Repository navigation
Bump the actions group with 2 updates - #1
Merged
Merged
Conversation
Bumps the actions group with 2 updates: [haskell-actions/setup](https://github.com/haskell-actions/setup) and [SonarSource/sonarqube-scan-action](https://github.com/sonarsource/sonarqube-scan-action). Updates `haskell-actions/setup` from 2.12.0 to 2.12.1 - [Release notes](https://github.com/haskell-actions/setup/releases) - [Commits](haskell-actions/setup@v2.12.0...v2.12.1) Updates `SonarSource/sonarqube-scan-action` from 8.2.2 to 8.3.0 - [Release notes](https://github.com/sonarsource/sonarqube-scan-action/releases) - [Commits](SonarSource/sonarqube-scan-action@v8.2.2...v8.3.0) --- updated-dependencies: - dependency-name: haskell-actions/setup dependency-version: 2.12.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: SonarSource/sonarqube-scan-action dependency-version: 8.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?s=60&v=4){kind=small}
|
Important Review skippedBot user detected. To trigger a single review, invoke the ⚙️ Run configuration
You can disable this status message by setting the Use the checkbox below for a quick retry:
Comment |
hyperpolymath
approved these changes
Oct 6, 2026
4 of 14 tasks
hyperpolymath
added a commit
that referenced
this pull request
Oct 7, 2026
…ws start (#3) * ci: resync actions.lock with Dependabot's actions-group bump (#1) Dependabot #1 bumped haskell-actions/setup v2.12.0 -> v2.12.1 (pages.yml) and SonarSource/sonarqube-scan-action v8.2.2 -> v8.3.0 (sonarqube.yml) without touching actions.lock, so the lock-sync gate went red on main. Swap the two workflow entries and their dependencies: records in place. No other record changes; every other pin is untouched. haskell-actions/setup@v2.12.1 -> 0f8e8c99d88aeb3fbfd523f1ef2c6f762d10d64d sonarsource/sonarqube-scan-action@v8.3.0 -> d209202bc7d53ff1cc128f7f907dac145c9d6ae9 Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01X3hgXxWm6umMgZkjYyHnnm * ci: repin standards callers to da2c748 and drop unclosed @main lock record secret-scanner (gitleaks), rust-ci and governance have died at startup (STARTUP_FAILURE, jobs=0, no check run) on every commit since this repo was created. Their callers pinned hyperpolymath/standards@main, whose actions.lock record carried no uses: closure, while the closed record for the template's pin (standards@da2c748) sat orphaned in the lock. Repin all six standards callers (secret-scanner, rust-ci, governance, hypatia-scan, scorecard, mirror) to da2c748, matching rsr-template-repo, where the same callers run green, and remove the dangling @main record. Verified: gh actions-lock --no-fix rc=0; scripts/check-lock-sync.sh reports in sync and transitively closed. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_015bTuGfwCcvjrmNFejydTML --------- Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the actions group with 2 updates: haskell-actions/setup and SonarSource/sonarqube-scan-action.
Updates
haskell-actions/setupfrom 2.12.0 to 2.12.1Release notes
Sourced from haskell-actions/setup's releases.
Commits
0f8e8c9Add Cabal 3.18.1.0 and Stack 3.11.1Updates
SonarSource/sonarqube-scan-actionfrom 8.2.2 to 8.3.0Release notes
Sourced from SonarSource/sonarqube-scan-action's releases.
Commits
d209202Update GitHub Actions dependencies (major) (#271)0333cb3Update dependency@actions/execto v3 (#270)da4450eUpdate npm dependencies (#268)c5094d1SQSCANGHA-168 Update actions/cache action to v5.1.0 (#269)001613fSQSCANGHA-162 Configure Renovate (#267)6abe0a7SQSCANGHA-165 Fix GPG key retrieval through HTTPS proxies (#265)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions