Skip to content

Bump the actions-deps group with 2 updates - #51

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/github_actions/actions-deps-a0df3b9b39
Closed

dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/github_actions/actions-deps-a0df3b9b39

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 9, 2026

Copy link
Copy Markdown
Contributor

Bumps the actions-deps group with 2 updates: lfreleng-actions/github2gerrit-action and lfreleng-actions/security-workflows/.github/workflows/sonarqube-cloud.yaml.

Updates lfreleng-actions/github2gerrit-action from 2.4.0 to 2.4.2

Release notes

Sourced from lfreleng-actions/github2gerrit-action's releases.

v2.4.2

Downloads for this release

🔧 Maintenance 🔧

Links

v2.4.1

Downloads for this release

🔧 Maintenance 🔧

🎓 Code Quality 🎓

Links

Commits
  • 6cdadc0 Merge pull request #464 from lfreleng-actions/dependabot/uv/uv-2118ef368f
  • 14f5957 Chore: Bump pyjwt
  • 35ee28f Merge pull request #463 from modeseven-lfreleng-actions/docs/agents-stub
  • 40a0623 Docs: Add repository AGENTS.md stub
  • 5b695df Merge pull request #456 from modeseven-lfreleng-actions/ci/lint-baseline-and-...
  • 3129b1d CI: Exercise the scheduled sweep daily
  • 27448b4 CI: Use self-repository syntax in testing
  • 47d46b6 CI(lint): Adopt the actions-template lint baseline
  • ae700ab Merge pull request #462 from lfreleng-actions/pre-commit-ci-update-config
  • f242c24 Chore: pre-commit autoupdate
  • Additional commits viewable in compare view

Updates lfreleng-actions/security-workflows/.github/workflows/sonarqube-cloud.yaml from 0.9.0 to 0.9.2

Release notes

Sourced from lfreleng-actions/security-workflows/.github/workflows/sonarqube-cloud.yaml's releases.

v0.9.2

Downloads for this release

🐛 Bug Fixes 🐛

🎓 Code Quality 🎓

Links

v0.9.1

Downloads for this release

🐛 Bug Fixes 🐛

🔧 Maintenance 🔧

Links

Commits
  • 4da5165 Merge pull request #116 from modeseven-lfreleng-actions/fix/scorecard-publish...
  • 81e09a2 Fix(scorecard): Tighten the publish-rule guard
  • b050a69 Fix(scorecard): Hard-code the scan runner label
  • 34374ce Merge pull request #114 from modeseven-lfreleng-actions/test/submodule-scan-c...
  • ae96a8d Merge pull request #130 from lfreleng-actions/dependabot/github_actions/lfrel...
  • b952d9e Merge pull request #129 from lfreleng-actions/dependabot/github_actions/githu...
  • 17e0bd6 Merge pull request #128 from lfreleng-actions/dependabot/github_actions/lfrel...
  • d5a60f0 Merge pull request #127 from lfreleng-actions/dependabot/github_actions/lfrel...
  • 8becb40 Merge pull request #126 from lfreleng-actions/dependabot/github_actions/astra...
  • d184f53 Merge pull request #125 from lfreleng-actions/dependabot/github_actions/lfrel...
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the actions-deps group with 2 updates: [lfreleng-actions/github2gerrit-action](https://github.com/lfreleng-actions/github2gerrit-action) and [lfreleng-actions/security-workflows/.github/workflows/sonarqube-cloud.yaml](https://github.com/lfreleng-actions/security-workflows).


Updates `lfreleng-actions/github2gerrit-action` from 2.4.0 to 2.4.2
- [Release notes](https://github.com/lfreleng-actions/github2gerrit-action/releases)
- [Commits](lfreleng-actions/github2gerrit-action@df12d7f...6cdadc0)

Updates `lfreleng-actions/security-workflows/.github/workflows/sonarqube-cloud.yaml` from 0.9.0 to 0.9.2
- [Release notes](https://github.com/lfreleng-actions/security-workflows/releases)
- [Commits](lfreleng-actions/security-workflows@76ea523...4da5165)

---
updated-dependencies:
- dependency-name: lfreleng-actions/github2gerrit-action
  dependency-version: 2.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-deps
- dependency-name: lfreleng-actions/security-workflows/.github/workflows/sonarqube-cloud.yaml
  dependency-version: 0.9.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Oct 9, 2026
@github-actions

github-actions Bot commented Oct 9, 2026

Copy link
Copy Markdown

PR: #51
Mode: squash
Topic: GH-controller-51
Change-Ids:
Ic97f2c6af1291d9855e3b6e4812867ac11f3de96
Digest: cf087c3fa689
GitHub-Hash: 3a200ecceff75465

Note: This metadata is also included in the Gerrit commit message for reconciliation.

@github-actions

github-actions Bot commented Oct 9, 2026

Copy link
Copy Markdown

Change raised in Gerrit by GitHub2Gerrit: https://git.opendaylight.org/gerrit/c/controller/+/126789

odl-github pushed a commit that referenced this pull request Oct 10, 2026
Bumps the actions-deps group with 2 updates: [lfreleng-actions/github2gerrit-action](https://github.com/lfreleng-actions/github2gerrit-action) and [lfreleng-actions/security-workflows/.github/workflows/sonarqube-cloud.yaml](https://github.com/lfreleng-actions/security-workflows).
Updates `lfreleng-actions/github2gerrit-action` from 2.4.0 to 2.4.2
- [Release notes](https://github.com/lfreleng-actions/github2gerrit-action/releases)
- [Commits](lfreleng-actions/github2gerrit-action@df12d7f...6cdadc0)
Updates `lfreleng-actions/security-workflows/.github/workflows/sonarqube-cloud.yaml` from 0.9.0 to 0.9.2
- [Release notes](https://github.com/lfreleng-actions/security-workflows/releases)
- [Commits](lfreleng-actions/security-workflows@76ea523...4da5165)

Signed-off-by: dependabot[bot] <support@github.com>
Change-Id: Ic97f2c6af1291d9855e3b6e4812867ac11f3de96
GitHub-PR: #51
GitHub-Hash: 3a200ecceff75465
Signed-off-by: gh2gerrit <releng+odl-gh2gerrit@linuxfoundation.org>
@github-actions

Copy link
Copy Markdown

Automated PR Closure

This pull request has been automatically closed by GitHub2Gerrit.

The corresponding Gerrit change has been accepted and merged ✅

The changes from this PR are now part of the main codebase in Gerrit.


This is an automated action performed by the GitHub2Gerrit tool.

@github-actions github-actions Bot closed this Oct 10, 2026
@dependabot @github

dependabot Bot commented on behalf of github Oct 10, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot
dependabot Bot deleted the dependabot/github_actions/actions-deps-a0df3b9b39 branch October 10, 2026 05:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Development

Successfully merging this pull request may close these issues.

0 participants