dependabot[bot]
601e2958f0
ci: bump actions/setup-node
...
Bumps the actions-minor-patch group with 1 update in the / directory: [actions/setup-node](https://github.com/actions/setup-node ).
Updates `actions/setup-node` from 7.0.0 to 7.1.0
- [Release notes](https://github.com/actions/setup-node/releases )
- [Commits](https://github.com/actions/setup-node/compare/820762786026740c76f36085b0efc47a31fe5020...949feb2413d6458794dcd2491c4babbbce0c15c1 )
---
updated-dependencies:
- dependency-name: actions/setup-node
dependency-version: 7.1.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: actions-minor-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-10-19 17:55:45 +00:00
Pecaquito
9651caa01b
Merge pull request #51474 from iptv-org/dependabot/github_actions/actions/setup-node-7.0.0
...
ci: bump actions/setup-node from 4.4.0 to 7.0.0
2026-10-06 15:46:48 -04:00
dependabot[bot]
b2f8c36b20
ci: bump actions/checkout from 6.1.0 to 7.0.1
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 6.1.0 to 7.0.1.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/d23441a48e516b6c34aea4fa41551a30e30af803...3d3c42e5aac5ba805825da76410c181273ba90b1 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 7.0.1
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-09-14 12:24:50 +00:00
dependabot[bot]
5eaba53bff
ci: bump actions/setup-node from 4.4.0 to 7.0.0
...
Bumps [actions/setup-node](https://github.com/actions/setup-node ) from 4.4.0 to 7.0.0.
- [Release notes](https://github.com/actions/setup-node/releases )
- [Commits](https://github.com/actions/setup-node/compare/v4.4.0...820762786026740c76f36085b0efc47a31fe5020 )
---
updated-dependencies:
- dependency-name: actions/setup-node
dependency-version: 7.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-09-14 12:24:47 +00:00
jogerj
4ed2a1f0af
ci: pin GitHub Actions to commit SHAs and add Dependabot
...
Pin every action reference to the full commit SHA that its current tag
already resolves to, with the version kept in a trailing comment. No action
changes version as a result of this commit -- including actions/setup-node
in validate_issue.yml, which stays on v4.4.0 rather than being lifted to the
v6 used by the other workflows. Version bumps are left to Dependabot so they
arrive as reviewable PRs.
Add .github/dependabot.yml for the github-actions ecosystem: weekly on
Monday, minor/patch grouped into a single PR (majors always get their own),
"ci" commit prefix. tibdex/github-app-token is ignored to match
iptv-org-database; it is archived upstream, so replacing it should be a
considered migration rather than an automated bump.
2026-09-06 14:31:50 +02:00
freearhey
3a89b6a351
Update validate_issue.yml
2026-08-15 04:20:30 +03:00
Aleksandr Statciuk and Copilot Autofix powered by AI
8e62734db1
Potential fix for pull request finding 'CodeQL / Workflow does not contain permissions'
...
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
2026-08-15 03:30:16 +03:00
freearhey
fc81de54b0
Create validate_issue.yml
2026-08-15 03:03:23 +03:00