Skip to content

chore(deps): bump Factory-AI/droid-action from 5 to 7 - #52

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/Factory-AI/droid-action-7
Open

chore(deps): bump Factory-AI/droid-action from 5 to 7#52
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/Factory-AI/droid-action-7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 27, 2026

Copy link
Copy Markdown

Bumps Factory-AI/droid-action from 5 to 7.

Release notes

Sourced from Factory-AI/droid-action's releases.

v7

What's Changed

Full Changelog: Factory-AI/droid-action@v6...v7

v6

What's Changed

GitLab: review posting moved into CI

  • MR review comments are now posted through the GitLab REST API by CI instead of a gitlab_mr MCP server the model had to call itself (#109)
    • Both review passes run with no MR write tool and with GITLAB_TOKEN stripped from their environment, so a prompt-injected diff has neither a tool nor a credential to write to the project
    • review_validated.json is the contract: a new gitlab-post-review step posts every approved finding as an inline MR discussion, and every proposal/approval/API result is replayable from the .droid-debug/ artifacts

GitLab: org-wide review guidelines

  • New org_guidelines_source component input applies one set of custom review guidelines across every project in a group (#110)
    • Accepts a local file path, an http(s) URL, a git clone URL, or a GitLab project path (with org_guidelines_ref / org_guidelines_path for git sources)
    • Installed as a user-level skill so it can never shadow a project's own review-guidelines skill; unreachable sources log a warning and the review proceeds

Full Changelog: Factory-AI/droid-action@v5...v6

Commits
  • 34deed7 Merge pull request #127 from Factory-AI/dev
  • 5f3beed Merge pull request #126 from Factory-AI/nizar/mask-app-token-in-logs
  • e126195 fix(security): mask GitHub App installation token in Actions logs
  • fca711f Merge pull request #125 from Factory-AI/dev
  • 4e44f79 Merge pull request #124 from Factory-AI/nizar/gitlab-anchor-fallback
  • 67f0440 fix(gitlab): address review feedback on anchor guidance and fallback wording
  • bd4affe fix(gitlab): diff-aware anchors and note fallback for review posting
  • 77c4771 Merge pull request #122 from Factory-AI/dev
  • 30078d5 Merge pull request #121 from Factory-AI/nizar/steward-concise-comments
  • e49191e revert(steward): keep the original budget and post-run comment wording
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [Factory-AI/droid-action](https://github.com/factory-ai/droid-action) from 5 to 7.
- [Release notes](https://github.com/factory-ai/droid-action/releases)
- [Commits](Factory-AI/droid-action@v5...v7)

---
updated-dependencies:
- dependency-name: Factory-AI/droid-action
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Aug 27, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants