[dependabot]

Bumps the github-actions group with 1 update in the / directory: CCBR/actions.

Updates CCBR/actions from 0.8.0 to 0.8.3

Release notes

Sourced from CCBR/actions's releases.

actions 0.8.3

• Approve pending Actions workflow runs for post-release cleanup PRs, scoped to the current PR head SHA. (#234, @​kelly-sovacool, @​copilot)
• review-pre-commit-pr and review-post-release-pr: merge the validated commit directly, or explain why when auto-merge can't be enabled because the PR is already mergeable. (#239, @​kelly-sovacool, @​copilot)

actions 0.8.2

• Use GitHub App Client IDs in workflows and composite actions, retaining legacy app-id support. (#232, @​kelly-sovacool, @​copilot)

actions 0.8.1

• New action: review-post-release-pr to automatically review post-release cleanup PRs and approve them (approving pending workflow runs and enabling auto-merge) when the version file was actually bumped and every changed file's new content is a valid, field-specific bump matching an actual release tag, or request a human reviewer otherwise. Approvals are pinned to the validated commit and re-validated if the PR's head changes afterward (e.g. after an auto-format push). (#227, @​kelly-sovacool, @​copilot)
  • Require the PR's synchronize event to come from the bot (not just any pusher) before re-running the automatic review, and pass action inputs to the embedded Python scripts via env: instead of splicing ${{ inputs.* }} directly into the script text, in review-pre-commit-pr and review-post-release-pr. (#227, @​kelly-sovacool, @​copilot)
• Fix review-pre-commit-pr to post a comment instead of requesting changes when a pre-commit.ci autoupdate PR needs human review. (#226, @​kelly-sovacool, @​copilot)

Changelog

Sourced from CCBR/actions's changelog.

actions 0.8.3

• Approve pending Actions workflow runs for post-release cleanup PRs, scoped to the current PR head SHA. (#234, @​kelly-sovacool, @​copilot)
• review-pre-commit-pr and review-post-release-pr: merge the validated commit directly, or explain why when auto-merge can't be enabled because the PR is already mergeable. (#239, @​kelly-sovacool, @​copilot)

actions 0.8.2

• Use GitHub App Client IDs in workflows and composite actions, retaining legacy app-id support. (#232, @​kelly-sovacool, @​copilot)

actions 0.8.1

• New action: review-post-release-pr to automatically review post-release cleanup PRs and approve them (approving pending workflow runs and enabling auto-merge) when the version file was actually bumped and every changed file's new content is a valid, field-specific bump matching an actual release tag, or request a human reviewer otherwise. Approvals are pinned to the validated commit and re-validated if the PR's head changes afterward (e.g. after an auto-format push). (#227, @​kelly-sovacool, @​copilot)
  • Require the PR's synchronize event to come from the bot (not just any pusher) before re-running the automatic review, and pass action inputs to the embedded Python scripts via env: instead of splicing ${{ inputs.* }} directly into the script text, in review-pre-commit-pr and review-post-release-pr. (#227, @​kelly-sovacool, @​copilot)
• Fix review-pre-commit-pr to post a comment instead of requesting changes when a pre-commit.ci autoupdate PR needs human review. (#226, @​kelly-sovacool, @​copilot)

Commits

• 97aaae2 chore: 🤖 prepare release v0.8.3
• 45ac426 fix: handle auto-merge rejection when PR is already mergeable (#239)
• da09f5e chore: freeze CCBR/Tools at v0.7.1 (#238)
• 4dbcb6a chore: 🤖 sync copilot instructions - 2026-10-09 (#237)
• e5b312e chore: Merge branch 'main' of github.com:CCBR/actions
• 6d0aa54 ci: switch from black to ruff
• e7e5244 [pre-commit.ci] pre-commit autoupdate (#235)
• 6f422d4 chore: merge
• 674dd8c chore(pre-commit): pin CCBR/Tools hook to v0.7.1 commit sha (#236)
• c14ef0d ci: skip auto-format on dependabot PRs
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions