Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Nov 25, 2025

This PR contains the following updates:

Package Type Update Change
sous-chefs/.github action patch 5.0.5 -> 5.0.8

Release Notes

sous-chefs/.github (sous-chefs/.github)

v5.0.8

Compare Source

Full Changelog: sous-chefs/.github@5.0.7...5.0.8

v5.0.7

Compare Source

More Slack fixes

v5.0.6

Compare Source

Make Slack inputs optional


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added the Release: Patch Release to Chef Supermarket as a version patch when merged label Nov 25, 2025
@renovate renovate bot requested a review from a team as a code owner November 25, 2025 17:00
@renovate renovate bot added the Skip: Announcements On Release this will not put a message in the #Announcements slack channel label Nov 25, 2025
@renovate renovate bot enabled auto-merge (squash) November 25, 2025 17:00
jobs:
conventional-commits:
uses: sous-chefs/.github/.github/workflows/[email protected].5
uses: sous-chefs/.github/.github/workflows/[email protected].8

Check warning

Code scanning / CodeQL

Workflow does not contain permissions Medium

Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {}

Copilot Autofix

AI 5 days ago

To fix the issue, we should explicitly add a permissions block to the workflow file to limit the permissions of the GITHUB_TOKEN to the minimum required. Since the job runs a reusable workflow (sous-chefs/.github/.github/workflows/[email protected]), it is best practice to restrict top-level permissions in the calling workflow, unless more write permissions are required for functionality. As a safe default when uncertain, grant only read access to contents. The correct place for this is at the top level of the workflow file (alongside name and on), so that all jobs without their own permissions block will inherit these restricted permissions.

Suggested changeset 1
.github/workflows/conventional-commits.yml

Autofix patch

Autofix patch
Run the following command in your local git repository to apply this patch
cat << 'EOF' | git apply
diff --git a/.github/workflows/conventional-commits.yml b/.github/workflows/conventional-commits.yml
--- a/.github/workflows/conventional-commits.yml
+++ b/.github/workflows/conventional-commits.yml
@@ -1,5 +1,7 @@
 ---
 name: conventional-commits
+permissions:
+  contents: read
 
 "on":
   pull_request:
EOF
@@ -1,5 +1,7 @@
---
name: conventional-commits
permissions:
contents: read

"on":
pull_request:
Copilot is powered by AI and may make mistakes. Always verify output.
@github-actions
Copy link

Slowest examples

Top 10 slowest examples (0.01 seconds, 50.15% of total time)
Example Description Time in seconds
spec/libraries/helpers_spec.rb:19 PostgreSQL::Cookbook::Helpers#data_dir(version) with rhel family and Postgres 11 from repo returns the correct path 0.01253
spec/libraries/helpers_spec.rb:27 PostgreSQL::Cookbook::Helpers#data_dir(version) with rhel family and Postgres 11 from os returns the correct path 0.00042
spec/libraries/helpers_spec.rb:65 PostgreSQL::Cookbook::Helpers#conf_dir(version) with rhel family and Postgres 12 from os returns the correct path 0.00038
spec/libraries/helpers_spec.rb:111 PostgreSQL::Cookbook::Helpers#default_platform_service_name(version) with debian family and Postgres 13 from repo returns the correct service name 0.00037
spec/libraries/helpers_spec.rb:73 PostgreSQL::Cookbook::Helpers#conf_dir(version) with debian family and Postgres 11 from repo returns the correct path 0.00035
spec/libraries/helpers_spec.rb:73 PostgreSQL::Cookbook::Helpers#conf_dir(version) with debian family and Postgres 15 from repo returns the correct path 0.00035
spec/libraries/helpers_spec.rb:119 PostgreSQL::Cookbook::Helpers#default_platform_service_name(version) with debian family and Postgres 12 from os returns the correct service name 0.00035
spec/libraries/helpers_spec.rb:57 PostgreSQL::Cookbook::Helpers#conf_dir(version) with rhel family and Postgres 11 from repo returns the correct path 0.00033
spec/libraries/helpers_spec.rb:95 PostgreSQL::Cookbook::Helpers#default_platform_service_name(version) with rhel family and Postgres 11 from repo returns the correct service name 0.00033
spec/libraries/helpers_spec.rb:81 PostgreSQL::Cookbook::Helpers#conf_dir(version) with debian family and Postgres 15 from os returns the correct path 0.00033

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Release: Patch Release to Chef Supermarket as a version patch when merged Skip: Announcements On Release this will not put a message in the #Announcements slack channel

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant