Skip to content

ci(deps): bump complytime/org-infra/.github/workflows/reusable_security.yml from 0.3.1 to 0.4.0#151

Merged
marcusburghardt merged 1 commit into
mainfrom
dependabot/github_actions/complytime/org-infra/dot-github/workflows/reusable_security.yml-0.4.0
Jun 22, 2026
Merged

ci(deps): bump complytime/org-infra/.github/workflows/reusable_security.yml from 0.3.1 to 0.4.0#151
marcusburghardt merged 1 commit into
mainfrom
dependabot/github_actions/complytime/org-infra/dot-github/workflows/reusable_security.yml-0.4.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 22, 2026

Copy link
Copy Markdown
Contributor

Bumps complytime/org-infra/.github/workflows/reusable_security.yml from 0.3.1 to 0.4.0.

Release notes

Sourced from complytime/org-infra/.github/workflows/reusable_security.yml's releases.

v0.4.0

org-infra 0.4.0

Central reusable GitHub Actions workflows, CI templates, compliance policy assets, and org sync tooling. Downstream repos usually consume this repo via workflow uses: pins or version tags.

Before you upgrade

  • Treat workflow YAML updates as potentially breaking for every consumer until you’ve reviewed them.
  • Use the Workflows & GitHub Actions section below for PRs that touched pipelines; for exact paths and hunks, open the compare link and narrow Files changed to .github/workflows/.

View full diff: v0.3.1v0.4.0

Changes

Maintenance


Compare: v0.3.1v0.4.0

Thanks to @​beatrizmcouto, @​marcusburghardt, @​sonupreetam, @​trevor-vaughan and dependabot[bot] for this release.

Commits
  • bbd7194 ci(deps): bump release-drafter/release-drafter from 7.3.1 to 7.4.0
  • e30c5cd chore(deps): bump pytest from 9.0.3 to 9.1.0 (#343)
  • 29fa2ac chore(deps): bump ruff from 0.15.16 to 0.15.17 (#344)
  • 8b5208c chore(deps): bump https://github.com/astral-sh/ruff-pre-commit (#345)
  • 71c46a3 chore(ci): remove TEMPORARY manual staging of ampel policies (#334)
  • 6d4b387 fix(ci): remove BuildKit provenance that causes "unknown on unknown" in Quay ...
  • c1bc2a2 fix: add id-token permission to promote-quay job
  • 3fee7cb fix(ci): disable SHA tags on complypack Quay promotion
  • b72a180 fix(ci): update ci_test_publish_quay.yml refs for renamed workflow
  • 12eab40 feat(ci): add latest tag to complypack publish pipeline
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jun 22, 2026
@dependabot dependabot Bot requested a review from jflowers as a code owner June 22, 2026 07:43
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jun 22, 2026
@dependabot dependabot Bot requested a review from jpower432 as a code owner June 22, 2026 07:43
@dependabot dependabot Bot added the github_actions Pull requests that update GitHub Actions code label Jun 22, 2026
@dependabot dependabot Bot requested a review from marcusburghardt as a code owner June 22, 2026 07:43
@github-actions

Copy link
Copy Markdown

CRAP Load Analysis

No Go code changes detected in this PR. No CRAP impact.

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Automatically approved: risk=medium, review=success, release_age=135h.

@github-actions

Copy link
Copy Markdown

🤖 Standardized Dependabot Review Summary 🤖

This PR was processed by the organization's reusable CI pipeline.

Criterion Status Detail
Dependencies Review success View logs
Calculated Risk medium complytime/org-infra/.github/workflows/reusable_security.yml v0.4.0
Release Age 135h Released 135 hours ago
Dependency Usage unavailable Informational only — does not affect approval

Auto-approval: ✅ Approved


Maintainer check list:

  1. Ensure the PR passed all CI tests (required status checks).
  2. Investigate failures for Major updates or any manual review requirement.
  3. Don't overlook breaking changes and changelog information.
  4. If the scorecard value is low, consider to contribute to make it higher. Everybody wins!
  5. Be diligent. When in doubt, ask another maintainer for additional review.

@marcusburghardt marcusburghardt left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@marcusburghardt marcusburghardt enabled auto-merge (rebase) June 22, 2026 15:51
@dependabot dependabot Bot force-pushed the dependabot/github_actions/complytime/org-infra/dot-github/workflows/reusable_security.yml-0.4.0 branch from 82b3eb8 to a847edd Compare June 22, 2026 15:52
…ty.yml

Bumps [complytime/org-infra/.github/workflows/reusable_security.yml](https://github.com/complytime/org-infra) from 0.3.1 to 0.4.0.
- [Release notes](https://github.com/complytime/org-infra/releases)
- [Changelog](https://github.com/complytime/org-infra/blob/main/CHANGELOG.md)
- [Commits](complytime/org-infra@2c19341...bbd7194)

---
updated-dependencies:
- dependency-name: complytime/org-infra/.github/workflows/reusable_security.yml
  dependency-version: 0.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@marcusburghardt marcusburghardt force-pushed the dependabot/github_actions/complytime/org-infra/dot-github/workflows/reusable_security.yml-0.4.0 branch from a847edd to a937082 Compare June 22, 2026 15:53
@marcusburghardt marcusburghardt merged commit 842fb5a into main Jun 22, 2026
14 checks passed
@marcusburghardt marcusburghardt deleted the dependabot/github_actions/complytime/org-infra/dot-github/workflows/reusable_security.yml-0.4.0 branch June 22, 2026 15:53
@github-actions

Copy link
Copy Markdown

🤖 Standardized Dependabot Review Summary 🤖

This PR was processed by the organization's reusable CI pipeline.

Criterion Status Detail
Dependencies Review success View logs
Calculated Risk medium complytime/org-infra/.github/workflows/reusable_security.yml v0.4.0
Release Age 143h Released 143 hours ago
Dependency Usage unavailable Informational only — does not affect approval

Auto-approval: ✅ Approved


Maintainer check list:

  1. Ensure the PR passed all CI tests (required status checks).
  2. Investigate failures for Major updates or any manual review requirement.
  3. Don't overlook breaking changes and changelog information.
  4. If the scorecard value is low, consider to contribute to make it higher. Everybody wins!
  5. Be diligent. When in doubt, ask another maintainer for additional review.

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Automatically approved: risk=medium, review=success, release_age=143h.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant