Repository navigation
ci(deps): bump taiki-e/install-action from 2.87.24 to 2.87.29 - #146
Merged
sw-release-bot[bot] merged 1 commit intoOct 19, 2026
Merged
sw-release-bot[bot] merged 1 commit into
sw-release-bot[bot] merged 1 commit into
Conversation
dependabot
Bot
added
dependencies
|
Important Review skippedBot user detected. To trigger a single review, invoke the ⚙️ Run configuration
You can disable this status message by setting the Use the checkbox below for a quick retry:
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
This was referenced Oct 19, 2026
polaz
added a commit
that referenced
this pull request
Oct 19, 2026
## Summary Dependabot pull requests stayed open after CI passed (e.g. #146) because nothing enabled auto-merge. This adds the `dependabot-auto-merge.yml` workflow the other structured-world repositories use: - On a Dependabot pull request with a semver-minor or semver-patch update, it approves the inspected head and enables squash auto-merge with `--match-head-commit`, so the merge waits for the required checks and refuses a moved head. - A push to the branch by anyone else disarms auto-merge. A manual rerun keeps the original event's role: a rerun of a foreign push disarms again, a rerun of a Dependabot run retries the approval. Reopening an unchanged pull request arms it again. - Auto-merge is enabled only while the pull request is Dependabot's single commit, so one carrying someone else's commits is left for manual review. - Major updates are left for manual review. - It runs on `pull_request_target` (Dependabot `pull_request` runs get no Actions secrets) and never checks out pull request code; third-party actions are pinned to commit SHAs. The token comes from the organisation's release App (`RELEASER_APP_*`, already used by release-plz). ## Testing `pull_request_target` runs the workflow from the base branch, so it takes effect only after this is merged. Already-open Dependabot pull requests pick it up on their next event (a rebase or `@dependabot rebase`). Closes #150
Member
|
@dependabot rebase |
Bumps [taiki-e/install-action](https://github.com/taiki-e/install-action) from 2.87.24 to 2.87.29. - [Release notes](https://github.com/taiki-e/install-action/releases) - [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md) - [Commits](taiki-e/install-action@e407f7b...8cca091) --- updated-dependencies: - dependency-name: taiki-e/install-action dependency-version: 2.87.27 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
changed the title
dependabot
Bot
force-pushed
the
dependabot/github_actions/taiki-e/install-action-2.87.27
branch
from
October 19, 2026 09:47
f478534 to
b9179bc
Compare
![sw-release-bot[bot]](https://avatars.githubusercontent.com/u/228206483?s=60&v=4){kind=small}
sw-release-bot
Bot
deleted the
dependabot/github_actions/taiki-e/install-action-2.87.27
branch
October 19, 2026 10:04
Merged
polaz
pushed a commit
that referenced
this pull request
Oct 19, 2026
## 🤖 New release * `structured-proxy`: 8.1.2 -> 8.1.3 (✓ API compatible changes) <details><summary><i><b>Changelog</b></i></summary><p> <blockquote> ## [8.1.3](v8.1.2...v8.1.3) - 2026-10-19 ### Fixed - *(openapi)* describe the JSON the proxy writes ([#149](#149)) ### Other - *(deps)* bump taiki-e/install-action from 2.87.24 to 2.87.29 ([#146](#146)) - auto-merge minor and patch Dependabot updates ([#151](#151)) </blockquote> </p></details> --- This PR was generated with [release-plz](https://github.com/release-plz/release-plz/). Co-authored-by: sw-release-bot[bot] <255865126+sw-release-bot[bot]@users.noreply.github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps taiki-e/install-action from 2.87.24 to 2.87.29.
Release notes
Sourced from taiki-e/install-action's releases.
... (truncated)
Changelog
Sourced from taiki-e/install-action's changelog.
... (truncated)
Commits
8cca091Release 2.87.29fc26824Update wasmtime manifest5018b2eUpdatezizmor@latestto 1.31.0d0e5204Updatewasmtime@latestto 49.0.3517774fUpdatewasm-tools@latestto 1.262.04bc69b1Update vacuum manifest0470a3fUpdateuv@latestto 0.13.17a2b747Updatetrivy@latestto 0.76.07efb533Updatetombi@latestto 1.8.4e5d37d6Updaterelease-plz@latestto 0.3.172