Skip to content

chore(deps): update dependency opendefensecloud/dev-kit to v3 - #57

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/opendefensecloud-dev-kit-3.x
Open

renovate[bot] wants to merge 1 commit into
mainfrom
renovate/opendefensecloud-dev-kit-3.x

Conversation

@renovate

@renovate renovate Bot commented Oct 29, 2026 •

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change
opendefensecloud/dev-kit major v1.0.15 → v3.1.1
opendefensecloud/dev-kit action major v1.0.15 → v3.2.0

Release Notes

opendefensecloud/dev-kit

v3.1.1

Compare Source

Changes

v3.1.0

Compare Source

Changes

v3.0.4

Compare Source

Changes

v3.0.3

Compare Source

Changes

  • fix(issues-add-to-project): request no token permissions @​cbrgm (#​53)

v3.0.2

Compare Source

Changes

v3.0.1

Compare Source

Changes

v3.0.0

Compare Source

Migrating from v2

v3.0.0 is breaking: the governance workflows move into dev-kit as reusable workflows, and make repo-settings no longer installs update-action-pins.yml. In each consuming repository, in order:

  1. Bump all three dev-kit pins to v3.0.0 — DEV_KIT_VERSION in the Makefile, the flake.nix input, and setup-nix in the workflows. With renovate-config they arrive together in one dev-kit PR; when it changes flake.nix, commit nix flake update dev-kit on the branch (its PR body says so).
  2. Replace the local copies of update-action-pins, conventional-commits, osv-scanner, issues-add-labels and issues-add-to-project with the stubs from the README's "Governance workflows" section. scorecard stays a standalone workflow.
  3. Update REPO_STATUS_CHECKS to the names reusable workflows report, <stub job> / <called job> (e.g. update-action-pins / Check action pins, osv-scanner / scan-pr / osv-scan), then have a repo admin run make repo-settings. Do both in the same change, or the old names stay required and never report.
  4. Add .common.mk-configs to .gitignore — it records which shared configs common.mk fetched.

Optional:

  • Shared formatting is opt-in: run make fmt-all once, commit, then set DEV_KIT_FORMATTING := on before -include common.mk.
  • renovate-dev-kit-lock commits the relocked flake.lock to Renovate's dev-kit PR. It needs the dev-kit-bot app and the DEV_KIT_BOT_APP_* org secrets on the repository (currently solution-arsenal only).
  • Pin runs-on in your own workflows to ubuntu-24.04, as dev-kit's reusable workflows now do.

No stub triggers on merge_group; see the README before enabling a merge queue.

Changes

v2.2.0

Compare Source

Changes

v2.1.0

Compare Source

Changes

v2.0.0

Compare Source

Changes

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot force-pushed the renovate/opendefensecloud-dev-kit-3.x branch from 2b94a81 to b6da42a Compare October 30, 2026 14:12
@renovate
renovate Bot force-pushed the renovate/opendefensecloud-dev-kit-3.x branch from b6da42a to 478adaa Compare October 30, 2026 15:03
@renovate
renovate Bot requested a review from a team as a code owner October 30, 2026 15:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants