Skip to content

chore(deps): Bump the github-actions-dependencies group with 2 updates - #96

Merged
JerrettDavis merged 1 commit into
mainfrom
dependabot/github_actions/github-actions-dependencies-b487d48ccc
Jul 28, 2026
Merged

chore(deps): Bump the github-actions-dependencies group with 2 updates#96
JerrettDavis merged 1 commit into
mainfrom
dependabot/github_actions/github-actions-dependencies-b487d48ccc

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 27, 2026

Copy link
Copy Markdown
Contributor

Bumps the github-actions-dependencies group with 2 updates: github/codeql-action and actions/labeler.

Updates github/codeql-action from 4.37.1 to 4.37.3

Release notes

Sourced from github/codeql-action's releases.

v4.37.3

No user facing changes.

v4.37.2

  • The new address format for the config-file input that was introduced in CodeQL Action 4.37.0 is now enabled by default. In addition to the format described there, the remote= prefix can now be used to explicitly indicate that the input refers to a remote file. All previous input formats continue to be accepted as well. #4023
  • The CodeQL Action can now make use of configured private registries in Default Setup to retrieve CodeQL configuration files from remote repositories that require authentication. This will allow customers to store their CodeQL configuration in a single repository that can then be referenced by Default Setup workflows in other repositories. We expect to roll this and other, related changes out to everyone in July. #4007
Changelog

Sourced from github/codeql-action's changelog.

4.37.3 - 22 Jul 2026

No user facing changes.

4.37.2 - 21 Jul 2026

  • The new address format for the config-file input that was introduced in CodeQL Action 4.37.0 is now enabled by default. In addition to the format described there, the remote= prefix can now be used to explicitly indicate that the input refers to a remote file. All previous input formats continue to be accepted as well. #4023
  • The CodeQL Action can now make use of configured private registries in Default Setup to retrieve CodeQL configuration files from remote repositories that require authentication. This will allow customers to store their CodeQL configuration in a single repository that can then be referenced by Default Setup workflows in other repositories. We expect to roll this and other, related changes out to everyone in July. #4007
Commits
  • e4fba86 Merge pull request #4031 from github/update-v4.37.3-72f6a9da0
  • fb50ab5 Update changelog for v4.37.3
  • 72f6a9d Merge pull request #4030 from github/mbg/fix/no-proxy
  • 3b5ee58 Use default request options instead of undefined
  • bfb6be4 Merge pull request #4028 from github/mergeback/v4.37.2-to-main-e0647621
  • 526ab84 Rebuild
  • d6217b9 Update changelog and version after v4.37.2
  • e064762 Merge pull request #4027 from github/update-v4.37.2-385bcdc5a
  • e0faed8 Add a couple of change notes
  • 73aad0e Update changelog for v4.37.2
  • Additional commits viewable in compare view

Updates actions/labeler from 6 to 7

Release notes

Sourced from actions/labeler's releases.

v7.0.0

What's Changed

Enhancements:

Full Changelog: actions/labeler@v6...v7.0.0

v6.2.0

What's Changed

Bug Fix

Dependency Updates

Full Changelog: actions/labeler@v6.1.0...v6.2.0

v6.1.0

Enhancements

  • Add changed-files-labels-limit and max-files-changed configuration options to cap the number of labels added by @​bluca in actions/labeler#923

Bug Fixes

Dependency Updates

New Contributors

Full Changelog: actions/labeler@v6...v6.1.0

v6.0.1

What's Changed

New Contributors

Full Changelog: actions/labeler@v6.0.0...v6.0.1

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the github-actions-dependencies group with 2 updates: [github/codeql-action](https://github.com/github/codeql-action) and [actions/labeler](https://github.com/actions/labeler).


Updates `github/codeql-action` from 4.37.1 to 4.37.3
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@v4.37.1...v4.37.3)

Updates `actions/labeler` from 6 to 7
- [Release notes](https://github.com/actions/labeler/releases)
- [Commits](actions/labeler@v6...v7)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.37.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions-dependencies
- dependency-name: actions/labeler
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Jul 27, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: ci. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot
dependabot Bot requested a review from JerrettDavis as a code owner July 27, 2026 11:08
@github-actions

Copy link
Copy Markdown

⚠️ Deprecation Warning: The deny-licenses option is deprecated for possible removal in the next major release. For more information, see issue 997.

Dependency Review

The following issues were found:
  • ✅ 0 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ⚠️ 1 package(s) with unknown licenses.
See the Details below.

License Issues

.github/workflows/labeler.yml

PackageVersionLicenseIssue Type
actions/labeler7.*.*NullUnknown License
Denied Licenses: GPL-2.0, GPL-3.0, AGPL-3.0

OpenSSF Scorecard

PackageVersionScoreDetails
actions/actions/labeler 7.*.* 🟢 5.2
Details
CheckScoreReason
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Maintained🟢 45 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 4
Packaging⚠️ -1packaging workflow not detected
Code-Review🟢 10all changesets reviewed
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Security-Policy🟢 9security policy file detected
SAST🟢 4SAST tool is not run on all commits -- score normalized to 4
Branch-Protection⚠️ 1branch protection is not maximal on development and all release branches

Scanned Files

  • .github/workflows/labeler.yml

@github-actions

Copy link
Copy Markdown

Code Coverage

Summary
  Generated on: 07/27/2026 - 11:16:06
  Coverage date: 07/27/2026 - 11:15:30 - 07/27/2026 - 11:16:03
  Parser: MultiReport (21x Cobertura)
  Assemblies: 9
  Classes: 89
  Files: 82
  Line coverage: 98.7%
  Covered lines: 2523
  Uncovered lines: 33
  Coverable lines: 2556
  Total lines: 10254
  Branch coverage: 85.6% (665 of 776)
  Covered branches: 665
  Total branches: 776
  Method coverage: 100% (801 of 801)
  Full method coverage: 97.2% (779 of 801)
  Covered methods: 801
  Fully covered methods: 779
  Total methods: 801

TinyBDD                                                                   98.7%
  TinyBDD.Ambient                                                          100%
  TinyBDD.AmbientTestMethodResolver                                        100%
  TinyBDD.AssemblyFixture                                                  100%
  TinyBDD.AssemblyFixtureCoordinator                                      94.7%
  TinyBDD.AssemblySetupAttribute                                           100%
  TinyBDD.Assertions.Expect                                                100%
  TinyBDD.Assertions.FluentAssertion<T>                                     95%
  TinyBDD.Assertions.FluentAssertionState<T>                               100%
  TinyBDD.Assertions.FluentPredicate<T>                                    100%
  TinyBDD.Assertions.ShouldExtensions                                      100%
  TinyBDD.Assertions.TinyBddAssertionException                             100%
  TinyBDD.AssertUtil                                                       100%
  TinyBDD.Bdd                                                              100%
  TinyBDD.BddStepException                                                 100%
  TinyBDD.ExampleResult                                                    100%
  TinyBDD.ExampleRow<T>                                                    100%
  TinyBDD.ExamplesBuilder<T>                                               100%
  TinyBDD.ExamplesResult                                                   100%
  TinyBDD.Extensions.StepExtensions                                        100%
  TinyBDD.Extensions.Throw                                                 100%
  TinyBDD.FeatureAttribute                                                 100%
  TinyBDD.Flow                                                             100%
  TinyBDD.FromContext                                                      100%
  TinyBDD.GenerateOptimizedAttribute                                       100%
  TinyBDD.GherkinFormatter                                                 100%
  TinyBDD.KindStrings                                                      100%
  TinyBDD.NullTraitBridge                                                  100%
  TinyBDD.Pipeline                                                        98.7%
  TinyBDD.ScenarioAttribute                                                100%
  TinyBDD.ScenarioCaseAttribute                                            100%
  TinyBDD.ScenarioChain<T>                                                 100%
  TinyBDD.ScenarioContext                                                  100%
  TinyBDD.ScenarioContextAsserts                                           100%
  TinyBDD.ScenarioContextGherkinExtensions                                 100%
  TinyBDD.ScenarioContextPrototype                                         100%
  TinyBDD.ScenarioOptions                                                  100%
  TinyBDD.ScenarioOutlineBuilder<T>                                        100%
  TinyBDD.ScenarioOutlineChain<T1, T2>                                     100%
  TinyBDD.ScenarioOutlineTerminal<T1, T2>                                  100%
  TinyBDD.StepInfo                                                         100%
  TinyBDD.StepIO                                                           100%
  TinyBDD.StepResult                                                       100%
  TinyBDD.StringBddReporter                                                100%
  TinyBDD.TagAttribute                                                     100%
  TinyBDD.TestBase                                                         100%
  TinyBDD.TestBase<T>                                                      100%
  TinyBDD.ThenChain<T>                                                     100%
  TinyBDD.TinyBddExtensibilityOptions                                      100%
  TinyBDD.TinyBddOptionsBuilder                                            100%

TinyBDD.Extensions.DependencyInjection                                     100%
  TinyBDD.Extensions.DependencyInjection.ScenarioContextFactory            100%
  TinyBDD.Extensions.DependencyInjection.ServiceCollectionExtensions       100%
  TinyBDD.Extensions.DependencyInjection.TinyBddOptions                    100%

TinyBDD.Extensions.FileBased                                                98%
  TinyBDD.Extensions.FileBased.Configuration.FileBasedDslOptions           100%
  TinyBDD.Extensions.FileBased.Configuration.FileBasedDslOptionsBuilder    100%
  TinyBDD.Extensions.FileBased.Configuration.FileDiscovery                 100%
  TinyBDD.Extensions.FileBased.Core.DriverMethodAttribute                  100%
  TinyBDD.Extensions.FileBased.Execution.DriverMethodInfo                  100%
  TinyBDD.Extensions.FileBased.Execution.ScenarioExecutor                 98.7%
  TinyBDD.Extensions.FileBased.Execution.StepResolver                      100%
  TinyBDD.Extensions.FileBased.FileBasedTestBase<T>                        100%
  TinyBDD.Extensions.FileBased.Models.FeatureDefinition                    100%
  TinyBDD.Extensions.FileBased.Models.ScenarioDefinition                   100%
  TinyBDD.Extensions.FileBased.Models.StepDefinition                       100%
  TinyBDD.Extensions.FileBased.Parsers.GherkinDslParser                   94.8%
  TinyBDD.Extensions.FileBased.Parsers.YamlDslParser                       100%

TinyBDD.Extensions.Hosting                                                 100%
  TinyBDD.Extensions.Hosting.HostBuilderExtensions                         100%
  TinyBDD.Extensions.Hosting.TinyBddHostingOptions                         100%
  TinyBDD.Extensions.Hosting.WorkflowHostedService<T>                      100%
  TinyBDD.Extensions.Hosting.WorkflowRunner                                100%

TinyBDD.Extensions.Reporting                                               100%
  TinyBDD.Extensions.Reporting.JsonReport                                  100%
  TinyBDD.Extensions.Reporting.JsonReportObserver                          100%
  TinyBDD.Extensions.Reporting.ScenarioReport                              100%
  TinyBDD.Extensions.Reporting.StepReport                                  100%
  TinyBDD.Extensions.Reporting.TinyBddReportingExtensions                  100%

TinyBDD.MSTest                                                             100%
  TinyBDD.MSTest.MsTestBddReporter                                         100%
  TinyBDD.MSTest.MsTestTraitBridge                                         100%
  TinyBDD.MSTest.TinyBddMsTestBase                                         100%

TinyBDD.NUnit                                                              100%
  TinyBDD.NUnit.NUnitBddReporter                                           100%
  TinyBDD.NUnit.NUnitTraitBridge                                           100%
  TinyBDD.NUnit.TinyBddNUnitBase                                           100%
  TinyBDD.NUnit.UseTinyBddAttribute                                        100%

TinyBDD.Xunit                                                             93.2%
  TinyBDD.Xunit.TinyBddXunitBase                                          90.6%
  TinyBDD.Xunit.UseTinyBddAttribute                                        100%
  TinyBDD.Xunit.XunitBddReporter                                           100%
  TinyBDD.Xunit.XunitTraitBridge                                           100%

TinyBDD.Xunit.v3                                                           100%
  TinyBDD.Xunit.v3.TinyBddXunitBase                                        100%
  TinyBDD.Xunit.v3.UseTinyBddAttribute                                     100%
  TinyBDD.Xunit.v3.XunitBddReporter                                        100%
  TinyBDD.Xunit.v3.XunitTraitBridge                                        100%

@github-actions

Copy link
Copy Markdown

Test Results

783 tests   783 ✅  9s ⏱️
  7 suites    0 💤
  7 files      0 ❌

Results for commit 6d64477.

@codecov

codecov Bot commented Jul 27, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 98.82%. Comparing base (51777bd) to head (6d64477).
⚠️ Report is 17 commits behind head on main.

Additional details and impacted files
@@            Coverage Diff             @@
##             main      #96      +/-   ##
==========================================
+ Coverage   98.23%   98.82%   +0.58%     
==========================================
  Files          82       82              
  Lines        2556     2556              
  Branches      303      217      -86     
==========================================
+ Hits         2511     2526      +15     
+ Misses         45       30      -15     
Flag Coverage Δ
unittests 98.82% <ø> (+0.58%) ⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@JerrettDavis
JerrettDavis merged commit 46e4d2c into main Jul 28, 2026
16 checks passed
@dependabot
dependabot Bot deleted the dependabot/github_actions/github-actions-dependencies-b487d48ccc branch July 28, 2026 04:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant