Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(precommit): pin version to be installed in workflow #99

Merged
merged 1 commit into from
Jun 24, 2024

Conversation

gsuquet
Copy link
Owner

@gsuquet gsuquet commented Jun 24, 2024

Description

Pin the version of pre-commit used in the pre-commit integration workflow

Fixes #95

Type of change

🐛 Bug fix (non-breaking change which fixes an issue)

Copy link
Contributor

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

PackageVersionScoreDetails

Scanned Manifest Files

@gsuquet gsuquet merged commit 0f8f393 into main Jun 24, 2024
14 checks passed
@gsuquet gsuquet deleted the fix/security/26 branch June 24, 2024 12:53
gsuquet referenced this pull request in gsuquet/choco-setup Jun 25, 2024
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [gsuquet/workflows](https://togithub.com/gsuquet/workflows) | action |
patch | `v1.2.4` -> `v1.2.5` |

---

### Release Notes

<details>
<summary>gsuquet/workflows (gsuquet/workflows)</summary>

###
[`v1.2.5`](https://togithub.com/gsuquet/workflows/releases/tag/v1.2.5)

[Compare
Source](https://togithub.com/gsuquet/workflows/compare/v1.2.4...v1.2.5)

##### What's Changed

##### Fixes & Improvements

- deps: bump pypa/gh-action-pypi-publish from 1.8.14 to 1.9.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/gsuquet/workflows/pull/86](https://togithub.com/gsuquet/workflows/pull/86)
- deps: bump python-semantic-release/python-semantic-release from 9.8.1
to 9.8.3 by [@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/gsuquet/workflows/pull/87](https://togithub.com/gsuquet/workflows/pull/87)
- precommit: pin version to be installed in workflow by
[@&#8203;gsuquet](https://togithub.com/gsuquet) in
[https://github.com/gsuquet/workflows/pull/99](https://togithub.com/gsuquet/workflows/pull/99)
- deps: update dependency pre-commit/pre-commit to v3.7.1 by
[@&#8203;renovate-gsuquet](https://togithub.com/renovate-gsuquet) in
[https://github.com/gsuquet/workflows/pull/101](https://togithub.com/gsuquet/workflows/pull/101)

##### Documentation

- reduce line length to match the markdown linter 80 chars limit by
[@&#8203;gsuquet](https://togithub.com/gsuquet) in
[https://github.com/gsuquet/workflows/pull/100](https://togithub.com/gsuquet/workflows/pull/100)

##### Miscellaneous Chores

- chore(config dependabot): use the conventional commit convention
instead of gitmoji by [@&#8203;gsuquet](https://togithub.com/gsuquet) in
[https://github.com/gsuquet/workflows/pull/85](https://togithub.com/gsuquet/workflows/pull/85)
- chore(renovate): display action version in comment for renovate format
by [@&#8203;gsuquet](https://togithub.com/gsuquet) in
[https://github.com/gsuquet/workflows/pull/90](https://togithub.com/gsuquet/workflows/pull/90)
- chore(renovate): onboarding and configuration by
[@&#8203;renovate-gsuquet](https://togithub.com/renovate-gsuquet) in
[https://github.com/gsuquet/workflows/pull/89](https://togithub.com/gsuquet/workflows/pull/89)
- chore(deps): update mcr.microsoft.com/devcontainers/python docker
digest to
[`d793532`](https://togithub.com/gsuquet/workflows/commit/d793532) by
[@&#8203;renovate-gsuquet](https://togithub.com/renovate-gsuquet) in
[https://github.com/gsuquet/workflows/pull/91](https://togithub.com/gsuquet/workflows/pull/91)
- chore(deps): update python-semantic-release/upload-to-gh-release
action to v9.8.3 by
[@&#8203;renovate-gsuquet](https://togithub.com/renovate-gsuquet) in
[https://github.com/gsuquet/workflows/pull/92](https://togithub.com/gsuquet/workflows/pull/92)
- chore(renovate): update README automatically with new github releases
by [@&#8203;gsuquet](https://togithub.com/gsuquet) in
[https://github.com/gsuquet/workflows/pull/94](https://togithub.com/gsuquet/workflows/pull/94)
- chore(config dev): actionlint for github and dev container image tag
by [@&#8203;gsuquet](https://togithub.com/gsuquet) in
[https://github.com/gsuquet/workflows/pull/98](https://togithub.com/gsuquet/workflows/pull/98)

##### New Contributors

- [@&#8203;renovate-gsuquet](https://togithub.com/renovate-gsuquet) made
their first contribution in
[https://github.com/gsuquet/workflows/pull/89](https://togithub.com/gsuquet/workflows/pull/89)

**Full Changelog**:
gsuquet/workflows@v1.2.4...v1.2.5

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://togithub.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy40MTUuMCIsInVwZGF0ZWRJblZlciI6IjM3LjQxNS4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJyZW5vdmF0ZSJdfQ==-->

Signed-off-by: Renovate Bot <[email protected]>
Co-authored-by: renovate-gsuquet[bot] <173481049+renovate-gsuquet[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Fix code scanning alert - Pinned-Dependencies
1 participant