Skip to content

Bump qualcomm/qcom-reusable-workflows/.github/workflows/qcom-preflight-checks-reusable-workflow.yml from 1.1.4 to 2.0.1 - #3

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/qualcomm/qcom-reusable-workflows/dot-github/workflows/qcom-preflight-checks-reusable-workflow.yml-2.0.1
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/qualcomm/qcom-reusable-workflows/dot-github/workflows/qcom-preflight-checks-reusable-workflow.yml-2.0.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jan 28, 2026

Copy link
Copy Markdown

Bumps qualcomm/qcom-reusable-workflows/.github/workflows/qcom-preflight-checks-reusable-workflow.yml from 1.1.4 to 2.0.1.

Release notes

Sourced from qualcomm/qcom-reusable-workflows/.github/workflows/qcom-preflight-checks-reusable-workflow.yml's releases.

v2.0.1

What's Changed

Full Changelog: qualcomm/qcom-reusable-workflows@v2...v2.0.1

v2.0.0

What's Changed

New Features

  • Added new commit-msg-checker that enforces consistent commit message formatting for Qualcomm projects
  • Enhanced semgrep functionality with more options for scanning and support for .semgrepignore file
  • Added detailed documentation in the README file for all available options and configurations

Breaking Changes

  • Changed workflow trigger event from pull_request_target to pull_request.
  • Modified workflow input parameter names to use consistent enable- prefix:
    • enable-semgrep-scan (previously semgrep)
    • enable-dependency-review (previously dependency-review)
    • enable-repolinter-check (previously repolinter)
    • enable-copyright-license-check (previously copyright-license-detector)
    • enable-commit-email-check (previously pr-check-emails)
    • enable-commit-msg-check (new parameter)
  • Removed semgrep token requirement from the workflow configuration
  • Refactored and renamed workflow files

Workflow Changes

The workflow file has been updated to remove the semgrep token requirement. Users no longer need to provide a semgrep token in their workflow configuration.

Enhanced Semgrep Functionality

  • Added support for various semgrep CLI options through the semgrep-cli-options input parameter
  • Added support for .semgrepignore file to exclude files and directories from scanning
  • For more details on available options, please refer to the README file

Documentation and Resources

For detailed information on how to install, configure, and use the qcom-preflight-checks workflow, please refer to:

Migration Guide

If you're using the previous version of the workflow, please update your workflow file qcom-preflight-checks.yml to match the new format:

... (truncated)

Commits
  • b1b33f7 Update workflow reference from v2.0.0 to v2 in README.md (#22)
  • c36b605 fix: upload sarif for public repos only (#21)
  • aca232f docs: enhance README with detailed workflow documentation (#20)
  • 7898b75 Update reusable-copyright-license-check.yml (#19)
  • 26f7484 Add testing example (#18)
  • afafc86 Refactor qcom-preflight-checks (#17)
  • db80747 Run Preflight checks on self (#14)
  • 5e90f5c Migrate from Semgrep Pro Rules to Semgrep Community Edition (#12)
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

…t-checks-reusable-workflow.yml

Bumps [qualcomm/qcom-reusable-workflows/.github/workflows/qcom-preflight-checks-reusable-workflow.yml](https://github.com/qualcomm/qcom-reusable-workflows) from 1.1.4 to 2.0.1.
- [Release notes](https://github.com/qualcomm/qcom-reusable-workflows/releases)
- [Commits](qualcomm/qcom-reusable-workflows@v1.1.4...v2.0.1)

---
updated-dependencies:
- dependency-name: qualcomm/qcom-reusable-workflows/.github/workflows/qcom-preflight-checks-reusable-workflow.yml
  dependency-version: 2.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jan 28, 2026
@dependabot @github

dependabot Bot commented on behalf of github Feb 16, 2026

Copy link
Copy Markdown
Author

Superseded by #4.

@dependabot dependabot Bot closed this Feb 16, 2026
@dependabot
dependabot Bot deleted the dependabot/github_actions/qualcomm/qcom-reusable-workflows/dot-github/workflows/qcom-preflight-checks-reusable-workflow.yml-2.0.1 branch February 16, 2026 17:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants