Skip to content

chore(deps): Bump the github-actions group with 2 updates - #496

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/main/github-actions-27d58344fc
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/main/github-actions-27d58344fc

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 12, 2026

Copy link
Copy Markdown
Contributor

Bumps the github-actions group with 2 updates: TMHSDigital/Developer-Tools-Directory/.github/actions/drift-check and TMHSDigital/Developer-Tools-Directory/.github/actions/release-doc-sync.

Updates TMHSDigital/Developer-Tools-Directory/.github/actions/drift-check from 1.19.2 to 1.20.0

Release notes

Sourced from TMHSDigital/Developer-Tools-Directory/.github/actions/drift-check's releases.

v1.20.0

Changes since v1.19.2

  • feat: v1.20.0 roadmap, fleet About drift report, docs hygiene guards (f10dd5e)
  • docs: remove drift and personal tooling from contributor docs (e3e8463)
  • fix(scaffold): born-green mcp-servers, escaped output, single pin table (e01c2cc)
  • ci(sync): open registry-sync PRs with a token that triggers checks (4b04c83)
  • ci: require the test suite and check the squash PR title for VERSION bumps (d43c9f6)
  • ci: Dependabot for pip and composite actions; CI installs pinned specs (f9106e8)
  • ci: least-privilege permissions and env-only inputs across workflows (6b16adf)
  • feat(catalog): no-JS rendering, generated category filters, real build date, a11y (7e4d109)
  • fix(catalog): complete search index and correct registry entries (5cb6287)
  • fix(drift-check): --all covers every live repo, not only active ones (6653b5b)
  • test: cover sync_from_registry, build_site and --fix; gate sibling-clone test (577d51c)
  • fix: write LF line endings on every platform (ed6ff13)
  • fix(release-doc-sync): keep [Unreleased] on top and match version headings only (3fb8b1d)
  • fix(drift-check): honor --gh-token and harden sticky-issue upsert (f42c8d9)
  • fix(drift-check): keep the clone token out of argv and error output (57ffcb1)
  • fix(sync): literal regex replacements and script-safe embedded JSON (fe0c902)

Full Changelog: TMHSDigital/Developer-Tools-Directory@v1.19.2...v1.20.0

Commits
  • f10dd5e feat: v1.20.0 roadmap, fleet About drift report, docs hygiene guards
  • e3e8463 docs: remove drift and personal tooling from contributor docs
  • e01c2cc fix(scaffold): born-green mcp-servers, escaped output, single pin table
  • 4b04c83 ci(sync): open registry-sync PRs with a token that triggers checks
  • d43c9f6 ci: require the test suite and check the squash PR title for VERSION bumps
  • f9106e8 ci: Dependabot for pip and composite actions; CI installs pinned specs
  • 6b16adf ci: least-privilege permissions and env-only inputs across workflows
  • 7e4d109 feat(catalog): no-JS rendering, generated category filters, real build date, ...
  • 5cb6287 fix(catalog): complete search index and correct registry entries
  • 6653b5b fix(drift-check): --all covers every live repo, not only active ones
  • Additional commits viewable in compare view

Updates TMHSDigital/Developer-Tools-Directory/.github/actions/release-doc-sync from 1.19.2 to 1.20.0

Release notes

Sourced from TMHSDigital/Developer-Tools-Directory/.github/actions/release-doc-sync's releases.

v1.20.0

Changes since v1.19.2

  • feat: v1.20.0 roadmap, fleet About drift report, docs hygiene guards (f10dd5e)
  • docs: remove drift and personal tooling from contributor docs (e3e8463)
  • fix(scaffold): born-green mcp-servers, escaped output, single pin table (e01c2cc)
  • ci(sync): open registry-sync PRs with a token that triggers checks (4b04c83)
  • ci: require the test suite and check the squash PR title for VERSION bumps (d43c9f6)
  • ci: Dependabot for pip and composite actions; CI installs pinned specs (f9106e8)
  • ci: least-privilege permissions and env-only inputs across workflows (6b16adf)
  • feat(catalog): no-JS rendering, generated category filters, real build date, a11y (7e4d109)
  • fix(catalog): complete search index and correct registry entries (5cb6287)
  • fix(drift-check): --all covers every live repo, not only active ones (6653b5b)
  • test: cover sync_from_registry, build_site and --fix; gate sibling-clone test (577d51c)
  • fix: write LF line endings on every platform (ed6ff13)
  • fix(release-doc-sync): keep [Unreleased] on top and match version headings only (3fb8b1d)
  • fix(drift-check): honor --gh-token and harden sticky-issue upsert (f42c8d9)
  • fix(drift-check): keep the clone token out of argv and error output (57ffcb1)
  • fix(sync): literal regex replacements and script-safe embedded JSON (fe0c902)

Full Changelog: TMHSDigital/Developer-Tools-Directory@v1.19.2...v1.20.0

Commits
  • f10dd5e feat: v1.20.0 roadmap, fleet About drift report, docs hygiene guards
  • e3e8463 docs: remove drift and personal tooling from contributor docs
  • e01c2cc fix(scaffold): born-green mcp-servers, escaped output, single pin table
  • 4b04c83 ci(sync): open registry-sync PRs with a token that triggers checks
  • d43c9f6 ci: require the test suite and check the squash PR title for VERSION bumps
  • f9106e8 ci: Dependabot for pip and composite actions; CI installs pinned specs
  • 6b16adf ci: least-privilege permissions and env-only inputs across workflows
  • 7e4d109 feat(catalog): no-JS rendering, generated category filters, real build date, ...
  • 5cb6287 fix(catalog): complete search index and correct registry entries
  • 6653b5b fix(drift-check): --all covers every live repo, not only active ones
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the github-actions group with 2 updates: [TMHSDigital/Developer-Tools-Directory/.github/actions/drift-check](https://github.com/tmhsdigital/developer-tools-directory) and [TMHSDigital/Developer-Tools-Directory/.github/actions/release-doc-sync](https://github.com/tmhsdigital/developer-tools-directory).


Updates `TMHSDigital/Developer-Tools-Directory/.github/actions/drift-check` from 1.19.2 to 1.20.0
- [Release notes](https://github.com/tmhsdigital/developer-tools-directory/releases)
- [Commits](TMHSDigital/Developer-Tools-Directory@7886cbe...f10dd5e)

Updates `TMHSDigital/Developer-Tools-Directory/.github/actions/release-doc-sync` from 1.19.2 to 1.20.0
- [Release notes](https://github.com/tmhsdigital/developer-tools-directory/releases)
- [Commits](TMHSDigital/Developer-Tools-Directory@7886cbe...f10dd5e)

---
updated-dependencies:
- dependency-name: TMHSDigital/Developer-Tools-Directory/.github/actions/drift-check
  dependency-version: 1.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: TMHSDigital/Developer-Tools-Directory/.github/actions/release-doc-sync
  dependency-version: 1.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from TMHSDigital as a code owner October 12, 2026 15:58
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Oct 12, 2026
@github-actions github-actions Bot added the ci label Oct 12, 2026
@TMHSDigital

Copy link
Copy Markdown
Owner

Closing; will bump the Developer-Tools-Directory actions by hand so meta-repo-ref moves with them.

@dependabot @github

dependabot Bot commented on behalf of github Oct 12, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot
dependabot Bot deleted the dependabot/github_actions/main/github-actions-27d58344fc branch October 12, 2026 17:12
TMHSDigital added a commit that referenced this pull request Oct 12, 2026
…a-repo pins to v1.20.0

Dependabot #496 moved only the uses: lines, which would have run the
v1.20.0 composite actions against older meta-repo Python
(drift-check meta-repo-ref 7886cbe, release-doc-sync 9be7979). All three
pins now name f10dd5e (tag v1.20.0; v1 and v1.20 resolve to it today).

Upstream changes reviewed (7886cbe...f10dd5e, 16 commits): inputs now
reach the shell only through env, the clone token stays out of argv, the
internal checkout/setup-python versions moved, release-doc-sync writes LF.
Ran both sync.py versions on copies of CHANGELOG.md, CLAUDE.md and
ROADMAP.md for a 0.153.0 -> 0.154.0 bump: the output differs only in line
endings.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Signed-off-by: TMHSDigital <154358121+TMHSDigital@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

ci dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant