Skip to content

Commit cf5caee

Browse files
chore(deps): bump the compatible group with 2 updates (#115)
Bumps the compatible group with 2 updates: [actions/create-github-app-token](https://github.com/actions/create-github-app-token) and [frequenz-floss/gh-action-dependabot-migrate](https://github.com/frequenz-floss/gh-action-dependabot-migrate). Updates `actions/create-github-app-token` from 3.1.1 to 3.2.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/create-github-app-token/releases">actions/create-github-app-token's releases</a>.</em></p> <blockquote> <h2>v3.2.0</h2> <h2><a href="https://github.com/actions/create-github-app-token/compare/v3.1.1...v3.2.0">3.2.0</a> (2026-05-12)</h2> <h3>Features</h3> <ul> <li>add support for enterprise-level GitHub Apps (<a href="https://redirect.github.com/actions/create-github-app-token/issues/263">#263</a>) (<a href="https://github.com/actions/create-github-app-token/commit/952a2a7073df6bfa5f49bc469ec895b6ec1acea4">952a2a7</a>)</li> <li>support full repository names in <code>repositories</code> input (<a href="https://redirect.github.com/actions/create-github-app-token/issues/372">#372</a>) (<a href="https://github.com/actions/create-github-app-token/commit/85eb8dd41472213aed25d1a126460e0069138ab6">85eb8dd</a>)</li> </ul> <h3>Bug Fixes</h3> <ul> <li><strong>deps:</strong> bump <code>@​actions/core</code> from 3.0.0 to 3.0.1 in the production-dependencies group (<a href="https://redirect.github.com/actions/create-github-app-token/issues/364">#364</a>) (<a href="https://github.com/actions/create-github-app-token/commit/43e5c345bfd4d4f3ecea019ad0042001a09dd857">43e5c34</a>)</li> <li>validate private-key input (<a href="https://redirect.github.com/actions/create-github-app-token/issues/376">#376</a>) (<a href="https://github.com/actions/create-github-app-token/commit/f24bbd89643991c0de27ae823c01791b2c6bafdd">f24bbd8</a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/actions/create-github-app-token/blob/main/CHANGELOG.md">actions/create-github-app-token's changelog</a>.</em></p> <blockquote> <h1>Changelog</h1> <h2><a href="https://github.com/actions/create-github-app-token/compare/v3.1.1...v3.2.0">3.2.0</a> (2026-05-12)</h2> <h3>Features</h3> <ul> <li>add support for enterprise-level GitHub Apps (<a href="https://redirect.github.com/actions/create-github-app-token/issues/263">#263</a>) (<a href="https://github.com/actions/create-github-app-token/commit/952a2a7073df6bfa5f49bc469ec895b6ec1acea4">952a2a7</a>)</li> <li>support full repository names in <code>repositories</code> input (<a href="https://redirect.github.com/actions/create-github-app-token/issues/372">#372</a>) (<a href="https://github.com/actions/create-github-app-token/commit/85eb8dd41472213aed25d1a126460e0069138ab6">85eb8dd</a>)</li> </ul> <h3>Bug Fixes</h3> <ul> <li><strong>deps:</strong> bump <code>@​actions/core</code> from 3.0.0 to 3.0.1 in the production-dependencies group (<a href="https://redirect.github.com/actions/create-github-app-token/issues/364">#364</a>) (<a href="https://github.com/actions/create-github-app-token/commit/43e5c345bfd4d4f3ecea019ad0042001a09dd857">43e5c34</a>)</li> <li>validate private-key input (<a href="https://redirect.github.com/actions/create-github-app-token/issues/376">#376</a>) (<a href="https://github.com/actions/create-github-app-token/commit/f24bbd89643991c0de27ae823c01791b2c6bafdd">f24bbd8</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/actions/create-github-app-token/commit/bcd2ba49218906704ab6c1aa796996da409d3eb1"><code>bcd2ba4</code></a> chore(main): release 3.2.0 (<a href="https://redirect.github.com/actions/create-github-app-token/issues/370">#370</a>)</li> <li><a href="https://github.com/actions/create-github-app-token/commit/f24bbd89643991c0de27ae823c01791b2c6bafdd"><code>f24bbd8</code></a> fix: validate private-key input (<a href="https://redirect.github.com/actions/create-github-app-token/issues/376">#376</a>)</li> <li><a href="https://github.com/actions/create-github-app-token/commit/363531b6d972a60a00b3f1e6bb139e5e6c764cd9"><code>363531b</code></a> docs: capitalize Git as a proper noun in README (<a href="https://redirect.github.com/actions/create-github-app-token/issues/374">#374</a>)</li> <li><a href="https://github.com/actions/create-github-app-token/commit/fd2801133e469d2950f2c5af5e591d6b2ad833c8"><code>fd28011</code></a> docs: update procedure to configure Git (<a href="https://redirect.github.com/actions/create-github-app-token/issues/287">#287</a>)</li> <li><a href="https://github.com/actions/create-github-app-token/commit/85eb8dd41472213aed25d1a126460e0069138ab6"><code>85eb8dd</code></a> feat: support full repository names in <code>repositories</code> input (<a href="https://redirect.github.com/actions/create-github-app-token/issues/372">#372</a>)</li> <li><a href="https://github.com/actions/create-github-app-token/commit/c9aabb83728c3bd519212fa657ebc07e1f2a5dec"><code>c9aabb8</code></a> build(deps-dev): bump yaml from 2.8.3 to 2.8.4 in the development-dependencie...</li> <li><a href="https://github.com/actions/create-github-app-token/commit/e02e816e5591415258a53bf735aff57977dcd5e2"><code>e02e816</code></a> build(deps-dev): bump undici from 7.24.6 to 8.2.0 (<a href="https://redirect.github.com/actions/create-github-app-token/issues/366">#366</a>)</li> <li><a href="https://github.com/actions/create-github-app-token/commit/8d835bfd37aa48fcb8e709925115857568d98bc4"><code>8d835bf</code></a> build(deps-dev): bump esbuild from 0.27.4 to 0.28.0 in the development-depend...</li> <li><a href="https://github.com/actions/create-github-app-token/commit/952a2a7073df6bfa5f49bc469ec895b6ec1acea4"><code>952a2a7</code></a> feat: add support for enterprise-level GitHub Apps (<a href="https://redirect.github.com/actions/create-github-app-token/issues/263">#263</a>)</li> <li><a href="https://github.com/actions/create-github-app-token/commit/43e5c345bfd4d4f3ecea019ad0042001a09dd857"><code>43e5c34</code></a> fix(deps): bump <code>@​actions/core</code> from 3.0.0 to 3.0.1 in the production-dependenc...</li> <li>Additional commits viewable in <a href="https://github.com/actions/create-github-app-token/compare/v3.1.1...bcd2ba49218906704ab6c1aa796996da409d3eb1">compare view</a></li> </ul> </details> <br /> Updates `frequenz-floss/gh-action-dependabot-migrate` from 1.2.0 to 1.3.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/frequenz-floss/gh-action-dependabot-migrate/releases">frequenz-floss/gh-action-dependabot-migrate's releases</a>.</em></p> <blockquote> <h2>v1.3.0</h2> <h2>New Features</h2> <p>This release introduces a new detection for recreated PRs.</p> <p>The migration will be re-run automatically when <code>@dependabot recreate</code> is used, without the need to remove the <code>migration:executed</code> label.</p> <h2>What's Changed</h2> <ul> <li>Bump actions/create-github-app-token from 3.1.1 to 3.2.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/frequenz-floss/gh-action-dependabot-migrate/pull/23">frequenz-floss/gh-action-dependabot-migrate#23</a></li> <li>Bump actions/checkout from 6.0.2 to 7.0.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/frequenz-floss/gh-action-dependabot-migrate/pull/26">frequenz-floss/gh-action-dependabot-migrate#26</a></li> <li>Bump planetscale/ghcommit-action from 0.2.20 to 0.2.22 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/frequenz-floss/gh-action-dependabot-migrate/pull/25">frequenz-floss/gh-action-dependabot-migrate#25</a></li> <li>Bump actions/setup-python from 6.2.0 to 6.3.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/frequenz-floss/gh-action-dependabot-migrate/pull/28">frequenz-floss/gh-action-dependabot-migrate#28</a></li> <li>Bump reviewdog/action-yamllint from 1.21.0 to 1.22.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/frequenz-floss/gh-action-dependabot-migrate/pull/27">frequenz-floss/gh-action-dependabot-migrate#27</a></li> <li>Update rebased PRs automatically by <a href="https://github.com/llucax"><code>@​llucax</code></a> in <a href="https://redirect.github.com/frequenz-floss/gh-action-dependabot-migrate/pull/29">frequenz-floss/gh-action-dependabot-migrate#29</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/frequenz-floss/gh-action-dependabot-migrate/compare/v1.2.1...v1.3.0">https://github.com/frequenz-floss/gh-action-dependabot-migrate/compare/v1.2.1...v1.3.0</a></p> <h2>v1.2.1</h2> <h2>What's Changed</h2> <ul> <li>Avoid setting migration labels if committing fails by <a href="https://github.com/llucax"><code>@​llucax</code></a> in <a href="https://redirect.github.com/frequenz-floss/gh-action-dependabot-migrate/pull/22">frequenz-floss/gh-action-dependabot-migrate#22</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/frequenz-floss/gh-action-dependabot-migrate/compare/v1.2.0...v1.2.1">https://github.com/frequenz-floss/gh-action-dependabot-migrate/compare/v1.2.0...v1.2.1</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/frequenz-floss/gh-action-dependabot-migrate/commit/e93e3b50930132717c9aabdd09413a6737d4b7ef"><code>e93e3b5</code></a> Merge pull request <a href="https://redirect.github.com/frequenz-floss/gh-action-dependabot-migrate/issues/29">#29</a> from llucax/fix-20</li> <li><a href="https://github.com/frequenz-floss/gh-action-dependabot-migrate/commit/08d0778aeb860bf7d2d48b4f21725d9d960fe77e"><code>08d0778</code></a> Update rebased PRs automatically</li> <li><a href="https://github.com/frequenz-floss/gh-action-dependabot-migrate/commit/39af0afb7c536e64db86fe6a20bc318b87877705"><code>39af0af</code></a> Add action wiring tests for composite action</li> <li><a href="https://github.com/frequenz-floss/gh-action-dependabot-migrate/commit/cb8adfe02a8afac103fbbb97151bab59383fc550"><code>cb8adfe</code></a> Merge pull request <a href="https://redirect.github.com/frequenz-floss/gh-action-dependabot-migrate/issues/27">#27</a> from frequenz-floss/dependabot/github_actions/reviewdo...</li> <li><a href="https://github.com/frequenz-floss/gh-action-dependabot-migrate/commit/62ed6472ad248e2de48ddabce31cb0bdcf62108b"><code>62ed647</code></a> Merge pull request <a href="https://redirect.github.com/frequenz-floss/gh-action-dependabot-migrate/issues/28">#28</a> from frequenz-floss/dependabot/github_actions/actions/...</li> <li><a href="https://github.com/frequenz-floss/gh-action-dependabot-migrate/commit/10bc2efb88fc4fb09bc6d673c18de710f8cc89d0"><code>10bc2ef</code></a> Merge pull request <a href="https://redirect.github.com/frequenz-floss/gh-action-dependabot-migrate/issues/25">#25</a> from frequenz-floss/dependabot/github_actions/planetsc...</li> <li><a href="https://github.com/frequenz-floss/gh-action-dependabot-migrate/commit/71890d5f1143f319b7b37459cf98ca7b814ae4b9"><code>71890d5</code></a> Merge pull request <a href="https://redirect.github.com/frequenz-floss/gh-action-dependabot-migrate/issues/26">#26</a> from frequenz-floss/dependabot/github_actions/actions/...</li> <li><a href="https://github.com/frequenz-floss/gh-action-dependabot-migrate/commit/c586170ebd60db3b41f9733ab8ff4cc58c7d9b5e"><code>c586170</code></a> Bump actions/setup-python from 6.2.0 to 6.3.0</li> <li><a href="https://github.com/frequenz-floss/gh-action-dependabot-migrate/commit/2b873200f17c5edc8bcf2d7c4bf28f20bd5bde1b"><code>2b87320</code></a> Bump reviewdog/action-yamllint from 1.21.0 to 1.22.0</li> <li><a href="https://github.com/frequenz-floss/gh-action-dependabot-migrate/commit/3a9b01febfc69d26936991535ceaeb7256158940"><code>3a9b01f</code></a> Bump actions/checkout from 6.0.2 to 7.0.0</li> <li>Additional commits viewable in <a href="https://github.com/frequenz-floss/gh-action-dependabot-migrate/compare/27763fb5eb56476d91abe00132e8a0614171f92f...e93e3b50930132717c9aabdd09413a6737d4b7ef">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details>
2 parents 0bedacd + 9831299 commit cf5caee

4 files changed

Lines changed: 6 additions & 6 deletions

File tree

.github/workflows/black-migration.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -66,7 +66,7 @@ jobs:
6666
# Read/update pull request metadata and labels.
6767
permission-pull-requests: write
6868
- name: Migrate
69-
uses: frequenz-floss/gh-action-dependabot-migrate@27763fb5eb56476d91abe00132e8a0614171f92f # v1.2.0
69+
uses: frequenz-floss/gh-action-dependabot-migrate@e93e3b50930132717c9aabdd09413a6737d4b7ef # v1.3.0
7070
with:
7171
migration-script: |
7272
import os

.github/workflows/grpc-migration.yaml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -63,7 +63,7 @@ jobs:
6363
steps:
6464
- name: Generate token
6565
id: create-app-token
66-
uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v3.1.1
66+
uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
6767
with:
6868
app-id: ${{ secrets.FREQUENZ_AUTO_DEPENDABOT_APP_ID }}
6969
private-key: ${{ secrets.FREQUENZ_AUTO_DEPENDABOT_APP_PRIVATE_KEY }}
@@ -74,7 +74,7 @@ jobs:
7474
# Read/update pull request metadata and labels.
7575
permission-pull-requests: write
7676
- name: Migrate
77-
uses: frequenz-floss/gh-action-dependabot-migrate@27763fb5eb56476d91abe00132e8a0614171f92f # v1.2.0
77+
uses: frequenz-floss/gh-action-dependabot-migrate@e93e3b50930132717c9aabdd09413a6737d4b7ef # v1.3.0
7878
with:
7979
script-url-template: >- # v0.18.0
8080
https://raw.githubusercontent.com/frequenz-floss/frequenz-repo-config-python/529d30b554392e6d8b66e84e92c04ac9cd170da7/cookiecutter/scripts/dependabot-grpc-fixer.py

.github/workflows/isort-migration.yaml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -58,7 +58,7 @@ jobs:
5858
steps:
5959
- name: Generate token
6060
id: create-app-token
61-
uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v3.1.1
61+
uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
6262
with:
6363
app-id: ${{ secrets.FREQUENZ_AUTO_DEPENDABOT_APP_ID }}
6464
private-key: ${{ secrets.FREQUENZ_AUTO_DEPENDABOT_APP_PRIVATE_KEY }}
@@ -69,7 +69,7 @@ jobs:
6969
# Read/update pull request metadata and labels.
7070
permission-pull-requests: write
7171
- name: Migrate
72-
uses: frequenz-floss/gh-action-dependabot-migrate@27763fb5eb56476d91abe00132e8a0614171f92f # v1.2.0
72+
uses: frequenz-floss/gh-action-dependabot-migrate@e93e3b50930132717c9aabdd09413a6737d4b7ef # v1.3.0
7373
with:
7474
migration-script: |
7575
import os

.github/workflows/repo-config-migration.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -58,7 +58,7 @@ jobs:
5858
# Allow pushes when migration changes workflow files.
5959
permission-workflows: write
6060
- name: Migrate
61-
uses: frequenz-floss/gh-action-dependabot-migrate@27763fb5eb56476d91abe00132e8a0614171f92f # v1.2.0
61+
uses: frequenz-floss/gh-action-dependabot-migrate@e93e3b50930132717c9aabdd09413a6737d4b7ef # v1.3.0
6262
with:
6363
script-url-template: >-
6464
https://raw.githubusercontent.com/frequenz-floss/frequenz-repo-config-python/{version}/cookiecutter/migrate.py

0 commit comments

Comments
 (0)