-
Notifications
You must be signed in to change notification settings - Fork 608
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
build(deps): bump the ci group across 1 directory with 11 updates #5069
Closed
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Bumps the ci group with 11 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `4.2.0` | `4.2.2` | | [actions/setup-go](https://github.com/actions/setup-go) | `5.0.2` | `5.1.0` | | [fluxcd/pkg](https://github.com/fluxcd/pkg) | `30c101fc7c9fac4d84937ff4890a3da46a9db2dd` | `2cbdbf505138bff429dcd8a170ae9d49aa591ac9` | | [google-github-actions/auth](https://github.com/google-github-actions/auth) | `2.1.5` | `2.1.7` | | [google-github-actions/setup-gcloud](https://github.com/google-github-actions/setup-gcloud) | `2.1.1` | `2.1.2` | | [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `3.6.1` | `3.7.1` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4.4.0` | `4.4.3` | | [github/codeql-action](https://github.com/github/codeql-action) | `3.26.9` | `3.27.1` | | [anchore/sbom-action](https://github.com/anchore/sbom-action) | `0.17.2` | `0.17.7` | | [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) | `3.6.0` | `3.7.0` | | [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) | `6.0.0` | `6.1.0` | Updates `actions/checkout` from 4.2.0 to 4.2.2 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@d632683...11bd719) Updates `actions/setup-go` from 5.0.2 to 5.1.0 - [Release notes](https://github.com/actions/setup-go/releases) - [Commits](actions/setup-go@0a12ed9...41dfa10) Updates `fluxcd/pkg` from 30c101fc7c9fac4d84937ff4890a3da46a9db2dd to 2cbdbf505138bff429dcd8a170ae9d49aa591ac9 - [Commits](fluxcd/pkg@30c101f...2cbdbf5) Updates `google-github-actions/auth` from 2.1.5 to 2.1.7 - [Release notes](https://github.com/google-github-actions/auth/releases) - [Changelog](https://github.com/google-github-actions/auth/blob/main/CHANGELOG.md) - [Commits](google-github-actions/auth@62cf5bd...6fc4af4) Updates `google-github-actions/setup-gcloud` from 2.1.1 to 2.1.2 - [Release notes](https://github.com/google-github-actions/setup-gcloud/releases) - [Changelog](https://github.com/google-github-actions/setup-gcloud/blob/main/CHANGELOG.md) - [Commits](google-github-actions/setup-gcloud@f099058...6189d56) Updates `docker/setup-buildx-action` from 3.6.1 to 3.7.1 - [Release notes](https://github.com/docker/setup-buildx-action/releases) - [Commits](docker/setup-buildx-action@988b5a0...c47758b) Updates `actions/upload-artifact` from 4.4.0 to 4.4.3 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@5076954...b4b15b8) Updates `github/codeql-action` from 3.26.9 to 3.27.1 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@461ef6c...4f3212b) Updates `anchore/sbom-action` from 0.17.2 to 0.17.7 - [Release notes](https://github.com/anchore/sbom-action/releases) - [Changelog](https://github.com/anchore/sbom-action/blob/main/RELEASE.md) - [Commits](anchore/sbom-action@61119d4...fc46e51) Updates `sigstore/cosign-installer` from 3.6.0 to 3.7.0 - [Release notes](https://github.com/sigstore/cosign-installer/releases) - [Commits](sigstore/cosign-installer@4959ce0...dc72c7d) Updates `goreleaser/goreleaser-action` from 6.0.0 to 6.1.0 - [Release notes](https://github.com/goreleaser/goreleaser-action/releases) - [Commits](goreleaser/goreleaser-action@286f3b1...9ed2f89) --- updated-dependencies: - dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-patch dependency-group: ci - dependency-name: actions/setup-go dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ci - dependency-name: fluxcd/pkg dependency-type: direct:production dependency-group: ci - dependency-name: google-github-actions/auth dependency-type: direct:production update-type: version-update:semver-patch dependency-group: ci - dependency-name: google-github-actions/setup-gcloud dependency-type: direct:production update-type: version-update:semver-patch dependency-group: ci - dependency-name: docker/setup-buildx-action dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ci - dependency-name: actions/upload-artifact dependency-type: direct:production update-type: version-update:semver-patch dependency-group: ci - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ci - dependency-name: anchore/sbom-action dependency-type: direct:production update-type: version-update:semver-patch dependency-group: ci - dependency-name: sigstore/cosign-installer dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ci - dependency-name: goreleaser/goreleaser-action dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ci ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
area/ci
CI related issues and pull requests
dependencies
Pull requests that update a dependency
labels
Nov 11, 2024
Superseded by #5077. |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Labels
0 participants
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the ci group with 11 updates in the / directory:
4.2.0
4.2.2
5.0.2
5.1.0
30c101fc7c9fac4d84937ff4890a3da46a9db2dd
2cbdbf505138bff429dcd8a170ae9d49aa591ac9
2.1.5
2.1.7
2.1.1
2.1.2
3.6.1
3.7.1
4.4.0
4.4.3
3.26.9
3.27.1
0.17.2
0.17.7
3.6.0
3.7.0
6.0.0
6.1.0
Updates
actions/checkout
from 4.2.0 to 4.2.2Release notes
Sourced from actions/checkout's releases.
Changelog
Sourced from actions/checkout's changelog.
... (truncated)
Commits
11bd719
Prepare 4.2.2 Release (#1953)e3d2460
Expand unit test coverage (#1946)163217d
url-helper.ts
now leverages well-known environment variables. (#1941)eef6144
Prepare 4.2.1 release (#1925)6b42224
Add workflow file for publishing releases to immutable action package (#1919)de5a000
Check out other refs/* by commit if provided, fall back to ref (#1924)Updates
actions/setup-go
from 5.0.2 to 5.1.0Release notes
Sourced from actions/setup-go's releases.
Commits
41dfa10
Enhance workflows and Upgrade micromatch Dependency (#510)9419772
ReviseisGhes
logic (#511)d60b41a
Merge pull request #502 from actions/Jcambass-patch-1e09f57f
Upgrade IA Publishdf1a117
Merge pull request #500 from actions/Jcambass-patch-149582f6
Add workflow file for publishing releases to immutable action packageb26d402
fix: add arch to cache key (#493)Updates
fluxcd/pkg
from 30c101fc7c9fac4d84937ff4890a3da46a9db2dd to 2cbdbf505138bff429dcd8a170ae9d49aa591ac9Commits
2cbdbf5
Merge pull request #821 from fluxcd/int-set-env-varseae8e64
workflows/integration-*: set git and oci env vars402f6cd
Merge pull request #820 from fluxcd/dependabot/github_actions/ci-0ba8eb66b5a40a3ec
build(deps): bump the ci group with 2 updates929ca01
Merge pull request #819 from fluxcd/dependabot/github_actions/ci-29a142de161482ed6
build(deps): bump the ci group across 1 directory with 5 updatesac1007b
Merge pull request #814 from fluxcd/dependabot/github_actions/ci-94e703d2b04924be3
build(deps): bump the ci group across 1 directory with 7 updatesUpdates
google-github-actions/auth
from 2.1.5 to 2.1.7Release notes
Sourced from google-github-actions/auth's releases.
Commits
6fc4af4
Release: v2.1.7 (#453)212f83a
fix: update relase workflows (#452)8254fb7
Release: v2.1.6 (#449)d1b27fe
Add missing log line (#448)c8788cc
Recommendgcloud storage
overgsutil
(#438)Updates
google-github-actions/setup-gcloud
from 2.1.1 to 2.1.2Release notes
Sourced from google-github-actions/setup-gcloud's releases.
Commits
6189d56
Release: v2.1.2 (#699)413dc08
fix: update release workflows (#698)Updates
docker/setup-buildx-action
from 3.6.1 to 3.7.1Release notes
Sourced from docker/setup-buildx-action's releases.
Commits
c47758b
Merge pull request #369 from crazy-max/revert-crypto8fea382
chore: update generated content2874e98
switch back to uuid package8026d2b
Merge pull request #362 from docker/dependabot/npm_and_yarn/docker/actions-to...e51aab5
chore: update generated contentfd7390e
build(deps): bump@docker/actions-toolkit
from 0.35.0 to 0.39.0910a304
Merge pull request #366 from crazy-max/remove-uuid3623ee4
chore: update generated contente0e5ecf
remove uuid package and switch to crypto5334dd0
Merge pull request #363 from crazy-max/set-buildkitd-flags-optinUpdates
actions/upload-artifact
from 4.4.0 to 4.4.3Release notes
Sourced from actions/upload-artifact's releases.
Commits
b4b15b8
Merge pull request #632 from actions/joshmgross/undo-dependency-changes92b01eb
Undo indirect dependency updates from #6278448086
Merge pull request #627 from actions/robherley/v4.4.2b1d4642
add explicit relative and absolute symlinks to workflowd50e660
bump versionaabe6f8
build with@actions/artifact
v2.1.11604373d
Merge pull request #625 from actions/robherley/artifact-2.1.100150148
paste right core versiona009b25
update licenses9f6f6f4
update@actions/core
and@actions/artifact
to latest versionsUpdates
github/codeql-action
from 3.26.9 to 3.27.1Release notes
Sourced from github/codeql-action's releases.
... (truncated)
Changelog
Sourced from github/codeql-action's changelog.
... (truncated)
Commits
4f3212b
Merge pull request #2585 from github/update-v3.27.1-3ef4c084563b548d
Update changelog for v3.27.13ef4c08
Merge pull request #2576 from github/update-bundle/codeql-bundle-v2.19.34e033f0
Merge branch 'main' into update-bundle/codeql-bundle-v2.19.35ac2ddd
Merge pull request #2580 from jsoref/minor-cleanup3b7b85f
Conditionally clear runner cache688ea53
Fix publish-immutable-action version1e6d67b
Give expected-queries-runs permissionsd5e7384
Strip trailing whitespace generated by ruamel-yaml756aa64
spelling: macosUpdates
anchore/sbom-action
from 0.17.2 to 0.17.7Release notes
Sourced from anchore/sbom-action's releases.
Commits
fc46e51
chore(deps): update Syft to v1.16.0 (#506)251a468
chore(deps): update Syft to v1.15.0 (#505)6bb446c
chore(deps): bump actions/checkout from 4.2.1 to 4.2.2 (#504)1ca97d9
chore(deps): update Syft to v1.14.2 (#503)8d0a650
chore(deps): update Syft to v1.14.1 (#502)f5e124a
chore(deps): bump peter-evans/create-pull-request from 6.1.0 to 7.0.5 (#493)eff08d0
chore: configure changelog-ignore label (#499)18f9bde
chore: remove snapshot tests; fix deprecation errors for outdated packages (#...2e87236
add release docs (#500)4a914bc
chore(deps): bump actions/checkout from 4.2.0 to 4.2.1 (#497)Updates
sigstore/cosign-installer
from 3.6.0 to 3.7.0Release notes
Sourced from sigstore/cosign-installer's releases.
Commits
dc72c7d
bump for latest cosign v2.4.1 release (#173)08bb361
Bump actions/checkout from 4.1.7 to 4.2.0 (#172)Updates
goreleaser/goreleaser-action
from 6.0.0 to 6.1.0Release notes
Sourced from goreleaser/goreleaser-action's releases.
Commits
9ed2f89
chore: update generated content (#480)cf63508
docs: bump upload-artifact version (#479)f7623f3
chore(deps): bump@actions/core
from 1.10.1 to 1.11.1 (#478)006a7a4
chore: updatee4066e6
chore(deps): bump micromatch from 4.0.5 to 4.0.8 (#475)22f558e
chore(deps): bump@actions/http-client
from 2.2.2 to 2.2.3 (#474)6e33108
chore(deps): bump@actions/http-client
from 2.2.1 to 2.2.2 (#473)7ca6450
chore(deps): bump semver from 7.6.2 to 7.6.3 (#470)d33b6f6
chore(deps): bump docker/bake-action from 4 to 5 (#468)85d0b9d
chore(deps): bump braces from 3.0.2 to 3.0.3 (#467)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase
will rebase this PR@dependabot recreate
will recreate this PR, overwriting any edits that have been made to it@dependabot merge
will merge this PR after your CI passes on it@dependabot squash and merge
will squash and merge this PR after your CI passes on it@dependabot cancel merge
will cancel a previously requested merge and block automerging@dependabot reopen
will reopen this PR if it is closed@dependabot close
will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditions
will show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major version
will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor version
will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>
will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>
will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>
will remove the ignore condition of the specified dependency and ignore conditions