Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

[GITHUB-ACTIONS] bump the github-actions group with 3 updates

Open
Number: #298
Type: Pull Request
State: Open
Author: dependabot[bot] dependabot[bot]
Association: Contributor
Comments: 0
Created: July 13, 2025 at 02:54 AM UTC
(11 months ago)
Updated: July 13, 2025 at 02:54 AM UTC
(11 months ago)
Labels:
dependencies github_actions
Description:

Bumps the github-actions group with 3 updates: slackapi/slack-github-action, crs-k/stale-branches and bridgecrewio/checkov-action.

Updates slackapi/slack-github-action from 2.1.0 to 2.1.1

Release notes

Sourced from slackapi/slack-github-action's releases.

Slack Send v2.1.1

What's Changed

This release fixes an issue where substituted variables might've broken valid JSON or YAML parsings when using the payload-file-path input option.

🐛 Bug fixes

📚 Documentation

🤖 Dependencies

🧰 Maintenance

Full Changelog: https://github.com/slackapi/slack-github-action/compare/v2.1.0...v2.1.1

Commits
  • 91efab1 Release
  • b6f4640 chore(release): tag version 2.1.1 (#474)
  • d3dc61e build(deps-dev): bump @​biomejs/biome from 1.9.4 to 2.0.6 (#470)
  • f647c89 build(deps-dev): bump @​types/node from 24.0.3 to 24.0.8 (#472)
  • e6fa633 build(deps-dev): bump sinon from 20.0.0 to 21.0.0 (#471)
  • 75b7822 build(deps-dev): bump mocha-suppress-logs from 0.5.1 to 0.6.0 (#469)
  • d7b6150 build(deps-dev): bump mocha from 11.5.0 to 11.7.1 (#468)
  • a7f5b68 build: clone repository "docs" and configuration when syncing project docs (#...
  • c69deab build(deps-dev): bump @​types/node from 22.15.29 to 24.0.3 (#466)
  • 1d0943c build(deps): bump axios from 1.9.0 to 1.10.0 (#465)
  • Additional commits viewable in compare view

Updates crs-k/stale-branches from 8.2.0 to 8.2.1

Release notes

Sourced from crs-k/stale-branches's releases.

v8.2.1

What's Changed

🧰 Maintenance

... (truncated)

Commits
  • de68d93 Fix PR check bug: prevent deletion of branches with active PRs (#1510)
  • c446e97 chore(deps-dev): bump eslint from 9.30.1 to 9.31.0 (#1513)
  • e1b826b chore(deps-dev): bump @​eslint/js from 9.30.1 to 9.31.0 (#1512)
  • 3d99c64 chore(deps-dev): bump @​types/node from 24.0.12 to 24.0.13 (#1511)
  • ce98187 chore(deps-dev): bump npm-package-json-lint from 8.0.0 to 9.0.0 (#1502)
  • a19a9ab chore(deps-dev): bump @​types/node from 24.0.10 to 24.0.12 (#1509)
  • 7bd81ad chore(deps-dev): bump @​typescript-eslint/eslint-plugin (#1508)
  • bda3564 chore(deps-dev): bump @​typescript-eslint/parser from 8.35.1 to 8.36.0 (#1507)
  • c82de86 chore(deps-dev): bump globals from 16.2.0 to 16.3.0 (#1506)
  • 10de260 chore(deps-dev): bump @​eslint/js from 9.30.0 to 9.30.1 (#1505)
  • Additional commits viewable in compare view

Updates bridgecrewio/checkov-action from 12.3036.0 to 12.3039.0

Commits
  • 6375fb7 Bump checkov container version to 3.2.450
  • 414cfde Bump checkov container version to 3.2.449
  • f55786e Bump checkov container version to 3.2.448
  • See full diff in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
Pull Request Statistics
Commits:
1
Files Changed:
7
Additions:
+8
Deletions:
-8
Package Dependencies
Package:
bridgecrewio/checkov-action
Ecosystem:
actions
Version Change:
12.3036.0 → 12.3039.0
Update Type:
Minor
Package:
slackapi/slack-github-action
Ecosystem:
actions
Version Change:
2.1.0 → 2.1.1
Update Type:
Patch
Package:
crs-k/stale-branches
Ecosystem:
actions
Version Change:
8.2.0 → 8.2.1
Update Type:
Patch
Actions
View on GitHub View Repository All Dependabot PRs
Technical Details
ID: 3160383
UUID: 2661902965
Node ID: PR_kwDOOZgZRc6eqWp1
Host: GitHub
Repository: tagdots-dev/python-test
Merge State: Unknown