Skip to content

ci: bump codywilliamson/repo-sentinel/.github/workflows/security-scan.yml from 0.3.3 to 0.3.4 in the actions group across 1 directory - #125

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions-caf94f786c
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions-caf94f786c

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 30, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the actions group with 1 update in the / directory: codywilliamson/repo-sentinel/.github/workflows/security-scan.yml.

Updates codywilliamson/repo-sentinel/.github/workflows/security-scan.yml from 0.3.3 to 0.3.4

Release notes

Sourced from codywilliamson/repo-sentinel/.github/workflows/security-scan.yml's releases.

repo-sentinel v0.3.4

Fixed

  • Fresh installs detect the consumer repository's default branch for push and pull request scans. Use --default-branch or -DefaultBranch when remote HEAD is unavailable.

Added

  • Opt-in close-resolved-issues support. A complete scan on the default branch closes only marked issues from the same scanner profile whose findings are gone. PR and incomplete scans cannot close issues.

Existing caller workflows keep their branch filters on update. Correct any stale main filter manually when upgrading, and enable resolved-issue closure explicitly if desired. Older unmarked issues need one-time manual review.

Changelog

Sourced from codywilliamson/repo-sentinel/.github/workflows/security-scan.yml's changelog.

[0.3.4] - 2026-09-26

Fixed

  • Fresh installers detect the consumer repository's default branch for push and pull request scans, with an explicit branch option when remote detection is unavailable.

Added

  • Optional resolved-issue cleanup after a complete default-branch scan. It only closes issues created with the same scanner profile; partial scans, pull requests, and older unmarked issues are left alone.
Commits
  • ad2a857 fix(security-scan): detect default branches and close resolved findings
  • See full diff in compare view

@dependabot dependabot Bot added the dependencies dependency updates label Sep 30, 2026
@cloudflare-workers-and-pages

cloudflare-workers-and-pages Bot commented Sep 30, 2026 •

Copy link
Copy Markdown

Deploying with  Cloudflare Workers  Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status Name Latest Commit Preview URL Updated (UTC)
✅ Deployment successful!
View logs
diffle 1ce622e Commit Preview URL

Branch Preview URL
Oct 07 2026, 08:55 PM

….yml

Bumps the actions group with 1 update in the / directory: [codywilliamson/repo-sentinel/.github/workflows/security-scan.yml](https://github.com/codywilliamson/repo-sentinel).


Updates `codywilliamson/repo-sentinel/.github/workflows/security-scan.yml` from 0.3.3 to 0.3.4
- [Release notes](https://github.com/codywilliamson/repo-sentinel/releases)
- [Changelog](https://github.com/codywilliamson/repo-sentinel/blob/main/CHANGELOG.md)
- [Commits](codywilliamson/repo-sentinel@v0.3.3...v0.3.4)

---
updated-dependencies:
- dependency-name: codywilliamson/repo-sentinel/.github/workflows/security-scan.yml
  dependency-version: 0.3.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title ci: bump codywilliamson/repo-sentinel/.github/workflows/security-scan.yml from 0.3.3 to 0.3.4 in the actions group ci: bump codywilliamson/repo-sentinel/.github/workflows/security-scan.yml from 0.3.3 to 0.3.4 in the actions group across 1 directory Oct 7, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions-caf94f786c branch from 3a6de94 to 1ce622e Compare October 7, 2026 20:54
@dependabot @github

dependabot Bot commented on behalf of github Oct 9, 2026

Copy link
Copy Markdown
Contributor Author

Looks like codywilliamson/repo-sentinel/.github/workflows/security-scan.yml is no longer updatable, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 9, 2026
@dependabot
dependabot Bot deleted the dependabot/github_actions/actions-caf94f786c branch October 9, 2026 20:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies dependency updates

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants