chore(deps): update actions/dependency-review-action action to v5 #7

2026-05-10T12:33:14Z

renovate-bot commented

2026-05-10 12:33:14 +00:00

This PR contains the following updates:

Package	Type	Update	Change
actions/dependency-review-action	action	major	`v4` → `v5.0.0`

⚠️ Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

actions/dependency-review-action (actions/dependency-review-action)

`v5.0.0`: 5.0.0

Compare Source

This is a new major version of the Dependency Review Action which updates the runtime to node24. This requires a minimum Actions Runner version v2.327.1 to run.

What's Changed

Add .github/copilot-instructions.md for Copilot coding agent by @ahpook in #1067
Update Node.js runtime from 20 to 24 by @scottschreckengaust in #1084
Bump spdx-license-ids from 3.0.20 to 3.0.23 by @mongolyy in #1091
docs: bump actions/checkout from v4 to v6 in workflow examples by @Marukome0743 in #1077
fix: patched version display for advisories with non-strict semver ranges (e.g. Maven beta versions) by @tspascoal in #1076
Resolve security findings by @AshelyTC in #1094
v5.0.0 release branch by @ahpook in #1098

New Contributors

@scottschreckengaust made their first contribution in #1084
@mongolyy made their first contribution in #1091
@Marukome0743 made their first contribution in #1077

Full Changelog: https://github.com/actions/dependency-review-action/compare/v4.9.0...v5.0.0

Configuration

📅 Schedule: (in timezone Europe/Berlin)

Branch creation
- Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/dependency-review-action](https://github.com/actions/dependency-review-action) | action | major | `v4` → `v5.0.0` | --- > ⚠️ **Warning** > > Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/4) for more information. --- ### Release Notes <details> <summary>actions/dependency-review-action (actions/dependency-review-action)</summary> ### [`v5.0.0`](https://github.com/actions/dependency-review-action/releases/tag/v5.0.0): 5.0.0 [Compare Source](https://github.com/actions/dependency-review-action/compare/v4.9.0...v5.0.0) This is a new major version of the Dependency Review Action which updates the runtime to node24. This requires a minimum Actions Runner version [v2.327.1](https://github.com/actions/runner/releases/tag/v2.327.1) to run. #### What's Changed - Add .github/copilot-instructions.md for Copilot coding agent by [@ahpook](https://github.com/ahpook) in [#1067](https://github.com/actions/dependency-review-action/pull/1067) - Update Node.js runtime from 20 to 24 by [@scottschreckengaust](https://github.com/scottschreckengaust) in [#1084](https://github.com/actions/dependency-review-action/pull/1084) - Bump spdx-license-ids from 3.0.20 to 3.0.23 by [@mongolyy](https://github.com/mongolyy) in [#1091](https://github.com/actions/dependency-review-action/pull/1091) - docs: bump actions/checkout from v4 to v6 in workflow examples by [@Marukome0743](https://github.com/Marukome0743) in [#1077](https://github.com/actions/dependency-review-action/pull/1077) - fix: patched version display for advisories with non-strict semver ranges (e.g. Maven beta versions) by [@tspascoal](https://github.com/tspascoal) in [#1076](https://github.com/actions/dependency-review-action/pull/1076) - Resolve security findings by [@AshelyTC](https://github.com/AshelyTC) in [#1094](https://github.com/actions/dependency-review-action/pull/1094) - v5.0.0 release branch by [@ahpook](https://github.com/ahpook) in [#1098](https://github.com/actions/dependency-review-action/pull/1098) #### New Contributors - [@scottschreckengaust](https://github.com/scottschreckengaust) made their first contribution in [#1084](https://github.com/actions/dependency-review-action/pull/1084) - [@mongolyy](https://github.com/mongolyy) made their first contribution in [#1091](https://github.com/actions/dependency-review-action/pull/1091) - [@Marukome0743](https://github.com/Marukome0743) made their first contribution in [#1077](https://github.com/actions/dependency-review-action/pull/1077) **Full Changelog**: <https://github.com/actions/dependency-review-action/compare/v4.9.0...v5.0.0> </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/Berlin) - Branch creation - Between 12:00 AM and 03:59 AM, only on Monday (`* 0-3 * * 1`) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).

renovate-bot added the dependencies label 2026-05-10 12:33:14 +00:00

renovate-bot added 1 commit 2026-05-10 12:33:14 +00:00

chore(deps): update actions/dependency-review-action action to v5

Security / scan (pull_request) Successful in 21s

Details

86a2c5dc8a

JonKazama-Hellion was assigned by renovate-bot

2026-05-10 12:33:14 +00:00

JonKazama-Hellion merged commit 32f4c92f1b into master

2026-05-10 20:37:28 +00:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: JonKazama-Hellion/Hellion-NewTab#7