Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Apr 11, 2025

Bumps actions/create-github-app-token from 1 to 2.

Release notes

Sourced from actions/create-github-app-token's releases.

v2.0.0

2.0.0 (2025-04-03)

BREAKING CHANGES

  • Removed deprecated inputs (app_id, private_key, skip_token_revoke) and made app-id and private-key required in the action configuration.

v1.12.0

1.12.0 (2025-03-27)

Features

v1.11.7

1.11.7 (2025-03-20)

Bug Fixes

  • deps: bump undici from 5.28.4 to 7.5.0 (#214) (a24b46a)

v1.11.6

1.11.6 (2025-03-03)

Bug Fixes

  • deps: bump the production-dependencies group with 2 updates (#210) (1ff1dea)

v1.11.5

1.11.5 (2025-02-15)

Bug Fixes

... (truncated)

Commits
  • 3ff1caa build(release): 2.0.2 [skip ci]
  • eaef294 fix: improve log messages for token creation (#226)
  • 86e2496 build(release): 2.0.1 [skip ci]
  • 2411bfc fix(deps): bump the production-dependencies group across 1 directory with 2 u...
  • f17d09a build(deps-dev): bump the development-dependencies group with 3 updates (#225)
  • e250d17 ci(update-permission-inputs): add permissions (#230)
  • ed258b4 Rename workflow
  • 5c652ca Update update-inputs.yml
  • 60ee75d ci(update-inputs): create initial version (#229)
  • 064492a build(release): 2.0.0 [skip ci]
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added build M-T: Changes to compilation and CI processes semver:patch Use on pull requests to describe the release version increment labels Apr 11, 2025
@dependabot dependabot bot requested a review from a team as a code owner April 11, 2025 16:27
@codecov
Copy link

codecov bot commented Apr 11, 2025

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 62.94%. Comparing base (4e527aa) to head (255a107).
Report is 1 commits behind head on main.

Additional details and impacted files
@@            Coverage Diff             @@
##             main      #31      +/-   ##
==========================================
+ Coverage   62.92%   62.94%   +0.01%     
==========================================
  Files         210      210              
  Lines       22127    22127              
==========================================
+ Hits        13923    13927       +4     
+ Misses       7118     7114       -4     
  Partials     1086     1086              

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

Copy link
Member

@mwbrooks mwbrooks left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

✅ Thank you @dependabot! We're not impacted by the breaking changes, so we can merge this safely!

@mwbrooks mwbrooks added this to the Next Release milestone Apr 11, 2025
@mwbrooks mwbrooks self-assigned this Apr 11, 2025
@mwbrooks
Copy link
Member

@dependabot recreate because the created tag is breaking the build

Bumps [actions/create-github-app-token](https://github.com/actions/create-github-app-token) from 1 to 2.
- [Release notes](https://github.com/actions/create-github-app-token/releases)
- [Commits](actions/create-github-app-token@v1...v2)

---
updated-dependencies:
- dependency-name: actions/create-github-app-token
  dependency-version: '2'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/github_actions/actions/create-github-app-token-2 branch from e1e73c1 to 255a107 Compare April 11, 2025 16:55
@mwbrooks mwbrooks merged commit 6532275 into main Apr 11, 2025
6 checks passed
@mwbrooks mwbrooks deleted the dependabot/github_actions/actions/create-github-app-token-2 branch April 11, 2025 17:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

build M-T: Changes to compilation and CI processes semver:patch Use on pull requests to describe the release version increment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants