Skip to content

Consolidate open Dependabot GitHub Actions updates into one PR - #2542

Merged
soumeh01 merged 9 commits into
mainfrom
copilot/consolidate-dependabot-prs
Jul 28, 2026
Merged

Consolidate open Dependabot GitHub Actions updates into one PR#2542
soumeh01 merged 9 commits into
mainfrom
copilot/consolidate-dependabot-prs

Conversation

Copilot AI commented Jul 27, 2026

Copy link
Copy Markdown

Changes

  • Problem summary

    • This change consolidates all currently open Dependabot GitHub Actions update PRs into a single review/merge unit.
    • Goal: reduce PR noise and apply a coherent, batch update to workflow action pins.
  • Dependency updates included

    • actions/checkout 7.0.07.0.1
    • actions/setup-python 6.3.07.0.0
    • github/codeql-action/init 4.37.14.37.3
    • github/codeql-action/analyze 4.37.14.37.3
    • github/codeql-action/upload-sarif 4.37.14.37.3
    • ossf/scorecard-action 2.4.32.4.4
  • Change surface

    • Updates are limited to existing files under .github/workflows/; no production source code changes.
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+ uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

Checklist

  • 🤖 This change is covered by unit tests (if applicable).
  • 🤹 Manual testing has been performed (if necessary).
  • 🛡️ Security impacts have been considered (if relevant).
  • 📖 Documentation updates are complete (if required).
  • 🧠 Third-party dependencies and TPIP updated (if required).

dependabot Bot added 6 commits July 27, 2026 08:49
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.4.3 to 2.4.4.
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](ossf/scorecard-action@4eaacf0...2d11466)

---
updated-dependencies:
- dependency-name: ossf/scorecard-action
  dependency-version: 2.4.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [actions/checkout](https://github.com/actions/checkout) from 7.0.0 to 7.0.1.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@9c091bb...3d3c42e)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [github/codeql-action/analyze](https://github.com/github/codeql-action) from 4.37.1 to 4.37.3.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@7188fc3...e4fba86)

---
updated-dependencies:
- dependency-name: github/codeql-action/analyze
  dependency-version: 4.37.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [actions/setup-python](https://github.com/actions/setup-python) from 6.3.0 to 7.0.0.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](actions/setup-python@ece7cb0...5fda3b9)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) from 4.37.1 to 4.37.3.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@7188fc3...e4fba86)

---
updated-dependencies:
- dependency-name: github/codeql-action/upload-sarif
  dependency-version: 4.37.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [github/codeql-action/init](https://github.com/github/codeql-action) from 4.37.1 to 4.37.3.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@7188fc3...e4fba86)

---
updated-dependencies:
- dependency-name: github/codeql-action/init
  dependency-version: 4.37.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Copilot AI changed the title Consolidate open Dependabot GitHub Actions updates Consolidate open Dependabot GitHub Actions updates into one PR Jul 27, 2026
Copilot AI requested a review from soumeh01 July 27, 2026 08:50
@github-actions

Copy link
Copy Markdown

Test Results

 2 files   2 suites   3s ⏱️
17 tests 17 ✅ 0 💤 0 ❌
34 runs  34 ✅ 0 💤 0 ❌

Results for commit 714d1dd.

@github-actions

github-actions Bot commented Jul 27, 2026

Copy link
Copy Markdown

Test Results

  2 files   -    37   14 suites   - 107   14m 26s ⏱️ - 4m 12s
477 tests  -   451  477 ✅  - 434  0 💤  - 17  0 ❌ ±0 
954 runs   - 1 041  954 ✅  - 990  0 💤  - 51  0 ❌ ±0 

Results for commit 83d1b82. ± Comparison against base commit f512b38.

This pull request removes 451 tests.
AuxCmdTests ‑ MkdirCmdTest
AuxCmdTests ‑ RmdirCmdTest
AuxCmdTests ‑ TouchCmdTest
BuildSystemGeneratorTests ‑ GenAuditFile
BuildSystemGeneratorTests ‑ GenAuditFile_WithOut_Existing_Audit_File
BuildSystemGeneratorTests ‑ GenAuditFile_With_Existing_Audit_File
BuildSystemGeneratorTests ‑ GetString
BuildSystemGeneratorTests ‑ StrConv
BuildSystemGeneratorTests ‑ StrNorm
CBuildGCCTests ‑ Asm
…

♻️ This comment has been updated with latest results.

@soumeh01
soumeh01 requested a review from brondani July 28, 2026 12:08
@soumeh01
soumeh01 marked this pull request as ready for review July 28, 2026 12:08
@codecov

codecov Bot commented Jul 28, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 65.39%. Comparing base (f512b38) to head (83d1b82).

Additional details and impacted files
@@           Coverage Diff           @@
##             main    #2542   +/-   ##
=======================================
  Coverage   65.39%   65.39%           
=======================================
  Files         147      147           
  Lines       26813    26813           
  Branches    16248    16248           
=======================================
  Hits        17534    17534           
+ Misses       7072     7069    -3     
- Partials     2207     2210    +3     
Flag Coverage Δ
buildmgr-cov 79.87% <ø> (ø)
packchk-cov 69.75% <ø> (ø)
packgen-cov 82.02% <ø> (ø)
projmgr-cov 88.01% <ø> (ø)
svdconv-cov 40.28% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.
see 1 file with indirect coverage changes

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@soumeh01
soumeh01 merged commit 7036c89 into main Jul 28, 2026
107 checks passed
@soumeh01
soumeh01 deleted the copilot/consolidate-dependabot-prs branch July 28, 2026 12:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants