Three open Dependabot pull requests target dependency versions that are already present on main. No coding-agent changes are needed; a human with repository write access should close or ask Dependabot to refresh these PRs to keep the queue clean.
Action: This is a human-only blocker/task. It does not need a coding agent; a maintainer with repository write access should review and close these PRs.
Scope
Acceptance checks
- Each of the four PRs above is closed as superseded/not-planned, or Dependabot is asked (via
@dependabot recreate or closing) to refresh/retire them, so the open-PR queue no longer lists resolved work.
- No repository files, branches, or other pull requests are modified as part of resolving this task.
Evidence
Related to
#62450
Generated by
Dependabot / Update Planner · copilot · auto · 171.9 AIC · ⌖ 10.1 AIC · ⊞ 22.6K · ◷
Three open Dependabot pull requests target dependency versions that are already present on
main. No coding-agent changes are needed; a human with repository write access should close or ask Dependabot to refresh these PRs to keep the queue clean.Action: This is a human-only blocker/task. It does not need a coding agent; a maintainer with repository write access should review and close these PRs.
Scope
actions/download-artifactbump from 4.1.8 to 8.0.1. Repository evidence: all 4 workflow files referencing this action (CWI.yml,cgo.yml,ci.yml,windows-cli-integration.yml) are already pinned to thev8.0.1SHA (3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c) onmain. The PR's own comment thread confirms the author mergedmaininto the branch and found "the merged tree is now identical tomain."github.com/modelcontextprotocol/go-sdkbump from 1.7.0 to 1.8.0. Already atv1.8.0ingo.mod/go.sumonmain(landed via chore: update planned Go, Actions, and docs dependencies #61774).golang.org/x/toolsbump from 0.49.0 to 0.50.0. Already atv0.50.0ingo.mod/go.sumonmain(landed via chore: update planned Go, Actions, and docs dependencies #61774).mermaidbump from 11.17.2 to 12.0.0 in/docs. Already at^12.0.0indocs/package.jsononmain(landed via chore: update planned Go, Actions, and docs dependencies #61774).Acceptance checks
@dependabot recreateor closing) to refresh/retire them, so the open-PR queue no longer lists resolved work.Evidence
git log -S "mermaid\": \"^12.0.0" -- docs/package.jsonandgit log -S "go-sdk v1.8.0" -- go.modandgit log -S "x/tools v0.50.0" -- go.modall resolve to commit9894316e52("chore: update planned Go, Actions, and docs dependencies (chore: update planned Go, Actions, and docs dependencies #61774)", merged 2026-09-18), which predates and supersedes PRs Bump github.com/modelcontextprotocol/go-sdk from 1.7.0 to 1.8.0 #61092, Bump golang.org/x/tools from 0.49.0 to 0.50.0 #61090, Bump mermaid from 11.17.2 to 12.0.0 in /docs #61091.grep -rn "download-artifact@" .github/workflows/*.yml | grep -v lock.ymlonmainshows all references already at3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1, matching PR build(deps): Bump actions/download-artifact from 4.1.8 to 8.0.1 #61108's target version.