Repository navigation
build(deps): bump stefanzweifel/git-auto-commit-action from 7.2.0 to 7.2.1 - #29
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps [stefanzweifel/git-auto-commit-action](https://github.com/stefanzweifel/git-auto-commit-action) from 7.2.0 to 7.2.1. - [Release notes](https://github.com/stefanzweifel/git-auto-commit-action/releases) - [Changelog](https://github.com/stefanzweifel/git-auto-commit-action/blob/master/CHANGELOG.md) - [Commits](stefanzweifel/git-auto-commit-action@4a55954...d0b0110) --- updated-dependencies: - dependency-name: stefanzweifel/git-auto-commit-action dependency-version: 7.2.1 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
✅MegaLinter analysis: Success
See detailed reports in MegaLinter artifacts
|
gwarf
left a comment
gwarf
left a comment
There was a problem hiding this comment.
Verdict (unattended, e033095): No objection found
Safety fact: the only consumer of git-auto-commit-action is the "Commit and push applied linter fixes" step in .github/workflows/mega-linter.yml, which runs only when APPLY_FIXES_MODE == 'commit', and the workflow sets it to pull_request, so the step is dormant today (pointed at .github/workflows/mega-linter.yml@e033095).
The v7.2.0 to v7.2.1 compare touches only entrypoint.sh (.git file check -d to -e, escaped backticks in an error message, removal of an unused variable), tests, README and CHANGELOG; action.yml is unchanged, so no new inputs, permissions or network access. The publisher is the same (stefanzweifel), the pinned SHA d0b01107 is the head of the v7.2.1 compare, and the release notes match the diff. Nothing at rest changes and nothing else in the repo depends on this version. No security driver; this is a routine patch that can be taken with any merge.
Bumps stefanzweifel/git-auto-commit-action from 7.2.0 to 7.2.1.
Release notes
Sourced from stefanzweifel/git-auto-commit-action's releases.
Changelog
Sourced from stefanzweifel/git-auto-commit-action's changelog.
... (truncated)
Commits
d0b0110Accept repositories where .git is a file (#417)9264814Remove unused gitStatusMessage variable in the entrypoint (#415)4b4693cREADME: Update actions (#413)53ee9baUpdate CHANGELOGDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)