Skip to content

Bump zgosalvez/github-actions-ensure-sha-pinned-actions from 3.0.24 to 3.0.25#1052

Merged
mhucka merged 1 commit intomasterfrom
dependabot/github_actions/zgosalvez/github-actions-ensure-sha-pinned-actions-3.0.25
May 20, 2025
Merged

Bump zgosalvez/github-actions-ensure-sha-pinned-actions from 3.0.24 to 3.0.25#1052
mhucka merged 1 commit intomasterfrom
dependabot/github_actions/zgosalvez/github-actions-ensure-sha-pinned-actions-3.0.25

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 19, 2025

Bumps zgosalvez/github-actions-ensure-sha-pinned-actions from 3.0.24 to 3.0.25.

Release notes

Sourced from zgosalvez/github-actions-ensure-sha-pinned-actions's releases.

v3.0.25

What's Changed

Full Changelog: zgosalvez/github-actions-ensure-sha-pinned-actions@v3...v3.0.25

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [zgosalvez/github-actions-ensure-sha-pinned-actions](https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions) from 3.0.24 to 3.0.25.
- [Release notes](https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/releases)
- [Commits](zgosalvez/github-actions-ensure-sha-pinned-actions@2d6823d...fc87bb5)

---
updated-dependencies:
- dependency-name: zgosalvez/github-actions-ensure-sha-pinned-actions
  dependency-version: 3.0.25
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added area/dependencies Involves packages or other software that qsim depends on area/devops Involves build systems, Make files, Bazel files, continuous integration, and or other DevOps topics labels May 19, 2025
@mhucka mhucka enabled auto-merge May 19, 2025 23:53
Copy link
Copy Markdown
Contributor

@mhucka mhucka left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@mhucka mhucka added this pull request to the merge queue May 19, 2025
Merged via the queue into master with commit 3326a46 May 20, 2025
26 checks passed
@mhucka mhucka deleted the dependabot/github_actions/zgosalvez/github-actions-ensure-sha-pinned-actions-3.0.25 branch May 20, 2025 00:01
mhucka pushed a commit to mhucka/OpenFermion that referenced this pull request Sep 25, 2025
…o 3.0.25 (quantumlib#1052)

Bumps
[zgosalvez/github-actions-ensure-sha-pinned-actions](https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions)
from 3.0.24 to 3.0.25.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/releases">zgosalvez/github-actions-ensure-sha-pinned-actions's
releases</a>.</em></p>
<blockquote>
<h2>v3.0.25</h2>
<h2>What's Changed</h2>
<ul>
<li>Bump undici from 5.28.5 to 5.29.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/pull/230">zgosalvez/github-actions-ensure-sha-pinned-actions#230</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/compare/v3...v3.0.25">https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/compare/v3...v3.0.25</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/commit/fc87bb5b5a97953d987372e74478de634726b3e5"><code>fc87bb5</code></a>
Bump undici from 5.28.5 to 5.29.0 (<a
href="https://redirect.github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/issues/230">#230</a>)</li>
<li>See full diff in <a
href="https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/compare/2d6823da4039243036c86d76f503c84e2ded2517...fc87bb5b5a97953d987372e74478de634726b3e5">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=zgosalvez/github-actions-ensure-sha-pinned-actions&package-manager=github_actions&previous-version=3.0.24&new-version=3.0.25)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area/dependencies Involves packages or other software that qsim depends on area/devops Involves build systems, Make files, Bazel files, continuous integration, and or other DevOps topics

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant