)]}'
{
  "log": [
    {
      "commit": "603f8ba0a8771a4b4962f52c6d55c8ecfe25d396",
      "tree": "a4d5798170b2e6428b80b94f8f9a3fcd3de93bda",
      "parents": [
        "0ff9972b5872e19c9f4555c9159c2fea4f794355"
      ],
      "author": {
        "name": "asfgit",
        "email": "asfgit@users.noreply.github.com",
        "time": "Sat Aug 01 03:11:25 2026 +0000"
      },
      "committer": {
        "name": "asfgit",
        "email": "asfgit@users.noreply.github.com",
        "time": "Sat Aug 01 03:11:25 2026 +0000"
      },
      "message": "Remove Expired Refs\n\nGenerated by .github/workflows/remove_expired.yml\n"
    },
    {
      "commit": "0ff9972b5872e19c9f4555c9159c2fea4f794355",
      "tree": "372496a3667dc322d2a311aaac414c0037c42a14",
      "parents": [
        "794720207c174102574fcc9e2fec708f4f168a03"
      ],
      "author": {
        "name": "asfgit",
        "email": "asfgit@users.noreply.github.com",
        "time": "Fri Jul 31 03:12:39 2026 +0000"
      },
      "committer": {
        "name": "asfgit",
        "email": "asfgit@users.noreply.github.com",
        "time": "Fri Jul 31 03:12:39 2026 +0000"
      },
      "message": "Remove Expired Refs\n\nGenerated by .github/workflows/remove_expired.yml\n"
    },
    {
      "commit": "794720207c174102574fcc9e2fec708f4f168a03",
      "tree": "76dc1cca175f63dbf9c3c3706c54f159a2181861",
      "parents": [
        "b9fe8ed066f7403403239cd5a7e887f44ddb495f"
      ],
      "author": {
        "name": "asfgit",
        "email": "asfgit@users.noreply.github.com",
        "time": "Thu Jul 30 16:45:13 2026 +0000"
      },
      "committer": {
        "name": "asfgit",
        "email": "asfgit@users.noreply.github.com",
        "time": "Thu Jul 30 16:45:13 2026 +0000"
      },
      "message": "Sync actions.yml, composite action, and approved_patterns.yml\n\nGenerated by .github/workflows/update.yml\n"
    },
    {
      "commit": "b9fe8ed066f7403403239cd5a7e887f44ddb495f",
      "tree": "32155b7b9c2e8568a822a81488a7be4fff8bc510",
      "parents": [
        "10e577fd5d5bbac292d290685870dd599f42b69b"
      ],
      "author": {
        "name": "Jarek Potiuk",
        "email": "jarek@potiuk.com",
        "time": "Thu Jul 30 18:36:08 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Thu Jul 30 18:36:08 2026 +0200"
      },
      "message": "Stop push workflows firing on release tags (#1107)\n\nThe per-action release tags (pelican/v1.0.0, pelican/v1, ...) touch the same\npaths these two workflows filter on, and neither named a branches filter, so\na tag push triggered them.\n\npelican-action-test then derived TARGET from github.ref_name, which for a tag\npush is the tag itself, and tried to create a branch \"testsite-pelican/v1\":\n\n  error: pathspec \u0027testsite-pelican/v1\u0027 did not match any file(s) known to git\n  Process completed with exit code 128\n\nNaming any branches filter restricts a push trigger to branch pushes, so\n\u0027**\u0027 keeps current behaviour and excludes tags. Otherwise this recurs for\nevery seeded action.\n\nGenerated-by: Claude Opus 5 (1M context) via Claude Code"
    },
    {
      "commit": "10e577fd5d5bbac292d290685870dd599f42b69b",
      "tree": "35bbeb45ac67bcd5d066011b65a581c05e55aa55",
      "parents": [
        "93131d63b597ea982971b81a44ba3469c21e5580"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Thu Jul 30 18:35:56 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Thu Jul 30 18:35:56 2026 +0200"
      },
      "message": "action-allowlist-review: bump sbt/setup-sbt (#1128)\n\nBumps [sbt/setup-sbt](https://github.com/sbt/setup-sbt) from 1.5.5 to 1.5.6.\n- [Release notes](https://github.com/sbt/setup-sbt/releases)\n- [Commits](https://github.com/sbt/setup-sbt/compare/d059c39de700f4cc5cb64f9f56577315e44a984e...bfea3c5f48abd221b04a6df4798aa5eb8b6a2baf)\n\n---\nupdated-dependencies:\n- dependency-name: sbt/setup-sbt\n  dependency-version: 1.5.6\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "93131d63b597ea982971b81a44ba3469c21e5580",
      "tree": "dbf3d8be55e28af1a973376736191de62c897d3f",
      "parents": [
        "679271665851d6fc0d1c4d7c1f36a42300b7285e"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Thu Jul 30 18:35:37 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Thu Jul 30 18:35:37 2026 +0200"
      },
      "message": "action-allowlist-review: bump j178/prek-action (#1127)\n\nBumps [j178/prek-action](https://github.com/j178/prek-action) from 2.0.6 to 3.0.0.\n- [Release notes](https://github.com/j178/prek-action/releases)\n- [Commits](https://github.com/j178/prek-action/compare/5337cb91e0fa35a7ff31b9ca345126d8bbbcdf16...4e14d07f9231acabce116ccfca13b13dd9755ece)\n\n---\nupdated-dependencies:\n- dependency-name: j178/prek-action\n  dependency-version: 3.0.0\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "679271665851d6fc0d1c4d7c1f36a42300b7285e",
      "tree": "ba19dcee5d44c39ad27b70c2e9ba1b5d00bb7869",
      "parents": [
        "e2f4582a9531289275e8b488797b9f8516155c8d"
      ],
      "author": {
        "name": "Jarek Potiuk",
        "email": "jarek@potiuk.com",
        "time": "Thu Jul 30 18:34:38 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Thu Jul 30 18:34:38 2026 +0200"
      },
      "message": "verify-action-build: treat only-in-rebuilt JS as informational (#1125)\n\nThe JS build check hard-failed on any file present in the rebuild but\nabsent from the published tree.  Such a file is not published by the\naction, so it never reaches a consumer\u0027s runner and cannot be a\nsupply-chain vector -- it is normally intermediate output from a\nmulti-stage build that upstream deliberately does not commit.\n\nJetBrains/qodana-action is the recurring case.  It declares\n`main: scan/dist/index.js`, so OUT_DIR resolves to the whole `scan/`\nsub-project (the Dockerfile takes the first path component of `main:`),\nand the rebuild\u0027s stage-one `tsc` output `scan/lib/*.js` -- gitignored\nupstream via `**/lib`, consumed only by the `esbuild` step that writes\nthe published `scan/dist/index.js` -- lands inside the compared tree.\nThat failed the check on #960 (which approved v2026.1.3 anyway) and\nagain on #1123, each time also triggering the approved-lock-file retry\nrebuild, which re-emits the same files and fails identically.\n\nReport these files instead of failing on them.  What actually matters is\nunchanged: JS in the published tree that differs from the rebuild, or\nthat the rebuild does not produce at all, remains a hard failure.  A new\nguard covers the one case the downgrade could have masked -- a published\ntree with no compiled JS while the rebuild produced some, where there is\nnothing to reconcile the rebuild against.\n\nGenerated-by: Claude Opus 5 (1M context) via Claude Code"
    },
    {
      "commit": "e2f4582a9531289275e8b488797b9f8516155c8d",
      "tree": "d140998d70416b09330ab6867e8700f0ed4ffbc9",
      "parents": [
        "5c869e2d442c1e03d45530bc2dba85d2c669c908"
      ],
      "author": {
        "name": "Jarek Potiuk",
        "email": "jarek@potiuk.com",
        "time": "Thu Jul 30 18:34:23 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Thu Jul 30 18:34:23 2026 +0200"
      },
      "message": "analyze-action-pr: record the qodana only-in-rebuilt precedent (#1126)\n\nAdds a precedents row for #1123 and a gap-table row for the shape:\na two-stage `tsc` -\u003e `esbuild` build where OUT_DIR resolves to the\nsub-project, so the gitignored stage-one `lib/` output appears only\nin the rebuild.\n\nNotes that #960 hit the same false positive and was merged over it --\nonly the gradle-jar half of that failure was fixed (in #951) -- so a\nfuture run can cite the precedent instead of re-deriving it.\n\nGenerated-by: Claude Opus 5 (1M context) via Claude Code"
    },
    {
      "commit": "5c869e2d442c1e03d45530bc2dba85d2c669c908",
      "tree": "5449a418e4c90c9e51a0187838d070cfbacd17d7",
      "parents": [
        "7f7350538071c3a57b6ddf679013b32cc920985b"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Thu Jul 30 18:34:06 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Thu Jul 30 18:34:06 2026 +0200"
      },
      "message": "Bump zizmorcore/zizmor-action from 0.6.0 to 0.6.1 in /.github/workflows (#1129)\n\nBumps [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action) from 0.6.0 to 0.6.1.\n- [Release notes](https://github.com/zizmorcore/zizmor-action/releases)\n- [Commits](https://github.com/zizmorcore/zizmor-action/compare/6599ee8b7a49aef6a770f63d261d214911a7ce02...6fc4b006235f201fdab3722e17240ab420d580e5)\n\n---\nupdated-dependencies:\n- dependency-name: zizmorcore/zizmor-action\n  dependency-version: 0.6.1\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "7f7350538071c3a57b6ddf679013b32cc920985b",
      "tree": "30be5c7ef7fac82ca17d1912870ddee40f8fe4ee",
      "parents": [
        "6197f422167db8d813098515588b12b5a0d5f9ca"
      ],
      "author": {
        "name": "asfgit",
        "email": "asfgit@users.noreply.github.com",
        "time": "Thu Jul 30 13:37:10 2026 +0000"
      },
      "committer": {
        "name": "asfgit",
        "email": "asfgit@users.noreply.github.com",
        "time": "Thu Jul 30 13:37:10 2026 +0000"
      },
      "message": "Sync actions.yml, composite action, and approved_patterns.yml\n\nGenerated by .github/workflows/update.yml\n"
    },
    {
      "commit": "6197f422167db8d813098515588b12b5a0d5f9ca",
      "tree": "08943d2ab3e16f5e25edbbb0cfc4158b91027e0d",
      "parents": [
        "9bdc7bc92ed388a610009d08a385f60beac4d96e"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Thu Jul 30 15:10:53 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Thu Jul 30 15:10:53 2026 +0200"
      },
      "message": "action-allowlist-review: bump JetBrains/qodana-action (#1123)\n\nBumps [JetBrains/qodana-action](https://github.com/jetbrains/qodana-action) from 2026.1.3 to 2026.2.0.\n- [Release notes](https://github.com/jetbrains/qodana-action/releases)\n- [Commits](https://github.com/jetbrains/qodana-action/compare/4861e015da555e86a72b862892aba6c2b93e6891...b588768b6e7e6da579e518bc584f79de0d243692)\n\n---\nupdated-dependencies:\n- dependency-name: JetBrains/qodana-action\n  dependency-version: 2026.2.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "9bdc7bc92ed388a610009d08a385f60beac4d96e",
      "tree": "7801663eb6aae445000beab30b013fa49e749aab",
      "parents": [
        "bcb7797273db5292c8370e61c0959038ce1e27e7"
      ],
      "author": {
        "name": "asfgit",
        "email": "asfgit@users.noreply.github.com",
        "time": "Thu Jul 30 10:11:34 2026 +0000"
      },
      "committer": {
        "name": "asfgit",
        "email": "asfgit@users.noreply.github.com",
        "time": "Thu Jul 30 10:11:34 2026 +0000"
      },
      "message": "Sync actions.yml, composite action, and approved_patterns.yml\n\nGenerated by .github/workflows/update.yml\n"
    },
    {
      "commit": "bcb7797273db5292c8370e61c0959038ce1e27e7",
      "tree": "2c5b74c411838ac117c2f43e814efca59952d2f4",
      "parents": [
        "d05de2969f191fd67d44e9f74b863362ddb57c8c"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Thu Jul 30 11:56:58 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Thu Jul 30 11:56:58 2026 +0200"
      },
      "message": "Bump the codeql-action group across 1 directory with 3 updates (#1124)\n\nBumps the codeql-action group with 3 updates in the /.github/workflows directory: [github/codeql-action/init](https://github.com/github/codeql-action), [github/codeql-action/autobuild](https://github.com/github/codeql-action) and [github/codeql-action/analyze](https://github.com/github/codeql-action).\n\n\nUpdates `github/codeql-action/init` from 4.37.2 to 4.37.3\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/e0647621c2984b5ed2f768cb892365bf2a616ad1...e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81)\n\nUpdates `github/codeql-action/autobuild` from 4.37.2 to 4.37.3\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/e0647621c2984b5ed2f768cb892365bf2a616ad1...e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81)\n\nUpdates `github/codeql-action/analyze` from 4.37.2 to 4.37.3\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/e0647621c2984b5ed2f768cb892365bf2a616ad1...e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81)\n\n---\nupdated-dependencies:\n- dependency-name: github/codeql-action/init\n  dependency-version: 4.37.3\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: codeql-action\n- dependency-name: github/codeql-action/autobuild\n  dependency-version: 4.37.3\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: codeql-action\n- dependency-name: github/codeql-action/analyze\n  dependency-version: 4.37.3\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: codeql-action\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "d05de2969f191fd67d44e9f74b863362ddb57c8c",
      "tree": "c1d8a7b2a9d92058dc9a3b1b830135d68e9328e8",
      "parents": [
        "8df9e30c3b9385d24779d0e98be04710e95dd43b"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Thu Jul 30 11:56:34 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Thu Jul 30 11:56:34 2026 +0200"
      },
      "message": "action-allowlist-review: bump mozilla-actions/sccache-action (#1121)\n\nBumps [mozilla-actions/sccache-action](https://github.com/mozilla-actions/sccache-action) from 0.0.10 to 0.0.11.\n- [Release notes](https://github.com/mozilla-actions/sccache-action/releases)\n- [Commits](https://github.com/mozilla-actions/sccache-action/compare/9e7fa8a12102821edf02ca5dbea1acd0f89a2696...fc920bf0ec8de6ee65d409111f7ec508035751ba)\n\n---\nupdated-dependencies:\n- dependency-name: mozilla-actions/sccache-action\n  dependency-version: 0.0.11\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "8df9e30c3b9385d24779d0e98be04710e95dd43b",
      "tree": "d46eda73effc7b51e3bc9f0a2044ca482e8c4f95",
      "parents": [
        "78f886e004930dfe96e2f4a964f47ed9233716d5"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Thu Jul 30 11:55:32 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Thu Jul 30 11:55:32 2026 +0200"
      },
      "message": "action-allowlist-review: bump docker/login-action (#1122)\n\nBumps [docker/login-action](https://github.com/docker/login-action) from 4.5.2 to 4.6.0.\n- [Release notes](https://github.com/docker/login-action/releases)\n- [Commits](https://github.com/docker/login-action/compare/371161bbe7024a29a25c5e19bfcbc0804fe9ad2c...dbcb813823bdd20940b903addbd779551569679f)\n\n---\nupdated-dependencies:\n- dependency-name: docker/login-action\n  dependency-version: 4.6.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "78f886e004930dfe96e2f4a964f47ed9233716d5",
      "tree": "11fa429b62eecec1b7a58666a4d48c45e9a5e0b1",
      "parents": [
        "aa8ca23c1285d531d0559fe5dcb180ac6ec4d060"
      ],
      "author": {
        "name": "asfgit",
        "email": "asfgit@users.noreply.github.com",
        "time": "Thu Jul 30 03:11:42 2026 +0000"
      },
      "committer": {
        "name": "asfgit",
        "email": "asfgit@users.noreply.github.com",
        "time": "Thu Jul 30 03:11:42 2026 +0000"
      },
      "message": "Remove Expired Refs\n\nGenerated by .github/workflows/remove_expired.yml\n"
    },
    {
      "commit": "aa8ca23c1285d531d0559fe5dcb180ac6ec4d060",
      "tree": "b4c722912b460ecc0e32fb7f08701509d7e23e88",
      "parents": [
        "60be9d70cdcda58fb8c6226d7ae05c3d4a1a865b"
      ],
      "author": {
        "name": "asfgit",
        "email": "asfgit@users.noreply.github.com",
        "time": "Wed Jul 29 03:19:46 2026 +0000"
      },
      "committer": {
        "name": "asfgit",
        "email": "asfgit@users.noreply.github.com",
        "time": "Wed Jul 29 03:19:46 2026 +0000"
      },
      "message": "Remove Expired Refs\n\nGenerated by .github/workflows/remove_expired.yml\n"
    },
    {
      "commit": "60be9d70cdcda58fb8c6226d7ae05c3d4a1a865b",
      "tree": "bbaaa7492a71d97086a3dffecb7b23ac2c5e4e8e",
      "parents": [
        "e5f337d29eeb2b734f47d7f5945121dbecc6f04b"
      ],
      "author": {
        "name": "Jarek Potiuk",
        "email": "jarek@potiuk.com",
        "time": "Tue Jul 28 23:23:27 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue Jul 28 23:23:27 2026 +0200"
      },
      "message": "release-actions: tag only, stop attempting GitHub Releases (#1108)\n\nDependabot\u0027s github_actions ecosystem resolves versions by listing tags and\nfiltering them by prefix, so a GitHub Release is not part of any path a\nconsumer or a bump PR depends on. Attempting one bought nothing and failed\nanyway: seeding allowlist-check and pelican both returned HTTP 422 from\n`gh release create`, which _run(check\u003dFalse) silently discarded, leaving a\ngreen run with tags pushed and no Release.\n\nDrop the call rather than debug it. create_release now creates the version\ntag, moves the major tag and stops; the --repo argument it no longer needs is\ngone from the call (it is still used for the PR-label lookup).\n\nThe four actions are already seeded by hand at v1.0.0 on this basis.\n\nGenerated-by: Claude Opus 5 (1M context) via Claude Code"
    },
    {
      "commit": "e5f337d29eeb2b734f47d7f5945121dbecc6f04b",
      "tree": "6697977a9efa5004981c4480fd707ca5e0b9d3cf",
      "parents": [
        "dd5676fa682af870fcf781a00b03af6e4b824808"
      ],
      "author": {
        "name": "asfgit",
        "email": "asfgit@users.noreply.github.com",
        "time": "Tue Jul 28 21:19:21 2026 +0000"
      },
      "committer": {
        "name": "asfgit",
        "email": "asfgit@users.noreply.github.com",
        "time": "Tue Jul 28 21:19:21 2026 +0000"
      },
      "message": "Sync actions.yml, composite action, and approved_patterns.yml\n\nGenerated by .github/workflows/update.yml\n"
    },
    {
      "commit": "dd5676fa682af870fcf781a00b03af6e4b824808",
      "tree": "ff86d810679a4559de751a05120bb9b71d0d0d1f",
      "parents": [
        "cdc377f1ed9c2e38c930cc4c46511d62b820ae00"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Tue Jul 28 23:19:03 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue Jul 28 23:19:03 2026 +0200"
      },
      "message": "action-allowlist-review: bump carabiner-dev/actions/ampel/verify (#1115)\n\nBumps [carabiner-dev/actions/ampel/verify](https://github.com/carabiner-dev/actions) from 1.2.3 to 1.2.6.\n- [Release notes](https://github.com/carabiner-dev/actions/releases)\n- [Commits](https://github.com/carabiner-dev/actions/compare/2a4b2cd115ede14629b03ef7e77586d3269d4c72...36a39ef667efe7112df8b1a534a4e37f35fad6fd)\n\n---\nupdated-dependencies:\n- dependency-name: carabiner-dev/actions/ampel/verify\n  dependency-version: 1.2.6\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "cdc377f1ed9c2e38c930cc4c46511d62b820ae00",
      "tree": "8a9d9aa9f0afd17b0295dd09ae49c188b7160b22",
      "parents": [
        "d7eb3a1ad8d228c921a28675b4d2d139ecd21cd9"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Tue Jul 28 23:19:00 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue Jul 28 23:19:00 2026 +0200"
      },
      "message": "action-allowlist-review: bump carabiner-dev/actions/install/ampel (#1114)\n\nBumps [carabiner-dev/actions/install/ampel](https://github.com/carabiner-dev/actions) from 1.2.3 to 1.2.6.\n- [Release notes](https://github.com/carabiner-dev/actions/releases)\n- [Commits](https://github.com/carabiner-dev/actions/compare/2a4b2cd115ede14629b03ef7e77586d3269d4c72...36a39ef667efe7112df8b1a534a4e37f35fad6fd)\n\n---\nupdated-dependencies:\n- dependency-name: carabiner-dev/actions/install/ampel\n  dependency-version: 1.2.6\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "d7eb3a1ad8d228c921a28675b4d2d139ecd21cd9",
      "tree": "8ad3e24f691dc7c2953eb129f29b68ba458de410",
      "parents": [
        "56a61cc3899d01fe17dd90390538994bfa3b8d93"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Tue Jul 28 23:18:58 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue Jul 28 23:18:58 2026 +0200"
      },
      "message": "action-allowlist-review: bump carabiner-dev/actions/install/ampel-bootstrap (#1113)\n\nBumps [carabiner-dev/actions/install/ampel-bootstrap](https://github.com/carabiner-dev/actions) from 60563b5460a9e4ae9921c0da551b4ddd6059ff45 to 4c23ca5801511c2f0e9dd8c8dd011cab26a46be4.\n- [Release notes](https://github.com/carabiner-dev/actions/releases)\n- [Commits](https://github.com/carabiner-dev/actions/compare/60563b5460a9e4ae9921c0da551b4ddd6059ff45...4c23ca5801511c2f0e9dd8c8dd011cab26a46be4)\n\n---\nupdated-dependencies:\n- dependency-name: carabiner-dev/actions/install/ampel-bootstrap\n  dependency-version: 4c23ca5801511c2f0e9dd8c8dd011cab26a46be4\n  dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "56a61cc3899d01fe17dd90390538994bfa3b8d93",
      "tree": "77125b9c983a8ddfc0add492c9d89b4b16d36c2f",
      "parents": [
        "179c22d93479dabacbbdb75aa853dc5d81c9c29b"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Tue Jul 28 23:18:56 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue Jul 28 23:18:56 2026 +0200"
      },
      "message": "action-allowlist-review: bump carabiner-dev/actions/install/bnd (#1116)\n\nBumps [carabiner-dev/actions/install/bnd](https://github.com/carabiner-dev/actions) from 1.2.3 to 1.2.6.\n- [Release notes](https://github.com/carabiner-dev/actions/releases)\n- [Commits](https://github.com/carabiner-dev/actions/compare/2a4b2cd115ede14629b03ef7e77586d3269d4c72...36a39ef667efe7112df8b1a534a4e37f35fad6fd)\n\n---\nupdated-dependencies:\n- dependency-name: carabiner-dev/actions/install/bnd\n  dependency-version: 1.2.6\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "179c22d93479dabacbbdb75aa853dc5d81c9c29b",
      "tree": "18f34eedef8aa487915dad7b1b53ab54ce704e26",
      "parents": [
        "f45e4dfec02bca77f57f443085ba9e49fecaf982"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Tue Jul 28 23:18:53 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue Jul 28 23:18:53 2026 +0200"
      },
      "message": "action-allowlist-review: bump carabiner-dev/actions/install/download-and-verify (#1109)\n\nBumps [carabiner-dev/actions/install/download-and-verify](https://github.com/carabiner-dev/actions) from 60563b5460a9e4ae9921c0da551b4ddd6059ff45 to 4c23ca5801511c2f0e9dd8c8dd011cab26a46be4.\n- [Release notes](https://github.com/carabiner-dev/actions/releases)\n- [Commits](https://github.com/carabiner-dev/actions/compare/60563b5460a9e4ae9921c0da551b4ddd6059ff45...4c23ca5801511c2f0e9dd8c8dd011cab26a46be4)\n\n---\nupdated-dependencies:\n- dependency-name: carabiner-dev/actions/install/download-and-verify\n  dependency-version: 4c23ca5801511c2f0e9dd8c8dd011cab26a46be4\n  dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "f45e4dfec02bca77f57f443085ba9e49fecaf982",
      "tree": "2f1ed7b4f1c54bb20c4311fe6c0b4de1870d7a68",
      "parents": [
        "d99eab4af5d88b8e752a6ae7436dea972359734d"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Tue Jul 28 23:18:51 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue Jul 28 23:18:51 2026 +0200"
      },
      "message": "action-allowlist-review: bump tcort/github-action-markdown-link-check (#1111)\n\nBumps [tcort/github-action-markdown-link-check](https://github.com/tcort/github-action-markdown-link-check) from 1.1.2 to 1.1.3.\n- [Release notes](https://github.com/tcort/github-action-markdown-link-check/releases)\n- [Changelog](https://github.com/tcort/github-action-markdown-link-check/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/tcort/github-action-markdown-link-check/compare/e7c7a18363c842693fadde5d41a3bd3573a7a225...e047c5b37f24ab722bbef1a27b6fab7f96bc4068)\n\n---\nupdated-dependencies:\n- dependency-name: tcort/github-action-markdown-link-check\n  dependency-version: 1.1.3\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "d99eab4af5d88b8e752a6ae7436dea972359734d",
      "tree": "7b272761102b75c197206db38f87cccc0b5ea26e",
      "parents": [
        "7e241ded27cbac9fd0b3ba58c5d21593c3eb9df5"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Tue Jul 28 23:18:48 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue Jul 28 23:18:48 2026 +0200"
      },
      "message": "action-allowlist-review: bump sbt/setup-sbt (#1112)\n\nBumps [sbt/setup-sbt](https://github.com/sbt/setup-sbt) from 1.5.4 to 1.5.5.\n- [Release notes](https://github.com/sbt/setup-sbt/releases)\n- [Commits](https://github.com/sbt/setup-sbt/compare/f6db8ab474efba716fc7f04441ab33714e4825af...d059c39de700f4cc5cb64f9f56577315e44a984e)\n\n---\nupdated-dependencies:\n- dependency-name: sbt/setup-sbt\n  dependency-version: 1.5.5\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "7e241ded27cbac9fd0b3ba58c5d21593c3eb9df5",
      "tree": "c46851a8cac1efcee9d836ce9d713b24ecf0cee0",
      "parents": [
        "f570f62e550ee57d55894db8f95fac0c8957e400"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Tue Jul 28 23:18:46 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue Jul 28 23:18:46 2026 +0200"
      },
      "message": "action-allowlist-review: bump docker/login-action (#1110)\n\nBumps [docker/login-action](https://github.com/docker/login-action) from 4.5.1 to 4.5.2.\n- [Release notes](https://github.com/docker/login-action/releases)\n- [Commits](https://github.com/docker/login-action/compare/abd2ef45e78c5afb21d64d4ca52ee8550d9572c7...371161bbe7024a29a25c5e19bfcbc0804fe9ad2c)\n\n---\nupdated-dependencies:\n- dependency-name: docker/login-action\n  dependency-version: 4.5.2\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "f570f62e550ee57d55894db8f95fac0c8957e400",
      "tree": "5248e9028f4f562dec96102515065876738d3321",
      "parents": [
        "dff67c0154fd5ef9c25b273af3e12216bc03e42d"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Tue Jul 28 23:18:44 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue Jul 28 23:18:44 2026 +0200"
      },
      "message": "Bump the codeql-action group across 1 directory with 3 updates (#1117)\n\nBumps the codeql-action group with 3 updates in the /.github/workflows directory: [github/codeql-action/init](https://github.com/github/codeql-action), [github/codeql-action/autobuild](https://github.com/github/codeql-action) and [github/codeql-action/analyze](https://github.com/github/codeql-action).\n\n\nUpdates `github/codeql-action/init` from 4.37.1 to 4.37.2\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/7188fc363630916deb702c7fdcf4e481b751f97a...e0647621c2984b5ed2f768cb892365bf2a616ad1)\n\nUpdates `github/codeql-action/autobuild` from 4.37.1 to 4.37.2\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/7188fc363630916deb702c7fdcf4e481b751f97a...e0647621c2984b5ed2f768cb892365bf2a616ad1)\n\nUpdates `github/codeql-action/analyze` from 4.37.1 to 4.37.2\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/7188fc363630916deb702c7fdcf4e481b751f97a...e0647621c2984b5ed2f768cb892365bf2a616ad1)\n\n---\nupdated-dependencies:\n- dependency-name: github/codeql-action/init\n  dependency-version: 4.37.2\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: codeql-action\n- dependency-name: github/codeql-action/autobuild\n  dependency-version: 4.37.2\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: codeql-action\n- dependency-name: github/codeql-action/analyze\n  dependency-version: 4.37.2\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: codeql-action\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "dff67c0154fd5ef9c25b273af3e12216bc03e42d",
      "tree": "0d585b0cff27a0d7d855a2fee83b60cf1db34ee2",
      "parents": [
        "1f873b5679b1b1507c894c0fadfa2e7380a05dc5"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Tue Jul 28 23:18:41 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue Jul 28 23:18:41 2026 +0200"
      },
      "message": "Bump actions/checkout from 7.0.0 to 7.0.1 (#1118)\n\nBumps [actions/checkout](https://github.com/actions/checkout) from 7.0.0 to 7.0.1.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/v7...3d3c42e5aac5ba805825da76410c181273ba90b1)\n\n---\nupdated-dependencies:\n- dependency-name: actions/checkout\n  dependency-version: 7.0.1\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "1f873b5679b1b1507c894c0fadfa2e7380a05dc5",
      "tree": "3f0d7f420895c738f275014ee731fa4d54abd971",
      "parents": [
        "b5c4adb8b332838f1b8e15c5e055a4cbefd6e693"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Tue Jul 28 23:18:39 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue Jul 28 23:18:39 2026 +0200"
      },
      "message": "Bump astral-sh/setup-uv from 8.3.2 to 9.0.0 (#1119)\n\nBumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) from 8.3.2 to 9.0.0.\n- [Release notes](https://github.com/astral-sh/setup-uv/releases)\n- [Commits](https://github.com/astral-sh/setup-uv/compare/11f9893b081a58869d3b5fccaea48c9e9e46f990...c771a70e6277c0a99b617c7a806ffedaca235ff9)\n\n---\nupdated-dependencies:\n- dependency-name: astral-sh/setup-uv\n  dependency-version: 9.0.0\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "b5c4adb8b332838f1b8e15c5e055a4cbefd6e693",
      "tree": "6fe5821b83f6a30351871998786efb07f9801791",
      "parents": [
        "61dcea11f19e2bbe1263f14d72235e8da17d3ad0"
      ],
      "author": {
        "name": "asfgit",
        "email": "asfgit@users.noreply.github.com",
        "time": "Tue Jul 28 03:17:07 2026 +0000"
      },
      "committer": {
        "name": "asfgit",
        "email": "asfgit@users.noreply.github.com",
        "time": "Tue Jul 28 03:17:07 2026 +0000"
      },
      "message": "Remove Expired Refs\n\nGenerated by .github/workflows/remove_expired.yml\n"
    },
    {
      "commit": "61dcea11f19e2bbe1263f14d72235e8da17d3ad0",
      "tree": "aab6635e95530e665518654d75c95567a6fbfdf4",
      "parents": [
        "1a0724f851cf02f450a2d013ffb26550e5e11fdb"
      ],
      "author": {
        "name": "Jarek Potiuk",
        "email": "jarek@potiuk.com",
        "time": "Mon Jul 27 17:36:57 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Jul 27 17:36:57 2026 +0200"
      },
      "message": "Add tag-based, per-action releases (closes #1007) (#1032)\n\nThis repo serves several independently-consumed actions from one repo, but\nconsumers could only track `@main`, which drifts from any pinned SHA and\nwhich Dependabot cannot bump.\n\nIntroduce path-prefixed, per-action releases: each action is tagged under\nits leaf-directory prefix (allowlist-check/vX.Y.Z, pelican/vX.Y.Z,\nsave/vX.Y.Z, restore/vX.Y.Z) with a moving major tag. This is the monorepo\nscheme Dependabot\u0027s github_actions ecosystem understands\n(dependabot/dependabot-core#11286, contributed for this repo), so downstream\nprojects can pin a SHA with a \u0027# \u003cprefix\u003e/vX.Y.Z\u0027 comment and get automatic\nbump PRs.\n\n- scripts/release_actions.py: pure version/bump/changed-action logic plus a\n  thin git/gh layer; auto-detects affected actions (a stash/shared change\n  releases both stash actions), seeds first release at v1.0.0.\n- scripts/test_release_actions.py: 25 unit tests for the pure logic.\n- .github/workflows/release-actions.yml: on push to main, cut releases for\n  changed actions; bump defaults to patch, raised via release:minor /\n  release:major labels (or [minor]/[major] tokens) and suppressed with\n  release:skip. workflow_dispatch allows manual/seed releases.\n- README.md + RELEASING.md: pinning guidance and the release process.\n\nGenerated-by: Claude Opus 4.8 (1M context) via Claude Code"
    },
    {
      "commit": "1a0724f851cf02f450a2d013ffb26550e5e11fdb",
      "tree": "d686cd9e703cb4f9f75496706307bdc686da85ca",
      "parents": [
        "7b30887cc867e7f0a2eedb0f0a8c67853b39db78"
      ],
      "author": {
        "name": "asfgit",
        "email": "asfgit@users.noreply.github.com",
        "time": "Mon Jul 27 14:29:27 2026 +0000"
      },
      "committer": {
        "name": "asfgit",
        "email": "asfgit@users.noreply.github.com",
        "time": "Mon Jul 27 14:29:27 2026 +0000"
      },
      "message": "Sync actions.yml, composite action, and approved_patterns.yml\n\nGenerated by .github/workflows/update.yml\n"
    },
    {
      "commit": "7b30887cc867e7f0a2eedb0f0a8c67853b39db78",
      "tree": "df654976e6b8f93eb1ee14da55fb7c7ca01871da",
      "parents": [
        "1c06e31d3ee5d8a171b26b5fff2266af4a9d16ba"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Jul 27 16:22:54 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Jul 27 16:22:54 2026 +0200"
      },
      "message": "action-allowlist-review: bump 1Password/load-secrets-action (#1095)\n\nBumps [1Password/load-secrets-action](https://github.com/1password/load-secrets-action) from 4.0.1 to 4.1.1.\n- [Release notes](https://github.com/1password/load-secrets-action/releases)\n- [Commits](https://github.com/1password/load-secrets-action/compare/3a12b0ab99d9cd590a3e9b5a90ea017210ed9556...eb2efd0703da22a93c467f2d1ffbb6826c11e19c)\n\n---\nupdated-dependencies:\n- dependency-name: 1Password/load-secrets-action\n  dependency-version: 4.1.1\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "1c06e31d3ee5d8a171b26b5fff2266af4a9d16ba",
      "tree": "83ec6ddacd305b6ba2602fd90cbee46b90190d9b",
      "parents": [
        "b2ca4b38cb817fa614314a3dc27737d29325e498"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Jul 27 16:18:45 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Jul 27 16:18:45 2026 +0200"
      },
      "message": "action-allowlist-review: bump carabiner-dev/actions/install/download-and-verify (#1076)\n\nBumps [carabiner-dev/actions/install/download-and-verify](https://github.com/carabiner-dev/actions) from be6b4fa42fa3a8432416475d74218b9aa51ea527 to 60563b5460a9e4ae9921c0da551b4ddd6059ff45.\n- [Release notes](https://github.com/carabiner-dev/actions/releases)\n- [Commits](https://github.com/carabiner-dev/actions/compare/be6b4fa42fa3a8432416475d74218b9aa51ea527...60563b5460a9e4ae9921c0da551b4ddd6059ff45)\n\n---\nupdated-dependencies:\n- dependency-name: carabiner-dev/actions/install/download-and-verify\n  dependency-version: 60563b5460a9e4ae9921c0da551b4ddd6059ff45\n  dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "b2ca4b38cb817fa614314a3dc27737d29325e498",
      "tree": "4404bd92c5a0e248ec83ff4483fa69968f34950d",
      "parents": [
        "44ad0e5aa44fcc68acc3f9d749aedb7fd677a16f"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Jul 27 16:18:33 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Jul 27 16:18:33 2026 +0200"
      },
      "message": "action-allowlist-review: bump carabiner-dev/actions/install/ampel-bootstrap (#1077)\n\nBumps [carabiner-dev/actions/install/ampel-bootstrap](https://github.com/carabiner-dev/actions) from be6b4fa42fa3a8432416475d74218b9aa51ea527 to 60563b5460a9e4ae9921c0da551b4ddd6059ff45.\n- [Release notes](https://github.com/carabiner-dev/actions/releases)\n- [Commits](https://github.com/carabiner-dev/actions/compare/be6b4fa42fa3a8432416475d74218b9aa51ea527...60563b5460a9e4ae9921c0da551b4ddd6059ff45)\n\n---\nupdated-dependencies:\n- dependency-name: carabiner-dev/actions/install/ampel-bootstrap\n  dependency-version: 60563b5460a9e4ae9921c0da551b4ddd6059ff45\n  dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "44ad0e5aa44fcc68acc3f9d749aedb7fd677a16f",
      "tree": "e5df47438743e2ff65f6baa7a7961345c36e1c57",
      "parents": [
        "f0a8c7c8e9da82e8a6630d7a7981e8a96b7eb90d"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Jul 27 16:18:25 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Jul 27 16:18:25 2026 +0200"
      },
      "message": "action-allowlist-review: bump 1Password/load-secrets-action/configure (#1098)\n\nBumps [1Password/load-secrets-action/configure](https://github.com/1password/load-secrets-action) from 4.0.1 to 4.1.1.\n- [Release notes](https://github.com/1password/load-secrets-action/releases)\n- [Commits](https://github.com/1password/load-secrets-action/compare/3a12b0ab99d9cd590a3e9b5a90ea017210ed9556...eb2efd0703da22a93c467f2d1ffbb6826c11e19c)\n\n---\nupdated-dependencies:\n- dependency-name: 1Password/load-secrets-action/configure\n  dependency-version: 4.1.1\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "f0a8c7c8e9da82e8a6630d7a7981e8a96b7eb90d",
      "tree": "129dbf41c91a4d6794281b12d5e3693af02f80df",
      "parents": [
        "0391446bea7674e58ab8ca03617357127569162b"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Jul 27 16:17:38 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Jul 27 16:17:38 2026 +0200"
      },
      "message": "action-allowlist-review: bump pypa/cibuildwheel (#1101)\n\nBumps [pypa/cibuildwheel](https://github.com/pypa/cibuildwheel) from 4.1.0 to 4.1.1.\n- [Release notes](https://github.com/pypa/cibuildwheel/releases)\n- [Changelog](https://github.com/pypa/cibuildwheel/blob/main/docs/changelog.md)\n- [Commits](https://github.com/pypa/cibuildwheel/compare/294735312765b09d24a2fbec22660ce817587d55...4726cd35bb13f7bde50cf2761f2499ac7b3aa32c)\n\n---\nupdated-dependencies:\n- dependency-name: pypa/cibuildwheel\n  dependency-version: 4.1.1\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "0391446bea7674e58ab8ca03617357127569162b",
      "tree": "51534c6ec23ab79752b627108781a6fdcc19df1f",
      "parents": [
        "0768b27ab0315ea2b436198f90c76cd03bc3d06a"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Jul 27 16:17:28 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Jul 27 16:17:28 2026 +0200"
      },
      "message": "action-allowlist-review: bump sbt/setup-sbt (#1102)\n\nBumps [sbt/setup-sbt](https://github.com/sbt/setup-sbt) from 1.5.2 to 1.5.4.\n- [Release notes](https://github.com/sbt/setup-sbt/releases)\n- [Commits](https://github.com/sbt/setup-sbt/compare/6444f4c8111de4b9059c3975def104b03cfaa5f0...f6db8ab474efba716fc7f04441ab33714e4825af)\n\n---\nupdated-dependencies:\n- dependency-name: sbt/setup-sbt\n  dependency-version: 1.5.4\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "0768b27ab0315ea2b436198f90c76cd03bc3d06a",
      "tree": "87368a86bcec76a1062f2bf5e73a94b312491d25",
      "parents": [
        "1c88c9cc8540315ed575b1631d0a57c131b85eaa"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Jul 27 14:33:27 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Jul 27 14:33:27 2026 +0200"
      },
      "message": "Bump mypy from 2.2.0 to 2.3.0 in /stash (#1091)\n\nBumps [mypy](https://github.com/python/mypy) from 2.2.0 to 2.3.0.\n- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/python/mypy/compare/v2.2.0...v2.3.0)\n\n---\nupdated-dependencies:\n- dependency-name: mypy\n  dependency-version: 2.3.0\n  dependency-type: direct:development\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "1c88c9cc8540315ed575b1631d0a57c131b85eaa",
      "tree": "fc977379191683dd4653dae78c98643d15f8787d",
      "parents": [
        "f5a89af7231431e8744594f714e130564a9b3eb7"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Jul 27 14:33:10 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Jul 27 14:33:10 2026 +0200"
      },
      "message": "Bump types-markdown from 3.10.2.20260518 to 3.10.2.20260712 in /pelican (#1086)\n\nBumps [types-markdown](https://github.com/python/typeshed) from 3.10.2.20260518 to 3.10.2.20260712.\n- [Commits](https://github.com/python/typeshed/commits)\n\n---\nupdated-dependencies:\n- dependency-name: types-markdown\n  dependency-version: 3.10.2.20260712\n  dependency-type: direct:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "f5a89af7231431e8744594f714e130564a9b3eb7",
      "tree": "391047f68c04454ef2828d0b9e38f5be9826bbe2",
      "parents": [
        "8f3d996f2759dbf2fc874317a3c322b2ba8e2874"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Jul 27 13:19:59 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Jul 27 13:19:59 2026 +0200"
      },
      "message": "Bump types-requests from 2.33.0.20260518 to 2.33.0.20260712 in /pelican (#1087)\n\nBumps [types-requests](https://github.com/python/typeshed) from 2.33.0.20260518 to 2.33.0.20260712.\n- [Commits](https://github.com/python/typeshed/commits)\n\n---\nupdated-dependencies:\n- dependency-name: types-requests\n  dependency-version: 2.33.0.20260712\n  dependency-type: direct:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "8f3d996f2759dbf2fc874317a3c322b2ba8e2874",
      "tree": "501bba928fb1770b685789c440d04f55376b4a0d",
      "parents": [
        "b68fe1752b27dff7b1e72d2d86567db9701b2905"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Jul 27 12:54:27 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Jul 27 12:54:27 2026 +0200"
      },
      "message": "Bump ruff from 0.15.21 to 0.15.22 in /pelican (#1089)\n\nBumps [ruff](https://github.com/astral-sh/ruff) from 0.15.21 to 0.15.22.\n- [Release notes](https://github.com/astral-sh/ruff/releases)\n- [Changelog](https://github.com/astral-sh/ruff/blob/0.15.22/CHANGELOG.md)\n- [Commits](https://github.com/astral-sh/ruff/compare/0.15.21...0.15.22)\n\n---\nupdated-dependencies:\n- dependency-name: ruff\n  dependency-version: 0.15.22\n  dependency-type: direct:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "b68fe1752b27dff7b1e72d2d86567db9701b2905",
      "tree": "f607391511649e652831bbb756555bde73b0b7da",
      "parents": [
        "1f6ac3f2acfa02d6eb1ebe434d2e0e6405e2ce1d"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Jul 27 12:44:30 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Jul 27 12:44:30 2026 +0200"
      },
      "message": "Bump ruff from 0.15.21 to 0.15.22 in /stash (#1090)\n\nBumps [ruff](https://github.com/astral-sh/ruff) from 0.15.21 to 0.15.22.\n- [Release notes](https://github.com/astral-sh/ruff/releases)\n- [Changelog](https://github.com/astral-sh/ruff/blob/0.15.22/CHANGELOG.md)\n- [Commits](https://github.com/astral-sh/ruff/compare/0.15.21...0.15.22)\n\n---\nupdated-dependencies:\n- dependency-name: ruff\n  dependency-version: 0.15.22\n  dependency-type: direct:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "1f6ac3f2acfa02d6eb1ebe434d2e0e6405e2ce1d",
      "tree": "1035310ceae2bf86e9bcb63e27dd9b9320c6e995",
      "parents": [
        "929faf14a4a13696c79a0e92e4cdf6fbb74ba088"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Jul 27 12:44:23 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Jul 27 12:44:23 2026 +0200"
      },
      "message": "Bump mypy from 2.2.0 to 2.3.0 in /pelican (#1088)\n\nBumps [mypy](https://github.com/python/mypy) from 2.2.0 to 2.3.0.\n- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/python/mypy/compare/v2.2.0...v2.3.0)\n\n---\nupdated-dependencies:\n- dependency-name: mypy\n  dependency-version: 2.3.0\n  dependency-type: direct:development\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "929faf14a4a13696c79a0e92e4cdf6fbb74ba088",
      "tree": "9678466df7b80496ea6d8a519e421113bd17bd7f",
      "parents": [
        "4858180333299271058b4b96dfd8a064f4651b1f"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Jul 27 12:39:38 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Jul 27 12:39:38 2026 +0200"
      },
      "message": "Bump actions/setup-python from 6.3.0 to 7.0.0 in /pelican (#1104)\n\nBumps [actions/setup-python](https://github.com/actions/setup-python) from 6.3.0 to 7.0.0.\n- [Release notes](https://github.com/actions/setup-python/releases)\n- [Commits](https://github.com/actions/setup-python/compare/ece7cb06caefa5fff74198d8649806c4678c61a1...5fda3b95a4ea91299a34e894583c3862153e4b97)\n\n---\nupdated-dependencies:\n- dependency-name: actions/setup-python\n  dependency-version: 7.0.0\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "4858180333299271058b4b96dfd8a064f4651b1f",
      "tree": "daff6dc57d5c9c067c5cbe09b0f41e80eb8aea73",
      "parents": [
        "0899f4ed074fefe0f77c59b72b669e1ba421e9be"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Jul 27 12:38:45 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Jul 27 12:38:45 2026 +0200"
      },
      "message": "Bump actions/setup-python from 6.3.0 to 7.0.0 in /.github/workflows (#1103)\n\nBumps [actions/setup-python](https://github.com/actions/setup-python) from 6.3.0 to 7.0.0.\n- [Release notes](https://github.com/actions/setup-python/releases)\n- [Commits](https://github.com/actions/setup-python/compare/ece7cb06caefa5fff74198d8649806c4678c61a1...5fda3b95a4ea91299a34e894583c3862153e4b97)\n\n---\nupdated-dependencies:\n- dependency-name: actions/setup-python\n  dependency-version: 7.0.0\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "0899f4ed074fefe0f77c59b72b669e1ba421e9be",
      "tree": "93b4b06f8d8018311a730e3cd690920b2b9129dd",
      "parents": [
        "53ee17819a288a881d5054d1660946a19fff7413"
      ],
      "author": {
        "name": "asfgit",
        "email": "asfgit@users.noreply.github.com",
        "time": "Mon Jul 27 03:14:33 2026 +0000"
      },
      "committer": {
        "name": "asfgit",
        "email": "asfgit@users.noreply.github.com",
        "time": "Mon Jul 27 03:14:33 2026 +0000"
      },
      "message": "Remove Expired Refs\n\nGenerated by .github/workflows/remove_expired.yml\n"
    },
    {
      "commit": "53ee17819a288a881d5054d1660946a19fff7413",
      "tree": "7250971f9ee91c8361e8b06ecff02bb37018d952",
      "parents": [
        "81b0a49738ccb9c7f6112ba620f33810e9748d4a"
      ],
      "author": {
        "name": "asfgit",
        "email": "asfgit@users.noreply.github.com",
        "time": "Sat Jul 25 03:10:41 2026 +0000"
      },
      "committer": {
        "name": "asfgit",
        "email": "asfgit@users.noreply.github.com",
        "time": "Sat Jul 25 03:10:41 2026 +0000"
      },
      "message": "Remove Expired Refs\n\nGenerated by .github/workflows/remove_expired.yml\n"
    },
    {
      "commit": "81b0a49738ccb9c7f6112ba620f33810e9748d4a",
      "tree": "b57cc115f848d0d5ff5a59c238d6ba82d7ed55ab",
      "parents": [
        "70ef638e241800f36ec103af64a773a84608f44c"
      ],
      "author": {
        "name": "asfgit",
        "email": "asfgit@users.noreply.github.com",
        "time": "Fri Jul 24 19:02:11 2026 +0000"
      },
      "committer": {
        "name": "asfgit",
        "email": "asfgit@users.noreply.github.com",
        "time": "Fri Jul 24 19:02:11 2026 +0000"
      },
      "message": "Sync actions.yml, composite action, and approved_patterns.yml\n\nGenerated by .github/workflows/update.yml\n"
    },
    {
      "commit": "70ef638e241800f36ec103af64a773a84608f44c",
      "tree": "e8edde108be816b28fe62e7330e2c627fe537f6a",
      "parents": [
        "73307476408debb3f7d2e42111ee7b4a3b71e39b",
        "5c9cb80d4b0061a826300260db810aaf17e288d8"
      ],
      "author": {
        "name": "dfoulks1",
        "email": "48735727+dfoulks1@users.noreply.github.com",
        "time": "Fri Jul 24 14:57:40 2026 -0400"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Fri Jul 24 14:57:40 2026 -0400"
      },
      "message": "Merge pull request #1096 from apache/dependabot/github_actions/dot-github/actions/for-dependabot-triggered-reviews/docker/login-action-4.5.1\n\naction-allowlist-review: bump docker/login-action from 4.5.0 to 4.5.1 in /.github/actions/for-dependabot-triggered-reviews"
    },
    {
      "commit": "73307476408debb3f7d2e42111ee7b4a3b71e39b",
      "tree": "1b6579bb04d068fc3645f4fe829a4dc9d3c577bb",
      "parents": [
        "c21945d36b8841626bfeeae98c860196f43fea56"
      ],
      "author": {
        "name": "asfgit",
        "email": "asfgit@users.noreply.github.com",
        "time": "Fri Jul 24 18:50:44 2026 +0000"
      },
      "committer": {
        "name": "asfgit",
        "email": "asfgit@users.noreply.github.com",
        "time": "Fri Jul 24 18:50:44 2026 +0000"
      },
      "message": "Sync actions.yml, composite action, and approved_patterns.yml\n\nGenerated by .github/workflows/update.yml\n"
    },
    {
      "commit": "c21945d36b8841626bfeeae98c860196f43fea56",
      "tree": "7a8591fae879846e2e9b0edb733f4e45439f881f",
      "parents": [
        "4b1ff64a7870ac057ed567e2c742bbc76121a9dc",
        "599bed0c42f9535ea3d6013992aea433d8864d17"
      ],
      "author": {
        "name": "dfoulks1",
        "email": "48735727+dfoulks1@users.noreply.github.com",
        "time": "Fri Jul 24 14:50:23 2026 -0400"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Fri Jul 24 14:50:23 2026 -0400"
      },
      "message": "Merge pull request #1083 from apache/dependabot/github_actions/dot-github/actions/for-dependabot-triggered-reviews/aws-actions/configure-aws-credentials-6.2.3\n\naction-allowlist-review: bump aws-actions/configure-aws-credentials from 6.2.2 to 6.2.3 in /.github/actions/for-dependabot-triggered-reviews"
    },
    {
      "commit": "4b1ff64a7870ac057ed567e2c742bbc76121a9dc",
      "tree": "94465798022fb8537389f6366f19f5a75f3ea3df",
      "parents": [
        "664f2b737c19d5dcc3cbf0c82ecdb956f9081229"
      ],
      "author": {
        "name": "asfgit",
        "email": "asfgit@users.noreply.github.com",
        "time": "Fri Jul 24 18:46:02 2026 +0000"
      },
      "committer": {
        "name": "asfgit",
        "email": "asfgit@users.noreply.github.com",
        "time": "Fri Jul 24 18:46:02 2026 +0000"
      },
      "message": "Sync actions.yml, composite action, and approved_patterns.yml\n\nGenerated by .github/workflows/update.yml\n"
    },
    {
      "commit": "664f2b737c19d5dcc3cbf0c82ecdb956f9081229",
      "tree": "48c2a30794732a947db5a459dd7d5f74098bab96",
      "parents": [
        "8ad2bcaceb58e36e1e13f8e5ed2cd72693d15d5c",
        "68ffc78276ca4628b49a20aa60a670b0713656b5"
      ],
      "author": {
        "name": "dfoulks1",
        "email": "48735727+dfoulks1@users.noreply.github.com",
        "time": "Fri Jul 24 14:45:41 2026 -0400"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Fri Jul 24 14:45:41 2026 -0400"
      },
      "message": "Merge pull request #1097 from apache/dependabot/github_actions/dot-github/actions/for-dependabot-triggered-reviews/JustinBeckwith/linkinator-action-2.4.5\n\naction-allowlist-review: bump JustinBeckwith/linkinator-action from 2.4.2 to 2.4.5 in /.github/actions/for-dependabot-triggered-reviews"
    },
    {
      "commit": "8ad2bcaceb58e36e1e13f8e5ed2cd72693d15d5c",
      "tree": "a31b8165e673ad569d00acc0ce93a33dd3115a5c",
      "parents": [
        "ed3c0456c342e09d0179f8279e2498d81e6a0b30",
        "38c8cbc7b4e614ece864ffba712ed72a6eaebd72"
      ],
      "author": {
        "name": "dfoulks1",
        "email": "48735727+dfoulks1@users.noreply.github.com",
        "time": "Fri Jul 24 14:38:59 2026 -0400"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Fri Jul 24 14:38:59 2026 -0400"
      },
      "message": "Merge pull request #1099 from apache/dependabot/github_actions/dot-github/workflows/actions/checkout-7.0.1\n\nBump actions/checkout from 7.0.0 to 7.0.1 in /.github/workflows"
    },
    {
      "commit": "38c8cbc7b4e614ece864ffba712ed72a6eaebd72",
      "tree": "a31b8165e673ad569d00acc0ce93a33dd3115a5c",
      "parents": [
        "ed3c0456c342e09d0179f8279e2498d81e6a0b30"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Fri Jul 24 14:17:30 2026 +0000"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Fri Jul 24 14:17:30 2026 +0000"
      },
      "message": "Bump actions/checkout from 7.0.0 to 7.0.1 in /.github/workflows\n\nBumps [actions/checkout](https://github.com/actions/checkout) from 7.0.0 to 7.0.1.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0...3d3c42e5aac5ba805825da76410c181273ba90b1)\n\n---\nupdated-dependencies:\n- dependency-name: actions/checkout\n  dependency-version: 7.0.1\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "68ffc78276ca4628b49a20aa60a670b0713656b5",
      "tree": "ec40df9ce7ff6c3a78527449a77cd174f1b28d49",
      "parents": [
        "ed3c0456c342e09d0179f8279e2498d81e6a0b30"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Fri Jul 24 13:55:06 2026 +0000"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Fri Jul 24 13:55:06 2026 +0000"
      },
      "message": "action-allowlist-review: bump JustinBeckwith/linkinator-action\n\nBumps [JustinBeckwith/linkinator-action](https://github.com/justinbeckwith/linkinator-action) from 2.4.2 to 2.4.5.\n- [Release notes](https://github.com/justinbeckwith/linkinator-action/releases)\n- [Changelog](https://github.com/JustinBeckwith/linkinator-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/justinbeckwith/linkinator-action/compare/7b6b0bc671f6264e1a8daa4488a5bd91ce61dcd4...36a0bfbfecd5e237e8f8531537a693616c505faf)\n\n---\nupdated-dependencies:\n- dependency-name: JustinBeckwith/linkinator-action\n  dependency-version: 2.4.5\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "5c9cb80d4b0061a826300260db810aaf17e288d8",
      "tree": "6ef4d6b7a0c0785add9e9abeac1e1443e0ed8a6b",
      "parents": [
        "ed3c0456c342e09d0179f8279e2498d81e6a0b30"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Fri Jul 24 13:54:44 2026 +0000"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Fri Jul 24 13:54:44 2026 +0000"
      },
      "message": "action-allowlist-review: bump docker/login-action\n\nBumps [docker/login-action](https://github.com/docker/login-action) from 4.5.0 to 4.5.1.\n- [Release notes](https://github.com/docker/login-action/releases)\n- [Commits](https://github.com/docker/login-action/compare/06fb636fac595d6fb4b28a5dfcb21a6f5091859c...abd2ef45e78c5afb21d64d4ca52ee8550d9572c7)\n\n---\nupdated-dependencies:\n- dependency-name: docker/login-action\n  dependency-version: 4.5.1\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "ed3c0456c342e09d0179f8279e2498d81e6a0b30",
      "tree": "c5c4234d7e437569fb7499a64861f450bc666ebd",
      "parents": [
        "5f7d987b0bbe20604b4d457f2a3922e183638d56"
      ],
      "author": {
        "name": "asfgit",
        "email": "asfgit@users.noreply.github.com",
        "time": "Fri Jul 24 13:06:57 2026 +0000"
      },
      "committer": {
        "name": "asfgit",
        "email": "asfgit@users.noreply.github.com",
        "time": "Fri Jul 24 13:06:57 2026 +0000"
      },
      "message": "Sync actions.yml, composite action, and approved_patterns.yml\n\nGenerated by .github/workflows/update.yml\n"
    },
    {
      "commit": "5f7d987b0bbe20604b4d457f2a3922e183638d56",
      "tree": "503955363b6050ced13c30ce0b84d1ac0804150c",
      "parents": [
        "fc7002212318ea17002a9118fb1a67e5ef912ee2"
      ],
      "author": {
        "name": "Derrick Williams",
        "email": "myutat@gmail.com",
        "time": "Fri Jul 24 09:05:56 2026 -0400"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Fri Jul 24 15:05:56 2026 +0200"
      },
      "message": "Add zizmorcore/zizmor-action to the GitHub Actions allowlist (#1093)\n\n* zizmorcore/zizmor-action@6fc4b006235f201fdab3722e17240ab420d580e5\n\n* add expiration"
    },
    {
      "commit": "fc7002212318ea17002a9118fb1a67e5ef912ee2",
      "tree": "44dd2ae887b5748452704193f6192eaf8252db07",
      "parents": [
        "bcaa16df21b3ce70af0233e2ea83d3442d19674e"
      ],
      "author": {
        "name": "Derrick Williams",
        "email": "myutat@gmail.com",
        "time": "Fri Jul 24 08:38:35 2026 -0400"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Fri Jul 24 14:38:35 2026 +0200"
      },
      "message": "Add docker/login-action to the GitHub Actions allowlist (#1094)\n\n* Add docker/login-action to allowlist\n\n* add expiration"
    },
    {
      "commit": "bcaa16df21b3ce70af0233e2ea83d3442d19674e",
      "tree": "b8a208cfcca5014eadb52d909bc3bf0e4554da2b",
      "parents": [
        "a69531ff4fc5b564c24e3bb908cc39e76489a788"
      ],
      "author": {
        "name": "asfgit",
        "email": "asfgit@users.noreply.github.com",
        "time": "Fri Jul 24 03:11:54 2026 +0000"
      },
      "committer": {
        "name": "asfgit",
        "email": "asfgit@users.noreply.github.com",
        "time": "Fri Jul 24 03:11:54 2026 +0000"
      },
      "message": "Remove Expired Refs\n\nGenerated by .github/workflows/remove_expired.yml\n"
    },
    {
      "commit": "a69531ff4fc5b564c24e3bb908cc39e76489a788",
      "tree": "7da0a4ae55a0445745bfc6c39c3f4593e03455a8",
      "parents": [
        "3904b369c15c2dc182ba08179a3533af5f798581"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Thu Jul 23 19:20:27 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Thu Jul 23 19:20:27 2026 +0200"
      },
      "message": "Bump the codeql-action group across 1 directory with 3 updates (#1085)\n\nBumps the codeql-action group with 3 updates in the /.github/workflows directory: [github/codeql-action/init](https://github.com/github/codeql-action), [github/codeql-action/autobuild](https://github.com/github/codeql-action) and [github/codeql-action/analyze](https://github.com/github/codeql-action).\n\n\nUpdates `github/codeql-action/init` from 4.37.0 to 4.37.1\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/99df26d4f13ea111d4ec1a7dddef6063f76b97e9...7188fc363630916deb702c7fdcf4e481b751f97a)\n\nUpdates `github/codeql-action/autobuild` from 4.37.0 to 4.37.1\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/99df26d4f13ea111d4ec1a7dddef6063f76b97e9...7188fc363630916deb702c7fdcf4e481b751f97a)\n\nUpdates `github/codeql-action/analyze` from 4.37.0 to 4.37.1\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/99df26d4f13ea111d4ec1a7dddef6063f76b97e9...7188fc363630916deb702c7fdcf4e481b751f97a)\n\n---\nupdated-dependencies:\n- dependency-name: github/codeql-action/init\n  dependency-version: 4.37.1\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: codeql-action\n- dependency-name: github/codeql-action/autobuild\n  dependency-version: 4.37.1\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: codeql-action\n- dependency-name: github/codeql-action/analyze\n  dependency-version: 4.37.1\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n  dependency-group: codeql-action\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "599bed0c42f9535ea3d6013992aea433d8864d17",
      "tree": "63cce9b955db5beff67e3014c6d681570f3f209f",
      "parents": [
        "3904b369c15c2dc182ba08179a3533af5f798581"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Thu Jul 23 13:17:56 2026 +0000"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Thu Jul 23 13:17:56 2026 +0000"
      },
      "message": "action-allowlist-review: bump aws-actions/configure-aws-credentials\n\nBumps [aws-actions/configure-aws-credentials](https://github.com/aws-actions/configure-aws-credentials) from 6.2.2 to 6.2.3.\n- [Release notes](https://github.com/aws-actions/configure-aws-credentials/releases)\n- [Changelog](https://github.com/aws-actions/configure-aws-credentials/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/aws-actions/configure-aws-credentials/compare/517a711dbcd0e402f90c77e7e2f81e849156e31d...e6de054238d6b7531b4efff3b6587d9aade6a06c)\n\n---\nupdated-dependencies:\n- dependency-name: aws-actions/configure-aws-credentials\n  dependency-version: 6.2.3\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e"
    },
    {
      "commit": "3904b369c15c2dc182ba08179a3533af5f798581",
      "tree": "a86b03f3062968b62a28ca01979c74260da98ade",
      "parents": [
        "a4df97e7aa996ca5b669d622094687b32005c816"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Wed Jul 22 17:53:56 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Wed Jul 22 17:53:56 2026 +0200"
      },
      "message": "Bump setuptools from 82.0.1 to 83.0.0 (#1082)\n\nBumps [setuptools](https://github.com/pypa/setuptools) from 82.0.1 to 83.0.0.\n- [Release notes](https://github.com/pypa/setuptools/releases)\n- [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst)\n- [Commits](https://github.com/pypa/setuptools/compare/v82.0.1...v83.0.0)\n\n---\nupdated-dependencies:\n- dependency-name: setuptools\n  dependency-version: 83.0.0\n  dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "a4df97e7aa996ca5b669d622094687b32005c816",
      "tree": "93356604969c29efd052e98343011348b4ff7af4",
      "parents": [
        "1bea566c995074e7e2ffaab14828709361500660"
      ],
      "author": {
        "name": "asfgit",
        "email": "asfgit@users.noreply.github.com",
        "time": "Wed Jul 22 14:40:08 2026 +0000"
      },
      "committer": {
        "name": "asfgit",
        "email": "asfgit@users.noreply.github.com",
        "time": "Wed Jul 22 14:40:08 2026 +0000"
      },
      "message": "Sync actions.yml, composite action, and approved_patterns.yml\n\nGenerated by .github/workflows/update.yml\n"
    },
    {
      "commit": "1bea566c995074e7e2ffaab14828709361500660",
      "tree": "63d53748f052ac34b0cdcf117cf4dec8c2a59cd7",
      "parents": [
        "e5e91e61855919b2cfdb3be6e5aa62c37f05f60c"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Wed Jul 22 16:39:22 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Wed Jul 22 16:39:22 2026 +0200"
      },
      "message": "Bump zizmorcore/zizmor-action from 0.5.7 to 0.6.0 in /.github/workflows (#1081)\n\nBumps [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action) from 0.5.7 to 0.6.0.\n- [Release notes](https://github.com/zizmorcore/zizmor-action/releases)\n- [Commits](https://github.com/zizmorcore/zizmor-action/compare/192e21d79ab29983730a13d1382995c2307fbcaa...6599ee8b7a49aef6a770f63d261d214911a7ce02)\n\n---\nupdated-dependencies:\n- dependency-name: zizmorcore/zizmor-action\n  dependency-version: 0.6.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "e5e91e61855919b2cfdb3be6e5aa62c37f05f60c",
      "tree": "d9af968c5a73964fc7ae10d7ea1889663b91f600",
      "parents": [
        "41ace1d0a469ef5144770850643a95886006463d"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Wed Jul 22 16:37:55 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Wed Jul 22 16:37:55 2026 +0200"
      },
      "message": "action-allowlist-review: bump astral-sh/setup-uv (#1080)\n\nBumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) from 8.3.2 to 9.0.0.\n- [Release notes](https://github.com/astral-sh/setup-uv/releases)\n- [Commits](https://github.com/astral-sh/setup-uv/compare/11f9893b081a58869d3b5fccaea48c9e9e46f990...c771a70e6277c0a99b617c7a806ffedaca235ff9)\n\n---\nupdated-dependencies:\n- dependency-name: astral-sh/setup-uv\n  dependency-version: 9.0.0\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "41ace1d0a469ef5144770850643a95886006463d",
      "tree": "9b65b7198dbbf155a4ad25459c5e01c152e81782",
      "parents": [
        "aea5b88acf1b97916cc567be492db6bcf8ece0e9"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Tue Jul 21 18:10:39 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Tue Jul 21 18:10:39 2026 +0200"
      },
      "message": "Bump actions/setup-java from 5.5.0 to 5.6.0 in /.github/workflows (#1078)\n\nBumps [actions/setup-java](https://github.com/actions/setup-java) from 5.5.0 to 5.6.0.\n- [Release notes](https://github.com/actions/setup-java/releases)\n- [Commits](https://github.com/actions/setup-java/compare/0f481fcb613427c0f801b606911222b5b6f3083a...03ad4de0992f5dab5e18fcb136590ce7c4a0ac95)\n\n---\nupdated-dependencies:\n- dependency-name: actions/setup-java\n  dependency-version: 5.6.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "aea5b88acf1b97916cc567be492db6bcf8ece0e9",
      "tree": "9968cecb3ba89deeca87ab572fcf0f8cdb46e431",
      "parents": [
        "2255d303ed90dff06d7363886d08b7c783651269"
      ],
      "author": {
        "name": "asfgit",
        "email": "asfgit@users.noreply.github.com",
        "time": "Tue Jul 21 03:11:53 2026 +0000"
      },
      "committer": {
        "name": "asfgit",
        "email": "asfgit@users.noreply.github.com",
        "time": "Tue Jul 21 03:11:53 2026 +0000"
      },
      "message": "Remove Expired Refs\n\nGenerated by .github/workflows/remove_expired.yml\n"
    },
    {
      "commit": "2255d303ed90dff06d7363886d08b7c783651269",
      "tree": "6dc04860ad38941eebf483175146d7ca305450d1",
      "parents": [
        "7d8cabbace5141bdb54b69d669f67d28856ffc7c"
      ],
      "author": {
        "name": "Jarek Potiuk",
        "email": "jarek@potiuk.com",
        "time": "Mon Jul 20 17:53:12 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Jul 20 17:53:12 2026 +0200"
      },
      "message": "gateway: emit zizmor unpinned-tools ignore off the uses: line (closes #952) (#1034)\n\nDependabot\u0027s github_actions comment-updater only rewrites a version comment\nwhen the version is the trailing token of the comment; if any text follows\n(file_updater.rb: `comment.end_with?(version)`), it skips the update for\nsafety. The gateway emitted the sentinel step\u0027s zizmor ignore right after the\nversion on the uses: line:\n\n    - uses: 1Password/load-secrets-action@\u003csha\u003e  # v4.0.0  # zizmor: ignore[unpinned-tools] ...\n\nso Dependabot bumped the hash but left the version stale, and zizmor\u0027s\nref-version-mismatch (medium) then failed CI (had to be fixed by hand in #932).\n\nEmit the ignore on the `if: false` line instead -- still within the sentinel\nstep\u0027s finding span (https://docs.zizmor.sh/usage/#ignoring-results), so\nunpinned-tools stays suppressed -- leaving the version tag as the trailing\ntoken of the uses: comment so Dependabot keeps it in sync. The composite is\nregenerated accordingly; the composite-\u003eactions.yml read-back is unchanged and\nround-trips cleanly.\n\nGenerated-by: Claude Opus 4.8 (1M context) via Claude Code"
    },
    {
      "commit": "7d8cabbace5141bdb54b69d669f67d28856ffc7c",
      "tree": "ee59d575a5c942ba88b00671111aeeef3ec6bea3",
      "parents": [
        "6da0a8d871a5220349af1303a506f2f0000be087"
      ],
      "author": {
        "name": "Jarek Potiuk",
        "email": "jarek@potiuk.com",
        "time": "Mon Jul 20 17:33:48 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Jul 20 17:33:48 2026 +0200"
      },
      "message": "Remove compromised actions-cool actions; pin check-user-permission (closes #891) (#1035)\n\nactions-cool/issues-helper and actions-cool/maintain-one-comment were\ncompromised (all version tags moved to an imposter commit that exfiltrates\nCI/CD credentials); GitHub TOS-blocked both repos on 2026-05-19. Remove them\nfrom the allowlist -- they are no longer fetchable, and org-wide enforcement\nshould no longer approve them.\n\nactions-cool/check-user-permission belongs to the same org but was not\ncompromised and is still live. It was allowlisted as a wildcard (\u0027*\u0027: keep),\nwhich -- given the org account was compromised -- is more trust than\nwarranted. Pin it instead to c21884f3dda18dafc2f8b402fe807ccc9ec1aa5e\n(v2.4.0), the exact SHA apache/camel already uses, with keep: true so it stays\napproved but is not dependabot-tracked (we do not want to auto-pull new\nversions from this org). This preserves camel\u0027s safe, SHA-pinned usage while\ndropping the wildcard.\n\napproved_patterns.yml is updated to match (surgical diff; unrelated expiry\nchurn left to the update / remove_expired jobs).\n\nGenerated-by: Claude Opus 4.8 (1M context) via Claude Code"
    },
    {
      "commit": "6da0a8d871a5220349af1303a506f2f0000be087",
      "tree": "ae1289cbaa14499f3255ec348f93e7eea270c87f",
      "parents": [
        "b41777bd11db8a74aeed91430c551382f778f370"
      ],
      "author": {
        "name": "asfgit",
        "email": "asfgit@users.noreply.github.com",
        "time": "Mon Jul 20 15:31:13 2026 +0000"
      },
      "committer": {
        "name": "asfgit",
        "email": "asfgit@users.noreply.github.com",
        "time": "Mon Jul 20 15:31:13 2026 +0000"
      },
      "message": "Sync actions.yml, composite action, and approved_patterns.yml\n\nGenerated by .github/workflows/update.yml\n"
    },
    {
      "commit": "b41777bd11db8a74aeed91430c551382f778f370",
      "tree": "ed236ffe2d6593cbd9dae8badd1f3005008ee3d1",
      "parents": [
        "e6d080e81570a46e63b71d9812672a699ea7c9e4"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Jul 20 17:30:08 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Jul 20 17:30:08 2026 +0200"
      },
      "message": "action-allowlist-review: bump sbt/setup-sbt (#1075)\n\nBumps [sbt/setup-sbt](https://github.com/sbt/setup-sbt) from 1.5.1 to 1.5.2.\n- [Release notes](https://github.com/sbt/setup-sbt/releases)\n- [Commits](https://github.com/sbt/setup-sbt/compare/9d56cf12e9b58d219605e1d8bfe69a8395fedde0...6444f4c8111de4b9059c3975def104b03cfaa5f0)\n\n---\nupdated-dependencies:\n- dependency-name: sbt/setup-sbt\n  dependency-version: 1.5.2\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "e6d080e81570a46e63b71d9812672a699ea7c9e4",
      "tree": "5779087dbcd422cb0015ee43d92f349a41ff9009",
      "parents": [
        "bddab88ea4e4874c2c159c18f3017b51ec278d03"
      ],
      "author": {
        "name": "asfgit",
        "email": "asfgit@users.noreply.github.com",
        "time": "Mon Jul 20 03:13:37 2026 +0000"
      },
      "committer": {
        "name": "asfgit",
        "email": "asfgit@users.noreply.github.com",
        "time": "Mon Jul 20 03:13:37 2026 +0000"
      },
      "message": "Remove Expired Refs\n\nGenerated by .github/workflows/remove_expired.yml\n"
    },
    {
      "commit": "bddab88ea4e4874c2c159c18f3017b51ec278d03",
      "tree": "3cbc580bca3fd2050c305ffe8d367fb08b5e37da",
      "parents": [
        "63537f802737e41e1bb4c96f03a2b7533d9aa4fb"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Jul 20 00:43:20 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Jul 20 00:43:20 2026 +0200"
      },
      "message": "Bump mypy from 2.1.0 to 2.2.0 in /stash (#1058)\n\nBumps [mypy](https://github.com/python/mypy) from 2.1.0 to 2.2.0.\n- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/python/mypy/compare/v2.1.0...v2.2.0)\n\n---\nupdated-dependencies:\n- dependency-name: mypy\n  dependency-version: 2.2.0\n  dependency-type: direct:development\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "63537f802737e41e1bb4c96f03a2b7533d9aa4fb",
      "tree": "96817282074d9a1e7eb7d74fca5b8e788540dc97",
      "parents": [
        "e115e4f461eb45cbd55f0f55ba475d7d6b75767d"
      ],
      "author": {
        "name": "Paul Au",
        "email": "paul@traverstodd.com",
        "time": "Sun Jul 19 15:39:33 2026 -0700"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Jul 20 00:39:33 2026 +0200"
      },
      "message": "Update blog card date formatting (#1045)"
    },
    {
      "commit": "e115e4f461eb45cbd55f0f55ba475d7d6b75767d",
      "tree": "5caee2ec2010607707b2e649accc8aa840c2ede1",
      "parents": [
        "ffbcadf3301fde155c1baf5ab1804beecfb00c80"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Jul 20 00:39:10 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Jul 20 00:39:10 2026 +0200"
      },
      "message": "Bump mypy from 2.1.0 to 2.2.0 in /pelican (#1056)\n\nBumps [mypy](https://github.com/python/mypy) from 2.1.0 to 2.2.0.\n- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/python/mypy/compare/v2.1.0...v2.2.0)\n\n---\nupdated-dependencies:\n- dependency-name: mypy\n  dependency-version: 2.2.0\n  dependency-type: direct:development\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "ffbcadf3301fde155c1baf5ab1804beecfb00c80",
      "tree": "040b5da3974b3749f1998a11da22b84826316f4f",
      "parents": [
        "2537dfe19e37698559e4960ef01aea8433b6c5cd"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Jul 20 00:38:58 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Jul 20 00:38:58 2026 +0200"
      },
      "message": "Bump ruff from 0.15.20 to 0.15.21 in /stash (#1060)\n\nBumps [ruff](https://github.com/astral-sh/ruff) from 0.15.20 to 0.15.21.\n- [Release notes](https://github.com/astral-sh/ruff/releases)\n- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/astral-sh/ruff/compare/0.15.20...0.15.21)\n\n---\nupdated-dependencies:\n- dependency-name: ruff\n  dependency-version: 0.15.21\n  dependency-type: direct:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "2537dfe19e37698559e4960ef01aea8433b6c5cd",
      "tree": "74212bcda03dd8c9dfec35ac3b0550f7c7d1ebd9",
      "parents": [
        "9fb3d241a4ba613de5a126dcdce40013ffdd3d7b"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Jul 20 00:38:45 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Jul 20 00:38:45 2026 +0200"
      },
      "message": "Update setuptools requirement from \u003e\u003d82.0.1 to \u003e\u003d83.0.0 in /stash (#1059)\n\nUpdates the requirements on [setuptools](https://github.com/pypa/setuptools) to permit the latest version.\n- [Release notes](https://github.com/pypa/setuptools/releases)\n- [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst)\n- [Commits](https://github.com/pypa/setuptools/compare/v82.0.1...v83.0.0)\n\n---\nupdated-dependencies:\n- dependency-name: setuptools\n  dependency-version: 83.0.0\n  dependency-type: direct:development\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "9fb3d241a4ba613de5a126dcdce40013ffdd3d7b",
      "tree": "41e8208e9664dc2821f4ed01031115e569887b6c",
      "parents": [
        "a75e403574a9feb2b5c690bcdda43a016079567d"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Mon Jul 20 00:38:33 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Mon Jul 20 00:38:33 2026 +0200"
      },
      "message": "Update setuptools requirement from \u003e\u003d82.0.1 to \u003e\u003d83.0.0 in /pelican (#1057)\n\nUpdates the requirements on [setuptools](https://github.com/pypa/setuptools) to permit the latest version.\n- [Release notes](https://github.com/pypa/setuptools/releases)\n- [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst)\n- [Commits](https://github.com/pypa/setuptools/compare/v82.0.1...v83.0.0)\n\n---\nupdated-dependencies:\n- dependency-name: setuptools\n  dependency-version: 83.0.0\n  dependency-type: direct:development\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "a75e403574a9feb2b5c690bcdda43a016079567d",
      "tree": "beab237a2c48463f2d2aa77d08884b80d23779a9",
      "parents": [
        "8e6e59b89b3bbef944d429db9b5d121f0d7b2d5d"
      ],
      "author": {
        "name": "asfgit",
        "email": "asfgit@users.noreply.github.com",
        "time": "Sun Jul 19 21:18:29 2026 +0000"
      },
      "committer": {
        "name": "asfgit",
        "email": "asfgit@users.noreply.github.com",
        "time": "Sun Jul 19 21:18:29 2026 +0000"
      },
      "message": "Sync actions.yml, composite action, and approved_patterns.yml\n\nGenerated by .github/workflows/update.yml\n"
    },
    {
      "commit": "8e6e59b89b3bbef944d429db9b5d121f0d7b2d5d",
      "tree": "cae83699b7e26fd59d1c08310e90b219b51005ce",
      "parents": [
        "eabd47e4d7442e73b682821330b8ccf48791ef55"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Sun Jul 19 23:18:17 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Sun Jul 19 23:18:17 2026 +0200"
      },
      "message": "action-allowlist-review: bump carabiner-dev/actions/install/download-and-verify (#1073)\n\nBumps [carabiner-dev/actions/install/download-and-verify](https://github.com/carabiner-dev/actions) from f882fa9eb795141737eecac4ffb056df5ad14954 to be6b4fa42fa3a8432416475d74218b9aa51ea527.\n- [Release notes](https://github.com/carabiner-dev/actions/releases)\n- [Commits](https://github.com/carabiner-dev/actions/compare/f882fa9eb795141737eecac4ffb056df5ad14954...be6b4fa42fa3a8432416475d74218b9aa51ea527)\n\n---\nupdated-dependencies:\n- dependency-name: carabiner-dev/actions/install/download-and-verify\n  dependency-version: be6b4fa42fa3a8432416475d74218b9aa51ea527\n  dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "eabd47e4d7442e73b682821330b8ccf48791ef55",
      "tree": "faac562ea8d634b5ff54886548c3e437a3b6647c",
      "parents": [
        "ce0a115eea07b66ef0f4ab886ee8dafb636a5be5"
      ],
      "author": {
        "name": "asfgit",
        "email": "asfgit@users.noreply.github.com",
        "time": "Sun Jul 19 21:18:12 2026 +0000"
      },
      "committer": {
        "name": "asfgit",
        "email": "asfgit@users.noreply.github.com",
        "time": "Sun Jul 19 21:18:12 2026 +0000"
      },
      "message": "Sync actions.yml, composite action, and approved_patterns.yml\n\nGenerated by .github/workflows/update.yml\n"
    },
    {
      "commit": "ce0a115eea07b66ef0f4ab886ee8dafb636a5be5",
      "tree": "9c52204662a41ef4e2de9681cd547c36e1c325a4",
      "parents": [
        "8f3c9e7cb17acecf2a47bb8cb5e683ed3e4356f7"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Sun Jul 19 23:18:06 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Sun Jul 19 23:18:06 2026 +0200"
      },
      "message": "action-allowlist-review: bump carabiner-dev/actions/install/ampel (#1070)\n\nBumps [carabiner-dev/actions/install/ampel](https://github.com/carabiner-dev/actions) from 1.2.1 to 1.2.3.\n- [Release notes](https://github.com/carabiner-dev/actions/releases)\n- [Commits](https://github.com/carabiner-dev/actions/compare/94f29392187fe5082d1195a7d4cae3a7ddf09d9c...2a4b2cd115ede14629b03ef7e77586d3269d4c72)\n\n---\nupdated-dependencies:\n- dependency-name: carabiner-dev/actions/install/ampel\n  dependency-version: 1.2.3\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "8f3c9e7cb17acecf2a47bb8cb5e683ed3e4356f7",
      "tree": "5eacb0d8c3b7a880374185ddc82faf70ee7abdb4",
      "parents": [
        "aaab0952e745d37663a03b45d02062b343f90a87"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Sun Jul 19 23:17:55 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Sun Jul 19 23:17:55 2026 +0200"
      },
      "message": "action-allowlist-review: bump carabiner-dev/actions/install/bnd (#1067)\n\nBumps [carabiner-dev/actions/install/bnd](https://github.com/carabiner-dev/actions) from 1.2.1 to 1.2.3.\n- [Release notes](https://github.com/carabiner-dev/actions/releases)\n- [Commits](https://github.com/carabiner-dev/actions/compare/94f29392187fe5082d1195a7d4cae3a7ddf09d9c...2a4b2cd115ede14629b03ef7e77586d3269d4c72)\n\n---\nupdated-dependencies:\n- dependency-name: carabiner-dev/actions/install/bnd\n  dependency-version: 1.2.3\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "aaab0952e745d37663a03b45d02062b343f90a87",
      "tree": "345baf7e6934eabb90152f4d2e3115a421288dfb",
      "parents": [
        "b64476b8449f2eac328e412d4d2c9786a880db12"
      ],
      "author": {
        "name": "asfgit",
        "email": "asfgit@users.noreply.github.com",
        "time": "Sun Jul 19 21:16:59 2026 +0000"
      },
      "committer": {
        "name": "asfgit",
        "email": "asfgit@users.noreply.github.com",
        "time": "Sun Jul 19 21:16:59 2026 +0000"
      },
      "message": "Sync actions.yml, composite action, and approved_patterns.yml\n\nGenerated by .github/workflows/update.yml\n"
    },
    {
      "commit": "b64476b8449f2eac328e412d4d2c9786a880db12",
      "tree": "5ba5d649e2e94a70f6ffe3d1c78934e3dd6f251c",
      "parents": [
        "5d5e9293eab647e9bb0f3fa59c76aac5c5924256"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Sun Jul 19 23:16:42 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Sun Jul 19 23:16:42 2026 +0200"
      },
      "message": "action-allowlist-review: bump carabiner-dev/actions/ampel/verify 1.2.1 to 1.2.3 (#1069)\n\nRebased onto current main. Also approves the transitive carabiner-dev refs\nthat v1.2.3 (2a4b2cd1) pins internally: 619a474b (untagged, carabiner-dev/actions#83)\nand 174f1c83 (v1.2.2), added to install/{ampel,bnd,download-and-verify,ampel-bootstrap}.\nAll GPG-verified carabiner release-bot commits; expires_at 3 months out.\n\nGenerated-by: Claude Opus 4.8 (1M context)\n\nCo-authored-by: Jarek Potiuk \u003cjarek@potiuk.com\u003e"
    },
    {
      "commit": "5d5e9293eab647e9bb0f3fa59c76aac5c5924256",
      "tree": "477dcc518f96a8302c7007eba7167cc7e6ace1fb",
      "parents": [
        "576d44b93555ad2bacc81780841ce86f0af89a0c"
      ],
      "author": {
        "name": "asfgit",
        "email": "asfgit@users.noreply.github.com",
        "time": "Sun Jul 19 19:12:08 2026 +0000"
      },
      "committer": {
        "name": "asfgit",
        "email": "asfgit@users.noreply.github.com",
        "time": "Sun Jul 19 19:12:08 2026 +0000"
      },
      "message": "Sync actions.yml, composite action, and approved_patterns.yml\n\nGenerated by .github/workflows/update.yml\n"
    },
    {
      "commit": "576d44b93555ad2bacc81780841ce86f0af89a0c",
      "tree": "c22019ffdb4db60f465fd6af6d3d3f5c5e97a9bf",
      "parents": [
        "3683022f8cb68c69b182cc126a19ebf7ab721090"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Sun Jul 19 21:11:59 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Sun Jul 19 21:11:59 2026 +0200"
      },
      "message": "action-allowlist-review: bump carabiner-dev/actions/install/ampel-bootstrap (#1072)\n\nBumps [carabiner-dev/actions/install/ampel-bootstrap](https://github.com/carabiner-dev/actions) from f882fa9eb795141737eecac4ffb056df5ad14954 to be6b4fa42fa3a8432416475d74218b9aa51ea527.\n- [Release notes](https://github.com/carabiner-dev/actions/releases)\n- [Commits](https://github.com/carabiner-dev/actions/compare/f882fa9eb795141737eecac4ffb056df5ad14954...be6b4fa42fa3a8432416475d74218b9aa51ea527)\n\n---\nupdated-dependencies:\n- dependency-name: carabiner-dev/actions/install/ampel-bootstrap\n  dependency-version: be6b4fa42fa3a8432416475d74218b9aa51ea527\n  dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "3683022f8cb68c69b182cc126a19ebf7ab721090",
      "tree": "f7ce343f634ac5b9b35d1118ea74cebf7772b7df",
      "parents": [
        "42970f44771f928507dcb554565d989fe7569ce0"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Sun Jul 19 21:11:52 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Sun Jul 19 21:11:52 2026 +0200"
      },
      "message": "action-allowlist-review: bump DavidAnson/markdownlint-cli2-action (#1071)\n\nBumps [DavidAnson/markdownlint-cli2-action](https://github.com/davidanson/markdownlint-cli2-action) from 24.0.0 to 24.1.0.\n- [Release notes](https://github.com/davidanson/markdownlint-cli2-action/releases)\n- [Commits](https://github.com/davidanson/markdownlint-cli2-action/compare/8de2aa07cae85fd17c0b35642db70cf5495f1d25...6bf21b07787794f89a243495939cd651942aeabe)\n\n---\nupdated-dependencies:\n- dependency-name: DavidAnson/markdownlint-cli2-action\n  dependency-version: 24.1.0\n  dependency-type: direct:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e"
    },
    {
      "commit": "42970f44771f928507dcb554565d989fe7569ce0",
      "tree": "32f03ea198c1fe0a85430eb83928de7d11f2d477",
      "parents": [
        "7cb4eab39ec51a939796dd6c410bbc13934c3816"
      ],
      "author": {
        "name": "asfgit",
        "email": "asfgit@users.noreply.github.com",
        "time": "Sun Jul 19 15:35:12 2026 +0000"
      },
      "committer": {
        "name": "asfgit",
        "email": "asfgit@users.noreply.github.com",
        "time": "Sun Jul 19 15:35:12 2026 +0000"
      },
      "message": "Sync actions.yml, composite action, and approved_patterns.yml\n\nGenerated by .github/workflows/update.yml\n"
    },
    {
      "commit": "7cb4eab39ec51a939796dd6c410bbc13934c3816",
      "tree": "a3f4bf6871285eb8cc6875f00e75bf2b52cf9e8b",
      "parents": [
        "f0086d74bdb7f203c88886bbc9089c1de38aff84"
      ],
      "author": {
        "name": "dependabot[bot]",
        "email": "49699333+dependabot[bot]@users.noreply.github.com",
        "time": "Sun Jul 19 17:34:57 2026 +0200"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Sun Jul 19 17:34:57 2026 +0200"
      },
      "message": "action-allowlist-review: bump j178/prek-action from 2.0.5 to 2.0.6 in /.github/actions/for-dependabot-triggered-reviews (#1074)\n\n* action-allowlist-review: bump j178/prek-action\n\nBumps [j178/prek-action](https://github.com/j178/prek-action) from 2.0.5 to 2.0.6.\n- [Release notes](https://github.com/j178/prek-action/releases)\n- [Commits](https://github.com/j178/prek-action/compare/e98a699c41eb69ab013a45817a0406469a748f8d...5337cb91e0fa35a7ff31b9ca345126d8bbbcdf16)\n\n---\nupdated-dependencies:\n- dependency-name: j178/prek-action\n  dependency-version: 2.0.6\n  dependency-type: direct:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\n\n* allowlist: bump dtolnay/rust-toolchain stable pin to current tip\n\ndtolnay/rust-toolchain force-pushes its rolling `stable` branch on each\nRust release, orphaning the previously pinned SHA. 4be7066a is no longer\nan ancestor of `stable`, so check_action_tags fails on every open PR.\nBump to the current stable tip 4cda84d5 to unblock the queue.\n\nGenerated-by: Claude Opus 4.8 (1M context)\n\n---------\n\nSigned-off-by: dependabot[bot] \u003csupport@github.com\u003e\nCo-authored-by: dependabot[bot] \u003c49699333+dependabot[bot]@users.noreply.github.com\u003e\nCo-authored-by: Jarek Potiuk \u003cjarek@potiuk.com\u003e"
    },
    {
      "commit": "f0086d74bdb7f203c88886bbc9089c1de38aff84",
      "tree": "2500be101ad0d06a492db6b634c005a72666559d",
      "parents": [
        "e317c58986f1e3a21446c781f05bc68314825cc5"
      ],
      "author": {
        "name": "asfgit",
        "email": "asfgit@users.noreply.github.com",
        "time": "Sun Jul 19 03:12:15 2026 +0000"
      },
      "committer": {
        "name": "asfgit",
        "email": "asfgit@users.noreply.github.com",
        "time": "Sun Jul 19 03:12:15 2026 +0000"
      },
      "message": "Remove Expired Refs\n\nGenerated by .github/workflows/remove_expired.yml\n"
    },
    {
      "commit": "e317c58986f1e3a21446c781f05bc68314825cc5",
      "tree": "f4ba8c5254ddc1fc5866b3f8f2a213409ca67093",
      "parents": [
        "66eada0457aa7b39aeb2c26017b694a7905f38e9"
      ],
      "author": {
        "name": "asfgit",
        "email": "asfgit@users.noreply.github.com",
        "time": "Sat Jul 18 03:09:59 2026 +0000"
      },
      "committer": {
        "name": "asfgit",
        "email": "asfgit@users.noreply.github.com",
        "time": "Sat Jul 18 03:09:59 2026 +0000"
      },
      "message": "Remove Expired Refs\n\nGenerated by .github/workflows/remove_expired.yml\n"
    },
    {
      "commit": "66eada0457aa7b39aeb2c26017b694a7905f38e9",
      "tree": "ad0ab5dd7226ca57755e7d0989123e95a047dd20",
      "parents": [
        "40c4b5daeefd2215a3555edf60b945f1cd0819ad"
      ],
      "author": {
        "name": "asfgit",
        "email": "asfgit@users.noreply.github.com",
        "time": "Fri Jul 17 14:00:37 2026 +0000"
      },
      "committer": {
        "name": "asfgit",
        "email": "asfgit@users.noreply.github.com",
        "time": "Fri Jul 17 14:00:37 2026 +0000"
      },
      "message": "Sync actions.yml, composite action, and approved_patterns.yml\n\nGenerated by .github/workflows/update.yml\n"
    },
    {
      "commit": "40c4b5daeefd2215a3555edf60b945f1cd0819ad",
      "tree": "75833300d3af3ec35468d2c4c757a4467c8ea207",
      "parents": [
        "f38d156ded5328587edc878928c1dee1b4aef171",
        "b0133f0b5dd5e28ea6f47560f0915a70dff709ef"
      ],
      "author": {
        "name": "dfoulks1",
        "email": "48735727+dfoulks1@users.noreply.github.com",
        "time": "Fri Jul 17 10:00:18 2026 -0400"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Fri Jul 17 10:00:18 2026 -0400"
      },
      "message": "Merge pull request #1054 from apache/dependabot/github_actions/dot-github/actions/for-dependabot-triggered-reviews/slackapi/slack-github-action-4.0.0\n\naction-allowlist-review: bump slackapi/slack-github-action from 3.0.5 to 4.0.0 in /.github/actions/for-dependabot-triggered-reviews"
    },
    {
      "commit": "f38d156ded5328587edc878928c1dee1b4aef171",
      "tree": "9ad5b00b865434199c889cd3a5f4a67bb2c3484a",
      "parents": [
        "abe6be822696d9bf4b65230cdc0596a1e9aeff76"
      ],
      "author": {
        "name": "asfgit",
        "email": "asfgit@users.noreply.github.com",
        "time": "Fri Jul 17 13:30:46 2026 +0000"
      },
      "committer": {
        "name": "asfgit",
        "email": "asfgit@users.noreply.github.com",
        "time": "Fri Jul 17 13:30:46 2026 +0000"
      },
      "message": "Sync actions.yml, composite action, and approved_patterns.yml\n\nGenerated by .github/workflows/update.yml\n"
    },
    {
      "commit": "abe6be822696d9bf4b65230cdc0596a1e9aeff76",
      "tree": "c4ebb241c0197bdedc006bf3c9dd83f977bb76bb",
      "parents": [
        "6f37b745e865a9288ec763173fcaa234c5a55cbd",
        "4c763b41dc75674621ea927c5763dad43d490ea4"
      ],
      "author": {
        "name": "dfoulks1",
        "email": "48735727+dfoulks1@users.noreply.github.com",
        "time": "Fri Jul 17 09:30:29 2026 -0400"
      },
      "committer": {
        "name": "GitHub",
        "email": "noreply@github.com",
        "time": "Fri Jul 17 09:30:29 2026 -0400"
      },
      "message": "Merge pull request #1051 from apache/dependabot/github_actions/dot-github/actions/for-dependabot-triggered-reviews/zizmorcore/zizmor-action-0.6.0\n\naction-allowlist-review: bump zizmorcore/zizmor-action from 0.5.7 to 0.6.0 in /.github/actions/for-dependabot-triggered-reviews"
    }
  ],
  "next": "6f37b745e865a9288ec763173fcaa234c5a55cbd"
}