Build: Bump zizmorcore/zizmor-action from 0.6.2 to 0.6.3 - #3920
dependabot[bot] wants to merge 2 commits into
Conversation
Bumps [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action) from 0.6.2 to 0.6.3. - [Release notes](https://github.com/zizmorcore/zizmor-action/releases) - [Commits](zizmorcore/zizmor-action@3dc1ecc...70fb788) --- updated-dependencies: - dependency-name: zizmorcore/zizmor-action dependency-version: 0.6.3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
rambleraptor
left a comment
There was a problem hiding this comment.
Can we close this? Seems like a lot of changes for a dependabot PR.
|
@rambleraptor I tried to fix the issues on the branch itself. Still something we have to follow up on. |
|
@dependabot rebase |
|
Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry! If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request |
|
@Fokko that makes sense. I made a separate PR (#4014) with you as a co-author to move us over to Ruff. Once that happens, we should be able to do a clean rebase and have this PR work. (We can also add in zizmor-action upgrade to the new PR or somewhere else. Was trying to keep a clean record in case we ever need to revert something) |
Bumps zizmorcore/zizmor-action from 0.6.2 to 0.6.3.
Release notes
Sourced from zizmorcore/zizmor-action's releases.
Commits
70fb788Sync zizmor versions (#162)7999d8cchore(deps): bump github/codeql-action/upload-sarif from 4.37.6 to 4.37.7 in ...2ae1ce9chore(deps): bump github/codeql-action/upload-sarif (#160)951a5eeSkip prerelease versions in sync-zizmor-versions workflow (#158)79f0191chore(deps): bump github/codeql-action/upload-sarif (#156)26a3ae6sync-zizmor-versions: retry up to 5 times (#155)435cb31chore(deps): bump github/codeql-action/upload-sarif (#151)d6cec10Try the new self-referencing syntax (#148)edd9b84README: bump pins (#150)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)