Skip to content

chore: bump the stella-shared group across 1 directory with 5 updates - #280

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/stella-shared-8e3ecfa57d
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/stella-shared-8e3ecfa57d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 26, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the stella-shared group with 5 updates in the / directory:

Package From To
stella/.github/.github/workflows/dependabot-bun-dedupe.yml 5764ab66e4df84cfd2e642c7d7e4678261e668f8 38c67ddd7ca18eec2996f4c2e5b99e5cd80def08
stella/.github/.github/workflows/cla.yml 8f19eb7220047e5b06f6e75f0b9f908bfd01f5f6 38c67ddd7ca18eec2996f4c2e5b99e5cd80def08
stella/.github/.github/workflows/quarantine-policy.yml df2659b7ccaa9cb69e69a99787fd4e2180db5893 38c67ddd7ca18eec2996f4c2e5b99e5cd80def08
stella/.github/.github/workflows/quarantine-prune.yml df2659b7ccaa9cb69e69a99787fd4e2180db5893 38c67ddd7ca18eec2996f4c2e5b99e5cd80def08
stella/.github/.github/workflows/changeset-release-pr.yml 5764ab66e4df84cfd2e642c7d7e4678261e668f8 38c67ddd7ca18eec2996f4c2e5b99e5cd80def08

Updates stella/.github/.github/workflows/dependabot-bun-dedupe.yml from 5764ab66e4df84cfd2e642c7d7e4678261e668f8 to 38c67ddd7ca18eec2996f4c2e5b99e5cd80def08

Commits
  • 38c67dd chore: refresh shared workflow dependencies (#181)
  • 04c86bb fix(ci): drop compiler parity from the Rust NAPI typecheck job (#179)
  • 12eb83b feat(quarantine): cover additional Bun install roots (#177)
  • a981503 fix(ci): check out the base lockfile for the cargo-deny advisories gate (#176)
  • c6f35c0 feat(quarantine): accept first-party crates pinned to a stella commit (#175)
  • 8402d11 feat(ci): gate pull requests on advisories their lockfile change introduces (...
  • df2659b fix(quarantine): prune daily without artifacts using a repository-scoped toke...
  • 3df309c feat(quarantine): cover pnpm, Cargo and dependency install scripts (#172)
  • 0dbf135 feat(ci): refuse local copies of externally published packages (#167)
  • fd74dc0 feat(repo-standard): check release app value access for releasing repositorie...
  • Additional commits viewable in compare view

Updates stella/.github/.github/workflows/cla.yml from 8f19eb7220047e5b06f6e75f0b9f908bfd01f5f6 to 38c67ddd7ca18eec2996f4c2e5b99e5cd80def08

Commits
  • 38c67dd chore: refresh shared workflow dependencies (#181)
  • 04c86bb fix(ci): drop compiler parity from the Rust NAPI typecheck job (#179)
  • 12eb83b feat(quarantine): cover additional Bun install roots (#177)
  • a981503 fix(ci): check out the base lockfile for the cargo-deny advisories gate (#176)
  • c6f35c0 feat(quarantine): accept first-party crates pinned to a stella commit (#175)
  • 8402d11 feat(ci): gate pull requests on advisories their lockfile change introduces (...
  • df2659b fix(quarantine): prune daily without artifacts using a repository-scoped toke...
  • 3df309c feat(quarantine): cover pnpm, Cargo and dependency install scripts (#172)
  • 0dbf135 feat(ci): refuse local copies of externally published packages (#167)
  • fd74dc0 feat(repo-standard): check release app value access for releasing repositorie...
  • Additional commits viewable in compare view

Updates stella/.github/.github/workflows/quarantine-policy.yml from df2659b7ccaa9cb69e69a99787fd4e2180db5893 to 38c67ddd7ca18eec2996f4c2e5b99e5cd80def08

Commits
  • 38c67dd chore: refresh shared workflow dependencies (#181)
  • 04c86bb fix(ci): drop compiler parity from the Rust NAPI typecheck job (#179)
  • 12eb83b feat(quarantine): cover additional Bun install roots (#177)
  • a981503 fix(ci): check out the base lockfile for the cargo-deny advisories gate (#176)
  • c6f35c0 feat(quarantine): accept first-party crates pinned to a stella commit (#175)
  • 8402d11 feat(ci): gate pull requests on advisories their lockfile change introduces (...
  • See full diff in compare view

Updates stella/.github/.github/workflows/quarantine-prune.yml from df2659b7ccaa9cb69e69a99787fd4e2180db5893 to 38c67ddd7ca18eec2996f4c2e5b99e5cd80def08

Commits
  • 38c67dd chore: refresh shared workflow dependencies (#181)
  • 04c86bb fix(ci): drop compiler parity from the Rust NAPI typecheck job (#179)
  • 12eb83b feat(quarantine): cover additional Bun install roots (#177)
  • a981503 fix(ci): check out the base lockfile for the cargo-deny advisories gate (#176)
  • c6f35c0 feat(quarantine): accept first-party crates pinned to a stella commit (#175)
  • 8402d11 feat(ci): gate pull requests on advisories their lockfile change introduces (...
  • See full diff in compare view

Updates stella/.github/.github/workflows/changeset-release-pr.yml from 5764ab66e4df84cfd2e642c7d7e4678261e668f8 to 38c67ddd7ca18eec2996f4c2e5b99e5cd80def08

Commits
  • 38c67dd chore: refresh shared workflow dependencies (#181)
  • 04c86bb fix(ci): drop compiler parity from the Rust NAPI typecheck job (#179)
  • 12eb83b feat(quarantine): cover additional Bun install roots (#177)
  • a981503 fix(ci): check out the base lockfile for the cargo-deny advisories gate (#176)
  • c6f35c0 feat(quarantine): accept first-party crates pinned to a stella commit (#175)
  • 8402d11 feat(ci): gate pull requests on advisories their lockfile change introduces (...
  • df2659b fix(quarantine): prune daily without artifacts using a repository-scoped toke...
  • 3df309c feat(quarantine): cover pnpm, Cargo and dependency install scripts (#172)
  • 0dbf135 feat(ci): refuse local copies of externally published packages (#167)
  • fd74dc0 feat(repo-standard): check release app value access for releasing repositorie...
  • Additional commits viewable in compare view

@github-actions

github-actions Bot commented Oct 26, 2026 •

Copy link
Copy Markdown
Contributor

Dependency Review

The following issues were found:
  • ✅ 0 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ⚠️ 1 package(s) with unknown licenses.
See the Details below.

License Issues

.github/workflows/release-pr.yml

PackageVersionLicenseIssue Type
stella/.github/.github/workflows/changeset-release-pr.yml38c67ddd7ca18eec2996f4c2e5b99e5cd80def08NullUnknown License
Allowed Licenses: MIT, Apache-2.0, Apache-2.0 WITH LLVM-exception, BSD-2-Clause, BSD-3-Clause, ISC, 0BSD, BlueOak-1.0.0, Unlicense, CC0-1.0, CC-BY-4.0, MIT-0, MPL-2.0, Python-2.0, Zlib, Unicode-3.0
Excluded from license check: pkg:cargo/libfuzzer-sys

OpenSSF Scorecard

PackageVersionScoreDetails
actions/stella/.github/.github/workflows/changeset-release-pr.yml 38c67ddd7ca18eec2996f4c2e5b99e5cd80def08 UnknownUnknown

Scanned Files

  • .github/workflows/release-pr.yml

Bumps the stella-shared group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [stella/.github/.github/workflows/dependabot-bun-dedupe.yml](https://github.com/stella/.github) | `5764ab66e4df84cfd2e642c7d7e4678261e668f8` | `38c67ddd7ca18eec2996f4c2e5b99e5cd80def08` |
| [stella/.github/.github/workflows/cla.yml](https://github.com/stella/.github) | `8f19eb7220047e5b06f6e75f0b9f908bfd01f5f6` | `38c67ddd7ca18eec2996f4c2e5b99e5cd80def08` |
| [stella/.github/.github/workflows/quarantine-policy.yml](https://github.com/stella/.github) | `df2659b7ccaa9cb69e69a99787fd4e2180db5893` | `38c67ddd7ca18eec2996f4c2e5b99e5cd80def08` |
| [stella/.github/.github/workflows/quarantine-prune.yml](https://github.com/stella/.github) | `df2659b7ccaa9cb69e69a99787fd4e2180db5893` | `38c67ddd7ca18eec2996f4c2e5b99e5cd80def08` |
| [stella/.github/.github/workflows/changeset-release-pr.yml](https://github.com/stella/.github) | `5764ab66e4df84cfd2e642c7d7e4678261e668f8` | `38c67ddd7ca18eec2996f4c2e5b99e5cd80def08` |



Updates `stella/.github/.github/workflows/dependabot-bun-dedupe.yml` from 5764ab66e4df84cfd2e642c7d7e4678261e668f8 to 38c67ddd7ca18eec2996f4c2e5b99e5cd80def08
- [Release notes](https://github.com/stella/.github/releases)
- [Commits](stella/.github@5764ab6...38c67dd)

Updates `stella/.github/.github/workflows/cla.yml` from 8f19eb7220047e5b06f6e75f0b9f908bfd01f5f6 to 38c67ddd7ca18eec2996f4c2e5b99e5cd80def08
- [Release notes](https://github.com/stella/.github/releases)
- [Commits](stella/.github@8f19eb7...38c67dd)

Updates `stella/.github/.github/workflows/quarantine-policy.yml` from df2659b7ccaa9cb69e69a99787fd4e2180db5893 to 38c67ddd7ca18eec2996f4c2e5b99e5cd80def08
- [Release notes](https://github.com/stella/.github/releases)
- [Commits](stella/.github@df2659b...38c67dd)

Updates `stella/.github/.github/workflows/quarantine-prune.yml` from df2659b7ccaa9cb69e69a99787fd4e2180db5893 to 38c67ddd7ca18eec2996f4c2e5b99e5cd80def08
- [Release notes](https://github.com/stella/.github/releases)
- [Commits](stella/.github@df2659b...38c67dd)

Updates `stella/.github/.github/workflows/changeset-release-pr.yml` from 5764ab66e4df84cfd2e642c7d7e4678261e668f8 to 38c67ddd7ca18eec2996f4c2e5b99e5cd80def08
- [Release notes](https://github.com/stella/.github/releases)
- [Commits](stella/.github@5764ab6...38c67dd)

---
updated-dependencies:
- dependency-name: stella/.github/.github/workflows/changeset-release-pr.yml
  dependency-version: 04c86bb54f4ae022354d72f8a40400bc7cf7428c
  dependency-type: direct:production
  dependency-group: stella-shared
- dependency-name: stella/.github/.github/workflows/cla.yml
  dependency-version: 04c86bb54f4ae022354d72f8a40400bc7cf7428c
  dependency-type: direct:production
  dependency-group: stella-shared
- dependency-name: stella/.github/.github/workflows/dependabot-bun-dedupe.yml
  dependency-version: 04c86bb54f4ae022354d72f8a40400bc7cf7428c
  dependency-type: direct:production
  dependency-group: stella-shared
- dependency-name: stella/.github/.github/workflows/quarantine-policy.yml
  dependency-version: 04c86bb54f4ae022354d72f8a40400bc7cf7428c
  dependency-type: direct:production
  dependency-group: stella-shared
- dependency-name: stella/.github/.github/workflows/quarantine-prune.yml
  dependency-version: 04c86bb54f4ae022354d72f8a40400bc7cf7428c
  dependency-type: direct:production
  dependency-group: stella-shared
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore: bump the stella-shared group with 5 updates chore: bump the stella-shared group across 1 directory with 5 updates Oct 28, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/stella-shared-8e3ecfa57d branch from 9be5543 to 698aab9 Compare October 28, 2026 04:51
@dependabot @github

dependabot Bot commented on behalf of github Oct 28, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are no longer updatable, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 28, 2026
@dependabot
dependabot Bot deleted the dependabot/github_actions/stella-shared-8e3ecfa57d branch October 28, 2026 06:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants