Skip to content

Bump getplumber/plumber from 0.4.36 to 0.4.39 - #1056

Merged
AlfonsoUceda merged 1 commit into
masterfrom
dependabot-github_actions-getplumber-plumber-0.4.39
Aug 26, 2026
Merged

Bump getplumber/plumber from 0.4.36 to 0.4.39#1056
AlfonsoUceda merged 1 commit into
masterfrom
dependabot-github_actions-getplumber-plumber-0.4.39

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 26, 2026

Copy link
Copy Markdown
Contributor

Bumps getplumber/plumber from 0.4.36 to 0.4.39.

Release notes

Sourced from getplumber/plumber's releases.

v0.4.39

0.4.39 (2026-08-17)

✨ Features

  • ci: Add findings control library (8864b2d)

👷 CI/CD

  • release: pin v0.4.38 refs [skip ci] (a5fccb7)

v0.4.38

0.4.38 (2026-08-17)

✨ Features

  • ci: restore the contract platform push, key results by policy_id, act on the gate block (43dd0f8), closes #410

👷 CI/CD

  • release: pin v0.4.37 refs [skip ci] (c1a149f)

v0.4.37

0.4.37 (2026-08-16)

✨ Features

  • ci: Add --platform feature to integrate pushing of results per policy (d6c5d84)

🐛 Bug Fixes

  • ci: bump Go toolchain to 1.26.6 for stdlib security fixes (73f5ebe)

👷 CI/CD

  • release: pin v0.4.36 refs [skip ci] (77eb302)
Changelog

Sourced from getplumber/plumber's changelog.

0.4.43 (2026-08-26)

✨ Features

  • controls: add mergeRequestSettingsMustBeCompliant (ISSUE-506) with a conditional Premium/Ultimate caveat for merge-train and merged-pipeline expectations (6345dc4)
  • controls: make ISSUE-503 approval-settings findings read as current-vs-expected and add a Premium/Ultimate tier caveat when no protections are in effect (deacbfb)

🐛 Bug Fixes

  • controls: address review on the MR approval/settings controls (a70ef57)

👷 CI/CD

  • release: pin v0.4.42 refs [skip ci] (4d247c2)

0.4.42 (2026-08-25)

✨ Features

  • controls: Add MR approval rules controls (a2dfb69), closes #412

👷 CI/CD

  • release: pin v0.4.41 refs [skip ci] (0baded9)

0.4.41 (2026-08-24)

✨ Features

  • controls: Import variables protected and masked controls (8e9cdf0)

👷 CI/CD

  • release: pin v0.4.40 refs [skip ci] (91cd7c2)

0.4.40 (2026-08-21)

🐛 Bug Fixes

  • docker: stamp version metadata into the published image (f88e404), closes #425

... (truncated)

Commits
  • 031bc86 chore(release): 0.4.39 [skip ci]
  • 8864b2d feat(ci): Add findings control library
  • a5fccb7 ci(release): pin v0.4.38 refs [skip ci]
  • ada53a2 chore(release): 0.4.38 [skip ci]
  • 43dd0f8 feat(ci): restore the contract platform push, key results by policy_id, act o...
  • c1a149f ci(release): pin v0.4.37 refs [skip ci]
  • 00650e5 chore(release): 0.4.37 [skip ci]
  • 73f5ebe fix(ci): bump Go toolchain to 1.26.6 for stdlib security fixes
  • d6c5d84 feat(ci): Add --platform feature to integrate pushing of results per policy
  • 77eb302 ci(release): pin v0.4.36 refs [skip ci]
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [getplumber/plumber](https://github.com/getplumber/plumber) from 0.4.36 to 0.4.39.
- [Release notes](https://github.com/getplumber/plumber/releases)
- [Changelog](https://github.com/getplumber/plumber/blob/main/CHANGELOG.md)
- [Commits](getplumber/plumber@e81ed49...031bc86)

---
updated-dependencies:
- dependency-name: getplumber/plumber
  dependency-version: 0.4.39
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file gha no-jira labels Aug 26, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner August 26, 2026 07:03
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file gha no-jira labels Aug 26, 2026
@AlfonsoUceda
AlfonsoUceda merged commit 4e7d702 into master Aug 26, 2026
14 of 15 checks passed
@AlfonsoUceda
AlfonsoUceda deleted the dependabot-github_actions-getplumber-plumber-0.4.39 branch August 26, 2026 09:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file gha no-jira

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant