Repository navigation
Conversation
…fests.yaml Bumps [devantler-tech/.github/.github/workflows/publish-manifests.yaml](https://github.com/devantler-tech/.github) from 10.0.3 to 19.0.0. - [Release notes](https://github.com/devantler-tech/.github/releases) - [Commits](0f39032...2082a0a) --- updated-dependencies: - dependency-name: devantler-tech/.github/.github/workflows/publish-manifests.yaml dependency-version: 19.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
![botantler-1[bot]](https://avatars.githubusercontent.com/in/1025824?s=60&v=4){kind=small}
Code coverage overviewLanguages: Go Go / code-coverage/test
Go / code-coverage/go
ℹ️ Calculations represent line coverage. Results may change as calculations are updated. Updated |
Contributor
Blocker: none Cleared 2026-10-31: platform#5620 merged 16:14Z; live github-config OCIRepository subject reads bd24a3e (v19.0.3); PR moved to v19.0.3 at 8c381c3 Previous record (historical): |
devantler
marked this pull request as draft
October 31, 2026 16:37
auto-merge was automatically disabled
October 31, 2026 16:37
Pull request was converted to draft
…ions/devantler-tech/dot-github/dot-github/workflows/publish-manifests.yaml-19.0.0
The platform deployed approval for this exact signer in platform#5620 and the live OCIRepository subject reads it back. The workflow gains only a job timeout and two newer pinned actions; its two helper scripts are byte-identical. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
devantler
changed the title
devantler
reviewed
Oct 31, 2026
devantler
left a comment
devantler
left a comment
Contributor
There was a problem hiding this comment.
🤖 Generated by the Agentic Engineer
Self-review (fallback — CodeRabbit, Codex and Cursor Bugbot unavailable)
Reviewed commit: 8c381c3851383aa25d779863abec58b2f007c93a
- CodeRabbit: does not review bot-authored pull requests; this one is authored by Dependabot (2026-10-31).
- Codex: usage-limited since 2026-10-31T11:15Z per review-lane health.
- Cursor Bugbot: replies with a GitHub account mismatch on bot-authored pull requests; no evidence of a review here (2026-10-31).
Checked:
- The live github-config source accepts revision
bd24a3e1(read back from the deployed OCIRepository after platform#5620), so the order the guard demands, consumer first, holds. bd24a3e1is the commit tagged v19.0.3 and is reachable from a release.- Publisher diff v10.0.3 to v19.0.3:
timeout-minutes: 60, harden-runner v2.22.2, docker/login-action v4.7.0, each pinned by hash. Both helper scripts keep their reviewed blobs and modes. No input changed, so the caller's verified-promotion inputs still apply. - The recorded revision and workflow blob match that commit's tree. Guard and promotion, contract and recovery tests pass locally.
Verdict: no P0/P1 findings
devantler
marked this pull request as ready for review
October 31, 2026 16:45
devantler
deleted the
dependabot/github_actions/devantler-tech/dot-github/dot-github/workflows/publish-manifests.yaml-19.0.0
branch
October 31, 2026 16:45
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps devantler-tech/.github/.github/workflows/publish-manifests.yaml from 10.0.3 to 19.0.0.
Release notes
Sourced from devantler-tech/.github/.github/workflows/publish-manifests.yaml's releases.
... (truncated)
Commits
2082a0afeat(issues)!: retire completed stale triage rollout input (#813)5da56a8feat(issues)!: enable stale triage by default (#812)1dae1b0fix(ci): qualify the reviewed admission execution host (#811)f3a3950feat(issues): add shared inactive issue triage (#809)73f7223fix(deps): bump devantler-tech/.github/.github/workflows/apply-signed-fixes.y...9e4b1dafix(go): leave lint job headroom for setup and cleanup (#794)737bb3bfix(ci): preserve safety checks after runner tool updates (#801)84f4cddfeat(todo)!: retire the temporary vendor exclusion switch (#799)7a209dcfix(recovery): retire the verified rollout switch (#796)d46f985feat(todos)!: exclude conventional vendor roots by default (#795)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)