chore: Bump sonatype/actions/run-iq-cli from 1.14.0 to 1.14.1 @dependabot[bot] (#188) Chore: pre-commit autoupdate @pre-commit-ci[bot] (#189) Links Submit bugs/feature requests ## Commits 71c04eb Merge pull request #189 from lfreleng-actions/pre-commit-ci-update-config f995330 Chore: pre-commit autoupdate 238e0be Merge pull request #188 from lfreleng-actions/dependabot/github_actions/sonat 00081bc Merge pull request #187 from lfreleng-actions/dependabot/github_actions/sonat 2309117 Merge pull request #186 from lfreleng-actions/dependabot/github_actions/actio 40f8eda Merge pull request #185 from lfreleng-actions/dependabot/github_actions/lfrel 1bebdab Chore: Bump sonatype/actions/run-iq-cli from 1.14.0 to 1.14.1 45110b8 Chore: Bump sonatype/actions/setup-iq-cli from 1.14.0 to 1.14.1 16c77b1 Chore: Bump actions/setup-java from 6.0.0 to 6.0.1 c663e6b Chore: Bump lfreleng-actions/generic-workflows/.github/workflows/release.yaml Additional commits viewable in compare view Issue-ID: CIMAN-33 Signed-off-by: dependabot[bot] <support@github.com> Change-Id: I50f337203c3455b3df6e3d99e1131a4c15b7464d GitHub-PR: #46 GitHub-Hash: 53fa4b4b79a44d3c Signed-off-by: onap.gh2gerrit <releng+onap-gh2gerrit@linuxfoundation.org>
|
Automated PR Closure This pull request has been automatically closed by GitHub2Gerrit. The corresponding Gerrit change has been accepted and merged ✅ The changes from this PR are now part of the main codebase in Gerrit. This is an automated action performed by the GitHub2Gerrit tool. |
Contributor
Author
|
This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests. To ignore these dependencies, configure ignore rules in dependabot.yml |
dependabot
Bot
deleted the
dependabot/github_actions/github-actions-updates-bfcbcc8e2e
branch
October 5, 2026 09:24
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the github-actions-updates group with 3 updates: lfreleng-actions/github2gerrit-action/.github/workflows/github2gerrit.yaml, lfreleng-actions/maven-build-action and lfreleng-actions/sonatype-lifecycle-scan-action.
Updates
lfreleng-actions/github2gerrit-action/.github/workflows/github2gerrit.yamlfrom 2.2.1 to 2.4.0Release notes
Sourced from lfreleng-actions/github2gerrit-action/.github/workflows/github2gerrit.yaml's releases.
Commits
df12d7fMerge pull request #455 from modeseven-lfreleng-actions/feat/scheduled-sweep56d3246Feat: Sweep approved fork PRs on a schedule2fbfa39Test: Share the reusable workflow test harnessa483c25Merge pull request #454 from modeseven-lfreleng-actions/feat/sweep-fan-out-id...edb2d7bFix: Address Copilot review feedbackbced4e6Feat: Fan bulk dispatch out to a job per PR48bbc46Feat: Record fork transfers so sweeps skip them5f84610Merge pull request #453 from lfreleng-actions/pre-commit-ci-update-confige6edf55Chore: pre-commit autoupdate047f4cdMerge pull request #449 from modeseven-lfreleng-actions/fix/gerrit-port-prece...Updates
lfreleng-actions/maven-build-actionfrom 0.4.2 to 0.4.3Release notes
Sourced from lfreleng-actions/maven-build-action's releases.
Commits
7781c31Merge pull request #155 from lfreleng-actions/pre-commit-ci-update-config853195eChore: pre-commit autoupdate516893dMerge pull request #154 from lfreleng-actions/dependabot/github_actions/actio...f8ce718Merge pull request #153 from lfreleng-actions/dependabot/github_actions/lfrel...4b35f8bMerge pull request #152 from lfreleng-actions/dependabot/github_actions/lfrel...7285454Chore: Bump actions/setup-java from 6.0.0 to 6.0.1ae9d152Chore: Bump lfreleng-actions/generic-workflows/.github/workflows/release.yaml6008d80Chore: Bump lfreleng-actions/generic-workflows/.github/workflows/clear-action...d6e6324Merge pull request #151 from lfreleng-actions/pre-commit-ci-update-config228e1ddChore: pre-commit autoupdateUpdates
lfreleng-actions/sonatype-lifecycle-scan-actionfrom 0.2.1 to 0.2.2Release notes
Sourced from lfreleng-actions/sonatype-lifecycle-scan-action's releases.
Commits
71c04ebMerge pull request #189 from lfreleng-actions/pre-commit-ci-update-configf995330Chore: pre-commit autoupdate238e0beMerge pull request #188 from lfreleng-actions/dependabot/github_actions/sonat...00081bcMerge pull request #187 from lfreleng-actions/dependabot/github_actions/sonat...2309117Merge pull request #186 from lfreleng-actions/dependabot/github_actions/actio...40f8edaMerge pull request #185 from lfreleng-actions/dependabot/github_actions/lfrel...1bebdabChore: Bump sonatype/actions/run-iq-cli from 1.14.0 to 1.14.145110b8Chore: Bump sonatype/actions/setup-iq-cli from 1.14.0 to 1.14.116c77b1Chore: Bump actions/setup-java from 6.0.0 to 6.0.1c663e6bChore: Bump lfreleng-actions/generic-workflows/.github/workflows/release.yamlDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions