Skip to content

chore(deps): pin dependencies#160

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate-main/github-actions
Open

chore(deps): pin dependencies#160
renovate[bot] wants to merge 1 commit into
mainfrom
renovate-main/github-actions

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate Bot commented Apr 24, 2026

This PR contains the following updates:

Package Type Update Change Pending
Netcracker/qubership-core-infra action pinDigest bc2a0bd
actions/cache action pinDigest 27d5ce7
actions/checkout action pinDigest de0fac2
exadmin/ai-review action pinDigest 0818142
lycheeverse/lychee-action action pinDigest 8646ba3
netcracker/qubership-workflow-hub action patch 2.2.0v2.2.2 v2.3.0
netcracker/qubership-workflow-hub action patch v2.2.0v2.2.2 v2.3.0
webiny/action-conventional-commits action minor v1.3.1v1.4.2

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

netcracker/qubership-workflow-hub (netcracker/qubership-workflow-hub)

v2.2.2: 2.2.2

Compare Source

🚀 Release
What's Changed
💡 New Features
📝 Documentation

Full Changelog: Netcracker/qubership-workflow-hub@v2.2.1...v2.2.2

v2.2.1: 2.2.1

Compare Source

🚀 Release
What's Changed
  • (#​695) chore(deps-dev): bump esbuild from 0.27.4 to 0.27.7 in /actions/custom-event by @​dependabot[bot]
  • (#​694) chore(deps-dev): bump esbuild from 0.27.4 to 0.27.7 in /actions/container-package-cleanup by @​dependabot[bot]
  • (#​693) chore(deps-dev): bump esbuild from 0.27.4 to 0.27.7 in /actions/assets-action by @​dependabot[bot]
  • (#​696) chore(deps-dev): bump esbuild from 0.27.4 to 0.27.7 in /actions/metadata-action by @​dependabot[bot]
  • (#​697) chore(deps-dev): bump esbuild from 0.27.4 to 0.27.7 in /actions/pr-assigner by @​dependabot[bot]
  • (#​705) chore(deps): bump aws-actions/configure-aws-credentials from 6.0.0 to 6.1.0 in /.github/workflows by @​dependabot[bot]
  • (#​704) chore(deps): bump docker/login-action from 4.0.0 to 4.1.0 in /.github/workflows by @​dependabot[bot]
  • (#​706) chore(deps): bump actions/upload-pages-artifact from 4.0.0 to 5.0.0 in /actions/cdxgen by @​dependabot[bot]
  • (#​707) chore(deps): bump docker/login-action from 4.0.0 to 4.1.0 in /actions/docker-action by @​dependabot[bot]
  • (#​702) chore(deps): bump github/codeql-action from 4.32.6 to 4.35.1 in /.github/workflows by @​dependabot[bot]
  • (#​699) chore(deps): bump super-linter/super-linter from 8.5.0 to 8.6.0 in /.github/workflows by @​dependabot[bot]
  • (#​701) chore(deps): bump netcracker/qubership-workflow-hub/.github/workflows/release-drafter.yml from 2.1.2 to 2.2.0 in /.github/workflows by @​dependabot[bot]
  • (#​700) chore(deps): bump netcracker/qubership-workflow-hub/.github/workflows/re-security-scan.yml from 2.1.2 to 2.2.0 in /.github/workflows by @​dependabot[bot]
  • (#​698) chore(deps): bump Netcracker/qubership-workflow-hub from 1.0.7 to 2.2.0 in /.github/workflows by @​dependabot[bot]
  • (#​690) chore(deps): bump lodash from 4.17.23 to 4.18.1 in /actions/assets-action in the npm_and_yarn group across 1 directory by @​dependabot[bot]
  • (#​689) chore(deps): bump azure/setup-helm from 4.3.1 to 5.0.0 in /actions/charts-values-update-action by @​dependabot[bot]
  • (#​688) chore(deps): bump actions/setup-go from 6.3.0 to 6.4.0 in /.github/workflows by @​dependabot[bot]
  • (#​687) chore(deps): bump anchore/scan-action from 7.3.2 to 7.4.0 in /.github/workflows by @​dependabot[bot]
  • (#​686) chore(deps): bump azure/setup-helm from 4.3.1 to 5.0.0 in /.github/workflows by @​dependabot[bot]
  • (#​681) chore(deps): bump the npm_and_yarn group across 1 directory with 1 update by @​dependabot[bot]
💡 New Features
  • (#​711) feat(actions/k8s-hardening-scan): add Kubernetes container hardening scan action by @​nookyo
  • (#​710) feat(.claude): add markdown and zizmor skills with pre-flight audit in pull-request by @​nookyo

Full Changelog: Netcracker/qubership-workflow-hub@v2.2.0...v2.2.1

webiny/action-conventional-commits (webiny/action-conventional-commits)

v1.4.2

Compare Source

v1.4.1

Compare Source

v1.4.0

Compare Source


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot requested a review from lis0x90 as a code owner April 24, 2026 10:34
@renovate renovate Bot changed the title chore(deps): update webiny/action-conventional-commits action to v1.4.2 chore(deps): update github-actions Apr 27, 2026
@renovate renovate Bot force-pushed the renovate-main/github-actions branch 5 times, most recently from 9d172db to 79890d4 Compare May 1, 2026 19:55
@renovate renovate Bot force-pushed the renovate-main/github-actions branch 3 times, most recently from 83a8e4b to 6ba5520 Compare May 7, 2026 11:59
@sonarqubecloud
Copy link
Copy Markdown

sonarqubecloud Bot commented May 7, 2026

@renovate renovate Bot force-pushed the renovate-main/github-actions branch 2 times, most recently from 9f8f7d9 to 5a3a595 Compare May 8, 2026 13:54
@renovate renovate Bot force-pushed the renovate-main/github-actions branch from 5a3a595 to e912519 Compare May 22, 2026 00:13
@renovate renovate Bot changed the title chore(deps): update github-actions chore(deps): pin dependencies May 22, 2026
@renovate renovate Bot force-pushed the renovate-main/github-actions branch from e912519 to 483b3c1 Compare May 26, 2026 06:07
@renovate renovate Bot force-pushed the renovate-main/github-actions branch from 483b3c1 to cc0d917 Compare May 26, 2026 22:16
@sonarqubecloud
Copy link
Copy Markdown

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant