Skip to content

chore(ci)(deps): bump pullfrog/pullfrog from 0.1.95 to 0.1.98 - #299

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/pullfrog/pullfrog-0.1.98
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/pullfrog/pullfrog-0.1.98

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 13, 2026 •

Copy link
Copy Markdown
Contributor

Bumps pullfrog/pullfrog from 0.1.95 to 0.1.98.

Release notes

Sourced from pullfrog/pullfrog's releases.

v0.1.98

📦 pullfrog 0.1.98

Usage in GitHub Actions

- uses: pullfrog/pullfrog@v0

Installation via npm

npm install pullfrog@0.1.98

v0.1.97

📦 pullfrog 0.1.97

Usage in GitHub Actions

- uses: pullfrog/pullfrog@v0

Installation via npm

npm install pullfrog@0.1.97
Commits
  • ad4283a release: bump action to 0.1.98
  • e1f3599 deps: pin claude-code 2.1.293 so the Claude harness knows Haiku 5.5 (#1498)
  • 99490b6 chore(models): bump claude-haiku to Haiku 5.5 (#1494)
  • 5477fb6 models: add Zen's free Step 5 Preview, hidden until a release carries it (#1497)
  • 3379c27 models: retire Fledge Alpha onto Big Pickle (#1496)
  • d561465 models: give openrouter/claude-haiku Haiku 5.5's effort ladder (#1492)
  • 5fe4547 action: add security@pullfrog.com to SECURITY.md
  • d651f20 action: add SECURITY.md pointing to private vulnerability reporting
  • f0684f2 release: bump action to 0.1.97
  • 086a10f fix: 9 unaddressed log-audit / run-audit findings (#1480)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [pullfrog/pullfrog](https://github.com/pullfrog/pullfrog) from 0.1.95 to 0.1.98.
- [Release notes](https://github.com/pullfrog/pullfrog/releases)
- [Commits](pullfrog/pullfrog@ed80001...ad4283a)

---
updated-dependencies:
- dependency-name: pullfrog/pullfrog
  dependency-version: 0.1.98
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 13, 2026
@dependabot @github

dependabot Bot commented on behalf of github Oct 13, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: ci/cd, github-actions. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@github-actions

Copy link
Copy Markdown
Contributor

🔒 Supply Chain Security Review

Check Status
Socket.dev malware scan ✅ success
Vulnerability audit ✅ success
Lockfile diff review ✅ success
OSSF Scorecard ✅ success

This review was automatically generated by the Supply Chain Review workflow.

@dependabot @github

dependabot Bot commented on behalf of github Oct 24, 2026

Copy link
Copy Markdown
Contributor Author

Looks like pullfrog/pullfrog is up-to-date now, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 24, 2026
@dependabot
dependabot Bot deleted the dependabot/github_actions/pullfrog/pullfrog-0.1.98 branch October 24, 2026 04:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants