build(deps): update dorny/paths-filter action to v4.0.3 (main)
Metadata
Current evaluation
Renovate PR merged into main: dorny/paths-filter action bumped v4.0.2 -> v4.0.3 in 3 workflow files (+3/-3), picking up output escaping plus new predicates.
Resolution: closed resolved
Reason: The pull request canonical/imagecraft#390 was merged into main with automerge enabled; the diff updates three workflow files to reference dorny/paths-filter v4.0.3, adopting upstream fixes (multi-line filename escaping, 'some-with-excludes' predicate). The only failing check was an unrelated OSV-scanner job, which did not block the merge.
Evaluated by: mr-cal-bot
No scores available.
Issue body
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [dorny/paths-filter](https://redirect.github.com/dorny/paths-filter) | action | patch | `v4.0.2` → `v4.0.3` |
---
### Release Notes
<details>
<summary>dorny/paths-filter (dorny/paths-filter)</summary>
### [`v4.0.3`](https://redirect.github.com/dorny/paths-filter/blob/HEAD/CHANGELOG.md#v403)
[Compare Source](https://redirect.github.com/dorny/paths-filter/compare/v4.0.2...v4.0.3)
- [Document safe handling of file list outputs in workflows](https://redirect.github.com/dorny/paths-filter/pull/326)
- [Escape multi-line filenames in list-files shell and csv output](https://redirect.github.com/advisories/GHSA-7hc6-8hq5-9q2m)
- [Add 'some-with-excludes' predicate quantifier](https://redirect.github.com/dorny/paths-filter/pull/322)
- [Add contents permission to PR example](https://redirect.github.com/dorny/paths-filter/pull/248)
- [Scope base-ignored warning to API path](https://redirect.github.com/dorny/paths-filter/pull/319)
- [Update outputs in readme to account for the 'every' predicate-quantifier](https://redirect.github.com/dorny/paths-filter/pull/247)
</details>
---
### Configuration
📅 **Schedule**: (in timezone Etc/UTC)
- Branch creation
- "every weekend"
- Automerge
- At any time (no schedule defined)
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/canonical/imagecraft).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMi4wIiwidXBkYXRlZEluVmVyIjoiNDQuMTIuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiUFI6IERlcGVuZGVuY2llcyJdfQ==-->
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed resolved | Renovate PR merged into main: dorny/paths-filter action bumped v4.0.2 -> v4.0.3 in 3 workflow files (+3/-3), picking up output escaping plus new predicates. | |
| stealth/space-bunny-alpha | — | closed resolved | Renovate's dorny/paths-filter v4.0.2→v4.0.3 bump in imagecraft was merged into main (+3/-3 across 3 workflow files), picking up multiline filename output escaping (GHSA-7hc6-8hq5-9q2m) and new 'some-with-excludes' predicate. | |
| stealth/space-bunny-alpha | — | closed resolved | Renovate’s dorny/paths-filter v4.0.2→v4.0.3 update merged into main, adding output escaping and other workflow improvements. | |
| qwen/qwen3.6-35b-a3b | — | — | Merged automated dependency update upgrading dorny/paths-filter GitHub Action from v4.0.2 to v4.0.3. Includes security patches, new quantifiers, and output escaping. Renovate bot managed automerge to main. | |
| qwen/qwen3.6-35b-a3b |
Staleness:
5
Complexity:
5
Confidence:
85
|
needs review | Updates dorny/paths-filter GitHub Action from v4.0.2 to v4.0.3, addressing a security advisory for multi-line filename escaping. Currently pending review with automerge enabled and most CI checks passing. | |
| qwen/qwen3.6-35b-a3b |
Staleness:
5
Complexity:
5
Confidence:
90
|
needs review | Updates dorny/paths-filter GitHub Action from v4.0.2 to v4.0.3 to address a security advisory and minor improvements. Currently awaiting review with most CI checks passing. |
Update history
| Date | Change |
|---|---|
| updated | |
| updated | |
| created |
Related work
-
Related To:
canonical/imagecraft#387
(confidence 80%)
Direct predecessor Renovate bump of dorny/paths-filter v4.0.1 -> v4.0.2 in the same workflows, also merged.
-
Related To:
canonical/snapcraft#6377
(confidence 70%)
Same upstream paths-filter v4.0.2 -> v4.0.3 Renovate update applied in the sibling snapcraft repo.
-
Related To:
canonical/craft-store#411
(confidence 70%)
Same upstream paths-filter v4.0.3 update merged in craft-store.
-
Related To:
canonical/debcraft#179
(confidence 65%)
Same upstream paths-filter v4.0.3 update merged in debcraft.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #6377 build(deps): update dorny/paths-filter action to v4.0.3 (main) | snapcraft | merged | Renovate PR merged into main: dorny/paths-filter action bumped v4.0.2 -> v4.0.3 in 2 workflow files (+2/-2), adding output escaping for multi-line filenames and new predicate quantifiers. | |
| #2781 build(deps): update dorny/paths-filter action to v4.0.2 (main) | charmcraft | merged | Renovate PR bumping dorny/paths-filter v4.0.1 → v4.0.2 in .github/workflows/qa.yaml was approved and merged into main (commit a8d23ad7); later superseded by v4.0.3 in #2827. | |
| #2827 build(deps): update dorny/paths-filter action to v4.0.3 (main) | charmcraft | merged | Renovate PR #2827 merged into charmcraft main, bumping dorny/paths-filter from v4.0.2 to v4.0.3 across 2 workflow files (+2/-2), picking up multi-line filename escaping (GHSA-7hc6-8hq5-9q2m) and new predicate quantifiers. | |
| #402 build(deps): update dorny/paths-filter action to v4.0.2 (main) | craft-store | merged | Merged in #402 via commit 629d0d8, updating dorny/paths-filter from v4.0.1 to v4.0.2 in the QA workflow. | |
| #387 build(deps): update dorny/paths-filter action to v4.0.2 (main) | imagecraft | merged | Renovate's dorny/paths-filter v4.0.1→v4.0.2 bump was approved and merged into main (+3/-3 across 3 workflow files), picking up upstream git dubious-ownership workaround and older-git compat fixes. | |
| #179 build(deps): update dorny/paths-filter action to v4.0.3 (main) | debcraft | merged | Renovate PR #179 merged into debcraft main, bumping dorny/paths-filter from v4.0.2 to v4.0.3 with a one-line workflow change; all CI checks passed except a pre-existing OSV-scanner failure. | |
| #213 build(deps): update dorny/paths-filter action to v4.0.3 (main) | craft-grammar | merged | Renovate PR #213 bumping dorny/paths-filter v4.0.2 -> v4.0.3 was merged (commit 46d53ba), pinning .github/workflows/qa.yaml to SHA ceb8a2b (# v4.0.3); all CI checks passed. | |
| #411 build(deps): update dorny/paths-filter action to v4.0.3 (main) | craft-store | merged | Renovate bumped the dorny/paths-filter GitHub Action from v4.0.2 to v4.0.3 in a craft-store workflow; approved and merged into main via commit 3800a52 (1-line diff). | |
| #6363 build(deps): update dorny/paths-filter action to v4.0.2 (main) | snapcraft | merged | Renovate's dorny/paths-filter v4.0.1→v4.0.2 bump was approved and merged into main (+2/-2 across 2 workflow files), later superseded by the v4.0.3 update in snapcraft#6377. | |
| #2927 build(deps): update dorny/paths-filter action to v4.0.3 (hotfix/4.4) | charmcraft | closed | Dependency update to dorny/paths-filter v4.0.3 closed by maintainer as a newer version (4.5) is imminent. |