Skip to content

build(deps): consolidate dependabot updates - #809

Merged
soumeh01 merged 1 commit into
mainfrom
copilot/consolidate-dependabot-prs
Jul 27, 2026
Merged

build(deps): consolidate dependabot updates#809
soumeh01 merged 1 commit into
mainfrom
copilot/consolidate-dependabot-prs

Conversation

Copilot AI commented Jul 27, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Merges 5 open Dependabot PRs (#804–#808) into a single update.

Fixes

Changes

  • Bump actions/checkout v7.0.0 → v7.0.1 across all workflow files
  • Bump github/codeql-action (init/analyze/upload-sarif) to 4.37.3 SHA pin
  • Bump ossf/scorecard-action v2.4.3 → v2.4.4

Checklist

  • 🤖 This change is covered by unit tests (if applicable).
  • 🤹 Manual testing has been performed (if necessary).
  • 🛡️ Security impacts have been considered (if relevant).
  • 📖 Documentation updates are complete (if required).
  • 🧠 Third-party dependencies and TPIP updated (if required).

build(deps): consolidate dependabot updates
3049530 
- Bump actions/checkout from v7.0.0 to v7.0.1
- Bump github/codeql-action (init/analyze/upload-sarif) SHA pin to v3.29.5 (4.37.3)
- Bump ossf/scorecard-action from v2.4.3 to v2.4.4

Closes #804, #805, #806, #807, #808
Copilot AI requested a review from soumeh01 July 27, 2026 06:49
@qltysh

qltysh Bot commented Jul 27, 2026

Copy link
Copy Markdown

Qlty


Coverage Impact

⬆️ Merging this pull request will increase total coverage on main by 0.1%.

🚦 See full report on Qlty Cloud »

🛟 Help

  • Diff Coverage: Coverage for added or modified lines of code (excludes deleted files). Learn more.

  • Total Coverage: Coverage for the whole repository, calculated as the sum of all File Coverage. Learn more.

  • File Coverage: Covered Lines divided by Covered Lines plus Missed Lines. (Excludes non-executable lines including blank lines and comments.)

    • Indirect Changes: Changes to File Coverage for files that were not modified in this PR. Learn more.

@github-actions

github-actions Bot commented Jul 27, 2026

Copy link
Copy Markdown
Contributor

Test Results

    4 files  ±0     24 suites  ±0   1m 2s ⏱️ +2s
  801 tests ±0    801 ✅ ±0  0 💤 ±0  0 ❌ ±0 
3 187 runs  ±0  3 187 ✅ ±0  0 💤 ±0  0 ❌ ±0 

Results for commit 3049530. ± Comparison against base commit 0f83df8.

@soumeh01
soumeh01 marked this pull request as ready for review July 27, 2026 07:56
@soumeh01
soumeh01 merged commit fa9bb22 into main Jul 27, 2026
39 checks passed
@soumeh01
soumeh01 deleted the copilot/consolidate-dependabot-prs branch July 27, 2026 07:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

1 more reviewer
@soumeh01 soumeh01 soumeh01 approved these changes
Reviewers whose approvals may not affect merge requirements

Assignees

@soumeh01 soumeh01

Copilot code review Copilot

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@soumeh01