Repository navigation
chore(deps): update all dependencies - #530
renovate[bot] wants to merge 1 commit into
Conversation
a434b52 to
04df0c7
Compare
04df0c7 to
e596ca1
Compare
![chatgpt-codex-connector[bot]](https://avatars.githubusercontent.com/in/1144995?s=60&v=4){kind=small}
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: e596ca1637
ℹ️ About Codex in GitHub
Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".
| ref: ${{ github.head_ref }} | ||
| - name: Secret Scanning Trufflehog | ||
| uses: trufflesecurity/trufflehog@v3.95.9 | ||
| uses: trufflesecurity/trufflehog@v3.97.0 |
There was a problem hiding this comment.
The reviewed dependency update is for v3.96.0, but this workflow references the unavailable v3.97.0 action tag. GitHub therefore cannot resolve the action, so every review_secrets job fails before scanning; because build explicitly needs review_secrets, this also blocks the reusable build and release workflow. Use the released v3.96.0 tag.
Useful? React with 👍 / 👎.
82bbc41 to
0f19e28
Compare
0f19e28 to
d6d8f91
Compare
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: d6d8f91093
ℹ️ About Codex in GitHub
Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".
| steps: | ||
| - uses: actions/checkout@v7 | ||
| - uses: apache/skywalking-eyes@v0.6.0 | ||
| - uses: apache/skywalking-eyes@v0.9.0 |
There was a problem hiding this comment.
When build-test-release.yaml runs, GitHub must resolve this action before the compliance-copyrights job can execute, but the dependency update and included release notes identify v0.8.0 as the available update while this line references v0.9.0. That unresolved tag causes the compliance job to fail during action setup on every workflow run; use the released v0.8.0 tag.
Useful? React with 👍 / 👎.
f743e68 to
f68cd11
Compare
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: f68cd113b0
ℹ️ About Codex in GitHub
Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".
| ref: ${{ github.head_ref }} | ||
| - name: Secret Scanning Trufflehog | ||
| uses: trufflesecurity/trufflehog@v3.95.9 | ||
| uses: trufflesecurity/trufflehog@v3.97.2 |
There was a problem hiding this comment.
The fresh code now references v3.97.2, whereas this revision's Renovate metadata identifies v3.97.1 as the available target and contains no v3.97.2 release. GitHub cannot resolve the nonexistent action tag, so every review_secrets run fails during action setup and consequently blocks the downstream build job; pin this to v3.97.1.
Useful? React with 👍 / 👎.
f68cd11 to
463c992
Compare
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 463c992ea5
ℹ️ About Codex in GitHub
Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".
| ref: ${{ github.head_ref }} | ||
| - name: Secret Scanning Trufflehog | ||
| uses: trufflesecurity/trufflehog@v3.95.9 | ||
| uses: trufflesecurity/trufflehog@v3.97.4 |
There was a problem hiding this comment.
The fresh evidence in this revision is that the workflow now references v3.97.4, while the reviewed commit's Renovate dependency table and release inventory identify v3.97.2 as the available target and contain no v3.97.4 release. GitHub therefore cannot resolve this action ref, so every review_secrets job fails during action setup and blocks the downstream build job; use v3.97.2.
Useful? React with 👍 / 👎.
463c992 to
b04bf0a
Compare
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: b04bf0ab80
ℹ️ About Codex in GitHub
Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".
| with: | ||
| distribution: 'temurin' | ||
| java-version: '17' | ||
| java-version: '25.0.4+101.0.LTS' |
There was a problem hiding this comment.
When any caller runs this reusable workflow, actions/setup-java interprets this fully qualified value as an exact version, but 25.0.4+101.0.LTS is not a Temurin release identifier. The setup step therefore fails before pre-commit runs, and because build requires pre-commit, the entire build and release flow is blocked. Per setup-java's supported version syntax, retain Java 17 or specify an available Temurin version/range such as 25.
Useful? React with 👍 / 👎.
b04bf0a to
cacf709
Compare
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: cacf70936d
ℹ️ About Codex in GitHub
Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".
| ref: ${{ github.head_ref }} | ||
| - name: Secret Scanning Trufflehog | ||
| uses: trufflesecurity/trufflehog@v3.95.9 | ||
| uses: trufflesecurity/trufflehog@v3.97.5 |
There was a problem hiding this comment.
The fresh evidence in this revision is that the workflow now references v3.97.5, while the reviewed commit's Renovate dependency table identifies v3.97.4 as the target and its release inventory ends at v3.97.4. GitHub cannot resolve the nonexistent action ref, so every review_secrets job fails during action setup and blocks the downstream build job that explicitly requires it; use v3.97.4.
Useful? React with 👍 / 👎.
cacf709 to
b2fb6a8
Compare
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: b2fb6a854f
ℹ️ About Codex in GitHub
Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".
|
|
||
| pre-commit: | ||
| runs-on: ubuntu-22.04 | ||
| runs-on: ubuntu-26.04 |
There was a problem hiding this comment.
The official runner-images Available Images table lists ubuntu-24.04 and ubuntu-22.04, but not ubuntu-26.04; this job therefore remains queued with no matching GitHub-hosted runner. The same unsupported label is assigned to the unit-test, build, and setup jobs below, so callers cannot complete this reusable workflow; use the ubuntu-24.04 target identified in the dependency update.
Useful? React with 👍 / 👎.
b2fb6a8 to
808938d
Compare
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 808938d12d
ℹ️ About Codex in GitHub
Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".
| ref: ${{ github.head_ref }} | ||
| - name: Secret Scanning Trufflehog | ||
| uses: trufflesecurity/trufflehog@v3.95.9 | ||
| uses: trufflesecurity/trufflehog@v3.97.6 |
There was a problem hiding this comment.
The fresh evidence in this revision is that the workflow now references v3.97.6, while the reviewed commit's Renovate dependency table and release inventory identify v3.97.5 as the target and contain no v3.97.6 release. GitHub cannot resolve this action ref, so every review_secrets job fails during action setup and blocks the downstream build job; use v3.97.5.
Useful? React with 👍 / 👎.
808938d to
256fb9e
Compare
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 256fb9e024
ℹ️ About Codex in GitHub
Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".
| ref: ${{ github.head_ref }} | ||
| - name: Secret Scanning Trufflehog | ||
| uses: trufflesecurity/trufflehog@v3.95.9 | ||
| uses: trufflesecurity/trufflehog@v3.97.8 |
There was a problem hiding this comment.
The fresh evidence in this revision is that its Renovate table and included release inventory target and end at v3.97.6, but this workflow requests v3.97.8. GitHub cannot resolve that action ref, so review_secrets fails during setup; build explicitly requires that job, blocking the reusable build and release flow. Use the released v3.97.6 tag.
Useful? React with 👍 / 👎.
256fb9e to
32c5e07
Compare
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 32c5e07d63
ℹ️ About Codex in GitHub
Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".
| ref: ${{ github.head_ref }} | ||
| - name: Secret Scanning Trufflehog | ||
| uses: trufflesecurity/trufflehog@v3.95.9 | ||
| uses: trufflesecurity/trufflehog@v3.97.9 |
There was a problem hiding this comment.
The fresh evidence in this revision is that its Renovate dependency table and included release inventory end at v3.97.8, while this action reference requests v3.97.9. GitHub cannot resolve that ref, so review_secrets fails during setup; the build job explicitly requires review_secrets, blocking the reusable build and release workflow. Pin this to v3.97.8.
Useful? React with 👍 / 👎.
32c5e07 to
fc888e8
Compare
|
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: fc888e8aed
ℹ️ About Codex in GitHub
Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".
|
|
||
| [tool.poetry.group.dev.dependencies] | ||
| pytest = "8.4.2" | ||
| pytest = "9.1.1" |
There was a problem hiding this comment.
Because poetry.lock is unchanged and still locks pytest 8.4.2, the pre-commit job's poetry install --no-root aborts with “pyproject.toml changed significantly since poetry.lock was last generated” before running tests. This makes every PR and push fail its required validation gate; regenerate and commit the lock file with this dependency update.
AGENTS.md reference: AGENTS.md:L80-L80
Useful? React with 👍 / 👎.
|
|
||
| [tool.poetry.group.dev.dependencies] | ||
| pytest = "8.4.2" | ||
| pytest = "9.1.1" |
There was a problem hiding this comment.
Pytest 9 requires Python 3.10 or later, while this project still declares support starting at Python 3.9. After the lock is refreshed, Poetry cannot produce a dependency set valid across the declared range, and developers using Python 3.9 cannot install the dev dependencies; either retain pytest 8 for Python 3.9 or raise the project minimum Python version and regenerate the lock together.
Useful? React with 👍 / 👎.
| - uses: actions/setup-python@v7.0.0 | ||
| with: | ||
| python-version: "3.13" | ||
| python-version: "3.14" |
There was a problem hiding this comment.
The selected interpreter is excluded by requires-python = ">=3.9,<3.14". Poetry therefore rejects the activated Python 3.14 and searches for an ambient compatible interpreter (falling back to 3.13 in the tested environment), so this job no longer validates the version it explicitly selects; on runners without another compatible Python it fails outright. Expand the project range and lock to include 3.14, or keep this job on a supported version.
Useful? React with 👍 / 👎.
fc888e8 to
a16e1d8
Compare
e776526 to
2498e8c
Compare
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 2498e8ce10
ℹ️ About Codex in GitHub
Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".
| - uses: actions/setup-python@v7.0.0 | ||
| with: | ||
| python-version: "3.13" | ||
| python-version: "3.15" |
There was a problem hiding this comment.
Fresh evidence in this revision is that the job now selects Python 3.15, while pyproject.toml still declares requires-python = ">=3.9,<3.14"; the subsequent poetry install therefore cannot create the project environment with the selected interpreter and will either substitute an ambient compatible Python or fail to find one. Consequently, the job does not validate 3.15 as configured and may fail on runners lacking a compatible fallback; retain 3.13 or expand the project range and regenerate the lock together. See Poetry's environment configuration.
Useful? React with 👍 / 👎.
| - uses: actions/setup-python@v7.0.0 | ||
| with: | ||
| python-version: "3.12" | ||
| python-version: "3.15" |
There was a problem hiding this comment.
Fresh evidence in this revision is that the publish workflow now selects Python 3.15, while the next step still installs splunk_add_on_ucc_framework 5.69.1, whose package metadata declares Requires-Python: >=3.7,<3.14. Pip therefore rejects the wheel before ucc-gen publish can run, breaking every invocation of this reusable publishing workflow; retain Python 3.13 or upgrade UCC to a version supporting 3.15. PyPI package metadata.
Useful? React with 👍 / 👎.
|
|
||
| build: | ||
| runs-on: ubuntu-22.04 | ||
| runs-on: ubuntu-26.04 |
There was a problem hiding this comment.
In the build job, the public python-version input still defaults to 3.9, but this runner change moves setup to Ubuntu 26.04. The official Ubuntu 26.04 image inventory caches only Python 3.10–3.14, and the setup-python version manifest has no Ubuntu 26.04 artifact for Python 3.9, so actions/setup-python cannot resolve the default and the build aborts before packaging. Keep these jobs on Ubuntu 24.04 or coordinate a migration away from the public 3.9 default.
Useful? React with 👍 / 👎.
2498e8c to
fe0d33a
Compare
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: fe0d33a427
ℹ️ About Codex in GitHub
Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".
| path: build/package/ | ||
| - name: Scan | ||
| uses: splunk/appinspect-cli-action@v2.11 | ||
| uses: splunk/appinspect-cli-action@v2.16 |
There was a problem hiding this comment.
The dependency update targets v2.15.0, which the official GitHub Marketplace listing identifies as the latest release, but this line references unavailable tag v2.16. GitHub cannot resolve that action, so every appinspect matrix entry fails before scanning and prevents pre-publish from approving a release; pin this reference to v2.15.0.
AGENTS.md reference: AGENTS.md:L16-L17
Useful? React with 👍 / 👎.
fe0d33a to
24eb0ea
Compare
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 24eb0eab30
ℹ️ About Codex in GitHub
Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".
| contents: read | ||
| steps: | ||
| - uses: actions/create-github-app-token@v3.2.0 | ||
| - uses: actions/create-github-app-token@v3.3.0 |
There was a problem hiding this comment.
This pin and the corresponding one in run-gs-scorecard leave tests/test_prepare_ta_validator_exceptions.py lines 314 and 387 asserting actions/create-github-app-token@v3.2.0. At the reviewed tree, running that test file produces two failures at those assertions, so the required pytest validation gate remains red even if the separately stale artifact-version assertions are corrected; update both token-action assertions to v3.3.0.
AGENTS.md reference: AGENTS.md:L80-L82
Useful? React with 👍 / 👎.
24eb0ea to
0b15313
Compare
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 0b15313f72
ℹ️ About Codex in GitHub
Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".
| path: build/package/ | ||
| - name: Scan | ||
| uses: splunk/appinspect-cli-action@v2.11 | ||
| uses: splunk/appinspect-cli-action@v2.17 |
There was a problem hiding this comment.
Fresh evidence in this revision is that its Renovate dependency table and included release inventory target and end at v2.16.0, while this workflow now requests v2.17. GitHub cannot resolve that unavailable action ref, so every appinspect matrix entry fails during action setup and prevents the dependent pre-publish job from approving a release; pin the action to v2.16.0.
AGENTS.md reference: AGENTS.md:L16-L17
Useful? React with 👍 / 👎.
0b15313 to
016d64c
Compare
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 016d64c4be
ℹ️ About Codex in GitHub
Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".
| with: | ||
| python-version: ${{ env.TEST_PYTHON_VERSION }} | ||
| - uses: actions/setup-java@v5.7.0 | ||
| - uses: actions/setup-java@v6.1.0 |
There was a problem hiding this comment.
The reviewed dependency table targets actions/setup-java@v6.0.1, and its included release inventory ends at that version, but this reference and the two build-job references request v6.1.0. GitHub cannot resolve the unavailable action tag, so the pre-commit job fails during setup and blocks downstream builds; use the released v6.0.1 tag.
AGENTS.md reference: AGENTS.md:L16-L17
Useful? React with 👍 / 👎.
016d64c to
774591e
Compare
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 774591ee0d
ℹ️ About Codex in GitHub
Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".
| ref: ${{ github.head_ref }} | ||
| - name: Secret Scanning Trufflehog | ||
| uses: trufflesecurity/trufflehog@v3.95.9 | ||
| uses: trufflesecurity/trufflehog@v3.99.3 |
There was a problem hiding this comment.
Fresh evidence in this revision is that the reviewed dependency table targets v3.99.2, while this changed line requests v3.99.3. GitHub cannot resolve that unavailable action ref, so review_secrets fails during action setup and prevents the validation and release flow from succeeding; use the released v3.99.2 tag.
AGENTS.md reference: AGENTS.md:L16-L17
Useful? React with 👍 / 👎.
3125cca to
d7bdd51
Compare
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: d7bdd51697
ℹ️ About Codex in GitHub
Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".
| ref: ${{ github.head_ref }} | ||
| - name: Secret Scanning Trufflehog | ||
| uses: trufflesecurity/trufflehog@v3.95.9 | ||
| uses: trufflesecurity/trufflehog@v3.99.4 |
There was a problem hiding this comment.
Fresh evidence in this revision is that the Renovate dependency table targets v3.99.3, which has an official release, while this changed line requests unavailable tag v3.99.4. GitHub cannot resolve that action ref, so review_secrets fails during action setup and blocks the validation and release flow; use v3.99.3.
AGENTS.md reference: AGENTS.md:L16-L17
Useful? React with 👍 / 👎.
d7bdd51 to
b20f028
Compare
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: b20f028824
ℹ️ About Codex in GitHub
Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".
| sc4s: ${{ fromJson(needs.meta.outputs.matrix_supportedSC4S) }} | ||
| container: | ||
| image: ghcr.io/splunk/workflow-engine-base:4.1.0 | ||
| image: ghcr.io/splunk/workflow-engine-base:5.0.2 |
There was a problem hiding this comment.
When any containerized integration-test job is selected, the runner must pull this image before executing its steps, but the reviewed dependency update identifies 5.0.0 as the available target while all eight changed container references request unpublished 5.0.2. The image pull therefore fails before the tests start and prevents the dependent pre-publish flow from succeeding; use ghcr.io/splunk/workflow-engine-base:5.0.0 consistently.
Useful? React with 👍 / 👎.
b20f028 to
ca75bc8
Compare
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: ca75bc8769
ℹ️ About Codex in GitHub
Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".
| ref: ${{ github.head_ref }} | ||
| - name: Secret Scanning Trufflehog | ||
| uses: trufflesecurity/trufflehog@v3.95.9 | ||
| uses: trufflesecurity/trufflehog@v3.99.5 |
There was a problem hiding this comment.
Fresh evidence in this revision is that the workflow now requests v3.99.5, while the commit's dependency table targets v3.99.4 and the official release page still identifies v3.99.4 as the latest release. GitHub cannot resolve the unpublished action ref, so review_secrets fails during action setup and blocks the downstream build job; use v3.99.4.
AGENTS.md reference: AGENTS.md:L16-L17
Useful? React with 👍 / 👎.
ca75bc8 to
a7ff5da
Compare
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: a7ff5da975
ℹ️ About Codex in GitHub
Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".
| ref: ${{ github.head_ref }} | ||
| - name: Secret Scanning Trufflehog | ||
| uses: trufflesecurity/trufflehog@v3.95.9 | ||
| uses: trufflesecurity/trufflehog@v3.99.7 |
There was a problem hiding this comment.
Fresh evidence since the earlier TruffleHog comments is that this revision now requests v3.99.7, while the official v3.99.6 release is still marked Latest and the v3.99.7 release URL does not resolve. On every invocation, GitHub cannot resolve this action ref, so review_secrets fails before scanning and blocks the dependent build and pre-publish flow; pin v3.99.6 or another existing release.
AGENTS.md reference: AGENTS.md:L16-L17
Useful? React with 👍 / 👎.
a7ff5da to
6a1e8fb
Compare
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 6a1e8fba7d
ℹ️ About Codex in GitHub
Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".
| path: build/package/ | ||
| - name: Scan | ||
| uses: splunk/appinspect-cli-action@v2.11 | ||
| uses: splunk/appinspect-cli-action@v2.18 |
There was a problem hiding this comment.
Fresh evidence since the earlier AppInspect comments is that this revision now requests v2.18, while its Renovate dependency table identifies v2.17 as the target and the official release inventory contains no v2.18 release. GitHub therefore cannot resolve this action ref, so every appinspect matrix entry fails during setup and prevents pre-publish from approving a release; pin an existing release tag.
AGENTS.md reference: AGENTS.md:L16-L17
Useful? React with 👍 / 👎.
6a1e8fb to
346d325
Compare
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 346d3258a5
ℹ️ About Codex in GitHub
Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".
| ref: ${{ github.head_ref }} | ||
| - name: Secret Scanning Trufflehog | ||
| uses: trufflesecurity/trufflehog@v3.95.9 | ||
| uses: trufflesecurity/trufflehog@v3.99.8 |
There was a problem hiding this comment.
Fresh evidence since the earlier TruffleHog comments is that this exact commit's Renovate dependency table targets v3.99.7, while the changed workflow requests v3.99.8. GitHub cannot resolve that unavailable action ref, so review_secrets fails during action setup and blocks the build job that explicitly depends on it; use the released v3.99.7 tag.
AGENTS.md reference: AGENTS.md:L16-L17
Useful? React with 👍 / 👎.
346d325 to
4d8b7f3
Compare
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 4d8b7f3a16
ℹ️ About Codex in GitHub
Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".
| with: | ||
| python-version: ${{ env.TEST_PYTHON_VERSION }} | ||
| - uses: actions/setup-java@v5.7.0 | ||
| - uses: actions/setup-java@v6.2.0 |
There was a problem hiding this comment.
Fresh evidence since the earlier setup-java comment is that this revision now requests v6.2.0, while its Renovate dependency table targets v6.1.0 and the official setup-java release inventory lists v6.1.0 as latest with no v6.2.0 tag. GitHub therefore cannot resolve this action in pre-commit or either build job, preventing the reusable validation and release flow from completing; pin all three references to v6.1.0.
AGENTS.md reference: AGENTS.md:L16-L17
Useful? React with 👍 / 👎.
4d8b7f3 to
aeea234
Compare
aeea234 to
9250861
Compare
Note
This PR body was truncated due to platform limits.
This PR contains the following updates:
v3.2.0→v3.3.0v8.0.1→v8.0.2v5.7.0→v6.2.0v6.3.0→v7.1.0v7.0.1→v7.0.2v6.1.1→v6.1.2v0.6.0→v0.9.0v3.0.0→v3.2.04.1.0→5.0.217→253.12→3.153.13→3.15v3.0.3→v3.0.4v1.7.3→v1.7.4v2.11→v2.18v3.95.9→v3.99.822.04→26.04Release Notes
actions/create-github-app-token
v3.3.0Compare Source
Features
Bug Fixes
actions/download-artifact
v8.0.2Compare Source
What's Changed
New Contributors
Full Changelog: actions/download-artifact@v8.0.1...v8.0.2
actions/setup-java
v6.2.0Compare Source
What's Changed
New Contributors
Full Changelog: actions/setup-java@v6.1.0...v6.2.0
v6.1.0Compare Source
What's Changed
New Contributors
Full Changelog: actions/setup-java@v6.0.1...v6.1.0
v6.0.1Compare Source
What's Changed
New Contributors
Full Changelog: actions/setup-java@v6.0.0...v6.0.1
v6.0.0Compare Source
What's Changed
18.0.1.1by @brunoborges in #1092New Contributors
Full Changelog: actions/setup-java@v5.7.0...v6.0.0
actions/setup-python
v7.1.0Compare Source
What's Changed
Enhancements
mirrorandmirror-tokeninputs for custom Python distribution sources by @luhenry in #1302Dependency Upgrade
New Contributors
Full Changelog: actions/setup-python@v7.0.0...v7.1.0
v7.0.0Compare Source
What's Changed
Enhancements
Bug Fix
Dependency Upgrade
New Contributors
Full Changelog: actions/setup-python@v6...v7.0.0
actions/upload-artifact
v7.0.2Compare Source
What's Changed
New Contributors
Full Changelog: actions/upload-artifact@v7.0.1...v7.0.2
amannn/action-semantic-pull-request
v6.1.2Compare Source
Bug Fixes
apache/skywalking-eyes
v0.9.0Compare Source
What's Changed
header diffcommand to show header differences by @wu-sheng in #276New Contributors
Configuration
📅 Schedule: (UTC)
* 0-3 * * 1)🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.