Skip to content

[main] Bump DavidAnson/markdownlint-cli2-action from 24.1.0 to 24.2.0 - #10581

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/DavidAnson/markdownlint-cli2-action-24.2.0
Open

[main] Bump DavidAnson/markdownlint-cli2-action from 24.1.0 to 24.2.0#10581
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/DavidAnson/markdownlint-cli2-action-24.2.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 13, 2026

Copy link
Copy Markdown
Contributor

Bumps DavidAnson/markdownlint-cli2-action from 24.1.0 to 24.2.0.

Commits
  • 21c1be1 Update to version 24.2.0.
  • cb5282d Freshen generated package-lock.json file, freshen generated index.js file.
  • d36517c Add eslint-package-json/all to lint script, address new issues.
  • 57b7f61 Refactor eslint.config.mjs to use defineConfig, change eslint-plugin-n from "...
  • fe75d07 Address new lint error from previous commit, freshen generated index.js file.
  • cea0e19 Bump eslint-plugin-unicorn from 71.1.0 to 72.0.0
  • 5137af3 Freshen generated index.js file.
  • ab8971b Bump markdownlint-cli2 from 0.23.1 to 0.23.2
  • 92a0fc4 Bump actions/setup-node from 6 to 7
  • 03ca1e4 Bump eslint from 10.6.0 to 10.7.0
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [DavidAnson/markdownlint-cli2-action](https://github.com/davidanson/markdownlint-cli2-action) from 24.1.0 to 24.2.0.
- [Release notes](https://github.com/davidanson/markdownlint-cli2-action/releases)
- [Commits](DavidAnson/markdownlint-cli2-action@6bf21b0...21c1be1)

---
updated-dependencies:
- dependency-name: DavidAnson/markdownlint-cli2-action
  dependency-version: 24.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Updates to dependency manifests. github_actions Pull requests that update GitHub Actions code labels Aug 13, 2026
Copilot AI balanced review requested due to automatic review settings August 13, 2026 06:37
@dependabot dependabot Bot added dependencies Updates to dependency manifests. github_actions Pull requests that update GitHub Actions code labels Aug 13, 2026

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Note

Copilot could not run the full agentic suite for this review because it was automatically requested on a bot-authored pull request. Request a review from Copilot under Reviewers to retry with the full agentic suite. Improved support for bot-authored pull requests is coming soon.

Updates the GitHub Actions workflow to use a newer pinned revision of the markdownlint-cli2-action for running Markdown linting.

Changes:

  • Bump DavidAnson/markdownlint-cli2-action from v24.1.0 to v24.2.0 (commit SHA update)

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

@nohwnd

Copy link
Copy Markdown
Member

This bump does not fix the workflow — it moves it from a broken 24.1.0 to an equally broken 24.2.0.

The organization's allowed-actions list permits DavidAnson/markdownlint-cli2-action at @v18 and nothing else, so any other version is rejected before a job is created and the run ends in startup_failure. That is why the Markdownlint run on this PR shows no job, no check run and no logs, and why the workflow has not had a single successful run since 2026-07-25.

#10628 replaces the action with a pinned npx markdownlint-cli2 call, which is not subject to the allow-list. Its Markdownlint run is green.

🤖

@nohwnd

Copy link
Copy Markdown
Member

Correcting my earlier comment — it is out of date and the conclusion no longer holds.

The allowed-actions list now reads DavidAnson/markdownlint-cli2-action@*, a wildcard rather than a single approved version, so this bump will not reintroduce startup_failure. The gate itself was fixed by #10636 and has been green since, including on branches that use the action.

The startup_failure still shown on this PR is stale: it ran on 2026-08-13, before the policy change. Rebasing will re-trigger it and give a real signal.

For what it is worth, 24.2.0 bundles markdownlint-cli2 0.23.2 against 0.23.1 in 24.1.0, and #10636 already disabled MD060, so no new rule fallout is expected. #10628 is closed.

🤖

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Updates to dependency manifests. github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants