From caac3f1e5f88bededb181c5348446a4c8df5b781 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 8 Sep 2026 17:24:25 +0000 Subject: [PATCH] build: bump the github-actions group with 3 updates Bumps the github-actions group with 3 updates: [melodic-software/ci-workflows/.github/actions/pr-contract](https://github.com/melodic-software/ci-workflows), [melodic-software/ci-workflows/.github/actions/ci-status](https://github.com/melodic-software/ci-workflows) and [melodic-software/ci-workflows/.github/actions/managed-files-guard](https://github.com/melodic-software/ci-workflows). Updates `melodic-software/ci-workflows/.github/actions/pr-contract` from 0.22.2 to 0.24.0 - [Release notes](https://github.com/melodic-software/ci-workflows/releases) - [Commits](https://github.com/melodic-software/ci-workflows/compare/5776760254f8b63cba44e896f51604cb755350d9...2c1de45aa0e1b1489afb8edfebc12cb3a4fa6ac3) Updates `melodic-software/ci-workflows/.github/actions/ci-status` from 0.22.2 to 0.24.0 - [Release notes](https://github.com/melodic-software/ci-workflows/releases) - [Commits](https://github.com/melodic-software/ci-workflows/compare/5776760254f8b63cba44e896f51604cb755350d9...2c1de45aa0e1b1489afb8edfebc12cb3a4fa6ac3) Updates `melodic-software/ci-workflows/.github/actions/managed-files-guard` from 0.22.2 to 0.24.0 - [Release notes](https://github.com/melodic-software/ci-workflows/releases) - [Commits](https://github.com/melodic-software/ci-workflows/compare/5776760254f8b63cba44e896f51604cb755350d9...2c1de45aa0e1b1489afb8edfebc12cb3a4fa6ac3) --- updated-dependencies: - dependency-name: melodic-software/ci-workflows/.github/actions/pr-contract dependency-version: 0.24.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: melodic-software/ci-workflows/.github/actions/ci-status dependency-version: 0.24.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: melodic-software/ci-workflows/.github/actions/managed-files-guard dependency-version: 0.24.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/ci.yml | 4 ++-- .github/workflows/managed-files-guard.yml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index cd6fb59..f532f03 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -108,7 +108,7 @@ jobs: actions: read steps: - name: Check the pull-request contract - uses: melodic-software/ci-workflows/.github/actions/pr-contract@5776760254f8b63cba44e896f51604cb755350d9 # v0.22.2 + uses: melodic-software/ci-workflows/.github/actions/pr-contract@2c1de45aa0e1b1489afb8edfebc12cb3a4fa6ac3 # v0.24.0 with: token: ${{ github.token }} - name: Aggregate lane results @@ -116,7 +116,7 @@ jobs: # aggregation: the job still fails on the contract step's exit code, and # the `ci-lanes` status is on the SHA for the next contract-only run. if: ${{ !cancelled() }} - uses: melodic-software/ci-workflows/.github/actions/ci-status@5776760254f8b63cba44e896f51604cb755350d9 # v0.22.2 + uses: melodic-software/ci-workflows/.github/actions/ci-status@2c1de45aa0e1b1489afb8edfebc12cb3a4fa6ac3 # v0.24.0 with: # At least 60 seconds below this job's `timeout-minutes: 5` (300s), so # the fail-closed error is what a contract-only run reports at the diff --git a/.github/workflows/managed-files-guard.yml b/.github/workflows/managed-files-guard.yml index 589e6b3..3fe74e4 100644 --- a/.github/workflows/managed-files-guard.yml +++ b/.github/workflows/managed-files-guard.yml @@ -57,7 +57,7 @@ jobs: # now contains that commit, so the pin-comment takes the convention's # release-tag form rather than the short-SHA fallback # (components/managed-files-guard/README.md). - uses: melodic-software/ci-workflows/.github/actions/managed-files-guard@5776760254f8b63cba44e896f51604cb755350d9 # v0.22.2 + uses: melodic-software/ci-workflows/.github/actions/managed-files-guard@2c1de45aa0e1b1489afb8edfebc12cb3a4fa6ac3 # v0.24.0 with: # `main` for the soak, per the action's own input contract ("Pin to # a full SHA in callers once soak completes"): the guard must read