From aed9e06f5e1e76d034dca0e909b4adf9e8e93edf Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 2 Sep 2025 14:08:52 +0000 Subject: [PATCH 1/7] github-actions(deps): bump ergebnis/.github from 1.9.3 to 1.10.0 Bumps [ergebnis/.github](https://github.com/ergebnis/.github) from 1.9.3 to 1.10.0. - [Release notes](https://github.com/ergebnis/.github/releases) - [Changelog](https://github.com/ergebnis/.github/blob/main/CHANGELOG.md) - [Commits](https://github.com/ergebnis/.github/compare/1.9.3...1.10.0) --- updated-dependencies: - dependency-name: ergebnis/.github dependency-version: 1.10.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- .github/workflows/merge.yaml | 8 ++++---- .github/workflows/release.yaml | 2 +- .github/workflows/triage.yaml | 2 +- 3 files changed, 6 insertions(+), 6 deletions(-) diff --git a/.github/workflows/merge.yaml b/.github/workflows/merge.yaml index 99e0637..61d417f 100644 --- a/.github/workflows/merge.yaml +++ b/.github/workflows/merge.yaml @@ -26,23 +26,23 @@ jobs: steps: - name: "Request review from @ergebnis-bot" - uses: "ergebnis/.github/actions/github/pull-request/request-review@1.9.3" + uses: "ergebnis/.github/actions/github/pull-request/request-review@1.10.0" with: github-token: "${{ secrets.ERGEBNIS_BOT_TOKEN }}" reviewer: "ergebnis-bot" - name: "Assign @ergebnis-bot" - uses: "ergebnis/.github/actions/github/pull-request/add-assignee@1.9.3" + uses: "ergebnis/.github/actions/github/pull-request/add-assignee@1.10.0" with: assignee: "ergebnis-bot" github-token: "${{ secrets.ERGEBNIS_BOT_TOKEN }}" - name: "Approve pull request" - uses: "ergebnis/.github/actions/github/pull-request/approve@1.9.3" + uses: "ergebnis/.github/actions/github/pull-request/approve@1.10.0" with: github-token: "${{ secrets.ERGEBNIS_BOT_TOKEN }}" - name: "Merge pull request" - uses: "ergebnis/.github/actions/github/pull-request/merge@1.9.3" + uses: "ergebnis/.github/actions/github/pull-request/merge@1.10.0" with: github-token: "${{ secrets.ERGEBNIS_BOT_TOKEN }}" diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index 885dc53..9b17703 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -17,7 +17,7 @@ jobs: steps: - name: "Create release" - uses: "ergebnis/.github/actions/github/release/create@1.9.3" + uses: "ergebnis/.github/actions/github/release/create@1.10.0" with: github-token: "${{ secrets.ERGEBNIS_BOT_TOKEN }}" diff --git a/.github/workflows/triage.yaml b/.github/workflows/triage.yaml index ccad00a..1218ec2 100644 --- a/.github/workflows/triage.yaml +++ b/.github/workflows/triage.yaml @@ -17,6 +17,6 @@ jobs: steps: - name: "Add labels based on branch name" - uses: "ergebnis/.github/actions/github/pull-request/add-label-based-on-branch-name@1.9.3" + uses: "ergebnis/.github/actions/github/pull-request/add-label-based-on-branch-name@1.10.0" with: github-token: "${{ secrets.ERGEBNIS_BOT_TOKEN }}" From 5216823684bf534e73a54316b73fd8c7882d64c7 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 8 Sep 2025 22:02:07 +0000 Subject: [PATCH 2/7] github-actions(deps): bump actions/github-script Bumps [actions/github-script](https://github.com/actions/github-script) from 7.0.1 to 8.0.0. - [Release notes](https://github.com/actions/github-script/releases) - [Commits](https://github.com/actions/github-script/compare/v7.0.1...v8.0.0) --- updated-dependencies: - dependency-name: actions/github-script dependency-version: 8.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- actions/github/pull-request/approve/action.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/actions/github/pull-request/approve/action.yaml b/actions/github/pull-request/approve/action.yaml index 960d917..1706036 100644 --- a/actions/github/pull-request/approve/action.yaml +++ b/actions/github/pull-request/approve/action.yaml @@ -19,7 +19,7 @@ runs: steps: - name: "Determine pull request number" - uses: "actions/github-script@v7.0.1" + uses: "actions/github-script@v8.0.0" with: github-token: "${{ inputs.github-token }}" script: | @@ -41,7 +41,7 @@ runs: core.setFailed(`Unable to determine the pull request number for event "${context.eventName}"`); - name: "Approve pull request" - uses: "actions/github-script@v7.0.1" + uses: "actions/github-script@v8.0.0" with: github-token: "${{ inputs.github-token }}" script: | From 9e6b7862a36d1208fff47f11d0e7a74d1a7e4d41 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 8 Sep 2025 22:02:19 +0000 Subject: [PATCH 3/7] github-actions(deps): bump actions/github-script Bumps [actions/github-script](https://github.com/actions/github-script) from 7.0.1 to 8.0.0. - [Release notes](https://github.com/actions/github-script/releases) - [Commits](https://github.com/actions/github-script/compare/v7.0.1...v8.0.0) --- updated-dependencies: - dependency-name: actions/github-script dependency-version: 8.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .../pull-request/add-label-based-on-branch-name/action.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/actions/github/pull-request/add-label-based-on-branch-name/action.yaml b/actions/github/pull-request/add-label-based-on-branch-name/action.yaml index e753ad1..c19114c 100644 --- a/actions/github/pull-request/add-label-based-on-branch-name/action.yaml +++ b/actions/github/pull-request/add-label-based-on-branch-name/action.yaml @@ -19,7 +19,7 @@ runs: steps: - name: "Determine pull request number" - uses: "actions/github-script@v7.0.1" + uses: "actions/github-script@v8.0.0" with: github-token: "${{ inputs.github-token }}" script: | @@ -43,7 +43,7 @@ runs: core.setFailed(`Unable to determine the pull request number and branch name for event "${context.eventName}"`); - name: "Add label to pull request based on branch name" - uses: "actions/github-script@v7.0.1" + uses: "actions/github-script@v8.0.0" with: github-token: "${{ inputs.github-token }}" script: | From e308fa0ae95a4b1d80bf86b7269c9c42dc6a19a0 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 8 Sep 2025 22:02:27 +0000 Subject: [PATCH 4/7] github-actions(deps): bump actions/github-script Bumps [actions/github-script](https://github.com/actions/github-script) from 7.0.1 to 8.0.0. - [Release notes](https://github.com/actions/github-script/releases) - [Commits](https://github.com/actions/github-script/compare/v7.0.1...v8.0.0) --- updated-dependencies: - dependency-name: actions/github-script dependency-version: 8.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- actions/github/release/create/action.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/actions/github/release/create/action.yaml b/actions/github/release/create/action.yaml index 91e8fd6..1c90e25 100644 --- a/actions/github/release/create/action.yaml +++ b/actions/github/release/create/action.yaml @@ -27,7 +27,7 @@ runs: shell: "bash" - name: "Create release" - uses: "actions/github-script@v7.0.1" + uses: "actions/github-script@v8.0.0" with: github-token: "${{ inputs.github-token }}" script: | From 64a7590c4a885aa9b046bf2142bda60b1f84e94a Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 8 Sep 2025 22:02:54 +0000 Subject: [PATCH 5/7] github-actions(deps): bump actions/github-script Bumps [actions/github-script](https://github.com/actions/github-script) from 7.0.1 to 8.0.0. - [Release notes](https://github.com/actions/github-script/releases) - [Commits](https://github.com/actions/github-script/compare/v7.0.1...v8.0.0) --- updated-dependencies: - dependency-name: actions/github-script dependency-version: 8.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- actions/github/pull-request/request-review/action.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/actions/github/pull-request/request-review/action.yaml b/actions/github/pull-request/request-review/action.yaml index c3c5dbb..e134fb8 100644 --- a/actions/github/pull-request/request-review/action.yaml +++ b/actions/github/pull-request/request-review/action.yaml @@ -22,7 +22,7 @@ runs: steps: - name: "Determine pull request number" - uses: "actions/github-script@v7.0.1" + uses: "actions/github-script@v8.0.0" with: github-token: "${{ inputs.github-token }}" script: | @@ -44,7 +44,7 @@ runs: core.setFailed(`Unable to determine the pull request number for event "${context.eventName}"`); - name: "Request reviewer" - uses: "actions/github-script@v7.0.1" + uses: "actions/github-script@v8.0.0" env: REVIEWER: "${{ inputs.reviewer }}" with: From 3e817d2d8ae639750d21c1c27474403b2e969ffc Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 8 Sep 2025 22:03:05 +0000 Subject: [PATCH 6/7] github-actions(deps): bump actions/github-script Bumps [actions/github-script](https://github.com/actions/github-script) from 7.0.1 to 8.0.0. - [Release notes](https://github.com/actions/github-script/releases) - [Commits](https://github.com/actions/github-script/compare/v7.0.1...v8.0.0) --- updated-dependencies: - dependency-name: actions/github-script dependency-version: 8.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- actions/github/pull-request/add-assignee/action.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/actions/github/pull-request/add-assignee/action.yaml b/actions/github/pull-request/add-assignee/action.yaml index 2836deb..c3c1599 100644 --- a/actions/github/pull-request/add-assignee/action.yaml +++ b/actions/github/pull-request/add-assignee/action.yaml @@ -22,7 +22,7 @@ runs: steps: - name: "Determine pull request number" - uses: "actions/github-script@v7.0.1" + uses: "actions/github-script@v8.0.0" with: github-token: "${{ inputs.github-token }}" script: | @@ -44,7 +44,7 @@ runs: core.setFailed(`Unable to determine the pull request number for event "${context.eventName}"`); - name: "Add assignee to pull request" - uses: "actions/github-script@v7.0.1" + uses: "actions/github-script@v8.0.0" env: ASSIGNEE: "${{ inputs.assignee }}" with: From e65cde1e2f8cc9923cac264c43479ec49611eb86 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 30 Sep 2025 00:21:42 +0000 Subject: [PATCH 7/7] github-actions(deps): bump actions/cache in /actions/phive/install Bumps [actions/cache](https://github.com/actions/cache) from 4.2.4 to 4.3.0. - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](https://github.com/actions/cache/compare/v4.2.4...v4.3.0) --- updated-dependencies: - dependency-name: actions/cache dependency-version: 4.3.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- actions/phive/install/action.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/actions/phive/install/action.yaml b/actions/phive/install/action.yaml index ad48c0c..2261c0c 100644 --- a/actions/phive/install/action.yaml +++ b/actions/phive/install/action.yaml @@ -26,7 +26,7 @@ runs: shell: "bash" - name: "Cache dependencies installed with phive" - uses: "actions/cache@v4.2.4" + uses: "actions/cache@v4.3.0" with: path: "${{ inputs.phive-home }}" key: "phive-${{ hashFiles('**/phars.xml') }}"