[dependabot]

Bumps petry-projects/.github/.github/workflows/feature-ideation-reusable.yml from 3f861e1 to 7bf5a75.

Commits

• 7bf5a75 feat(dev-lead): add statuses: read to caller template permissions
• e1f6b5d feat(compliance): migrate dev-lead trigger label claude→dev-lead + re-trigger...
• 55b2e7d chore(deps): Bump gitleaks/gitleaks-action from 2.3.9 to 3.0.0 (#380)
• bf65972 chore(deps): Bump petry-projects/.github/.github/workflows/feature-ideation-r...
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[donpetry-bot]

Automated review — APPROVED ✓

Risk: MEDIUM
Reviewed commit: b48b300dfeef32f95937e200dcf59ee989f5e17c
Cascade: triage → deep (triage: haiku 4.5 → deep: sonnet 4.6 + duck: o4-mini → audit: opus 4.7)

Summary

The SHA bump updates the pin to feature-ideation-reusable.yml but the actual reusable workflow file content is byte-for-byte identical between the old and new SHAs (same git blob b43a9e6). The triage signal about statuses: read refers to the upstream dev-lead standard template, not this workflow. All CI checks — AgentShield, CodeQL, SonarCloud (0 new issues, 0 hotspots), gitleaks secret scan, ShellCheck, and Feature Ideation Tests — pass cleanly.

Findings

• INFO: SHA pin updated from 3f861e1 to 7bf5a75. Verified: feature-ideation-reusable.yml content is identical at both SHAs (blob sha b43a9e6). The change is a mechanical version advance with no functional impact on this workflow. (.github/workflows/feature-ideation.yml:66)
• INFO: Triage flagged 'add statuses: read to caller template permissions'. This change is upstream in standards/workflows/dev-lead.yml (the dev-lead caller template), not in feature-ideation.yml. The feature-ideation job-level permissions block is unchanged: contents:read, issues:read, pull-requests:read, discussions:write, actions:read, id-token:write.
• INFO: The upstream SHA range also includes: gitleaks v2.3.9→v3.0.0 bump in ci.yml, compliance-audit script improvements, dev-lead-retrigger.sh and migrate-claude-label.sh new scripts, and compliance-audit-and-improvement.yml modifications. None of these affect the feature-ideation reusable workflow or the caller stub in this PR.
• INFO: All status checks passed: AgentShield, Lint, ShellCheck, Agent Security Scan, Secret scan (gitleaks), CodeQL, SonarCloud (0 new issues, 0 security hotspots), Feature Ideation Tests, Dependency audit.

---

Reviewed by the PR-review cascade (triage: haiku 4.5 → deep: sonnet 4.6 + duck: o4-mini → audit: opus 4.7). Reply if you need a human review.