From a46420b578d059ce8fa2b8434ff487b8eed9e512 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Mon, 10 Aug 2026 08:58:47 +0200 Subject: [PATCH] chore(deps): update endbug/add-and-commit action to v11 (#4000) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [EndBug/add-and-commit](https://redirect.github.com/EndBug/add-and-commit) | action | major | `v10` → `v11` | --- ### Release Notes
EndBug/add-and-commit (EndBug/add-and-commit) ### [`v11.0.0`](https://redirect.github.com/EndBug/add-and-commit/releases/tag/v11.0.0) [Compare Source](https://redirect.github.com/EndBug/add-and-commit/compare/v11.0.0...v11.0.0) #### What's Changed - chore(deps): bump picomatch by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​724](https://redirect.github.com/EndBug/add-and-commit/pull/724) - chore(deps-dev): bump handlebars from 4.7.8 to 4.7.9 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​725](https://redirect.github.com/EndBug/add-and-commit/pull/725) - chore(deps): bump lodash from 4.17.23 to 4.18.1 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​728](https://redirect.github.com/EndBug/add-and-commit/pull/728) - chore(deps-dev): bump ts-jest from 29.4.6 to 29.4.9 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​727](https://redirect.github.com/EndBug/add-and-commit/pull/727) - chore(deps): bump [@​actions/github](https://redirect.github.com/actions/github) from 9.0.0 to 9.1.0 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​729](https://redirect.github.com/EndBug/add-and-commit/pull/729) - chore(deps): bump [@​actions/github](https://redirect.github.com/actions/github) from 9.1.0 to 9.1.1 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​732](https://redirect.github.com/EndBug/add-and-commit/pull/732) - chore(deps): bump [@​actions/core](https://redirect.github.com/actions/core) from 3.0.0 to 3.0.1 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​733](https://redirect.github.com/EndBug/add-and-commit/pull/733) - ci(deps): bump actions/dependency-review-action from 4 to 5 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​734](https://redirect.github.com/EndBug/add-and-commit/pull/734) - chore(deps-dev): bump ts-jest from 29.4.9 to 29.4.11 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​736](https://redirect.github.com/EndBug/add-and-commit/pull/736) - chore(deps-dev): bump jest from 30.3.0 to 30.4.2 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​735](https://redirect.github.com/EndBug/add-and-commit/pull/735) - chore(deps-dev): bump eslint-plugin-prettier from 5.5.5 to 5.5.6 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​738](https://redirect.github.com/EndBug/add-and-commit/pull/738) - chore(deps): bump js-yaml from 4.1.1 to 4.2.0 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​739](https://redirect.github.com/EndBug/add-and-commit/pull/739) - ci(deps): bump actions/checkout from 6 to 7 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​741](https://redirect.github.com/EndBug/add-and-commit/pull/741) - chore(deps): bump undici from 6.24.1 to 6.27.0 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​744](https://redirect.github.com/EndBug/add-and-commit/pull/744) - ci(deps): bump actions/setup-node from 6 to 7 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​749](https://redirect.github.com/EndBug/add-and-commit/pull/749) - chore(deps-dev): bump [@​vercel/ncc](https://redirect.github.com/vercel/ncc) from 0.38.4 to 0.44.1 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​746](https://redirect.github.com/EndBug/add-and-commit/pull/746) - chore(deps): bump js-yaml from 4.2.0 to 5.2.1 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​747](https://redirect.github.com/EndBug/add-and-commit/pull/747) - chore(deps-dev): bump ts-jest from 29.4.11 to 29.4.12 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​750](https://redirect.github.com/EndBug/add-and-commit/pull/750) - chore(deps): bump js-yaml from 5.2.1 to 5.2.2 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​751](https://redirect.github.com/EndBug/add-and-commit/pull/751) - chore(deps): bump undici from 6.27.0 to 6.28.0 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​753](https://redirect.github.com/EndBug/add-and-commit/pull/753) - fix: reject remote-helper git flags that enable RCE by [@​EndBug](https://redirect.github.com/EndBug) in [#​754](https://redirect.github.com/EndBug/add-and-commit/pull/754) - fix: prevent git option injection via new\_branch by [@​EndBug](https://redirect.github.com/EndBug) in [#​755](https://redirect.github.com/EndBug/add-and-commit/pull/755) - fix: verify committed lib/ matches source in CI by [@​EndBug](https://redirect.github.com/EndBug) in [#​756](https://redirect.github.com/EndBug/add-and-commit/pull/756) - fix: stop logging full git config (credential leak) by [@​EndBug](https://redirect.github.com/EndBug) in [#​758](https://redirect.github.com/EndBug/add-and-commit/pull/758) - fix: reject -F/--file git args that can exfiltrate runner files by [@​EndBug](https://redirect.github.com/EndBug) in [#​759](https://redirect.github.com/EndBug/add-and-commit/pull/759) - fix: reject unmatched quotes in matchGitArgs to prevent flag injection by [@​EndBug](https://redirect.github.com/EndBug) in [#​760](https://redirect.github.com/EndBug/add-and-commit/pull/760) - fix: refuse unexpected gitlinks staged by git add by [@​EndBug](https://redirect.github.com/EndBug) in [#​761](https://redirect.github.com/EndBug/add-and-commit/pull/761) - fix: do not report committed=true for empty commit SHA by [@​EndBug](https://redirect.github.com/EndBug) in [#​757](https://redirect.github.com/EndBug/add-and-commit/pull/757) - ci: pin actions-tagger and restrict release workflow permissions by [@​EndBug](https://redirect.github.com/EndBug) in [#​762](https://redirect.github.com/EndBug/add-and-commit/pull/762) - fix: neutralize bidi and control chars in action logs by [@​EndBug](https://redirect.github.com/EndBug) in [#​763](https://redirect.github.com/EndBug/add-and-commit/pull/763) **Full Changelog**: ### [`v11`](https://redirect.github.com/EndBug/add-and-commit/compare/v10.0.0...v11.0.0) [Compare Source](https://redirect.github.com/EndBug/add-and-commit/compare/v10.0.0...v11.0.0)
--- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - "every weekday" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/apify/crawlee). Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> --- .github/workflows/publish-to-npm.yml | 2 +- .github/workflows/release.yml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/publish-to-npm.yml b/.github/workflows/publish-to-npm.yml index 33b51de4da1b..e97450f866bf 100644 --- a/.github/workflows/publish-to-npm.yml +++ b/.github/workflows/publish-to-npm.yml @@ -81,7 +81,7 @@ jobs: - name: Commit changes if: inputs.dist-tag == 'next' - uses: EndBug/add-and-commit@v10 + uses: EndBug/add-and-commit@v11 id: commit with: author_name: Apify Release Bot diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 446ffa5f849f..8c26f30d5aad 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -162,7 +162,7 @@ jobs: - name: Commit changes id: commit - uses: EndBug/add-and-commit@v10 + uses: EndBug/add-and-commit@v11 with: author_name: Apify Release Bot author_email: noreply@apify.com @@ -240,7 +240,7 @@ jobs: yarn docusaurus api:version $MAJOR_MINOR - name: Commit and push the version snapshot - uses: EndBug/add-and-commit@v10 + uses: EndBug/add-and-commit@v11 with: author_name: Apify Release Bot author_email: noreply@apify.com