-
Notifications
You must be signed in to change notification settings - Fork 1.2k
Open
Labels
Description
Is there an existing issue for this?
- I have searched the existing issues
Package ecosystem
github_action
Package manager version
N/A
Language version
N/A
Manifest location and content before the Dependabot update
uses: github/codeql-action/upload-sarif@2d92b76c45b91eb80fc44c74ce3fce0ee94e8f9d # v3.29.5
dependabot.yml content
version: 2
updates:
- package-ecosystem: "github-actions"
directory: "/"
schedule:
interval: "daily"
# check at 3am UTC
time: "03:00"
open-pull-requests-limit: 20
Updated dependency
No response
What you expected to see, versus what you actually saw
For the pull request chore(deps): bump github/codeql-action from 3.30.0 to 3.30.1
I got the following diff
- uses: github/codeql-action/upload-sarif@2d92b76c45b91eb80fc44c74ce3fce0ee94e8f9d # v3.29.5
+ uses: github/codeql-action/upload-sarif@f1f6e5f6af878fb37288ce1c627459e94dbf7d01 # v3.29.5
But I expected, the following
- uses: github/codeql-action/upload-sarif@2d92b76c45b91eb80fc44c74ce3fce0ee94e8f9d # v3.29.5
+ uses: github/codeql-action/upload-sarif@f1f6e5f6af878fb37288ce1c627459e94dbf7d01 # v3.30.1
The version comment is not updated.
Native package manager behavior
N/A
Images of the diff or a link to the PR, issue, or logs
podman-desktop/podman-desktop#13832
Smallest manifest that reproduces the issue
version: 2
updates:
- package-ecosystem: "github-actions"
directory: "/"
schedule:
interval: "daily"
landongrindheim
Metadata
Metadata
Assignees
Labels
Type
Projects
Status
No status