Skip to content

Comments

chore(deps): bump mitchellh/vouch from 1.3.1 to 1.4.0#6

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/github_actions/mitchellh/vouch-1.4.0
Open

chore(deps): bump mitchellh/vouch from 1.3.1 to 1.4.0#6
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/github_actions/mitchellh/vouch-1.4.0

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 24, 2026

Bumps mitchellh/vouch from 1.3.1 to 1.4.0.

Release notes

Sourced from mitchellh/vouch's releases.

v1.4.0

What's New

New Actions

  • action/sync-codeowners — New action that reads all members in a repository's CODEOWNERS file (expanding team owners to their members) and automatically vouches for them. (#68)

Improvements

  • action/manage-by-issue and action/manage-by-discussion now include the target username in pull request bodies when vouching or denouncing via PR workflow (98dfb8f)
  • GitHub API retry logic now also retries on 401/403 (transient auth errors such as GitHub Actions token propagation races) and 429 (rate limiting), in addition to 5xx server errors (#70)
  • action/manage-by-issue now closes rejected vouch issues as "not planned" instead of "completed" (#69)
Commits
  • daa39f9 Merge pull request #70 from mitchellh/push-vyozspnswnys
  • 046d6ff github: retry more error codes
  • 98dfb8f include username of vouched users in PRs
  • c529c2c sync-codeowners: dry run
  • 8f697c4 sync-codeowners interpolation problems
  • 40dc88e Merge pull request #69 from mitchellh/push-rqorzrlqtnnv
  • 04cb514 check-issue should close GH issues as "not planned", not "completed"
  • 8643f50 Merge pull request #68 from mitchellh/push-lvqrpluurllo
  • 05b4735 action/sync-codeowners
  • e87054b Add COOKBOOK
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [mitchellh/vouch](https://github.com/mitchellh/vouch) from 1.3.1 to 1.4.0.
- [Release notes](https://github.com/mitchellh/vouch/releases)
- [Commits](mitchellh/vouch@6803dde...daa39f9)

---
updated-dependencies:
- dependency-name: mitchellh/vouch
  dependency-version: 1.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Feb 24, 2026
@dependabot dependabot bot requested a review from tryingET as a code owner February 24, 2026 00:02
@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Feb 24, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants