chore(deps): bump reviewdog/action-actionlint from 1.73.1 to 1.73.2

[dependabot]

Bumps reviewdog/action-actionlint from 1.73.1 to 1.73.2.

Release notes

Sourced from reviewdog/action-actionlint's releases.

Release v1.73.2

What's Changed

• chore(deps): update shogo82148/actions-create-release action to v1.9.1 by @​renovate[bot] in reviewdog/action-actionlint#223
• chore(deps): update python:3.14.7-alpine3.24 docker digest to 05b2b8b by @​renovate[bot] in reviewdog/action-actionlint#224

Full Changelog: reviewdog/action-actionlint@v1.73.1...v1.73.2

Commits

• dbe5299 bump v1.73.2
• b471811 Merge branch 'main' into releases/v1
• d6436f5 Merge pull request #224 from reviewdog/renovate/python-3.14.7-alpine3.24
• 3de11d2 chore(deps): update python:3.14.7-alpine3.24 docker digest to 05b2b8b
• 7d2a9fc Merge pull request #223 from reviewdog/renovate/shogo82148-actions-create-rel...
• 7499b98 chore(deps): update shogo82148/actions-create-release action to v1.9.1
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

✅ ai-qa: PASS

Deploy health: healthy · findings P0 0 · P1 0 · P2 0 · P3 0

Last updated by ai-qa · QA run

[mtm-bot]

⚠️ AI Review — inconclusive (re-run required)

The review model did not return a structured result after a
resume-repair attempt and a full retry (a known intermittent
anthropics/claude-code-action issue). This is not a
code-quality judgment — the review did not complete, so the gate
fails closed.

Re-run the ai-review job to get a verdict.

[Hicham Zinalabdin (hichamza)]

Cursor Agent (@cursoragent) review

[cursor]

I reviewed Dependabot PR #57 (reviewdog/action-actionlint 1.73.1 → 1.73.2) and posted the verdict on the PR.

Approve — safe patch bump, no consumer behavior change. The diff is a one-line SHA pin in .github/workflows/actionlint.yml. dbe5299… is the real v1.73.2 tag target, and the # v1.73.2 comment matches.

Upstream 1.73.2 only rebuilds the Docker image on a refreshed python:3.14.7-alpine3.24 digest and retargets action.yml to ghcr.io/reviewdog/action-actionlint:v1.73.2@sha256:db8e4b11…. entrypoint.sh and the install scripts are unchanged, so actionlint stays 1.7.12 and reviewdog stays 0.21.0. This workflow’s reporter: local / fail_level: error inputs still work.

This PR’s actionlint job already ran the new image and passed, along with unit, zizmor, and parity. The earlier mtm-bot CHANGES_REQUESTED is an inconclusive claude-code-action flake, not a finding on this diff. Re-run that gate and merge.

  

[cursor]

Review — approve

Patch bump of reviewdog/action-actionlint 1.73.1 → 1.73.2. One-line pin in .github/workflows/actionlint.yml; no consumer-facing behavior change.

Pin integrity

• dbe5299849118fd6f099ba563d263d770955a64a is the annotated v1.73.2 tag target (tag object 008e91ff…).
• Version comment # v1.73.2 matches the SHA.
• Dependabot metadata is a version-update:semver-patch.

What 1.73.2 actually ships

Compared to d63ba75 (v1.73.1):

File	Change	Consumer impact
action.yml	Image retargeted to ghcr.io/reviewdog/action-actionlint:v1.73.2@sha256:db8e4b113f39f1573bd75b6386257a4f13bcd62384c06d7d4b846c55fea13bc9	Pin-only
Dockerfile	python:3.14.7-alpine3.24 digest refresh (f2186fc… → 05b2b8b…)	Same major/minor Python; rebuilt base
.github/workflows/release.yml	shogo82148/actions-create-release bump	Upstream release pipeline only

entrypoint.sh and all install scripts are byte-identical to 1.73.1. Tool pins stay actionlint 1.7.12 and reviewdog 0.21.0. Inputs are unchanged, so this workflow’s reporter: local, filter_mode: nofilter, and fail_level: error remain valid.

Runtime evidence

The actionlint job on this PR already pulled and ran the new digest and passed. Unit, zizmor, and parity are also green.

Non-blockers (pre-existing)

• The annotated tag is unsigned (same as prior releases of this action).
• reporter: local is still omitted from the action’s documented reporter list; it is a reviewdog built-in and is working here. Not introduced by this bump.
• The earlier mtm-bot CHANGES_REQUESTED is an inconclusive claude-code-action flake (mode=inconclusive), not a finding on this diff.

Verdict: merge when the required ai-review gate is re-run and clears. No code changes needed on this branch.

[mtm-bot]

✅ ai-qa: PASS

Merge commit 751062451527

Signal	Result
Deploy health (https://raw.githubusercontent.com/EdulyCom/github-actions/main/README.md)	✅ healthy
QA review	⚠️ did not run — reporting deploy-health signal only

Posted by mtm-bot[bot] · workflow run