chore(deps): bump CCBR/actions from 0.7 to 0.8 in the github-actions group across 1 directory by dependabot[bot] · Pull Request #156 · CCBR/ASPEN

dependabot · 2026-10-01T16:20:16Z

Bumps the github-actions group with 1 update in the / directory: CCBR/actions.

Updates CCBR/actions from 0.7 to 0.8

Release notes

actions 0.8.0

New

Create ccbr_actions docker image and show how to use it in example workflows. (#190, @kelly-sovacool, @copilot)

Resolve GITHUB_WORKSPACE at runtime and register it as a safe Git directory in container jobs, working around actions/runner#2058 and actions/checkout#1169. (#214, @kelly-sovacool, @copilot)

Default composite actions to Python 3.14, matching the ccbr_actions container runtime. (#214, @kelly-sovacool, @copilot)

Allow draft-release to handle first-release repos and fail fast on required files. (#179, @kelly-sovacool, @copilot)

New action: review-pre-commit-pr to automatically review pre-commit.ci autoupdate PRs and approve them when only rev: version bumps are present, or request a human reviewer otherwise. (#189, @kelly-sovacool, @copilot)

Add a workflow_dispatch trigger to the review-pre-commit-pr example workflow to re-scan and review open pre-commit.ci autoupdate PRs on demand, and skip re-review of already-approved PRs. (#208, @kelly-sovacool, @copilot)

Handle case where a moving vX.Y tag replaces a more specific vX.Y.Z tag pointing at the same commit. (#219, @kelly-sovacool, @copilot)

Fixes

Clarify ccbr-actions-version behavior for containerized actions and document the CCBR_ACTIONS_VERSION build argument used by build-docker. (#221, @kelly-sovacool, @copilot)

Fixes for the draft-release action:

Fix draft-release to accept a manually provided version when conventional commits do not determine a version bump. (#213, @kelly-sovacool, @copilot)

Fix the draft-release example workflow docs (correct typo, Python 3.14, actions/checkout@v7) and rename examples/R-CMD-check.yaml to .yml so it appears in the published examples docs. (#215, @kelly-sovacool)

Match the dev_header in draft-release changelogs case-insensitively so capitalized headers (e.g. ## Development version) are updated correctly. (#220, @kelly-sovacool, @copilot)

Set up testing infrastructure for github actions and related fixes: (#216, @kelly-sovacool, @copilot)

Includes host/container integration coverage, dry-run support for release actions, actionlint validation, and contract tests for example workflows.

Fix container detection in draft-release, post-release, changed-files, mkdocs-mike, and review-pre-commit-pr: the CCBR_ACTIONS_DOCKER variable baked into the ccbr_actions image is not visible to the env context, so Python/R setup steps (including cache: pip, which fails in container jobs) were still running inside the container. Detection now happens in a shell step whose output gates the setup steps. (#216, @kelly-sovacool)

Fix build-docker: the push_success output now reports false when pushing is disabled. (#216, @kelly-sovacool, @copilot)

Fix draft-release and post-release: the dry-run input rendered as lowercase true/false in the Python step, raising NameError. (#216, @kelly-sovacool, @copilot)

New dry-run input for mkdocs-mike to print the mike deploy command instead of deploying the docs website. (#216, @kelly-sovacool)

actions 0.7.2

New commands list-rulesets and copy-ruleset, plus a copy-ruleset action, for copying GitHub rulesets between repositories. (#183, @kelly-sovacool, @copilot)

Fix build-docker action: fix bash suffix conditional so an empty suffix (and main) leaves the docker tag unchanged. (#199, @kelly-sovacool)

actions 0.7.1

Fix draft-release to preserve custom keys in CITATION.cff in R packages. (#180, @kelly-sovacool)

Changelog

Sourced from CCBR/actions's changelog.

actions development version

New action: review-post-release-pr to automatically review post-release cleanup PRs and approve them (approving pending workflow runs and enabling auto-merge) when the version file was actually bumped and every changed file's new content is a valid, field-specific bump matching an actual release tag, or request a human reviewer otherwise. Approvals are pinned to the validated commit and re-validated if the PR's head changes afterward (e.g. after an auto-format push). (#227, @kelly-sovacool, @copilot)

Require the PR's synchronize event to come from the bot (not just any pusher) before re-running the automatic review, and pass action inputs to the embedded Python scripts via env: instead of splicing ${{ inputs.* }} directly into the script text, in review-pre-commit-pr and review-post-release-pr. (#227, @kelly-sovacool, @copilot)

Fix review-pre-commit-pr to post a comment instead of requesting changes when a pre-commit.ci autoupdate PR needs human review. (#226, @kelly-sovacool, @copilot)

actions 0.8.0

New

Create ccbr_actions docker image and show how to use it in example workflows. (#190, @kelly-sovacool, @copilot)

Resolve GITHUB_WORKSPACE at runtime and register it as a safe Git directory in container jobs, working around actions/runner#2058 and actions/checkout#1169. (#214, @kelly-sovacool, @copilot)

Default composite actions to Python 3.14, matching the ccbr_actions container runtime. (#214, @kelly-sovacool, @copilot)

Allow draft-release to handle first-release repos and fail fast on required files. (#179, @kelly-sovacool, @copilot)

New action: review-pre-commit-pr to automatically review pre-commit.ci autoupdate PRs and approve them when only rev: version bumps are present, or request a human reviewer otherwise. (#189, @kelly-sovacool, @copilot)

Add a workflow_dispatch trigger to the review-pre-commit-pr example workflow to re-scan and review open pre-commit.ci autoupdate PRs on demand, and skip re-review of already-approved PRs. (#208, @kelly-sovacool, @copilot)

Handle case where a moving vX.Y tag replaces a more specific vX.Y.Z tag pointing at the same commit. (#219, @kelly-sovacool, @copilot)

Fixes

Clarify ccbr-actions-version behavior for containerized actions and document the CCBR_ACTIONS_VERSION build argument used by build-docker. (#221, @kelly-sovacool, @copilot)

Fixes for the draft-release action:

Fix draft-release to accept a manually provided version when conventional commits do not determine a version bump. (#213, @kelly-sovacool, @copilot)

Fix the draft-release example workflow docs (correct typo, Python 3.14, actions/checkout@v7) and rename examples/R-CMD-check.yaml to .yml so it appears in the published examples docs. (#215, @kelly-sovacool)

Match the dev_header in draft-release changelogs case-insensitively so capitalized headers (e.g. ## Development version) are updated correctly. (#220, @kelly-sovacool, @copilot)

Set up testing infrastructure for github actions and related fixes: (#216, @kelly-sovacool, @copilot)

Includes host/container integration coverage, dry-run support for release actions, actionlint validation, and contract tests for example workflows.

Fix container detection in draft-release, post-release, changed-files, mkdocs-mike, and review-pre-commit-pr: the CCBR_ACTIONS_DOCKER variable baked into the ccbr_actions image is not visible to the env context, so Python/R setup steps (including cache: pip, which fails in container jobs) were still running inside the container. Detection now happens in a shell step whose output gates the setup steps. (#216, @kelly-sovacool)

Fix build-docker: the push_success output now reports false when pushing is disabled. (#216, @kelly-sovacool, @copilot)

Fix draft-release and post-release: the dry-run input rendered as lowercase true/false in the Python step, raising NameError. (#216, @kelly-sovacool, @copilot)

New dry-run input for mkdocs-mike to print the mike deploy command instead of deploying the docs website. (#216, @kelly-sovacool)

actions 0.7.2

New commands list-rulesets and copy-ruleset, plus a copy-ruleset action, for copying GitHub rulesets between repositories. (#183, @kelly-sovacool, @copilot)

Fix build-docker action: fix bash suffix conditional so an empty suffix (and main) leaves the docker tag unchanged. (#199, @kelly-sovacool)

actions 0.7.1

Fix draft-release to preserve custom keys in CITATION.cff in R packages. (#180, @kelly-sovacool)

actions 0.7.0

Add R package-aware release handling to draft-release and post-release. (#170, @kelly-sovacool, @copilot)

Update example workflows to limit concurrency which saves runtime. (#172, @kelly-sovacool)

Bump actions versions.

Minor documentation improvements.

Use the CCBR-bot as the committer in auto-format so changes will trigger other workflows. (#171, @kelly-sovacool)

... (truncated)

Commits

5026def chore: 🤖 prepare release v0.8.0
cd5af27 docs(readme): show use-example cli only (#222)
a87fb1b chore: Merge branch 'main' of github.com:CCBR/actions
fa108e4 docs: drop cli examples from readme
4b80218 docs: clarify ccbr-actions-version in containers (#221)
cb80c7b test: remove hardcoded release version
c2cc6d9 ci: use main
6625594 fix(release): match development version header case-insensitively (#220)
dc1fb6a chore: bump CCBR Tools to v0.7.1
ea9c355 docs: create changelog sections
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the github-actions group with 1 update in the / directory: [CCBR/actions](https://github.com/ccbr/actions). Updates `CCBR/actions` from 0.7 to 0.8 - [Release notes](https://github.com/ccbr/actions/releases) - [Changelog](https://github.com/CCBR/actions/blob/main/CHANGELOG.md) - [Commits](CCBR/actions@v0.7...v0.8) --- updated-dependencies: - dependency-name: CCBR/actions dependency-version: '0.8' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com>

for more information, see https://pre-commit.ci

dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Oct 1, 2026

github-actions Bot added the ASPEN RepoName label Oct 1, 2026

[pre-commit.ci] auto fixes from pre-commit.com hooks

1f72bca

for more information, see https://pre-commit.ci

Navigation Menu

chore(deps): bump CCBR/actions from 0.7 to 0.8 in the github-actions group across 1 directory - #156

chore(deps): bump CCBR/actions from 0.7 to 0.8 in the github-actions group across 1 directory#156
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/github_actions/github-actions-3c7abc3776

dependabot Bot commented on behalf of github Oct 1, 2026

Uh oh!

This branch has not been deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 1, 2026

actions 0.8.0

New

Fixes

actions 0.7.2

actions 0.7.1

actions development version

actions 0.8.0

New

Fixes

actions 0.7.2

actions 0.7.1

actions 0.7.0

Uh oh!

This branch has not been deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants