chore(actions): bump three-cubes/tc-pipelines/.github/workflows/python-quality-gate.yml from 1.15.0 to 1.16.1 - #780
Conversation
…n-quality-gate.yml Bumps [three-cubes/tc-pipelines/.github/workflows/python-quality-gate.yml](https://github.com/three-cubes/tc-pipelines) from 1.15.0 to 1.16.1. - [Release notes](https://github.com/three-cubes/tc-pipelines/releases) - [Changelog](https://github.com/three-cubes/tc-pipelines/blob/main/CHANGELOG.md) - [Commits](three-cubes/tc-pipelines@7169245...b9d6408) --- updated-dependencies: - dependency-name: three-cubes/tc-pipelines/.github/workflows/python-quality-gate.yml dependency-version: 1.16.1 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
Dependency ReviewThe following issues were found:
License Issues.github/workflows/ci.yml
OpenSSF Scorecard
Scanned Files
|
![chatgpt-codex-connector[bot]](https://avatars.githubusercontent.com/in/1144995?s=60&v=4){kind=small}
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 66354b0581
ℹ️ About Codex in GitHub
Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".
| # private-infra-patterns secret so the detector stays ENFORCED, not a | ||
| # silent no-op. Stage 1..5 (contracts / integration / e2e) are untouched. | ||
| uses: three-cubes/tc-pipelines/.github/workflows/python-quality-gate.yml@71692450a1f339685ea4d88ad707bc36e75f5ac6 # v1.15.0 | ||
| uses: three-cubes/tc-pipelines/.github/workflows/python-quality-gate.yml@b9d6408868eec5be56dbe57581aa086a95095d46 # v1.16.1 |
There was a problem hiding this comment.
This commit records both its author and committer as Codex <codex@openai.com>, so any PR range containing it violates the repository’s canonical identity policy and will be rejected by the no-LLM-attribution gate. Recreate the commit under the three-cubes-agent GitHub App identity.
AGENTS.md reference: AGENTS.md:L7-L14
Useful? React with 👍 / 👎.
| # private-infra-patterns secret so the detector stays ENFORCED, not a | ||
| # silent no-op. Stage 1..5 (contracts / integration / e2e) are untouched. | ||
| uses: three-cubes/tc-pipelines/.github/workflows/python-quality-gate.yml@71692450a1f339685ea4d88ad707bc36e75f5ac6 # v1.15.0 | ||
| uses: three-cubes/tc-pipelines/.github/workflows/python-quality-gate.yml@b9d6408868eec5be56dbe57581aa086a95095d46 # v1.16.1 |
There was a problem hiding this comment.
Because this commit changes only .github/workflows/ci.yml, the changes job's python filter remains false and the arch-fitness job is skipped by its if: needs.changes.outputs.python == 'true' condition, so the newly pinned reusable workflow never starts on this PR. An incompatible workflow_call input or secret contract can therefore merge green and break the next Python-triggered run; include a no-op change to a path watched by the python filter so this caller is exercised before merge.
Useful? React with 👍 / 👎.
1 participant
Bumps three-cubes/tc-pipelines/.github/workflows/python-quality-gate.yml from 1.15.0 to 1.16.1.
Release notes
Sourced from three-cubes/tc-pipelines/.github/workflows/python-quality-gate.yml's releases.
Commits
b9d6408Merge pull request #80 from three-cubes/fix/auto-merge-pass-repo-flagd40aa51fix(auto-merge): pass -R to gh pr merge so auto-merge actually arms028d38aMerge pull request #79 from three-cubes/fix/auto-merge-skeleton-resolve-from-...8185fddfix(skeleton): drop the auto-merge resolve job (v1.16.0 resolves from head-sha)523bb10Merge pull request #78 from three-cubes/fix/auto-merge-repin-v116002fd8c3fix(auto-merge): repin to v1.16.0 + drop local resolve job82e55faMerge pull request #77 from three-cubes/fix/auto-merge-resolve-pr-from-head-shae9bf1e9fix(auto-merge): resolve PR from head-sha inside the reusable14d0ecbMerge pull request #76 from three-cubes/docs/reconcile-canonical-ruleset25fa0e1docs(governance): reconcile canon to the live 4-profile org-ruleset modelDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)