-
-
Notifications
You must be signed in to change notification settings - Fork 8
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
ci: bump the actions group with 10 updates #1172
Conversation
Bumps the actions group with 10 updates: | Package | From | To | | --- | --- | --- | | [actions/setup-python](https://github.com/actions/setup-python) | `5.1.0` | `5.1.1` | | [hynek/build-and-inspect-python-package](https://github.com/hynek/build-and-inspect-python-package) | `2.6.0` | `2.8.0` | | [actions/download-artifact](https://github.com/actions/download-artifact) | `4.1.7` | `4.1.8` | | [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance) | `1.3.2` | `1.4.0` | | [softprops/action-gh-release](https://github.com/softprops/action-gh-release) | `2.0.6` | `2.0.8` | | [ossf/scorecard-action](https://github.com/ossf/scorecard-action) | `2.3.3` | `2.4.0` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4.3.3` | `4.3.4` | | [github/codeql-action](https://github.com/github/codeql-action) | `3.25.11` | `3.25.15` | | [deadsnakes/action](https://github.com/deadsnakes/action) | `4ed7bc1eceb871d35db155a6e165205bdede9cf8` | `16723567940b8b0fcc842ae60a882337f9645873` | | [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `3.3.0` | `3.6.1` | Updates `actions/setup-python` from 5.1.0 to 5.1.1 - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](actions/setup-python@82c7e63...39cd149) Updates `hynek/build-and-inspect-python-package` from 2.6.0 to 2.8.0 - [Release notes](https://github.com/hynek/build-and-inspect-python-package/releases) - [Changelog](https://github.com/hynek/build-and-inspect-python-package/blob/main/CHANGELOG.md) - [Commits](hynek/build-and-inspect-python-package@b4fc3f6...2dbbf2b) Updates `actions/download-artifact` from 4.1.7 to 4.1.8 - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](actions/download-artifact@65a9edc...fa0a91b) Updates `actions/attest-build-provenance` from 1.3.2 to 1.4.0 - [Release notes](https://github.com/actions/attest-build-provenance/releases) - [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md) - [Commits](actions/attest-build-provenance@bdd5137...210c191) Updates `softprops/action-gh-release` from 2.0.6 to 2.0.8 - [Release notes](https://github.com/softprops/action-gh-release/releases) - [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md) - [Commits](softprops/action-gh-release@a74c6b7...c062e08) Updates `ossf/scorecard-action` from 2.3.3 to 2.4.0 - [Release notes](https://github.com/ossf/scorecard-action/releases) - [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md) - [Commits](ossf/scorecard-action@dc50aa9...62b2cac) Updates `actions/upload-artifact` from 4.3.3 to 4.3.4 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@6546280...0b2256b) Updates `github/codeql-action` from 3.25.11 to 3.25.15 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@b611370...afb54ba) Updates `deadsnakes/action` from 4ed7bc1eceb871d35db155a6e165205bdede9cf8 to 16723567940b8b0fcc842ae60a882337f9645873 - [Release notes](https://github.com/deadsnakes/action/releases) - [Commits](deadsnakes/action@4ed7bc1...1672356) Updates `docker/setup-buildx-action` from 3.3.0 to 3.6.1 - [Release notes](https://github.com/docker/setup-buildx-action/releases) - [Commits](docker/setup-buildx-action@d70bba7...988b5a0) --- updated-dependencies: - dependency-name: actions/setup-python dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: hynek/build-and-inspect-python-package dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: actions/download-artifact dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: actions/attest-build-provenance dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: softprops/action-gh-release dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: ossf/scorecard-action dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: actions/upload-artifact dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: deadsnakes/action dependency-type: direct:production dependency-group: actions - dependency-name: docker/setup-buildx-action dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions ... Signed-off-by: dependabot[bot] <support@github.com>
|
Codecov ReportAll modified and coverable lines are covered by tests ✅
Additional details and impacted files@@ Coverage Diff @@
## main #1172 +/- ##
=========================================
Coverage 100.00% 100.00%
=========================================
Files 10 10
Lines 482 482
Branches 25 25
=========================================
Hits 482 482
Flags with carried forward coverage won't be shown. Click here to find out more. ☔ View full report in Codecov by Sentry. |
@dependabot merge |
Bumps the actions group with 10 updates:
5.1.0
5.1.1
2.6.0
2.8.0
4.1.7
4.1.8
1.3.2
1.4.0
2.0.6
2.0.8
2.3.3
2.4.0
4.3.3
4.3.4
3.25.11
3.25.15
4ed7bc1eceb871d35db155a6e165205bdede9cf8
16723567940b8b0fcc842ae60a882337f9645873
3.3.0
3.6.1
Updates
actions/setup-python
from 5.1.0 to 5.1.1Release notes
Sourced from actions/setup-python's releases.
Commits
39cd149
Documentation update for cache (#873)a0d74c0
fix(ci): update all failing workflows (#863)4eb7dbc
Bump braces from 3.0.2 to 3.0.3 (#893)Updates
hynek/build-and-inspect-python-package
from 2.6.0 to 2.8.0Release notes
Sourced from hynek/build-and-inspect-python-package's releases.
Changelog
Sourced from hynek/build-and-inspect-python-package's changelog.
... (truncated)
Commits
2dbbf2b
v2.8.012cdfb4
Automated dependency upgrades (#136)0b18de8
Prune uv's CI cache (#135)e2e1d19
Start new cyclefdf1c7d77
Fix CI7880597
v2.7.02937224
Automated dependency upgrades (#134)a2f7fd4
Automated dependency upgrades (#132)5afaeb9
Add provenance header to summary for nicer readability (#131)8f18e33
Automated dependency upgrades (#130)Updates
actions/download-artifact
from 4.1.7 to 4.1.8Release notes
Sourced from actions/download-artifact's releases.
Commits
fa0a91b
Merge pull request #341 from actions/robherley/bump-pkgsb54d088
Update@actions/artifact
version, bump dependenciesUpdates
actions/attest-build-provenance
from 1.3.2 to 1.4.0Release notes
Sourced from actions/attest-build-provenance's releases.
Commits
210c191
bump actions/attest from 1.3.3 to 1.4.0 (#183)1cb5f76
bump predicate action from 1.1.0 to 1.1.1 (#182)9ff3713
Bump@actions/attest
from 1.3.0 to 1.3.1 (#181)3630726
Bump@types/node
from 20.14.11 to 22.0.0 (#180)ba2fe9b
Bump the npm-development group with 3 updates (#179)cae1693
Bump the npm-development group with 5 updates (#161)456d685
Bump the npm-development group with 4 updates (#154)5e9cb68
bump actions/attest from 1.3.2 to 1.3.3 (#152)38faaec
Bump the npm-development group with 5 updates (#149)833c4a9
Bump the npm-development group across 1 directory with 5 updates (#141)Updates
softprops/action-gh-release
from 2.0.6 to 2.0.8Release notes
Sourced from softprops/action-gh-release's releases.
Changelog
Sourced from softprops/action-gh-release's changelog.
... (truncated)
Commits
c062e08
release 2.0.8380635c
chore(deps): bump@actions/github
from 5.1.1 to 6.0.0 (#470)20adb42
refactor: write jest config in ts (#485)f808f15
chore(deps): bump glob from 10.4.2 to 11.0.0 (#477)6145241
chore(deps): bump@octokit/plugin-throttling
from 9.3.0 to 9.3.1 (#484)4ac522d
chore(deps): bump@types/node
from 20.14.9 to 20.14.11 (#483)25849b1
chore(deps): bump prettier from 2.8.0 to 3.3.3 (#480)6206056
chore: update dependabot commit msg39aadf1
chore: runfrizbee actions .github/workflows/
6f3ab65
chore: update dist fileUpdates
ossf/scorecard-action
from 2.3.3 to 2.4.0Release notes
Sourced from ossf/scorecard-action's releases.
Commits
62b2cac
bump docker tag to v2.4.0 for release (#1414)c09630c
lower license score alert threshold to 9 (#1411)cf8594c
🌱 Bump github.com/sigstore/cosign/v2 from 2.2.4 to 2.3.0 (#1413)de5fcb9
🌱 Bump the github-actions group with 2 updates (#1412)a46b90b
bump scorecard to v5.0.0 release (#1410)9fc518d
🌱 Bump golang in the docker-images group (#1407)a8eaa1b
🌱 Bump the github-actions group with 2 updates (#1408)873d5fd
🌱 Bump the github-actions group across 1 directory with 2 updates (#...54cc1fe
🌱 Bump the docker-images group with 2 updates (#1401)82bcb91
🌱 Bump golang.org/x/net from 0.26.0 to 0.27.0 (#1400)Updates
actions/upload-artifact
from 4.3.3 to 4.3.4Release notes
Sourced from actions/upload-artifact's releases.
Commits
0b2256b
Merge pull request #584 from actions/robherley/bump-pkgs488dcef
licensed cache04c51f5
ncc32a9e27
bump@actions/artifact
and npm audit552bf37
new version79616d2
Merge pull request #565 from actions/eggyhead/use-artifact-v2.1.6Updates
github/codeql-action
from 3.25.11 to 3.25.15Changelog
Sourced from github/codeql-action's changelog.
... (truncated)
Commits
afb54ba
Merge pull request #2391 from github/update-v3.25.15-4b1d7da1057a4b22
Update changelog for v3.25.154b1d7da
Merge pull request #2385 from github/update-bundle/codeql-bundle-v2.18.197e8f69
Merge branch 'main' into update-bundle/codeql-bundle-v2.18.1f8e94f9
Merge pull request #2389 from github/mergeback/v3.25.14-to-main-5cf07d8b9e375a8
Update checked-in dependencies02d73d0
Update changelog and version after v3.25.145cf07d8
Merge pull request #2388 from github/update-v3.25.14-1b214db07ecab108
Update changelog for v3.25.141b214db
Merge pull request #2387 from github/aibaars/remove-set-secretUpdates
deadsnakes/action
from 4ed7bc1eceb871d35db155a6e165205bdede9cf8 to 16723567940b8b0fcc842ae60a882337f9645873Commits
1672356
Merge pull request #141 from deadsnakes/pre-commit-ci-update-config1a0518c
[pre-commit.ci] auto fixes from pre-commit.com hooks0431992
[pre-commit.ci] pre-commit autoupdate650eb28
Merge pull request #140 from deadsnakes/pre-commit-ci-update-configadb1663
[pre-commit.ci] pre-commit autoupdatee704e59
Merge pull request #139 from deadsnakes/pre-commit-ci-update-config4d1f03b
[pre-commit.ci] pre-commit autoupdateUpdates
docker/setup-buildx-action
from 3.3.0 to 3.6.1Release notes
Sourced from docker/setup-buildx-action's releases.
Commits
988b5a0
Merge pull request #347 from crazy-max/skip-malformed-context2c21562
chore: update generated content3382292
check for malformed docker context3d68780
Merge pull request #341 from crazy-max/docker-context-tlsd069e98
chore: update generated content8b850f8
create docker context if default one has TLS data loadedaa33708
Merge pull request #345 from docker/dependabot/npm_and_yarn/docker/actions-to...2d99e34
chore: update generated content4dab436
build(deps): bump@docker/actions-toolkit
from 0.34.0 to 0.35.049a04d6
Merge pull request #344 from docker/dependabot/npm_and_yarn/docker/actions-to...Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase
will rebase this PR@dependabot recreate
will recreate this PR, overwriting any edits that have been made to it@dependabot merge
will merge this PR after your CI passes on it@dependabot squash and merge
will squash and merge this PR after your CI passes on it@dependabot cancel merge
will cancel a previously requested merge and block automerging@dependabot reopen
will reopen this PR if it is closed@dependabot close
will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditions
will show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major version
will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor version
will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>
will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>
will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>
will remove the ignore condition of the specified dependency and ignore conditions📚 Documentation preview 📚: https://citric--1172.org.readthedocs.build/en/1172/