[dependabot]

Bumps devantler-tech/actions/.github/workflows/scan-for-todo-comments.yaml from 9.0.0 to 9.0.2.

Release notes

Sourced from devantler-tech/actions/.github/workflows/scan-for-todo-comments.yaml's releases.

v9.0.2

9.0.2 (2026-07-06)

Bug Fixes

• create-issues-from-todos: stop the action self-matching its own comment (#457) (5188832)

v9.0.1

9.0.1 (2026-07-06)

Bug Fixes

• create-issues-from-todos: re-pin todo-to-issue-action to v5.1.15 (#451) (6415df0), closes #222

Changelog

Sourced from devantler-tech/actions/.github/workflows/scan-for-todo-comments.yaml's changelog.

Changelog

9.0.2 (2026-07-06)

Bug Fixes

• create-issues-from-todos: stop the action self-matching its own comment (#457) (5188832)

9.0.1 (2026-07-06)

Bug Fixes

• create-issues-from-todos: re-pin todo-to-issue-action to v5.1.15 (#451) (6415df0), closes #222

9.0.0 (2026-07-03)

⚠ BREAKING CHANGES

• remove the sync-github-labels composite action (superseded by declarative IssueLabels) (#418)
• All callers referencing old file names, input names, output names, or secret keys must be updated.
• run-dotnet-tests: run-dotnet-tests no longer accepts app-id or app-private-key inputs. Callers pinning by SHA are unaffected; on repin any still-passed values are simply ignored (unexpected-input warning).
• the setup-copilot-skills/update-copilot-skills action paths are removed and setup-agent-skills's agent input is renamed to agents. Consumers on a pinned major (e.g. @​v4) are unaffected until they bump; migration guides are in each action's README.
• the codecov-token input is removed from both actions. Callers must stop passing it (the reusable workflows are updated in lockstep).
• copilot-skills: setup-copilot-skills and update-copilot-skills both remove the skills-lock input; setup-copilot-skills also removes the source input and redefines skills as the sole list input. Delete any skills-lock.json and move each entry onto its own <owner/repo> <skill> line in setup-copilot-skills.with.skills.
• Action directories and input names have been renamed.

Features

• add .NET project and test configurations (#10) (1ce56da)
• add require-checks-in-pr composite action (#113) (1f66c91)
• add auto-merge composite action for PRs (#14) (a8f34bd)
• add automation configuration for PR reviews and issue sessions (f4b7152)
• add blocked label and update label sync configuration (3041247)
• add Calculator class with basic arithmetic operations and corresponding unit tests (f5c21a1)
• add collapsible sections for workflow details in README (2e8d0f9)
• add docs (aba6c52)
• add dotnet-test-action for testing .NET solutions with GitHub Actions (ad39d59)
• add EditorConfig file and update Calculator and CalculatorTests for consistency and clarity (f032439)
• add GitHub workflows (861d3e2)
• add GitOps deployment workflow for managing Kubernetes resources (f6f0ce7)
• add GitOps validation workflow (8505da2)
• add Hadolint action for linting Dockerfiles (9f610a8)
• add Homebrew setup and environment initialization to GitOps workflows (c4b0fe5)
• add Homebrew setup step to GitOps workflows for consistent environment setup (e300bd6)
• add initial release configuration for semantic-release (3c4f906)
• add inputs for HOSTS_FILE and ROOT_CA_CERT_FILE in GitOps workflow (6eefeeb)
• add pull_request and merge_group triggers to Zizmor workflow (1ce3f4b)

... (truncated)

Commits

• b69839b chore(main): release 9.0.2 (#460)
• 5188832 fix(create-issues-from-todos): stop the action self-matching its own comment ...
• c25eb0e chore(main): release 9.0.1 (#455)
• 6415df0 fix(create-issues-from-todos): re-pin todo-to-issue-action to v5.1.15 (#451)
• e7c63d9 chore(deps): bump golangci/golangci-lint-action from 9.2.1 to 9.3.0 (#448)
• fbad479 chore(deps): bump oxsecurity/megalinter/flavors/go from 9.5.0 to 9.6.0 (#445)
• a18b368 chore(deps): bump stefanzweifel/git-auto-commit-action (#443)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[coderabbitai]

Caution

Review failed

The pull request is closed.

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: 7327124d-4a2d-4f2d-933e-0d3c03f825bc

📥 Commits

Reviewing files that changed from the base of the PR and between 26c3ada and 041ca4f.

📒 Files selected for processing (1)

• .github/workflows/todos.yaml

---

📝 Walkthrough

Walkthrough

This change updates the GitHub Actions workflow file todos.yaml, bumping the pinned commit reference for the scan-for-todo-comments.yaml reusable workflow from version v9.0.0 to v9.0.2. Only the commit SHA and version annotation comment were modified; no other logic or exported entities were changed.

Changes

File	Change Summary
.github/workflows/todos.yaml	Updated pinned commit SHA reference for scan-for-todo-comments.yaml from v9.0.0 to v9.0.2

Sequence Diagram(s)

Not applicable — this change is a version pin update with no observable behavioral flow to diagram.

Related Issues

Unable to confirm relevance — the linked issue (#222) references a Docker tag update for linkedin/datahub-elasticsearch-setup, which is unrelated to this GitHub Actions workflow version bump.

Related PRs

None identified.

Suggested labels: dependencies, github-actions

Suggested reviewers: devantler

Poem
A tiny hop from oh-nine-oh,
to oh-nine-two, off we go!
A single SHA, pinned anew,
the todo-scanner workflow, spry and true.
🐰 A rabbit's nod for versions small,
yet mighty in their upkeep call.

---

_{Comment @coderabbitai help to get the list of available commands.}

[botantler-1]

🎉 This PR is included in version 1.107.0 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀