Skip to content

ci: bump release-drafter/release-drafter from 6 to 7#2

Merged
TMHSDigital merged 1 commit intomainfrom
dependabot/github_actions/release-drafter/release-drafter-7
Mar 29, 2026
Merged

ci: bump release-drafter/release-drafter from 6 to 7#2
TMHSDigital merged 1 commit intomainfrom
dependabot/github_actions/release-drafter/release-drafter-7

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Mar 29, 2026

Bumps release-drafter/release-drafter from 6 to 7.

Release notes

Sourced from release-drafter/release-drafter's releases.

v7.0.0

What's Changed

Breaking

Bug Fixes

Maintenance

Documentation

Other changes

Dependency Updates

Full Changelog: release-drafter/release-drafter@v6.4.0...v7.0.0

v6.4.0

What's Changed

New

Maintenance

... (truncated)

Commits
  • 139054a chore: release v7.1.1
  • 114efa7 fix: remove disable-releaser and disable-autolabeler from action.yaml (#1564)
  • b23b6d2 test: add semantic prefix replacer example
  • 44a942e chore: release v7.1.0
  • f1f40a0 docs: update README with pull_request_target example (#1561)
  • ebb69bb fix: support pull_request_target event in autolabeler (#1560)
  • bddbd54 ci: make sure PRs have a type label (#1557)
  • 4a66170 fix: empty template when prs all are excluded by labels (#1429)
  • 7431882 feat: filter releases by semver range (#1445)
  • 5a8b0d3 ci: restore CodeQL category lost when matrix was removed
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [release-drafter/release-drafter](https://github.com/release-drafter/release-drafter) from 6 to 7.
- [Release notes](https://github.com/release-drafter/release-drafter/releases)
- [Commits](release-drafter/release-drafter@v6...v7)

---
updated-dependencies:
- dependency-name: release-drafter/release-drafter
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot bot commented on behalf of github Mar 29, 2026

Labels

The following labels could not be found: ci. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot bot requested a review from TMHSDigital as a code owner March 29, 2026 21:19
@github-actions github-actions bot added the ci label Mar 29, 2026
@github-actions
Copy link
Copy Markdown

Dependency Review

The following issues were found:
  • ✅ 0 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ⚠️ 1 package(s) with unknown licenses.
See the Details below.

Snapshot Warnings

⚠️: No snapshots were found for the head SHA db25400.
Ensure that dependencies are being submitted on PR branches and consider enabling retry-on-snapshot-warnings. See the documentation for more information and troubleshooting advice.

License Issues

.github/workflows/release-drafter.yml

PackageVersionLicenseIssue Type
release-drafter/release-drafter7.*.*NullUnknown License

OpenSSF Scorecard

PackageVersionScoreDetails
actions/release-drafter/release-drafter 7.*.* 🟢 4.4
Details
CheckScoreReason
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Code-Review🟢 3Found 8/21 approved changesets -- score normalized to 3
Packaging⚠️ -1packaging workflow not detected
Maintained🟢 1030 commit(s) and 25 issue activity found in the last 90 days -- score normalized to 10
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy⚠️ 0security policy file not detected
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
SAST⚠️ -1internal error: internal error: Client.Checks.ListCheckRunsForRef: error during graphqlHandler.setupCheckRuns: non-200 OK status code: 502 Bad Gateway body: "\r\n<title>502 Bad Gateway</title>\r\n\r\n

502 Bad Gateway

\r\n
nginx\r\n\r\n\r\n"

Scanned Files

  • .github/workflows/release-drafter.yml

@TMHSDigital TMHSDigital merged commit 8602fea into main Mar 29, 2026
6 of 7 checks passed
@dependabot dependabot bot deleted the dependabot/github_actions/release-drafter/release-drafter-7 branch March 29, 2026 21:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant