[dependabot]

Bumps redhat-actions/try-in-web-ide from f8e7861005a44bc2af3c9bb333a696906a86ee4e to ecbb52a3100bc175f11d0e34e2e33ed0a9f8ad44.

Changelog

Sourced from redhat-actions/try-in-web-ide's changelog.

try-in-web-ide Changelog

v2.0.0

Breaking Changes

• Node 24 runtime — action now runs on node24 (previously node16/node20)

Dependencies

• Upgraded TypeScript 5.8 → 6.0.3
• Upgraded ESLint 8 (EOL) → 10 with flat config migration
• Upgraded Jest 29 → 30
• Upgraded @types/node ^20 → ^26, fs-extra ^10 → ^11
• Fixed high-severity brace-expansion DoS vulnerability (GHSA-mh99-v99m-4gvg)

CI & Security

• Hardened all workflows with least-privilege permissions blocks
• Upgraded runners to ubuntu-24.04
• Upgraded actions/checkout to v7, actions/setup-node to v7
• Replaced archived markdown-link-check with lychee-action
• Added concurrency groups to cancel redundant runs
• Added Dependabot version updates for npm and GitHub Actions
• Enabled secret scanning and push protection
• Set default workflow permissions to read-only
• Added SECURITY.md

Docs

• Added devfile.yaml, VS Code extensions config, and CONTRIBUTING.md (#39)
• Fixed outdated references in CONTRIBUTING.md

v1.4.2

• Try to update earliest matching comment

v1.4.1

• Allow detecting and updating existing badge comments made by bots other than the github-actions bot

v1.4

• Update the existing comment instead of adding a new one

v1.3

• Introduce new action input setup_remotes

v1.2

• Update action to run on Node16. https://github.blog/changelog/2022-05-20-actions-can-now-run-in-a-node-js-16-runtime/

v1.1

• Update pull request comment and status check text
• Listen for pull_request_target events instead of pull_request events to support pull requests from forks

v1

• Initial Release

Commits

• ecbb52a chore(deps): Bump undici from 6.29.0 to 6.29.1 in the npm_and_yarn group acro...
• 6af2506 chore(deps-dev): Bump eslint-plugin-jest from 29.16.6 to 29.17.0 (#95)
• f67721e chore(deps): Bump actions/setup-node from 7.0.0 to 7.1.0 (#97)
• 2a3245a chore(deps-dev): Bump typescript-eslint from 8.71.0 to 8.72.1 (#96)
• ee036df chore(deps-dev): Bump eslint from 10.11.0 to 10.13.0 (#94)
• 93f0f7c chore(deps-dev): Bump ts-jest from 29.4.14 to 29.4.15 (#93)
• adaa611 chore(deps-dev): Bump handlebars (#91)
• 5fbef01 chore(deps-dev): Bump brace-expansion (#90)
• 8197835 chore(deps): Bump undici from 6.28.0 to 6.29.0 in the npm_and_yarn group acro...
• 48850d8 chore(deps-dev): Bump @​types/node from 26.5.1 to 26.6.3 (#85)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

Click here to review and test in web IDE:

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: defaults
• Review profile: CHILL
• Plan: Advanced
• Run ID: 72e0abc7-c91e-49f2-8889-bf38b861edbb

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

• X
• Mastodon
• Reddit
• LinkedIn