chore(deps): update ferrlabs/.github digest to 2ea7662 - #1040
Conversation
| jobs: | ||
| dispatch: | ||
| uses: FerrLabs/.github/.github/workflows/reusable-renovate-dispatch.yml@350e50d90a591467cdd0a1c297c0348bbf8fbcc7 # main | ||
| uses: FerrLabs/.github/.github/workflows/reusable-renovate-dispatch.yml@2ea766256b2f8a92114638a0eb8f54967e9bca25 # main |
| contents: read | ||
| security-events: write | ||
| uses: FerrLabs/.github/.github/workflows/reusable-security-scan.yml@350e50d90a591467cdd0a1c297c0348bbf8fbcc7 # main | ||
| uses: FerrLabs/.github/.github/workflows/reusable-security-scan.yml@2ea766256b2f8a92114638a0eb8f54967e9bca25 # main |
| contents: read | ||
| pull-requests: write | ||
| uses: FerrLabs/.github/.github/workflows/reusable-sonarqube-scan.yml@350e50d90a591467cdd0a1c297c0348bbf8fbcc7 # main | ||
| uses: FerrLabs/.github/.github/workflows/reusable-sonarqube-scan.yml@2ea766256b2f8a92114638a0eb8f54967e9bca25 # main |
There was a problem hiding this comment.
Digest bump for FerrLabs/.github (350e50d → 2ea7662), touching the four workflows that reference it: pr-title.yml, security-scan.yml, renovate-rebase.yml, sonarqube.yml.
What changed upstream: three commits — dropping stray French comments (cosmetic), and two perf commits adding concurrency groups to cancel superseded runs across the reusable workflows (including the four this repo calls).
What breaks here: nothing. Checked the new reusable-pr-title.yml and reusable-renovate-dispatch.yml content directly — the concurrency groups are correctly scoped (PR-title keys on PR number since pull_request_target puts github.ref on the base branch; renovate-dispatch cancels safely since the dispatch is idempotent and publishes nothing). No changes to inputs, secrets, or permissions contracts that the calling workflows in this repo rely on.
CI: all checks that have completed are green (PR title, security scan jobs, gitleaks, osv-scanner, zizmor). A few app-build jobs are still in progress but unrelated to this change.
Uneventful, safe to merge.
SonarQube — aucune nouvelle issueComparaison entre le projet bac à sable de cette PR et la branche par défaut : SonarQube Community n'analyse pas les PR, ce delta est calculé côté CI. Détail |
This PR contains the following updates:
350e50d→2ea7662Configuration
📅 Schedule: (UTC)
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR has been generated by Mend Renovate CLI.