build(deps): update dorny/paths-filter action to v4.0.3 (main)
Metadata
Current evaluation
Renovate PR #2827 merged into charmcraft main, bumping dorny/paths-filter from v4.0.2 to v4.0.3 across 2 workflow files (+2/-2), picking up multi-line filename escaping (GHSA-7hc6-8hq5-9q2m) and new predicate quantifiers.
Resolution: closed resolved
Reason: The dependency bump was approved by one reviewer and merged into main via Renovate automerge, changing 2 workflow files from v4.0.2 to v4.0.3. The same update was merged in parallel across Canonical repos (snapcraft#6377, imagecraft#390, debcraft#179).
Evaluated by: mr-cal-bot
No scores available.
Issue body
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [dorny/paths-filter](https://redirect.github.com/dorny/paths-filter) | action | patch | `v4.0.2` → `v4.0.3` |
---
### Release Notes
<details>
<summary>dorny/paths-filter (dorny/paths-filter)</summary>
### [`v4.0.3`](https://redirect.github.com/dorny/paths-filter/blob/HEAD/CHANGELOG.md#v403)
[Compare Source](https://redirect.github.com/dorny/paths-filter/compare/v4.0.2...v4.0.3)
- [Document safe handling of file list outputs in workflows](https://redirect.github.com/dorny/paths-filter/pull/326)
- [Escape multi-line filenames in list-files shell and csv output](https://redirect.github.com/advisories/GHSA-7hc6-8hq5-9q2m)
- [Add 'some-with-excludes' predicate quantifier](https://redirect.github.com/dorny/paths-filter/pull/322)
- [Add contents permission to PR example](https://redirect.github.com/dorny/paths-filter/pull/248)
- [Scope base-ignored warning to API path](https://redirect.github.com/dorny/paths-filter/pull/319)
- [Update outputs in readme to account for the 'every' predicate-quantifier](https://redirect.github.com/dorny/paths-filter/pull/247)
</details>
---
### Configuration
📅 **Schedule**: (in timezone Etc/UTC)
- Branch creation
- "every weekend"
- Automerge
- At any time (no schedule defined)
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/canonical/charmcraft).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4yOS41IiwidXBkYXRlZEluVmVyIjoiNDQuMjkuNSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiUFI6IERlcGVuZGVuY2llcyJdfQ==-->
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed resolved | Renovate PR #2827 merged into charmcraft main, bumping dorny/paths-filter from v4.0.2 to v4.0.3 across 2 workflow files (+2/-2), picking up multi-line filename escaping (GHSA-7hc6-8hq5-9q2m) and new predicate quantifiers. | |
| stealth/space-bunny-alpha | — | closed resolved | Merged PR #2827 into main, updating dorny/paths-filter from v4.0.2 to v4.0.3 in two workflow files to adopt safer output handling and multiline filename escaping. | |
| qwen/qwen3.6-35b-a3b | — | — | Merged to main. Renovate updated the dorny/paths-filter GitHub Action from v4.0.2 to v4.0.3. Approved by one reviewer, the dependency update passed CI checks and was automerged. | |
| qwen/qwen3.6-35b-a3b |
Staleness:
5
Complexity:
5
Confidence:
90
|
needs review | Updates dorny/paths-filter GitHub Action to v4.0.3, addressing a security fix for multi-line filename escaping. The change is approved, has automerge enabled, and passes most CI checks, though two minimum dependency tests are currently failing. | |
| qwen/qwen3.6-35b-a3b |
Staleness:
5
Complexity:
10
Confidence:
90
|
needs review | Updates dorny/paths-filter GitHub Action from v4.0.2 to v4.0.3 to address a multi-line filename security advisory. Currently approved by one reviewer with automerge enabled, but blocked by failing minimum dependency CI checks. | |
| qwen/qwen3.6-35b-a3b |
Staleness:
5
Complexity:
5
Confidence:
95
|
needs review | Updates the dorny/paths-filter GitHub Action from v4.0.2 to v4.0.3, including a security fix for multi-line filename escaping. Currently pending review with all CI checks passing and automerge enabled. | |
| qwen/qwen3.6-35b-a3b |
Staleness:
0
Complexity:
5
Confidence:
95
|
needs review | Updates dorny/paths-filter GitHub Action from v4.0.2 to v4.0.3, addressing a security advisory and adding minor features. Currently pending review with automated merge enabled and most CI checks passing. |
Update history
| Date | Change |
|---|---|
| updated | |
| updated | |
| updated | |
| updated | |
| created |
Related work
-
Related To:
canonical/snapcraft#6377
(confidence 88%)
Identical Renovate bump of dorny/paths-filter to v4.0.3 merged in the sibling snapcraft repo the same period.
-
Related To:
canonical/imagecraft#390
(confidence 82%)
Same dorny/paths-filter v4.0.2→v4.0.3 Renovate update, merged into imagecraft main.
-
Related To:
canonical/debcraft#179
(confidence 75%)
Same dependency update applied across the Canonical project family.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #6377 build(deps): update dorny/paths-filter action to v4.0.3 (main) | snapcraft | merged | Renovate PR merged into main: dorny/paths-filter action bumped v4.0.2 -> v4.0.3 in 2 workflow files (+2/-2), adding output escaping for multi-line filenames and new predicate quantifiers. | |
| #390 build(deps): update dorny/paths-filter action to v4.0.3 (main) | imagecraft | merged | Renovate PR merged into main: dorny/paths-filter action bumped v4.0.2 -> v4.0.3 in 3 workflow files (+3/-3), picking up output escaping plus new predicates. | |
| #2781 build(deps): update dorny/paths-filter action to v4.0.2 (main) | charmcraft | merged | Renovate PR bumping dorny/paths-filter v4.0.1 → v4.0.2 in .github/workflows/qa.yaml was approved and merged into main (commit a8d23ad7); later superseded by v4.0.3 in #2827. | |
| #213 build(deps): update dorny/paths-filter action to v4.0.3 (main) | craft-grammar | merged | Renovate PR #213 bumping dorny/paths-filter v4.0.2 -> v4.0.3 was merged (commit 46d53ba), pinning .github/workflows/qa.yaml to SHA ceb8a2b (# v4.0.3); all CI checks passed. | |
| #402 build(deps): update dorny/paths-filter action to v4.0.2 (main) | craft-store | merged | Merged in #402 via commit 629d0d8, updating dorny/paths-filter from v4.0.1 to v4.0.2 in the QA workflow. | |
| #179 build(deps): update dorny/paths-filter action to v4.0.3 (main) | debcraft | merged | Renovate PR #179 merged into debcraft main, bumping dorny/paths-filter from v4.0.2 to v4.0.3 with a one-line workflow change; all CI checks passed except a pre-existing OSV-scanner failure. | |
| #387 build(deps): update dorny/paths-filter action to v4.0.2 (main) | imagecraft | merged | Renovate's dorny/paths-filter v4.0.1→v4.0.2 bump was approved and merged into main (+3/-3 across 3 workflow files), picking up upstream git dubious-ownership workaround and older-git compat fixes. | |
| #6363 build(deps): update dorny/paths-filter action to v4.0.2 (main) | snapcraft | merged | Renovate's dorny/paths-filter v4.0.1→v4.0.2 bump was approved and merged into main (+2/-2 across 2 workflow files), later superseded by the v4.0.3 update in snapcraft#6377. | |
| #411 build(deps): update dorny/paths-filter action to v4.0.3 (main) | craft-store | merged | Renovate bumped the dorny/paths-filter GitHub Action from v4.0.2 to v4.0.3 in a craft-store workflow; approved and merged into main via commit 3800a52 (1-line diff). | |
| #172 build(deps): update dorny/paths-filter action to v4.0.2 (main) | debcraft | merged | Renovate PR #172 updated dorny/paths-filter from v4.0.1 to v4.0.2 and merged into main, adding container Git ownership and older-Git compatibility fixes. |