[pull] master from aio-libs:master#675
Merged
Merged
Conversation
Bumps [filelock](https://github.com/tox-dev/py-filelock) from 3.29.7 to 3.30.2. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/tox-dev/py-filelock/releases">filelock's releases</a>.</em></p> <blockquote> <h2>3.30.2</h2> <!-- raw HTML omitted --> <h2>What's Changed</h2> <ul> <li>Document every lock type, and stop evicting a marker we cannot read by <a href="https://github.com/gaborbernat"><code>@gaborbernat</code></a> in <a href="https://redirect.github.com/tox-dev/filelock/pull/672">tox-dev/filelock#672</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/tox-dev/filelock/compare/3.30.1...3.30.2">https://github.com/tox-dev/filelock/compare/3.30.1...3.30.2</a></p> <h2>3.30.1</h2> <!-- raw HTML omitted --> <h2>What's Changed</h2> <ul> <li>📝 docs: separate changelog releases with a blank line by <a href="https://github.com/gaborbernat"><code>@gaborbernat</code></a> in <a href="https://redirect.github.com/tox-dev/filelock/pull/668">tox-dev/filelock#668</a></li> <li>🐛 fix: tolerate NFSv3 stale handle in strict claim read by <a href="https://github.com/gaborbernat"><code>@gaborbernat</code></a> in <a href="https://redirect.github.com/tox-dev/filelock/pull/669">tox-dev/filelock#669</a></li> <li>Match fork-reset protocol on the class object by <a href="https://github.com/gaborbernat"><code>@gaborbernat</code></a> in <a href="https://redirect.github.com/tox-dev/filelock/pull/671">tox-dev/filelock#671</a></li> <li>reject non-finite lease duration in marker records by <a href="https://github.com/dxbjavid"><code>@dxbjavid</code></a> in <a href="https://redirect.github.com/tox-dev/filelock/pull/670">tox-dev/filelock#670</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/tox-dev/filelock/compare/3.30.0...3.30.1">https://github.com/tox-dev/filelock/compare/3.30.0...3.30.1</a></p> <h2>3.30.0</h2> <!-- raw HTML omitted --> <h2>What's Changed</h2> <ul> <li>🎨 style: readability cleanup across the library by <a href="https://github.com/gaborbernat"><code>@gaborbernat</code></a> in <a href="https://redirect.github.com/tox-dev/filelock/pull/598">tox-dev/filelock#598</a></li> <li>🐛 fix(api): ignore lifetime on native OS locks by <a href="https://github.com/gaborbernat"><code>@gaborbernat</code></a> in <a href="https://redirect.github.com/tox-dev/filelock/pull/593">tox-dev/filelock#593</a></li> <li>🐛 fix(unix): don't mutate lock file before acquiring flock by <a href="https://github.com/gaborbernat"><code>@gaborbernat</code></a> in <a href="https://redirect.github.com/tox-dev/filelock/pull/594">tox-dev/filelock#594</a></li> <li>soft: evict a non-regular lock file without reading it by <a href="https://github.com/dxbjavid"><code>@dxbjavid</code></a> in <a href="https://redirect.github.com/tox-dev/filelock/pull/597">tox-dev/filelock#597</a></li> <li>🐛 fix(windows): bind reparse-point check to the locked handle by <a href="https://github.com/gaborbernat"><code>@gaborbernat</code></a> in <a href="https://redirect.github.com/tox-dev/filelock/pull/596">tox-dev/filelock#596</a></li> <li>🐛 fix(api): make native lock release transactional by <a href="https://github.com/gaborbernat"><code>@gaborbernat</code></a> in <a href="https://redirect.github.com/tox-dev/filelock/pull/615">tox-dev/filelock#615</a></li> <li>🐛 fix(soft): make marker writes and cleanup transactional by <a href="https://github.com/gaborbernat"><code>@gaborbernat</code></a> in <a href="https://redirect.github.com/tox-dev/filelock/pull/614">tox-dev/filelock#614</a></li> <li>🐛 fix(windows): open the lock file through NtCreateFile by <a href="https://github.com/gaborbernat"><code>@gaborbernat</code></a> in <a href="https://redirect.github.com/tox-dev/filelock/pull/617">tox-dev/filelock#617</a></li> <li>✨ feat(api): add context_error_policy for dual context failures by <a href="https://github.com/gaborbernat"><code>@gaborbernat</code></a> in <a href="https://redirect.github.com/tox-dev/filelock/pull/618">tox-dev/filelock#618</a></li> <li>📝 docs: correct Unix lock-file cleanup and flock claims by <a href="https://github.com/gaborbernat"><code>@gaborbernat</code></a> in <a href="https://redirect.github.com/tox-dev/filelock/pull/623">tox-dev/filelock#623</a></li> <li>✨ feat(api): add close_error_policy for post-unlock close errors by <a href="https://github.com/gaborbernat"><code>@gaborbernat</code></a> in <a href="https://redirect.github.com/tox-dev/filelock/pull/619">tox-dev/filelock#619</a></li> <li>🐛 fix(api): canonicalize singleton keys without following a final symlink by <a href="https://github.com/gaborbernat"><code>@gaborbernat</code></a> in <a href="https://redirect.github.com/tox-dev/filelock/pull/621">tox-dev/filelock#621</a></li> <li>✨ feat(unix): add fallback_to_soft opt-out for native locks by <a href="https://github.com/gaborbernat"><code>@gaborbernat</code></a> in <a href="https://redirect.github.com/tox-dev/filelock/pull/622">tox-dev/filelock#622</a></li> <li>✨ feat: add lock_descriptor for a caller-owned descriptor by <a href="https://github.com/gaborbernat"><code>@gaborbernat</code></a> in <a href="https://redirect.github.com/tox-dev/filelock/pull/620">tox-dev/filelock#620</a></li> <li>✨ feat(api): add preserve_lock_file to keep the lock pathname by <a href="https://github.com/gaborbernat"><code>@gaborbernat</code></a> in <a href="https://redirect.github.com/tox-dev/filelock/pull/624">tox-dev/filelock#624</a></li> <li>✨ feat(api): add on_acquired post-acquisition hook by <a href="https://github.com/gaborbernat"><code>@gaborbernat</code></a> in <a href="https://redirect.github.com/tox-dev/filelock/pull/625">tox-dev/filelock#625</a></li> <li>🔧 build(release): towncrier changelog pipeline, backfill, and docs by <a href="https://github.com/gaborbernat"><code>@gaborbernat</code></a> in <a href="https://redirect.github.com/tox-dev/filelock/pull/626">tox-dev/filelock#626</a></li> <li>📝 docs: drop bot entries and link code refs in the changelog by <a href="https://github.com/gaborbernat"><code>@gaborbernat</code></a> in <a href="https://redirect.github.com/tox-dev/filelock/pull/638">tox-dev/filelock#638</a></li> <li>🐛 fix(api): validate lifetime values by <a href="https://github.com/gaborbernat"><code>@gaborbernat</code></a> in <a href="https://redirect.github.com/tox-dev/filelock/pull/644">tox-dev/filelock#644</a></li> <li>🐛 fix(win32): capture process probe errors by <a href="https://github.com/gaborbernat"><code>@gaborbernat</code></a> in <a href="https://redirect.github.com/tox-dev/filelock/pull/645">tox-dev/filelock#645</a></li> <li>🐛 fix(api): reject dropped lock options by <a href="https://github.com/gaborbernat"><code>@gaborbernat</code></a> in <a href="https://redirect.github.com/tox-dev/filelock/pull/646">tox-dev/filelock#646</a></li> <li>🐛 fix(api): retain acquisition path identity by <a href="https://github.com/gaborbernat"><code>@gaborbernat</code></a> in <a href="https://redirect.github.com/tox-dev/filelock/pull/647">tox-dev/filelock#647</a></li> <li>🐛 fix(api): detach grouped release errors by <a href="https://github.com/gaborbernat"><code>@gaborbernat</code></a> in <a href="https://redirect.github.com/tox-dev/filelock/pull/648">tox-dev/filelock#648</a></li> <li>🐛 fix(descriptor): define unavailable behavior by <a href="https://github.com/gaborbernat"><code>@gaborbernat</code></a> in <a href="https://redirect.github.com/tox-dev/filelock/pull/650">tox-dev/filelock#650</a></li> <li>🐛 fix(ci): map absolute coverage paths by <a href="https://github.com/gaborbernat"><code>@gaborbernat</code></a> in <a href="https://redirect.github.com/tox-dev/filelock/pull/651">tox-dev/filelock#651</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/tox-dev/filelock/blob/main/docs/changelog.rst">filelock's changelog</a>.</em></p> <blockquote> <p>########### Changelog ###########</p> <p>.. towncrier-draft-entries:: Unreleased</p> <p>.. towncrier release notes start</p> <hr /> <p>3.31.1 (2026-07-20)</p> <hr /> <ul> <li>A <code>SoftFileLease</code> acquired on one thread keeps its claim when another thread fails to acquire the same lease object, so its heartbeat carries on refreshing the marker instead of being torn down and letting a peer take the live claim. :pr:<code>680</code></li> </ul> <hr /> <p>3.31.0 (2026-07-18)</p> <hr /> <ul> <li>Support Termux/Android, whose CPython ships without <code>os.link</code> and reports <code>sys.platform == "android"</code>. <code>import filelock</code> and both <code>FileLock</code> and <code>SoftFileLock</code> now work there, <code>StrictSoftFileLock</code> reports its missing hard-link support only when acquired, and process liveness reads <code>/proc</code> on Android instead of PID-only checks. :pr:<code>678</code></li> <li><code>StrictSoftFileLock</code> no longer lets two processes hold the lock at once under heavy contention. A holder now keeps its intent claim for the whole hold, so a contender whose directory scan races the holder's freshly linked claim can no longer miss it and win alongside it. A held lock now exposes both an <code>intent</code> and a <code>held</code> claim. :pr:<code>678</code></li> </ul> <hr /> <p>3.30.3 (2026-07-17)</p> <hr /> <ul> <li><code>AsyncFileLock</code> and <code>AsyncSoftFileLock</code> no longer raise a deadlock <code>RuntimeError</code> when a different asyncio task waits for a lock they hold; the check now scopes holders to the owning task, so only a same-task reacquire is refused. :pr:<code>676</code></li> <li>Keep both tables of contents on screen at any browser font size. The widened body column sized itself in <code>em</code> against the reader's font size while the breakpoints that fold the layout resolve <code>em</code> against a fixed 16px, so a reader whose default font is larger than 16px had the right-hand table of contents clipped off the edge. The body column now flexes instead, and the right-hand table of contents hides only at the mobile breakpoint. :pr:<code>673</code></li> <li>Color the mermaid diagrams from whichever theme is active. They previously carried a light palette baked into each diagram's source, which stayed light on a dark page. :pr:<code>674</code></li> </ul> <hr /> <p>3.30.2 (2026-07-16)</p> <hr /> <ul> <li>Stop :class:<code>~filelock.SoftFileLease</code> deleting a live marker whose <code>mode</code> it does not implement. An unrecognized mode now names its owner instead of reading as malformed, so a record written by a newer filelock survives the grace window rather than being evicted after two seconds. :pr:<code>672</code></li> <li>Stop :class:<code>~filelock.StrictSoftFileLock</code> and :class:<code>~filelock.AsyncStrictSoftFileLock</code> calling themselves a native OS lock when they warn that they ignore <code>lifetime</code>; they now say a strict claim is only ever cleared by <code>force_break()</code>. :pr:<code>672</code></li> <li>Cover every lock type in the tutorials and how-to guides, with examples drawn from projects that use filelock, and color the mermaid diagrams. Correct the claims that <code>StrictSoftFileLock</code> exposes <code>owner</code>, that :class:<code>~filelock.SoftFileLock</code> evicts a strict sentinel, that :class:<code>~filelock.ReadWriteLock</code> requires a <code>.db</code> extension, and that every log record is <code>DEBUG</code>. :pr:<code>672</code></li> </ul> <hr /> <p>3.30.1 (2026-07-16)</p> <hr /> <ul> <li><code>StrictSoftFileLock</code> and <code>AsyncStrictSoftFileLock</code> no longer abort acquisition when a peer's claim vanishes as an</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/tox-dev/filelock/commit/9a71d061458d18742be9c55170dd4465f8edf1c7"><code>9a71d06</code></a> Release 3.30.2</li> <li><a href="https://github.com/tox-dev/filelock/commit/0dfa1b20fb9d85051e3304d3674787bea297b2d1"><code>0dfa1b2</code></a> Document every lock type, and stop evicting a marker we cannot read (<a href="https://redirect.github.com/tox-dev/py-filelock/issues/672">#672</a>)</li> <li><a href="https://github.com/tox-dev/filelock/commit/47d435f9458a70da803001ebbd424ca03f1afe41"><code>47d435f</code></a> Release 3.30.1</li> <li><a href="https://github.com/tox-dev/filelock/commit/9b7b3b14027a385f8c636b7ee2ecfd3d052bdca0"><code>9b7b3b1</code></a> reject non-finite lease duration in marker records (<a href="https://redirect.github.com/tox-dev/py-filelock/issues/670">#670</a>)</li> <li><a href="https://github.com/tox-dev/filelock/commit/cfafd70e9118ded6bda9d643ebbedfff12ae46f2"><code>cfafd70</code></a> Match fork-reset protocol on the class object (<a href="https://redirect.github.com/tox-dev/py-filelock/issues/671">#671</a>)</li> <li><a href="https://github.com/tox-dev/filelock/commit/e4c0eb3d3139bba28daeedc42ee1c7686a98d7bd"><code>e4c0eb3</code></a> 🐛 fix: tolerate NFSv3 stale handle in strict claim read (<a href="https://redirect.github.com/tox-dev/py-filelock/issues/669">#669</a>)</li> <li><a href="https://github.com/tox-dev/filelock/commit/d0450d5a32962be1cc2419495392beb90891dbaf"><code>d0450d5</code></a> 📝 docs: separate changelog releases with a blank line (<a href="https://redirect.github.com/tox-dev/py-filelock/issues/668">#668</a>)</li> <li><a href="https://github.com/tox-dev/filelock/commit/1b094069044a3f2a39173ae841eb22b274833ff9"><code>1b09406</code></a> Release 3.30.0</li> <li><a href="https://github.com/tox-dev/filelock/commit/5f2d6639c652a87cfb081bc4b5e05485a76aa675"><code>5f2d663</code></a> 👷 ci(matrix): add SMB, capability, and matrix docs (<a href="https://redirect.github.com/tox-dev/py-filelock/issues/665">#665</a>)</li> <li><a href="https://github.com/tox-dev/filelock/commit/2345750ae0ee346c9fce9d9ba93cbb089963224c"><code>2345750</code></a> Replace prettier with mdformat and yamlfmt (<a href="https://redirect.github.com/tox-dev/py-filelock/issues/667">#667</a>)</li> <li>Additional commits viewable in <a href="https://github.com/tox-dev/py-filelock/compare/3.29.7...3.30.2">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [coverage](https://github.com/coveragepy/coveragepy) from 7.15.1 to 7.15.2. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/coveragepy/coveragepy/releases">coverage's releases</a>.</em></p> <blockquote> <h2>7.15.2</h2> <h2>Version 7.15.2 — 2026-07-15</h2> <ul> <li>Fix: one of the performance improvements in 7.15.1 (pull 2215) dramatically increased memory use during reporting for large projects. Now we use a different approach that is both faster and slimmer than 7.15.0. Fixes <a href="https://redirect.github.com/coveragepy/coveragepy/issues/2229">issue 2229</a>.</li> </ul> <p>:arrow_right: PyPI page: <a href="https://pypi.org/project/coverage/7.15.2">coverage 7.15.2</a>. :arrow_right: To install: <code>python3 -m pip install coverage==7.15.2</code></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/coveragepy/coveragepy/blob/main/CHANGES.rst">coverage's changelog</a>.</em></p> <blockquote> <h2>Version 7.15.2 — 2026-07-15</h2> <ul> <li>Fix: one of the performance improvements in 7.15.1 (pull 2215) dramatically increased memory use during reporting for large projects. Now we use a different approach that is both faster and slimmer than 7.15.0. Fixes <code>issue 2229</code>_.</li> </ul> <p>.. _issue 2229: <a href="https://redirect.github.com/coveragepy/coveragepy/issues/2229">coveragepy/coveragepy#2229</a></p> <p>.. _changes_7-15-1:</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/coveragepy/coveragepy/commit/50d865908dfeb21a0bf1e6f05db578c11662f8dd"><code>50d8659</code></a> docs: sample HTML for 7.15.2</li> <li><a href="https://github.com/coveragepy/coveragepy/commit/b5eed20618cfae07b35328b09dab388e9900f409"><code>b5eed20</code></a> docs: prep for 7.15.2</li> <li><a href="https://github.com/coveragepy/coveragepy/commit/78cab6e1770e55951c84a78d80b90c60ccfba4d5"><code>78cab6e</code></a> fix: reduce memory use during reporting. <a href="https://redirect.github.com/coveragepy/coveragepy/issues/2229">#2229</a> (<a href="https://redirect.github.com/coveragepy/coveragepy/issues/2231">#2231</a>)</li> <li><a href="https://github.com/coveragepy/coveragepy/commit/b4c1fda244a04caaa940ae77dd476a8bedfbf38e"><code>b4c1fda</code></a> build: bump version to 7.15.2</li> <li>See full diff in <a href="https://github.com/coveragepy/coveragepy/compare/7.15.1...7.15.2">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…ime and timestamp (#13170)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.37.0 to 4.37.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/releases">github/codeql-action's releases</a>.</em></p> <blockquote> <h2>v4.37.1</h2> <ul> <li><em>Upcoming breaking change</em>: Add a deprecation warning for customers using CodeQL version 2.20.6 and earlier. These versions of CodeQL were discontinued on 1 July 2026 alongside GitHub Enterprise Server 3.16, and will be unsupported by the next minor release of the CodeQL Action. <a href="https://redirect.github.com/github/codeql-action/pull/3956">#3956</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.1">2.26.1</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4019">#4019</a></li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's changelog</a>.</em></p> <blockquote> <h2>4.37.1 - 16 Jul 2026</h2> <ul> <li><em>Upcoming breaking change</em>: Add a deprecation warning for customers using CodeQL version 2.20.6 and earlier. These versions of CodeQL were discontinued on 1 July 2026 alongside GitHub Enterprise Server 3.16, and will be unsupported by the next minor release of the CodeQL Action. <a href="https://redirect.github.com/github/codeql-action/pull/3956">#3956</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.26.1">2.26.1</a>. <a href="https://redirect.github.com/github/codeql-action/pull/4019">#4019</a></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/github/codeql-action/commit/7188fc363630916deb702c7fdcf4e481b751f97a"><code>7188fc3</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4020">#4020</a> from github/update-v4.37.1-9e7c07009</li> <li><a href="https://github.com/github/codeql-action/commit/c8b5f69be686908c3dfd844428137d56fe80c936"><code>c8b5f69</code></a> Update changelog for v4.37.1</li> <li><a href="https://github.com/github/codeql-action/commit/9e7c070092090e89e8b3d62f977d4456e0732cd7"><code>9e7c070</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4014">#4014</a> from github/mbg/explicit-remote-prefix</li> <li><a href="https://github.com/github/codeql-action/commit/3492b7e9ab96e28b1d8b971345d30e929c6f8fee"><code>3492b7e</code></a> Change <code>REMOTE_PATH_PREFIX</code> to <code>remote=</code></li> <li><a href="https://github.com/github/codeql-action/commit/3654baa924bc6456db54002581cb7c1c877548c4"><code>3654baa</code></a> Merge remote-tracking branch 'origin/main' into mbg/explicit-remote-prefix</li> <li><a href="https://github.com/github/codeql-action/commit/2d682ac05f1b3588aaff3814826bede39b9ba6bb"><code>2d682ac</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4017">#4017</a> from github/dependabot/github_actions/dot-github/wor...</li> <li><a href="https://github.com/github/codeql-action/commit/23f6a50753a88efd9b7ae8687b29f6bdb65f6250"><code>23f6a50</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4009">#4009</a> from github/mbg/action-state/additions</li> <li><a href="https://github.com/github/codeql-action/commit/1ee3c75d1988ab8621f01ebb165115c38d56df91"><code>1ee3c75</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4018">#4018</a> from github/dependabot/github_actions/dot-github/wor...</li> <li><a href="https://github.com/github/codeql-action/commit/e053684dc500899b0b5520edc8549ac0f1ed730b"><code>e053684</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4015">#4015</a> from github/dependabot/npm_and_yarn/npm-minor-fd2e83...</li> <li><a href="https://github.com/github/codeql-action/commit/6803c5671d2f87a83ed96e151c441b1cb3bdc66a"><code>6803c56</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4019">#4019</a> from github/update-bundle/codeql-bundle-v2.26.1</li> <li>Additional commits viewable in <a href="https://github.com/github/codeql-action/compare/v4.37.0...v4.37.1">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
5 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
See Commits and Changes for more details.
Created by
pull[bot] (v2.0.0-alpha.4)
Can you help keep this open source service alive? 💖 Please sponsor : )