Skip to content

build(deps): bump bazel-contrib/setup-bazel from 0.14.0 to 0.19.1 - #580

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/bazel-contrib/setup-bazel-0.19.1
Closed

build(deps): bump bazel-contrib/setup-bazel from 0.14.0 to 0.19.1#580
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/bazel-contrib/setup-bazel-0.19.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 20, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps bazel-contrib/setup-bazel from 0.14.0 to 0.19.1.

Release notes

Sourced from bazel-contrib/setup-bazel's releases.

0.19.1

What's Changed

New Contributors

Full Changelog: bazel-contrib/setup-bazel@0.19.0...0.19.1

0.19.0

What's Changed

New Contributors

... (truncated)

Commits
  • 104e3ee Release 0.19.1
  • 0114cb1 chore(deps): update dependency yaml to v2.9.1 (#177)
  • c077f7f chore(deps): update dependency @​actions/cache to v6.3.0 (#178)
  • 2c206a1 chore(deps): update node.js to v24.21.0 (#176)
  • e98ce48 fix(deps): update dependency @​vercel/ncc to ^0.45.0 (#175)
  • c1cfa6f chore(deps): update node.js to v24.20.0 (#174)
  • 5bab119 chore(deps): update node.js to v24.18.1 (#173)
  • ef83a47 chore(deps): update dependency @​actions/cache to v6.2.0 (#169)
  • 5ff9bef chore(deps): update actions/checkout action to v7 (#170)
  • 46d9ed7 chore(deps): update node.js to v24.18.0 (#168)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added the dependencies Dependency updates label Oct 20, 2026
@temper-pulseengine

temper-pulseengine Bot commented Oct 20, 2026

Copy link
Copy Markdown
Contributor

temper did not enable auto-merge: breaking update bazel-contrib/setup-bazel 0.14.0 -> 0.19.1 needs a human review.

@avrabe avrabe mentioned this pull request Oct 21, 2026
Closed
@avrabe

avrabe commented Oct 21, 2026

Copy link
Copy Markdown
Contributor

Holding this one, and it surfaced something worth knowing.

Your new release.yml SHA 104e3ee is genuinely 0.19.1 (identical commit) — but you kept the comment # v0.14.0 pinned, which no longer describes the line. Checking it found that the old pin, 5483a91, was never v0.14.0 and is not in bazel-contrib/setup-bazel's history at all (fork-network object, still served by the tarball endpoint). Measured benign — byte-identical to the real v0.14.0 tree — and repinned to the genuine e8776f5 in #583, which changes no executed code.

This PR is therefore a real 0.14.0 → 0.19.1 version jump on the signing path plus four CI workflows, not a pin refresh, and should be judged as one. It will also conflict with #583 on that line. After #583 lands, rebase (@dependabot rebase) and the comment should read v0.19.1.

@dependabot
dependabot Bot force-pushed the dependabot/github_actions/bazel-contrib/setup-bazel-0.19.1 branch from 0e4461c to fb26d15 Compare October 21, 2026 11:06
@dependabot
build(deps): bump bazel-contrib/setup-bazel from 0.14.0 to 0.19.1
3d46840 
Bumps [bazel-contrib/setup-bazel](https://github.com/bazel-contrib/setup-bazel) from 0.14.0 to 0.19.1.
- [Release notes](https://github.com/bazel-contrib/setup-bazel/releases)
- [Commits](bazel-contrib/setup-bazel@0.14.0...0.19.1)

---
updated-dependencies:
- dependency-name: bazel-contrib/setup-bazel
  dependency-version: 0.19.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/bazel-contrib/setup-bazel-0.19.1 branch from fb26d15 to 3d46840 Compare October 21, 2026 14:00
@avrabe

avrabe commented Oct 21, 2026

Copy link
Copy Markdown
Contributor

Closing to cut PR churn — this is a 0.14.0 → 0.19.1 version jump on the signing path plus four CI workflows, which should be a deliberate change, not a dependabot refresh. It also collides with the genuine-v0.14.0 repin (#583). Dependabot will re-propose once grouping lands; the jump will be judged then.

@avrabe avrabe closed this Oct 21, 2026
@avrabe avrabe mentioned this pull request Oct 21, 2026
Open
@dependabot @github

dependabot Bot commented on behalf of github Oct 21, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/github_actions/bazel-contrib/setup-bazel-0.19.1 branch October 21, 2026 15:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Dependency updates

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@avrabe