Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Aug 20, 2025

Bumps actions/dependency-review-action from 4.7.1 to 4.7.2.

Release notes

Sourced from actions/dependency-review-action's releases.

4.7.2

What's Changed

New Contributors

Full Changelog: actions/dependency-review-action@v4...v4.7.2

Commits
  • bc41886 Cut 4.7.2 version release (#964)
  • 1c73553 Merge pull request #960 from ahpook/ahpook/address-docs-dashes
  • fac3d41 Bump the minor-updates group across 1 directory with 5 updates (#956)
  • d8073c4 Merge pull request #958 from actions/claire153/deprecate-deny-lists
  • 77184c6 Fix tests
  • 5558c35 Address discrepancy between docs and reality
  • e85d57a Remove test code
  • 3eb6279 Re-add test package. Only show warning in summary if option is used. Update c...
  • 7cf33ac Remove test deny list
  • 493bee0 Remove test package
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Internal previews

📄 File 🔗 Preview link
.github/workflows/dependency-review.yml .github/workflows/dependency-review

Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action) from 4.7.1 to 4.7.2.
- [Release notes](https://github.com/actions/dependency-review-action/releases)
- [Commits](actions/dependency-review-action@da24556...bc41886)

---
updated-dependencies:
- dependency-name: actions/dependency-review-action
  dependency-version: 4.7.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Aug 20, 2025
@dependabot dependabot bot requested a review from a team as a code owner August 20, 2025 13:40
@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Aug 20, 2025
@dotnetrepoman dotnetrepoman bot added this to the August 2025 milestone Aug 20, 2025
@dotnet-policy-service dotnet-policy-service bot added community-contribution Indicates PR is created by someone from the .NET community. :octocat: auto-merge labels Aug 20, 2025
@dotnet-policy-service dotnet-policy-service bot enabled auto-merge (squash) August 20, 2025 13:41
Copy link
Contributor

@dotnet-policy-service dotnet-policy-service bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approved; this PR will merge when all status checks pass.

@dotnet-policy-service dotnet-policy-service bot merged commit 5f083f6 into main Aug 20, 2025
16 checks passed
@dotnet-policy-service dotnet-policy-service bot deleted the dependabot/github_actions/actions/dependency-review-action-4.7.2 branch August 20, 2025 13:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
community-contribution Indicates PR is created by someone from the .NET community. dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code :octocat: auto-merge
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants