chore(deps): bump aws-actions/amazon-ecr-login from 1 to 2 - #325
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps [aws-actions/amazon-ecr-login](https://github.com/aws-actions/amazon-ecr-login) from 1 to 2. - [Release notes](https://github.com/aws-actions/amazon-ecr-login/releases) - [Changelog](https://github.com/aws-actions/amazon-ecr-login/blob/main/CHANGELOG.md) - [Commits](aws-actions/amazon-ecr-login@v1...v2) --- updated-dependencies: - dependency-name: aws-actions/amazon-ecr-login dependency-version: '2' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
dependabot
Bot
added
dependencies
birme
left a comment
birme
left a comment
There was a problem hiding this comment.
daily-backlog-pr Phase 3.5: dependency bump, CI green, within-major/validated — approving and squash-merging.
birme
left a comment
birme
left a comment
There was a problem hiding this comment.
Automated daily-backlog-pr Phase 3.5: orphan dependency bump, diff is a clean minimal version bump, CI green. Approving and merging.
birme
left a comment
birme
left a comment
There was a problem hiding this comment.
daily-backlog-pr Phase 3.5: safe GitHub Actions version bump, CI green, reviewed diff — approving.
|
daily-backlog-pr Phase 3.5: reviewed and approved (safe GitHub Actions version bump, CI green). Note: |
birme
left a comment
birme
left a comment
There was a problem hiding this comment.
LGTM (daily-backlog-pr Phase 3.5, orphan dependabot). Routine GitHub Actions major-version bump touching only CI workflow files; all checks green. No product-code impact.
birme
left a comment
birme
left a comment
There was a problem hiding this comment.
Independent review (daily-backlog-pr Phase 3.5, dependabot orphan PR triage).
Verdict: LGTM
aws-actions/amazon-ecr-loginv1 → v2. CI-only blast radius (deploy pipeline), all 4 checks pass.- Routine, well-understood action bump.
Approved. Leaving the actual merge to a maintainer since it touches the build/deploy pipeline.
birme
left a comment
birme
left a comment
There was a problem hiding this comment.
LGTM — routine CI action major-version bump (GitHub Actions only, no application code). CI green. Diff verified: single uses: version change per workflow step.
birme
left a comment
birme
left a comment
There was a problem hiding this comment.
LGTM (Phase 3.5 orphan review): CI-only bump of aws-actions/amazon-ecr-login v1->v2; standard AWS action, no workflow config change needed. Green CI.
1 participant
Bumps aws-actions/amazon-ecr-login from 1 to 2.
Release notes
Sourced from aws-actions/amazon-ecr-login's releases.
... (truncated)
Changelog
Sourced from aws-actions/amazon-ecr-login's changelog.
Commits
03f1aadchore(release): 2.1.7af990dachore: Update dist (#1250)824b400chore(deps): bump@aws-sdk/client-ecrfrom 3.1106.0 to 3.1111.0 (#1242)12a27d2chore(deps): bump@aws-sdk/credential-providers(#1241)606a5e3chore: Update dist (#1246)7e05affchore(deps-dev): bump@vercel/nccfrom 0.44.1 to 0.45.0 (#1239)b342b60chore(deps-dev): bump globals from 17.9.0 to 17.11.0 (#1240)c2241b0chore(deps): bump@aws-sdk/client-ecr-publicfrom 3.1106.0 to 3.1111.0 (#1238)7fd27f2chore: Update dist (#1236)b4eaaadchore(deps): bump@aws-sdk/client-ecr-publicfrom 3.1097.0 to 3.1106.0 (#1226)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)