Skip to content

Bump the github-actions-updates group with 4 updates - #34

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/github_actions/github-actions-updates-2dbf9646ee
Closed

Bump the github-actions-updates group with 4 updates#34
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/github_actions/github-actions-updates-2dbf9646ee

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 27, 2026

Copy link
Copy Markdown
Contributor

Bumps the github-actions-updates group with 4 updates: lfreleng-actions/github2gerrit-action/.github/workflows/github2gerrit.yaml, step-security/harden-runner, lfreleng-actions/gerrit-review-action and lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-scorecard.yaml.

Updates lfreleng-actions/github2gerrit-action/.github/workflows/github2gerrit.yaml from 1.4.4 to 2.0.0

Release notes

Sourced from lfreleng-actions/github2gerrit-action/.github/workflows/github2gerrit.yaml's releases.

v2.0.0

Downloads for this release

💥 Breaking Change 💥

🔧 Maintenance 🔧

Links

v1.4.5

Downloads for this release

🐛 Bug Fixes 🐛

🔧 Maintenance 🔧

... (truncated)

Commits
  • f44ab26 Merge pull request #384 from modeseven-lfreleng-actions/fix/fork-pr-hardening
  • 5f9b6ff Fix: Address Copilot review feedback
  • 1e6e3ab Fix: Ignore fork-supplied .gitreview for Gerrit target
  • 1a4577e Fix!: Remove redundant repository checkout steps
  • 2b9aa7a Merge pull request #379 from lfreleng-actions/dependabot/github_actions/lfrel...
  • 6b85d70 Merge pull request #378 from lfreleng-actions/dependabot/uv/hatchling-1.32.0
  • 68f8bb0 Merge pull request #377 from lfreleng-actions/dependabot/uv/mypy-2.3.1
  • 77ffea0 Merge pull request #376 from lfreleng-actions/dependabot/github_actions/step-...
  • 185ac7f Merge pull request #375 from lfreleng-actions/dependabot/uv/ruff-0.16.3
  • e2bdd7a Merge pull request #374 from lfreleng-actions/dependabot/github_actions/lfrel...
  • Additional commits viewable in compare view

Updates step-security/harden-runner from 2.20.0 to 2.21.0

Release notes

Sourced from step-security/harden-runner's releases.

v2.21.0

What's Changed

  • Support for denied endpoints in block mode. This is included in the enterprise tier. Customers can deny outbound calls, for example, to public package registries.
  • Improved Support for AWS CodeBuild GitHub Actions Runners.
  • Bug fixes.

Full Changelog: step-security/harden-runner@v2.20.1...v2.21.0

v2.20.1

What's Changed

  • AWS CodeBuild-hosted runner support
  • Implicitly allow single-labeled (internal) domains in block-mode

Full Changelog: step-security/harden-runner@v2.20.0...v2.20.1

Commits
  • 05e3151 Merge pull request #684 from step-security/rc-42
  • 0f37afa fix: ignore denied-endpoints on non-enterprise tier
  • 93b58ee fix: resolve cache host read-first and never downgrade egress policy
  • e7399dd fix: align deny-list mode detection with agent and log when both endpoint inp...
  • c16689f test: add denied_endpoints to Configuration fixtures and cover deny-list merge
  • 40b99cf Merge pull request #682 from rohan-stepsecurity/rp/feat/codebuild-self-v2
  • fedec02 Merge branch 'rc-42' into rp/feat/codebuild-self-v2
  • 5361fb1 feat: add build artifacts
  • 286474f feat: Support Bravo agent install on CodeBuild runners
  • 051ec05 Merge pull request #683 from h0x0er/jatin/deny-list
  • Additional commits viewable in compare view

Updates lfreleng-actions/gerrit-review-action from 1.1.2 to 1.1.3

Release notes

Sourced from lfreleng-actions/gerrit-review-action's releases.

v1.1.3

Downloads for this release

🐛 Bug Fixes 🐛

🔧 Maintenance 🔧

🎓 Code Quality 🎓

Links

Commits
  • 1e3eae7 Merge pull request #146 from lfreleng-actions/dependabot/github_actions/step-...
  • cf518f9 Chore: Bump step-security/harden-runner from 2.20.1 to 2.21.0
  • c0cf518 Merge pull request #145 from lfreleng-actions/pre-commit-ci-update-config
  • 4ecb804 Chore: pre-commit autoupdate
  • 9658839 Merge pull request #144 from lfreleng-actions/dependabot/github_actions/step-...
  • bd38f6a Merge pull request #143 from lfreleng-actions/dependabot/github_actions/lfit/...
  • ee2e5ae Chore: Bump step-security/harden-runner from 2.20.0 to 2.20.1
  • e82f354 Chore: Bump lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-sc...
  • 364f7f6 Merge pull request #142 from lfreleng-actions/pre-commit-ci-update-config
  • 31fb5bd Merge pull request #141 from lfreleng-actions/dependabot/github_actions/relea...
  • Additional commits viewable in compare view

Updates lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-scorecard.yaml from 0.10.1 to 0.10.2

Release notes

Sourced from lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-scorecard.yaml's releases.

v0.10.2

Downloads for this release

🔧 Maintenance 🔧

  • Chore: Bump lfreleng-actions/change-isolation-action from 0.2.0 to 0.2.1 @dependabot[bot] (#835)
  • Chore: Bump release-drafter/release-drafter/autolabeler from 7.6.0 to 7.7.0 @dependabot[bot] (#833)
  • Chore: Bump release-drafter/release-drafter from 7.6.0 to 7.7.0 @dependabot[bot] (#838)
  • Chore: Bump actions/setup-java from 5.6.0 to 5.7.0 @dependabot[bot] (#837)
  • Chore: Bump lfreleng-actions/gradle-build-action from 0.5.0 to 0.6.0 @dependabot[bot] (#841)
  • Chore: Bump 1password/load-secrets-action from 4.1.1 to 5.0.0 @dependabot[bot] (#834)
  • Chore: pre-commit linting updates @pre-commit-ci[bot] (#842)
  • Chore: Bump lfreleng-actions/credential-load-action from 2.0.2 to 2.0.3 @dependabot[bot] (#845)
  • Chore: Bump lfit/releng-reusable-workflows/.github/workflows/gerrit-compose-required-tox-verify.yaml from 0.10.0 to 0.10.1 @dependabot[bot] (#847)
  • Chore: Bump lfit/releng-reusable-workflows/.github/workflows/reuse-sonatype-lifecycle.yaml from 0.10.0 to 0.10.1 @dependabot[bot] (#846)
  • Chore: Bump github/codeql-action/init from 4.37.3 to 4.37.6 @dependabot[bot] (#848)
  • Chore: Bump step-security/harden-runner from 2.20.0 to 2.20.1 @dependabot[bot] (#849)
  • Chore: Bump lfit/releng-reusable-workflows/.github/workflows/compose-jjb-verify.yaml from 0.10.0 to 0.10.1 @dependabot[bot] (#851)
  • Chore: Bump lfreleng-actions/maven-build-action from 0.3.0 to 0.3.1 @dependabot[bot] (#850)
  • Chore: Bump github/codeql-action/upload-sarif from 4.37.3 to 4.37.6 @dependabot[bot] (#852)
  • Chore: Bump github/codeql-action/analyze from 4.37.3 to 4.37.6 @dependabot[bot] (#853)
  • Chore: Bump github/codeql-action/analyze from 4.37.6 to 4.37.7 @dependabot[bot] (#857)
  • Chore: Bump lfit/releng-reusable-workflows/.github/workflows/reuse-verify-github-actions.yaml from 0.10.0 to 0.10.1 @dependabot[bot] (#856)
  • Chore: Bump github/codeql-action/upload-sarif from 4.37.6 to 4.37.7 @dependabot[bot] (#859)
  • Chore: Bump dorny/paths-filter from 4.0.2 to 4.0.3 @dependabot[bot] (#858)
  • Chore: Bump step-security/harden-runner from 2.20.1 to 2.21.0 @dependabot[bot] (#862)
  • Chore: pre-commit linting updates @pre-commit-ci[bot] (#864)
  • Chore: Bump lfit/releng-reusable-workflows/.github/workflows/compose-packer-verify.yaml from 0.10.0 to 0.10.1 @dependabot[bot] (#860)
  • Chore: Bump lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-scorecard.yaml from 0.10.0 to 0.10.1 @dependabot[bot] (#861)
  • Chore: Bump lfit/releng-reusable-workflows/.github/workflows/compose-repo-linting.yaml from 0.10.0 to 0.10.1 @dependabot[bot] (#863)
  • Chore: Bump github/codeql-action/init from 4.37.6 to 4.37.7 @dependabot[bot] (#855)

Links

Commits
  • dd7e7f1 Merge pull request #855 from lfit/dependabot/github_actions/github/codeql-act...
  • e9d6817 Merge pull request #863 from lfit/dependabot/github_actions/lfit/releng-reusa...
  • 4fd29c8 Merge pull request #861 from lfit/dependabot/github_actions/lfit/releng-reusa...
  • 6825f50 Merge pull request #860 from lfit/dependabot/github_actions/lfit/releng-reusa...
  • ace7e08 Merge pull request #864 from lfit/pre-commit-ci-update-config
  • 7b94d45 Merge pull request #862 from lfit/dependabot/github_actions/step-security/har...
  • 7586482 Merge branch 'main' into dependabot/github_actions/lfit/releng-reusable-workf...
  • 9adaeb9 Merge branch 'main' into dependabot/github_actions/lfit/releng-reusable-workf...
  • a1948dc Merge pull request #858 from lfit/dependabot/github_actions/dorny/paths-filte...
  • 0f796b7 Merge branch 'main' into dependabot/github_actions/lfit/releng-reusable-workf...
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the github-actions-updates group with 4 updates: [lfreleng-actions/github2gerrit-action/.github/workflows/github2gerrit.yaml](https://github.com/lfreleng-actions/github2gerrit-action), [step-security/harden-runner](https://github.com/step-security/harden-runner), [lfreleng-actions/gerrit-review-action](https://github.com/lfreleng-actions/gerrit-review-action) and [lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-scorecard.yaml](https://github.com/lfit/releng-reusable-workflows).


Updates `lfreleng-actions/github2gerrit-action/.github/workflows/github2gerrit.yaml` from 1.4.4 to 2.0.0
- [Release notes](https://github.com/lfreleng-actions/github2gerrit-action/releases)
- [Commits](lfreleng-actions/github2gerrit-action@e06d6a2...f44ab26)

Updates `step-security/harden-runner` from 2.20.0 to 2.21.0
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](step-security/harden-runner@bf7454d...05e3151)

Updates `lfreleng-actions/gerrit-review-action` from 1.1.2 to 1.1.3
- [Release notes](https://github.com/lfreleng-actions/gerrit-review-action/releases)
- [Commits](lfreleng-actions/gerrit-review-action@a1c036a...1e3eae7)

Updates `lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-scorecard.yaml` from 0.10.1 to 0.10.2
- [Release notes](https://github.com/lfit/releng-reusable-workflows/releases)
- [Commits](lfit/releng-reusable-workflows@f7aae21...dd7e7f1)

---
updated-dependencies:
- dependency-name: lfreleng-actions/github2gerrit-action/.github/workflows/github2gerrit.yaml
  dependency-version: 2.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions-updates
- dependency-name: step-security/harden-runner
  dependency-version: 2.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-updates
- dependency-name: lfreleng-actions/gerrit-review-action
  dependency-version: 1.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions-updates
- dependency-name: lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-scorecard.yaml
  dependency-version: 0.10.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Aug 27, 2026
@github-actions

Copy link
Copy Markdown

PR: #34
Mode: squash
Topic: GH-policy-api-34
Change-Ids:
I6719f4d0578ff98e5d474a7bbec60f32a86fbe56
Digest: b0f355ed9513
GitHub-Hash: 52a91573489233d6

Note: This metadata is also included in the Gerrit commit message for reconciliation.

@github-actions

Copy link
Copy Markdown

Change raised in Gerrit by GitHub2Gerrit: https://gerrit.onap.org/r/c/policy/api/+/147176

onap-github pushed a commit that referenced this pull request Aug 28, 2026
Bumps the github-actions-updates group with 4 updates: lfreleng-actions/github2gerrit-action/.github/workflows/github2gerrit.yaml, step-security/harden-runner, lfreleng-actions/gerrit-review-action and lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-scorecard.yaml.

Updates `lfreleng-actions/github2gerrit-action/.github/workflows/github2gerrit.yaml` from 1.4.4 to 2.0.0
## Release notes

Sourced from lfreleng-actions/github2gerrit-action/.github/workflows/github2gerrit.yaml's releases.

v2.0.0

💥 Breaking Change 💥

Fix!: Harden fork pull request handling @​ModeSevenIndustrialSolutions (#384)

🔧 Maintenance 🔧

Chore: pre-commit autoupdate @pre-commit-ci[bot] (#371)
Chore: Bump astral-sh/setup-uv from 9.0.0 to 10.0.1 @dependabot[bot] (#373)
Chore: Bump lfreleng-actions/generic-workflows/.github/workflows/clear-action-cache.yaml from 0.0.4 to 0.0.5 @dependabot[bot] (#374)
Chore: Bump ruff from 0.16.2 to 0.16.3 @dependabot[bot] (#375)
Chore: Bump step-security/harden-runner from 2.20.1 to 2.21.0 @dependabot[bot] (#376)
Chore: Bump mypy from 2.3.0 to 2.3.1 @dependabot[bot] (#377)
Chore: Bump hatchling from 1.31.0 to 1.32.0 @dependabot[bot] (#378)
Chore: Bump lfreleng-actions/pypi-publish-action from 0.1.9 to 0.2.0 @dependabot[bot] (#379)

Links

Submit bugs/feature requests

v1.4.5

🐛 Bug Fixes 🐛

Fix: Silence a false-positive S310 in gitreview @​ModeSevenIndustrialSolutions (#357)

🔧 Maintenance 🔧

Chore: Disable pre-commit.ci autofix PRs @​ModeSevenIndustrialSolutions (#352)
Chore: pre-commit autoupdate @pre-commit-ci[bot] (#351)
Chore: Bump astral-sh/setup-uv from 8.3.2 to 9.0.0 @dependabot[bot] (#353)
Chore: Bump ruff from 0.15.22 to 0.16.0 @dependabot[bot] (#354)
Chore: Bump lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-scorecard.yaml from 0.8.1 to 0.9.1 @dependabot[bot] (#355)
Chore: pre-commit autoupdate @pre-commit-ci[bot] (#356)
Chore: Bump cryptography from 49.0.0 to 50.0.0 @dependabot[bot] (#358)
Refactor: Call the shared cache-clearing workflow @​ModeSevenIndustrialSolutions (#359)
Chore: Bump lfreleng-actions/python-workflows/.github/workflows/build-test-release.yaml from 0.2.0 to 0.3.0 @dependabot[bot] (#360)
Chore: Bump lfreleng-actions/python-workflows/.github/workflows/build-test.yaml from 0.2.0 to 0.3.0 @dependabot[bot] (#361)
Chore: Bump lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-scorecard.yaml from 0.9.1 to 0.10.0 @dependabot[bot] (#362)
Chore: Bump release-drafter/release-drafter from 7.6.0 to 7.7.0 @dependabot[bot] (#363)
Chore: Bump ruff from 0.16.0 to 0.16.1 @dependabot[bot] (#364)
Chore: pre-commit autoupdate @pre-commit-ci[bot] (#365)
Chore: Bump step-security/harden-runner from 2.20.0 to 2.20.1 @dependabot[bot] (#366)
Chore: Bump lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-scorecard.yaml from 0.10.0 to 0.10.1 @dependabot[bot] (#367)
Chore: Bump typer from 0.27.0 to 0.27.1 @dependabot[bot] (#368)
Chore: Bump lfreleng-actions/generic-workflows/.github/workflows/clear-action-cache.yaml from 0.0.3 to 0.0.4 @dependabot[bot] (#369)
Chore: Bump ruff from 0.16.1 to 0.16.2 @dependabot[bot] (#370)

... (truncated)

## Commits

f44ab26 Merge pull request #384 from modeseven-lfreleng-actions/fix/fork-pr-hardening
5f9b6ff Fix: Address Copilot review feedback
1e6e3ab Fix: Ignore fork-supplied .gitreview for Gerrit target
1a4577e Fix!: Remove redundant repository checkout steps
2b9aa7a Merge pull request #379 from lfreleng-actions/dependabot/github_actions/lfrel
6b85d70 Merge pull request #378 from lfreleng-actions/dependabot/uv/hatchling-1.32.0
68f8bb0 Merge pull request #377 from lfreleng-actions/dependabot/uv/mypy-2.3.1
77ffea0 Merge pull request #376 from lfreleng-actions/dependabot/github_actions/step-
185ac7f Merge pull request #375 from lfreleng-actions/dependabot/uv/ruff-0.16.3
e2bdd7a Merge pull request #374 from lfreleng-actions/dependabot/github_actions/lfrel
Additional commits viewable in compare view

Updates `step-security/harden-runner` from 2.20.0 to 2.21.0
## Release notes

Sourced from step-security/harden-runner's releases.

v2.21.0
What's Changed

Support for denied endpoints in block mode. This is included in the enterprise tier. Customers can deny outbound calls, for example, to public package registries.
Improved Support for AWS CodeBuild GitHub Actions Runners.
Bug fixes.

Full Changelog: step-security/harden-runner@v2.20.1...v2.21.0
v2.20.1
What's Changed

AWS CodeBuild-hosted runner support
Implicitly allow single-labeled (internal) domains in block-mode

Full Changelog: step-security/harden-runner@v2.20.0...v2.20.1

## Commits

05e3151 Merge pull request #684 from step-security/rc-42
0f37afa fix: ignore denied-endpoints on non-enterprise tier
93b58ee fix: resolve cache host read-first and never downgrade egress policy
e7399dd fix: align deny-list mode detection with agent and log when both endpoint inp
c16689f test: add denied_endpoints to Configuration fixtures and cover deny-list merge
40b99cf Merge pull request #682 from rohan-stepsecurity/rp/feat/codebuild-self-v2
fedec02 Merge branch 'rc-42' into rp/feat/codebuild-self-v2
5361fb1 feat: add build artifacts
286474f feat: Support Bravo agent install on CodeBuild runners
051ec05 Merge pull request #683 from h0x0er/jatin/deny-list
Additional commits viewable in compare view

Updates `lfreleng-actions/gerrit-review-action` from 1.1.2 to 1.1.3
## Release notes

Sourced from lfreleng-actions/gerrit-review-action's releases.

v1.1.3

🐛 Bug Fixes 🐛

Fix: resolve zizmor auditor persona findings @​ModeSevenIndustrialSolutions (#125)

🔧 Maintenance 🔧

Chore: Bump actions/checkout from 6.0.3 to 7.0.0 @dependabot[bot] (#117)
Chore: Bump release-drafter/release-drafter from 7.3.1 to 7.4.0 @dependabot[bot] (#118)
Chore: Bump lfreleng-actions/draft-release-promote-action from 0.1.3 to 0.1.4 @dependabot[bot] (#119)
Chore: Bump lfreleng-actions/tag-validate-action from 1.0.2 to 1.0.4 @dependabot[bot] (#120)
Chore: pre-commit autoupdate @pre-commit-ci[bot] (#121)
Chore: Bump release-drafter/release-drafter from 7.4.0 to 7.5.1 @dependabot[bot] (#123)
Chore: pre-commit autoupdate @pre-commit-ci[bot] (#124)
Chore: pre-commit autoupdate @pre-commit-ci[bot] (#126)
Chore: Bump step-security/harden-runner from 2.19.4 to 2.20.0 @dependabot[bot] (#127)
Chore: Bump lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-scorecard.yaml from 0.7.2 to 0.7.4 @dependabot[bot] (#128)
Chore: pre-commit autoupdate @pre-commit-ci[bot] (#129)
Chore: Bump actions/checkout from 7.0.0 to 7.0.1 @dependabot[bot] (#130)
Chore: Bump lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-scorecard.yaml from 0.7.4 to 0.8.1 @dependabot[bot] (#131)
Chore: Bump lfreleng-actions/tag-validate-action from 1.0.4 to 1.1.0 @dependabot[bot] (#132)
Chore: pre-commit autoupdate @pre-commit-ci[bot] (#133)
Chore: Disable pre-commit.ci autofix PRs @​ModeSevenIndustrialSolutions (#134)
Chore: Bump lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-scorecard.yaml from 0.8.1 to 0.9.1 @dependabot[bot] (#135)
Chore: Bump release-drafter/release-drafter from 7.5.1 to 7.6.0 @dependabot[bot] (#136)
Chore: Bump lfreleng-actions/tag-validate-action from 1.1.0 to 1.1.2 @dependabot[bot] (#137)
Chore: pre-commit autoupdate @pre-commit-ci[bot] (#139)
Refactor: Call the shared release workflow @​ModeSevenIndustrialSolutions (#138)
Chore: Bump lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-scorecard.yaml from 0.9.1 to 0.10.0 @dependabot[bot] (#140)
Chore: Bump release-drafter/release-drafter from 7.6.0 to 7.7.0 @dependabot[bot] (#141)
Chore: pre-commit autoupdate @pre-commit-ci[bot] (#142)
Chore: Bump lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-scorecard.yaml from 0.10.0 to 0.10.1 @dependabot[bot] (#143)
Chore: Bump step-security/harden-runner from 2.20.0 to 2.20.1 @dependabot[bot] (#144)
Chore: pre-commit autoupdate @pre-commit-ci[bot] (#145)
Chore: Bump step-security/harden-runner from 2.20.1 to 2.21.0 @dependabot[bot] (#146)

🎓 Code Quality 🎓

CI: Add OpenSSF Scorecard workflow @​ModeSevenIndustrialSolutions (#122)

Links

Submit bugs/feature requests

## Commits

1e3eae7 Merge pull request #146 from lfreleng-actions/dependabot/github_actions/step-
cf518f9 Chore: Bump step-security/harden-runner from 2.20.1 to 2.21.0
c0cf518 Merge pull request #145 from lfreleng-actions/pre-commit-ci-update-config
4ecb804 Chore: pre-commit autoupdate
9658839 Merge pull request #144 from lfreleng-actions/dependabot/github_actions/step-
bd38f6a Merge pull request #143 from lfreleng-actions/dependabot/github_actions/lfit/
ee2e5ae Chore: Bump step-security/harden-runner from 2.20.0 to 2.20.1
e82f354 Chore: Bump lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-sc
364f7f6 Merge pull request #142 from lfreleng-actions/pre-commit-ci-update-config
31fb5bd Merge pull request #141 from lfreleng-actions/dependabot/github_actions/relea
Additional commits viewable in compare view

Updates `lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-scorecard.yaml` from 0.10.1 to 0.10.2
## Release notes

Sourced from lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-scorecard.yaml's releases.

v0.10.2

🔧 Maintenance 🔧

Chore: Bump lfreleng-actions/change-isolation-action from 0.2.0 to 0.2.1 @dependabot[bot] (#835)
Chore: Bump release-drafter/release-drafter/autolabeler from 7.6.0 to 7.7.0 @dependabot[bot] (#833)
Chore: Bump release-drafter/release-drafter from 7.6.0 to 7.7.0 @dependabot[bot] (#838)
Chore: Bump actions/setup-java from 5.6.0 to 5.7.0 @dependabot[bot] (#837)
Chore: Bump lfreleng-actions/gradle-build-action from 0.5.0 to 0.6.0 @dependabot[bot] (#841)
Chore: Bump 1password/load-secrets-action from 4.1.1 to 5.0.0 @dependabot[bot] (#834)
Chore: pre-commit linting updates @pre-commit-ci[bot] (#842)
Chore: Bump lfreleng-actions/credential-load-action from 2.0.2 to 2.0.3 @dependabot[bot] (#845)
Chore: Bump lfit/releng-reusable-workflows/.github/workflows/gerrit-compose-required-tox-verify.yaml from 0.10.0 to 0.10.1 @dependabot[bot] (#847)
Chore: Bump lfit/releng-reusable-workflows/.github/workflows/reuse-sonatype-lifecycle.yaml from 0.10.0 to 0.10.1 @dependabot[bot] (#846)
Chore: Bump github/codeql-action/init from 4.37.3 to 4.37.6 @dependabot[bot] (#848)
Chore: Bump step-security/harden-runner from 2.20.0 to 2.20.1 @dependabot[bot] (#849)
Chore: Bump lfit/releng-reusable-workflows/.github/workflows/compose-jjb-verify.yaml from 0.10.0 to 0.10.1 @dependabot[bot] (#851)
Chore: Bump lfreleng-actions/maven-build-action from 0.3.0 to 0.3.1 @dependabot[bot] (#850)
Chore: Bump github/codeql-action/upload-sarif from 4.37.3 to 4.37.6 @dependabot[bot] (#852)
Chore: Bump github/codeql-action/analyze from 4.37.3 to 4.37.6 @dependabot[bot] (#853)
Chore: Bump github/codeql-action/analyze from 4.37.6 to 4.37.7 @dependabot[bot] (#857)
Chore: Bump lfit/releng-reusable-workflows/.github/workflows/reuse-verify-github-actions.yaml from 0.10.0 to 0.10.1 @dependabot[bot] (#856)
Chore: Bump github/codeql-action/upload-sarif from 4.37.6 to 4.37.7 @dependabot[bot] (#859)
Chore: Bump dorny/paths-filter from 4.0.2 to 4.0.3 @dependabot[bot] (#858)
Chore: Bump step-security/harden-runner from 2.20.1 to 2.21.0 @dependabot[bot] (#862)
Chore: pre-commit linting updates @pre-commit-ci[bot] (#864)
Chore: Bump lfit/releng-reusable-workflows/.github/workflows/compose-packer-verify.yaml from 0.10.0 to 0.10.1 @dependabot[bot] (#860)
Chore: Bump lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-scorecard.yaml from 0.10.0 to 0.10.1 @dependabot[bot] (#861)
Chore: Bump lfit/releng-reusable-workflows/.github/workflows/compose-repo-linting.yaml from 0.10.0 to 0.10.1 @dependabot[bot] (#863)
Chore: Bump github/codeql-action/init from 4.37.6 to 4.37.7 @dependabot[bot] (#855)

Links

Submit bugs/feature requests

## Commits

dd7e7f1 Merge pull request #855 from lfit/dependabot/github_actions/github/codeql-act
e9d6817 Merge pull request #863 from lfit/dependabot/github_actions/lfit/releng-reusa
4fd29c8 Merge pull request #861 from lfit/dependabot/github_actions/lfit/releng-reusa
6825f50 Merge pull request #860 from lfit/dependabot/github_actions/lfit/releng-reusa
ace7e08 Merge pull request #864 from lfit/pre-commit-ci-update-config
7b94d45 Merge pull request #862 from lfit/dependabot/github_actions/step-security/har
7586482 Merge branch 'main' into dependabot/github_actions/lfit/releng-reusable-workf
9adaeb9 Merge branch 'main' into dependabot/github_actions/lfit/releng-reusable-workf
a1948dc Merge pull request #858 from lfit/dependabot/github_actions/dorny/paths-filte
0f796b7 Merge branch 'main' into dependabot/github_actions/lfit/releng-reusable-workf
Additional commits viewable in compare view

Issue-ID: CIMAN-33
Signed-off-by: dependabot[bot] <support@github.com>
Change-Id: I6719f4d0578ff98e5d474a7bbec60f32a86fbe56
GitHub-PR: #34
GitHub-Hash: 52a91573489233d6
Signed-off-by: onap.gh2gerrit <releng+onap-gh2gerrit@linuxfoundation.org>
@github-actions

Copy link
Copy Markdown

Automated PR Closure

This pull request has been automatically closed by GitHub2Gerrit.

The corresponding Gerrit change has been accepted and merged ✅

The changes from this PR are now part of the main codebase in Gerrit.


This is an automated action performed by the GitHub2Gerrit tool.

@github-actions github-actions Bot closed this Aug 28, 2026
@dependabot @github

dependabot Bot commented on behalf of github Aug 28, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot
dependabot Bot deleted the dependabot/github_actions/github-actions-updates-2dbf9646ee branch August 28, 2026 10:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Development

Successfully merging this pull request may close these issues.

0 participants