chore(deps): bump dieghernan/cff-validator from 4 to 5

[dependabot]

Bumps dieghernan/cff-validator from 4 to 5.

Release notes

Sourced from dieghernan/cff-validator's releases.

v5

Note that v5 is a sliding tag, and we introduce non-breaking changes to it.

• Docker action is pinned to the same commit SHA as the parent workflow to avoid security issues thanks to @​mgovers (#26)

v5.0.1 (2026-04-21)

• Move to full SHA reference on Docker instead to relative path.

What's Changed

• Bump actions/checkout from 4 to 6 by @​dependabot[bot] in dieghernan/cff-validator#23
• Bump rocker/tidyverse from 4.4.2 to 4.5.2 in /docker by @​dependabot[bot] in dieghernan/cff-validator#24
• Use local docker action in composite action by @​mgovers in dieghernan/cff-validator#27
• Bump rocker/tidyverse from 4.5.2 to 4.5.3 in /docker by @​dependabot[bot] in dieghernan/cff-validator#25

New Contributors

• @​mgovers made their first contribution in dieghernan/cff-validator#27

Full Changelog: dieghernan/cff-validator@v4...v5

Changelog

Sourced from dieghernan/cff-validator's changelog.

v5

Note that v5 is a sliding tag, and we introduce non-breaking changes to it.

• Docker action is pinned to the same commit SHA as the parent workflow to avoid security issues thanks to @​mgovers (#26)

v5.0.1 (2026-04-21)

• Move to full SHA reference on Docker instead to relative path.

v4

Note that v4 is a sliding tag, and we introduce non-breaking changes to it.

Breaking change: The action now uses a Docker container, and would require to be run on a Linux virtual machine (os: ubuntu-*). MacOS and Windows actions would need to switch to ubuntu-*.

• Migration to Docker container rocker/tidyverse.

v3

Note that v3 is a sliding tag, and we introduce non-breaking changes to it.

• Improve underlying code.
• Using a copy of schema.json shipped with {cffr} to avoid SSL/SSH issues #10.
• Update versions of depencies (#13, #14)

v3.0.1 (2023-07-21)

• Improve underlying code.
• Using a copy of schema.json shipped with {cffr} to avoid SSL/SSH issues #10

v3.0.2 (2024-02-08)

• Update versions of dependencies (dieghernan/cff-validator#13, #14)

v3.0.3 (2025-01-17)

• Always install R (#16) hence (soft) deprecation of install-r parameter.
• Update versions of dependencies.

v2.3

• Fix #8, error on non-Git repos.

v2.2

• New install-r parameter.
• Improvements on performance.

v2.1

... (truncated)

Commits

• 54c8e73 Prepare sliding tag
• 41f92d7 Update action.yml
• 7ed7b84 Update action.yml
• fc44839 Prepare release
• 93d990c Merge pull request #25 from dieghernan/dependabot/docker/docker/rocker/tidyve...
• 2142b7c Bump rocker/tidyverse from 4.5.2 to 4.5.3 in /docker
• 79e387d Merge pull request #27 from mgovers/patch-1
• 22cecb1 Use local docker action in composite action
• a55dbe1 Merge pull request #24 from dieghernan/dependabot/docker/docker/rocker/tidyve...
• 50dd776 Bump rocker/tidyverse from 4.4.2 to 4.5.2 in /docker
• Additional commits viewable in compare view

[mgovers]

https://github.com/dependabot recreate

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud