Bump the actions group with 2 updates #218
Conversation
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
Bumps the actions group with 2 updates: [mongodb-labs/drivers-github-tools](https://github.com/mongodb-labs/drivers-github-tools) and [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action). Updates `mongodb-labs/drivers-github-tools` from 2 to 3 - [Release notes](https://github.com/mongodb-labs/drivers-github-tools/releases) - [Commits](mongodb-labs/drivers-github-tools@v2...v3) Updates `zizmorcore/zizmor-action` from 873539476a7f9b0da7504d0d9e9a6a5275094d98 to 0696496a48b64e0568faa46ddaf5f6fe48b83b04 - [Release notes](https://github.com/zizmorcore/zizmor-action/releases) - [Commits](zizmorcore/zizmor-action@8735394...0696496) --- updated-dependencies: - dependency-name: mongodb-labs/drivers-github-tools dependency-version: '3' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: zizmorcore/zizmor-action dependency-version: '0696496a48b64e0568faa46ddaf5f6fe48b83b04' dependency-type: direct:production dependency-group: actions ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
added
dependencies
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
| version: ${{ steps.pre-publish.outputs.version }} | ||
| steps: | ||
| - uses: mongodb-labs/drivers-github-tools/secure-checkout@v2 | ||
| - uses: mongodb-labs/drivers-github-tools/secure-checkout@v3 |
Check failure
Code scanning / zizmor
unpinned action reference Error
| app_id: ${{ vars.APP_ID }} | ||
| private_key: ${{ secrets.APP_PRIVATE_KEY }} | ||
| - uses: mongodb-labs/drivers-github-tools/setup@v2 | ||
| - uses: mongodb-labs/drivers-github-tools/setup@v3 |
Check failure
Code scanning / zizmor
unpinned action reference Error
| aws_secret_id: ${{ secrets.AWS_SECRET_ID }} | ||
| artifactory_username: ${{ vars.ARTIFACTORY_USERNAME }} | ||
| - uses: mongodb-labs/drivers-github-tools/python-labs/pre-publish@v2 | ||
| - uses: mongodb-labs/drivers-github-tools/python-labs/pre-publish@v3 |
Check failure
Code scanning / zizmor
unpinned action reference Error
| security-events: write | ||
| steps: | ||
| - uses: mongodb-labs/drivers-github-tools/secure-checkout@v2 | ||
| - uses: mongodb-labs/drivers-github-tools/secure-checkout@v3 |
Check failure
Code scanning / zizmor
unpinned action reference Error
| app_id: ${{ vars.APP_ID }} | ||
| private_key: ${{ secrets.APP_PRIVATE_KEY }} | ||
| - uses: mongodb-labs/drivers-github-tools/setup@v2 | ||
| - uses: mongodb-labs/drivers-github-tools/setup@v3 |
Check failure
Code scanning / zizmor
unpinned action reference Error
| aws_secret_id: ${{ secrets.AWS_SECRET_ID }} | ||
| artifactory_username: ${{ vars.ARTIFACTORY_USERNAME }} | ||
| - uses: mongodb-labs/drivers-github-tools/python-labs/post-publish@v2 | ||
| - uses: mongodb-labs/drivers-github-tools/python-labs/post-publish@v3 |
Check failure
Code scanning / zizmor
unpinned action reference Error
|
Closing until next week when drivers-github-tools gets unblocked. |
|
This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests. To ignore these dependencies, configure ignore rules in dependabot.yml |
dependabot
bot
deleted the
dependabot/github_actions/actions-e2bc38680c
branch
Bumps the actions group with 2 updates: mongodb-labs/drivers-github-tools and zizmorcore/zizmor-action.
Updates
mongodb-labs/drivers-github-toolsfrom 2 to 3Commits
0e9d300DRIVERS-3232 Fix version bump (#93)98d0577DRIVERS-3232 Move ECR login to before Assuming Team Role (#92)4e6efbdDRIVERS-3232 Fix tag command (#91)6514a85DRIVERS-3232 Use ECR instead of artifactory and update to v3 (#84)0eb77c2Updates to DBX Ruby release process (#86)Updates
zizmorcore/zizmor-actionfrom 873539476a7f9b0da7504d0d9e9a6a5275094d98 to 0696496a48b64e0568faa46ddaf5f6fe48b83b04Commits
0696496chore(deps): bump github/codeql-action in the github-actions group (#48)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions