Skip to content

Bump fossas/fossa-action from 1 to 2 - #469

Merged
OptimumCode merged 1 commit into
mainfrom
dependabot/github_actions/fossas/fossa-action-2
Jul 6, 2026
Merged

Bump fossas/fossa-action from 1 to 2#469
OptimumCode merged 1 commit into
mainfrom
dependabot/github_actions/fossas/fossa-action-2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 2, 2026

Copy link
Copy Markdown
Contributor

Bumps fossas/fossa-action from 1 to 2.

Release notes

Sourced from fossas/fossa-action's releases.

v2.0.0

Breaking change: Node 24 runtime

This action now runs on the Node 24 GitHub Actions runtime (previously Node 20), via #277.

  • GitHub-hosted runners: no action needed.
  • Self-hosted runners: you must be on a runner version that bundles the Node 24 runtime. Update your runner if you pin fossas/fossa-action@v2.

The @v1 line is unchanged and stays on Node 20, so existing @v1 users are not affected until they opt into @v2. #277 is the only change that touches the action's runtime code (dist/) — everything else below is CI or dev-tooling only.

Everything in v1.9.0 → v2.0.0

Action runtime

  • Upgrade to Node.js 24 and Yarn 4 (Corepack, packageManager: yarn@4.13.0, engines.node >= 24.0.0) — #277

CI / repo tooling (no effect on consumers)

  • Fix the repo's fossa test --diff CI step to work with push events (first push to a new branch falls back to diffing the default branch) — #278
  • Make dependabot ignore major-version bumps of @types/node#291

Dev-dependency bumps (no effect on consumers)

  • eslint 9.39.4 → 10.2.0 → 10.2.1 — #288, #297
  • @​typescript-eslint/eslint-plugin 8.58.0 → 8.58.2 — #290, #295
  • @​types/node 24.12.0 → 24.12.2 — #293
  • globals 17.4.0 → 17.5.0 — #294
  • @​eslint/compat 2.0.3 → 2.0.4 — #287

Full changelog: fossas/fossa-action@v1.9.0...v2.0.0

v1.9.0

What's Changed

New Contributors

Full Changelog: fossas/fossa-action@v1.8.0...v1.9.0

v1.8.0

No release notes provided.

v1.7.0

What's Changed

  • Adds an optional working directory option to change where FOSSA analyzes.

... (truncated)

Commits
  • 29693cc Bump eslint from 10.2.0 to 10.2.1 (#297)
  • 4edee72 Bump @​typescript-eslint/eslint-plugin from 8.58.1 to 8.58.2 (#295)
  • 5ebf75c Bump globals from 17.4.0 to 17.5.0 (#294)
  • c765e94 Bump @​types/node from 24.12.0 to 24.12.2 (#293)
  • e23f415 Make dependabot ignore major version upgrades to @​types/node (#291)
  • b36611c Bump @​typescript-eslint/eslint-plugin from 8.58.0 to 8.58.1 (#290)
  • 255120c Bump @​eslint/compat from 2.0.3 to 2.0.4 (#287)
  • b5287b2 Bump eslint from 9.39.4 to 10.2.0 (#288)
  • fd9df06 Fix FOSSA test --diff step to work with push events (#278)
  • fca84c8 Upgrade to Node.js 24 and Yarn 4 (#277)
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [fossas/fossa-action](https://github.com/fossas/fossa-action) from 1 to 2.
- [Release notes](https://github.com/fossas/fossa-action/releases)
- [Commits](fossas/fossa-action@v1...v2)

---
updated-dependencies:
- dependency-name: fossas/fossa-action
  dependency-version: '2'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added CI/CD dependencies Dependencies update to newer versions labels Jul 2, 2026

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Performance Alert ⚠️

Possible performance regression was detected for benchmark 'KMP JSON schema validator'.
Benchmark result of this commit is worse than the previous benchmark result exceeding threshold 1.50.

Benchmark suite Current: 22dc59f Previous: 94e4e19 Ratio
macosArm64.CommonAvgTimeBench.validateBasic ( {"objectPath":"openapi.json","schemaPath":"openapi_schema.json"} ) 3043.751659027778 us/op 1798.1113322580647 us/op 1.69
macosArm64.CommonAvgTimeBench.validateBasic ( {"objectPath":"openapi-invalid.json","schemaPath":"openapi_schema.json"} ) 3368.8052834394903 us/op 1832.3096347826086 us/op 1.84
mingwX64.CommonAvgTimeBench.validateFlag ( {"objectPath":"openapi-invalid.json","schemaPath":"openapi_schema.json"} ) 1.7469494399149934 us/op 1.123378120663657 us/op 1.56
mingwX64.CommonAvgTimeBench.validateVerbose ( {"objectPath":"openapi-invalid.json","schemaPath":"openapi_schema.json"} ) 12264.02547368421 us/op 7899.147419354839 us/op 1.55

This comment was automatically generated by workflow using github-action-benchmark.

CC: @OptimumCode

@OptimumCode
OptimumCode merged commit 9699786 into main Jul 6, 2026
16 of 17 checks passed
@OptimumCode
OptimumCode deleted the dependabot/github_actions/fossas/fossa-action-2 branch July 6, 2026 07:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

CI/CD dependencies Dependencies update to newer versions

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant