build(deps): bump actions/labeler from 6.1.0 to 6.2.0
What the developer wrote
Authored by dependabot[bot]
build(deps): bump actions/labeler from 6.1.0 to 6.2.0
Bumps [actions/labeler](https://github.com/actions/labeler) from 6.1.0 to 6.2.0.
- [Release notes](https://github.com/actions/labeler/releases)
- [Commits](https://github.com/actions/labeler/compare/f27b608878404679385c85cfa523b85ccb86e213...b8dd2d9be0f68b860e7dae5dae7d772984eacd6d)
---
updated-dependencies:
- dependency-name: actions/labeler
dependency-version: 6.2.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
What changed, and why it matters
This is a routine automated update by Dependabot that bumps the GitHub Actions 'labeler' workflow dependency from version 6.1.0 to 6.2.0. The labeler action only manages pull-request labels; it does not touch source code, build artifacts, secrets, or the Bitcoin library itself. There is no indication in the commit of any security fix or vulnerability.
No security action required. Review and merge as a normal dependency maintenance update if desired.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The commit changes a single pinned GitHub Actions hash in .github/workflows/manage-pr.yml from actions/labeler@v6.1.0 to actions/labeler@v6.2.0. This workflow runs only on pull_request_target events and is limited to label management via the sync-labels feature. The diff contains no code changes to the rust-bitcoin crate, no CI permission changes, and no disclosed security content.
Changed components
.github/workflows/manage-pr.ymlInspect captured patch +1 / −1
### .github/workflows/manage-pr.yml
@@ -17,7 +17,7 @@ jobs:
- name: Generate label config
run: ./.github/gen_label_config.sh
- name: Update labels
- uses: actions/labeler@f27b608878404679385c85cfa523b85ccb86e213 # v6.1.0
+ uses: actions/labeler@b8dd2d9be0f68b860e7dae5dae7d772984eacd6d # v6.2.0
with:
configuration-path: .github/labeler.yml
sync-labels: trueWhy this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.