Skip to content

Chore(deps): bump updatecli/updatecli-action from 3.9.0 to 3.10.0 - #4122

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/updatecli/updatecli-action-3.10.0
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/updatecli/updatecli-action-3.10.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 26, 2026

Copy link
Copy Markdown
Contributor

Bumps updatecli/updatecli-action from 3.9.0 to 3.10.0.

Release notes

Sourced from updatecli/updatecli-action's releases.

v3.10.0 🌈

Changes

🧰 Maintenance

Contributors

@​updateclibot[bot], @​olblak and updateclibot

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [updatecli/updatecli-action](https://github.com/updatecli/updatecli-action) from 3.9.0 to 3.10.0.
- [Release notes](https://github.com/updatecli/updatecli-action/releases)
- [Commits](updatecli/updatecli-action@5d180ff...93ae260)

---
updated-dependencies:
- dependency-name: updatecli/updatecli-action
  dependency-version: 3.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from a team as a code owner October 26, 2026 17:23
Copilot AI balanced review requested due to automatic review settings October 26, 2026 17:23

@mergify mergify Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Automatically approving dependabot

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟢 Approval recommended

The scoped dependency update preserves the action interface and runtime requirements, with no blocking issues identified.

No open issues 🎉

What changed in this PR

Updates the Updatecli action used by elastic-package’s dependency automation from v3.9.0 to v3.10.0.

Changes:

  • Updates the pinned action commit while retaining SHA-based pinning.
  • Updates the version comment to match v3.10.0; workflow steps remain unchanged.
File Description
.github/​workflows/​run-updatecli.yml Bumps the Updatecli action pin and version comment to v3.10.0.

Review effort: Balanced

@elastic-vault-github-plugin-prod

Copy link
Copy Markdown
Contributor

Dependency Update Analysis

Summary: updatecli/updatecli-action was bumped from v3.9.0 to v3.10.0 (SHA-pinned), with low risk for this repo’s CI-only usage.

Dependency 1: updatecli/updatecli-action v3.9.0 → v3.10.0

Ecosystem: GitHub Actions

Check Result
Breaking changes ✅ None found in this repository usage
Testable in PR ✅ Yes (pull_request trigger is configured)
Commit verified ✅ Yes (actions-commit-verification.json: verified: true)
Pin format ✅ SHA-pinned (93ae2608256484ef8598e902aa675bbc9e278e4e)
Changelog highlights (v3.9.0 → v3.10.0)
  • Upstream release notes indicate maintenance/dependency updates and Updatecli runtime bump (updatecli to v0.123.0).
  • Additional dependency maintenance includes eslint and @types/node updates.
  • No explicit breaking changes, CVEs, or GHSA advisories were called out in the release notes.
Usage in this repository
  • .github/workflows/run-updatecli.yml:57 uses updatecli/updatecli-action in step Install Updatecli in the runner.
  • The workflow then runs updatecli via shell in the next step; no action inputs/outputs are consumed from updatecli/updatecli-action itself.
  • Workflow triggers: workflow_dispatch, schedule, and pull_request (path-filtered), so this dependency can be exercised in PR context.
Compatibility assessment
  • Existing usage is minimal and stable (install action + CLI invocation), with no observed dependency on removed/changed action inputs.
  • The new tag v3.10.0 maps to SHA 93ae2608256484ef8598e902aa675bbc9e278e4e, matching the PR pin.
  • Given SHA pinning, verified commit signature status, and CI-only scope, compatibility risk is low.

Labels Applied

  • oblt-aw/ai/merge-ready (applied): low-risk CI dependency bump with passing ecosystem checks.

What is this? | From workflow: Observability Agentic Workflow — Pull Request

Give us feedback! React with 🚀 if perfect, 👍 if helpful, 👎 if not.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant