Repository navigation
chore(deps): bump googleapis/release-please-action from 4.4.1 to 5.0.0 in the github-actions group - #3
Conversation
Bumps the github-actions group with 1 update: [googleapis/release-please-action](https://github.com/googleapis/release-please-action). Updates `googleapis/release-please-action` from 4.4.1 to 5.0.0 - [Release notes](https://github.com/googleapis/release-please-action/releases) - [Changelog](https://github.com/googleapis/release-please-action/blob/main/CHANGELOG.md) - [Commits](googleapis/release-please-action@5c625bf...45996ed) --- updated-dependencies: - dependency-name: googleapis/release-please-action dependency-version: 5.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
![ecomwizards-gandalf[bot]](https://avatars.githubusercontent.com/u/86711023?s=60&v=4){kind=small}
There was a problem hiding this comment.
Independent snapshot review of f8a766accbf7...58d56b104f3a in mikomiel/privilege-broker by pi on codex-lb (gpt-6.1-sol).
Verdict: APPROVE
Reviewer output
Findings
No concrete reachable failures found in the supplied diff.
At .github/workflows/release-please.yml:40, the only change replaces the release-please action’s full commit SHA and version comment. The surrounding configuration remains unchanged:
- Uses the GitHub-hosted
ubuntu-24.04runner; no repository-local Node version needs updating. - Preserves
skip-github-release: true, the documented publication boundary. - Preserves the existing triggers, branch guard, permissions and token reference.
- Adds no secret values or PR-head code execution.
- Remains a focused dependency update with a full 40-character SHA pin.
The supplied PR title follows Conventional Commits. Existing assertions in tests/test_workflow_policy.py check SHA pinning, release workflow configuration and the publication gate; this change does not require altering those behavioural expectations.
Optional suggestions
None.
Validation and limitations
Read the complete supplied diff, the changed workflow, release configuration, relevant workflow tests and repository standards.
No tests, commands or GitHub Actions runs were executed. The upstream action source was not available in the supplied checkout, so I did not independently verify its implementation, the SHA-to-version correspondence, or upstream release-note claims. Commit messages and linked issue #15 were not inspected.
VERDICT: APPROVE
Evidence: not written. This review is evidence, not merge authorization.
Bumps the github-actions group with 1 update: googleapis/release-please-action.
Updates
googleapis/release-please-actionfrom 4.4.1 to 5.0.0Release notes
Sourced from googleapis/release-please-action's releases.
Changelog
Sourced from googleapis/release-please-action's changelog.
... (truncated)
Commits
45996edchore(main): release 5.0.0 (#1200)a8121b9chore: build dist (#1201)f533c26fix: bump release-please from 17.3.0 to 17.6.0 (#1199)46dfc01feat!: upgrade to node24 (#1188)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditionsLinked issue
Closes #15