Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

chore(deps): bump actions/dependency-review-action from 4.8.1 to 4.8.2

Closed
Number: #7662
Type: Pull Request
State: Closed
Author: dependabot[bot] dependabot[bot]
Association: Unknown
Comments: 1
Created: November 11, 2025 at 08:06 PM UTC
(19 days ago)
Updated: November 13, 2025 at 02:57 PM UTC
(17 days ago)
Closed: November 13, 2025 at 02:56 PM UTC
(17 days ago)
Time to Close: 2 days
Labels:
dependencies internal size/XS github-actions github_actions
Description:

Bumps actions/dependency-review-action from 4.8.1 to 4.8.2.

Release notes

Sourced from actions/dependency-review-action's releases.

v4.8.2

Minor fixes:

Commits
  • 3c4e3dc Merge pull request #1016 from actions/dra-release
  • 02930b2 Update CONTRIBUTING to reflect new guidelines
  • 49ffd9f Update CONTRIBUTING to reflect the need to build
  • 70cb25e 4.8.2 release
  • ebabd31 Merge pull request #1008 from danielhardej/danielhardej-patch-20251023
  • 19f9360 Update package-lock.json
  • 5fd2f98 Bump @​types/jest to version 29.5.14
  • 28647f4 Fix PURL parsing by removing encodeURI
  • f620fd1 Merge pull request #1013 from actions/dangoor/token-fix
  • 9b42b7e Remove bad token reference
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Package Dependencies
Package:
actions/dependency-review-action
Ecosystem:
actions
Version Change:
4.8.1 → 4.8.2
Update Type:
Patch
Actions
View on GitHub View Repository All Dependabot PRs
Technical Details
ID: 11013922
UUID: 3613732469
Node ID: PR_kwDODTo4k86y1Trj
Host: GitHub
Repository: aws-powertools/powertools-lambda-python