This is an automated email from the ASF dual-hosted git repository.
kou pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/arrow-erlang.git
The following commit(s) were added to refs/heads/main by this push:
new 1381c73 chore: bump zizmorcore/zizmor-action from 0.7.1 to 0.8.0
(#125)
1381c73 is described below
commit 1381c735c3edd849d9e5404fe1db1bb8cb6f6828
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
AuthorDate: Sun Nov 1 16:15:31 2026 +0900
chore: bump zizmorcore/zizmor-action from 0.7.1 to 0.8.0 (#125)
Bumps
[zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action)
from 0.7.1 to 0.8.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/zizmorcore/zizmor-action/releases";>zizmorcore/zizmor-action's
releases</a>.</em></p>
<blockquote>
<h2>v0.8.0</h2>
<p>The action now supports prereleases.</p>
<p>The default has not changed, but you can pass a prerelease version
of zizmor or <code>version: prerelease</code> to get whatever latest
prerelease the action knows about.</p>
<h2>What's Changed</h2>
<ul>
<li>Support prereleases by <a
href="https://github.com/woodruffw";><code>@woodruffw</code></a> in <a
href="https://redirect.github.com/zizmorcore/zizmor-action/pull/182";>zizmorcore/zizmor-action#182</a></li>
<li>Sync zizmor versions by <a
href="https://github.com/github-actions";><code>@github-actions</code></a>[bot]
in <a
href="https://redirect.github.com/zizmorcore/zizmor-action/pull/184";>zizmorcore/zizmor-action#184</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/zizmorcore/zizmor-action/compare/v0.7.1...v0.8.0";>https://github.com/zizmorcore/zizmor-action/compare/v0.7.1...v0.8.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/zizmorcore/zizmor-action/commit/53290badfa369cb0bf7ad16342cb62c2fa47ac7b";><code>53290ba</code></a>
Sync zizmor versions (<a
href="https://redirect.github.com/zizmorcore/zizmor-action/issues/184";>#184</a>)</li>
<li><a
href="https://github.com/zizmorcore/zizmor-action/commit/76da2ee26867f8fbf24b824abef9e444636f76c3";><code>76da2ee</code></a>
Support prereleases (<a
href="https://redirect.github.com/zizmorcore/zizmor-action/issues/182";>#182</a>)</li>
<li><a
href="https://github.com/zizmorcore/zizmor-action/commit/fb1d87ba4b2f888025015a269a94ad7e991f6a7b";><code>fb1d87b</code></a>
chore(deps): bump the github-actions group with 2 updates (<a
href="https://redirect.github.com/zizmorcore/zizmor-action/issues/180";>#180</a>)</li>
<li><a
href="https://github.com/zizmorcore/zizmor-action/commit/be3660124653b2533ddba057e8651888379e64e2";><code>be36601</code></a>
README: bump pins (<a
href="https://redirect.github.com/zizmorcore/zizmor-action/issues/179";>#179</a>)</li>
<li>See full diff in <a
href="https://github.com/zizmorcore/zizmor-action/compare/85b2b9fb8e3325e7a23d7d0a9d7ba5ae0f999e3e...53290badfa369cb0bf7ad16342cb62c2fa47ac7b";>compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot]
<49699333+dependabot[bot]@users.noreply.github.com>
---
.github/workflows/github-actions-check.yml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/.github/workflows/github-actions-check.yml
b/.github/workflows/github-actions-check.yml
index 460cb31..4200fea 100644
--- a/.github/workflows/github-actions-check.yml
+++ b/.github/workflows/github-actions-check.yml
@@ -54,6 +54,6 @@ jobs:
with:
persist-credentials: false
- - uses:
zizmorcore/zizmor-action@85b2b9fb8e3325e7a23d7d0a9d7ba5ae0f999e3e # v0.7.1
+ - uses:
zizmorcore/zizmor-action@53290badfa369cb0bf7ad16342cb62c2fa47ac7b # v0.8.0
with:
advanced-security: false
