Skip to content

fix(deps): bump devantler-tech/.github/.github/workflows/publish-manifests.yaml from 20.1.17 to 21.0.1 - #902

Merged
devantler merged 2 commits into
mainfrom
dependabot/github_actions/devantler-tech/dot-github/dot-github/workflows/publish-manifests.yaml-21.0.1
Nov 11, 2026
Merged

devantler merged 2 commits into
mainfrom
dependabot/github_actions/devantler-tech/dot-github/dot-github/workflows/publish-manifests.yaml-21.0.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 11, 2026

Copy link
Copy Markdown
Contributor

Bumps devantler-tech/.github/.github/workflows/publish-manifests.yaml from 20.1.17 to 21.0.1.

Release notes

Sourced from devantler-tech/.github/.github/workflows/publish-manifests.yaml's releases.

v21.0.1

21.0.1 (2026-11-11)

Bug Fixes

  • rulesets: let the next platform merge group validate early (#893) (933b536), closes #892

v21.0.0

21.0.0 (2026-11-11)

Features

  • run-dotnet-tests: provision .NET 11 and retire the end-of-life .NET 9 SDK (#895) (a27e1b3)

BREAKING CHANGES

  • run-dotnet-tests: the .NET 9 SDK and runtime are no longer installed. No caller in the organisation targets net9.0.

Co-authored-by: Claude Fable 5.2 noreply@anthropic.com

v20.1.20

20.1.20 (2026-11-10)

Bug Fixes

  • template-sync: fail the run when the template pull fails (#891) (8d40663), closes #887

v20.1.19

20.1.19 (2026-11-10)

Bug Fixes

  • deps: bump devantler-tech/.github/.github/workflows/publish-manifests.yaml from 20.1.12 to 20.1.17 (#889) (0042076)

v20.1.18

20.1.18 (2026-11-10)

Bug Fixes

  • deps: bump devantler-tech/.github/.github/workflows/apply-signed-fixes.yaml (#888) (9ba5734)
Commits
  • 933b536 fix(rulesets): let the next platform merge group validate early (#893)
  • a27e1b3 feat(run-dotnet-tests)!: provision .NET 11 and retire the end-of-life .NET 9 ...
  • 980f003 docs(agents): link the consumer census from the blast-radius rule (#894)
  • 8d40663 fix(template-sync): fail the run when the template pull fails (#891)
  • 0042076 fix(deps): bump devantler-tech/.github/.github/workflows/publish-manifests.ya...
  • 9ba5734 fix(deps): bump devantler-tech/.github/.github/workflows/apply-signed-fixes.y...
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

…fests.yaml

Bumps [devantler-tech/.github/.github/workflows/publish-manifests.yaml](https://github.com/devantler-tech/.github) from 20.1.17 to 21.0.1.
- [Release notes](https://github.com/devantler-tech/.github/releases)
- [Commits](1a0eb6f...933b536)

---
updated-dependencies:
- dependency-name: devantler-tech/.github/.github/workflows/publish-manifests.yaml
  dependency-version: 21.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@botantler-1
botantler-1 Bot enabled auto-merge (squash) November 11, 2026 08:22
@github-code-quality

github-code-quality Bot commented Nov 11, 2026 •

Copy link
Copy Markdown

Code coverage overview

Languages: Go

Go / code-coverage/test

main 7f20c28 dependabot/github_ac... 419a0db +/-
50% 50% 0%

Go / code-coverage/go

main 7f20c28 dependabot/github_ac... 419a0db +/-
50% 100% +50%
View coverage of the 1 most impacted file.
File main 7f20c28 dependabot/github_ac... 419a0db +/-
value.go 0% 100% +100%

ℹ️ Calculations represent line coverage. Results may change as calculations are updated.


Updated November 11, 2026 12:25 UTC

The platform github-config OCIRepository already accepts the
933b536 publish-manifests identity (read back live), and the publisher
workflow and helper blobs are unchanged, so only the approved revision
moves.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@devantler

Copy link
Copy Markdown
Contributor

🤖 Generated by the Agentic Engineer

Why this stalled, and what I changed. Dependabot moved the manifests publisher to 933b536 (v21.0.1). That revision is part of the signing identity, so check-manifests-caller.sh refused it until the recorded approved revision moved too. Both test-publish-contracts failures come from that one check.

  • Consumer approval checked first. The platform github-config OCIRepository already accepts publish-manifests.yaml@933b536… and is Ready in the live cluster. I read that back before moving anything.
  • Content unchanged. The workflow file and both helper scripts at 933b536 have the same reviewed blobs as before, so I moved only approved_publisher_revision (commit 419a0db). The reviewed blob hashes stay as they were.
  • Release review, v20.1.17 → v21.0.1 (6 commits). The breaking change is run-dotnet-tests moving to .NET 11, and this caller does not use it. Nothing else touches publish-manifests or its helpers, so this repo has nothing else to adopt.
  • Local run. test-publish-manifests-promotion.sh and check-manifests-caller.sh both pass at the new head.

I set this PR back to draft, with auto-merge off, until a review lands on the new head.

@devantler

Copy link
Copy Markdown
Contributor

🤖 Generated by the Agentic Engineer

@codex review

@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Nov 11, 2026 •

Copy link
Copy Markdown
Codex Review Summary: ✅ Completed

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ✅ Completed 2026-11-11T12:23:52.558707Z 419a0db Manual request
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@chatgpt-codex-connector

Copy link
Copy Markdown

Codex Review: Didn't find any major issues. Already looking forward to the next diff.

Reviewed commit: 419a0dbb2d

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

@devantler

Copy link
Copy Markdown
Contributor

🤖 Generated by the Agentic Engineer

Ready at 419a0dbb. All required checks pass (175 passed, 55 skipped). Codex reviewed this head and found nothing. No review threads are open. The adaptation and release review are recorded above. I am taking this out of draft and merging it, pinned to this head.

@devantler
devantler marked this pull request as ready for review November 11, 2026 12:32
@devantler
devantler merged commit ade8174 into main Nov 11, 2026
236 checks passed
@devantler
devantler deleted the dependabot/github_actions/devantler-tech/dot-github/dot-github/workflows/publish-manifests.yaml-21.0.1 branch November 11, 2026 12:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant