chore(deps): Bump the github-actions-dependencies group with 2 updates#94
Conversation
Bumps the github-actions-dependencies group with 2 updates: [marocchino/sticky-pull-request-comment](https://github.com/marocchino/sticky-pull-request-comment) and [github/codeql-action](https://github.com/github/codeql-action). Updates `marocchino/sticky-pull-request-comment` from 3.0.4 to 3.0.5 - [Release notes](https://github.com/marocchino/sticky-pull-request-comment/releases) - [Commits](marocchino/sticky-pull-request-comment@v3.0.4...v3.0.5) Updates `github/codeql-action` from 4.36.3 to 4.37.0 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@v4.36.3...v4.37.0) --- updated-dependencies: - dependency-name: marocchino/sticky-pull-request-comment dependency-version: 3.0.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-dependencies - dependency-name: github/codeql-action dependency-version: 4.37.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>
LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
Code Coverage |
Dependency Review✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.OpenSSF Scorecard
Scanned Files
|
Test Results783 tests 783 ✅ 11s ⏱️ Results for commit 69d4025. |
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## main #94 +/- ##
==========================================
+ Coverage 98.23% 98.82% +0.58%
==========================================
Files 82 82
Lines 2556 2556
Branches 303 217 -86
==========================================
+ Hits 2511 2526 +15
+ Misses 45 30 -15
Flags with carried forward coverage won't be shown. Click here to find out more. ☔ View full report in Codecov by Harness. 🚀 New features to boost your workflow:
|
Bumps the github-actions-dependencies group with 2 updates: marocchino/sticky-pull-request-comment and github/codeql-action.
Updates
marocchino/sticky-pull-request-commentfrom 3.0.4 to 3.0.5Release notes
Sourced from marocchino/sticky-pull-request-comment's releases.
Commits
5770ad5📦️ Build2c19060build(deps-dev): Bump@biomejs/biomefrom 2.4.14 to 2.5.2 (#1730)3d24e5abuild(deps-dev): Bump js-yaml from 4.1.1 to 5.2.1 (#1732)3604821build(deps-dev): Bump@rollup/plugin-commonjsfrom 29.0.2 to 29.0.3 (#1710)a4d9c0fbuild(deps-dev): Bump@types/nodefrom 25.9.1 to 26.1.0 (#1731)ae65a58build(deps-dev): Bump vitest from 4.1.7 to 4.1.9 (#1719)8680321build(deps-dev): Bump vite from 8.0.13 to 8.0.16 (#1720)5d40239build(deps): Bump actions/checkout from 6 to 7 (#1721)39ab01dbuild(deps-dev): Bump rollup from 4.60.4 to 4.62.2 (#1722)b2660f1build(deps): Bump undici from 6.24.0 to 6.27.0 (#1725)Updates
github/codeql-actionfrom 4.36.3 to 4.37.0Release notes
Sourced from github/codeql-action's releases.
Changelog
Sourced from github/codeql-action's changelog.
Commits
99df26dMerge pull request #3996 from github/update-v4.37.0-c7c896d7131c2707Add changenote for #397372df218Update changelog for v4.37.0c7c896dMerge pull request #3995 from github/update-bundle/codeql-bundle-v2.26.03f34ff0Add changelog note43bec09Update default bundle to codeql-bundle-v2.26.0f58f0d1Merge pull request #3973 from github/mbg/repo-props/config-file-shorthands7dc37cbMerge remote-tracking branch 'origin/main' into mbg/repo-props/config-file-sh...8e22350ThreadActionStatetoinitConfig69c9e8cMark somestatus-reportimports astype-only to avoid circular dependenciesDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions