This is an automated email from the ASF dual-hosted git repository.

alamb pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/arrow-rs.git


The following commit(s) were added to refs/heads/main by this push:
     new 95c54a35f9 chore(deps): bump actions/stale from 10.4.0 to 11.0.0 
(#10452)
95c54a35f9 is described below

commit 95c54a35f9932099f81ac21892eab8b68c688df8
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
AuthorDate: Tue Jul 28 13:29:27 2026 -0400

    chore(deps): bump actions/stale from 10.4.0 to 11.0.0 (#10452)
    
    Bumps [actions/stale](https://github.com/actions/stale) from 10.4.0 to
    11.0.0.
    <details>
    <summary>Release notes</summary>
    <p><em>Sourced from <a
    href="https://github.com/actions/stale/releases";>actions/stale's
    releases</a>.</em></p>
    <blockquote>
    <h2>v11.0.0</h2>
    <h2>What's Changed</h2>
    <h3>Enhancement</h3>
    <ul>
    <li>Migrate to ESM and update dependencies by <a
    
href="https://github-grid.enterprise.slack.com/team/U08CVLQ4JKE";><code>@​chiranjib-swain</code></a>
    in <a
    
href="https://redirect.github.com/actions/stale/pull/1350";>actions/stale#1350</a></li>
    </ul>
    <h3>Dependency Update</h3>
    <ul>
    <li>Override brace-expansion to 5.0.8 to address 24 high-severity
    dependency vulnerabilities by <a
    href="https://github.com/dependabot";><code>@​dependabot</code></a> in <a
    
href="https://redirect.github.com/actions/stale/pull/1351";>actions/stale#1351</a></li>
    </ul>
    <p><strong>Full Changelog</strong>: <a
    
href="https://github.com/actions/stale/compare/v10...v11.0.0";>https://github.com/actions/stale/compare/v10...v11.0.0</a></p>
    </blockquote>
    </details>
    <details>
    <summary>Commits</summary>
    <ul>
    <li><a
    
href="https://github.com/actions/stale/commit/4391f3da665fdf50b6810c1a66712fb9ba21aa93";><code>4391f3d</code></a>
    Fix 24 high severity vulnerabilities by overriding brace-expansion to
    5.0.8 (...</li>
    <li><a
    
href="https://github.com/actions/stale/commit/eaf9131fae5eafd0c31a64ebe3a2e183266fec48";><code>eaf9131</code></a>
    refactor: update imports to use ES module syntax and improve test
    structure (...</li>
    <li>See full diff in <a
    
href="https://github.com/actions/stale/compare/1e223db275d687790206a7acac4d1a11bd6fe629...4391f3da665fdf50b6810c1a66712fb9ba21aa93";>compare
    view</a></li>
    </ul>
    </details>
    <br />
    
    
    [![Dependabot compatibility
    
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/stale&package-manager=github_actions&previous-version=10.4.0&new-version=11.0.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
    
    Dependabot will resolve any conflicts with this PR as long as you don't
    alter it yourself. You can also trigger a rebase manually by commenting
    `@dependabot rebase`.
    
    [//]: # (dependabot-automerge-start)
    [//]: # (dependabot-automerge-end)
    
    ---
    
    <details>
    <summary>Dependabot commands and options</summary>
    <br />
    
    You can trigger Dependabot actions by commenting on this PR:
    - `@dependabot rebase` will rebase this PR
    - `@dependabot recreate` will recreate this PR, overwriting any edits
    that have been made to it
    - `@dependabot show <dependency name> ignore conditions` will show all
    of the ignore conditions of the specified dependency
    - `@dependabot ignore this major version` will close this PR and stop
    Dependabot creating any more for this major version (unless you reopen
    the PR or upgrade to it yourself)
    - `@dependabot ignore this minor version` will close this PR and stop
    Dependabot creating any more for this minor version (unless you reopen
    the PR or upgrade to it yourself)
    - `@dependabot ignore this dependency` will close this PR and stop
    Dependabot creating any more for this dependency (unless you reopen the
    PR or upgrade to it yourself)
    
    
    </details>
    
    Signed-off-by: dependabot[bot] <[email protected]>
    Co-authored-by: dependabot[bot] 
<49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/stale.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/stale.yml b/.github/workflows/stale.yml
index 7b0d1b9e90..81188559d8 100644
--- a/.github/workflows/stale.yml
+++ b/.github/workflows/stale.yml
@@ -28,7 +28,7 @@ jobs:
       issues: write
       pull-requests: write
     steps:
-      - uses: actions/stale@1e223db275d687790206a7acac4d1a11bd6fe629  # v10.4.0
+      - uses: actions/stale@4391f3da665fdf50b6810c1a66712fb9ba21aa93  # v11.0.0
         with:
           stale-pr-message: "Thank you for your contribution. Unfortunately, 
this pull request is stale because it has been open 60 days with no activity. 
Please remove the stale label or comment or this will be closed in 7 days."
           days-before-pr-stale: 60

Reply via email to