Skip to content

ci(deps): bump complytime/org-infra/.github/workflows/reusable_scheduled.yml from 0.2.0 to 0.2.1 - #106

Merged
marcusburghardt merged 1 commit into
mainfrom
dependabot/github_actions/complytime/org-infra/dot-github/workflows/reusable_scheduled.yml-0.2.1
May 20, 2026
Merged

ci(deps): bump complytime/org-infra/.github/workflows/reusable_scheduled.yml from 0.2.0 to 0.2.1#106
marcusburghardt merged 1 commit into
mainfrom
dependabot/github_actions/complytime/org-infra/dot-github/workflows/reusable_scheduled.yml-0.2.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 19, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps complytime/org-infra/.github/workflows/reusable_scheduled.yml from 0.2.0 to 0.2.1.

Release notes

Sourced from complytime/org-infra/.github/workflows/reusable_scheduled.yml's releases.

v0.2.1

org-infra 0.2.1

Central reusable GitHub Actions workflows, CI templates, compliance policy assets, and org sync tooling. Downstream repos usually consume this repo via workflow uses: pins or version tags.

Before you upgrade

  • Treat workflow YAML updates as potentially breaking for every consumer until you’ve reviewed them.
  • Use the Workflows & GitHub Actions section below for PRs that touched pipelines; for exact paths and hunks, open the compare link and narrow Files changed to .github/workflows/.

View full diff: v0.2.0 → v0.2.1

Changes

  • fix: quote new-function-threshold expression interpolation — #235 · @​sonupreetam
  • fix: generate comment body when no baseline exists in crapload analysis — #242 · @​gvauter

Maintenance

  • ci(deps): bump complytime/org-infra/.github/workflows/reusable_ci.yml from 0.1.0 to 0.2.0 — #233 · @dependabot[bot]
  • ci(deps): bump complytime/org-infra/.github/workflows/reusable_crapload_analysis.yml from 0.1.0 to 0.2.0 — #232 · @dependabot[bot]
  • ci(deps): bump complytime/org-infra/.github/workflows/reusable_compliance.yml from 0.1.0 to 0.2.0 — #231 · @dependabot[bot]
  • ci(deps): bump complytime/org-infra/.github/workflows/reusable_security.yml from 0.1.0 to 0.2.0 — #230 · @dependabot[bot]
  • ci(deps): bump complytime/org-infra/.github/workflows/reusable_scheduled.yml from 0.1.0 to 0.2.0 — #229 · @dependabot[bot]
  • ci(deps): bump complytime/org-infra/.github/workflows/reusable_vuln_scan.yml from 0.1.0 to 0.2.0 — #239 · @dependabot[bot]
  • ci(deps): bump complytime/org-infra/.github/workflows/reusable_deps_reviewer.yml from 0.1.0 to 0.2.0 — #236 · @dependabot[bot]
  • ci(deps): bump carabiner-dev/actions from 1.1.6 to 1.2.0 — #238 · @dependabot[bot]
  • ci(deps): bump complytime/org-infra/.github/workflows/reusable_dependabot_reviewer.yml from 0.1.0 to 0.2.0 — #237 · @dependabot[bot]
  • ci(deps): bump sigstore/cosign-installer from 4.1.1 to 4.1.2 — #240 · @dependabot[bot]
  • ci(deps): bump google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml from 2.3.5 to 2.3.8 — #249 · @dependabot[bot]
  • ci(deps): bump github/codeql-action from 4.35.3 to 4.35.4 — #248 · @dependabot[bot]
  • ci(deps): bump google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml from 2.3.5 to 2.3.8 — #247 · @dependabot[bot]
  • ci(deps): bump release-drafter/release-drafter from 7.2.1 to 7.3.0 — #245 · @dependabot[bot]
  • ci(deps): bump actions/dependency-review-action from 4.9.0 to 5.0.0 — #246 · @dependabot[bot]
  • chore(deps): update gitpython requirement from >=3.1.49 to >=3.1.50 — #244 · @dependabot[bot]
  • chore(deps): update requests requirement from >=2.33.1 to >=2.34.0 — #243 · @dependabot[bot]
  • ci(deps): bump actions/create-github-app-token from 3.1.1 to 3.2.0 — #250 · @dependabot[bot]
  • ci(deps): bump github/codeql-action from 4.35.4 to 4.35.5 — #254 · @dependabot[bot]
  • chore(deps): update requests requirement from >=2.34.0 to >=2.34.2 — #257 · @dependabot[bot]
  • ci(deps): bump oxsecurity/megalinter from 9.4.0 to 9.5.0 — #259 · @dependabot[bot]
  • chore(deps): bump https://github.com/astral-sh/ruff-pre-commit from v0.15.12 to 0.15.13 — #258 · @dependabot[bot]

Compare: v0.2.0…v0.2.1

Thanks to @​gvauter, @​sonupreetam and dependabot[bot] for this release.

Commits
  • cfd981e chore(deps): bump https://github.com/astral-sh/ruff-pre-commit
  • 0a9fa3c ci(deps): bump oxsecurity/megalinter from 9.4.0 to 9.5.0
  • 21dee3e chore(deps): update requests requirement from >=2.34.0 to >=2.34.2
  • 8dd6fee ci(deps): bump github/codeql-action from 4.35.4 to 4.35.5
  • 1cffbad ci(deps): bump actions/create-github-app-token from 3.1.1 to 3.2.0
  • e8397ff chore(deps): update requests requirement from >=2.33.1 to >=2.34.0
  • 046e14a chore(deps): update gitpython requirement from >=3.1.49 to >=3.1.50
  • c79c2ce ci(deps): bump actions/dependency-review-action from 4.9.0 to 5.0.0
  • dd2cc25 ci(deps): bump release-drafter/release-drafter from 7.2.1 to 7.3.0
  • 2fd3535 ci(deps): bump google/osv-scanner-action/.github/workflows/osv-scanner-reusab...
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels May 19, 2026
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels May 19, 2026
@github-actions

github-actions Bot commented May 19, 2026

Copy link
Copy Markdown

CRAP Load Analysis

No Go code changes detected in this PR. No CRAP impact.

@github-actions

github-actions Bot commented May 19, 2026

Copy link
Copy Markdown

🤖 Standardized Dependabot Review Summary 🤖

This PR was processed by the organization's reusable CI pipeline.

Criterion Status Detail
Dependencies Review success View logs
Calculated Risk low complytime/org-infra/.github/workflows/reusable_scheduled.yml v0.2.1
Release Age unknown Release date unavailable — manual review required
Dependency Usage 2 repos Informational only — does not affect approval

Auto-approval: ⏳ Manual review required

Maintainer check list:

  1. Ensure the PR passed all CI tests (required status checks).
  2. Investigate failures for Major updates or any manual review requirement.
  3. Don't overlook breaking changes and changelog information.
  4. If the scorecard value is low, consider to contribute to make it higher. Everybody wins!
  5. Be diligent. When in doubt, ask another maintainer for additional review.

marcusburghardt
marcusburghardt approved these changes May 20, 2026
View reviewed changes

@marcusburghardt marcusburghardt left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@dependabot
dependabot Bot force-pushed the dependabot/github_actions/complytime/org-infra/dot-github/workflows/reusable_scheduled.yml-0.2.1 branch from 47051f4 to 88ee651 Compare May 20, 2026 09:38
@github-actions

github-actions Bot commented May 20, 2026

Copy link
Copy Markdown

🤖 Standardized Dependabot Review Summary 🤖

This PR was processed by the organization's reusable CI pipeline.

Criterion Status Detail
Dependencies Review success View logs
Calculated Risk low complytime/org-infra/.github/workflows/reusable_scheduled.yml v0.2.1
Release Age unknown Release date unavailable — manual review required
Dependency Usage unavailable Informational only — does not affect approval

Auto-approval: ⏳ Manual review required

Maintainer check list:

  1. Ensure the PR passed all CI tests (required status checks).
  2. Investigate failures for Major updates or any manual review requirement.
  3. Don't overlook breaking changes and changelog information.
  4. If the scorecard value is low, consider to contribute to make it higher. Everybody wins!
  5. Be diligent. When in doubt, ask another maintainer for additional review.

@marcusburghardt
marcusburghardt enabled auto-merge (rebase) May 20, 2026 09:43
@dependabot @marcusburghardt
ci(deps): bump complytime/org-infra/.github/workflows/reusable_schedu…
bf12315 
…led.yml

Bumps [complytime/org-infra/.github/workflows/reusable_scheduled.yml](https://github.com/complytime/org-infra) from 0.2.0 to 0.2.1.
- [Release notes](https://github.com/complytime/org-infra/releases)
- [Commits](complytime/org-infra@393ab96...cfd981e)

---
updated-dependencies:
- dependency-name: complytime/org-infra/.github/workflows/reusable_scheduled.yml
  dependency-version: 0.2.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@marcusburghardt
marcusburghardt force-pushed the dependabot/github_actions/complytime/org-infra/dot-github/workflows/reusable_scheduled.yml-0.2.1 branch from 88ee651 to bf12315 Compare May 20, 2026 09:43
@marcusburghardt
marcusburghardt merged commit 69cf33b into main May 20, 2026
12 checks passed
@marcusburghardt
marcusburghardt deleted the dependabot/github_actions/complytime/org-infra/dot-github/workflows/reusable_scheduled.yml-0.2.1 branch May 20, 2026 09:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@marcusburghardt marcusburghardt marcusburghardt approved these changes
@jflowers jflowers Awaiting requested review from jflowers jflowers is a code owner
@jpower432 jpower432 Awaiting requested review from jpower432 jpower432 is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@marcusburghardt