Skip to content

ci: bump actions/dependency-review-action from 4 to 5#19

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions/dependency-review-action-5
Closed

ci: bump actions/dependency-review-action from 4 to 5#19
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions/dependency-review-action-5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 13, 2026

Copy link
Copy Markdown

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action) from 4 to 5.
- [Release notes](https://github.com/actions/dependency-review-action/releases)
- [Commits](actions/dependency-review-action@v4...v5)

---
updated-dependencies:
- dependency-name: actions/dependency-review-action
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Dependency update or supply-chain maintenance. major Represents a major-version worthy change. labels May 13, 2026
@dependabot
dependabot Bot requested a review from X-PG13 as a code owner May 13, 2026 10:21
@dependabot dependabot Bot added dependencies Dependency update or supply-chain maintenance. major Represents a major-version worthy change. labels May 13, 2026
@github-actions github-actions Bot added ci Continuous integration or automation pipeline changes. documentation Docs, templates, or contributor guidance updates. labels May 13, 2026
@github-actions

Copy link
Copy Markdown

Baseline branch: main
Baseline run id: 25654053872
Drift waiver: not enabled

Corpus Baseline Compare

  • Baseline: /home/runner/work/callchain/callchain/build/official-baseline/corpus-baseline-25654053872/build/corpus-baseline-snapshot.json
  • Candidate: /home/runner/work/callchain/callchain/build/corpus-current-snapshot.json
  • Metric: summary
  • Changed files context: 1 file(s)
  • Summary drift: none
Case Status Summary Delta
click-src unchanged No summary drift
examples-smoke-repo unchanged No summary drift
test-smoke-repo unchanged No summary drift

@github-actions

Copy link
Copy Markdown

This pull request has been inactive for 45 days. Please push an update or comment if it should remain open.

@github-actions github-actions Bot added the stale No recent activity; automation may close it soon. label Jun 29, 2026
@github-actions

Copy link
Copy Markdown

Closing this pull request due to inactivity after the stale period.

@github-actions github-actions Bot closed this Jul 20, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jul 20, 2026

Copy link
Copy Markdown
Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/github_actions/actions/dependency-review-action-5 branch July 20, 2026 05:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

ci Continuous integration or automation pipeline changes. dependencies Dependency update or supply-chain maintenance. documentation Docs, templates, or contributor guidance updates. major Represents a major-version worthy change. stale No recent activity; automation may close it soon.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants