Skip to content

chore(deps): update ferrlabs/.github digest to fbe42a0 - #1355

Open
ferrlabs-renovate[bot] wants to merge 1 commit into
mainfrom
renovate/ferrlabs-actions
Open

ferrlabs-renovate[bot] wants to merge 1 commit into
mainfrom
renovate/ferrlabs-actions

Conversation

@ferrlabs-renovate

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change
FerrLabs/.github (changelog) workflow digest 6cbce94 → fbe42a0

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

Signed-off-by: ferrlabs-renovate[bot] <282300760+ferrlabs-renovate[bot]@users.noreply.github.com>
@ferrlabs-renovate
ferrlabs-renovate Bot enabled auto-merge (squash) October 26, 2026 14:02
contents: read
security-events: write
uses: FerrLabs/.github/.github/workflows/reusable-security-scan.yml@6cbce9484213fb41b2384441f01fa4bf1b9a6983 # main
uses: FerrLabs/.github/.github/workflows/reusable-security-scan.yml@fbe42a0de74cc0a9de20e853201f95db37fbddc0 # main
contents: read
pull-requests: write
uses: FerrLabs/.github/.github/workflows/reusable-sonarqube-scan.yml@6cbce9484213fb41b2384441f01fa4bf1b9a6983 # main
uses: FerrLabs/.github/.github/workflows/reusable-sonarqube-scan.yml@fbe42a0de74cc0a9de20e853201f95db37fbddc0 # main

@ferrfleet-interne ferrfleet-interne Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This only bumps the pinned digest. I checked the five reusable workflows at fbe42a0 against this repo's callers: every input passed here still exists there (max-total-time, timeout-minutes, runner, project-key, coverage-artifact, args). The callers already pass SONAR_TOKEN through secrets: inherit, and the new version requires it. Nothing blocking. The sign-off and PR title checks pass. Fuzz and the security scan were still running when I looked.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant