chore(deps): bump unbraind/pm-github/.github/workflows/pm-github-sync.yml from 2026.10.19 to 2026.10.29
Closed
DE
12d ago+1+1+0123456789-1-1-0123456789
Bumps unbraind/pm-github/.github/workflows/pm-github-sync.yml from 2026.10.19 to 2026.10.29.
Release notes
Sourced from unbraind/pm-github/.github/workflows/pm-github-sync.yml's releases.
pm-github v2026.10.29
Changelog
pm-github v2026.10.28
Changelog
pm-github v2026.10.27
Changelog
pm-github v2026.10.26
Changelog
pm-github v2026.10.25
Changelog
2026.10.25 - 2026-10-25
Fixed
- Hold ambiguous merged-PR delivery until attribution is verified (pm-github-closeout-attribution)
pm-github v2026.10.24
Changelog
pm-github v2026.10.23
Changelog
2026.10.23 - 2026-10-23
Added
- Let reusable workflows carry their own release version (pm-github-znig)
- Preserve imported GitHub lifetimes, closure evidence and release attribution while linking cross-provider items (pm-github-c093)
- Refresh only already-linked GitHub items without importing new ones (pm-github-ullj)
Fixed
- A publish spelled through a package runner was invisible to the attestation gate, so an unattested one read as clean (pm-github-5igz)
- PM CLI filtered native Bun tests falsely report an empty run (pm-github-2ao1)
- Track pm-changelog rendering closed historical incidents as Fixed (pm-github-n0mm)
- Stabilize the watchdog startup probe under concurrent coverage (pm-github-sah1)
- Explain privacy matches and distinguish bare-root regex literals during gated sync (pm-github-xhtp)
- The changelog gate stamps an untagged version with the current date, so its verdict flips every midnight with no commit (pm-github-m8vj)
- Closeout workflow tests race the detached telemetry flush when removing their temporary global root (pm-github-aplb)
- Keep reusable workflow operands out of executable positions in attestation scans (pm-github-7c95)
- Keep automated sync and closeout PRs current and dispatch caller checks (pm-github-8r7c)
- Reject malformed effective-rule discriminators before closeout (pm-github-b141)
- Preserve legacy GitHub ownership across copied provider examples (pm-github-b143)
- Release timeout must report current workflow approval state (pm-github-b145)
- The daily release regenerates the changelog with a different status filter than release:check, so an open changelog-unreleased item delivered since the last tag fails the release (pm-github-l1ot)
... (truncated)
Changelog
Sourced from unbraind/pm-github/.github/workflows/pm-github-sync.yml's changelog.
Changelog
2026.10.31 - 2026-10-31
Fixed
- Scheduled closeout reads required checks from the branch summary instead of failing every fleet caller (pm-github-6g0m)
2026.10.30 - 2026-10-30
Fixed
- Make scheduled closeout and sync refusals actionable (pm-github-3it2)
2026.10.29 - 2026-10-29
Added
- Capture selected GitHub discussion passages as reviewed native Decisions (pm-github-selected-discussion-decisions)
2026.10.28 - 2026-10-28
Added
- Preview exact GitHub label migration impacts (BREAKING: PM CLI 2026.10.17 minimum) (pm-github-2e38)
2026.10.26 - 2026-10-26
Added
- Validate selected GitHub issue forms before export (pm-github-ix5j)
Changed
- Use the pm SDK for GitHub import lifecycle persistence (pm-github-d26g)
Other
- Point the npm homepage at the package catalog and link the author (pm-github-o846)
2026.10.25 - 2026-10-25
Fixed
- Hold ambiguous merged-PR delivery until attribution is verified (pm-github-closeout-attribution)
2026.10.24 - 2026-10-24
Fixed
... (truncated)
Commits
da0366aRelease pm-github v2026.10.299d8401bCapture selected GitHub issue passages as reviewed native Decisions (#195)4deec2afix: make scheduled closeout actionable and repeat imports idempotent (#190)1191c65Release pm-github v2026.10.28d599336chore(deps-dev): bump the pm-toolchain group with 3 updates (#191)faa035ePreview exact GitHub label migration impacts (#188)d717d7bchore(deps-dev): bump the pm-toolchain group across 1 directory with 3 update...f90f86fRelease pm-github v2026.10.272b71f73docs(pm): reconcile delivered items with merge evidence (#183)fd89ce0Release pm-github v2026.10.26 (#187)- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Summary by cubic
Updates the pinned pm-github-sync workflow from 2026.10.19 to 2026.10.29 while keeping the pm-github-version input at 2026.10.19.
- Holds ambiguous merged-PR delivery until attribution is verified.
- Adds fixes for snapshot/testing and release verification reliability issues in
pm-github.