Skip to content

Bump lfreleng-actions/security-workflows/.github/workflows/sonatype-lifecycle.yaml from 0.9.3 to 0.9.4 - #45

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/github_actions/lfreleng-actions/security-workflows/dot-github/workflows/sonatype-lifecycle.yaml-0.9.4
Closed

dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/github_actions/lfreleng-actions/security-workflows/dot-github/workflows/sonatype-lifecycle.yaml-0.9.4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 19, 2026 •

Copy link
Copy Markdown
Contributor

Bumps lfreleng-actions/security-workflows/.github/workflows/sonatype-lifecycle.yaml from 0.9.3 to 0.9.4.

Release notes

Sourced from lfreleng-actions/security-workflows/.github/workflows/sonatype-lifecycle.yaml's releases.

v0.9.4

Downloads for this release

🔧 Maintenance 🔧

  • Chore: pre-commit autoupdate @pre-commit-ci[bot] (#139)
  • CI(actions): Bump lfreleng-actions/harden-runner-block-action from 0.12.2 to 0.13.1 @dependabot[bot] (#140)
  • CI(actions): Bump step-security/harden-runner from 2.21.1 to 2.22.1 @dependabot[bot] (#141)
  • CI(actions): Bump lfreleng-actions/generic-workflows/.github/workflows/release.yaml from 0.4.0 to 0.4.3 @dependabot[bot] (#142)
  • CI(actions): Bump lfreleng-actions/generic-workflows/.github/workflows/clear-action-cache.yaml from 0.4.0 to 0.4.3 @dependabot[bot] (#143)
  • CI(actions): Bump lfreleng-actions/checkout-gerrit-change-action from 1.1.0 to 1.1.2 @dependabot[bot] (#144)
  • CI(actions): Bump lfreleng-actions/go-test-action from 0.1.1 to 0.1.2 @dependabot[bot] (#145)
  • CI(actions): Bump actions/upload-artifact from 7.0.1 to 7.0.2 @dependabot[bot] (#146)
  • CI(actions): Bump release-drafter/release-drafter from 7.7.0 to 7.10.0 @dependabot[bot] (#147)
  • CI(actions): Bump lfreleng-actions/build-metadata-action from 0.8.3 to 0.9.0 @dependabot[bot] (#148)
  • CI(actions): Bump actions/download-artifact from 8.0.1 to 8.0.2 @dependabot[bot] (#149)
  • CI(actions): Bump lfreleng-actions/maven-xml-settings-action from 0.1.1 to 0.2.0 @dependabot[bot] (#150)

🎓 Code Quality 🎓

Links

Commits
  • 179b57c Merge pull request #150 from lfreleng-actions/dependabot/github_actions/lfrel...
  • d3ad53e Merge pull request #149 from lfreleng-actions/dependabot/github_actions/actio...
  • 26bdd1a Merge pull request #148 from lfreleng-actions/dependabot/github_actions/lfrel...
  • 3484268 Merge pull request #147 from lfreleng-actions/dependabot/github_actions/relea...
  • 3f166b8 Merge pull request #146 from lfreleng-actions/dependabot/github_actions/actio...
  • 2b3a5f1 Merge pull request #145 from lfreleng-actions/dependabot/github_actions/lfrel...
  • 6f7d524 Merge pull request #144 from lfreleng-actions/dependabot/github_actions/lfrel...
  • 877fb2d Merge pull request #143 from lfreleng-actions/dependabot/github_actions/lfrel...
  • 7803a31 Merge pull request #142 from lfreleng-actions/dependabot/github_actions/lfrel...
  • 285f984 Merge pull request #141 from lfreleng-actions/dependabot/github_actions/step-...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

…ifecycle.yaml

Bumps [lfreleng-actions/security-workflows/.github/workflows/sonatype-lifecycle.yaml](https://github.com/lfreleng-actions/security-workflows) from 0.9.3 to 0.9.4.
- [Release notes](https://github.com/lfreleng-actions/security-workflows/releases)
- [Commits](lfreleng-actions/security-workflows@6c2ced2...179b57c)

---
updated-dependencies:
- dependency-name: lfreleng-actions/security-workflows/.github/workflows/sonatype-lifecycle.yaml
  dependency-version: 0.9.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Oct 19, 2026
@github-actions

Copy link
Copy Markdown

PR: #45
Mode: squash
Topic: GH-so-45
Change-Ids:
I0d8b33fd1e157f8d4399c0bdcbf84170e34b0a8d
Digest: b291b12a5e72
GitHub-Hash: 510605d4f636d607

Note: This metadata is also included in the Gerrit commit message for reconciliation.

@github-actions

Copy link
Copy Markdown

Change raised in Gerrit by GitHub2Gerrit: https://gerrit.onap.org/r/c/so/+/148580

onap-github pushed a commit that referenced this pull request Oct 22, 2026
…ifecycle.yaml from 0.9.3 to 0.9.4

## Release notes

Sourced from lfreleng-actions/security-workflows/.github/workflows/sonatype-lifecycle.yaml's releases.

v0.9.4

🔧 Maintenance 🔧

Chore: pre-commit autoupdate @pre-commit-ci[bot] (#139)
CI(actions): Bump lfreleng-actions/harden-runner-block-action from 0.12.2 to 0.13.1 @dependabot[bot] (#140)
CI(actions): Bump step-security/harden-runner from 2.21.1 to 2.22.1 @dependabot[bot] (#141)
CI(actions): Bump lfreleng-actions/generic-workflows/.github/workflows/release.yaml from 0.4.0 to 0.4.3 @dependabot[bot] (#142)
CI(actions): Bump lfreleng-actions/generic-workflows/.github/workflows/clear-action-cache.yaml from 0.4.0 to 0.4.3 @dependabot[bot] (#143)
CI(actions): Bump lfreleng-actions/checkout-gerrit-change-action from 1.1.0 to 1.1.2 @dependabot[bot] (#144)
CI(actions): Bump lfreleng-actions/go-test-action from 0.1.1 to 0.1.2 @dependabot[bot] (#145)
CI(actions): Bump actions/upload-artifact from 7.0.1 to 7.0.2 @dependabot[bot] (#146)
CI(actions): Bump release-drafter/release-drafter from 7.7.0 to 7.10.0 @dependabot[bot] (#147)
CI(actions): Bump lfreleng-actions/build-metadata-action from 0.8.3 to 0.9.0 @dependabot[bot] (#148)
CI(actions): Bump actions/download-artifact from 8.0.1 to 8.0.2 @dependabot[bot] (#149)
CI(actions): Bump lfreleng-actions/maven-xml-settings-action from 0.1.1 to 0.2.0 @dependabot[bot] (#150)

🎓 Code Quality 🎓

CI(actions): Bump ossf/scorecard-action to v2.5.0 @​ModeSevenIndustrialSolutions (#138)

Links

Submit bugs/feature requests

## Commits

179b57c Merge pull request #150 from lfreleng-actions/dependabot/github_actions/lfrel
d3ad53e Merge pull request #149 from lfreleng-actions/dependabot/github_actions/actio
26bdd1a Merge pull request #148 from lfreleng-actions/dependabot/github_actions/lfrel
3484268 Merge pull request #147 from lfreleng-actions/dependabot/github_actions/relea
3f166b8 Merge pull request #146 from lfreleng-actions/dependabot/github_actions/actio
2b3a5f1 Merge pull request #145 from lfreleng-actions/dependabot/github_actions/lfrel
6f7d524 Merge pull request #144 from lfreleng-actions/dependabot/github_actions/lfrel
877fb2d Merge pull request #143 from lfreleng-actions/dependabot/github_actions/lfrel
7803a31 Merge pull request #142 from lfreleng-actions/dependabot/github_actions/lfrel
285f984 Merge pull request #141 from lfreleng-actions/dependabot/github_actions/step-
Additional commits viewable in compare view

![Dependabot compatibility score](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Issue-ID: CIMAN-33
Signed-off-by: dependabot[bot] <support@github.com>
Change-Id: I0d8b33fd1e157f8d4399c0bdcbf84170e34b0a8d
GitHub-PR: #45
GitHub-Hash: 510605d4f636d607
Signed-off-by: onap.gh2gerrit <releng+onap-gh2gerrit@linuxfoundation.org>
@dependabot @github

dependabot Bot commented on behalf of github Oct 22, 2026

Copy link
Copy Markdown
Contributor Author

Looks like lfreleng-actions/security-workflows/.github/workflows/sonatype-lifecycle.yaml is up-to-date now, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 22, 2026
@dependabot
dependabot Bot deleted the dependabot/github_actions/lfreleng-actions/security-workflows/dot-github/workflows/sonatype-lifecycle.yaml-0.9.4 branch October 22, 2026 12:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Development

Successfully merging this pull request may close these issues.

0 participants