Update actions/dependency-review-action action to v4.8.0 #3974

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Merged

renovate merged 1 commit into main from renovate/actions-dependency-review-action-4.x

Sep 29, 2025

Merged

Update actions/dependency-review-action action to v4.8.0 #3974

renovate merged 1 commit into main from renovate/actions-dependency-review-action-4.x

Sep 29, 2025

Conversation

renovate[bot]

Copy link

Contributor

@renovate renovate bot commented Sep 27, 2025 •

edited

Loading

Coming soon: The Renovate bot (GitHub App) will be renamed to Mend. PRs from Renovate will soon appear from 'Mend'. Learn more here.

This PR contains the following updates:

Package	Type	Update	Change
actions/dependency-review-action	action	minor	`v4.7.3` -> `v4.8.0`

Release Notes

actions/dependency-review-action (actions/dependency-review-action)

`v4.8.0`

Compare Source

What's Changed

Make Ruby Code Scannable by @ljones140 in #978
Batch some contributions for release by @brrygrdn in #986
- Make license lists collapsable by @jasperkamerling
- feat: add large summary handling with artifact upload by @MattMencel

New Contributors

@ljones140 made their first contribution in #978
@jasperkamerling made their first contribution in #986
@MattMencel made their first contribution in #986

Full Changelog: actions/dependency-review-action@v4...v4.8.0

`v4.7.4`

Compare Source

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) in timezone America/Los_Angeles, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate


 Update actions/dependency-review-action action to v4.8.0

| datasource | package | from | to |
| ----------- | -------------------------------- | ------ | ------ |
| github-tags | actions/dependency-review-action | v4.7.3 | v4.8.0 |
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

@renovate renovate bot added the dependencies label

Sep 27, 2025

@renovate renovate bot requested a review from a team as a code owner

September 27, 2025 09:30

@renovate renovate bot added the dependencies label

Sep 27, 2025

@renovate renovate bot enabled auto-merge (squash)

September 27, 2025 09:30

@github-project-automation github-project-automation bot added this to NGINX Gateway Fabric

Sep 27, 2025

@github-project-automation github-project-automation bot moved this to 🆕 New in NGINX Gateway Fabric

Sep 27, 2025

@codecov Codecov

Copy link

codecov bot commented Sep 27, 2025 •

edited

Loading

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 86.80%. Comparing base (2f19ba8) to head (7742123).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files

@@ Coverage Diff @@
## main #3974 +/- ##
==========================================
- Coverage 86.84% 86.80% -0.05% 
==========================================
 Files 128 128 
 Lines 16607 16607 
 Branches 62 62 
==========================================
- Hits 14423 14416 -7 
- Misses 2003 2009 +6 
- Partials 181 182 +1

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.