From 79950c53f0acd144c54f6b227a97c1cfe168fed6 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 12 Aug 2026 03:34:29 +0000 Subject: [PATCH 1/2] MESH-2092 Bump the major group across 1 directory with 2 updates Bumps the major group with 2 updates in the / directory: [slackapi/slack-github-action](https://github.com/slackapi/slack-github-action) and [actions/setup-python](https://github.com/actions/setup-python). Updates `slackapi/slack-github-action` from 3.0.5 to 4.0.0 - [Release notes](https://github.com/slackapi/slack-github-action/releases) - [Changelog](https://github.com/slackapi/slack-github-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/slackapi/slack-github-action/compare/0d95c9a7becc1e6e297d76df9bc735c44f4cbcbc...dcb1066f776dd043e64d0e8ba94ca15cc7e1875d) Updates `actions/setup-python` from 6.3.0 to 7.0.0 - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](https://github.com/actions/setup-python/compare/ece7cb06caefa5fff74198d8649806c4678c61a1...5fda3b95a4ea91299a34e894583c3862153e4b97) --- updated-dependencies: - dependency-name: actions/setup-python dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: major - dependency-name: slackapi/slack-github-action dependency-version: 4.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: major ... Signed-off-by: dependabot[bot] --- .github/workflows/dependabot-auto-merge.yaml | 2 +- .github/workflows/merge-develop.yml | 4 ++-- .github/workflows/pull-request.yml | 8 ++++---- 3 files changed, 7 insertions(+), 7 deletions(-) diff --git a/.github/workflows/dependabot-auto-merge.yaml b/.github/workflows/dependabot-auto-merge.yaml index efa4115..2f8d544 100644 --- a/.github/workflows/dependabot-auto-merge.yaml +++ b/.github/workflows/dependabot-auto-merge.yaml @@ -68,7 +68,7 @@ jobs: - name: Notify Slack of manual review required if: github.event.action == 'opened' && steps.metadata.outputs.update-type != 'version-update:semver-patch' && steps.metadata.outputs.update-type != 'version-update:semver-minor' - uses: slackapi/slack-github-action@0d95c9a7becc1e6e297d76df9bc735c44f4cbcbc # v3.0.5 + uses: slackapi/slack-github-action@dcb1066f776dd043e64d0e8ba94ca15cc7e1875d # v4.0.0 with: webhook: ${{ secrets.DEPENDABOT_SLACK_WEBHOOK_URL }} webhook-type: incoming-webhook diff --git a/.github/workflows/merge-develop.yml b/.github/workflows/merge-develop.yml index dd7c734..0652d64 100644 --- a/.github/workflows/merge-develop.yml +++ b/.github/workflows/merge-develop.yml @@ -19,7 +19,7 @@ jobs: fetch-depth: 0 - name: setup python - uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0 + uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 with: python-version-file: "pyproject.toml" @@ -114,7 +114,7 @@ jobs: find . -type f | xargs chmod g+w - name: setup python - uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.2.06 + uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0.2.07.0.0 with: python-version-file: "pyproject.toml" diff --git a/.github/workflows/pull-request.yml b/.github/workflows/pull-request.yml index 6eae776..de01f7a 100644 --- a/.github/workflows/pull-request.yml +++ b/.github/workflows/pull-request.yml @@ -46,7 +46,7 @@ jobs: PR_BRANCH: ${{ github.head_ref }} - name: setup python - uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.2.06 + uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0.2.07.0.0 with: python-version-file: "pyproject.toml" @@ -165,7 +165,7 @@ jobs: PR_BRANCH: ${{ github.head_ref }} - name: setup python - uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.2.06 + uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0.2.07.0.0 with: python-version-file: "pyproject.toml" @@ -256,7 +256,7 @@ jobs: PR_BRANCH: ${{ github.head_ref }} - name: setup python - uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.2.06 + uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0.2.07.0.0 with: python-version-file: "pyproject.toml" @@ -304,7 +304,7 @@ jobs: if: ${{ always() && github.repository == 'NHSDigital/mesh-sandbox' && github.actor== 'dependabot[bot]' && contains(needs.*.result, 'failure') }} steps: - name: Slack Notification - uses: slackapi/slack-github-action@0d95c9a7becc1e6e297d76df9bc735c44f4cbcbc # v3.0.5 + uses: slackapi/slack-github-action@dcb1066f776dd043e64d0e8ba94ca15cc7e1875d # v4.0.0 with: webhook: ${{ secrets.DEPENDABOT_SLACK_WEBHOOK_URL }} webhook-type: incoming-webhook From e6990e4d1be2bc3a37293a7befe957a96de62256 Mon Sep 17 00:00:00 2001 From: johnwilliams57-nhs <108133809+johnwilliams57-nhs@users.noreply.github.com> Date: Wed, 12 Aug 2026 08:39:35 +0100 Subject: [PATCH 2/2] mesh-2389: fixing comments --- .github/workflows/merge-develop.yml | 2 +- .github/workflows/pull-request.yml | 6 +++--- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/merge-develop.yml b/.github/workflows/merge-develop.yml index 0652d64..5cd4fc3 100644 --- a/.github/workflows/merge-develop.yml +++ b/.github/workflows/merge-develop.yml @@ -114,7 +114,7 @@ jobs: find . -type f | xargs chmod g+w - name: setup python - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0.2.07.0.0 + uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 with: python-version-file: "pyproject.toml" diff --git a/.github/workflows/pull-request.yml b/.github/workflows/pull-request.yml index de01f7a..879c4ae 100644 --- a/.github/workflows/pull-request.yml +++ b/.github/workflows/pull-request.yml @@ -46,7 +46,7 @@ jobs: PR_BRANCH: ${{ github.head_ref }} - name: setup python - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0.2.07.0.0 + uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 with: python-version-file: "pyproject.toml" @@ -165,7 +165,7 @@ jobs: PR_BRANCH: ${{ github.head_ref }} - name: setup python - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0.2.07.0.0 + uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 with: python-version-file: "pyproject.toml" @@ -256,7 +256,7 @@ jobs: PR_BRANCH: ${{ github.head_ref }} - name: setup python - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0.2.07.0.0 + uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 with: python-version-file: "pyproject.toml"