Closed dependabot[bot] closed 2 weeks ago
This PR updates the dependency-review-action from version 4.3.3 to 4.4.0. The update includes several improvements, with the main focus being a fix for merge_group event handling. The change is implemented through a simple version bump in the workflow configuration file.
No diagrams generated as the changes look simple and do not need a visual representation.
Change | Details | Files |
---|---|---|
Update dependency-review-action version reference |
|
.github/workflows/dependency-review.yml |
Bumps actions/dependency-review-action from 4.3.3 to 4.4.0.
Release notes
Sourced from actions/dependency-review-action's releases.
Commits
4081bf9
Merge pull request #846 from actions/merge-group-bug-fix03e585e
fixing minor typo08b4117
updating dist code9c3441f
updating dist code304a544
updating testse99353b
fixing merge_group schema buga6993e2
Merge pull request #840 from actions/dependabot-updatesd92f08b
Bump eslint-plugin-jest and ts-jest3e334b7
Merge pull request #822 from actions/dependabot/npm_and_yarn/got-14.4.232b7d88
Merge pull request #832 from actions/jonjanego-patch-3Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show
Summary by Sourcery
CI: