From 99516f0eaeba3f0b8dd4c277a7e4b2dbfd9fe0bb Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 1 Jun 2026 04:44:23 +0000 Subject: [PATCH] Bump the compatible group with 3 updates Bumps the compatible group with 3 updates: [actions/create-github-app-token](https://github.com/actions/create-github-app-token), [frequenz-floss/gh-action-dependabot-migrate](https://github.com/frequenz-floss/gh-action-dependabot-migrate) and [actions/labeler](https://github.com/actions/labeler). Updates `actions/create-github-app-token` from 3.1.1 to 3.2.0 - [Release notes](https://github.com/actions/create-github-app-token/releases) - [Changelog](https://github.com/actions/create-github-app-token/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/create-github-app-token/compare/1b10c78c7865c340bc4f6099eb2f838309f1e8c3...bcd2ba49218906704ab6c1aa796996da409d3eb1) Updates `frequenz-floss/gh-action-dependabot-migrate` from 1.1.1 to 1.2.1 - [Release notes](https://github.com/frequenz-floss/gh-action-dependabot-migrate/releases) - [Commits](https://github.com/frequenz-floss/gh-action-dependabot-migrate/compare/45994e185a9040449304a470e8f02d0e197873b4...eb100d3cf732b4808a7776eee8f303521efd494b) Updates `actions/labeler` from 6.0.1 to 6.1.0 - [Release notes](https://github.com/actions/labeler/releases) - [Commits](https://github.com/actions/labeler/compare/634933edcd8ababfe52f92936142cc22ac488b1b...f27b608878404679385c85cfa523b85ccb86e213) --- updated-dependencies: - dependency-name: actions/create-github-app-token dependency-version: 3.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: compatible - dependency-name: frequenz-floss/gh-action-dependabot-migrate dependency-version: 1.2.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: compatible - dependency-name: actions/labeler dependency-version: 6.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: compatible ... Signed-off-by: dependabot[bot] --- .github/workflows/auto-dependabot.yaml | 2 +- .github/workflows/black-migration.yaml | 4 ++-- .github/workflows/labeler.yml | 2 +- .github/workflows/repo-config-migration.yaml | 4 ++-- 4 files changed, 6 insertions(+), 6 deletions(-) diff --git a/.github/workflows/auto-dependabot.yaml b/.github/workflows/auto-dependabot.yaml index f12d16a..572bd44 100644 --- a/.github/workflows/auto-dependabot.yaml +++ b/.github/workflows/auto-dependabot.yaml @@ -28,7 +28,7 @@ jobs: steps: - name: Generate GitHub App token id: app-token - uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v3.1.1 + uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0 with: app-id: ${{ secrets.FREQUENZ_AUTO_DEPENDABOT_APP_ID }} private-key: ${{ secrets.FREQUENZ_AUTO_DEPENDABOT_APP_PRIVATE_KEY }} diff --git a/.github/workflows/black-migration.yaml b/.github/workflows/black-migration.yaml index 09ca186..3dc86fb 100644 --- a/.github/workflows/black-migration.yaml +++ b/.github/workflows/black-migration.yaml @@ -55,7 +55,7 @@ jobs: steps: - name: Generate token id: create-app-token - uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v3.1.1 + uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0 with: app-id: ${{ secrets.FREQUENZ_AUTO_DEPENDABOT_APP_ID }} private-key: ${{ secrets.FREQUENZ_AUTO_DEPENDABOT_APP_PRIVATE_KEY }} @@ -66,7 +66,7 @@ jobs: # Read/update pull request metadata and labels. permission-pull-requests: write - name: Migrate - uses: frequenz-floss/gh-action-dependabot-migrate@45994e185a9040449304a470e8f02d0e197873b4 # v1.1.1 + uses: frequenz-floss/gh-action-dependabot-migrate@eb100d3cf732b4808a7776eee8f303521efd494b # v1.2.1 with: migration-script: | import os diff --git a/.github/workflows/labeler.yml b/.github/workflows/labeler.yml index 393ddfc..eedc657 100644 --- a/.github/workflows/labeler.yml +++ b/.github/workflows/labeler.yml @@ -20,7 +20,7 @@ jobs: # only use hashes to pick the action to execute (instead of tags or branches). # For more details read: # https://securitylab.github.com/research/github-actions-preventing-pwn-requests/ - uses: actions/labeler@634933edcd8ababfe52f92936142cc22ac488b1b # 6.0.1 + uses: actions/labeler@f27b608878404679385c85cfa523b85ccb86e213 # 6.1.0 with: repo-token: "${{ secrets.GITHUB_TOKEN }}" dot: true diff --git a/.github/workflows/repo-config-migration.yaml b/.github/workflows/repo-config-migration.yaml index 086fda1..8ab5e01 100644 --- a/.github/workflows/repo-config-migration.yaml +++ b/.github/workflows/repo-config-migration.yaml @@ -45,7 +45,7 @@ jobs: steps: - name: Generate token id: create-app-token - uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v3.1.1 + uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0 with: app-id: ${{ secrets.FREQUENZ_AUTO_DEPENDABOT_APP_ID }} private-key: ${{ secrets.FREQUENZ_AUTO_DEPENDABOT_APP_PRIVATE_KEY }} @@ -58,7 +58,7 @@ jobs: # Allow pushes when migration changes workflow files. permission-workflows: write - name: Migrate - uses: frequenz-floss/gh-action-dependabot-migrate@45994e185a9040449304a470e8f02d0e197873b4 # v1.1.1 + uses: frequenz-floss/gh-action-dependabot-migrate@eb100d3cf732b4808a7776eee8f303521efd494b # v1.2.1 with: script-url-template: >- https://raw.githubusercontent.com/frequenz-floss/frequenz-repo-config-python/{version}/cookiecutter/migrate.py