Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 8, 2025

Bumps actions/dependency-review-action from 4.5.0 to 4.7.3.

Release notes

Sourced from actions/dependency-review-action's releases.

4.7.3

What's Changed

Full Changelog: actions/dependency-review-action@v4...v4.7.3

4.7.2

What's Changed

New Contributors

Full Changelog: actions/dependency-review-action@v4...v4.7.2

v4.7.1

  • Packages added to allow-dependencies-licenses will be allowed even if the package in question has no license information #889
  • License expressions (e.g. Ruby OR GPL-2.0) in the allow list are automatically discarded so that they don't invalidate the whole allow list, which should just be license identifier (e.g. Ruby)

v4.7.0

  • Handle complex license expressions (e.g. MIT AND GPL-2.0) in allow lists (fixes #809 and probably others)
  • Replace OTHER in package licenses with LicenseRef-clearlydefined-OTHER so that parsing passes

v4.6.0

What's Changed

New Contributors

... (truncated)

Commits
  • 595b5ae Update package version (#975)
  • fc5fd66 Claire153/fix spamming mentioned issue (#974)
  • d38d1a4 Merge pull request #965 from actions/dependabot/npm_and_yarn/multi-c22e25d29b
  • 8d420b8 Merge branch 'main' into dependabot/npm_and_yarn/multi-c22e25d29b
  • bde0129 Merge pull request #966 from actions/ashelytc/add-permissions
  • ab52490 remove ruby
  • ef00a0a add permissions to workflows
  • 74c8179 Bump brace-expansion
  • bc41886 Cut 4.7.2 version release (#964)
  • 1c73553 Merge pull request #960 from ahpook/ahpook/address-docs-dashes
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

PR-Codex overview

This PR updates the version of the actions/dependency-review-action used in the .github/workflows/dependency-review.yml file from v4.5.0 to v4.7.3, likely to incorporate improvements and bug fixes from the newer version.

Detailed summary

  • Updated actions/dependency-review-action from v4.5.0 to v4.7.3.

✨ Ask PR-Codex anything about this PR by commenting with /codex {your question}

Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action) from 4.5.0 to 4.7.3.
- [Release notes](https://github.com/actions/dependency-review-action/releases)
- [Commits](actions/dependency-review-action@3b139cf...595b5ae)

---
updated-dependencies:
- dependency-name: actions/dependency-review-action
  dependency-version: 4.7.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot requested a review from a team as a code owner September 8, 2025 05:02
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Sep 8, 2025
Copy link

netlify bot commented Sep 8, 2025

Deploy Preview for kleros-v2-neo failed. Why did it fail? →

Name Link
🔨 Latest commit 62a330d
🔍 Latest deploy log https://app.netlify.com/projects/kleros-v2-neo/deploys/68be6378c0ebd40008805bc2

Copy link

netlify bot commented Sep 8, 2025

Deploy Preview for kleros-v2-testnet ready!

Name Link
🔨 Latest commit 62a330d
🔍 Latest deploy log https://app.netlify.com/projects/kleros-v2-testnet/deploys/68be63787cf8b30008848518
😎 Deploy Preview https://deploy-preview-2128--kleros-v2-testnet.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

Copy link
Contributor

coderabbitai bot commented Sep 8, 2025

Important

Review skipped

Ignore keyword(s) in the title.

⛔ Ignored keywords (1)
  • chore(deps):

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.


Comment @coderabbitai help to get the list of available commands and usage tips.

Copy link

netlify bot commented Sep 8, 2025

Deploy Preview for kleros-v2-university failed. Why did it fail? →

Name Link
🔨 Latest commit 62a330d
🔍 Latest deploy log https://app.netlify.com/projects/kleros-v2-university/deploys/68be6378ca540d0008cae2d2

Copy link

netlify bot commented Sep 8, 2025

Deploy Preview for kleros-v2-testnet-devtools ready!

Name Link
🔨 Latest commit 62a330d
🔍 Latest deploy log https://app.netlify.com/projects/kleros-v2-testnet-devtools/deploys/68be6378102fd200084ef017
😎 Deploy Preview https://deploy-preview-2128--kleros-v2-testnet-devtools.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants