Repository navigation
build(deps): bump the github-actions group across 1 directory with 3 updates - #725
Closed
dependabot[bot] wants to merge 1 commit into
Closed
dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
Contributor
|
Note Reviews pausedIt looks like this branch is under active development. To avoid overwhelming you with review comments due to an influx of new commits, CodeRabbit has automatically paused this review. You can configure this behavior by changing the Use the following commands to manage reviews:
Use the checkboxes below for quick actions:
📝 WalkthroughWalkthroughThe pull request updates pinned GitHub Action revisions across CI path detection, Cargo caching, and Slack approval notification workflows. Workflow outputs, gating conditions, and notification logic remain unchanged. ChangesWorkflow action updates
Estimated code review effort: 1 (Trivial) | ~5 minutes Suggested reviewers: Poem
🚥 Pre-merge checks | ✅ 5✅ Passed checks (5 passed)
✨ Finishing Touches📝 Generate docstrings
Comment |
Contributor
There was a problem hiding this comment.
Caution
Some comments are outside the diff and can’t be posted inline due to platform limitations.
⚠️ Outside diff range comments (3)
.github/workflows/ci-linux-native.yml (1)
51-58: 📐 Maintainability & Code Quality | 🟡 Minor | ⚡ Quick winUpdate the action version note to v4.0.2
.github/workflows/ci-linux-native.yml:51-58still saysv3.0.2, but the pinneddorny/paths-filterrevision isv4.0.2. Keep the comment in sync with the SHA pin.🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the rest with a brief reason, keep changes minimal, and validate. In @.github/workflows/ci-linux-native.yml 8000 around lines 51 - 58, Update the version note above the dorny/paths-filter action from v3.0.2 to v4.0.2 so it matches the existing SHA pin; leave the workflow condition and action reference unchanged..github/workflows/ci-shell-installer.yml (1)
42-47: 📐 Maintainability & Code Quality | 🟡 Minor | ⚡ Quick winUpdate the action-version comment
The pin is
v4.0.2, but the inline note still saysv3.0.2.🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the rest with a brief reason, keep changes minimal, and validate. In @.github/workflows/ci-shell-installer.yml around lines 42 - 47, Update the version in the inline comment above the dorny/paths-filter action to match the pinned v4.0.2 release, leaving the SHA pin and workflow logic unchanged..github/workflows/ci.yml (1)
43-50: 📐 Maintainability & Code Quality | 🟡 Minor | ⚡ Quick winUpdate the action-version comment
The SHA pin resolves to
v4.0.2, so the annotation should sayv4.0.2instead ofv3.0.2.🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the rest with a brief reason, keep changes minimal, and validate. In @.github/workflows/ci.yml around lines 43 - 50, Update the version annotation in the comment above the dorny/paths-filter action from v3.0.2 to v4.0.2, leaving the SHA pin and workflow behavior unchanged.
🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Outside diff comments:
In @.github/workflows/ci-linux-native.yml:
- Around line 51-58: Update the version note above the dorny/paths-filter action
from v3.0.2 to v4.0.2 so it matches the existing SHA pin; leave the workflow
condition and action reference unchanged.
In @.github/workflows/ci-shell-installer.yml:
- Around line 42-47: Update the version in the inline comment above the
dorny/paths-filter action to match the pinned v4.0.2 release, leaving the SHA
pin and workflow logic unchanged.
In @.github/workflows/ci.yml:
- Around line 43-50: Update the version annotation in the comment above the
dorny/paths-filter action from v3.0.2 to v4.0.2, leaving the SHA pin and
workflow behavior unchanged.
ℹ️ Review info
⚙️ Run configuration
Configuration used: Organization UI
Review profile: CHILL
Plan: Pro
Run ID: 99fa928c-f9a3-4aa6-bca5-f99ca5a042dc
📒 Files selected for processing (6)
.github/workflows/ci-linux-kvm.yml.github/workflows/ci-linux-native.yml.github/workflows/ci-macos.yml.github/workflows/ci-shell-installer.yml.github/workflows/ci.yml.github/workflows/promote.yml
dependabot
Bot
force-pushed
the
dependabot/github_actions/github-actions-a664b2dd7d
branch
3 times, most recently
from
July 14, 2026 18:42
d109c57 to
1c2e0f9
Compare
dependabot
Bot
force-pushed
the
dependabot/github_actions/github-actions-a664b2dd7d
branch
from
July 15, 2026 02:09
1c2e0f9 to
e434154
Compare
Contributor
There was a problem hiding this comment.
Actionable comments posted: 1
Caution
Some comments are outside the diff and can’t be posted inline due to platform limitations.
⚠️ Outside diff range comments (1)
.github/workflows/ci.yml (1)
43-50: 📐 Maintainability & Code Quality | 🟡 Minor | ⚡ Quick winUpdate the stale action-version comment.
The reference now resolves to
dorny/paths-filterv4.0.2, but the comment still says v3.0.2. (github.com)Proposed fix
- # v3.0.2, SHA-pinned. + # v4.0.2, SHA-pinned.🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the rest with a brief reason, keep changes minimal, and validate. In @.github/workflows/ci.yml around lines 43 - 50, Update the version annotation in the comment above the dorny/paths-filter action from v3.0.2 to v4.0.2, leaving the SHA-pinned action reference and surrounding workflow logic unchanged.
🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Inline comments:
In @.github/workflows/ci.yml:
- Line 50: Verify that the change to the dorny/paths-filter reference in the CI
workflow has approval from the owners listed for .github/workflows/ci.yml;
retain it only when the required CODEOWNERS review is already present, otherwise
revert the workflow change.
---
Outside diff comments:
In @.github/workflows/ci.yml:
- Around line 43-50: Update the version annotation in the comment above the
dorny/paths-filter action from v3.0.2 to v4.0.2, leaving the SHA-pinned action
reference and surrounding workflow logic unchanged.
🪄 Autofix (Beta)
Fix all unresolved CodeRabbit comments on this PR:
- Push a commit to this branch (recommended)
- Create a new PR with the fixes
ℹ️ Review info
⚙️ Run configuration
Configuration used: Organization UI
Review profile: CHILL
Plan: Pro
Run ID: 79abd698-cbe0-4477-9021-5fc216a6ab8e
📒 Files selected for processing (6)
.github/workflows/ci-linux-kvm.yml.github/workflows/ci-linux-native.yml.github/workflows/ci-macos.yml.github/workflows/ci-shell-installer.yml.github/workflows/ci.yml.github/workflows/promote.yml
🚧 Files skipped from review as they are similar to previous changes (5)
- .github/workflows/promote.yml
- .github/workflows/ci-linux-kvm.yml
- .github/workflows/ci-linux-native.yml
- .github/workflows/ci-macos.yml
- .github/workflows/ci-shell-installer.yml
| # mirror the old paths-ignore list. | ||
| if: github.event_name == 'pull_request' | ||
| uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 | ||
| uses: dorny/paths-filter@7b450fff21473bca461d4b92ce414b9d0420d706 |
Contributor
There was a problem hiding this comment.
📐 Maintainability & Code Quality | 🟠 Major | ⚡ Quick win
🧩 Analysis chain
🏁 Script executed:
#!/bin/bash
set -euo pipefail
printf '\n## Files under .github/workflows\n'
git ls-files '.github/workflows/*' || true
printf '\n## Ownership / policy files\n'
git ls-files 'CODEOWNERS' '.github/CODEOWNERS' '.github/**/CODEOWNERS' '.github/**/owners*' '.github/**/rules*' '.github/**/policy*' || true
printf '\n## Search for workflow-related restrictions\n'
rg -n --hidden --glob '!**/.git/**' --glob '!.git' \
'frozen|CODEOWNER|CODEOWNERS|workflow-owner|CI-owner|.github/workflows|Do not edit files under \.github/workflows|required CODEOWNER review|required approval' \
.
printf '\n## Inspect the referenced workflow file around the cited lines\n'
if [ -f .github/workflows/ci.yml ]; then
sed -n '1,220p' .github/workflows/ci.yml | nl -ba | sed -n '1,140p'
fiRepository: gominimal/minimal
Length of output: 5390
🏁 Script executed:
#!/bin/bash
set -euo pipefail
printf '\n## .github/CODEOWNERS\n'
cat -n .github/CODEOWNERS
printf '\n## .github/workflows/ci.yml around cited lines\n'
sed -n '40,60p' .github/workflows/ci.yml | cat -nRepository: gominimal/minimal
Length of output: 1658
Needs CODEOWNER approval .github/workflows/ci.yml is frozen by repo policy and covered by .github/CODEOWNERS (@gominimal/minimalists). Keep this only if the required CODEOWNERS review is already in place.
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In @.github/workflows/ci.yml at line 50, Verify that the change to the
dorny/paths-filter reference in the CI workflow has approval from the owners
listed for .github/workflows/ci.yml; retain it only when the required CODEOWNERS
review is already present, otherwise revert the workflow change.
Sources: Coding guidelines, Learnings
…updates Bumps the github-actions group with 3 updates in the / directory: [dorny/paths-filter](https://github.com/dorny/paths-filter), [actions/cache](https://github.com/actions/cache) and [slackapi/slack-github-action](https://github.com/slackapi/slack-github-action). Updates `dorny/paths-filter` from 3.0.2 to 4.0.2 - [Release notes](https://github.com/dorny/paths-filter/releases) - [Changelog](https://github.com/dorny/paths-filter/blob/master/CHANGELOG.md) - [Commits](dorny/paths-filter@de90cc6...7b450ff) Updates `actions/cache` from 5 to 6 - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](actions/cache@v5...v6) Updates `slackapi/slack-github-action` from 3.0.3 to 3.0.5 - [Release notes](https://github.com/slackapi/slack-github-action/releases) - [Changelog](https://github.com/slackapi/slack-github-action/blob/main/CHANGELOG.md) - [Commits](slackapi/slack-github-action@45a88b9...0d95c9a) --- updated-dependencies: - dependency-name: actions/cache dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: dorny/paths-filter dependency-version: 4.0.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: slackapi/slack-github-action dependency-version: 3.0.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
force-pushed
the
dependabot/github_actions/github-actions-a664b2dd7d
branch
from
July 15, 2026 18:17
e434154 to
8a36ad8
Compare
Contributor
Author
|
Looks like these dependencies are updatable in another way, so this is no longer needed. |
dependabot
Bot
deleted the
dependabot/github_actions/github-actions-a664b2dd7d
branch
July 17, 2026 00:40
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the github-actions group with 3 updates in the / directory: dorny/paths-filter, actions/cache and slackapi/slack-github-action.
Updates
dorny/paths-filterfrom 3.0.2 to 4.0.2Release notes
Sourced from dorny/paths-filter's releases.
Changelog
Sourced from dorny/paths-filter's changelog.
... (truncated)
Commits
7b450ffdocs: update changelog for v4.0.2 (#318)9280377fix: work around git dubious ownership errors in container jobs (#317)f3ceefdfix: use rev-parse instead of branch --show-current for older git compat (#303)61f87a1chore: fix GitHub spelling in logs (#278)b82ff81fix warning message (#282)fbd0ab8feat: add merge_group event supportefb1da7feat: add dist/ freshness check to PR workflowd8f7b06Merge pull request #302 from dorny/issue-299addbc14Update README for v49d7afb8Update CHANGELOG for v4.0.0Updates
actions/cachefrom 5 to 6Release notes
Sourced from actions/cache's releases.
... (truncated)
Changelog
Sourced from actions/cache's changelog.
... (truncated)
Commits
55cc834Merge pull request #1768 from jasongin/readonly-cached8cd72fBump@actions/cacheto v6.1.0 - handle cache write error due to RO token2c8a9bdMerge pull request #1760 from actions/samirat/esm_migration_and_package_updatee9b91fdPrettier fixese4884b8Rebuild dist10baf01Fixed licensese39b386Fix test mock return orderb692820PR feedback6074912Rebuild dist bundles as ESM to match type:module5a912e8Fix lint and jest issuesUpdates
slackapi/slack-github-actionfrom 3.0.3 to 3.0.5Release notes
Sourced from slackapi/slack-github-action's releases.
Changelog
Sourced from slackapi/slack-github-action's changelog.
Commits
0d95c9achore: releasebe88bddchore: release (#639)96fddbefix: revert multiline yaml parsing indentation change (#638)e1f137cchore: release (#636)fa03fe4refactor: send webhooks with the@slack/webhookpackage (#630)0539f0dbuild(deps): bump js-yaml from 4.2.0 to 5.2.0 (#635)2a27647build(deps): bump axios from 1.16.0 to 1.18.1 (#634)84efc65build(deps-dev): bump@types/nodefrom 24.12.4 to 24.13.2 (#633)c61fe04build(deps-dev): bump@biomejs/biomefrom 2.4.16 to 2.5.1 (#632)a2a5362build(deps-dev): bump typescript from 6.0.2 to 6.0.3 (#631)