Skip to content

Conversation

@imnasnainaec
Copy link
Collaborator

@imnasnainaec imnasnainaec commented Nov 3, 2025

This change is Reviewable

dependabot bot and others added 2 commits November 1, 2025 00:30
Bumps the gha-deps group with 15 updates:

| Package | From | To |
| --- | --- | --- |
| [step-security/harden-runner](https://github.com/step-security/harden-runner) | `2.12.2` | `2.13.1` |
| [actions/checkout](https://github.com/actions/checkout) | `4.2.2` | `5.0.0` |
| [actions/setup-dotnet](https://github.com/actions/setup-dotnet) | `4.3.1` | `5.0.0` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4.6.2` | `5.0.0` |
| [actions/download-artifact](https://github.com/actions/download-artifact) | `4.3.0` | `6.0.0` |
| [codecov/codecov-action](https://github.com/codecov/codecov-action) | `5.4.3` | `5.5.1` |
| [github/codeql-action](https://github.com/github/codeql-action) | `3.29.2` | `4.31.2` |
| [aws-actions/configure-aws-credentials](https://github.com/aws-actions/configure-aws-credentials) | `4.2.1` | `5.1.0` |
| [docker/login-action](https://github.com/docker/login-action) | `3.4.0` | `3.6.0` |
| [sillsdev/FieldWorks](https://github.com/sillsdev/fieldworks) | `9f4a532c23e19b5ad450375276c024109a741705` | `691f8ebda6fb6fa9d353f8389797553ec1f37db9` |
| [actions/dependency-review-action](https://github.com/actions/dependency-review-action) | `4.7.1` | `4.8.1` |
| [actions/setup-node](https://github.com/actions/setup-node) | `4.4.0` | `6.0.0` |
| [actions/labeler](https://github.com/actions/labeler) | `5` | `6` |
| [actions/setup-python](https://github.com/actions/setup-python) | `5.6.0` | `6.0.0` |
| [ossf/scorecard-action](https://github.com/ossf/scorecard-action) | `2.4.2` | `2.4.3` |


Updates `step-security/harden-runner` from 2.12.2 to 2.13.1
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](step-security/harden-runner@6c439dc...f4a75cf)

Updates `actions/checkout` from 4.2.2 to 5.0.0
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@11bd719...08c6903)

Updates `actions/setup-dotnet` from 4.3.1 to 5.0.0
- [Release notes](https://github.com/actions/setup-dotnet/releases)
- [Commits](actions/setup-dotnet@67a3573...d4c9434)

Updates `actions/upload-artifact` from 4.6.2 to 5.0.0
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@ea165f8...330a01c)

Updates `actions/download-artifact` from 4.3.0 to 6.0.0
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](actions/download-artifact@d3f86a1...018cc2c)

Updates `codecov/codecov-action` from 5.4.3 to 5.5.1
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](codecov/codecov-action@18283e0...5a10915)

Updates `github/codeql-action` from 3.29.2 to 4.31.2
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@181d5ee...0499de3)

Updates `aws-actions/configure-aws-credentials` from 4.2.1 to 5.1.0
- [Release notes](https://github.com/aws-actions/configure-aws-credentials/releases)
- [Changelog](https://github.com/aws-actions/configure-aws-credentials/blob/main/CHANGELOG.md)
- [Commits](aws-actions/configure-aws-credentials@b475783...0094301)

Updates `docker/login-action` from 3.4.0 to 3.6.0
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](docker/login-action@74a5d14...5e57cd1)

Updates `sillsdev/FieldWorks` from 9f4a532c23e19b5ad450375276c024109a741705 to 691f8ebda6fb6fa9d353f8389797553ec1f37db9
- [Release notes](https://github.com/sillsdev/fieldworks/releases)
- [Commits](sillsdev/FieldWorks@9f4a532...691f8eb)

Updates `actions/dependency-review-action` from 4.7.1 to 4.8.1
- [Release notes](https://github.com/actions/dependency-review-action/releases)
- [Commits](actions/dependency-review-action@da24556...40c09b7)

Updates `actions/setup-node` from 4.4.0 to 6.0.0
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@49933ea...2028fbc)

Updates `actions/labeler` from 5 to 6
- [Release notes](https://github.com/actions/labeler/releases)
- [Commits](actions/labeler@v5...v6)

Updates `actions/setup-python` from 5.6.0 to 6.0.0
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](actions/setup-python@a26af69...e797f83)

Updates `ossf/scorecard-action` from 2.4.2 to 2.4.3
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](ossf/scorecard-action@05b42c6...4eaacf0)

---
updated-dependencies:
- dependency-name: step-security/harden-runner
  dependency-version: 2.13.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gha-deps
- dependency-name: actions/checkout
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gha-deps
- dependency-name: actions/setup-dotnet
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gha-deps
- dependency-name: actions/upload-artifact
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gha-deps
- dependency-name: actions/download-artifact
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gha-deps
- dependency-name: codecov/codecov-action
  dependency-version: 5.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gha-deps
- dependency-name: github/codeql-action
  dependency-version: 4.31.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gha-deps
- dependency-name: aws-actions/configure-aws-credentials
  dependency-version: 5.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gha-deps
- dependency-name: docker/login-action
  dependency-version: 3.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gha-deps
- dependency-name: sillsdev/FieldWorks
  dependency-version: 691f8ebda6fb6fa9d353f8389797553ec1f37db9
  dependency-type: direct:production
  dependency-group: gha-deps
- dependency-name: actions/dependency-review-action
  dependency-version: 4.8.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gha-deps
- dependency-name: actions/setup-node
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gha-deps
- dependency-name: actions/labeler
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gha-deps
- dependency-name: actions/setup-python
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gha-deps
- dependency-name: ossf/scorecard-action
  dependency-version: 2.4.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gha-deps
...

Signed-off-by: dependabot[bot] <[email protected]>
@imnasnainaec imnasnainaec self-assigned this Nov 3, 2025
@imnasnainaec imnasnainaec added the 🟨Medium Medium-priority PR label Nov 3, 2025
@github-actions github-actions bot added the github_actions Pull requests that update GitHub Actions code label Nov 3, 2025
@github-actions
Copy link

github-actions bot commented Nov 3, 2025

⚠️ Commit Message Format Issues ⚠️

commit 746b7c490d:
7: B1 Line exceeds max length (103>80): "| step-security/harden-runner | 2.12.2 | 2.13.1 |"
9: B1 Line exceeds max length (87>80): "| actions/setup-dotnet | 4.3.1 | 5.0.0 |"
10: B1 Line exceeds max length (93>80): "| actions/upload-artifact | 4.6.2 | 5.0.0 |"
11: B1 Line exceeds max length (97>80): "| actions/download-artifact | 4.3.0 | 6.0.0 |"
12: B1 Line exceeds max length (91>80): "| codecov/codecov-action | 5.4.3 | 5.5.1 |"
13: B1 Line exceeds max length (89>80): "| github/codeql-action | 3.29.2 | 4.31.2 |"
14: B1 Line exceeds max length (121>80): "| aws-actions/configure-aws-credentials | 4.2.1 | 5.1.0 |"
15: B1 Line exceeds max length (85>80): "| docker/login-action | 3.4.0 | 3.6.0 |"
16: B1 Line exceeds max length (155>80): "| sillsdev/FieldWorks | 9f4a532c23e19b5ad450375276c024109a741705 | 691f8ebda6fb6fa9d353f8389797553ec1f37db9 |"
17: B1 Line exceeds max length (111>80): "| actions/dependency-review-action | 4.7.1 | 4.8.1 |"
18: B1 Line exceeds max length (83>80): "| actions/setup-node | 4.4.0 | 6.0.0 |"
20: B1 Line exceeds max length (87>80): "| actions/setup-python | 5.6.0 | 6.0.0 |"
21: B1 Line exceeds max length (89>80): "| ossf/scorecard-action | 2.4.2 | 2.4.3 |"
26: B1 Line exceeds max length (151>80): "- Commits"
31: B1 Line exceeds max length (140>80): "- Commits"
35: B1 Line exceeds max length (144>80): "- Commits"
39: B1 Line exceeds max length (147>80): "- Commits"
43: B1 Line exceeds max length (149>80): "- Commits"
48: B1 Line exceeds max length (146>80): "- Commits"
53: B1 Line exceeds max length (144>80): "- Commits"
56: B1 Line exceeds max length (84>80): "- Release notes"
57: B1 Line exceeds max length (94>80): "- Changelog"
58: B1 Line exceeds max length (161>80): "- Commits"
62: B1 Line exceeds max length (143>80): "- Commits"
64: B1 Line exceeds max length (119>80): "Updates sillsdev/FieldWorks from 9f4a532c23e19b5ad450375276c024109a741705 to 691f8ebda6fb6fa9d353f8389797553ec1f37db9"
66: B1 Line exceeds max length (143>80): "- Commits"
70: B1 Line exceeds max length (156>80): "- Commits"
74: B1 Line exceeds max length (142>80): "- Commits"
82: B1 Line exceeds max length (144>80): "- Commits"
87: B1 Line exceeds max length (145>80): "- Commits"

@imnasnainaec imnasnainaec added the dependencies Pull requests that update a dependency file label Nov 3, 2025
@codecov
Copy link

codecov bot commented Nov 3, 2025

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 74.40%. Comparing base (518adb0) to head (88d62c2).
⚠️ Report is 1 commits behind head on master.

Additional details and impacted files
@@           Coverage Diff           @@
##           master    #4000   +/-   ##
=======================================
  Coverage   74.40%   74.40%           
=======================================
  Files         291      291           
  Lines       10790    10790           
  Branches     1351     1351           
=======================================
  Hits         8028     8028           
  Misses       2373     2373           
  Partials      389      389           
Flag Coverage Δ
backend 85.45% <ø> (ø)
frontend 65.86% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

Copy link
Contributor

@jasonleenaylor jasonleenaylor left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

:lgtm:

@jasonleenaylor reviewed 14 of 14 files at r1, all commit messages.
Reviewable status: :shipit: complete! all files reviewed, all discussions resolved (waiting on @imnasnainaec)

@imnasnainaec imnasnainaec merged commit 9d10a93 into master Nov 3, 2025
18 of 19 checks passed
@imnasnainaec imnasnainaec deleted the gha-deps-2025-11 branch November 3, 2025 19:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code 🟨Medium Medium-priority PR

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants