chore(deps): update ferrlabs/.github digest to 9de9605 - #177
Conversation
| jobs: | ||
| release: | ||
| uses: FerrLabs/.github/.github/workflows/reusable-ferrflow-release.yml@5ff54383dc6676f79163dab1dc4cb7c29f7cd8de # main | ||
| uses: FerrLabs/.github/.github/workflows/reusable-ferrflow-release.yml@9de9605743021dfff54158707936cc57bedd4360 # main |
| scan: | ||
| name: Secrets + CVE | ||
| uses: FerrLabs/.github/.github/workflows/reusable-security-scan.yml@5ff54383dc6676f79163dab1dc4cb7c29f7cd8de # main | ||
| uses: FerrLabs/.github/.github/workflows/reusable-security-scan.yml@9de9605743021dfff54158707936cc57bedd4360 # main |
There was a problem hiding this comment.
Digest bump for FerrLabs/.github (5ff5438 → 9de9605) is one commit: #339, which drops the self-hosted Renovate workflow, its rebase-dispatch, and the Renovate self-check (Renovate now runs as an in-cluster CronJob per FerrLabs/Infra#424).
The only file it touches that this repo's callers actually use is reusable-ferrflow-release.yml: it removes the trigger-renovate job but keeps the trigger-renovate input as a documented no-op, so existing callers stay valid. release.yml here doesn't set that input, so nothing changes for this repo. reusable-pr-title.yml and reusable-security-scan.yml aren't touched by the commit at all.
CI is green (gitleaks, snyk, osv-scanner, zizmor, PR title); opengrep was still running at review time but nothing in this diff touches scanned code, just a pinned SHA comment change.
Uneventful bump, safe to merge.
This PR contains the following updates:
5ff5438→9de9605Configuration
📅 Schedule: (UTC)
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR has been generated by Mend Renovate CLI.