From 4207b9fa02e10abdccc2002882c78ba4eace1729 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 2 Jun 2026 14:42:37 +0000 Subject: [PATCH] chore(deps): bump the all group across 1 directory with 2 updates Bumps the all group with 2 updates in the / directory: [actions/github-script](https://github.com/actions/github-script) and [dependabot/fetch-metadata](https://github.com/dependabot/fetch-metadata). Updates `actions/github-script` from 7 to 9 - [Release notes](https://github.com/actions/github-script/releases) - [Commits](https://github.com/actions/github-script/compare/v7...v9) Updates `dependabot/fetch-metadata` from 2 to 3 - [Release notes](https://github.com/dependabot/fetch-metadata/releases) - [Commits](https://github.com/dependabot/fetch-metadata/compare/v2...v3) --- updated-dependencies: - dependency-name: actions/github-script dependency-version: '9' dependency-type: direct:production update-type: version-update:semver-major dependency-group: all - dependency-name: dependabot/fetch-metadata dependency-version: '3' dependency-type: direct:production update-type: version-update:semver-major dependency-group: all ... Signed-off-by: dependabot[bot] --- .github/workflows/dependabot-automerge.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/dependabot-automerge.yml b/.github/workflows/dependabot-automerge.yml index 44942df..7c8bef3 100644 --- a/.github/workflows/dependabot-automerge.yml +++ b/.github/workflows/dependabot-automerge.yml @@ -10,7 +10,7 @@ jobs: if: ${{ github.actor == 'dependabot[bot]' }} runs-on: ubuntu-latest steps: - - uses: actions/github-script@v7 + - uses: actions/github-script@v9 id: files with: script: | @@ -34,7 +34,7 @@ jobs: const bad = files.map(f => f.filename).filter(p => !allowed.some(re => re.test(p))); core.setOutput('ok', bad.length === 0 ? 'true' : 'false'); if (bad.length > 0) core.notice(`Skipping auto-merge; disallowed files: ${bad.join(', ')}`); - - uses: dependabot/fetch-metadata@v2 + - uses: dependabot/fetch-metadata@v3 id: metadata with: github-token: "${{ secrets.GITHUB_TOKEN }}"