Lineage pull request for: skeleton by cisagovbot · Pull Request #270 · cisagov/skeleton-docker

cisagovbot · 2026-02-20T04:59:09Z

Lineage Pull Request

Lineage has created this pull request to incorporate new changes found in an upstream repository:

Upstream repository: https://github.com/cisagov/skeleton-generic.git
Remote branch: HEAD

Check the changes in this pull request to ensure they won't cause issues with your project.

✅ Pre-approval checklist

All relevant type-of-change labels have been added.
All new and existing tests pass.

Note

You are seeing this because one of this repository's maintainers has configured Lineage to open pull requests.

For more information:

🛠 Lineage configurations for this project are stored in .github/lineage.yml

📚 Read more about Lineage

Bumps [actions/cache](https://github.com/actions/cache) from 4 to 5. - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](actions/cache@v4...v5) --- updated-dependencies: - dependency-name: actions/cache dependency-version: '5' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>

The `pull_request` trigger's default activity types are `opened`, `reopened`, and `synchronized`. These types better represent when we want this workflow to run and the `edited` type was resulting in undesired workflow runs.

This is done automatically with the `pre-commit autoupdate` command.

The latest release supports the artifact-metadata permission that we are now using in the generate-sbom job of the build.yml GitHub Actions workflow in cisagov/skeleton-aws-lambda-python, cisagov/skeleton-docker, and cisagov/skeleton-python-library.

This will return the cache key to being a string with no new lines.

It is no longer necessary to install wheel alongside setuptools as of setuptools v70.1: https://github.com/pypa/wheel?tab=readme-ov-file#historical-note

This is done automatically with the pre-commit autoupdate command.

We rely on the default activity types for the pull_request event in our GitHub Actions workflows. This adds a comment mentioning that we do so and linking to the GitHub documentation for the event which details the specific activity types that are used by default. Co-authored-by: dav3r <david.redmin@gwe.cisa.dhs.gov>

This is done automatically with the pre-commit autoupdate command.

Remove installation of `wheel` Python package

…s/cache-5 Bump actions/cache from 4 to 5

…ggers Adjust the activity types for the `pull_request` trigger in the `Label pull requests` workflow

…ting Adjust the `lint` job of the `build` workflow's cache key formatting

Update `pre-commit` hook versions

It is no longer necessary to install wheel alongside setuptools as of setuptools v70.1.

…config

This gets rid of an error from our markdownlint pre-commit linter.

Now that I have two pull requests out for changes relevant to our work it makes sense to use a branch that consolidates any changes we need.

We need to update the comment about using a branch of mcdonnnj's terraform-docs fork to reflect that a second PR with different functionality is now included in the branch. Co-authored-by: Shane Frasier <jeremy.frasier@gwe.cisa.dhs.gov>

mcdonnnj

One item of feedback for your consideration.

README.md

This gets rid of several errors from our markdownlint pre-commit linter.

This is no longer the case since #263 was merged. Co-authored-by: Nick M <50747025+mcdonnnj@users.noreply.github.com>

…s_branch Change the branch we use for installing terraform-docs

dependabot bot and others added 15 commits December 15, 2025 18:26

Remove itemized pull_request trigger types

ce44624

The `pull_request` trigger's default activity types are `opened`, `reopened`, and `synchronized`. These types better represent when we want this workflow to run and the `edited` type was resulting in undesired workflow runs.

Update pre-commit hook versions

9c0d2b6

This is done automatically with the `pre-commit autoupdate` command.

Adjust the build workflow's cache key formatting

77f204a

This will return the cache key to being a string with no new lines.

Remove installation of wheel Python package

2fb5133

It is no longer necessary to install wheel alongside setuptools as of setuptools v70.1: https://github.com/pypa/wheel?tab=readme-ov-file#historical-note

Update pre-commit hook versions

6b9b731

This is done automatically with the pre-commit autoupdate command.

Update pre-commit hook versions

57ee431

This is done automatically with the pre-commit autoupdate command.

Merge pull request #249 from cisagov/improvement/remove-wheel

7d62b5e

Remove installation of `wheel` Python package

Merge pull request #244 from cisagov/dependabot/github_actions/action…

9eac052

…s/cache-5 Bump actions/cache from 4 to 5

Merge pull request #245 from cisagov/improvement/adjust_label-prs_tri…

fe7eb42

…ggers Adjust the activity types for the `pull_request` trigger in the `Label pull requests` workflow

Merge pull request #247 from cisagov/improvement/fix_cache_key_format…

ace1712

…ting Adjust the `lint` job of the `build` workflow's cache key formatting

Merge pull request #246 from cisagov/maintenance/update_pre-commit_hooks

6ae498b

Update `pre-commit` hook versions

Merge https://github.com/cisagov/skeleton-generic into lineage/skeleton

6c4df2d

cisagovbot requested review from dav3r, felddy, jsf9k and mcdonnnj as code owners February 20, 2026 04:59

cisagovbot assigned dav3r, felddy, jsf9k and mcdonnnj Feb 20, 2026

cisagovbot added the upstream update This issue or pull request pulls in upstream updates label Feb 20, 2026

github-actions bot added dependencies Pull requests that update a dependency file github-actions Pull requests that update GitHub Actions code shell script Pull requests that update shell scripts labels Feb 20, 2026

jsf9k unassigned felddy, dav3r and mcdonnnj Feb 20, 2026

jsf9k added the kraken 🐙 This pull request is ready to merge during the next Lineage Kraken release label Feb 20, 2026

jsf9k added this to Skeleton Maintenance and Next Kraken Feb 20, 2026

github-project-automation bot moved this to In progress in Skeleton Maintenance Feb 20, 2026

jsf9k moved this to In Progress in Next Kraken Feb 20, 2026

jsf9k added 3 commits February 20, 2026 17:09

Remove installation of wheel alongside setuptools

44f192f

It is no longer necessary to install wheel alongside setuptools as of setuptools v70.1.

Ensure that the same version of bandit is used throughout pre-commit …

68d1fe3

…config

Upgrade actions/cache to match version used in parent skeleton

835209a

github-actions bot added the docker Pull requests that update Docker code label Feb 20, 2026

Break an overly long line

020d73f

This gets rid of an error from our markdownlint pre-commit linter.

github-actions bot added the documentation This issue or pull request improves or adds to documentation label Feb 20, 2026

Change the branch used for terraform-docs

44f5b28

Now that I have two pull requests out for changes relevant to our work it makes sense to use a branch that consolidates any changes we need.

jsf9k approved these changes Feb 21, 2026

View reviewed changes

jsf9k moved this from In progress to Review in progress in Skeleton Maintenance Feb 21, 2026

dav3r approved these changes Feb 23, 2026

View reviewed changes

github-project-automation bot moved this from Review in progress to Reviewer approved in Skeleton Maintenance Feb 23, 2026

Update comment in the build workflow

4991be5

We need to update the comment about using a branch of mcdonnnj's terraform-docs fork to reflect that a second PR with different functionality is now included in the branch. Co-authored-by: Shane Frasier <jeremy.frasier@gwe.cisa.dhs.gov>

mcdonnnj approved these changes Feb 23, 2026

View reviewed changes

README.md Outdated Show resolved Hide resolved

jsf9k and others added 3 commits February 24, 2026 10:24

Adjust table entries to match compact style

76c5785

This gets rid of several errors from our markdownlint pre-commit linter.

Clean up definitions of cache keys to match upstream

9b00823

Remove warning about Pipfile.lock failing pre-commit checks

aab519f

This is no longer the case since #263 was merged. Co-authored-by: Nick M <50747025+mcdonnnj@users.noreply.github.com>

jsf9k force-pushed the lineage/skeleton branch from 1af863b to aab519f Compare February 24, 2026 15:24

jsf9k and others added 2 commits February 24, 2026 17:40

Merge pull request #250 from cisagov/improvement/change_terraform-doc…

5df67a7

…s_branch Change the branch we use for installing terraform-docs

Merge https://github.com/cisagov/skeleton-generic into lineage/skeleton

b1d8daf

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Lineage pull request for: skeleton#270

Lineage pull request for: skeleton#270
cisagovbot wants to merge 26 commits intodevelopfrom
lineage/skeleton

cisagovbot commented Feb 20, 2026 •

edited by jsf9k

Loading

Uh oh!

mcdonnnj left a comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

5 participants

Conversation

cisagovbot commented Feb 20, 2026 • edited by jsf9k Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Lineage Pull Request

✅ Pre-approval checklist

Uh oh!

mcdonnnj left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

5 participants

cisagovbot commented Feb 20, 2026 •

edited by jsf9k

Loading