Bump the github-actions group with 2 updates #437
Triggered via pull request
August 1, 2026 03:53
dependabot[bot]
opened
#278
Status
Success
Total duration
1m 1s
Artifacts
1
ci-pr.yml
on: pull_request_target
Merge & build vocabulary
52s
Annotations
2 warnings
|
Merge & build vocabulary
git-auto-commit is running on a 'pull_request_target' event. This trigger can be a security risk: a malicious pull request could potentially exfiltrate your repository secrets. See https://docs.github.com/en/actions/reference/security/securely-using-pull_request_target and the 'pull_request_target' section in the git-auto-commit README (https://github.com/stefanzweifel/git-auto-commit-action#using-the-action-in-a-pull_request_target-workflow) for safer usage. Set 'disable_pull_request_target_trigger_warning: true' to suppress this warning.
|
|
Merge & build vocabulary
git-auto-commit is running on a 'pull_request_target' event. This trigger can be a security risk: a malicious pull request could potentially exfiltrate your repository secrets. See https://docs.github.com/en/actions/reference/security/securely-using-pull_request_target and the 'pull_request_target' section in the git-auto-commit README (https://github.com/stefanzweifel/git-auto-commit-action#using-the-action-in-a-pull_request_target-workflow) for safer usage. Set 'disable_pull_request_target_trigger_warning: true' to suppress this warning.
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
voc4cat-outbox_2026-08-01T0353_run30682849524
|
275 KB |
sha256:f0a96a060ad5a44e1504d2aadbb62f2031b0d8a5780eac5104fb59ffadd14e60
|
|