From 4e4a085ed8df838ee01a64b68c1ea94483726942 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 24 Aug 2026 03:57:17 +0000 Subject: [PATCH 1/2] chore(deps): bump the actions-deps group with 3 updates Bumps the actions-deps group with 3 updates: [aws-actions/amazon-ecr-login](https://github.com/aws-actions/amazon-ecr-login), [aws/aws-durable-execution-conformance-tests/.github/workflows/opentelemetry-orchestrator.yml](https://github.com/aws/aws-durable-execution-conformance-tests) and [github/codeql-action/upload-sarif](https://github.com/github/codeql-action). Updates `aws-actions/amazon-ecr-login` from 2.1.6 to 2.1.7 - [Release notes](https://github.com/aws-actions/amazon-ecr-login/releases) - [Changelog](https://github.com/aws-actions/amazon-ecr-login/blob/main/CHANGELOG.md) - [Commits](https://github.com/aws-actions/amazon-ecr-login/compare/d539f0932e70871a027e9d5a9d8fc38589180a64...03f1aad4c6c7ffd436567f42f9384779290529bd) Updates `aws/aws-durable-execution-conformance-tests/.github/workflows/opentelemetry-orchestrator.yml` from 91740c98b496409fa9f1bb8e8e6c329ca8b0185f to a68f527bd42971544a2897123ef5b46b071e7001 - [Release notes](https://github.com/aws/aws-durable-execution-conformance-tests/releases) - [Commits](https://github.com/aws/aws-durable-execution-conformance-tests/compare/91740c98b496409fa9f1bb8e8e6c329ca8b0185f...a68f527bd42971544a2897123ef5b46b071e7001) Updates `github/codeql-action/upload-sarif` from 4.37.7 to 4.37.8 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd...db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28) --- updated-dependencies: - dependency-name: aws-actions/amazon-ecr-login dependency-version: 2.1.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-deps - dependency-name: aws/aws-durable-execution-conformance-tests/.github/workflows/opentelemetry-orchestrator.yml dependency-version: a68f527bd42971544a2897123ef5b46b071e7001 dependency-type: direct:production dependency-group: actions-deps - dependency-name: github/codeql-action/upload-sarif dependency-version: 4.37.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-deps ... Signed-off-by: dependabot[bot] --- .github/workflows/ecr-release.yml | 4 ++-- .github/workflows/opentelemetry-conformance-tests.yml | 2 +- .github/workflows/scorecard.yml | 2 +- 3 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/ecr-release.yml b/.github/workflows/ecr-release.yml index e11aad10..bc4ebe73 100644 --- a/.github/workflows/ecr-release.yml +++ b/.github/workflows/ecr-release.yml @@ -69,7 +69,7 @@ jobs: - name: Login to Amazon ECR id: login-ecr-public - uses: aws-actions/amazon-ecr-login@d539f0932e70871a027e9d5a9d8fc38589180a64 # v2.1.6 + uses: aws-actions/amazon-ecr-login@03f1aad4c6c7ffd436567f42f9384779290529bd # v2.1.7 with: registry-type: public @@ -99,7 +99,7 @@ jobs: aws-region: ${{ env.aws_region }} - name: Login to Amazon ECR - uses: aws-actions/amazon-ecr-login@d539f0932e70871a027e9d5a9d8fc38589180a64 # v2.1.6 + uses: aws-actions/amazon-ecr-login@03f1aad4c6c7ffd436567f42f9384779290529bd # v2.1.7 with: registry-type: public diff --git a/.github/workflows/opentelemetry-conformance-tests.yml b/.github/workflows/opentelemetry-conformance-tests.yml index 6746b1c8..319d4698 100644 --- a/.github/workflows/opentelemetry-conformance-tests.yml +++ b/.github/workflows/opentelemetry-conformance-tests.yml @@ -58,7 +58,7 @@ jobs: actions: write contents: read id-token: write - uses: aws/aws-durable-execution-conformance-tests/.github/workflows/opentelemetry-orchestrator.yml@91740c98b496409fa9f1bb8e8e6c329ca8b0185f + uses: aws/aws-durable-execution-conformance-tests/.github/workflows/opentelemetry-orchestrator.yml@a68f527bd42971544a2897123ef5b46b071e7001 with: language: python resource_prefix: p diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index 801e1e83..7016cd26 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -75,6 +75,6 @@ jobs: # Upload the results to GitHub's code scanning dashboard (optional). # Commenting out will disable upload of results to your repo's Code Scanning dashboard - name: "Upload to code-scanning" - uses: github/codeql-action/upload-sarif@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd # v4.37.7 + uses: github/codeql-action/upload-sarif@db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28 # v4.37.8 with: sarif_file: results.sarif From a1770835dcd6cea51f580b40ddb3a3cc73d711af Mon Sep 17 00:00:00 2001 From: Frank Chen Date: Mon, 24 Aug 2026 14:48:55 +0000 Subject: [PATCH 2/2] test: allow dependabot to update otel workflow --- .../scripts/tests/test_opentelemetry_conformance_workflow.py | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/.github/scripts/tests/test_opentelemetry_conformance_workflow.py b/.github/scripts/tests/test_opentelemetry_conformance_workflow.py index b770f744..7b1f4535 100644 --- a/.github/scripts/tests/test_opentelemetry_conformance_workflow.py +++ b/.github/scripts/tests/test_opentelemetry_conformance_workflow.py @@ -4,7 +4,6 @@ WORKFLOW_PATH = ( Path(__file__).parents[2] / "workflows" / "opentelemetry-conformance-tests.yml" ) -ORCHESTRATOR_REVISION = "91740c98b496409fa9f1bb8e8e6c329ca8b0185f" EXAMPLES_DIR = ( ".build/durable-sdk/packages/aws-durable-execution-sdk-python-conformance-tests-otel" ) @@ -17,7 +16,7 @@ def test_opentelemetry_conformance_caller_uses_current_workflow_contract() -> No orchestrator = ( "uses: aws/aws-durable-execution-conformance-tests/.github/workflows/" - f"opentelemetry-orchestrator.yml@{ORCHESTRATOR_REVISION}" + "opentelemetry-orchestrator.yml@" ) assert orchestrator in workflow assert "python-opentelemetry.yml@" not in workflow