Skip to content

ci(deps): bump the actions group across 1 directory with 3 updates - #819

Closed
dependabot[bot] wants to merge 3 commits into
mainfrom
dependabot/github_actions/actions-42fb3b56ca
Closed

dependabot[bot] wants to merge 3 commits into
mainfrom
dependabot/github_actions/actions-42fb3b56ca

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 12, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the actions group with 3 updates in the / directory: codelytv/pr-size-labeler, anthropics/claude-code-action and trufflesecurity/trufflehog.

Updates codelytv/pr-size-labeler from 1.10.4 to 1.12.0

Release notes

Sourced from codelytv/pr-size-labeler's releases.

v1.12.0

What's Changed

Full Changelog: CodelyTV/pr-size-labeler@v1.11.1...v1.12.0

v1.11.1

What's Changed

Full Changelog: CodelyTV/pr-size-labeler@v1.11.0...v1.11.1

v1.11.0

What's Changed

Full Changelog: CodelyTV/pr-size-labeler@v1.10.5...v1.11.0

v1.10.5

What's Changed

New Contributors

Full Changelog: CodelyTV/pr-size-labeler@v1.10.4...v1.10.5

Commits
  • 19c335e perf: stop fetching PR files at XL threshold (#111)
  • c351236 fix: distinguish exact modification counts from early-stop counts in logs
  • 8cea90c perf: stop fetching PR files at XL threshold
  • 5c7ad1e refactor: count PR file changes during pagination
  • a7900cb fix: label pull requests from forks with a writable token (#112)
  • 4e3aa0f fix: preserve labels added by other automations (#110)
  • e1869bf feat: improve DX when required permissions are missing and reduce the number ...
  • 352cc2a fix: report GitHub API permission failures
  • 6c2d916 docs: document minimal pull request permissions
  • 9366474 docs: clarify files_to_ignore path matching (#108)
  • Additional commits viewable in compare view

Updates anthropics/claude-code-action from 1.0.241 to 1.0.242

Release notes

Sourced from anthropics/claude-code-action's releases.

v1.0.242

Full Changelog: anthropics/claude-code-action@v1.0.241...v1.0.242

Commits
  • 6c69018 chore: bump Claude Code to 2.1.290 and Agent SDK to 0.3.290
  • See full diff in compare view

Updates trufflesecurity/trufflehog from 3.97.9 to 3.98.0

Release notes

Sourced from trufflesecurity/trufflehog's releases.

v3.98.0

What's Changed

New Contributors

Full Changelog: trufflesecurity/trufflehog@v3.97.9...v3.98.0

Commits
  • 0186870 Add pkg/ssrf shared egress guard; use it for WithNoLocalIP and analyzer clien...
  • bb9ed13 docs: point five internal links at files that exist (#5375)
  • c56f0b1 Add Jenkins source documentation (#5388)
  • 2b2c270 Fix NetSuite detector running out of memory on dense input (#5383)
  • 59e3b04 fix(github): switch back to fetching access token through apiClient, (#5380)
  • e283608 List only the include prefixes in S3 scans (#5377)
  • d5ef0f3 fix(detectors/auth0oauth): match Auth0 Private Cloud auth0app.com domains (#5...
  • cdce527 Add Github source documentation (#5370)
  • b197c35 Add Gitlab source documentation (#5371)
  • 1012551 Add huggingface source documentation (#5373)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the actions group with 3 updates in the / directory: [codelytv/pr-size-labeler](https://github.com/codelytv/pr-size-labeler), [anthropics/claude-code-action](https://github.com/anthropics/claude-code-action) and [trufflesecurity/trufflehog](https://github.com/trufflesecurity/trufflehog).


Updates `codelytv/pr-size-labeler` from 1.10.4 to 1.12.0
- [Release notes](https://github.com/codelytv/pr-size-labeler/releases)
- [Commits](CodelyTV/pr-size-labeler@095a41f...19c335e)

Updates `anthropics/claude-code-action` from 1.0.241 to 1.0.242
- [Release notes](https://github.com/anthropics/claude-code-action/releases)
- [Commits](anthropics/claude-code-action@cab360f...6c69018)

Updates `trufflesecurity/trufflehog` from 3.97.9 to 3.98.0
- [Release notes](https://github.com/trufflesecurity/trufflehog/releases)
- [Commits](trufflesecurity/trufflehog@4dd8831...0186870)

---
updated-dependencies:
- dependency-name: codelytv/pr-size-labeler
  dependency-version: 1.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: anthropics/claude-code-action
  dependency-version: 1.0.242
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: trufflesecurity/trufflehog
  dependency-version: 3.98.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the github_actions Pull requests that update Github_actions code label Oct 12, 2026
@dependabot @github

dependabot Bot commented on behalf of github Oct 12, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: automated. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@github-actions github-actions Bot added ci Continuous Integration security size/xs dependencies Pull requests that update a dependency file documentation Improvements or additions to documentation tests labels Oct 12, 2026
@github-actions

Copy link
Copy Markdown

📖 Docs preview: https://pr-819--endearing-crepe-c2d5fe.netlify.app

Smoke render — the expensive notebooks run with reduced budgets, so
figures are not publication fidelity. /render-mode.txt says smoke.

@dependabot @github

dependabot Bot commented on behalf of github Oct 19, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 19, 2026
@dependabot
dependabot Bot deleted the dependabot/github_actions/actions-42fb3b56ca branch October 19, 2026 02:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

ci Continuous Integration dependencies Pull requests that update a dependency file documentation Improvements or additions to documentation github_actions Pull requests that update Github_actions code security size/xs tests

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant