Bump dependabot/fetch-metadata from 2.2.0 to 2.5.0
Open
Number: #970
Type: Pull Request
State: Open
Type: Pull Request
State: Open
Author:
dependabot[bot]
Association: Unknown
Comments: 1
Association: Unknown
Comments: 1
Created:
March 02, 2026 at 03:03 AM UTC
(3 months ago)
(3 months ago)
Updated:
March 02, 2026 at 03:06 AM UTC
(3 months ago)
(3 months ago)
Labels:
dependencies github_actions
dependencies github_actions
Description:
Bumps dependabot/fetch-metadata from 2.2.0 to 2.5.0.
Release notes
Sourced from dependabot/fetch-metadata's releases.
v2.5.0
What's Changed
- Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 by
@dependabot[bot] in dependabot/fetch-metadata#628- Bump the dev-dependencies group with 11 updates by
@dependabot[bot] in dependabot/fetch-metadata#629- Bump actions/create-github-app-token from 2.0.6 to 2.1.1 by
@dependabot[bot] in dependabot/fetch-metadata#635- Bump actions/create-github-app-token from 2.1.1 to 2.1.4 by
@dependabot[bot] in dependabot/fetch-metadata#638- Bump actions/checkout from 4 to 5 by
@dependabot[bot] in dependabot/fetch-metadata#636- Bump actions/setup-node from 4 to 5 by
@dependabot[bot] in dependabot/fetch-metadata#637- Bump actions/setup-node from 5 to 6 by
@dependabot[bot] in dependabot/fetch-metadata#639- Bump actions/create-github-app-token from 2.1.4 to 2.2.0 by
@dependabot[bot] in dependabot/fetch-metadata#643- Bump actions/checkout from 5 to 6 by
@dependabot[bot] in dependabot/fetch-metadata#642- Bump actions/create-github-app-token from 2.2.0 to 2.2.1 by
@dependabot[bot] in dependabot/fetch-metadata#648- Bump js-yaml from 3.14.1 to 3.14.2 by
@dependabot[bot] in dependabot/fetch-metadata#644- Bump express from 5.1.0 to 5.2.1 by
@dependabot[bot] in dependabot/fetch-metadata#645- Bump
@modelcontextprotocol/sdkfrom 1.11.2 to 1.24.0 by@dependabot[bot] in dependabot/fetch-metadata#647- v2.5.0 by
@fetch-metadata-action-automation[bot] in dependabot/fetch-metadata#631Full Changelog: https://github.com/dependabot/fetch-metadata/compare/v2...v2.5.0
v2.4.0
What's Changed
- Bump actions/create-github-app-token from 1.11.0 to 1.11.3 by
@dependabotin dependabot/fetch-metadata#598- Bump
@vercel/nccfrom 0.38.1 to 0.38.3 by@dependabotin dependabot/fetch-metadata#578- Add missing
@octokit/request-errortopackage.jsonby@jeffwidmanin dependabot/fetch-metadata#605- Bump to ESLint 9 by
@jeffwidmanin dependabot/fetch-metadata#606- Stop using a node16 devcontainer image by
@jeffwidmanin dependabot/fetch-metadata#608- Make typescript compile to
"es2022"by@jeffwidmanin dependabot/fetch-metadata#609- Bump the dev-dependencies group across 1 directory with 8 updates by
@dependabotin dependabot/fetch-metadata#607- Tidy up examples slightly by
@jeffwidmanin dependabot/fetch-metadata#611- Fixup some anchor tags that weren't deeplinking by
@jeffwidmanin dependabot/fetch-metadata#614- Remove unnecessary hardcoding of
refby@jeffwidmanin dependabot/fetch-metadata#617- Bump actions/create-github-app-token from 1.11.3 to 2.0.2 by
@dependabotin dependabot/fetch-metadata#616- Enable caching of
npm install/npm ciforsetup-nodeaction by@jeffwidmanin dependabot/fetch-metadata#618- Add workflow to publish new version of immutable action on every release by
@jeffwidmanin dependabot/fetch-metadata#623- Bump actions/create-github-app-token from 2.0.2 to 2.0.6 by
@dependabotin dependabot/fetch-metadata#621- v2.4.0 by
@fetch-metadata-action-automationin dependabot/fetch-metadata#594Full Changelog: https://github.com/dependabot/fetch-metadata/compare/v2...v2.4.0
v2.3.0
What's Changed
- Bump actions/create-github-app-token from 1.10.2 to 1.10.3 by
@dependabotin dependabot/fetch-metadata#537- Update readme to include an if conditional by
@Nishnhain dependabot/fetch-metadata#548- Silence audit and funding messages from
npmby@jeffwidmanin dependabot/fetch-metadata#550- Bump actions/create-github-app-token from 1.10.3 to 1.11.0 by
@dependabotin dependabot/fetch-metadata#554- fix readme action example by
@CloudNStoyanin dependabot/fetch-metadata#563- Fixed missing outputs in action.yml by
@CatChenin dependabot/fetch-metadata#564- Handle branch names containing dependency group by
@CloudNStoyanin dependabot/fetch-metadata#565
... (truncated)
Commits
21025c7v2.5.0252291cMerge pull request #647 from dependabot/dependabot/npm_and_yarn/modelcontextp...fa144c9chore: Migrate jest expectation function33c7a0bbug: Mock PR body in test99c27adBump@modelcontextprotocol/sdkfrom 1.11.2 to 1.24.03837dccMerge pull request #645 from dependabot/dependabot/npm_and_yarn/express-5.2.1d411582Bump express from 5.1.0 to 5.2.1186ccbbMerge pull request #644 from dependabot/dependabot/npm_and_yarn/js-yaml-3.14.284c891eBump js-yaml from 3.14.1 to 3.14.24542092Merge pull request #648 from dependabot/dependabot/github_actions/actions/cre...- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Package Dependencies
Package:
dependabot/fetch-metadata
Ecosystem:
actions
actions
Version Change:
2.2.0 → 2.5.0
Update Type:
Minor
Minor
Technical Details
| ID: | 14289080 |
| UUID: | 4009007755 |
| Node ID: | PR_kwDOFScmCc7HN4Hq |
| Host: | GitHub |
| Repository: | Checkmarx/ast-cli-javascript-wrapper |