Repository navigation
Update github actions (main) (patch) - #277
renovate[bot] wants to merge 1 commit into
Conversation
|
No actionable comments were generated in the recent review.
 |
| Layer / File(s) | Summary |
|---|---|
Update workflow action pins .github/workflows/docs.yaml, .github/workflows/validate-docs.yaml, .github/workflows/scorecards.yml |
The three workflows update the Harden Runner pin to v2.22.3. The Scorecard workflow also updates the CodeQL SARIF upload pin to v4.39.1. |
Estimated code review effort: 1 (Trivial) | ~3 minutes
Change: Other
Suggested reviewers: robnester-rh, cuipinghuo, simonbaird
Merge Risk: 
e4910
-
No actionable merge-blocking risk is identified; the workflow updates are mergeable after normal checks.
Pre-merge checks: 
-
Check name Status Explanation Title check The title accurately identifies a GitHub Actions update and matches the changeset. Description check The description clearly documents the CodeQL and Harden Runner action updates in the changeset. Docstring Coverage No eligible functions found in the changed files. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff with cyclomatic complexity of at least 2. Documentat… Linked Issues check Check skipped because no linked issues were found for this pull request. Out of Scope Changes check Check skipped because no linked issues were found for this pull request. Full details: Docstring Coverage
-
Explanation
No eligible functions found in the changed files. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff with cyclomatic complexity of at least 2. Documentation-only edits and deletions within surviving functions are included; unchanged diff context and fully deleted functions are excluded. Analyzed 0 functions across 0 files. (3 skipped: 3 unsupported.)
-
Finishing Touches
-
Generate unit tests (beta)
-
- Commit to this branch
- Create a new PR
-
|
<!-- fullsend:risk-assessment --> DetailsBot-authored patch bump of github/codeql-action and step-security/harden-runner across 3 CI workflow files (8 lines changed); Tier 1 signals are identical to prior assessment (PROTECTED_PATH_COUNT=3, CI_WORKFLOW_CHANGED=true, bot-authored, small blast radius), yielding composite 0.62×1.875 + 0.38×1.43 = 1.71, rounded to 2 (moderate), unchanged from prior score. Previous run<!-- fullsend:risk-assessment --> DetailsBot-authored patch bump of github/codeql-action and step-security/harden-runner across 3 CI workflow files (8 lines changed); PROTECTED_PATH_COUNT=3 and CI_WORKFLOW_CHANGED=true elevate Tier 1 to 1.875, offset by bot authorship and minimal blast radius, yielding 0.62x1.875 + 0.38x1.57 = 1.76, rounded to 2 (moderate), unchanged from prior assessment. Previous run (2)<!-- fullsend:risk-assessment --> DetailsBot-authored patch bump of step-security/harden-runner across 3 CI workflow files (6 lines changed); PROTECTED_PATH_COUNT and CI_WORKFLOW_CHANGED elevate Tier 1 but the change is routine and low-complexity, yielding a composite of 0.62×1.875 + 0.38×1.43 ≈ 1.71, rounded to 2 (moderate). |
ReviewFindingsHigh
Next steps:
<!-- fullsend:review-findings-v2:eyJ2ZXJzaW9uIjoyLCJmaW5kaW5ncyI6W119 --> Previous runReviewFindingsHigh
Next steps:
<!-- fullsend:review-findings-v2:eyJ2ZXJzaW9uIjoyLCJmaW5kaW5ncyI6W119 --> Previous run (2)ReviewFindingsHigh
Labels: PR updates a GitHub Actions dependency (step-security/harden-runner) via Renovate. Next steps:
<!-- fullsend:review-findings-v2:eyJ2ZXJzaW9uIjoyLCJmaW5kaW5ncyI6W119 --> |
![fullsend-ai-review[bot]](https://avatars.githubusercontent.com/in/3478501?s=60&v=4){kind=small}
This comment was marked as outdated.
This comment was marked as outdated.
Sorry, something went wrong.
fullsend-ai-review
Bot
added
dependencies
de4bc67 to
7035872
Compare
renovate
Bot
changed the title
This comment was marked as outdated.
This comment was marked as outdated.
Sorry, something went wrong.
7035872 to
e491069
Compare
This PR contains the following updates:
v4.39.0→v4.39.1v2.22.1→v2.22.3Release Notes
github/codeql-action
v4.39.1Compare Source
step-security/harden-runner
v2.22.3Compare Source
What's Changed
Full Changelog: step-security/harden-runner@v2.22.2...v2.22.3
v2.22.2Compare Source
What's Changed
Full Changelog: step-security/harden-runner@v2.22.1...v2.22.2
Configuration
📅 Schedule: (UTC)
* 0-3 * * *)🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.