← Back to issue list

build(deps): update dorny/paths-filter action to v4.0.3 (main)

View original Github issue

Metadata

Project
craft-store
Number
#411
Type
pull request
State
merged
Author
renovate[bot]
Labels
PR: Dependencies
Created
Updated
Closed

Current evaluation

Renovate bumped the dorny/paths-filter GitHub Action from v4.0.2 to v4.0.3 in a craft-store workflow; approved and merged into main via commit 3800a52 (1-line diff).

Resolution: closed resolved

Reason: The PR itself was the resolution: it updated dorny/paths-filter to v4.0.3 and was approved and merged into main at commit 3800a52. Note the Security scan / OSV-scanner check was failing, which is expected since the upstream v4.0.3 release fixes the GHSA-7hc6-8hq5-9q2m filename-escaping advisory.

Evaluated by: mr-cal-bot

No scores available.

Issue body

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [dorny/paths-filter](https://redirect.github.com/dorny/paths-filter) | action | patch | `v4.0.2` → `v4.0.3` | --- ### Release Notes <details> <summary>dorny/paths-filter (dorny/paths-filter)</summary> ### [`v4.0.3`](https://redirect.github.com/dorny/paths-filter/blob/HEAD/CHANGELOG.md#v403) [Compare Source](https://redirect.github.com/dorny/paths-filter/compare/v4.0.2...v4.0.3) - [Document safe handling of file list outputs in workflows](https://redirect.github.com/dorny/paths-filter/pull/326) - [Escape multi-line filenames in list-files shell and csv output](https://redirect.github.com/advisories/GHSA-7hc6-8hq5-9q2m) - [Add 'some-with-excludes' predicate quantifier](https://redirect.github.com/dorny/paths-filter/pull/322) - [Add contents permission to PR example](https://redirect.github.com/dorny/paths-filter/pull/248) - [Scope base-ignored warning to API path](https://redirect.github.com/dorny/paths-filter/pull/319) - [Update outputs in readme to account for the 'every' predicate-quantifier](https://redirect.github.com/dorny/paths-filter/pull/247) </details> --- ### Configuration 📅 **Schedule**: (in timezone Etc/UTC) - Branch creation - "every weekend" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/canonical/craft-store). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMi4wIiwidXBkYXRlZEluVmVyIjoiNDQuMTIuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiUFI6IERlcGVuZGVuY2llcyJdfQ==-->

Evaluation history

Date Model Scores Action Summary
stealth/space-bunny-alpha — closed resolved Renovate bumped the dorny/paths-filter GitHub Action from v4.0.2 to v4.0.3 in a craft-store workflow; approved and merged into main via commit 3800a52 (1-line diff).
stealth/space-bunny-alpha — closed resolved Renovate’s dorny/paths-filter v4.0.2 to v4.0.3 update was merged into main via canonical/craft-store#411 (commit 3800a52).
qwen/qwen3.6-35b-a3b — — Merged automated dependency update for dorny/paths-filter action to v4.0.3 on main. Generated by Renovate and merged via automerge after approval, incorporating security patches and new features.
qwen/qwen3.6-35b-a3b — — Merged automated dependency update upgrading dorny/paths-filter GitHub Action from v4.0.2 to v4.0.3. Renovate auto-merged the change to main after CI validation, applying upstream security patches and feature additions.
qwen/qwen3.6-35b-a3b
Staleness: 5
Complexity: 5
Confidence: 90
needs review Updates dorny/paths-filter GitHub Action from v4.0.2 to v4.0.3 to address a security advisory regarding multi-line filename escaping. Currently pending review with automerge enabled, though OSV-scanner CI is failing.
qwen/qwen3.6-35b-a3b
Staleness: 5
Complexity: 5
Confidence: 85
needs review Updates dorny/paths-filter GitHub Action from v4.0.2 to v4.0.3, addressing a security advisory and adding features. Currently pending maintainer review with most CI checks passing, though OSV-scanner reports a failure.

Update history

Date Change
updated
updated
created

Related issues

Issue Project State Summary Similarity
#387 build(deps): update dorny/paths-filter action to v4.0.2 (main) imagecraft merged Renovate's dorny/paths-filter v4.0.1→v4.0.2 bump was approved and merged into main (+3/-3 across 3 workflow files), picking up upstream git dubious-ownership workaround and older-git compat fixes.
91%
#2781 build(deps): update dorny/paths-filter action to v4.0.2 (main) charmcraft merged Renovate PR bumping dorny/paths-filter v4.0.1 → v4.0.2 in .github/workflows/qa.yaml was approved and merged into main (commit a8d23ad7); later superseded by v4.0.3 in #2827.
90%
#402 build(deps): update dorny/paths-filter action to v4.0.2 (main) craft-store merged Merged in #402 via commit 629d0d8, updating dorny/paths-filter from v4.0.1 to v4.0.2 in the QA workflow.
90%
#179 build(deps): update dorny/paths-filter action to v4.0.3 (main) debcraft merged Renovate PR #179 merged into debcraft main, bumping dorny/paths-filter from v4.0.2 to v4.0.3 with a one-line workflow change; all CI checks passed except a pre-existing OSV-scanner failure.
90%
#6363 build(deps): update dorny/paths-filter action to v4.0.2 (main) snapcraft merged Renovate's dorny/paths-filter v4.0.1→v4.0.2 bump was approved and merged into main (+2/-2 across 2 workflow files), later superseded by the v4.0.3 update in snapcraft#6377.
90%
#390 build(deps): update dorny/paths-filter action to v4.0.3 (main) imagecraft merged Renovate PR merged into main: dorny/paths-filter action bumped v4.0.2 -> v4.0.3 in 3 workflow files (+3/-3), picking up output escaping plus new predicates.
90%
#213 build(deps): update dorny/paths-filter action to v4.0.3 (main) craft-grammar merged Renovate PR #213 bumping dorny/paths-filter v4.0.2 -> v4.0.3 was merged (commit 46d53ba), pinning .github/workflows/qa.yaml to SHA ceb8a2b (# v4.0.3); all CI checks passed.
89%
#172 build(deps): update dorny/paths-filter action to v4.0.2 (main) debcraft merged Renovate PR #172 updated dorny/paths-filter from v4.0.1 to v4.0.2 and merged into main, adding container Git ownership and older-Git compatibility fixes.
89%
#6377 build(deps): update dorny/paths-filter action to v4.0.3 (main) snapcraft merged Renovate PR merged into main: dorny/paths-filter action bumped v4.0.2 -> v4.0.3 in 2 workflow files (+2/-2), adding output escaping for multi-line filenames and new predicate quantifiers.
88%
#572 build(deps): update dorny/paths-filter action to v4.0.2 (main) starbase merged Merged PR #572 into main, bumping dorny/paths-filter from v4.0.1 to v4.0.2 for container Git ownership and older-Git compatibility fixes.
88%