Skip to content

Bump the fizyk-actions-reuse group across 1 directory with 10 updates - #1470

Merged
merger-application[bot] merged 1 commit into
mainfrom
dependabot/github_actions/fizyk-actions-reuse-73e2534ec0
Oct 12, 2026
Merged

merger-application[bot] merged 1 commit into
mainfrom
dependabot/github_actions/fizyk-actions-reuse-73e2534ec0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 12, 2026

Copy link
Copy Markdown
Contributor

Bumps the fizyk-actions-reuse group with 10 updates in the / directory:

Package From To
fizyk/actions-reuse/.github/actions/uv-setup 5.10.0 5.10.1
fizyk/actions-reuse/.github/actions/uv-run 5.10.0 5.10.1
fizyk/actions-reuse/.github/workflows/shared-automerge.yml 5.10.0 5.10.1
fizyk/actions-reuse/.github/workflows/shared-pypi.yml 5.10.0 5.10.1
fizyk/actions-reuse/.github/workflows/shared-diagram.yml 5.10.0 5.10.1
fizyk/actions-reuse/.github/actions/uv-pytest-coverage 5.10.0 5.10.1
fizyk/actions-reuse/.github/actions/uv-pip 5.10.0 5.10.1
fizyk/actions-reuse/.github/workflows/shared-pr-check.yml 5.10.0 5.10.1
fizyk/actions-reuse/.github/workflows/shared-pre-commit.yml 5.10.0 5.10.1
fizyk/actions-reuse/.github/workflows/shared-release-schedule.yml 5.10.0 5.10.1

Updates fizyk/actions-reuse/.github/actions/uv-setup from 5.10.0 to 5.10.1

Changelog

Sourced from fizyk/actions-reuse/.github/actions/uv-setup's changelog.

Changelog

.. towncrier release notes start

actions-reuse 5.10.1 (2026-10-05)

Bugfixes

  • Arm auto-merge on dependabot pull requests only when the commit records a semver-minor or semver-patch update type. Security updates carry no update-type, so major bumps fixing an advisory slipped past the major-version check and were merged; those now fall back to the versions in the commit headline and are armed only for a single dependency whose major version (and minor version, before 1.0) stays the same. ([#377](https://github.com/fizyk/actions-reuse/issues/377) <https://github.com/fizyk/actions-reuse/issues/377>__)

actions-reuse 5.10.0 (2026-09-28)

Features

  • Arm auto-merge on non-major renovate pull requests in shared-automerge. The calling repository's renovate config has to add "commitBody": "Update-Type: {{updateType}}", since that is what the update type is read from. ([#358](https://github.com/fizyk/actions-reuse/issues/358) <https://github.com/fizyk/actions-reuse/issues/358>__)

Bugfixes

  • Grant the shared-automerge app token workflows: write, so auto-merge no longer gets disabled with workflow_policy_update_error when a pull request changing .github/workflows/ is behind its base branch (e.g. the second of two dependabot GitHub Actions bumps). The GitHub App installation must grant the Workflows permission, or minting the token fails. ([#372](https://github.com/fizyk/actions-reuse/issues/372) <https://github.com/fizyk/actions-reuse/issues/372>__)

Misc

  • [#358](https://github.com/fizyk/actions-reuse/issues/358) <https://github.com/fizyk/actions-reuse/issues/358>, [#371](https://github.com/fizyk/actions-reuse/issues/371) <https://github.com/fizyk/actions-reuse/issues/371>

actions-reuse 5.9.0 (2026-09-21)

Features

  • Updated default Python versions:

    • Window one to 3.11 - 3.15
    • Single one from 3.14 to 3.15 ([#347](https://github.com/fizyk/actions-reuse/issues/347) <https://github.com/fizyk/actions-reuse/issues/347>__)

Misc

... (truncated)

Commits
  • 06f5123 Bump to 5.10.1
  • 8d0f91b Merge pull request #380 from fizyk/dependabot/github_actions/setup-uv-b65111bd8f
  • cab974a Bump the setup-uv group across 4 directories with 1 update
  • 637fb7c Merge pull request #379 from fizyk/fix-automerge-security-majors
  • b37d365 Skip dependabot security majors in shared automerge - closes #377
  • See full diff in compare view

Updates fizyk/actions-reuse/.github/actions/uv-run from 5.10.0 to 5.10.1

Changelog

Sourced from fizyk/actions-reuse/.github/actions/uv-run's changelog.

Changelog

.. towncrier release notes start

actions-reuse 5.10.1 (2026-10-05)

Bugfixes

  • Arm auto-merge on dependabot pull requests only when the commit records a semver-minor or semver-patch update type. Security updates carry no update-type, so major bumps fixing an advisory slipped past the major-version check and were merged; those now fall back to the versions in the commit headline and are armed only for a single dependency whose major version (and minor version, before 1.0) stays the same. ([#377](https://github.com/fizyk/actions-reuse/issues/377) <https://github.com/fizyk/actions-reuse/issues/377>__)

actions-reuse 5.10.0 (2026-09-28)

Features

  • Arm auto-merge on non-major renovate pull requests in shared-automerge. The calling repository's renovate config has to add "commitBody": "Update-Type: {{updateType}}", since that is what the update type is read from. ([#358](https://github.com/fizyk/actions-reuse/issues/358) <https://github.com/fizyk/actions-reuse/issues/358>__)

Bugfixes

  • Grant the shared-automerge app token workflows: write, so auto-merge no longer gets disabled with workflow_policy_update_error when a pull request changing .github/workflows/ is behind its base branch (e.g. the second of two dependabot GitHub Actions bumps). The GitHub App installation must grant the Workflows permission, or minting the token fails. ([#372](https://github.com/fizyk/actions-reuse/issues/372) <https://github.com/fizyk/actions-reuse/issues/372>__)

Misc

  • [#358](https://github.com/fizyk/actions-reuse/issues/358) <https://github.com/fizyk/actions-reuse/issues/358>, [#371](https://github.com/fizyk/actions-reuse/issues/371) <https://github.com/fizyk/actions-reuse/issues/371>

actions-reuse 5.9.0 (2026-09-21)

Features

  • Updated default Python versions:

    • Window one to 3.11 - 3.15
    • Single one from 3.14 to 3.15 ([#347](https://github.com/fizyk/actions-reuse/issues/347) <https://github.com/fizyk/actions-reuse/issues/347>__)

Misc

... (truncated)

Commits
  • 06f5123 Bump to 5.10.1
  • 8d0f91b Merge pull request #380 from fizyk/dependabot/github_actions/setup-uv-b65111bd8f
  • cab974a Bump the setup-uv group across 4 directories with 1 update
  • 637fb7c Merge pull request #379 from fizyk/fix-automerge-security-majors
  • b37d365 Skip dependabot security majors in shared automerge - closes #377
  • See full diff in compare view

Updates fizyk/actions-reuse/.github/workflows/shared-automerge.yml from 5.10.0 to 5.10.1

Changelog

Sourced from fizyk/actions-reuse/.github/workflows/shared-automerge.yml's changelog.

Changelog

.. towncrier release notes start

actions-reuse 5.10.1 (2026-10-05)

Bugfixes

  • Arm auto-merge on dependabot pull requests only when the commit records a semver-minor or semver-patch update type. Security updates carry no update-type, so major bumps fixing an advisory slipped past the major-version check and were merged; those now fall back to the versions in the commit headline and are armed only for a single dependency whose major version (and minor version, before 1.0) stays the same. ([#377](https://github.com/fizyk/actions-reuse/issues/377) <https://github.com/fizyk/actions-reuse/issues/377>__)

actions-reuse 5.10.0 (2026-09-28)

Features

  • Arm auto-merge on non-major renovate pull requests in shared-automerge. The calling repository's renovate config has to add "commitBody": "Update-Type: {{updateType}}", since that is what the update type is read from. ([#358](https://github.com/fizyk/actions-reuse/issues/358) <https://github.com/fizyk/actions-reuse/issues/358>__)

Bugfixes

  • Grant the shared-automerge app token workflows: write, so auto-merge no longer gets disabled with workflow_policy_update_error when a pull request changing .github/workflows/ is behind its base branch (e.g. the second of two dependabot GitHub Actions bumps). The GitHub App installation must grant the Workflows permission, or minting the token fails. ([#372](https://github.com/fizyk/actions-reuse/issues/372) <https://github.com/fizyk/actions-reuse/issues/372>__)

Misc

  • [#358](https://github.com/fizyk/actions-reuse/issues/358) <https://github.com/fizyk/actions-reuse/issues/358>, [#371](https://github.com/fizyk/actions-reuse/issues/371) <https://github.com/fizyk/actions-reuse/issues/371>

actions-reuse 5.9.0 (2026-09-21)

Features

  • Updated default Python versions:

    • Window one to 3.11 - 3.15
    • Single one from 3.14 to 3.15 ([#347](https://github.com/fizyk/actions-reuse/issues/347) <https://github.com/fizyk/actions-reuse/issues/347>__)

Misc

... (truncated)

Commits
  • 06f5123 Bump to 5.10.1
  • 8d0f91b Merge pull request #380 from fizyk/dependabot/github_actions/setup-uv-b65111bd8f
  • cab974a Bump the setup-uv group across 4 directories with 1 update
  • 637fb7c Merge pull request #379 from fizyk/fix-automerge-security-majors
  • b37d365 Skip dependabot security majors in shared automerge - closes #377
  • See full diff in compare view

Updates fizyk/actions-reuse/.github/workflows/shared-pypi.yml from 5.10.0 to 5.10.1

Changelog

Sourced from fizyk/actions-reuse/.github/workflows/shared-pypi.yml's changelog.

Changelog

.. towncrier release notes start

actions-reuse 5.10.1 (2026-10-05)

Bugfixes

  • Arm auto-merge on dependabot pull requests only when the commit records a semver-minor or semver-patch update type. Security updates carry no update-type, so major bumps fixing an advisory slipped past the major-version check and were merged; those now fall back to the versions in the commit headline and are armed only for a single dependency whose major version (and minor version, before 1.0) stays the same. ([#377](https://github.com/fizyk/actions-reuse/issues/377) <https://github.com/fizyk/actions-reuse/issues/377>__)

actions-reuse 5.10.0 (2026-09-28)

Features

  • Arm auto-merge on non-major renovate pull requests in shared-automerge. The calling repository's renovate config has to add "commitBody": "Update-Type: {{updateType}}", since that is what the update type is read from. ([#358](https://github.com/fizyk/actions-reuse/issues/358) <https://github.com/fizyk/actions-reuse/issues/358>__)

Bugfixes

  • Grant the shared-automerge app token workflows: write, so auto-merge no longer gets disabled with workflow_policy_update_error when a pull request changing .github/workflows/ is behind its base branch (e.g. the second of two dependabot GitHub Actions bumps). The GitHub App installation must grant the Workflows permission, or minting the token fails. ([#372](https://github.com/fizyk/actions-reuse/issues/372) <https://github.com/fizyk/actions-reuse/issues/372>__)

Misc

  • [#358](https://github.com/fizyk/actions-reuse/issues/358) <https://github.com/fizyk/actions-reuse/issues/358>, [#371](https://github.com/fizyk/actions-reuse/issues/371) <https://github.com/fizyk/actions-reuse/issues/371>

actions-reuse 5.9.0 (2026-09-21)

Features

  • Updated default Python versions:

    • Window one to 3.11 - 3.15
    • Single one from 3.14 to 3.15 ([#347](https://github.com/fizyk/actions-reuse/issues/347) <https://github.com/fizyk/actions-reuse/issues/347>__)

Misc

... (truncated)

Commits
  • 06f5123 Bump to 5.10.1
  • 8d0f91b Merge pull request #380 from fizyk/dependabot/github_actions/setup-uv-b65111bd8f
  • cab974a Bump the setup-uv group across 4 directories with 1 update
  • 637fb7c Merge pull request #379 from fizyk/fix-automerge-security-majors
  • b37d365 Skip dependabot security majors in shared automerge - closes #377
  • See full diff in compare view

Updates fizyk/actions-reuse/.github/workflows/shared-diagram.yml from 5.10.0 to 5.10.1

Changelog

Sourced from fizyk/actions-reuse/.github/workflows/shared-diagram.yml's changelog.

Changelog

.. towncrier release notes start

actions-reuse 5.10.1 (2026-10-05)

Bugfixes

  • Arm auto-merge on dependabot pull requests only when the commit records a semver-minor or semver-patch update type. Security updates carry no update-type, so major bumps fixing an advisory slipped past the major-version check and were merged; those now fall back to the versions in the commit headline and are armed only for a single dependency whose major version (and minor version, before 1.0) stays the same. ([#377](https://github.com/fizyk/actions-reuse/issues/377) <https://github.com/fizyk/actions-reuse/issues/377>__)

actions-reuse 5.10.0 (2026-09-28)

Features

  • Arm auto-merge on non-major renovate pull requests in shared-automerge. The calling repository's renovate config has to add "commitBody": "Update-Type: {{updateType}}", since that is what the update type is read from. ([#358](https://github.com/fizyk/actions-reuse/issues/358) <https://github.com/fizyk/actions-reuse/issues/358>__)

Bugfixes

  • Grant the shared-automerge app token workflows: write, so auto-merge no longer gets disabled with workflow_policy_update_error when a pull request changing .github/workflows/ is behind its base branch (e.g. the second of two dependabot GitHub Actions bumps). The GitHub App installation must grant the Workflows permission, or minting the token fails. ([#372](https://github.com/fizyk/actions-reuse/issues/372) <https://github.com/fizyk/actions-reuse/issues/372>__)

Misc

  • [#358](https://github.com/fizyk/actions-reuse/issues/358) <https://github.com/fizyk/actions-reuse/issues/358>, [#371](https://github.com/fizyk/actions-reuse/issues/371) <https://github.com/fizyk/actions-reuse/issues/371>

actions-reuse 5.9.0 (2026-09-21)

Features

  • Updated default Python versions:

    • Window one to 3.11 - 3.15
    • Single one from 3.14 to 3.15 ([#347](https://github.com/fizyk/actions-reuse/issues/347) <https://github.com/fizyk/actions-reuse/issues/347>__)

Misc

... (truncated)

Commits
  • 06f5123 Bump to 5.10.1
  • 8d0f91b Merge pull request #380 from fizyk/dependabot/github_actions/setup-uv-b65111bd8f
  • cab974a Bump the setup-uv group across 4 directories with 1 update
  • 637fb7c Merge pull request #379 from fizyk/fix-automerge-security-majors
  • b37d365 Skip dependabot security majors in shared automerge - closes #377
  • See full diff in compare view

Updates fizyk/actions-reuse/.github/actions/uv-pytest-coverage from 5.10.0 to 5.10.1

Changelog

Sourced from fizyk/actions-reuse/.github/actions/uv-pytest-coverage's changelog.

Changelog

.. towncrier release notes start

actions-reuse 5.10.1 (2026-10-05)

Bugfixes

  • Arm auto-merge on dependabot pull requests only when the commit records a semver-minor or semver-patch update type. Security updates carry no update-type, so major bumps fixing an advisory slipped past the major-version check and were merged; those now fall back to the versions in the commit headline and are armed only for a single dependency whose major version (and minor version, before 1.0) stays the same. ([#377](https://github.com/fizyk/actions-reuse/issues/377) <https://github.com/fizyk/actions-reuse/issues/377>__)

actions-reuse 5.10.0 (2026-09-28)

Features

  • Arm auto-merge on non-major renovate pull requests in shared-automerge. The calling repository's renovate config has to add "commitBody": "Update-Type: {{updateType}}", since that is what the update type is read from. ([#358](https://github.com/fizyk/actions-reuse/issues/358) <https://github.com/fizyk/actions-reuse/issues/358>__)

Bugfixes

  • Grant the shared-automerge app token workflows: write, so auto-merge no longer gets disabled with workflow_policy_update_error when a pull request changing .github/workflows/ is behind its base branch (e.g. the second of two dependabot GitHub Actions bumps). The GitHub App installation must grant the Workflows permission, or minting the token fails. ([#372](https://github.com/fizyk/actions-reuse/issues/372) <https://github.com/fizyk/actions-reuse/issues/372>__)

Misc

  • [#358](https://github.com/fizyk/actions-reuse/issues/358) <https://github.com/fizyk/actions-reuse/issues/358>, [#371](https://github.com/fizyk/actions-reuse/issues/371) <https://github.com/fizyk/actions-reuse/issues/371>

actions-reuse 5.9.0 (2026-09-21)

Features

  • Updated default Python versions:

    • Window one to 3.11 - 3.15
    • Single one from 3.14 to 3.15 ([#347](https://github.com/fizyk/actions-reuse/issues/347) <https://github.com/fizyk/actions-reuse/issues/347>__)

Misc

... (truncated)

Commits
  • 06f5123 Bump to 5.10.1
  • 8d0f91b Merge pull request #380 from fizyk/dependabot/github_actions/setup-uv-b65111bd8f
  • cab974a Bump the setup-uv group across 4 directories with 1 update
  • 637fb7c Merge pull request #379 from fizyk/fix-automerge-security-majors
  • b37d365 Skip dependabot security majors in shared automerge - closes #377
  • See full diff in compare view

Updates fizyk/actions-reuse/.github/actions/uv-pip from 5.10.0 to 5.10.1

Changelog

Sourced from fizyk/actions-reuse/.github/actions/uv-pip's changelog.

Changelog

.. towncrier release notes start

actions-reuse 5.10.1 (2026-10-05)

Bugfixes

  • Arm auto-merge on dependabot pull requests only when the commit records a semver-minor or semver-patch update type. Security updates carry no update-type, so major bumps fixing an advisory slipped past the major-version check and were merged; those now fall back to the versions in the commit headline and are armed only for a single dependency whose major version (and minor version, before 1.0) stays the same. ([#377](https://github.com/fizyk/actions-reuse/issues/377) <https://github.com/fizyk/actions-reuse/issues/377>__)

actions-reuse 5.10.0 (2026-09-28)

Features

  • Arm auto-merge on non-major renovate pull requests in shared-automerge. The calling repository's renovate config has to add "commitBody": "Update-Type: {{updateType}}", since that is what the update type is read from. ([#358](https://github.com/fizyk/actions-reuse/issues/358) <https://github.com/fizyk/actions-reuse/issues/358>__)

Bugfixes

  • Grant the shared-automerge app token workflows: write, so auto-merge no longer gets disabled with workflow_policy_update_error when a pull request changing .github/workflows/ is behind its base branch (e.g. the second of two dependabot GitHub Actions bumps). The GitHub App installation must grant the Workflows permission, or minting the token fails. ([#372](https://github.com/fizyk/actions-reuse/issues/372) <https://github.com/fizyk/actions-reuse/issues/372>__)

Misc

  • [#358](https://github.com/fizyk/actions-reuse/issues/358) <https://github.com/fizyk/actions-reuse/issues/358>, [#371](https://github.com/fizyk/actions-reuse/issues/371) <https://github.com/fizyk/actions-reuse/issues/371>

actions-reuse 5.9.0 (2026-09-21)

Features

  • Updated default Python versions:

    • Window one to 3.11 - 3.15
    • Single one from 3.14 to 3.15 ([#347](https://github.com/fizyk/actions-reuse/issues/347) <https://github.com/fizyk/actions-reuse/issues/347>__)

Misc

... (truncated)

Commits
  • 06f5123 Bump to 5.10.1
  • 8d0f91b Merge pull request #380 from fizyk/dependabot/github_actions/setup-uv-b65111bd8f
  • cab974a Bump the setup-uv group across 4 directories with 1 update
  • 637fb7c Merge pull request #379 from fizyk/fix-automerge-security-majors
  • b37d365 Skip dependabot security majors in shared automerge - closes #377
  • See full diff in compare view

Updates fizyk/actions-reuse/.github/workflows/shared-pr-check.yml from 5.10.0 to 5.10.1

Changelog

Sourced from fizyk/actions-reuse/.github/workflows/shared-pr-check.yml's changelog.

Changelog

.. towncrier release notes start

actions-reuse 5.10.1 (2026-10-05)

Bugfixes

  • Arm auto-merge on dependabot pull requests only when the commit records a semver-minor or semver-patch update type. Security updates carry no update-type, so major bumps fixing an advisory slipped past the major-version check and were merged; those now fall back to the versions in the commit headline and are armed only for a single dependency whose major version (and minor version, before 1.0) stays the same. ([#377](https://github.com/fizyk/actions-reuse/issues/377) <https://github.com/fizyk/actions-reuse/issues/377>__)

actions-reuse 5.10.0 (2026-09-28)

Features

  • Arm auto-merge on non-major renovate pull requests in shared-automerge. The calling repository's renovate config has to add "commitBody": "Update-Type: {{updateType}}", since that is what the update type is read from. ([#358](https://github.com/fizyk/actions-reuse/issues/358) <https://github.com/fizyk/actions-reuse/issues/358>__)

Bugfixes

  • Grant the shared-automerge app token workflows: write, so auto-merge no longer gets disabled with workflow_policy_update_error when a pull request changing .github/workflows/ is behind its base branch (e.g. the second of two dependabot GitHub Actions bumps). The GitHub App installation must grant the Workflows permission, or minting the token fails. ([#372](https://github.com/fizyk/actions-reuse/issues/372) <https://github.com/fizyk/actions-reuse/issues/372>__)

Misc

  • [#358](https://github.com/fizyk/actions-reuse/issues/358) <https://github.com/fizyk/actions-reuse/issues/358>, [#371](https://github.com/fizyk/actions-reuse/issues/371) <https://github.com/fizyk/actions-reuse/issues/371>

actions-reuse 5.9.0 (2026-09-21)

Features

  • Updated default Python versions:

    • Window one to 3.11 - 3.15
    • Single one from 3.14 to 3.15 ([#347](https://github.com/fizyk/actions-reuse/issues/347) <https://github.com/fizyk/actions-reuse/issues/347>__)

Misc

... (truncated)

Commits
  • 06f5123 Bump to 5.10.1
  • 8d0f91b Merge pull request #380 from fizyk/dependabot/github_actions/setup-uv-b65111bd8f
  • cab974a Bump the setup-uv group across 4 directories with 1 update
  • 637fb7c Merge pull request #379 from fizyk/fix-automerge-security-majors
  • b37d365 Skip dependabot security majors in shared automerge - closes #377
  • See full diff in compare view

Updates fizyk/actions-reuse/.github/workflows/shared-pre-commit.yml from 5.10.0 to 5.10.1

Changelog

Sourced from fizyk/actions-reuse/.github/workflows/shared-pre-commit.yml's changelog.

Changelog

.. towncrier release notes start

actions-reuse 5.10.1 (2026-10-05)

Bugfixes

  • Arm auto-merge on dependabot pull requests only when the commit records a semver-minor or semver-patch update type. Security updates carry no update-type, so major bumps fixing an advisory slipped past the major-version check and were merged; those now fall back to the versions in the commit headline and are armed only for a single dependency whose major version (and minor version, before 1.0) stays the same. ([#377](https://github.com/fizyk/actions-reuse/issues/377) <https://github.com/fizyk/actions-reuse/issues/377>__)

actions-reuse 5.10.0 (2026-09-28)

Features

  • Arm auto-merge on non-major renovate pull requests in shared-automerge. The calling repository's renovate config has to add "commitBody": "Update-Type: {{updateType}}", since that is what the update type is read from. ([#358](https://github.com/fizyk/actions-reuse/issues/358) <https://github.com/fizyk/actions-reuse/issues/358>__)

Bugfixes

  • Grant the shared-automerge app token workflows: write, so auto-merge no longer gets disabled with workflow_policy_update_error when a pull request changing .github/workflows/ is behind its base branch (e.g. the second of two dependabot GitHub Actions bumps). The GitHub App installation must grant the Workflows permission, or minting the token fails. ([#372](https://github.com/fizyk/actions-reuse/issues/372) <https://github.com/fizyk/actions-reuse/issues/372>__)

Misc

  • [#358](https://github.com/fizyk/actions-reuse/issues/358) <https://github.com/fizyk/actions-reuse/issues/358>, [#371](https://github.com/fizyk/actions-reuse/issues/371) <https://github.com/fizyk/actions-reuse/issues/371>

actions-reuse 5.9.0 (2026-09-21)

Features

  • Updated default Python versions:

    • Window one to 3.11 - 3.15
    • Single one from 3.14 to 3.15 ([#347](https://github.com/fizyk/actions-reuse/issues/347) <https://github.com/fizyk/actions-reuse/issues/347>__)

Misc

... (truncated)

Commits
  • 06f5123 Bump to 5.10.1
  • 8d0f91b Merge pull request #380 from fizyk/dependabot/github_actions/setup-uv-b65111bd8f
  • cab974a Bump the setup-uv group across 4 directories with 1 update
  • 637fb7c Merge pull request #379 from fizyk/fix-automerge-security-majors
  • b37d365 Skip dependabot security majors in shared automerge - closes #377
  • See full diff in compare view

Updates fizyk/actions-reuse/.github/workflows/shared-release-schedule.yml from 5.10.0 to 5.10.1

Changelog

Sourced from fizyk/actions-reuse/.github/workflows/shared-release-schedule.yml's changelog.

Changelog

.. towncrier release notes start

actions-reuse 5.10.1 (2026-10-05)

Bugfixes

  • Arm auto-merge on dependabot pull requests only when the commit records a semver-minor or semver-patch update type. Security updates carry no update-type, so major bumps fixing an advisory slipped past the major-version check and were merged; those now fall back to the versions in the commit headline and are armed only for a single dependency whose major version (and minor version, before 1.0) stays the same. ([#377](https://github.com/fizyk/actions-reuse/issues/377) <https://github.com/fizyk/actions-reuse/issues/377>__)

actions-reuse 5.10.0 (2026-09-28)

Features

  • Arm auto-merge on non-major renovate pull requests in shared-automerge. The calling repository's renovate config has to add "commitBody": "Update-Type: {{updateType}}", since that is what the update type is read from. ([#358](https://github.com/fizyk/actions-reuse/issues/358) <https://github.com/fizyk/actions-reuse/issues/358>__)

Bugfixes

  • Grant the shared-automerge app token workflows: write, so auto-merge no longer gets disabled with workflow_policy_update_error when a pull request changing .github/workflows/ is behind its base branch (e.g. the second of two dependabot GitHub Actions bumps). The GitHub App installation must grant the Workflows permission, or minting the token fails. ([#372](https://github.com/fizyk/actions-reuse/issues/372) <https://github.com/fizyk/actions-reuse/issues/372>__)

Misc

  • [#358](https://github.com/fizyk/actions-reuse/issues/358) <https://github.com/fizyk/actions-reuse/issues/358>, [#371](https://github.com/fizyk/actions-reuse/issues/371) <https://github.com/fizyk/actions-reuse/issues/371>

actions-reuse 5.9.0 (2026-09-21)

Features

  • Updated default Python versions:

    • Window one to 3.11 - 3.15
    • Single one from 3.14 to 3.15 ([#347](https://github.com/fizyk/actions-reuse/issues/347) <https://github.com/fizyk/actions-reuse/issues/347>__)

Misc

... (truncated)

Commits
  • 06f5123 Bump to 5.10.1
  • 8d0f91b Merge pull request #380 from fizyk/dependabot/github_actions/setup-uv-b65111bd8f
  • cab974a Bump the setup-uv group across 4 directories with 1 update
  • 637fb7c Merge pull request #379 from fizyk/fix-automerge-security-majors
  • b37d365 Skip dependabot security majors in shared automerge - closes #377
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the fizyk-actions-reuse group with 10 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [fizyk/actions-reuse/.github/actions/uv-setup](https://github.com/fizyk/actions-reuse) | `5.10.0` | `5.10.1` |
| [fizyk/actions-reuse/.github/actions/uv-run](https://github.com/fizyk/actions-reuse) | `5.10.0` | `5.10.1` |
| [fizyk/actions-reuse/.github/workflows/shared-automerge.yml](https://github.com/fizyk/actions-reuse) | `5.10.0` | `5.10.1` |
| [fizyk/actions-reuse/.github/workflows/shared-pypi.yml](https://github.com/fizyk/actions-reuse) | `5.10.0` | `5.10.1` |
| [fizyk/actions-reuse/.github/workflows/shared-diagram.yml](https://github.com/fizyk/actions-reuse) | `5.10.0` | `5.10.1` |
| [fizyk/actions-reuse/.github/actions/uv-pytest-coverage](https://github.com/fizyk/actions-reuse) | `5.10.0` | `5.10.1` |
| [fizyk/actions-reuse/.github/actions/uv-pip](https://github.com/fizyk/actions-reuse) | `5.10.0` | `5.10.1` |
| [fizyk/actions-reuse/.github/workflows/shared-pr-check.yml](https://github.com/fizyk/actions-reuse) | `5.10.0` | `5.10.1` |
| [fizyk/actions-reuse/.github/workflows/shared-pre-commit.yml](https://github.com/fizyk/actions-reuse) | `5.10.0` | `5.10.1` |
| [fizyk/actions-reuse/.github/workflows/shared-release-schedule.yml](https://github.com/fizyk/actions-reuse) | `5.10.0` | `5.10.1` |



Updates `fizyk/actions-reuse/.github/actions/uv-setup` from 5.10.0 to 5.10.1
- [Changelog](https://github.com/fizyk/actions-reuse/blob/main/Changelog.rst)
- [Commits](fizyk/actions-reuse@a910bc7...06f5123)

Updates `fizyk/actions-reuse/.github/actions/uv-run` from 5.10.0 to 5.10.1
- [Changelog](https://github.com/fizyk/actions-reuse/blob/main/Changelog.rst)
- [Commits](fizyk/actions-reuse@a910bc7...06f5123)

Updates `fizyk/actions-reuse/.github/workflows/shared-automerge.yml` from 5.10.0 to 5.10.1
- [Changelog](https://github.com/fizyk/actions-reuse/blob/main/Changelog.rst)
- [Commits](fizyk/actions-reuse@a910bc7...06f5123)

Updates `fizyk/actions-reuse/.github/workflows/shared-pypi.yml` from 5.10.0 to 5.10.1
- [Changelog](https://github.com/fizyk/actions-reuse/blob/main/Changelog.rst)
- [Commits](fizyk/actions-reuse@a910bc7...06f5123)

Updates `fizyk/actions-reuse/.github/workflows/shared-diagram.yml` from 5.10.0 to 5.10.1
- [Changelog](https://github.com/fizyk/actions-reuse/blob/main/Changelog.rst)
- [Commits](fizyk/actions-reuse@a910bc7...06f5123)

Updates `fizyk/actions-reuse/.github/actions/uv-pytest-coverage` from 5.10.0 to 5.10.1
- [Changelog](https://github.com/fizyk/actions-reuse/blob/main/Changelog.rst)
- [Commits](fizyk/actions-reuse@a910bc7...06f5123)

Updates `fizyk/actions-reuse/.github/actions/uv-pip` from 5.10.0 to 5.10.1
- [Changelog](https://github.com/fizyk/actions-reuse/blob/main/Changelog.rst)
- [Commits](fizyk/actions-reuse@a910bc7...06f5123)

Updates `fizyk/actions-reuse/.github/workflows/shared-pr-check.yml` from 5.10.0 to 5.10.1
- [Changelog](https://github.com/fizyk/actions-reuse/blob/main/Changelog.rst)
- [Commits](fizyk/actions-reuse@a910bc7...06f5123)

Updates `fizyk/actions-reuse/.github/workflows/shared-pre-commit.yml` from 5.10.0 to 5.10.1
- [Changelog](https://github.com/fizyk/actions-reuse/blob/main/Changelog.rst)
- [Commits](fizyk/actions-reuse@a910bc7...06f5123)

Updates `fizyk/actions-reuse/.github/workflows/shared-release-schedule.yml` from 5.10.0 to 5.10.1
- [Changelog](https://github.com/fizyk/actions-reuse/blob/main/Changelog.rst)
- [Commits](fizyk/actions-reuse@a910bc7...06f5123)

---
updated-dependencies:
- dependency-name: fizyk/actions-reuse/.github/actions/uv-setup
  dependency-version: 5.10.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: fizyk-actions-reuse
- dependency-name: fizyk/actions-reuse/.github/actions/uv-run
  dependency-version: 5.10.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: fizyk-actions-reuse
- dependency-name: fizyk/actions-reuse/.github/workflows/shared-automerge.yml
  dependency-version: 5.10.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: fizyk-actions-reuse
- dependency-name: fizyk/actions-reuse/.github/workflows/shared-pypi.yml
  dependency-version: 5.10.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: fizyk-actions-reuse
- dependency-name: fizyk/actions-reuse/.github/workflows/shared-diagram.yml
  dependency-version: 5.10.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: fizyk-actions-reuse
- dependency-name: fizyk/actions-reuse/.github/actions/uv-pytest-coverage
  dependency-version: 5.10.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: fizyk-actions-reuse
- dependency-name: fizyk/actions-reuse/.github/actions/uv-pip
  dependency-version: 5.10.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: fizyk-actions-reuse
- dependency-name: fizyk/actions-reuse/.github/workflows/shared-pr-check.yml
  dependency-version: 5.10.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: fizyk-actions-reuse
- dependency-name: fizyk/actions-reuse/.github/workflows/shared-pre-commit.yml
  dependency-version: 5.10.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: fizyk-actions-reuse
- dependency-name: fizyk/actions-reuse/.github/workflows/shared-release-schedule.yml
  dependency-version: 5.10.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: fizyk-actions-reuse
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update Github_actions code labels Oct 12, 2026
@coderabbitai

coderabbitai Bot commented Oct 12, 2026

Copy link
Copy Markdown
Contributor

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration
  • Configuration used: Repository: dbfixtures/pytest-postgresql/.coderabbit.yaml
  • Review profile: ASSERTIVE
  • Plan: Advanced
  • Run ID: 2d10eb9f-5323-4cd6-b71f-db269d9512ab

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@merger-application
merger-application Bot merged commit 79a40a5 into main Oct 12, 2026
72 checks passed
@merger-application
merger-application Bot deleted the dependabot/github_actions/fizyk-actions-reuse-73e2534ec0 branch October 12, 2026 09:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update Github_actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants