Skip to content

chore(ci): bump getplumber/plumber from 0.4.3 to 0.4.12 - #34

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/getplumber/plumber-0.4.12
Closed

chore(ci): bump getplumber/plumber from 0.4.3 to 0.4.12#34
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/getplumber/plumber-0.4.12

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 29, 2026

Copy link
Copy Markdown
Contributor

Bumps getplumber/plumber from 0.4.3 to 0.4.12.

Release notes

Sourced from getplumber/plumber's releases.

v0.4.12

0.4.12 (2026-07-20)

🐛 Bug Fixes

  • cli: clearer, less noisy terminal output for analyze (f33fe10)

👷 CI/CD

  • release: pin v0.4.11 refs [skip ci] (a24f952)

v0.4.11

0.4.11 (2026-07-20)

✨ Features

  • controls: actionsMustNotExecuteMutableRemoteCode (ISSUE-714/715/716) (4357428), closes #295
  • github: detect mutable exec in Docker-image actions (18be485)

🐛 Bug Fixes

  • control: emit actionsMustNotExecuteMutableRemoteCode findings in JSON output (ceb92e4)
  • github: cut false positives in actionsMustNotExecuteMutableRemoteCode and gate its source fetch on the control being enabled (#299) (46ed6c5)

👷 CI/CD

  • release: pin v0.4.10 refs [skip ci] (a7e5614)

v0.4.10

0.4.10 (2026-07-20)

🐛 Bug Fixes

  • cli: render the progress bar only on a TTY, clarify --print vs --verbose semantics, drop dead LogLevel (#309) (7fbc954)

👷 CI/CD

  • release: pin v0.4.9 refs [skip ci] (4352de9)

v0.4.9

0.4.9 (2026-07-20)

... (truncated)

Changelog

Sourced from getplumber/plumber's changelog.

0.4.17 (2026-07-29)

🐛 Bug Fixes

  • conf: restore gitlab controls in self-scan .plumber.yaml (34a4cbf)

👷 CI/CD

  • release: pin v0.4.16 refs [skip ci] (cbb9172)

0.4.16 (2026-07-24)

✨ Features

  • output: restructure control output into clear Passed/Skipped/Failed sections (78b576f)

👷 CI/CD

  • release: pin v0.4.15 refs [skip ci] (5ad6b54)

0.4.15 (2026-07-24)

🐛 Bug Fixes

  • controls: don't score GitHub-only controls on GitLab runs — gate findings by provider applicability so plumberScore.counts matches the rendered controls (#349) (6cc38ec)

📚 Documentation

  • template: Update comment in template and add version reference section in contributing (5a6ec4e)

👷 CI/CD

  • release: pin v0.4.14 refs [skip ci] (f85f762)

0.4.14 (2026-07-24)

🐛 Bug Fixes

  • ci: Fix vuln and update grype ref (6607bb8)

👷 CI/CD

... (truncated)

Commits
  • ef9864d chore(release): 0.4.12 [skip ci]
  • f33fe10 fix(cli): clearer, less noisy terminal output for analyze
  • a24f952 ci(release): pin v0.4.11 refs [skip ci]
  • 217a0e7 chore(release): 0.4.11 [skip ci]
  • 46ed6c5 fix(github): cut false positives in actionsMustNotExecuteMutableRemoteCode an...
  • ceb92e4 fix(control): emit actionsMustNotExecuteMutableRemoteCode findings in JSON ou...
  • 18be485 feat(github): detect mutable exec in Docker-image actions
  • 4357428 feat(controls): actionsMustNotExecuteMutableRemoteCode (ISSUE-714/715/716)
  • a7e5614 ci(release): pin v0.4.10 refs [skip ci]
  • ed466be chore(release): 0.4.10 [skip ci]
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [getplumber/plumber](https://github.com/getplumber/plumber) from 0.4.3 to 0.4.12.
- [Release notes](https://github.com/getplumber/plumber/releases)
- [Changelog](https://github.com/getplumber/plumber/blob/main/CHANGELOG.md)
- [Commits](getplumber/plumber@fdd2a2d...ef9864d)

---
updated-dependencies:
- dependency-name: getplumber/plumber
  dependency-version: 0.4.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jul 29, 2026
@dependabot
dependabot Bot requested a review from stephrobert as a code owner July 29, 2026 09:18
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jul 29, 2026
@dependabot @github

dependabot Bot commented on behalf of github Aug 19, 2026

Copy link
Copy Markdown
Contributor Author

Superseded by #44.

@dependabot dependabot Bot closed this Aug 19, 2026
@dependabot
dependabot Bot deleted the dependabot/github_actions/getplumber/plumber-0.4.12 branch August 19, 2026 08:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants