Skip to content

chore(deps): bump millionco/react-doctor from 2.2.2 to 2.2.6#365

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/millionco/react-doctor-2.2.6
Closed

chore(deps): bump millionco/react-doctor from 2.2.2 to 2.2.6#365
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/millionco/react-doctor-2.2.6

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 9, 2026

Copy link
Copy Markdown
Contributor

Bumps millionco/react-doctor from 2.2.2 to 2.2.6.

Commits
  • ced746f fix(core): make the cache stack survive CI checkouts and the action cache (#1...
  • bdf8074 feat(telemetry): classify every scan's cache temperature in the wide event (#...
  • ea9a775 perf(core): incremental cross-file sidecar lint via dependency probe traces (...
  • ce49250 perf(core): incremental dead-code analysis via a per-file summary cache (#1057)
  • 20d81f6 fix(core): harden the dead-code cache key against version and input-list drif...
  • 8c004f0 perf(cli): key the scan-result cache on dirty worktree content instead of bai...
  • e257a5e perf(core): cache dead-code results so unchanged rescans skip the analysis (#...
  • 1571119 fix(cli): raise runGit maxBuffer so the scan cache works on large repos (#1052)
  • 8325343 chore: version packages (#1031)
  • 173cc0a fix(rules): four false-positive fixes from corpus census + adversarial triage...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [millionco/react-doctor](https://github.com/millionco/react-doctor) from 2.2.2 to 2.2.6.
- [Release notes](https://github.com/millionco/react-doctor/releases)
- [Commits](millionco/react-doctor@0b4f4f4...ced746f)

---
updated-dependencies:
- dependency-name: millionco/react-doctor
  dependency-version: 2.2.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jul 9, 2026
@netlify

netlify Bot commented Jul 9, 2026

Copy link
Copy Markdown

Deploy Preview for sonner-native ready!

Name Link
🔨 Latest commit b3ccd09
🔍 Latest deploy log https://app.netlify.com/projects/sonner-native/deploys/6a50323f09290f000880af0c
😎 Deploy Preview https://deploy-preview-365--sonner-native.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.
🤖 Make changes Run an agent on this branch

To edit notification comments on pull requests, go to your Netlify project configuration.

@greptile-apps

greptile-apps Bot commented Jul 9, 2026

Copy link
Copy Markdown

Greptile Summary

This PR bumps the millionco/react-doctor GitHub Actions workflow step from commit 0b4f4f4 (v2.2.2) to ced746f (v2.2.6) via Dependabot. The action remains pinned to a full SHA, which is the recommended security posture for third-party actions.

  • Upstream changes include performance improvements (incremental dead-code and cross-file sidecar lint caching), CI-cache survivability fixes, and false-positive rule fixes — no breaking changes expected.
  • The action runs in advisory mode (never fails the check), so this bump carries no risk of blocking CI even if behavior changes.

Confidence Score: 5/5

Routine Dependabot SHA bump of an advisory-only linting action — no workflow logic changes and no risk of CI breakage.

The only change is the pinned commit hash for the react-doctor action. The action runs in advisory mode and never fails the check, so even an unexpected behavioral change in the new version cannot break CI. Upstream release notes list caching improvements and false-positive fixes only.

No files require special attention.

Important Files Changed

Filename Overview
.github/workflows/react-doctor.yml Single-line SHA bump for the react-doctor action from v2.2.2 to v2.2.6; pinned commit hash retained, workflow logic unchanged.

Reviews (1): Last reviewed commit: "chore(deps): bump millionco/react-doctor..." | Re-trigger Greptile

@dependabot @github

dependabot Bot commented on behalf of github Jul 16, 2026

Copy link
Copy Markdown
Contributor Author

Superseded by #366.

@dependabot dependabot Bot closed this Jul 16, 2026
@dependabot
dependabot Bot deleted the dependabot/github_actions/millionco/react-doctor-2.2.6 branch July 16, 2026 23:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants