Repository navigation
chore(deps): bump go.opentelemetry.io/otel/trace from 1.41.0 to 1.47.0 in /packages/otel-collector #7556
Triggered via pull request
November 14, 2026 01:56
dependabot[bot]
dependabot[bot]
opened
#3666
Status
Success
Total duration
1m 11s
Artifacts
–
claude-code-review.yml
on: pull_request_target
claude-review
1m 7s
Annotations
3 warnings and 1 notice
|
Workflow execution policy warning (evaluate mode):
.github/workflows/claude-code-review.yml#L1
On December 2, 2026, GitHub will restrict `pull_request_target` on public repositories by default. To continue allowing the event trigger, configure an Actions policy. Learn more: https://gh.io/securely-using-pull_request_target#default-policy-for-pull_request_target
|
|
claude-review
The author of pull request #3666 is not confirmed to have write access, so commands that run code from the checkout are denied. Set restrict_untrusted_prs to "false" to turn this off.
|
|
claude-review
⚠️ SECURITY WARNING: Bypassing write permission check for dependabot[bot] due to allowed_non_write_users='*'. This should only be used for workflows with very limited permissions.
|
|
claude-review
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
|