Skip to content

deps/gha: bump getplumber/plumber from 0.4.63 to 0.5.2 - #111

Closed
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/github_actions/dev/getplumber/plumber-0.5.2
Closed

dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/github_actions/dev/getplumber/plumber-0.5.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 21, 2026

Copy link
Copy Markdown
Contributor

Bumps getplumber/plumber from 0.4.63 to 0.5.2.

Release notes

Sourced from getplumber/plumber's releases.

v0.5.2

0.5.2 (2026-09-18)

✨ Features

  • identity: recipe version 6, one identity per rule for ISSUE-405, ISSUE-408 and ISSUE-417 (b4f43ed)
  • policies: one finding per rule for missing required templates, components and actions (row 107) (50f6cf7)

👷 CI/CD

  • release: pin v0.5.1 refs [skip ci] (0648860)

v0.5.1

0.5.1 (2026-09-17)

🐛 Bug Fixes

  • component: run the plumber job on branch pipelines with an open MR and on plumber/ branches (045fe6f), closes #476

📚 Documentation

👷 CI/CD

  • release: pin v0.5.0 refs [skip ci] (1472696)

v0.5.0

0.5.0 (2026-09-17)

⚠ BREAKING CHANGES

  • identity: every ISSUE-406 and ISSUE-409 finding re-keys; a dismissal made under recipe version 4 no longer suppresses them and the platform re-detects the issue once.

Co-Authored-By: Claude Fable 5.1 noreply@anthropic.com Claude-Session: https://claude.ai/code/session_01FUFtr3m8zC2mVNKVTQvaNz

✨ Features

  • identity: recipe version 5, the override fingerprint keys ISSUE-406 and ISSUE-409 (38c87b0)
  • ir: fingerprint an include's override content from the overridden keys and their values (a8378a5)
  • policies: overridden findings carry the override fingerprint and the overridden jobs (e133aba)

... (truncated)

Changelog

Sourced from getplumber/plumber's changelog.

0.5.4 (2026-09-21)

✨ Features

  • catalog: export toggle semantics for behavior-switch booleans (46c5014)

👷 CI/CD

  • release: pin v0.5.3 refs [skip ci] (a36dcb4)

0.5.3 (2026-09-19)

🐛 Bug Fixes

  • gitlab: a required template matches its identity from the ref, not only its file path (056e7c8)
  • gitlab: a versioned template include keeps its template identity when the tag listing fails (724aa10)
  • platform: a linked run never calls GitLab for an include the platform served without its observation (d990b31)
  • platform: a version fact the platform did not serve reads as platform_observation_missing, not as a failed probe (52e1c47)

👷 CI/CD

  • release: pin v0.5.2 refs [skip ci] (cd7ef86)

0.5.2 (2026-09-18)

✨ Features

  • identity: recipe version 6, one identity per rule for ISSUE-405, ISSUE-408 and ISSUE-417 (b4f43ed)
  • policies: one finding per rule for missing required templates, components and actions (row 107) (50f6cf7)

👷 CI/CD

  • release: pin v0.5.1 refs [skip ci] (0648860)

0.5.1 (2026-09-17)

🐛 Bug Fixes

  • component: run the plumber job on branch pipelines with an open MR and on plumber/ branches (045fe6f), closes #476

📚 Documentation

... (truncated)

Commits
  • d37150c chore(release): 0.5.2 [skip ci]
  • b4f43ed feat(identity): recipe version 6, one identity per rule for ISSUE-405, ISSUE-...
  • 50f6cf7 feat(policies): one finding per rule for missing required templates, componen...
  • 0648860 ci(release): pin v0.5.1 refs [skip ci]
  • 3828988 chore(release): 0.5.1 [skip ci]
  • c083e0a docs(component): list when the plumber job runs and the workflow rule that av...
  • 045fe6f fix(component): run the plumber job on branch pipelines with an open MR and o...
  • 1472696 ci(release): pin v0.5.0 refs [skip ci]
  • c0b4d0f chore(release): 0.5.0 [skip ci]
  • 12fac4c fix(ir): the override fingerprint hashes the whole local job block, nested ke...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [getplumber/plumber](https://github.com/getplumber/plumber) from 0.4.63 to 0.5.2.
- [Release notes](https://github.com/getplumber/plumber/releases)
- [Changelog](https://github.com/getplumber/plumber/blob/main/CHANGELOG.md)
- [Commits](getplumber/plumber@10837e4...d37150c)

---
updated-dependencies:
- dependency-name: getplumber/plumber
  dependency-version: 0.5.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Sep 21, 2026
@dependabot @github

dependabot Bot commented on behalf of github Sep 22, 2026

Copy link
Copy Markdown
Contributor Author

Superseded by #112.

@dependabot dependabot Bot closed this Sep 22, 2026
@dependabot
dependabot Bot deleted the dependabot/github_actions/dev/getplumber/plumber-0.5.2 branch September 22, 2026 07:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant