Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 1, 2025

Bumps the github-actions-dependencies group with 7 updates in the / directory:

Package From To
hoverkraft-tech/ci-github-nodejs/.github/workflows/continuous-integration.yml 0.20.4 0.20.5
hoverkraft-tech/ci-github-common/.github/workflows/greetings.yml 0.30.2 0.31.2
hoverkraft-tech/ci-github-common 0.30.2 0.31.2
hoverkraft-tech/ci-github-publish 0.15.2 0.17.0
hoverkraft-tech/ci-github-common/.github/workflows/need-fix-to-issue.yml 0.30.2 0.31.2
hoverkraft-tech/ci-github-common/.github/workflows/semantic-pull-request.yml 0.30.2 0.31.2
hoverkraft-tech/ci-github-common/.github/workflows/stale.yml 0.30.2 0.31.2

Updates hoverkraft-tech/ci-github-nodejs/.github/workflows/continuous-integration.yml from 0.20.4 to 0.20.5

Release notes

Sourced from hoverkraft-tech/ci-github-nodejs/.github/workflows/continuous-integration.yml's releases.

0.20.5

Release Summary

No public changes.

Fix: resolved Codecov GPG issues in container mode using github-script helpers. Internal: extracted Codecov logic to a dedicated action with configuration fixes, refreshed actions/workflows documentation, and bumped npm and GitHub Actions dependencies across the repository.

Breaking change(s)

No breaking changes.

What's Changed

Full Changelog: hoverkraft-tech/ci-github-nodejs@0.20.4...0.20.5

Commits
  • c61f09c chore(deps): bump the npm-dependencies group across 4 directories with 2 updates
  • 1577967 chore(deps): bump the github-actions-dependencies group across 3 directories ...
  • 97de3ae docs: update actions and workflows documentation
  • 7b366a2 chore(deps): bump the github-actions-dependencies group across 3 directories ...
  • 7d6c85d docs: update actions and workflows documentation
  • 4e4a77f fix: remove container input and always check for missing deps
  • 15e2b99 refactor: move Codecov logic to dedicated action with dependency cleanup
  • 202fda1 fix: remove unused os module import from curl configuration fix
  • a8c4694 fix(test): add curl configuration fix for unexpanded SSL_CERT_FILE variable
  • 4d7a953 docs: update actions and workflows documentation
  • Additional commits viewable in compare view

Updates hoverkraft-tech/ci-github-common/.github/workflows/greetings.yml from 0.30.2 to 0.31.2

Release notes

Sourced from hoverkraft-tech/ci-github-common/.github/workflows/greetings.yml's releases.

0.31.2

Release Summary

Fix (parse-ci-reports): broadened support for content patterns in Astro check reports to improve parsing reliability. No internal changes.

Breaking change(s)

No breaking changes.

What's Changed

Full Changelog: hoverkraft-tech/ci-github-common@0.31.1...0.31.2

0.31.1

Release Summary

No new features or bug fixes were introduced in this release.

Internal changes: documentation for actions and workflows was refreshed, and parse-ci-reports was refactored so auto-detection patterns are provided by individual parsers.

Breaking change(s)

There is no breaking change.

What's Changed

Full Changelog: hoverkraft-tech/ci-github-common@0.31.0...0.31.1

0.31.0

Release Summary

Feature: introduces the local-workflow-actions action to simplify using local composite actions. Fix (checkout): default persist-credentials is now false to harden security and prevent unintended token persistence.

Internal: documentation for actions and workflows has been refreshed.

Breaking change(s)

The checkout step now sets persist-credentials: false by default; workflows that rely on persisted GitHub tokens for subsequent Git operations must explicitly opt in or adjust authentication.

What's Changed

... (truncated)

Commits
  • 2d3c39a fix(parse-ci-reports): supports more content patterns for astro check report
  • e673352 docs: update actions and workflows documentation
  • 10be6bf chore: fix lint issues
  • 5e73831 Fix code review feedback and formatting
  • 01ef37e Refactor AUTO_PATTERNS to be provided by parsers via getAutoPatterns()
  • 1bbe89d docs: update actions and workflows documentation
  • e10f0cb feat(local-workflow-actions): add cloned actions to ignore files
  • ba7423c docs: update actions and workflows documentation
  • ffe2de4 feat(local-workflow-actions): add cloned actions to ignore files
  • a36ef22 docs: update actions and workflows documentation
  • Additional commits viewable in compare view

Updates hoverkraft-tech/ci-github-common from 0.30.2 to 0.31.2

Release notes

Sourced from hoverkraft-tech/ci-github-common's releases.

0.31.2

Release Summary

Fix (parse-ci-reports): broadened support for content patterns in Astro check reports to improve parsing reliability. No internal changes.

Breaking change(s)

No breaking changes.

What's Changed

Full Changelog: hoverkraft-tech/ci-github-common@0.31.1...0.31.2

0.31.1

Release Summary

No new features or bug fixes were introduced in this release.

Internal changes: documentation for actions and workflows was refreshed, and parse-ci-reports was refactored so auto-detection patterns are provided by individual parsers.

Breaking change(s)

There is no breaking change.

What's Changed

Full Changelog: hoverkraft-tech/ci-github-common@0.31.0...0.31.1

0.31.0

Release Summary

Feature: introduces the local-workflow-actions action to simplify using local composite actions. Fix (checkout): default persist-credentials is now false to harden security and prevent unintended token persistence.

Internal: documentation for actions and workflows has been refreshed.

Breaking change(s)

The checkout step now sets persist-credentials: false by default; workflows that rely on persisted GitHub tokens for subsequent Git operations must explicitly opt in or adjust authentication.

What's Changed

... (truncated)

Commits
  • 2d3c39a fix(parse-ci-reports): supports more content patterns for astro check report
  • e673352 docs: update actions and workflows documentation
  • 10be6bf chore: fix lint issues
  • 5e73831 Fix code review feedback and formatting
  • 01ef37e Refactor AUTO_PATTERNS to be provided by parsers via getAutoPatterns()
  • 1bbe89d docs: update actions and workflows documentation
  • e10f0cb feat(local-workflow-actions): add cloned actions to ignore files
  • ba7423c docs: update actions and workflows documentation
  • ffe2de4 feat(local-workflow-actions): add cloned actions to ignore files
  • a36ef22 docs: update actions and workflows documentation
  • Additional commits viewable in compare view

Updates hoverkraft-tech/ci-github-publish from 0.15.2 to 0.17.0

Release notes

Sourced from hoverkraft-tech/ci-github-publish's releases.

0.17.0

Release Summary

Feature (release): support for monorepo architecture via a new release workflow capability, enabling scoped operation per subfolder. Fixes: corrected ArgoCD manifest plugin placement (deploy/argocd-manifest-files) and tightened prepare-release permissions and usage.

Internal: refreshed release configuration, updated documentation for actions/workflows, and bumped GitHub Actions dependencies.

Breaking change(s)

No breaking changes.

What's Changed

Full Changelog: hoverkraft-tech/ci-github-publish@0.16.0...0.17.0

0.16.0

Release Summary

Fix: forces ArgoCD sync on redeployments when using the hoverkraft-deployment plugin to ensure reliable re-deploys without code changes.

Internal: actions and workflows documentation refreshed.

Breaking change(s)

No breaking changes.

What's Changed

Full Changelog: hoverkraft-tech/ci-github-publish@0.15.2...0.16.0

Commits
  • 5358acd build(deps): Bump the github-actions-dependencies group across 4 directories ...
  • 35e5f58 feat(release): add support for monorepo architecture
  • de63084 ci: prepare release configuration
  • 4c9d55e feat(release): add support for monorepo architecture
  • 3039aee docs: update actions and workflows documentation
  • 516d509 feat: optimize / enhance reusable workflows
  • e66f18c docs: update actions and workflows documentation
  • 6b656c3 build(deps): Bump the github-actions-dependencies group across 5 directories ...
  • 5ddc7e9 feat(release): add support for monorepo architecture
  • bbb0d72 docs: update actions and workflows documentation
  • Additional commits viewable in compare view

Updates hoverkraft-tech/ci-github-common/.github/workflows/need-fix-to-issue.yml from 0.30.2 to 0.31.2

Release notes

Sourced from hoverkraft-tech/ci-github-common/.github/workflows/need-fix-to-issue.yml's releases.

0.31.2

Release Summary

Fix (parse-ci-reports): broadened support for content patterns in Astro check reports to improve parsing reliability. No internal changes.

Breaking change(s)

No breaking changes.

What's Changed

Full Changelog: hoverkraft-tech/ci-github-common@0.31.1...0.31.2

0.31.1

Release Summary

No new features or bug fixes were introduced in this release.

Internal changes: documentation for actions and workflows was refreshed, and parse-ci-reports was refactored so auto-detection patterns are provided by individual parsers.

Breaking change(s)

There is no breaking change.

What's Changed

Full Changelog: hoverkraft-tech/ci-github-common@0.31.0...0.31.1

0.31.0

Release Summary

Feature: introduces the local-workflow-actions action to simplify using local composite actions. Fix (checkout): default persist-credentials is now false to harden security and prevent unintended token persistence.

Internal: documentation for actions and workflows has been refreshed.

Breaking change(s)

The checkout step now sets persist-credentials: false by default; workflows that rely on persisted GitHub tokens for subsequent Git operations must explicitly opt in or adjust authentication.

What's Changed

... (truncated)

Commits
  • 2d3c39a fix(parse-ci-reports): supports more content patterns for astro check report
  • e673352 docs: update actions and workflows documentation
  • 10be6bf chore: fix lint issues
  • 5e73831 Fix code review feedback and formatting
  • 01ef37e Refactor AUTO_PATTERNS to be provided by parsers via getAutoPatterns()
  • 1bbe89d docs: update actions and workflows documentation
  • e10f0cb feat(local-workflow-actions): add cloned actions to ignore files
  • ba7423c docs: update actions and workflows documentation
  • ffe2de4 feat(local-workflow-actions): add cloned actions to ignore files
  • a36ef22 docs: update actions and workflows documentation
  • Additional commits viewable in compare view

Updates hoverkraft-tech/ci-github-common/.github/workflows/semantic-pull-request.yml from 0.30.2 to 0.31.2

Release notes

Sourced from hoverkraft-tech/ci-github-common/.github/workflows/semantic-pull-request.yml's releases.

0.31.2

Release Summary

Fix (parse-ci-reports): broadened support for content patterns in Astro check reports to improve parsing reliability. No internal changes.

Breaking change(s)

No breaking changes.

What's Changed

Full Changelog: hoverkraft-tech/ci-github-common@0.31.1...0.31.2

0.31.1

Release Summary

No new features or bug fixes were introduced in this release.

Internal changes: documentation for actions and workflows was refreshed, and parse-ci-reports was refactored so auto-detection patterns are provided by individual parsers.

Breaking change(s)

There is no breaking change.

What's Changed

Full Changelog: hoverkraft-tech/ci-github-common@0.31.0...0.31.1

0.31.0

Release Summary

Feature: introduces the local-workflow-actions action to simplify using local composite actions. Fix (checkout): default persist-credentials is now false to harden security and prevent unintended token persistence.

Internal: documentation for actions and workflows has been refreshed.

Breaking change(s)

The checkout step now sets persist-credentials: false by default; workflows that rely on persisted GitHub tokens for subsequent Git operations must explicitly opt in or adjust authentication.

What's Changed

... (truncated)

Commits
  • 2d3c39a fix(parse-ci-reports): supports more content patterns for astro check report
  • e673352 docs: update actions and workflows documentation
  • 10be6bf chore: fix lint issues
  • 5e73831 Fix code review feedback and formatting
  • 01ef37e Refactor AUTO_PATTERNS to be provided by parsers via getAutoPatterns()
  • 1bbe89d docs: update actions and workflows documentation
  • e10f0cb feat(local-workflow-actions): add cloned actions to ignore files
  • ba7423c docs: update actions and workflows documentation
  • ffe2de4 feat(local-workflow-actions): add cloned actions to ignore files
  • a36ef22 docs: update actions and workflows documentation
  • Additional commits viewable in compare view

Updates hoverkraft-tech/ci-github-common/.github/workflows/stale.yml from 0.30.2 to 0.31.2

Release notes

Sourced from hoverkraft-tech/ci-github-common/.github/workflows/stale.yml's releases.

0.31.2

Release Summary

Fix (parse-ci-reports): broadened support for content patterns in Astro check reports to improve parsing reliability. No internal changes.

Breaking change(s)

No breaking changes.

What's Changed

Full Changelog: hoverkraft-tech/ci-github-common@0.31.1...0.31.2

0.31.1

Release Summary

No new features or bug fixes were introduced in this release.

Internal changes: documentation for actions and workflows was refreshed, and parse-ci-reports was refactored so auto-detection patterns are provided by individual parsers.

Breaking change(s)

There is no breaking change.

What's Changed

Full Changelog: hoverkraft-tech/ci-github-common@0.31.0...0.31.1

0.31.0

Release Summary

Feature: introduces the local-workflow-actions action to simplify using local composite actions. Fix (checkout): default persist-credentials is now false to harden security and prevent unintended token persistence.

Internal: documentation for actions and workflows has been refreshed.

Breaking change(s)

The checkout step now sets persist-credentials: false by default; workflows that rely on persisted GitHub tokens for subsequent Git operations must explicitly opt in or adjust authentication.

What's Changed

... (truncated)

Commits
  • 2d3c39a fix(parse-ci-reports): supports more content patterns for astro check report
  • e673352 docs: update actions and workflows documentation
  • 10be6bf chore: fix lint issues
  • 5e73831 Fix code review feedback and formatting
  • 01ef37e Refactor AUTO_PATTERNS to be provided by parsers via getAutoPatterns()
  • 1bbe89d docs: update actions and workflows documentation
  • e10f0cb feat(local-workflow-actions): add cloned actions to ignore files
  • ba7423c docs: update actions and workflows documentation
  • ffe2de4 feat(local-workflow-actions): add cloned actions to ignore files
  • a36ef22 docs: update actions and workflows documentation
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…ctory with 7 updates

Bumps the github-actions-dependencies group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [hoverkraft-tech/ci-github-nodejs/.github/workflows/continuous-integration.yml](https://github.com/hoverkraft-tech/ci-github-nodejs) | `0.20.4` | `0.20.5` |
| [hoverkraft-tech/ci-github-common/.github/workflows/greetings.yml](https://github.com/hoverkraft-tech/ci-github-common) | `0.30.2` | `0.31.2` |
| [hoverkraft-tech/ci-github-common](https://github.com/hoverkraft-tech/ci-github-common) | `0.30.2` | `0.31.2` |
| [hoverkraft-tech/ci-github-publish](https://github.com/hoverkraft-tech/ci-github-publish) | `0.15.2` | `0.17.0` |
| [hoverkraft-tech/ci-github-common/.github/workflows/need-fix-to-issue.yml](https://github.com/hoverkraft-tech/ci-github-common) | `0.30.2` | `0.31.2` |
| [hoverkraft-tech/ci-github-common/.github/workflows/semantic-pull-request.yml](https://github.com/hoverkraft-tech/ci-github-common) | `0.30.2` | `0.31.2` |
| [hoverkraft-tech/ci-github-common/.github/workflows/stale.yml](https://github.com/hoverkraft-tech/ci-github-common) | `0.30.2` | `0.31.2` |



Updates `hoverkraft-tech/ci-github-nodejs/.github/workflows/continuous-integration.yml` from 0.20.4 to 0.20.5
- [Release notes](https://github.com/hoverkraft-tech/ci-github-nodejs/releases)
- [Commits](hoverkraft-tech/ci-github-nodejs@ce2467e...c61f09c)

Updates `hoverkraft-tech/ci-github-common/.github/workflows/greetings.yml` from 0.30.2 to 0.31.2
- [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases)
- [Commits](hoverkraft-tech/ci-github-common@5e8d0e6...2d3c39a)

Updates `hoverkraft-tech/ci-github-common` from 0.30.2 to 0.31.2
- [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases)
- [Commits](hoverkraft-tech/ci-github-common@5e8d0e6...2d3c39a)

Updates `hoverkraft-tech/ci-github-publish` from 0.15.2 to 0.17.0
- [Release notes](https://github.com/hoverkraft-tech/ci-github-publish/releases)
- [Commits](hoverkraft-tech/ci-github-publish@dbdcce2...5358acd)

Updates `hoverkraft-tech/ci-github-common/.github/workflows/need-fix-to-issue.yml` from 0.30.2 to 0.31.2
- [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases)
- [Commits](hoverkraft-tech/ci-github-common@5e8d0e6...2d3c39a)

Updates `hoverkraft-tech/ci-github-common/.github/workflows/semantic-pull-request.yml` from 0.30.2 to 0.31.2
- [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases)
- [Commits](hoverkraft-tech/ci-github-common@5e8d0e6...2d3c39a)

Updates `hoverkraft-tech/ci-github-common/.github/workflows/stale.yml` from 0.30.2 to 0.31.2
- [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases)
- [Commits](hoverkraft-tech/ci-github-common@5e8d0e6...2d3c39a)

---
updated-dependencies:
- dependency-name: hoverkraft-tech/ci-github-nodejs/.github/workflows/continuous-integration.yml
  dependency-version: 0.20.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-common/.github/workflows/greetings.yml
  dependency-version: 0.31.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-common
  dependency-version: 0.31.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-publish
  dependency-version: 0.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-common/.github/workflows/need-fix-to-issue.yml
  dependency-version: 0.31.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-common/.github/workflows/semantic-pull-request.yml
  dependency-version: 0.31.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-common/.github/workflows/stale.yml
  dependency-version: 0.31.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Dec 1, 2025
@github-actions
Copy link

github-actions bot commented Dec 1, 2025

Hi, thank you for creating your PR, we will check it out very soon

@github-actions
Copy link

github-actions bot commented Dec 1, 2025

Code Coverage Report

Coverage Results

Coverage

Metric Covered Total Percentage
Lines 8 8 100.00%
Branches 2 2 100.00%
Functions 5 5 100.00%

Overall: 100.00% 🟢
🟩🟩🟩🟩🟩🟩🟩🟩🟩🟩🟩🟩🟩🟩🟩🟩🟩🟩🟩🟩

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant