Skip to content

Update Renovatebot GHA Updates - #53

Open
protocols-renovate[bot] wants to merge 2 commits into
masterfrom
renovate/renovatebot-gha-updates
Open

Update Renovatebot GHA Updates#53
protocols-renovate[bot] wants to merge 2 commits into
masterfrom
renovate/renovatebot-gha-updates

Conversation

@protocols-renovate

@protocols-renovate protocols-renovate Bot commented Jul 28, 2026

Copy link
Copy Markdown

This PR contains the following updates:

Package Type Update Change
ConsenSys/github-actions (changelog) action digest 31dbb913a24297
actions/checkout action pinDigest 11d5960
actions/download-artifact action pinDigest d3f86a1
actions/setup-java action pinDigest c1e3236
actions/upload-artifact action pinDigest ea165f8

Warning

Some dependencies could not be looked up. Check the warning logs for more information.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.


Note

Low Risk
CI-only dependency pinning with no change to CLA logic or runtime application code.

Overview
Pins the CLA Assistant workflow step from a floating contributor-assistant/github-action@v2.6.1 tag to the immutable commit ca4a40a7d1004f18d9960b404b97e5f30a505a08, with an inline comment noting it remains v2.6.1.

This is a supply-chain hardening change only; workflow triggers, permissions, and CLA configuration are unchanged.

Reviewed by Cursor Bugbot for commit bc7e7a4. Bugbot is set up for automated code reviews on this repo. Configure here.

@protocols-renovate protocols-renovate Bot changed the title Pin contributor-assistant/github-action action to ca4a40a Pin contributor-assistant/github-action action to ca4a40a - autoclosed Jul 28, 2026
@protocols-renovate
protocols-renovate Bot deleted the renovate/renovatebot-gha-updates branch July 28, 2026 11:20
@github-actions github-actions Bot locked and limited conversation to collaborators Jul 28, 2026
joshuafernandes and others added 2 commits July 30, 2026 11:16
* use gha instead of circleci

* update for perms

* updates

* updates
@protocols-renovate protocols-renovate Bot changed the title Pin contributor-assistant/github-action action to ca4a40a - autoclosed Update Renovatebot GHA Updates Jul 30, 2026
@protocols-renovate protocols-renovate Bot reopened this Jul 30, 2026
@protocols-renovate
protocols-renovate Bot force-pushed the renovate/renovatebot-gha-updates branch 2 times, most recently from bc7e7a4 to 4a45ba8 Compare July 30, 2026 01:17
@joshuafernandes
joshuafernandes force-pushed the master branch 3 times, most recently from fdbce27 to f697812 Compare July 30, 2026 02:28
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant