ci(actions): Pin dependencies - autoclosed #2

Closed

renovate wants to merge 1 commit from renovate/pin-dependencies into main

pull from: renovate/pin-dependencies

merge into: webgrip:main

webgrip:main

webgrip:feat/staging-access

Conversation 0 Commits 1 Files changed 4 +8 -8

renovate commented 2026-09-05 13:41:00 +00:00

Member

Copy link

This PR contains the following updates:

Package	Type	Update	Change	Released	Age (d)
actions/checkout	action	pin	v5 → v5.1.0	—	—
hashicorp/terraform	required_version	pin	>= 1.12.0 → 1.16.3	—	—

📦 Grouped update: confirm the group is operationally coherent before merging.

Merge Confidence badges are included where supported — low or neutral confidence warrants a manual impact check before merge.

Released is the upstream publish time. — means this datasource reports no release timestamp — normal for ghcr.io, quay.io and private/proxy registries — so minimumReleaseAge cannot hold the update back and it is eligible as soon as checks pass. A real date means the soak is enforced: add this update type's minimumReleaseAge to Released to get the eligibility moment.

Add the preset :preserveSemverRanges to your config if you don't want to pin your dependencies.

---

Configuration

📅 Schedule: (in timezone Europe/Amsterdam)

• Branch creation
  • "after 3am and before 7am every weekday,every weekend"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.

This PR contains the following updates: | Package | Type | Update | Change | Released | Age (d) | |---|---|---|---|---|---| | [actions/checkout](https://github.com/actions/checkout) | action | pin | `v5` → `v5.1.0` | — | — | | [hashicorp/terraform](https://github.com/hashicorp/terraform) | required_version | pin | `>= 1.12.0` → `1.16.3` | — | — | 📦 **Grouped update**: confirm the group is operationally coherent before merging. Merge Confidence badges are included where supported — low or neutral confidence warrants a manual impact check before merge. `Released` is the upstream publish time. `—` means this datasource reports no release timestamp — normal for ghcr.io, quay.io and private/proxy registries — so `minimumReleaseAge` cannot hold the update back and it is eligible as soon as checks pass. A real date means the soak is enforced: add this update type's `minimumReleaseAge` to `Released` to get the eligibility moment. Add the preset `:preserveSemverRanges` to your config if you don't want to pin your dependencies. --- ### Configuration 📅 **Schedule**: (in timezone Europe/Amsterdam) - Branch creation - "after 3am and before 7am every weekday,every weekend" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNzEuMyIsInVwZGF0ZWRJblZlciI6IjQzLjI3MS4zIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJnaXRodWItYWN0aW9ucyIsInJlbm92YXRlIl19-->

renovate added 1 commit 2026-09-05 13:41:00 +00:00

ci(actions): Pin dependencies a9954f1b72

renovate requested review from ryangr0 2026-09-05 13:41:00 +00:00

ryangr0 was assigned by renovate 2026-09-05 13:41:02 +00:00

renovate force-pushed renovate/pin-dependencies from a9954f1b72 to c6acd7a861 2026-09-10 01:40:29 +00:00 Compare

renovate force-pushed renovate/pin-dependencies from c6acd7a861 to 772165b914 2026-09-11 22:40:50 +00:00 Compare

renovate force-pushed renovate/pin-dependencies from 772165b914 to e466e08b88 2026-09-17 01:40:14 +00:00 Compare

renovate force-pushed renovate/pin-dependencies from e466e08b88 to ad1f69863e 2026-09-18 01:40:30 +00:00 Compare

renovate changed title from ci(actions): Pin dependencies to ci(actions): Pin dependencies - autoclosed 2026-09-18 11:38:02 +00:00

renovate closed this pull request 2026-09-18 11:38:02 +00:00

Some checks failed

Hide all checks

[Workflow] On Source Change / DNS Preview (push) Successful in 10s

Details

[Workflow] On Source Change / Static Analysis (push) Successful in 13s

Details

[Workflow] On Source Change / Plan (push) Failing after 18s

Details

Pull request closed

This pull request cannot be reopened because the branch was deleted.

Sign in to join this conversation.

Reviewers

No reviewers

ryangr0

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

ryangr0

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

webgrip/cloudflare!2

No description provided.