Skip to content

chore(deps): bump actions/dependency-review-action from 4.9.0 to 5.0.0 - #2

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions/dependency-review-action-5
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions/dependency-review-action-5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 23, 2026 •

Copy link
Copy Markdown
Contributor

Bumps actions/dependency-review-action from 4.9.0 to 5.0.0.

Release notes

Sourced from actions/dependency-review-action's releases.

5.0.0

This is a new major version of the Dependency Review Action which updates the runtime to node24. This requires a minimum Actions Runner version v2.327.1 to run.

What's Changed

New Contributors

Full Changelog: actions/dependency-review-action@v4.9.0...v5.0.0

Commits
  • a1d282b Merge pull request #1098 from actions/ahpook/v5-release
  • eb6c199 update examples to show @​v5
  • 3943c2c v5.0.0 release branch
  • 454943c Merge pull request #1094 from actions/ashelytc/security-findings
  • 6d92a12 revert @​typescript-eslint/parser update
  • a8e5a7e Merge pull request #1076 from tspascoal/fix-version-matching-for-non-string-s...
  • b6b7079 update @​typescript-eslint/parser to 8.40.0
  • 821a21d update more dependencies
  • 05aaaae run npm audit fix
  • 55d3e75 Merge pull request #1077 from Marukome0743/docs/checkout
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jul 23, 2026
Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action) from 4.9.0 to 5.0.0.
- [Release notes](https://github.com/actions/dependency-review-action/releases)
- [Commits](actions/dependency-review-action@2031cfc...a1d282b)

---
updated-dependencies:
- dependency-name: actions/dependency-review-action
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title build(deps): bump actions/dependency-review-action from 4 to 5 chore(deps): bump actions/dependency-review-action from 4.9.0 to 5.0.0 Jul 24, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions/dependency-review-action-5 branch from 08a9984 to 429d0f9 Compare July 24, 2026 09:21
@oll4com

oll4com commented Jul 24, 2026

Copy link
Copy Markdown
Owner

Superseded by #11, which includes dependency-review-action 5.0.0 and the complete verified SpaceApp 0.1.5 release set.

@oll4com oll4com closed this Jul 24, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jul 24, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/github_actions/actions/dependency-review-action-5 branch July 24, 2026 13:20
oll4com pushed a commit that referenced this pull request Oct 22, 2026
…tabase fails; Docker key file must hold only Docker's published key (internal review 1.1.7, Codex #2 and #3)

Restore: one pg_restore --single-transaction per database let the app database commit before a Temporal restore failed. Restore now copies the current databases aside (pg_dump into .spaceapp-restore-rollback on the data volume), restores each backup database, swaps the files in with a reversible move (.spaceapp-restore-previous), and on any database or swap failure restores the copies and moves the files back; if that fails too it keeps the copies, names each database left at the backup's state and prints the pg_restore command per database (or: run the same restore again). Backups leave the restore's own folders out. Docker keys: openPgpPrimaryFingerprints reads every packet of the one armored block; a file with another primary key, a second block or a malformed packet is refused before APT or RPM sees it. CHANGELOG lines for both and for the desktop sign-in fix (arrives with the source re-export). Tests: restore order, rollback after a later database fails, rollback failure prints the commands, backup excludes the restore folders; key file with an extra primary key or a second block is refused; run-spaceapp 193 + restore 7 = 200 pass.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant