chore(deps): update renovatebot/github-action action to v46.1.14 - #1808
Conversation
|
|
Note Gemini is unable to generate a review for this pull request due to the file types involved not being currently supported. |
📝 WalkthroughSummary by CodeRabbit
WalkthroughThe GitHub Actions workflow ChangesRenovate Version Update
Estimated code review effort🎯 1 (Trivial) | ⏱️ ~2 minutes Possibly related PRs
Poem
🚥 Pre-merge checks | ✅ 5✅ Passed checks (5 passed)
✏️ Tip: You can configure your own custom pre-merge checks in the settings. ✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
![coderabbitai[bot]](https://avatars.githubusercontent.com/in/347564?s=60&v=4){kind=small}
There was a problem hiding this comment.
Actionable comments posted: 1
🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Inline comments:
In @.github/workflows/renovate.yml:
- Line 17: Replace the mutable tag reference in the workflow by pinning the
action to an immutable commit SHA: locate the uses entry "uses:
renovatebot/github-action@v46.1.14" and replace the tag with the corresponding
full commit SHA from the renovatebot/github-action repo (e.g.
renovatebot/github-action@<full-commit-sha>), ensuring the SHA you choose
matches the intended release; commit the updated workflow so the action is fixed
to that immutable SHA.
🪄 Autofix (Beta)
Fix all unresolved CodeRabbit comments on this PR:
- Push a commit to this branch (recommended)
- Create a new PR with the fixes
ℹ️ Review info
⚙️ Run configuration
Configuration used: Organization UI
Review profile: CHILL
Plan: Pro
Run ID: 3e36498a-682a-4c5d-9776-fc0739c11d8b
📒 Files selected for processing (1)
.github/workflows/renovate.yml
| uses: actions/checkout@v6 | ||
| - name: Renovate | ||
| uses: renovatebot/github-action@v46.1.13 | ||
| uses: renovatebot/github-action@v46.1.14 |
There was a problem hiding this comment.
🧩 Analysis chain
🏁 Script executed:
#!/bin/bash
set -euo pipefail
echo "Resolve commit SHA for renovatebot/github-action tag v46.1.14"
curl -fsSL https://api.github.com/repos/renovatebot/github-action/git/ref/tags/v46.1.14 | jq -r '.object.sha'
echo
echo "Show all GitHub Action references in workflows and whether they are SHA-pinned"
fd -e yml -e yaml .github/workflows | while read -r f; do
echo "== $f =="
rg -n 'uses:\s*[^ ]+@[^ ]+' "$f" || true
doneRepository: shunkakinoki/dotfiles
Length of output: 640
🏁 Script executed:
cat -n .github/workflows/renovate.yml | head -30Repository: shunkakinoki/dotfiles
Length of output: 1002
Pin the action to an immutable commit SHA instead of a mutable tag.
@v46.1.14 can be retargeted; pinning to a full commit SHA hardens the workflow against supply-chain drift.
Suggested change
- uses: renovatebot/github-action@v46.1.14
+ uses: renovatebot/github-action@693b9ef15eec82123529a37c782242f091365961 # renovatebot/github-action v46.1.14📝 Committable suggestion
‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.
| uses: renovatebot/github-action@v46.1.14 | |
| uses: renovatebot/github-action@693b9ef15eec82123529a37c782242f091365961 # renovatebot/github-action v46.1.14 |
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In @.github/workflows/renovate.yml at line 17, Replace the mutable tag reference
in the workflow by pinning the action to an immutable commit SHA: locate the
uses entry "uses: renovatebot/github-action@v46.1.14" and replace the tag with
the corresponding full commit SHA from the renovatebot/github-action repo (e.g.
renovatebot/github-action@<full-commit-sha>), ensuring the SHA you choose
matches the intended release; commit the updated workflow so the action is fixed
to that immutable SHA.
![cubic-dev-ai[bot]](https://avatars.githubusercontent.com/in/1082092?s=60&v=4){kind=small}
2 participants
This PR contains the following updates:
v46.1.13→v46.1.14Release Notes
renovatebot/github-action (renovatebot/github-action)
v46.1.14Compare Source
Documentation
RENOVATE_PLATFORM_COMMITtoenabled(#1029) (9d07dfa)Miscellaneous Chores
minimumReleaseAge(00a8327)Build System
Continuous Integration
Configuration
📅 Schedule: (in timezone UTC)
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate.
Summary by cubic
Bump
renovatebot/github-actionfrom v46.1.13 to v46.1.14 in.github/workflows/renovate.ymlto keep the Renovate workflow up to date. Patch update only; no behavior changes expected.Written for commit e701499. Summary will update on new commits. Review in cubic