Skip to content

chore(deps): bump actions/create-github-app-token from 3.2.0 to 3.3.0 - #4178

Merged
dpiet-oai merged 1 commit into
mainfrom
dependabot/github_actions/actions/create-github-app-token-3.3.0
Oct 26, 2026
Merged

dpiet-oai merged 1 commit into
mainfrom
dependabot/github_actions/actions/create-github-app-token-3.3.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 26, 2026

Copy link
Copy Markdown
Contributor

Bumps actions/create-github-app-token from 3.2.0 to 3.3.0.

Release notes

Sourced from actions/create-github-app-token's releases.

v3.3.0

3.3.0 (2026-10-12)

Features

Bug Fixes

  • deps: bump nested undici from 6.24.0 to 6.29.0 (#403) (12461a3)
  • deps: bump the production-dependencies group across 1 directory with 3 updates (#395) (a69c19d)
Changelog

Sourced from actions/create-github-app-token's changelog.

Changelog

3.3.0 (2026-10-12)

Features

Bug Fixes

  • deps: bump nested undici from 6.24.0 to 6.29.0 (#403) (12461a3)
  • deps: bump the production-dependencies group across 1 directory with 3 updates (#395) (a69c19d)

3.2.0 (2026-05-12)

Features

  • add support for enterprise-level GitHub Apps (#263) (952a2a7)
  • support full repository names in repositories input (#372) (85eb8dd)

Bug Fixes

  • deps: bump @​actions/core from 3.0.0 to 3.0.1 in the production-dependencies group (#364) (43e5c34)
  • validate private-key input (#376) (f24bbd8)
Commits
  • 64ab729 chore(main): release 3.3.0 (#402)
  • f3a828e ci: create signed dist commits in release workflow (#404)
  • 655017f docs: clarify when owner grants access to all repositories (#378)
  • 12461a3 fix(deps): bump nested undici from 6.24.0 to 6.29.0 (#403)
  • a47236f feat: update permission inputs (#399)
  • a69c19d fix(deps): bump the production-dependencies group across 1 directory with 3 u...
  • d5cb7ae build(deps): bump actions/checkout from 6 to 7 (#384)
  • 575da86 build(deps): bump stefanzweifel/git-auto-commit-action from 7.1.0 to 7.2.0 in...
  • e85f677 test: omit stack traces from snapshots (#401)
  • 9419396 build(deps-dev): bump c8 from 11.0.0 to 12.0.0 (#400)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [actions/create-github-app-token](https://github.com/actions/create-github-app-token) from 3.2.0 to 3.3.0.
- [Release notes](https://github.com/actions/create-github-app-token/releases)
- [Changelog](https://github.com/actions/create-github-app-token/blob/main/CHANGELOG.md)
- [Commits](actions/create-github-app-token@bcd2ba4...64ab729)

---
updated-dependencies:
- dependency-name: actions/create-github-app-token
  dependency-version: 3.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from a team as a code owner October 26, 2026 09:52
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Oct 26, 2026
@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Oct 26, 2026 •

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ✅ Completed 2026-10-26T09:53:02.284364Z 99524d7 PR opened
🔒 Security Review ✅ Completed 2026-10-26T09:53:29.608656Z 99524d7 PR opened
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@github-actions

Copy link
Copy Markdown
Contributor

Castiron custom code

Evaluated main: 5d72315876ffd8b72b958623ef4db26da3fb1e61.

Trusted main policy: 5d72315876ffd8b72b958623ef4db26da3fb1e61.

✅ No new custom-code files detected.

0 mixed files remain; 0 existing customizations changed.

Compared 5d72315876ff → 99524d75997b. Generated baselines verified.

A changed generated baseline means this report cannot reliably identify which handwritten lines changed.

Inspect the custom-code diff

Download the exact patch produced by this run (requires repository access):

gh run download 40303042026 --repo openai/openai-python \
  --name castiron-custom-code-40303042026-1 --dir /tmp/castiron-custom-code-40303042026-1
git apply --stat /tmp/castiron-custom-code-40303042026-1/custom-code.patch
cat /tmp/castiron-custom-code-40303042026-1/custom-code.patch

Or reproduce it from an SDK checkout containing the vendored reporter:

git fetch --no-tags origin 5d72315876ffd8b72b958623ef4db26da3fb1e61 99524d75997b98d7dbf0828ec79dc0adbd849fcb
python3 scripts/castiron/custom_code_report.py report \
  --base 5d72315876ffd8b72b958623ef4db26da3fb1e61 \
  --head 99524d75997b98d7dbf0828ec79dc0adbd849fcb --target-branch main --fetch --require-head-hash --public \
  --out /tmp/castiron-custom-code-99524d75997b
cat /tmp/castiron-custom-code-99524d75997b/custom-code.patch

This is the current full custom patch for mixed files, not an attribution of only the handwritten lines changed by this PR.

Full report and patch

@dpiet-oai
dpiet-oai added this pull request to the merge queue Oct 26, 2026
Merged via the queue into main with commit 06dbb5d Oct 26, 2026
34 checks passed
@dpiet-oai
dpiet-oai deleted the dependabot/github_actions/actions/create-github-app-token-3.3.0 branch October 26, 2026 21:44
@openai-sdks openai-sdks Bot mentioned this pull request Oct 26, 2026
gh-actions-shared Bot pushed a commit to xf-qubit/openai-python that referenced this pull request Oct 27, 2026
Automated Release PR
---


##
[3.40.0](openai/openai-python@v3.39.0...v3.40.0)
(2026-10-27)


### Features

* **api:** add prompt cache breakpoint TTL options
([openai#4188](openai#4188))
([3596d18](openai@3596d18))


### Bug Fixes

* **ci:** use an explicit browser demo dependency
([openai#4185](openai#4185))
([a3f4302](openai@a3f4302))


### Chores

* **api:** record completed generated-code separation
([openai#4190](openai#4190))
([d7ab5ee](openai@d7ab5ee))
* **deps-dev:** bump griffe from 1.14.0 to 2.3.0
([openai#4069](openai#4069))
([766b849](openai@766b849))
* **deps:** bump actions/create-github-app-token from 3.2.0 to 3.3.0
([openai#4178](openai#4178))
([06dbb5d](openai@06dbb5d))
* **deps:** bump actions/download-artifact from 8.0.1 to 8.0.2
([openai#4110](openai#4110))
([2404d04](openai@2404d04))
* **deps:** bump actions/upload-artifact from 7.0.1 to 7.0.2
([openai#4107](openai#4107))
([0adf711](openai@0adf711))
* **deps:** bump github/codeql-action/analyze from 4.38.2 to 4.39.0
([openai#4177](openai#4177))
([1e42321](openai@1e42321))
* **deps:** bump openai/codex-action from 1.12 to 1.13
([openai#4070](openai#4070))
([904ed3f](openai@904ed3f))
* update generated-code verification and preserve SDK helpers
([openai#4186](openai#4186))
([9412200](openai@9412200))

---
This PR was generated with [Release
Please](https://github.com/googleapis/release-please). See
[documentation](https://github.com/googleapis/release-please#release-please).

Co-authored-by: openai-sdks[bot] <284451331+openai-sdks[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant