Skip to content

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented May 12, 2025

This PR contains the following updates:

Package Type Update Change
actions/dependency-review-action action minor v4.6.0 -> v4.7.3

Release Notes

actions/dependency-review-action (actions/dependency-review-action)

v4.7.3: 4.7.3

Compare Source

What's Changed

Full Changelog: actions/dependency-review-action@v4...v4.7.3

v4.7.2: 4.7.2

Compare Source

What's Changed

New Contributors

Full Changelog: actions/dependency-review-action@v4...v4.7.2

v4.7.1

Compare Source

  • Packages added to allow-dependencies-licenses will be allowed even if the package in question has no license information #​889
  • License expressions (e.g. Ruby OR GPL-2.0) in the allow list are automatically discarded so that they don't invalidate the whole allow list, which should just be license identifier (e.g. Ruby)

v4.7.0

Compare Source

  • Handle complex license expressions (e.g. MIT AND GPL-2.0) in allow lists (fixes #​809 and probably others)
  • Replace OTHER in package licenses with LicenseRef-clearlydefined-OTHER so that parsing passes

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) in timezone America/Los_Angeles, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added the dependencies Pull requests that update a dependency file label May 12, 2025
@renovate renovate bot requested a review from a team as a code owner May 12, 2025 07:07
@renovate renovate bot enabled auto-merge (squash) May 12, 2025 07:07
@renovate renovate bot added the dependencies Pull requests that update a dependency file label May 12, 2025
@renovate renovate bot force-pushed the renovate/actions-dependency-review-action-4.x branch from 6a85139 to a1c8d4e Compare May 13, 2025 19:37
@renovate renovate bot changed the title Update actions/dependency-review-action action to v4.7.0 Update actions/dependency-review-action action to v4.7.1 May 13, 2025
@renovate renovate bot force-pushed the renovate/actions-dependency-review-action-4.x branch 2 times, most recently from c62131c to b4eb19a Compare June 3, 2025 21:31
@renovate renovate bot changed the title Update actions/dependency-review-action action to v4.7.1 Update actions/dependency-review-action action to v4.7.2 Aug 18, 2025
@renovate renovate bot force-pushed the renovate/actions-dependency-review-action-4.x branch from b4eb19a to 1842939 Compare August 18, 2025 22:50
| datasource  | package                          | from   | to     |
| ----------- | -------------------------------- | ------ | ------ |
| github-tags | actions/dependency-review-action | v4.6.0 | v4.7.3 |


Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate renovate bot changed the title Update actions/dependency-review-action action to v4.7.2 Update actions/dependency-review-action action to v4.7.3 Aug 26, 2025
@renovate renovate bot force-pushed the renovate/actions-dependency-review-action-4.x branch from 1842939 to 647d4dc Compare August 26, 2025 22:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants