Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update required GITHUB_TOKEN permissions #144

Merged
merged 2 commits into from
May 6, 2024

Conversation

pellared
Copy link
Contributor

@pellared pellared commented Oct 11, 2023

contents: read should be enough when signatures are stored in a remote repository.

Tested here: pellared/test-cla#1

@pellared pellared closed this Oct 11, 2023
@pellared pellared deleted the patch-1 branch October 11, 2023 10:37
@pellared pellared restored the patch-1 branch October 11, 2023 10:39
@pellared pellared reopened this Oct 11, 2023
README.md Outdated Show resolved Hide resolved
README.md Outdated Show resolved Hide resolved
@lucasgonze
Copy link

Bump.
This security-related PR should have a time-sensitive priority.

@pellared
Copy link
Contributor Author

@ibakshay Can you please take a look?

@ibakshay
Copy link
Member

@pellared,
I am really sorry. I will have a look in the next coming days and merge this PR :) thanks so much for the contribution! I highly appreciate it..

Copy link
Member

@ibakshay ibakshay left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you for the contribution!

@ibakshay ibakshay merged commit 902b70e into contributor-assistant:master May 6, 2024
@pellared pellared deleted the patch-1 branch May 6, 2024 19:52
artemrys pushed a commit to splunk/addonfactory-github-workflows that referenced this pull request May 7, 2024
….0 (#62)

[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[contributor-assistant/github-action](https://togithub.com/contributor-assistant/github-action)
| action | minor | `v2.3.2` -> `v2.4.0` |

---

### Release Notes

<details>
<summary>contributor-assistant/github-action
(contributor-assistant/github-action)</summary>

###
[`v2.4.0`](https://togithub.com/contributor-assistant/github-action/releases/tag/v2.4.0)

[Compare
Source](https://togithub.com/contributor-assistant/github-action/compare/v2.3.2...v2.4.0)

##### What's Changed

- Update required GITHUB_TOKEN permissions by
[@&#8203;pellared](https://togithub.com/pellared) in
[contributor-assistant/github-action#144
- Move CLA/DCO bot name into subscript at end of comment by
[@&#8203;Holzhaus](https://togithub.com/Holzhaus) in
[contributor-assistant/github-action#140

##### New Contributors

- [@&#8203;pellared](https://togithub.com/pellared) made their first
contribution in
[contributor-assistant/github-action#144
- [@&#8203;Holzhaus](https://togithub.com/Holzhaus) made their first
contribution in
[contributor-assistant/github-action#140

**Full Changelog**:
contributor-assistant/github-action@v2.3.2...v2.4.0

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/splunk/addonfactory-github-workflows).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4zNDAuMTAiLCJ1cGRhdGVkSW5WZXIiOiIzNy4zNDAuMTAiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
kodiakhq bot pushed a commit to carbon-design-system/carbon-for-ibm-dotcom that referenced this pull request May 14, 2024
)

[![Mend Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [cla-assistant/github-action](https://togithub.com/cla-assistant/github-action) | action | minor | `v2.3.2` -> `v2.4.0` |

---

### Release Notes

<details>
<summary>cla-assistant/github-action (cla-assistant/github-action)</summary>

### [`v2.4.0`](https://togithub.com/contributor-assistant/github-action/releases/tag/v2.4.0)

[Compare Source](https://togithub.com/cla-assistant/github-action/compare/v2.3.2...v2.4.0)

#### What's Changed

-   Update required GITHUB_TOKEN permissions by [@&#8203;pellared](https://togithub.com/pellared) in [contributor-assistant/github-action#144
-   Move CLA/DCO bot name into subscript at end of comment by [@&#8203;Holzhaus](https://togithub.com/Holzhaus) in [contributor-assistant/github-action#140

#### New Contributors

-   [@&#8203;pellared](https://togithub.com/pellared) made their first contribution in [contributor-assistant/github-action#144
-   [@&#8203;Holzhaus](https://togithub.com/Holzhaus) made their first contribution in [contributor-assistant/github-action#140

**Full Changelog**: contributor-assistant/github-action@v2.3.2...v2.4.0

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "every weekend" (UTC), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Never, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://developer.mend.io/github/carbon-design-system/carbon-for-ibm-dotcom).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4zNTEuMiIsInVwZGF0ZWRJblZlciI6IjM3LjM1MS4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants