chore(deps): bump actions/create-github-app-token from 3.1.1 to 3.2.0#239
Conversation
Bumps [actions/create-github-app-token](https://github.com/actions/create-github-app-token) from 3.1.1 to 3.2.0. - [Release notes](https://github.com/actions/create-github-app-token/releases) - [Changelog](https://github.com/actions/create-github-app-token/blob/main/CHANGELOG.md) - [Commits](actions/create-github-app-token@1b10c78...bcd2ba4) --- updated-dependencies: - dependency-name: actions/create-github-app-token dependency-version: 3.2.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
|
|
There was a problem hiding this comment.
Pull request overview
Dependabot bump of the actions/create-github-app-token GitHub Action from v3.1.1 to v3.2.0 across the four Gemini automation workflows. The new SHA bcd2ba4... corresponds to the v3.2.0 release, which adds enterprise GitHub App support, full repository name support, and private-key input validation. The repo's usage only passes app-id and private-key, so the new features don't affect behavior, and the patch-level dependency updates within v3.2.0 are low-risk.
Changes:
- Bump pinned commit SHA for
actions/create-github-app-tokenfrom1b10c78...(v3.1.1) tobcd2ba4...(v3.2.0) in all four Gemini workflow files.
Reviewed changes
Copilot reviewed 4 out of 4 changed files in this pull request and generated no comments.
| File | Description |
|---|---|
| .github/workflows/gemini-pr-review.yml | Updates pinned SHA for create-github-app-token to v3.2.0. |
| .github/workflows/gemini-issue-scheduled-triage.yml | Updates pinned SHA for create-github-app-token to v3.2.0. |
| .github/workflows/gemini-issue-automated-triage.yml | Updates pinned SHA for create-github-app-token to v3.2.0. |
| .github/workflows/gemini-cli.yml | Updates pinned SHA for create-github-app-token to v3.2.0. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
Bumps actions/create-github-app-token from 3.1.1 to 3.2.0.
Release notes
Sourced from actions/create-github-app-token's releases.
Changelog
Sourced from actions/create-github-app-token's changelog.
Commits
bcd2ba4chore(main): release 3.2.0 (#370)f24bbd8fix: validate private-key input (#376)363531bdocs: capitalize Git as a proper noun in README (#374)fd28011docs: update procedure to configure Git (#287)85eb8ddfeat: support full repository names inrepositoriesinput (#372)c9aabb8build(deps-dev): bump yaml from 2.8.3 to 2.8.4 in the development-dependencie...e02e816build(deps-dev): bump undici from 7.24.6 to 8.2.0 (#366)8d835bfbuild(deps-dev): bump esbuild from 0.27.4 to 0.28.0 in the development-depend...952a2a7feat: add support for enterprise-level GitHub Apps (#263)43e5c34fix(deps): bump@actions/corefrom 3.0.0 to 3.0.1 in the production-dependenc...Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)