ci(deps): bump complytime/org-infra/.github/workflows/reusable_crapload_analysis.yml from 0.7.1 to 0.8.0 by dependabot[bot] · Pull Request #224 · complytime/.github

dependabot · 2026-09-14T07:44:00Z

Bumps complytime/org-infra/.github/workflows/reusable_crapload_analysis.yml from 0.7.1 to 0.8.0.

Release notes

Sourced from complytime/org-infra/.github/workflows/reusable_crapload_analysis.yml's releases.

v0.8.0

org-infra 0.8.0

Central reusable GitHub Actions workflows, CI templates, compliance policy assets, and org sync tooling. Downstream repos usually consume this repo via workflow uses: pins or version tags.

Before you upgrade

Treat workflow YAML updates as potentially breaking for every consumer until you’ve reviewed them.

Use the Workflows & GitHub Actions section below for PRs that touched pipelines; for exact paths and hunks, open the compare link and narrow Files changed to .github/workflows/.

View full diff: v0.7.1 → v0.8.0

Changes

fix: exclude complytime-policies from ruff.toml sync and pip dependabot — #492 · @yvonnedevlinrh

chore: disable renovate vulnerability alerts — #482 · @marcusburghardt

chore: update feature issue template — #474 · @beatrizmcouto

chore: update user story issue template — #470 · @beatrizmcouto

chore: update task issue template — #471 · @beatrizmcouto

chore: sync issue templates across org repositories — #475 · @beatrizmcouto

chore: update bug report issue template — #473 · @beatrizmcouto

chore: add spike issue template — #472 · @beatrizmcouto

feat(preflight): accept optional token secret for tag creation — #496 · @trevor-vaughan

feat(ci): add production council review workflow chain — #428 · @sonupreetam

feat(ci): security hardening for council review workflows — #499 · @sonupreetam

chore: add org label sync workflow — #501 · @beatrizmcouto

chore: resolve MegaLinter and security-scanner findings across the repo — #504 · @trevor-vaughan

feat: add stale review request alerts workflow (#478) — #505 · @sonupreetam

feat(ci): sync Compliance Automation project board across orgs — #509 · @beatrizmcouto

fix: add retry loop to cosign verify in Quay promote test — #517 · @yvonnedevlinrh

feat(ci): add reusable Homebrew formula publishing workflow — #516 · @sonupreetam

feat: add replaces support to sync script for downstream file cleanup — #524 · @em-redhat

fix(ci): skip unsupported cross-org project repo links — #525 · @beatrizmcouto

feat(ci): auto-set Organization on Compliance Automation board items — #522 · @beatrizmcouto

feat(ci): copy issue Priority onto linked PRs on the planning board — #534 · @beatrizmcouto

feat(ci): inherit PR Review priority from linked issue Priority — #536 · @beatrizmcouto

feat(ci): add completed-sprint velocity report — #544 · @beatrizmcouto

feat: add Epic issue template — #567 · @beatrizmcouto

fix(vuln-scan): handle missing trivyignore file gracefully — #575 · @marcusburghardt

feat(ci): move Ready for Review items to In Review on reviewer activity — #554 · @beatrizmcouto

fix: use numeric UID in test Containerfile (DL3066) — #582 · @marcusburghardt

fix(ci): prevent oversized OSV job outputs — #579 · @yvonnedevlinrh

Features

chore: increase project board sync interval to 15 minutes — #580 · @marcusburghardt

Maintenance

... (truncated)

Commits

bd3718a Merge pull request #584 from marcusburghardt/fix/release-drafter-deprecated-c...
5b7ce17 fix: migrate release-drafter config to new category syntax
3321bb9 Merge pull request #579 from yvonnedevlinrh/opsx/fix-osv-output-limit
9c568dd fix(vuln-scan): close review feedback on OSV output-limit PR
c20da73 fix(ci): prevent oversized OSV job outputs
942c1b3 Merge pull request #582 from marcusburghardt/fix/containerfile-hadolint-dl3066
fa6a085 fix: use numeric UID in test Containerfile (DL3066)
31642c2 Merge pull request #581 from complytime/dependabot/github_actions/renovatebot...
24cee8d ci(deps): bump renovatebot/github-action from 46.2.5 to 46.2.6
72f7ce0 Merge pull request #580 from marcusburghardt/576-increase-project-board-sync-...
Additional commits viewable in compare view

github-actions · 2026-09-14T07:44:20Z

CRAP Load Analysis

No Go code changes detected in this PR. No CRAP impact.

github-actions · 2026-09-14T07:44:21Z

🤖 Standardized Dependabot Review Summary 🤖

This PR was processed by the organization's reusable CI pipeline.

Criterion	Status	Detail
Dependencies Review	success	View logs
Calculated Risk	medium	`complytime/org-infra/.github/workflows/reusable_crapload_analysis.yml` v0.8.0
Release Age	69h	Released 69 hours ago
Ownership	org-owned	Same organization — trusted source
Dependency Usage	2 repos	Informational only — does not affect approval

Auto-approval: ✅ Approved + auto-merge requested (org-owned)

Maintainer check list:

Ensure the PR passed all CI tests (required status checks).
Investigate failures for Major updates or any manual review requirement.
Don't overlook breaking changes and changelog information.
If the scorecard value is low, consider to contribute to make it higher. Everybody wins!
Be diligent. When in doubt, ask another maintainer for additional review.

github-actions

Automatically approved: risk=medium, review=success, ownership=org-owned, release_age=skipped (org-owned).

marcusburghardt

LGTM

github-actions · 2026-09-14T08:57:48Z

🤖 Standardized Dependabot Review Summary 🤖

This PR was processed by the organization's reusable CI pipeline.

Criterion	Status	Detail
Dependencies Review	success	View logs
Calculated Risk	medium	`complytime/org-infra/.github/workflows/reusable_crapload_analysis.yml` v0.8.0
Release Age	70h	Released 70 hours ago
Ownership	org-owned	Same organization — trusted source
Dependency Usage	5 repos	Informational only — does not affect approval

Auto-approval: ✅ Approved + auto-merge requested (org-owned)

Maintainer check list:

Ensure the PR passed all CI tests (required status checks).
Investigate failures for Major updates or any manual review requirement.
Don't overlook breaking changes and changelog information.
If the scorecard value is low, consider to contribute to make it higher. Everybody wins!
Be diligent. When in doubt, ask another maintainer for additional review.

github-actions

Automatically approved: risk=medium, review=success, ownership=org-owned, release_age=skipped (org-owned).

github-actions · 2026-09-14T08:59:38Z

🤖 Standardized Dependabot Review Summary 🤖

This PR was processed by the organization's reusable CI pipeline.

Criterion	Status	Detail
Dependencies Review	success	View logs
Calculated Risk	medium	`complytime/org-infra/.github/workflows/reusable_crapload_analysis.yml` v0.8.0
Release Age	70h	Released 70 hours ago
Ownership	org-owned	Same organization — trusted source
Dependency Usage	5 repos	Informational only — does not affect approval

Auto-approval: ✅ Approved + auto-merge requested (org-owned)

Maintainer check list:

Ensure the PR passed all CI tests (required status checks).
Investigate failures for Major updates or any manual review requirement.
Don't overlook breaking changes and changelog information.
If the scorecard value is low, consider to contribute to make it higher. Everybody wins!
Be diligent. When in doubt, ask another maintainer for additional review.

github-actions

Automatically approved: risk=medium, review=success, ownership=org-owned, release_age=skipped (org-owned).

…ad_analysis.yml Bumps [complytime/org-infra/.github/workflows/reusable_crapload_analysis.yml](https://github.com/complytime/org-infra) from 0.7.1 to 0.8.0. - [Release notes](https://github.com/complytime/org-infra/releases) - [Changelog](https://github.com/complytime/org-infra/blob/main/CHANGELOG.md) - [Commits](complytime/org-infra@0c78471...bd3718a) --- updated-dependencies: - dependency-name: complytime/org-infra/.github/workflows/reusable_crapload_analysis.yml dependency-version: 0.8.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-09-14T09:03:42Z

🤖 Standardized Dependabot Review Summary 🤖

This PR was processed by the organization's reusable CI pipeline.

Criterion	Status	Detail
Dependencies Review	success	View logs
Calculated Risk	medium	`complytime/org-infra/.github/workflows/reusable_crapload_analysis.yml` v0.8.0
Release Age	70h	Released 70 hours ago
Ownership	org-owned	Same organization — trusted source
Dependency Usage	5 repos	Informational only — does not affect approval

Auto-approval: ✅ Approved + auto-merge requested (org-owned)

Maintainer check list:

Ensure the PR passed all CI tests (required status checks).
Investigate failures for Major updates or any manual review requirement.
Don't overlook breaking changes and changelog information.
If the scorecard value is low, consider to contribute to make it higher. Everybody wins!
Be diligent. When in doubt, ask another maintainer for additional review.

github-actions

Automatically approved: risk=medium, review=success, ownership=org-owned, release_age=skipped (org-owned).

dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Sep 14, 2026

dependabot Bot requested review from gxmiranda, jflowers, jpower432 and marcusburghardt as code owners September 14, 2026 07:44

github-actions Bot approved these changes Sep 14, 2026

View reviewed changes

github-actions Bot enabled auto-merge (squash) September 14, 2026 07:44

marcusburghardt approved these changes Sep 14, 2026

View reviewed changes

dependabot Bot force-pushed the dependabot/github_actions/complytime/org-infra/dot-github/workflows/reusable_crapload_analysis.yml-0.8.0 branch from 4bcf0af to 562885d Compare September 14, 2026 08:57

github-actions Bot approved these changes Sep 14, 2026

View reviewed changes

dependabot Bot force-pushed the dependabot/github_actions/complytime/org-infra/dot-github/workflows/reusable_crapload_analysis.yml-0.8.0 branch from 562885d to 0edcbc2 Compare September 14, 2026 08:59

github-actions Bot approved these changes Sep 14, 2026

View reviewed changes

dependabot Bot force-pushed the dependabot/github_actions/complytime/org-infra/dot-github/workflows/reusable_crapload_analysis.yml-0.8.0 branch from 0edcbc2 to 28937d2 Compare September 14, 2026 09:03

github-actions Bot merged commit a86f681 into main Sep 14, 2026
15 checks passed

github-actions Bot deleted the dependabot/github_actions/complytime/org-infra/dot-github/workflows/reusable_crapload_analysis.yml-0.8.0 branch September 14, 2026 09:03

github-actions Bot approved these changes Sep 14, 2026

View reviewed changes

Navigation Menu

Repository navigation

ci(deps): bump complytime/org-infra/.github/workflows/reusable_crapload_analysis.yml from 0.7.1 to 0.8.0 - #224

ci(deps): bump complytime/org-infra/.github/workflows/reusable_crapload_analysis.yml from 0.7.1 to 0.8.0#224
github-actions[bot] merged 1 commit into
mainfrom
dependabot/github_actions/complytime/org-infra/dot-github/workflows/reusable_crapload_analysis.yml-0.8.0

dependabot Bot commented on behalf of github Sep 14, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Sep 14, 2026

Uh oh!

github-actions Bot commented Sep 14, 2026

Uh oh!

github-actions Bot left a comment

Uh oh!

marcusburghardt left a comment

Uh oh!

github-actions Bot commented Sep 14, 2026

Uh oh!

github-actions Bot left a comment

Uh oh!

github-actions Bot commented Sep 14, 2026

Uh oh!

github-actions Bot left a comment

Uh oh!

Uh oh!

github-actions Bot commented Sep 14, 2026

Uh oh!

github-actions Bot left a comment

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Sep 14, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v0.8.0

org-infra 0.8.0

Before you upgrade

Changes

Features

Maintenance

Uh oh!

github-actions Bot commented Sep 14, 2026

CRAP Load Analysis

Uh oh!

github-actions Bot commented Sep 14, 2026

Uh oh!

github-actions Bot left a comment

Choose a reason for hiding this comment

Uh oh!

marcusburghardt left a comment

Choose a reason for hiding this comment

Uh oh!

github-actions Bot commented Sep 14, 2026

Uh oh!

github-actions Bot left a comment

Choose a reason for hiding this comment

Uh oh!

github-actions Bot commented Sep 14, 2026

Uh oh!

github-actions Bot left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

github-actions Bot commented Sep 14, 2026

Uh oh!

github-actions Bot left a comment

Choose a reason for hiding this comment

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Sep 14, 2026 •

edited

Loading