New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Manually bump a couple of dependencies #2784

Draft

angelapwen wants to merge 2 commits into main from angelapwen/address-dependabot-alerts

Contributor

angelapwen commented Feb 25, 2025

Bumps @actions/github to v6 so that @octokit/plugin-paginate-rest can be bumped transitively. Part of addressing https://github.com/github/codeql-action/security/dependabot/63.
Bumps @octokit/plugin-retry to v7.1.4 so that octokit/request-error can be bumped transitively. Part of addressing https://github.com/github/codeql-action/security/dependabot/62.

Merge / deployment checklist

Confirm this change is backwards compatible with existing workflows.
Confirm the readme has been updated if necessary.
Confirm the changelog has been updated if necessary.

angelapwen added 2 commits

February 25, 2025 14:40


          Bump @actions/github to v6

fca571a

So that `@octokit/plugin-paginate-rest` can be bumped.


          Bump octokit/plugin-retry to v7.1.4

2e7a05c

So that `octokit/request-error` can be bumped.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet