Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 1, 2025

Bumps peter-evans/slash-command-dispatch from 4.0.0 to 5.0.0.

Release notes

Sourced from peter-evans/slash-command-dispatch's releases.

Slash Command Dispatch v5.0.0

What's new in v5

What's Changed

New Contributors

Full Changelog: peter-evans/slash-command-dispatch@v4.0.0...v5.0.0

Commits
  • e1b4e26 v5 (#431)
  • 9a73d03 build(deps-dev): bump js-yaml from 4.1.0 to 4.1.1 (#432)
  • 9296fe3 build(deps): bump the github-actions group with 3 updates (#430)
  • 59ebb73 ci: update dependabot config
  • cf4bfd0 build(deps): bump peter-evans/create-or-update-comment from 4 to 5 (#428)
  • a94182a build(deps-dev): bump @​vercel/ncc from 0.38.3 to 0.38.4 (#426)
  • bff1f2d build(deps): bump actions/setup-node from 4 to 5 (#423)
  • 2498e8f build(deps): bump actions/checkout from 4 to 5 (#421)
  • f6a8811 build(deps-dev): bump eslint-plugin-prettier from 5.5.3 to 5.5.4 (#420)
  • 9e6060d build(deps): bump actions/download-artifact from 4 to 5 (#419)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [peter-evans/slash-command-dispatch](https://github.com/peter-evans/slash-command-dispatch) from 4.0.0 to 5.0.0.
- [Release notes](https://github.com/peter-evans/slash-command-dispatch/releases)
- [Commits](peter-evans/slash-command-dispatch@v4.0.0...v5.0.0)

---
updated-dependencies:
- dependency-name: peter-evans/slash-command-dispatch
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Dec 1, 2025
@dependabot dependabot bot requested a review from KumoLiu as a code owner December 1, 2025 05:06
@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Dec 1, 2025
@coderabbitai
Copy link
Contributor

coderabbitai bot commented Dec 1, 2025

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.


Comment @coderabbitai help to get the list of available commands and usage tips.

@KumoLiu
Copy link
Contributor

KumoLiu commented Dec 1, 2025

/build

@KumoLiu KumoLiu enabled auto-merge (squash) December 1, 2025 09:25
@KumoLiu KumoLiu merged commit c1d02cf into dev Dec 1, 2025
27 checks passed
@KumoLiu KumoLiu deleted the dependabot/github_actions/peter-evans/slash-command-dispatch-5.0.0 branch December 1, 2025 11:00
Borda pushed a commit to Borda/MONAI that referenced this pull request Jan 6, 2026
…MONAI#8650)

Bumps
[peter-evans/slash-command-dispatch](https://github.com/peter-evans/slash-command-dispatch)
from 4.0.0 to 5.0.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/peter-evans/slash-command-dispatch/releases">peter-evans/slash-command-dispatch's
releases</a>.</em></p>
<blockquote>
<h2>Slash Command Dispatch v5.0.0</h2>
<h2>What's new in v5</h2>
<ul>
<li>Requires <a
href="https://github.com/actions/runner/releases/tag/v2.327.1">Actions
Runner v2.327.1</a> or later if you are using a self-hosted runner for
Node 24 support.</li>
<li>The <code>.yaml</code> extension is now supported for dispatch type
<code>workflow</code> <a
href="https://redirect.github.com/peter-evans/slash-command-dispatch/pull/427">peter-evans/slash-command-dispatch#427</a></li>
<li>A change has been made to fetching permissions for contributors.
Hopefully this will resolve some issues with fetching permissions for
contributors that are part of a team. <a
href="https://redirect.github.com/peter-evans/slash-command-dispatch/pull/424">peter-evans/slash-command-dispatch#424</a></li>
</ul>
<h2>What's Changed</h2>
<ul>
<li>~90 dependency updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a></li>
<li>v5 by <a
href="https://github.com/peter-evans"><code>@​peter-evans</code></a> in
<a
href="https://redirect.github.com/peter-evans/slash-command-dispatch/pull/431">peter-evans/slash-command-dispatch#431</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/volodymyrZotov"><code>@​volodymyrZotov</code></a>
made their first contribution in <a
href="https://redirect.github.com/peter-evans/slash-command-dispatch/pull/424">peter-evans/slash-command-dispatch#424</a></li>
<li><a
href="https://github.com/patrickleet"><code>@​patrickleet</code></a>
made their first contribution in <a
href="https://redirect.github.com/peter-evans/slash-command-dispatch/pull/427">peter-evans/slash-command-dispatch#427</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/peter-evans/slash-command-dispatch/compare/v4.0.0...v5.0.0">https://github.com/peter-evans/slash-command-dispatch/compare/v4.0.0...v5.0.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/peter-evans/slash-command-dispatch/commit/e1b4e266bc781656359bb7e462e228daf68c04f6"><code>e1b4e26</code></a>
v5 (<a
href="https://redirect.github.com/peter-evans/slash-command-dispatch/issues/431">#431</a>)</li>
<li><a
href="https://github.com/peter-evans/slash-command-dispatch/commit/9a73d036b8d740a6595bcd2005aa6fcfbe2561d7"><code>9a73d03</code></a>
build(deps-dev): bump js-yaml from 4.1.0 to 4.1.1 (<a
href="https://redirect.github.com/peter-evans/slash-command-dispatch/issues/432">#432</a>)</li>
<li><a
href="https://github.com/peter-evans/slash-command-dispatch/commit/9296fe383fe77fc69c8be1a13070920b6f34c8a9"><code>9296fe3</code></a>
build(deps): bump the github-actions group with 3 updates (<a
href="https://redirect.github.com/peter-evans/slash-command-dispatch/issues/430">#430</a>)</li>
<li><a
href="https://github.com/peter-evans/slash-command-dispatch/commit/59ebb73fe795502bf2df46a4523ec9462a1a031a"><code>59ebb73</code></a>
ci: update dependabot config</li>
<li><a
href="https://github.com/peter-evans/slash-command-dispatch/commit/cf4bfd03e8c75d95166186482a66eb92f64fbf18"><code>cf4bfd0</code></a>
build(deps): bump peter-evans/create-or-update-comment from 4 to 5 (<a
href="https://redirect.github.com/peter-evans/slash-command-dispatch/issues/428">#428</a>)</li>
<li><a
href="https://github.com/peter-evans/slash-command-dispatch/commit/a94182acf45d809c5853d50a381f058253557644"><code>a94182a</code></a>
build(deps-dev): bump <code>@​vercel/ncc</code> from 0.38.3 to 0.38.4
(<a
href="https://redirect.github.com/peter-evans/slash-command-dispatch/issues/426">#426</a>)</li>
<li><a
href="https://github.com/peter-evans/slash-command-dispatch/commit/bff1f2de17b5895fc4a18c323ae89822515c9bee"><code>bff1f2d</code></a>
build(deps): bump actions/setup-node from 4 to 5 (<a
href="https://redirect.github.com/peter-evans/slash-command-dispatch/issues/423">#423</a>)</li>
<li><a
href="https://github.com/peter-evans/slash-command-dispatch/commit/2498e8fc22584cef4c54e03511b8837c6f8e4476"><code>2498e8f</code></a>
build(deps): bump actions/checkout from 4 to 5 (<a
href="https://redirect.github.com/peter-evans/slash-command-dispatch/issues/421">#421</a>)</li>
<li><a
href="https://github.com/peter-evans/slash-command-dispatch/commit/f6a881111bf3c8cc120834d97546e47f2422db1c"><code>f6a8811</code></a>
build(deps-dev): bump eslint-plugin-prettier from 5.5.3 to 5.5.4 (<a
href="https://redirect.github.com/peter-evans/slash-command-dispatch/issues/420">#420</a>)</li>
<li><a
href="https://github.com/peter-evans/slash-command-dispatch/commit/9e6060de65b3a3d5f8924df0dc3585bd7a4ae639"><code>9e6060d</code></a>
build(deps): bump actions/download-artifact from 4 to 5 (<a
href="https://redirect.github.com/peter-evans/slash-command-dispatch/issues/419">#419</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/peter-evans/slash-command-dispatch/compare/v4.0.0...v5.0.0">compare
view</a></li>
</ul>
</details>
<br />

[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=peter-evans/slash-command-dispatch&package-manager=github_actions&previous-version=4.0.0&new-version=5.0.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)

</details>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: jirka <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant