Repository navigation
chore(ci): workflow の権限を明示・Dependabot 導入 - #46
Merged
Merged
Conversation
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
ksugahara0808
previously approved these changes
Oct 20, 2026
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Contributor
Author
|
@ksugahara0808 |
ksugahara0808
approved these changes
Oct 20, 2026
ksugahara0808
approved these changes
Oct 20, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
変更内容
permissions: contents: readを明示し、pr_check.ymlの danger job に PR コメント・コミットステータス用の権限を明示する.github/dependabot.ymlを追加し、workflow の action(SHA 固定)を毎週月曜 10:00 にまとめて更新する PR が作られるようにする(flugma と同じ設定)actions/cacheを v2 → v4.3.0 に上げる。v2 は 2025-02 のキャッシュサービス移行で非対応になり、復元がヒットせず保存もUnable to reserve cacheで失敗する(job は落ちないが実質 no-op)。入力(path/key/restore-keys)は v4 でも互換背景
org の Actions 既定権限は現在 write。将来 read に切り替える前提で、workflow 先頭を read にし、書き込みが必要な job にだけ権限を明示する。現時点(既定 write)でも動作は変わらない。
SHA は現在のタグが指すコミットと同一のため、使う action のバージョンは変わらない(動作していない actions/cache v2 の更新を除く)。
🤖 Generated with Claude Code