Skip to content

chore(deps): update konflux-ci/.fullsend digest to 37b10e4#561

Open
red-hat-konflux[bot] wants to merge 1 commit into
mainfrom
konflux/mintmaker/main/konflux-ci-.fullsend-digest
Open

chore(deps): update konflux-ci/.fullsend digest to 37b10e4#561
red-hat-konflux[bot] wants to merge 1 commit into
mainfrom
konflux/mintmaker/main/konflux-ci-.fullsend-digest

Conversation

@red-hat-konflux

@red-hat-konflux red-hat-konflux Bot commented Jul 7, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change
konflux-ci/.fullsend (changelog) action digest ec2170637b10e4

Warning

Some dependencies could not be looked up. Check the warning logs for more information.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.


Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

@red-hat-konflux
red-hat-konflux Bot requested a review from a team as a code owner July 7, 2026 06:19
@fullsend-ai-review

fullsend-ai-review Bot commented Jul 7, 2026

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 6:20 AM UTC · Completed 6:24 AM UTC
Commit: 14477fe · View workflow run →

@fullsend-ai-review

Copy link
Copy Markdown

Review — approve

Scope: CI dependency digest bump (1 file, 1 line changed)

Summary

This is an automated Renovate digest update for the konflux-ci/.fullsend reusable GitHub Actions workflow. The change pins .github/workflows/fullsend.yaml to a newer commit SHA (ec2170614477fe) on the main branch of the same organization's .fullsend repository.

Analysis

Dimension Finding
Correctness Mechanical single-line SHA replacement. Both digests are valid 40-character hex strings. Workflow reference format and # main branch comment are preserved. No logic to break.
Security Commit-SHA pinning is the recommended practice for GitHub Actions supply-chain security. The referenced workflow belongs to the same konflux-ci organization. The pull_request_target trigger security model (base-branch execution, no PR code checkout) remains unchanged. Permissions block is unmodified.
Intent & coherence Appropriately scoped single-dependency update from the project's own Renovate bot (red-hat-konflux[bot]). Matches the chore(deps): conventional commit prefix.
Style / conventions Format matches the existing pinning convention (@<sha> # <branch>).
Documentation No documentation impact for a CI workflow digest update.
Cross-repo contracts No API, schema, or interface changes.

PR body injection check

PR body contains standard Renovate boilerplate. The embedded base64 renovate-debug comment decodes to expected metadata ({"createdInVer":"43.210.0-rpm",...}). No instruction injection detected.

No findings. Safe to merge.


Protected paths detected — this PR modifies files under one or more
protected paths. The review agent cannot approve PRs that touch these paths.
A human reviewer must approve this PR.

Protected files in this PR:

  • .github/workflows/fullsend.yaml

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/main/konflux-ci-.fullsend-digest branch from 7d46a77 to 15f5de0 Compare July 17, 2026 13:14
@red-hat-konflux red-hat-konflux Bot changed the title chore(deps): update konflux-ci/.fullsend digest to 14477fe chore(deps): update konflux-ci/.fullsend digest to 37b10e4 Jul 17, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

requires-manual-review Review requires human judgment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants