Bump dependabot/fetch-metadata from 2.4.0 to 2.5.0 (#836) Bumps [dependabot/fetch-metadata](https://github.com/dependabot/fetch-metadata) from 2.4.0 to 2.5.0.

Release notes

Sourced from dependabot/fetch-metadata's releases.

v2.5.0

What's Changed

Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 by @dependabot[bot] in dependabot/fetch-metadata#628

Bump the dev-dependencies group with 11 updates by @dependabot[bot] in dependabot/fetch-metadata#629

Bump actions/create-github-app-token from 2.0.6 to 2.1.1 by @dependabot[bot] in dependabot/fetch-metadata#635

Bump actions/create-github-app-token from 2.1.1 to 2.1.4 by @dependabot[bot] in dependabot/fetch-metadata#638

Bump actions/checkout from 4 to 5 by @dependabot[bot] in dependabot/fetch-metadata#636

Bump actions/setup-node from 4 to 5 by @dependabot[bot] in dependabot/fetch-metadata#637

Bump actions/setup-node from 5 to 6 by @dependabot[bot] in dependabot/fetch-metadata#639

Bump actions/create-github-app-token from 2.1.4 to 2.2.0 by @dependabot[bot] in dependabot/fetch-metadata#643

Bump actions/checkout from 5 to 6 by @dependabot[bot] in dependabot/fetch-metadata#642

Bump actions/create-github-app-token from 2.2.0 to 2.2.1 by @dependabot[bot] in dependabot/fetch-metadata#648

Bump js-yaml from 3.14.1 to 3.14.2 by @dependabot[bot] in dependabot/fetch-metadata#644

Bump express from 5.1.0 to 5.2.1 by @dependabot[bot] in dependabot/fetch-metadata#645

Bump @modelcontextprotocol/sdk from 1.11.2 to 1.24.0 by @dependabot[bot] in dependabot/fetch-metadata#647

v2.5.0 by @fetch-metadata-action-automation[bot] in dependabot/fetch-metadata#631

Full Changelog: https://github.com/dependabot/fetch-metadata/compare/v2...v2.5.0

Commits

21025c7 v2.5.0
252291c Merge pull request #647 from dependabot/dependabot/npm_and_yarn/modelcontextp...
fa144c9 chore: Migrate jest expectation function
33c7a0b bug: Mock PR body in test
99c27ad Bump @modelcontextprotocol/sdk from 1.11.2 to 1.24.0
3837dcc Merge pull request #645 from dependabot/dependabot/npm_and_yarn/express-5.2.1
d411582 Bump express from 5.1.0 to 5.2.1
186ccbb Merge pull request #644 from dependabot/dependabot/npm_and_yarn/js-yaml-3.14.2
84c891e Bump js-yaml from 3.14.1 to 3.14.2
4542092 Merge pull request #648 from dependabot/dependabot/github_actions/actions/cre...
Additional commits viewable in compare view

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=dependabot/fetch-metadata&package-manager=github_actions&previous-version=2.4.0&new-version=2.5.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Compare