Repository navigation
Bump the github-actions-updates group with 4 updates - #42
Closed
dependabot[bot] wants to merge 1 commit into
Closed
dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps the github-actions-updates group with 4 updates: [lfreleng-actions/github2gerrit-action/.github/workflows/github2gerrit.yaml](https://github.com/lfreleng-actions/github2gerrit-action), [step-security/harden-runner](https://github.com/step-security/harden-runner), [lfreleng-actions/security-workflows/.github/workflows/sonatype-lifecycle.yaml](https://github.com/lfreleng-actions/security-workflows) and [lfreleng-actions/security-workflows/.github/workflows/sonarqube-cloud.yaml](https://github.com/lfreleng-actions/security-workflows). Updates `lfreleng-actions/github2gerrit-action/.github/workflows/github2gerrit.yaml` from 2.4.3 to 2.4.4 - [Release notes](https://github.com/lfreleng-actions/github2gerrit-action/releases) - [Commits](lfreleng-actions/github2gerrit-action@f2ffe06...bb821be) Updates `step-security/harden-runner` from 2.22.1 to 2.22.2 - [Release notes](https://github.com/step-security/harden-runner/releases) - [Commits](step-security/harden-runner@ccd8616...dc2769a) Updates `lfreleng-actions/security-workflows/.github/workflows/sonatype-lifecycle.yaml` from 0.9.3 to 0.9.4 - [Release notes](https://github.com/lfreleng-actions/security-workflows/releases) - [Commits](lfreleng-actions/security-workflows@6c2ced2...179b57c) Updates `lfreleng-actions/security-workflows/.github/workflows/sonarqube-cloud.yaml` from 0.9.3 to 0.9.4 - [Release notes](https://github.com/lfreleng-actions/security-workflows/releases) - [Commits](lfreleng-actions/security-workflows@6c2ced2...179b57c) --- updated-dependencies: - dependency-name: lfreleng-actions/github2gerrit-action/.github/workflows/github2gerrit.yaml dependency-version: 2.4.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-updates - dependency-name: step-security/harden-runner dependency-version: 2.22.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-updates - dependency-name: lfreleng-actions/security-workflows/.github/workflows/sonatype-lifecycle.yaml dependency-version: 0.9.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-updates - dependency-name: lfreleng-actions/security-workflows/.github/workflows/sonarqube-cloud.yaml dependency-version: 0.9.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-updates ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
|
PR: #42 Note: This metadata is also included in the Gerrit commit message for reconciliation. |
|
Change raised in Gerrit by GitHub2Gerrit: https://gerrit.onap.org/r/c/policy/api/+/148681 |
onap-github
pushed a commit
that referenced
this pull request
Oct 22, 2026
Bumps the github-actions-updates group with 4 updates: lfreleng-actions/github2gerrit-action/.github/workflows/github2gerrit.yaml, step-security/harden-runner, lfreleng-actions/security-workflows/.github/workflows/sonatype-lifecycle.yaml and lfreleng-actions/security-workflows/.github/workflows/sonarqube-cloud.yaml. Updates `lfreleng-actions/github2gerrit-action/.github/workflows/github2gerrit.yaml` from 2.4.3 to 2.4.4 ## Release notes Sourced from lfreleng-actions/github2gerrit-action/.github/workflows/github2gerrit.yaml's releases. v2.4.4 🐛 Bug Fixes 🐛 Fix: Log why the abandoned change URL failed @ModeSevenIndustrialSolutions (#477) 🔧 Maintenance 🔧 Chore: Bump lfreleng-actions/generic-workflows/.github/workflows/clear-action-cache.yaml from 0.4.0 to 0.4.1 @dependabot[bot] (#472) Chore: Bump pytest-mock from 3.15.1 to 3.16.0 @dependabot[bot] (#473) Chore: Bump release-drafter/release-drafter from 7.7.0 to 7.9.0 @dependabot[bot] (#474) Chore: Bump cryptography from 50.0.1 to 50.0.2 @dependabot[bot] (#475) Chore: Bump ruff from 0.16.9 to 0.16.10 @dependabot[bot] (#476) Style: Drop redundant pygerrit2 type ignores @ModeSevenIndustrialSolutions (#479) Chore: Pre-commit autoupdate @pre-commit-ci[bot] (#478) Links Submit bugs/feature requests ## Commits bb821be Merge pull request #478 from lfreleng-actions/pre-commit-ci-update-config 8647da1 Chore: Pre-commit autoupdate 8ba96ba Merge pull request #477 from modeseven-lfreleng-actions/fix/abandon-url-error 651cdff Merge pull request #479 from modeseven-lfreleng-actions/style/ruff-format-pyg 60b113a Style: Drop redundant pygerrit2 type ignores 595f314 Fix: Log why the abandoned change URL failed 810db5c Test: Expect the URL fallback to log its cause 57b0081 Merge pull request #476 from lfreleng-actions/dependabot/uv/ruff-0.16.10 3fb8346 Merge pull request #475 from lfreleng-actions/dependabot/uv/cryptography-50.0.2 695ee79 Merge pull request #474 from lfreleng-actions/dependabot/github_actions/relea Additional commits viewable in compare view Updates `step-security/harden-runner` from 2.22.1 to 2.22.2 ## Release notes Sourced from step-security/harden-runner's releases. v2.22.2 What's Changed Fixed inbound (ingress) network traffic being incorrectly classified as outbound (egress) traffic on macOS Fixed implicit endpoints intended for self-hosted runners being applied to custom VM environments on Linux (enterprise tier) Improved network and DNS tracing, enforcement logic, and process information correlation on Linux (enterprise tier) Full Changelog: step-security/harden-runner@v2.22.1...v2.22.2 ## Commits dc2769a Merge pull request #707 from step-security/rc-45 ab0b273 Merge pull request #706 from h0x0er/rc-45 03ccff8 Remove agent-preinstalled skip for third-party runners 815e48d Skip agent install and post-step cleanup when agent is already installed See full diff in compare view Updates `lfreleng-actions/security-workflows/.github/workflows/sonatype-lifecycle.yaml` from 0.9.3 to 0.9.4 ## Release notes Sourced from lfreleng-actions/security-workflows/.github/workflows/sonatype-lifecycle.yaml's releases. v0.9.4 🔧 Maintenance 🔧 Chore: pre-commit autoupdate @pre-commit-ci[bot] (#139) CI(actions): Bump lfreleng-actions/harden-runner-block-action from 0.12.2 to 0.13.1 @dependabot[bot] (#140) CI(actions): Bump step-security/harden-runner from 2.21.1 to 2.22.1 @dependabot[bot] (#141) CI(actions): Bump lfreleng-actions/generic-workflows/.github/workflows/release.yaml from 0.4.0 to 0.4.3 @dependabot[bot] (#142) CI(actions): Bump lfreleng-actions/generic-workflows/.github/workflows/clear-action-cache.yaml from 0.4.0 to 0.4.3 @dependabot[bot] (#143) CI(actions): Bump lfreleng-actions/checkout-gerrit-change-action from 1.1.0 to 1.1.2 @dependabot[bot] (#144) CI(actions): Bump lfreleng-actions/go-test-action from 0.1.1 to 0.1.2 @dependabot[bot] (#145) CI(actions): Bump actions/upload-artifact from 7.0.1 to 7.0.2 @dependabot[bot] (#146) CI(actions): Bump release-drafter/release-drafter from 7.7.0 to 7.10.0 @dependabot[bot] (#147) CI(actions): Bump lfreleng-actions/build-metadata-action from 0.8.3 to 0.9.0 @dependabot[bot] (#148) CI(actions): Bump actions/download-artifact from 8.0.1 to 8.0.2 @dependabot[bot] (#149) CI(actions): Bump lfreleng-actions/maven-xml-settings-action from 0.1.1 to 0.2.0 @dependabot[bot] (#150) 🎓 Code Quality 🎓 CI(actions): Bump ossf/scorecard-action to v2.5.0 @ModeSevenIndustrialSolutions (#138) Links Submit bugs/feature requests ## Commits 179b57c Merge pull request #150 from lfreleng-actions/dependabot/github_actions/lfrel d3ad53e Merge pull request #149 from lfreleng-actions/dependabot/github_actions/actio 26bdd1a Merge pull request #148 from lfreleng-actions/dependabot/github_actions/lfrel 3484268 Merge pull request #147 from lfreleng-actions/dependabot/github_actions/relea 3f166b8 Merge pull request #146 from lfreleng-actions/dependabot/github_actions/actio 2b3a5f1 Merge pull request #145 from lfreleng-actions/dependabot/github_actions/lfrel 6f7d524 Merge pull request #144 from lfreleng-actions/dependabot/github_actions/lfrel 877fb2d Merge pull request #143 from lfreleng-actions/dependabot/github_actions/lfrel 7803a31 Merge pull request #142 from lfreleng-actions/dependabot/github_actions/lfrel 285f984 Merge pull request #141 from lfreleng-actions/dependabot/github_actions/step- Additional commits viewable in compare view Updates `lfreleng-actions/security-workflows/.github/workflows/sonarqube-cloud.yaml` from 0.9.3 to 0.9.4 ## Release notes Sourced from lfreleng-actions/security-workflows/.github/workflows/sonarqube-cloud.yaml's releases. v0.9.4 🔧 Maintenance 🔧 Chore: pre-commit autoupdate @pre-commit-ci[bot] (#139) CI(actions): Bump lfreleng-actions/harden-runner-block-action from 0.12.2 to 0.13.1 @dependabot[bot] (#140) CI(actions): Bump step-security/harden-runner from 2.21.1 to 2.22.1 @dependabot[bot] (#141) CI(actions): Bump lfreleng-actions/generic-workflows/.github/workflows/release.yaml from 0.4.0 to 0.4.3 @dependabot[bot] (#142) CI(actions): Bump lfreleng-actions/generic-workflows/.github/workflows/clear-action-cache.yaml from 0.4.0 to 0.4.3 @dependabot[bot] (#143) CI(actions): Bump lfreleng-actions/checkout-gerrit-change-action from 1.1.0 to 1.1.2 @dependabot[bot] (#144) CI(actions): Bump lfreleng-actions/go-test-action from 0.1.1 to 0.1.2 @dependabot[bot] (#145) CI(actions): Bump actions/upload-artifact from 7.0.1 to 7.0.2 @dependabot[bot] (#146) CI(actions): Bump release-drafter/release-drafter from 7.7.0 to 7.10.0 @dependabot[bot] (#147) CI(actions): Bump lfreleng-actions/build-metadata-action from 0.8.3 to 0.9.0 @dependabot[bot] (#148) CI(actions): Bump actions/download-artifact from 8.0.1 to 8.0.2 @dependabot[bot] (#149) CI(actions): Bump lfreleng-actions/maven-xml-settings-action from 0.1.1 to 0.2.0 @dependabot[bot] (#150) 🎓 Code Quality 🎓 CI(actions): Bump ossf/scorecard-action to v2.5.0 @ModeSevenIndustrialSolutions (#138) Links Submit bugs/feature requests ## Commits 179b57c Merge pull request #150 from lfreleng-actions/dependabot/github_actions/lfrel d3ad53e Merge pull request #149 from lfreleng-actions/dependabot/github_actions/actio 26bdd1a Merge pull request #148 from lfreleng-actions/dependabot/github_actions/lfrel 3484268 Merge pull request #147 from lfreleng-actions/dependabot/github_actions/relea 3f166b8 Merge pull request #146 from lfreleng-actions/dependabot/github_actions/actio 2b3a5f1 Merge pull request #145 from lfreleng-actions/dependabot/github_actions/lfrel 6f7d524 Merge pull request #144 from lfreleng-actions/dependabot/github_actions/lfrel 877fb2d Merge pull request #143 from lfreleng-actions/dependabot/github_actions/lfrel 7803a31 Merge pull request #142 from lfreleng-actions/dependabot/github_actions/lfrel 285f984 Merge pull request #141 from lfreleng-actions/dependabot/github_actions/step- Additional commits viewable in compare view Issue-ID: CIMAN-33 Signed-off-by: dependabot[bot] <support@github.com> Change-Id: Ie51cb44907f5efb7ffd7496271bd35455346e576 GitHub-PR: #42 GitHub-Hash: 77d2ff7aae9c019d Signed-off-by: onap.gh2gerrit <releng+onap-gh2gerrit@linuxfoundation.org>
|
Automated PR Closure This pull request has been automatically closed by GitHub2Gerrit. The corresponding Gerrit change has been accepted and merged ✅ The changes from this PR are now part of the main codebase in Gerrit. This is an automated action performed by the GitHub2Gerrit tool. |
Contributor
Author
|
This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests. To ignore these dependencies, configure ignore rules in dependabot.yml |
dependabot
Bot
deleted the
dependabot/github_actions/github-actions-updates-e38385fbc6
branch
October 22, 2026 12:35
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the github-actions-updates group with 4 updates: lfreleng-actions/github2gerrit-action/.github/workflows/github2gerrit.yaml, step-security/harden-runner, lfreleng-actions/security-workflows/.github/workflows/sonatype-lifecycle.yaml and lfreleng-actions/security-workflows/.github/workflows/sonarqube-cloud.yaml.
Updates
lfreleng-actions/github2gerrit-action/.github/workflows/github2gerrit.yamlfrom 2.4.3 to 2.4.4Release notes
Sourced from lfreleng-actions/github2gerrit-action/.github/workflows/github2gerrit.yaml's releases.
Commits
bb821beMerge pull request #478 from lfreleng-actions/pre-commit-ci-update-config8647da1Chore: Pre-commit autoupdate8ba96baMerge pull request #477 from modeseven-lfreleng-actions/fix/abandon-url-error651cdffMerge pull request #479 from modeseven-lfreleng-actions/style/ruff-format-pyg...60b113aStyle: Drop redundant pygerrit2 type ignores595f314Fix: Log why the abandoned change URL failed810db5cTest: Expect the URL fallback to log its cause57b0081Merge pull request #476 from lfreleng-actions/dependabot/uv/ruff-0.16.103fb8346Merge pull request #475 from lfreleng-actions/dependabot/uv/cryptography-50.0.2695ee79Merge pull request #474 from lfreleng-actions/dependabot/github_actions/relea...Updates
step-security/harden-runnerfrom 2.22.1 to 2.22.2Release notes
Sourced from step-security/harden-runner's releases.
Commits
dc2769aMerge pull request #707 from step-security/rc-45ab0b273Merge pull request #706 from h0x0er/rc-4503ccff8Remove agent-preinstalled skip for third-party runners815e48dSkip agent install and post-step cleanup when agent is already installedUpdates
lfreleng-actions/security-workflows/.github/workflows/sonatype-lifecycle.yamlfrom 0.9.3 to 0.9.4Release notes
Sourced from lfreleng-actions/security-workflows/.github/workflows/sonatype-lifecycle.yaml's releases.
Commits
179b57cMerge pull request #150 from lfreleng-actions/dependabot/github_actions/lfrel...d3ad53eMerge pull request #149 from lfreleng-actions/dependabot/github_actions/actio...26bdd1aMerge pull request #148 from lfreleng-actions/dependabot/github_actions/lfrel...3484268Merge pull request #147 from lfreleng-actions/dependabot/github_actions/relea...3f166b8Merge pull request #146 from lfreleng-actions/dependabot/github_actions/actio...2b3a5f1Merge pull request #145 from lfreleng-actions/dependabot/github_actions/lfrel...6f7d524Merge pull request #144 from lfreleng-actions/dependabot/github_actions/lfrel...877fb2dMerge pull request #143 from lfreleng-actions/dependabot/github_actions/lfrel...7803a31Merge pull request #142 from lfreleng-actions/dependabot/github_actions/lfrel...285f984Merge pull request #141 from lfreleng-actions/dependabot/github_actions/step-...Updates
lfreleng-actions/security-workflows/.github/workflows/sonarqube-cloud.yamlfrom 0.9.3 to 0.9.4Release notes
Sourced from lfreleng-actions/security-workflows/.github/workflows/sonarqube-cloud.yaml's releases.
Commits
179b57cMerge pull request #150 from lfreleng-actions/dependabot/github_actions/lfrel...d3ad53eMerge pull request #149 from lfreleng-actions/dependabot/github_actions/actio...26bdd1aMerge pull request #148 from lfreleng-actions/dependabot/github_actions/lfrel...3484268Merge pull request #147 from lfreleng-actions/dependabot/github_actions/relea...3f166b8Merge pull request #146 from lfreleng-actions/dependabot/github_actions/actio...2b3a5f1Merge pull request #145 from lfreleng-actions/dependabot/github_actions/lfrel...6f7d524Merge pull request #144 from lfreleng-actions/dependabot/github_actions/lfrel...877fb2dMerge pull request #143 from lfreleng-actions/dependabot/github_actions/lfrel...7803a31Merge pull request #142 from lfreleng-actions/dependabot/github_actions/lfrel...285f984Merge pull request #141 from lfreleng-actions/dependabot/github_actions/step-...Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions