chore(deps): update ferrlabs/.github digest to b6a08e6 - #241
Conversation
| jobs: | ||
| release: | ||
| uses: FerrLabs/.github/.github/workflows/reusable-ferrflow-release.yml@006179d85612bca62c683001b983a3bfa98ca507 # main | ||
| uses: FerrLabs/.github/.github/workflows/reusable-ferrflow-release.yml@b6a08e6055076c18cfa7b8f80c9925275ed407fe # main |
| scan: | ||
| name: Secrets + CVE | ||
| uses: FerrLabs/.github/.github/workflows/reusable-security-scan.yml@006179d85612bca62c683001b983a3bfa98ca507 # main | ||
| uses: FerrLabs/.github/.github/workflows/reusable-security-scan.yml@b6a08e6055076c18cfa7b8f80c9925275ed407fe # main |
There was a problem hiding this comment.
Digest bump for FerrLabs/.github, three callers repinned to the same new commit (b6a08e6). Only one commit sits between the old and new SHA: "keep a failed artifact upload from failing the gate that produced it" (#368).
What changed upstream: adds continue-on-error: true to several actions/upload-artifact steps (coverage handoffs in reusable-ci-go/node/rust.yml, SBOM upload in reusable-docker-build.yml, trufflehog findings upload in reusable-security-scan.yml) so an artifact-upload failure no longer fails the job that produced the artifact. No removed/renamed inputs, no new required inputs, no changed defaults.
What breaks here: of the three reusable workflows this repo calls (reusable-pr-title.yml, reusable-ferrflow-release.yml, reusable-security-scan.yml), only reusable-security-scan.yml was touched, and only the "Upload findings" (trufflehog) step's failure mode changed — it's now best-effort instead of fatal. That's strictly more lenient, no action needed here. reusable-pr-title.yml and reusable-ferrflow-release.yml weren't modified in this commit.
CI: all checks green except opengrep (SAST) still running at review time, nothing suggests it's related to this bump.
Uneventful, safe to merge.
This PR contains the following updates:
006179d→b6a08e6Configuration
📅 Schedule: (UTC)
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR has been generated by Mend Renovate CLI.