chore(deps): update launchdarkly/gh-actions/actions/contract-tests requirement to 2715574e04448246bc529a23a81766491bbc4aae - #599
Conversation
…quirement to 2715574e04448246bc529a23a81766491bbc4aae Updates the requirements on [launchdarkly/gh-actions/actions/contract-tests](https://github.com/launchdarkly/gh-actions) to permit the latest version. - [Release notes](https://github.com/launchdarkly/gh-actions/releases) - [Commits](https://github.com/launchdarkly/gh-actions/commits/2715574e04448246bc529a23a81766491bbc4aae) --- updated-dependencies: - dependency-name: launchdarkly/gh-actions/actions/contract-tests dependency-version: 2715574e04448246bc529a23a81766491bbc4aae dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
dependabot
Bot
added
dependencies
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes using default effort and found 1 potential issue.
❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, have a team admin enable autofix in the Cursor dashboard.
Reviewed by Cursor Bugbot for commit ab191af. Configure here.
| run: $TEST_SERVICE_BINARY $TEST_SERVICE_PORT 2>&1 & | ||
| # https://github.com/launchdarkly/gh-actions/releases/tag/contract-tests-v1.3.0 | ||
| - uses: launchdarkly/gh-actions/actions/contract-tests@5adb11fd6953e1bc35d9cf1fc1b4374c464e3a8b | ||
| - uses: launchdarkly/gh-actions/actions/contract-tests@2715574e04448246bc529a23a81766491bbc4aae |
There was a problem hiding this comment.
Contract-tests action silently downgraded
High Severity
This Dependabot change pins contract-tests to 2715574 (v1.1.0) from 5adb11f (v1.3.0). enable_persistence_tests only exists since v1.2.0, so on v1.1.0 that input is ignored and the harness never gets -enable-persistence-tests (default false). With extra_params limited to -run=persistent.data.store, Redis/DynamoDB persistence suites stop running while CI can still go green.
Additional Locations (1)
Triggered by learned rule: Persistence contract-test CI needs a live store, not just a harness flag
Reviewed by Cursor Bugbot for commit ab191af. Configure here.
Updates the requirements on launchdarkly/gh-actions/actions/contract-tests to permit the latest version.
Commits
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)Note
Overview
Pins
launchdarkly/gh-actions/actions/contract-teststo commit2715574e04448246bc529a23a81766491bbc4aaein the DynamoDB and Redis server SDK contract-test workflows, replacing the previous SHA.Step inputs (
test_service_port, persistence flags, harness matrix,extra_params, etc.) are unchanged—only the reusable action revision moves forward.Reviewed by Cursor Bugbot for commit ab191af. Bugbot is set up for automated code reviews on this repo. Configure here.