Skip to content

chore(deps): bump release-drafter/release-drafter from 7.4.0 to 7.5.1#951

Merged
abhimehro merged 1 commit into
mainfrom
dependabot/github_actions/release-drafter/release-drafter-7.5.1
Jun 26, 2026
Merged

chore(deps): bump release-drafter/release-drafter from 7.4.0 to 7.5.1#951
abhimehro merged 1 commit into
mainfrom
dependabot/github_actions/release-drafter/release-drafter-7.5.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 25, 2026

Copy link
Copy Markdown

Bumps release-drafter/release-drafter from 7.4.0 to 7.5.1.

Release notes

Sourced from release-drafter/release-drafter's releases.

v7.5.1

What's Changed

Bug Fixes

  • fix: use PR changed files as the source of truth for path filtering (#1640) @​cchanche

Full Changelog: release-drafter/release-drafter@v7.5.0...v7.5.1

v7.5.0

What's Changed

New

Bug Fixes

Dependency Updates

Full Changelog: release-drafter/release-drafter@v7.4.0...v7.5.0

Commits
  • 4d75298 chore: release v7.5.1
  • 87be2bf fix: use PR changed files as the source of truth for path filtering (#1640)
  • 73b95fa chore: release v7.5.0
  • 46fd415 Fix/align increments to semver lib from 0.0.0 (#1636)
  • ee02572 chore: upgrade various deps
  • cd91445 build(deps): bump undici from 6.24.1 to 6.27.0 (#1637)
  • 33c969b fix: require actual matches for category mode only (#1639)
  • 5d6d314 ci: support label 'dependencies' for dependabot
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [release-drafter/release-drafter](https://github.com/release-drafter/release-drafter) from 7.4.0 to 7.5.1.
- [Release notes](https://github.com/release-drafter/release-drafter/releases)
- [Commits](release-drafter/release-drafter@ed4bc48...4d75298)

---
updated-dependencies:
- dependency-name: release-drafter/release-drafter
  dependency-version: 7.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions labels Jun 25, 2026
@trunk-io

trunk-io Bot commented Jun 25, 2026

Copy link
Copy Markdown

Merging to main in this repository is managed by Trunk.

  • To merge this pull request, check the box to the left or comment /trunk merge below.

After your PR is submitted to the merge queue, this comment will be automatically updated with its status. If the PR fails, failure details will also be posted here

@snyk-io

snyk-io Bot commented Jun 25, 2026

Copy link
Copy Markdown

Snyk checks have passed. No issues have been found so far.

Status Scan Engine Critical High Medium Low Total (0)
Open Source Security 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

@github-actions

Copy link
Copy Markdown

Message that will be displayed on users' first pull request

@github-actions

Copy link
Copy Markdown

Visual recap — skipped

The visual recap job did not run for this pull request. This is informational only and does not block the PR.

Recap skipped for 0178ad9: bot author (dependabot[bot]).

@github-actions

Copy link
Copy Markdown

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Snapshot Warnings

⚠️: No snapshots were found for the head SHA 0178ad9.
Ensure that dependencies are being submitted on PR branches and consider enabling retry-on-snapshot-warnings. See the documentation for more information and troubleshooting advice.

OpenSSF Scorecard

PackageVersionScoreDetails
actions/release-drafter/release-drafter 4d75298e00d9e34c483e5ff8c68d0ea1c1940c1e 🟢 5.1
Details
CheckScoreReason
Code-Review⚠️ 1Found 1/9 approved changesets -- score normalized to 1
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Maintained🟢 1030 commit(s) and 24 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Pinned-Dependencies🟢 9dependency not pinned by hash detected -- score normalized to 9
Security-Policy⚠️ 0security policy file not detected
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
Signed-Releases⚠️ -1no releases found
SAST🟢 9SAST tool detected but not run on all commits
Branch-Protection⚠️ 0branch protection not enabled on development/release branches

Scanned Files

  • .github/workflows/release-drafter.yml

@codescene-access codescene-access Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No application code in the PR — skipped Code Health checks.

See analysis details in CodeScene

Quality Gate Profile: Clean Code Collective
Install CodeScene MCP: safeguard and uplift AI-generated code. Catch issues early with our IDE extension and CLI tool.

@abhimehro abhimehro merged commit 3893f77 into main Jun 26, 2026
16 checks passed
@abhimehro abhimehro deleted the dependabot/github_actions/release-drafter/release-drafter-7.5.1 branch June 26, 2026 13:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

configuration dependencies Pull requests that update a dependency file github_actions

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant