Skip to content

build(deps): bump github/gh-aw-actions/setup from 0.82.14 to 0.83.4 - #999

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github/gh-aw-actions/setup-0.83.3
Closed

build(deps): bump github/gh-aw-actions/setup from 0.82.14 to 0.83.4#999
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github/gh-aw-actions/setup-0.83.3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 25, 2026

Copy link
Copy Markdown
Contributor

Bumps github/gh-aw-actions/setup from 0.82.14 to 0.83.4.

Release notes

Sourced from github/gh-aw-actions/setup's releases.

v0.83.4

Sync of actions from gh-aw at v0.83.4.

v0.83.3

Sync of actions from gh-aw at v0.83.3.

v0.83.2

Sync of actions from gh-aw at v0.83.2.

v0.83.1

Sync of actions from gh-aw at v0.83.1.

v0.83.0

Sync of actions from gh-aw at v0.83.0.

v0.82.15

Sync of actions from gh-aw at v0.82.15.

Commits
  • e89c65e chore: sync actions from gh-aw@v0.83.4 (#200)
  • 6f8e8ef chore: sync actions from gh-aw@v0.83.3 (#199)
  • 39143c7 chore: sync actions from gh-aw@v0.83.2 (#198)
  • 294c570 chore: upgrade and recompile agentic workflows to v0.83.1 (#197)
  • 5727e6f chore: upgrade daily-runtime-threat-scan workflow to gh-aw v0.82.14 (#196)
  • 8bdba80 chore: sync actions from gh-aw@v0.83.1 (#194)
  • 3480243 chore: sync actions from gh-aw@v0.83.0 (#193)
  • 511cb6d chore: sync actions from gh-aw@v0.82.15 (#192)
  • See full diff in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jul 25, 2026
@dependabot
dependabot Bot requested a review from groupthinking as a code owner July 25, 2026 20:52
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jul 25, 2026
@vercel

vercel Bot commented Jul 25, 2026

Copy link
Copy Markdown
Contributor

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
v0-uvai Error Error Jul 27, 2026 9:39pm

@github-actions github-actions Bot added the ci/cd label Jul 25, 2026
@github-actions

github-actions Bot commented Jul 25, 2026

Copy link
Copy Markdown

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Snapshot Warnings

⚠️: No snapshots were found for the head SHA 3ac2c2d.
Ensure that dependencies are being submitted on PR branches and consider enabling retry-on-snapshot-warnings. See the documentation for more information and troubleshooting advice.

OpenSSF Scorecard

PackageVersionScoreDetails
actions/github/gh-aw-actions/setup e89c65e17eb281bbd5ff2ff9e9199a03e96654c7 UnknownUnknown

Scanned Files

  • .github/workflows/focused-coverage-controller.lock.yml

@github-actions

github-actions Bot commented Jul 25, 2026

Copy link
Copy Markdown

Agent Completion Truth Gate: NOT_APPLICABLE

Evidence agrees.

Machine-readable verdict
{
  "details": {},
  "reasons": [],
  "verdict": "not_applicable"
}

Workflow evidence

@groupthinking groupthinking left a comment

Copy link
Copy Markdown
Owner

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Review — automated (dependency bump)

Reviewed the full diff. This is a clean, mechanical bump of the pinned commit for github/gh-aw-actions/setup from v0.82.14 (b6d1443) → v0.83.3 (6f8e8ef), applied identically across three compiled .lock.yml workflow files:

  • canonical-pr-remediator.lock.yml
  • eventrelay-ci-investigator.lock.yml
  • focused-coverage-controller.lock.yml

Assessment:

  • 19 additions / 19 deletions, all the same single-line SHA/version swap — no logic, input, or permission changes.
  • Action remains SHA-pinned to the official github/gh-aw-actions release, so the supply-chain posture is unchanged.
  • These are auto-generated lockfiles; the source .md workflow definitions are untouched.
  • Commit statuses are green (truth-gate ✅, Vercel ✅).

No blocking findings. Low-risk minor bump.

Holding short of a formal approval / merge: main is protected and this run is an unattended scheduled job with no live human sign-off, so the merge decision stays with a maintainer. Safe to gh pr merge 999 --squash when you're ready.


Generated by Claude Code

@groupthinking
groupthinking marked this pull request as draft July 25, 2026 21:08

Copy link
Copy Markdown
Owner

Controller containment — unbound dependency update returned to draft

Next executable action: preserve this branch as draft evidence. Bind a focused child, reconcile overlap, and obtain a complete execution receipt plus exact-head proof before any advancement.

Bumps [github/gh-aw-actions/setup](https://github.com/github/gh-aw-actions) from 0.82.14 to 0.83.4.
- [Release notes](https://github.com/github/gh-aw-actions/releases)
- [Changelog](https://github.com/github/gh-aw-actions/blob/main/CHANGELOG.md)
- [Commits](github/gh-aw-actions@b6d1443...e89c65e)

---
updated-dependencies:
- dependency-name: github/gh-aw-actions/setup
  dependency-version: 0.83.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title build(deps): bump github/gh-aw-actions/setup from 0.82.14 to 0.83.3 build(deps): bump github/gh-aw-actions/setup from 0.82.14 to 0.83.4 Jul 27, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/github/gh-aw-actions/setup-0.83.3 branch from 45fe6f8 to 3ac2c2d Compare July 27, 2026 21:38
@dependabot @github

dependabot Bot commented on behalf of github Aug 1, 2026

Copy link
Copy Markdown
Contributor Author

Superseded by #1171.

@dependabot dependabot Bot closed this Aug 1, 2026
@dependabot
dependabot Bot deleted the dependabot/github_actions/github/gh-aw-actions/setup-0.83.3 branch August 1, 2026 20:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

ci/cd dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant