Skip to content

chore(deps): bump dorny/paths-filter from 4.0.2 to 4.0.3 - #624

Merged
goosewobbler merged 1 commit into
mainfrom
dependabot/github_actions/dorny/paths-filter-4.0.3
Oct 9, 2026
Merged

goosewobbler merged 1 commit into
mainfrom
dependabot/github_actions/dorny/paths-filter-4.0.3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 10, 2026 •

Copy link
Copy Markdown
Contributor

Bumps dorny/paths-filter from 4.0.2 to 4.0.3.

Release notes

Sourced from dorny/paths-filter's releases.

v4.0.3

What's Changed

Security

New Contributors

Full Changelog: dorny/paths-filter@v4...v4.0.3

Changelog

Sourced from dorny/paths-filter's changelog.

Changelog

v4.0.3

v4.0.2

v4.0.1

v4.0.0

v3.0.4

v3.0.3

v3.0.2

v3.0.1

v3.0.0

v2.11.1

v2.11.0

v2.10.2

... (truncated)

Commits
  • ceb8a2b Update CHANGELOG.md for v4.0.3 and v3.0.4 (#327)
  • ef09b88 Document safe handling of file list outputs in workflows (#326)
  • 44adc5b Merge commit from fork
  • 4711b7a feat: add 'some-with-excludes' predicate quantifier (#322)
  • 93c889f fix: escape multi-line filenames in list-files shell and csv output
  • b41dfa9 docs: add contents permission to PR example (#248)
  • 9af6e5a fix: scope base-ignored warning to API path (#319)
  • cae9006 docs: update outputs in readme to account for the 'every' predicate-quantifie...
  • See full diff in compare view

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Greptile Summary

Updates the commit-pinned dorny/paths-filter GitHub Action from v4.0.2 to v4.0.3.

  • Retains immutable commit pinning.
  • Incorporates the upstream patch release, including its multiline-filename output security fix.

Confidence Score: 5/5

The PR appears safe to merge because the patch upgrade preserves the workflow’s existing change-detection contract.

The workflow consumes only boolean filter outputs and does not use the list-files or predicate-quantifier behaviors changed in v4.0.3, so no blocking or non-blocking defect remains.

Important Files Changed

Filename Overview
.github/workflows/_ci-detect-changes.reusable.yml Safely updates the paths-filter action revision without changing workflow inputs, filters, or output consumption.

Reviews (1): Last reviewed commit: "chore(deps): bump dorny/paths-filter fro..." | Re-trigger Greptile

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

Bumps [dorny/paths-filter](https://github.com/dorny/paths-filter) from 4.0.2 to 4.0.3.
- [Release notes](https://github.com/dorny/paths-filter/releases)
- [Changelog](https://github.com/dorny/paths-filter/blob/master/CHANGELOG.md)
- [Commits](dorny/paths-filter@7b450ff...ceb8a2b)

---
updated-dependencies:
- dependency-name: dorny/paths-filter
  dependency-version: 4.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the area:dependencies Updating dependencies label Aug 10, 2026
@github-actions

Copy link
Copy Markdown
Contributor

Standing release PR: #614 · v0.42.0 queued (4 packages) · open 8d 11h 18m · ✅ ready to merge

Release Preview — v0.41.2 → v0.41.3

Note: Labels on this PR are advisory in standing-pr mode. Bumps come from conventional commits in the standing PR; override by editing labels on the standing PR itself. Add release:immediate to bypass the standing PR and release this PR directly.

These changes will be added to the release PR (#614) when merged:

Changelog

monorepo 0.41.2 → 0.41.3

Changed

  • bump dorny/paths-filter from 4.0.2 to 4.0.3 (deps)

All packages → 0.41.3 (sync versioning)

  • @releasekit/version
  • @releasekit/notes
  • @releasekit/publish
  • @releasekit/release

After merge — predicted release

No version escalation — this PR's changes will be included in the queued release without affecting the projected versions.

Package Standing PR This PR After merge
monorepo 0.42.0 0.41.3 0.42.0

Updated automatically by ReleaseKit

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area:dependencies Updating dependencies

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant