Skip to content

deps/gha: bump getplumber/plumber from 0.7.4 to 0.7.17 - #138

Closed
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/github_actions/dev/getplumber/plumber-0.7.17
Closed

dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/github_actions/dev/getplumber/plumber-0.7.17

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 2, 2026

Copy link
Copy Markdown
Contributor

Bumps getplumber/plumber from 0.7.4 to 0.7.17.

Release notes

Sourced from getplumber/plumber's releases.

v0.7.17

0.7.17 (2026-10-30)

🐛 Bug Fixes

  • cmd: the SARIF names a nested finding's container in its message, never in a location outside the checkout (5b53f2b)

v0.7.16

0.7.16 (2026-10-28)

✨ Features

  • cmd: the platform push carries the GitHub bill of materials (a2bcd78)

🐛 Bug Fixes

  • cmd: no GitHub bill of materials when a workflow file does not parse (a88ce02)

v0.7.15

0.7.15 (2026-10-28)

🐛 Bug Fixes

  • configuration: eight GitLab-shaped controls declare GitLab only, their GitHub bench entries go (5c78ee5)

v0.7.14

0.7.14 (2026-10-27)

🐛 Bug Fixes

  • release: only file a remove/drop first word under Removed (f16eafd)

👷 CI/CD

  • release: GitLab component notes only list what changed in the component (2ebb420), closes #569

v0.7.13

0.7.13 (2026-10-27)

🐛 Bug Fixes

  • control,github: judge uses: docker:// step images like container images (c4a2e9a), closes #571
  • pbom: a docker:// step is an image, not an action include (124fae4), closes #575 #571 #571

... (truncated)

Changelog

Sourced from getplumber/plumber's changelog.

0.7.17 (2026-10-30)

🐛 Bug Fixes

  • cmd: the SARIF names a nested finding's container in its message, never in a location outside the checkout (5b53f2b)

0.7.16 (2026-10-28)

✨ Features

  • cmd: the platform push carries the GitHub bill of materials (a2bcd78)

🐛 Bug Fixes

  • cmd: no GitHub bill of materials when a workflow file does not parse (a88ce02)

0.7.15 (2026-10-28)

🐛 Bug Fixes

  • configuration: eight GitLab-shaped controls declare GitLab only, their GitHub bench entries go (5c78ee5)

0.7.14 (2026-10-27)

🐛 Bug Fixes

  • release: only file a remove/drop first word under Removed (f16eafd)

👷 CI/CD

  • release: GitLab component notes only list what changed in the component (2ebb420), closes #569

0.7.13 (2026-10-27)

🐛 Bug Fixes

  • control,github: judge uses: docker:// step images like container images (c4a2e9a), closes #571
  • pbom: a docker:// step is an image, not an action include (124fae4), closes #575 #571 #571
  • pbom: list the images of nested docker:// steps (b7db988), closes #575 #571

0.7.12 (2026-10-26)

... (truncated)

Commits
  • 2342834 chore(release): 0.7.17 [skip ci]
  • 5b53f2b fix(cmd): the SARIF names a nested finding's container in its message, never ...
  • e9ad2dc chore(release): 0.7.16 [skip ci]
  • a88ce02 fix(cmd): no GitHub bill of materials when a workflow file does not parse
  • a2bcd78 feat(cmd): the platform push carries the GitHub bill of materials
  • e3be82b chore(release): 0.7.15 [skip ci]
  • 5c78ee5 fix(configuration): eight GitLab-shaped controls declare GitLab only, their G...
  • ace0b09 chore(release): 0.7.14 [skip ci]
  • f16eafd fix(release): only file a remove/drop first word under Removed
  • 2ebb420 ci(release): GitLab component notes only list what changed in the component
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [getplumber/plumber](https://github.com/getplumber/plumber) from 0.7.4 to 0.7.17.
- [Release notes](https://github.com/getplumber/plumber/releases)
- [Changelog](https://github.com/getplumber/plumber/blob/main/CHANGELOG.md)
- [Commits](getplumber/plumber@cd1ecdf...2342834)

---
updated-dependencies:
- dependency-name: getplumber/plumber
  dependency-version: 0.7.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Nov 2, 2026
@dependabot @github

dependabot Bot commented on behalf of github Nov 5, 2026

Copy link
Copy Markdown
Contributor Author

Superseded by #139.

@dependabot dependabot Bot closed this Nov 5, 2026
@dependabot
dependabot Bot deleted the dependabot/github_actions/dev/getplumber/plumber-0.7.17 branch November 5, 2026 08:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant