Skip to content

(deps): Bump dieghernan/cff-validator from 4 to 5#2

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/github_actions/dieghernan/cff-validator-5
Open

(deps): Bump dieghernan/cff-validator from 4 to 5#2
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/github_actions/dieghernan/cff-validator-5

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github May 1, 2026

Bumps dieghernan/cff-validator from 4 to 5.

Release notes

Sourced from dieghernan/cff-validator's releases.

v5

Note that v5 is a sliding tag, and we introduce non-breaking changes to it.

  • Docker action is pinned to the same commit SHA as the parent workflow to avoid security issues thanks to @​mgovers (#26)

v5.0.1 (2026-04-21)

  • Move to full SHA reference on Docker instead to relative path.

What's Changed

New Contributors

Full Changelog: dieghernan/cff-validator@v4...v5

Changelog

Sourced from dieghernan/cff-validator's changelog.

v5

Note that v5 is a sliding tag, and we introduce non-breaking changes to it.

  • Docker action is pinned to the same commit SHA as the parent workflow to avoid security issues thanks to @​mgovers (#26)

v5.0.1 (2026-04-21)

  • Move to full SHA reference on Docker instead to relative path.
Commits
  • 54c8e73 Prepare sliding tag
  • 41f92d7 Update action.yml
  • 7ed7b84 Update action.yml
  • fc44839 Prepare release
  • 93d990c Merge pull request #25 from dieghernan/dependabot/docker/docker/rocker/tidyve...
  • 2142b7c Bump rocker/tidyverse from 4.5.2 to 4.5.3 in /docker
  • 79e387d Merge pull request #27 from mgovers/patch-1
  • 22cecb1 Use local docker action in composite action
  • a55dbe1 Merge pull request #24 from dieghernan/dependabot/docker/docker/rocker/tidyve...
  • 50dd776 Bump rocker/tidyverse from 4.4.2 to 4.5.2 in /docker
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [dieghernan/cff-validator](https://github.com/dieghernan/cff-validator) from 4 to 5.
- [Release notes](https://github.com/dieghernan/cff-validator/releases)
- [Changelog](https://github.com/dieghernan/cff-validator/blob/main/CHANGELOG.md)
- [Commits](dieghernan/cff-validator@v4...v5)

---
updated-dependencies:
- dependency-name: dieghernan/cff-validator
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels May 1, 2026
@github-actions
Copy link
Copy Markdown

github-actions Bot commented May 1, 2026

Link Check Results

Some links appear broken. Check the workflow logs: https://github.com/structural-explainability/spec-ib/actions/runs/25198508119

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants