Skip to content

chore(deps): Bump the github-actions-dependencies group with 2 updates - #46

Merged
JerrettDavis merged 1 commit into
mainfrom
dependabot/github_actions/github-actions-dependencies-01246cdabd
Aug 18, 2026
Merged

chore(deps): Bump the github-actions-dependencies group with 2 updates#46
JerrettDavis merged 1 commit into
mainfrom
dependabot/github_actions/github-actions-dependencies-01246cdabd

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 17, 2026

Copy link
Copy Markdown
Contributor

Bumps the github-actions-dependencies group with 2 updates: dotnet/nbgv and github/codeql-action.

Updates dotnet/nbgv from ac67c7ee2e5c3b12feb09df8af3484e4ecf009bb to a776da7e5cb9880ff2cd046e8148564a462de00e

Commits
  • a776da7 Merge pull request #253 from dotnet/renovate/pnpm-11.x
  • a1da933 Approve required dependency build scripts
  • dda519b Update pnpm to v11
  • 2779110 Merge pull request #254 from dotnet/renovate/lock-file-maintenance
  • bec80e0 Merge pull request #252 from dotnet/renovate/pnpm-10.x
  • d3f2470 Merge pull request #255 from dotnet/renovate/esbuild-0.x-lockfile
  • 9a93356 Update dependency esbuild to v0.28.2
  • c91b0a0 Lock file maintenance
  • 1e73766 Update pnpm to v10.34.5
  • See full diff in compare view

Updates github/codeql-action from 4.37.6 to 4.37.7

Release notes

Sourced from github/codeql-action's releases.

v4.37.7

  • Update default CodeQL bundle version to 2.26.3. #4085
Changelog

Sourced from github/codeql-action's changelog.

4.37.7 - 13 Aug 2026

  • Update default CodeQL bundle version to 2.26.3. #4085
Commits
  • ff2f1c6 Merge pull request #4093 from github/update-v4.37.7-be7a3dbb8
  • 951a133 Update changelog for v4.37.7
  • be7a3db Merge pull request #4087 from github/dependabot/npm_and_yarn/npm-minor-0aa561...
  • 9310334 Merge pull request #4086 from github/mbg/thread-action-state-to-codeql
  • b4d8a54 Rebuild
  • ab5db25 Bump the npm-minor group across 1 directory with 8 updates
  • 38055a3 Drop logger from databaseInitCluster in interface
  • 1f87aed Merge pull request #4085 from github/update-bundle/codeql-bundle-v2.26.3
  • dc1b98a Make logger available to getCodeQLForCmd
  • 6f0220e Merge pull request #4084 from github/navntoft/bump-undici
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the github-actions-dependencies group with 2 updates: [dotnet/nbgv](https://github.com/dotnet/nbgv) and [github/codeql-action](https://github.com/github/codeql-action).


Updates `dotnet/nbgv` from ac67c7ee2e5c3b12feb09df8af3484e4ecf009bb to a776da7e5cb9880ff2cd046e8148564a462de00e
- [Release notes](https://github.com/dotnet/nbgv/releases)
- [Commits](dotnet/nbgv@ac67c7e...a776da7)

Updates `github/codeql-action` from 4.37.6 to 4.37.7
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@v4.37.6...v4.37.7)

---
updated-dependencies:
- dependency-name: dotnet/nbgv
  dependency-version: a776da7e5cb9880ff2cd046e8148564a462de00e
  dependency-type: direct:production
  dependency-group: github-actions-dependencies
- dependency-name: github/codeql-action
  dependency-version: 4.37.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@github-actions

Copy link
Copy Markdown

Code Coverage

Summary
  Generated on: 8/17/2026 - 11:21:27 AM
  Coverage date: 8/17/2026 - 11:21:12 AM
  Parser: MultiReport (2x Cobertura)
  Assemblies: 1
  Classes: 50
  Files: 47
  Line coverage: 93.9%
  Covered lines: 2303
  Uncovered lines: 149
  Coverable lines: 2452
  Total lines: 7385
  Branch coverage: 88.9% (1276 of 1434)
  Covered branches: 1276
  Total branches: 1434
  Method coverage: 94.1% (416 of 442)
  Full method coverage: 88% (389 of 442)
  Covered methods: 416
  Fully covered methods: 389
  Total methods: 442

Flawright                                               93.9%
  Flawright.AppExecutionAliasResolvedEventArgs           100%
  Flawright.ApplicationClosedEventArgs                  82.3%
  Flawright.ApplicationClosingEventArgs                 90.9%
  Flawright.ApplicationLaunchedEventArgs                  95%
  Flawright.AssertionException                           100%
  Flawright.AssertionsStatic                             100%
  Flawright.AttachOptions                                100%
  Flawright.AumidResolver.LaunchTarget                   100%
  Flawright.AumidResolver.WindowsAumidResolver           100%
  Flawright.Backends.SelectorPipeline                    100%
  Flawright.CloseBehaviors.CloseContext                 88.2%
  Flawright.CloseBehaviors.CompositeCloseBehavior        100%
  Flawright.CloseBehaviors.DismissDialogCloseBehavior   95.2%
  Flawright.CloseBehaviors.KillCloseBehavior             100%
  Flawright.CloseBehaviors.WindowMessageCloseBehavior    100%
  Flawright.DialogOpenedEventArgs                        100%
  Flawright.Flawright                                      0%
  Flawright.FlawrightAssertions                          100%
  Flawright.FlawrightBrowser                              94%
  Flawright.FlawrightElement                            91.3%
  Flawright.FlawrightLaunchException                     100%
  Flawright.FlawrightLocator                            90.9%
  Flawright.FlawrightNotAssertions                       100%
  Flawright.FlawrightOptions                             100%
  Flawright.FlawrightPage                                 98%
  Flawright.FlawrightTimeoutException                    100%
  Flawright.Input.KeyParser                             92.9%
  Flawright.InputModes.RealInputMode                     100%
  Flawright.InputModes.VirtualInputMode                  100%
  Flawright.Internals.AppExecutionAliasResolver         86.6%
  Flawright.Internals.AutoWait                           100%
  Flawright.Internals.PackagedAppResolver               70.5%
  Flawright.Internals.ProcessAttachRetry                91.6%
  Flawright.Internals.ProcessReadyGuard                 64.5%
  Flawright.Internals.ProcessReadyResult                  60%
  Flawright.Internals.SafeProcessQueries                 100%
  Flawright.LaunchOptions                                100%
  Flawright.Locator.BoundingBox                          100%
  Flawright.Locator.LocatorContext                       100%
  Flawright.Locator.SelectOptionValue                    100%
  Flawright.Page.FlawrightKeyboard                       100%
  Flawright.Page.FlawrightMouse                          100%
  Flawright.Page.FlawrightPageAssertions                 100%
  Flawright.ProcessAttachRetriedEventArgs                100%
  Flawright.ProcessReadyGuardWaitedEventArgs             100%
  Flawright.Selectors.AriaRoleMapper                     100%
  Flawright.Selectors.ControlTypeParser                  100%
  Flawright.Selectors.SelectorAst                        100%
  Flawright.Selectors.SelectorParser                    98.1%
  Flawright.WindowDetectedEventArgs                      100%

@github-actions

Copy link
Copy Markdown

Test Results

1 444 tests   1 444 ✅  45s ⏱️
    1 suites      0 💤
    1 files        0 ❌

Results for commit 77ece49.

@github-actions

Copy link
Copy Markdown

⚠️ Deprecation Warning: The deny-licenses option is deprecated for possible removal in the next major release. For more information, see issue 997.

Dependency Review

The following issues were found:
  • ✅ 0 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ⚠️ 1 package(s) with unknown licenses.
See the Details below.

License Issues

.github/workflows/pr-validation.yml

PackageVersionLicenseIssue Type
dotnet/nbgva776da7e5cb9880ff2cd046e8148564a462de00eNullUnknown License
Denied Licenses: GPL-2.0, GPL-3.0, AGPL-3.0

OpenSSF Scorecard

PackageVersionScoreDetails
actions/dotnet/nbgv a776da7e5cb9880ff2cd046e8148564a462de00e 🟢 4.2
Details
CheckScoreReason
Code-Review⚠️ 0Found 0/11 approved changesets -- score normalized to 0
Maintained🟢 1030 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10
Binary-Artifacts🟢 10no binaries found in the repo
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Packaging⚠️ -1packaging workflow not detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
Signed-Releases⚠️ -1no releases found
License🟢 10license file detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Security-Policy⚠️ 0security policy file not detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0

Scanned Files

  • .github/workflows/pr-validation.yml

@JerrettDavis
JerrettDavis merged commit 9af97a9 into main Aug 18, 2026
14 checks passed
@dependabot
dependabot Bot deleted the dependabot/github_actions/github-actions-dependencies-01246cdabd branch August 18, 2026 15:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant