chore(deps): bump CCBR/actions from 0.7 to 0.8 in the github-actions group across 1 directory

[dependabot]

Bumps the github-actions group with 1 update in the / directory: CCBR/actions.

Updates CCBR/actions from 0.7 to 0.8

Release notes

Sourced from CCBR/actions's releases.

actions 0.8.0

New

• Create ccbr_actions docker image and show how to use it in example workflows. (#190, @​kelly-sovacool, @​copilot)
  • Resolve GITHUB_WORKSPACE at runtime and register it as a safe Git directory in container jobs, working around actions/runner#2058 and actions/checkout#1169. (#214, @​kelly-sovacool, @​copilot)
  • Default composite actions to Python 3.14, matching the ccbr_actions container runtime. (#214, @​kelly-sovacool, @​copilot)
• Allow draft-release to handle first-release repos and fail fast on required files. (#179, @​kelly-sovacool, @​copilot)
• New action: review-pre-commit-pr to automatically review pre-commit.ci autoupdate PRs and approve them when only rev: version bumps are present, or request a human reviewer otherwise. (#189, @​kelly-sovacool, @​copilot)
  • Add a workflow_dispatch trigger to the review-pre-commit-pr example workflow to re-scan and review open pre-commit.ci autoupdate PRs on demand, and skip re-review of already-approved PRs. (#208, @​kelly-sovacool, @​copilot)
  • Handle case where a moving vX.Y tag replaces a more specific vX.Y.Z tag pointing at the same commit. (#219, @​kelly-sovacool, @​copilot)

Fixes

• Clarify ccbr-actions-version behavior for containerized actions and document the CCBR_ACTIONS_VERSION build argument used by build-docker. (#221, @​kelly-sovacool, @​copilot)
• Fixes for the draft-release action:
  • Fix draft-release to accept a manually provided version when conventional commits do not determine a version bump. (#213, @​kelly-sovacool, @​copilot)
  • Fix the draft-release example workflow docs (correct typo, Python 3.14, actions/checkout@v7) and rename examples/R-CMD-check.yaml to .yml so it appears in the published examples docs. (#215, @​kelly-sovacool)
  • Match the dev_header in draft-release changelogs case-insensitively so capitalized headers (e.g. ## Development version) are updated correctly. (#220, @​kelly-sovacool, @​copilot)
• Set up testing infrastructure for github actions and related fixes: (#216, @​kelly-sovacool, @​copilot)
  • Includes host/container integration coverage, dry-run support for release actions, actionlint validation, and contract tests for example workflows.
  • Fix container detection in draft-release, post-release, changed-files, mkdocs-mike, and review-pre-commit-pr: the CCBR_ACTIONS_DOCKER variable baked into the ccbr_actions image is not visible to the env context, so Python/R setup steps (including cache: pip, which fails in container jobs) were still running inside the container. Detection now happens in a shell step whose output gates the setup steps. (#216, @​kelly-sovacool)
  • Fix build-docker: the push_success output now reports false when pushing is disabled. (#216, @​kelly-sovacool, @​copilot)
  • Fix draft-release and post-release: the dry-run input rendered as lowercase true/false in the Python step, raising NameError. (#216, @​kelly-sovacool, @​copilot)
  • New dry-run input for mkdocs-mike to print the mike deploy command instead of deploying the docs website. (#216, @​kelly-sovacool)

actions 0.7.2

• New commands list-rulesets and copy-ruleset, plus a copy-ruleset action, for copying GitHub rulesets between repositories. (#183, @​kelly-sovacool, @​copilot)
• Fix build-docker action: fix bash suffix conditional so an empty suffix (and main) leaves the docker tag unchanged. (#199, @​kelly-sovacool)

actions 0.7.1

• Fix draft-release to preserve custom keys in CITATION.cff in R packages. (#180, @​kelly-sovacool)

Changelog

Sourced from CCBR/actions's changelog.

actions development version

• New action: review-post-release-pr to automatically review post-release cleanup PRs and approve them (approving pending workflow runs and enabling auto-merge) when the version file was actually bumped and every changed file's new content is a valid, field-specific bump matching an actual release tag, or request a human reviewer otherwise. Approvals are pinned to the validated commit and re-validated if the PR's head changes afterward (e.g. after an auto-format push). (#227, @​kelly-sovacool, @​copilot)
  • Require the PR's synchronize event to come from the bot (not just any pusher) before re-running the automatic review, and pass action inputs to the embedded Python scripts via env: instead of splicing ${{ inputs.* }} directly into the script text, in review-pre-commit-pr and review-post-release-pr. (#227, @​kelly-sovacool, @​copilot)
• Fix review-pre-commit-pr to post a comment instead of requesting changes when a pre-commit.ci autoupdate PR needs human review. (#226, @​kelly-sovacool, @​copilot)

actions 0.8.0

New

• Create ccbr_actions docker image and show how to use it in example workflows. (#190, @​kelly-sovacool, @​copilot)
  • Resolve GITHUB_WORKSPACE at runtime and register it as a safe Git directory in container jobs, working around actions/runner#2058 and actions/checkout#1169. (#214, @​kelly-sovacool, @​copilot)
  • Default composite actions to Python 3.14, matching the ccbr_actions container runtime. (#214, @​kelly-sovacool, @​copilot)
• Allow draft-release to handle first-release repos and fail fast on required files. (#179, @​kelly-sovacool, @​copilot)
• New action: review-pre-commit-pr to automatically review pre-commit.ci autoupdate PRs and approve them when only rev: version bumps are present, or request a human reviewer otherwise. (#189, @​kelly-sovacool, @​copilot)
  • Add a workflow_dispatch trigger to the review-pre-commit-pr example workflow to re-scan and review open pre-commit.ci autoupdate PRs on demand, and skip re-review of already-approved PRs. (#208, @​kelly-sovacool, @​copilot)
  • Handle case where a moving vX.Y tag replaces a more specific vX.Y.Z tag pointing at the same commit. (#219, @​kelly-sovacool, @​copilot)

Fixes

• Clarify ccbr-actions-version behavior for containerized actions and document the CCBR_ACTIONS_VERSION build argument used by build-docker. (#221, @​kelly-sovacool, @​copilot)
• Fixes for the draft-release action:
  • Fix draft-release to accept a manually provided version when conventional commits do not determine a version bump. (#213, @​kelly-sovacool, @​copilot)
  • Fix the draft-release example workflow docs (correct typo, Python 3.14, actions/checkout@v7) and rename examples/R-CMD-check.yaml to .yml so it appears in the published examples docs. (#215, @​kelly-sovacool)
  • Match the dev_header in draft-release changelogs case-insensitively so capitalized headers (e.g. ## Development version) are updated correctly. (#220, @​kelly-sovacool, @​copilot)
• Set up testing infrastructure for github actions and related fixes: (#216, @​kelly-sovacool, @​copilot)
  • Includes host/container integration coverage, dry-run support for release actions, actionlint validation, and contract tests for example workflows.
  • Fix container detection in draft-release, post-release, changed-files, mkdocs-mike, and review-pre-commit-pr: the CCBR_ACTIONS_DOCKER variable baked into the ccbr_actions image is not visible to the env context, so Python/R setup steps (including cache: pip, which fails in container jobs) were still running inside the container. Detection now happens in a shell step whose output gates the setup steps. (#216, @​kelly-sovacool)
  • Fix build-docker: the push_success output now reports false when pushing is disabled. (#216, @​kelly-sovacool, @​copilot)
  • Fix draft-release and post-release: the dry-run input rendered as lowercase true/false in the Python step, raising NameError. (#216, @​kelly-sovacool, @​copilot)
  • New dry-run input for mkdocs-mike to print the mike deploy command instead of deploying the docs website. (#216, @​kelly-sovacool)

actions 0.7.2

• New commands list-rulesets and copy-ruleset, plus a copy-ruleset action, for copying GitHub rulesets between repositories. (#183, @​kelly-sovacool, @​copilot)
• Fix build-docker action: fix bash suffix conditional so an empty suffix (and main) leaves the docker tag unchanged. (#199, @​kelly-sovacool)

actions 0.7.1

• Fix draft-release to preserve custom keys in CITATION.cff in R packages. (#180, @​kelly-sovacool)

actions 0.7.0

• Add R package-aware release handling to draft-release and post-release. (#170, @​kelly-sovacool, @​copilot)
• Update example workflows to limit concurrency which saves runtime. (#172, @​kelly-sovacool)
• Bump actions versions.
• Minor documentation improvements.
• Use the CCBR-bot as the committer in auto-format so changes will trigger other workflows. (#171, @​kelly-sovacool)

... (truncated)

Commits

• 5026def chore: 🤖 prepare release v0.8.0
• cd5af27 docs(readme): show use-example cli only (#222)
• a87fb1b chore: Merge branch 'main' of github.com:CCBR/actions
• fa108e4 docs: drop cli examples from readme
• 4b80218 docs: clarify ccbr-actions-version in containers (#221)
• cb80c7b test: remove hardcoded release version
• c2cc6d9 ci: use main
• 6625594 fix(release): match development version header case-insensitively (#220)
• dc1fb6a chore: bump CCBR Tools to v0.7.1
• ea9c355 docs: create changelog sections
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions