Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Bump the actions group across 1 directory with 15 updates #875

Closed
wants to merge 1 commit into from
Closed

Bump the actions group across 1 directory with 15 updates #875

wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link

@dependabot dependabot bot commented on behalf of github Jul 10, 2024 •
edited
Loading

Bumps the actions group with 15 updates in the / directory:

Package From To
actions/checkout 4.1.6 4.1.7
docker/setup-buildx-action 3.3.0 3.4.0
docker/setup-qemu-action 3.0.0 3.1.0
docker/build-push-action 5.3.0 6.3.0
aquasecurity/trivy-action 0.21.0 0.24.0
github/codeql-action 3.25.7 3.25.11
actions/upload-artifact 4.3.3 4.3.4
nginxinc/aws-marketplace-publish 1.0.3 1.0.4
codecov/codecov-action 4.4.1 4.5.0
anchore/sbom-action 0.16.0 0.16.1
goreleaser/goreleaser-action 5.1.0 6.0.0
dependabot/fetch-metadata 2.1.0 2.2.0
actions/dependency-review-action 4.3.2 4.3.3
reviewdog/action-actionlint 1.47.0 1.53.0
peter-evans/create-pull-request 6.0.5 6.1.0

Updates actions/checkout from 4.1.6 to 4.1.7

Release notes

Sourced from actions/checkout's releases.

v4.1.7

What's Changed

New Contributors

Full Changelog: actions/checkout@v4.1.6...v4.1.7

Changelog

Sourced from actions/checkout's changelog.

Changelog

v4.1.7

v4.1.6

v4.1.5

v4.1.4

v4.1.3

v4.1.2

v4.1.1

v4.1.0

v4.0.0

v3.6.0

v3.5.3

... (truncated)

Commits

Updates docker/setup-buildx-action from 3.3.0 to 3.4.0

Release notes

Sourced from docker/setup-buildx-action's releases.

v3.4.0

Full Changelog: docker/setup-buildx-action@v3.3.0...v3.4.0

Commits
  • 4fd8129 Merge pull request #312 from docker/dependabot/npm_and_yarn/undici-5.28.4
  • 3386dc4 chore: update generated content
  • d191aef build(deps): bump undici from 5.28.3 to 5.28.4
  • f686054 Merge pull request #338 from docker/dependabot/npm_and_yarn/docker/actions-to...
  • 7854785 chore: update generated content
  • 830928c fix builder type path
  • 26d2aec build(deps): bump @​docker/actions-toolkit from 0.23.0 to 0.31.0
  • ab17e3e Merge pull request #339 from crazy-max/missing-types-jsyaml
  • d79cb80 missing types for js-yaml
  • 13cf788 Merge pull request #326 from docker/dependabot/npm_and_yarn/uuid-10.0.0
  • Additional commits viewable in compare view

Updates docker/setup-qemu-action from 3.0.0 to 3.1.0

Release notes

Sourced from docker/setup-qemu-action's releases.

v3.1.0

Full Changelog: docker/setup-qemu-action@v3.0.0...v3.1.0

Commits
  • 5927c83 Merge pull request #149 from docker/dependabot/npm_and_yarn/docker/actions-to...
  • 32ea29b chore: update generated content
  • 92ac892 build(deps): bump @​docker/actions-toolkit from 0.23.0 to 0.31.0
  • dcf3f67 Merge pull request #151 from crazy-max/default-image
  • b34393b Merge pull request #141 from docker/dependabot/github_actions/docker/bake-act...
  • ca1bf68 Merge pull request #142 from docker/dependabot/npm_and_yarn/braces-3.0.3
  • 599f288 chore: update generated content
  • af38981 set docker.io domain for default binfmt image
  • 9d4d56c build(deps): bump braces from 3.0.2 to 3.0.3
  • a05dd92 build(deps): bump docker/bake-action from 4 to 5
  • Additional commits viewable in compare view

Updates docker/build-push-action from 5.3.0 to 6.3.0

Release notes

Sourced from docker/build-push-action's releases.

v6.3.0

Full Changelog: docker/build-push-action@v6.2.0...v6.3.0

v6.2.0

Full Changelog: docker/build-push-action@v6.1.0...v6.2.0

v6.1.0

Full Changelog: docker/build-push-action@v6.0.2...v6.1.0

v6.0.2

Full Changelog: docker/build-push-action@v6.0.1...v6.0.2

v6.0.1

Full Changelog: docker/build-push-action@v6.0.0...v6.0.1

v6.0.0

[!NOTE] This major release adds support for generating Build summary and exporting build record for your build. You can disable this feature by setting DOCKER_BUILD_NO_SUMMARY: true environment variable in your workflow.

Full Changelog: docker/build-push-action@v5.4.0...v6.0.0

v5.4.0

Full Changelog: docker/build-push-action@v5.3.0...v5.4.0

Commits
  • 1a16264 Merge pull request #1172 from crazy-max/build-export-disable
  • 9eea548 chore: update generated content
  • 11c2faa rename DOCKER_BUILD_EXPORT_RETENTION_DAYS to DOCKER_BUILD_RECORD_RETENTION_DAYS
  • de2365a opt to disable build record upload
  • bca5082 Merge pull request #1173 from crazy-max/build-summary-env-change
  • e7aab40 chore: update generated content
  • 63eb759 switch DOCKER_BUILD_SUMMARY_DISABLE to DOCKER_BUILD_SUMMARY
  • 53ec486 Merge pull request #1171 from docker/dependabot/npm_and_yarn/docker/actions-t...
  • fe9d9f1 chore: update generated content
  • ad37ba1 chore(deps): Bump @​docker/actions-toolkit from 0.30.0 to 0.31.0
  • Additional commits viewable in compare view

Updates aquasecurity/trivy-action from 0.21.0 to 0.24.0

Release notes

Sourced from aquasecurity/trivy-action's releases.

v0.24.0

What's Changed

Full Changelog: aquasecurity/trivy-action@0.23.0...0.24.0

v0.23.0

What's Changed

Full Changelog: aquasecurity/trivy-action@0.22.0...0.23.0

v0.22.0

What's Changed

New Contributors

Full Changelog: aquasecurity/trivy-action@0.21.0...0.22.0

Commits

Updates github/codeql-action from 3.25.7 to 3.25.11

Changelog

Sourced from github/codeql-action's changelog.

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

[UNRELEASED]

  • Improve the reliability and performance of analyzing code when analyzing a compiled language with the autobuild build mode on GitHub Enterprise Server. This feature is already available to GitHub.com users. #2353

3.25.11 - 28 Jun 2024

  • Avoid failing the workflow run if there is an error while uploading debug artifacts. #2349
  • Update default CodeQL bundle version to 2.17.6. #2352

3.25.10 - 13 Jun 2024

  • Update default CodeQL bundle version to 2.17.5. #2327

3.25.9 - 12 Jun 2024

  • Avoid failing database creation if the database folder already exists and contains some unexpected files. Requires CodeQL 2.18.0 or higher. #2330
  • The init Action will attempt to clean up the database cluster directory before creating a new database and at the end of the job. This will help to avoid issues where the database cluster directory is left in an inconsistent state. #2332

3.25.8 - 04 Jun 2024

  • Update default CodeQL bundle version to 2.17.4. #2321

3.25.7 - 31 May 2024

  • We are rolling out a feature in May/June 2024 that will reduce the Actions cache usage of the Action by keeping only the newest TRAP cache for each language. #2306

3.25.6 - 20 May 2024

  • Update default CodeQL bundle version to 2.17.3. #2295

3.25.5 - 13 May 2024

  • Add a compatibility matrix of supported CodeQL Action, CodeQL CLI, and GitHub Enterprise Server versions to the https://github.com/github/codeql-action/blob/main/README.md. #2273
  • Avoid printing out a warning for a missing on.push trigger when the CodeQL Action is triggered via a workflow_call event. #2274
  • The tools: latest input to the init Action has been renamed to tools: linked. This option specifies that the Action should use the tools shipped at the same time as the Action. The old name will continue to work for backwards compatibility, but we recommend that new workflows use the new name. #2281

3.25.4 - 08 May 2024

  • Update default CodeQL bundle version to 2.17.2. #2270

3.25.3 - 25 Apr 2024

  • Update default CodeQL bundle version to 2.17.1. #2247
  • Workflows running on macos-latest using CodeQL CLI versions before v2.15.1 will need to either upgrade their CLI version to v2.15.1 or newer, or change the platform to an Intel MacOS runner, such as macos-12. ARM machines with SIP disabled, including the newest macos-latest image, are unsupported for CLI versions before 2.15.1. #2261

... (truncated)

Commits
  • b611370 Merge pull request #2357 from github/update-v3.25.11-de945755c
  • 3e6431f Update changelog for v3.25.11
  • de94575 Merge pull request #2352 from github/update-bundle/codeql-bundle-v2.17.6
  • a32d305 Add changelog note
  • 9ccc995 Update default bundle to codeql-bundle-v2.17.6
  • 9b7c22c Merge pull request #2351 from github/dependabot/npm_and_yarn/npm-6791eaa26c
  • 9cf3243 Rebuild
  • 1895b29 Update checked-in dependencies
  • 9dcfde9 Bump the npm group with 2 updates
  • 8723b5b Merge pull request #2350 from github/angelapwen/add-exclude-pr-check-param
  • Additional commits viewable in compare view

Updates actions/upload-artifact from 4.3.3 to 4.3.4

Release notes

Sourced from actions/upload-artifact's releases.

v4.3.4

What's Changed

Full Changelog: actions/upload-artifact@v4.3.3...v4.3.4

Commits

Updates nginxinc/aws-marketplace-publish from 1.0.3 to 1.0.4

Release notes

Sourced from nginxinc/aws-marketplace-publish's releases.

v1.0.4

What's Changed

⬆️ Dependencies

Full Changelog: nginxinc/aws-marketplace-publish@v1.0.3...v1.0.4

Commits
  • 9f17851 Update dependencies (#281)
  • 609f9a5 Bump the npm-development group with 2 updates (#280)
  • 270fc64 Bump eslint-plugin-github from 4.10.2 to 5.0.1 (#279)
  • dd9a58c Bump @​aws-sdk/client-marketplace-catalog from 3.565.0 to 3.600.0 (#278)
  • 5c7e310 Bump the npm-development group across 1 directory with 6 updates (#277)
  • d83ac49 Bump github/codeql-action from 3.25.3 to 3.25.10 (#274)
  • 51ee198 Bump actions/checkout from 4.1.6 to 4.1.7 (#275)
  • c68886a Bump lucacome/draft-release from 1.0.4 to 1.1.0 (#271)
  • 55d8aaf Bump @​typescript-eslint/parser from 6.21.0 to 7.10.0 (#269)
  • 101fe76 Bump @​typescript-eslint/eslint-plugin from 6.21.0 to 7.0.0 (#265)
  • Additional commits viewable in compare view

Updates codecov/codecov-action from 4.4.1 to 4.5.0

Release notes

Sourced from codecov/codecov-action's releases.

v4.5.0

What's Changed

New Contributors

Full Changelog: codecov/codecov-action@v4.4.1...v4.5.0

Commits
  • e28ff12 chore(release): bump to 4.5.0 (#1477)
  • 7594baa Use an existing token even if the PR is from a fork (#1471)
  • 81c0a51 feat: add support for tokenless v3 (#1410)
  • f5e203f build(deps-dev): bump @​typescript-eslint/eslint-plugin from 7.12.0 to 7.13.0 ...
  • 7c48363 build(deps-dev): bump braces from 3.0.2 to 3.0.3 (#1475)
  • 69e5d09 build(deps-dev): bump @​typescript-eslint/parser from 7.12.0 to 7.13.0 (#1474)
  • feaf700 fix: handle trailing commas (#1470)
  • 7b6a727 build(deps): bump github/codeql-action from 3.25.7 to 3.25.8 (#1472)
  • ccf7a1f build(deps-dev): bump @​typescript-eslint/eslint-plugin from 7.11.0 to 7.12.0 ...
  • f03f015 build(deps-dev): bump @​typescript-eslint/parser from 7.11.0 to 7.12.0 (#1467)
  • Additional commits viewable in compare view

Updates anchore/sbom-action from 0.16.0 to 0.16.1

Release notes

Sourced from anchore/sbom-action's releases.

v0.16.1

Changes in v0.16.1

Commits
  • 95b086a fix: workaround windows install script (#477)
  • 72370e1 fix: allow users to properly use the file input over the default path value (...
  • e28bab5 chore(deps): update Syft to v1.5.0 (#470)
  • 2283abe docs: notes for matrix and required permissions (#469)
  • 07e5b3a chore(deps): bump actions/checkout from 4.1.5 to 4.1.6 (#466)
  • See full diff in compare view

Updates goreleaser/goreleaser-action from 5.1.0 to 6.0.0

Release notes

Sourced from goreleaser/goreleaser-action's releases.

v6.0.0

[!WARNING] This is a breaking change!

Follow the instructions here to upgrade!

What's Changed

Full Changelog: goreleaser/goreleaser-action@v5...v6.0.0

Commits

Updates dependabot/fetch-metadata from 2.1.0 to 2.2.0

Release notes

Sourced from dependabot/fetch-metadata's releases.

v2.2.0

What's Changed

@dependabot
Bump the actions group across 1 directory with 15 updates
7e5f2a1 
Bumps the actions group with 15 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `4.1.6` | `4.1.7` |
| [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `3.3.0` | `3.4.0` |
| [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) | `3.0.0` | `3.1.0` |
| [docker/build-push-action](https://github.com/docker/build-push-action) | `5.3.0` | `6.3.0` |
| [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) | `0.21.0` | `0.24.0` |
| [github/codeql-action](https://github.com/github/codeql-action) | `3.25.7` | `3.25.11` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4.3.3` | `4.3.4` |
| [nginxinc/aws-marketplace-publish](https://github.com/nginxinc/aws-marketplace-publish) | `1.0.3` | `1.0.4` |
| [codecov/codecov-action](https://github.com/codecov/codecov-action) | `4.4.1` | `4.5.0` |
| [anchore/sbom-action](https://github.com/anchore/sbom-action) | `0.16.0` | `0.16.1` |
| [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) | `5.1.0` | `6.0.0` |
| [dependabot/fetch-metadata](https://github.com/dependabot/fetch-metadata) | `2.1.0` | `2.2.0` |
| [actions/dependency-review-action](https://github.com/actions/dependency-review-action) | `4.3.2` | `4.3.3` |
| [reviewdog/action-actionlint](https://github.com/reviewdog/action-actionlint) | `1.47.0` | `1.53.0` |
| [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) | `6.0.5` | `6.1.0` |



Updates `actions/checkout` from 4.1.6 to 4.1.7
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@a5ac7e5...692973e)

Updates `docker/setup-buildx-action` from 3.3.0 to 3.4.0
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](docker/setup-buildx-action@d70bba7...4fd8129)

Updates `docker/setup-qemu-action` from 3.0.0 to 3.1.0
- [Release notes](https://github.com/docker/setup-qemu-action/releases)
- [Commits](docker/setup-qemu-action@6882732...5927c83)

Updates `docker/build-push-action` from 5.3.0 to 6.3.0
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](docker/build-push-action@2cdde99...1a16264)

Updates `aquasecurity/trivy-action` from 0.21.0 to 0.24.0
- [Release notes](https://github.com/aquasecurity/trivy-action/releases)
- [Commits](aquasecurity/trivy-action@fd25fed...6e7b7d1)

Updates `github/codeql-action` from 3.25.7 to 3.25.11
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@f079b84...b611370)

Updates `actions/upload-artifact` from 4.3.3 to 4.3.4
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@6546280...0b2256b)

Updates `nginxinc/aws-marketplace-publish` from 1.0.3 to 1.0.4
- [Release notes](https://github.com/nginxinc/aws-marketplace-publish/releases)
- [Commits](nginxinc/aws-marketplace-publish@be512a7...9f17851)

Updates `codecov/codecov-action` from 4.4.1 to 4.5.0
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](codecov/codecov-action@125fc84...e28ff12)

Updates `anchore/sbom-action` from 0.16.0 to 0.16.1
- [Release notes](https://github.com/anchore/sbom-action/releases)
- [Commits](anchore/sbom-action@e8d2a69...95b086a)

Updates `goreleaser/goreleaser-action` from 5.1.0 to 6.0.0
- [Release notes](https://github.com/goreleaser/goreleaser-action/releases)
- [Commits](goreleaser/goreleaser-action@5742e2a...286f3b1)

Updates `dependabot/fetch-metadata` from 2.1.0 to 2.2.0
- [Release notes](https://github.com/dependabot/fetch-metadata/releases)
- [Commits](dependabot/fetch-metadata@5e5f996...dbb049a)

Updates `actions/dependency-review-action` from 4.3.2 to 4.3.3
- [Release notes](https://github.com/actions/dependency-review-action/releases)
- [Commits](actions/dependency-review-action@0c155c5...72eb03d)

Updates `reviewdog/action-actionlint` from 1.47.0 to 1.53.0
- [Release notes](https://github.com/reviewdog/action-actionlint/releases)
- [Commits](reviewdog/action-actionlint@4797143...d99f1ce)

Updates `peter-evans/create-pull-request` from 6.0.5 to 6.1.0
- [Release notes](https://github.com/peter-evans/create-pull-request/releases)
- [Commits](peter-evans/create-pull-request@6d6857d...c5a7806)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: docker/setup-buildx-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: docker/setup-qemu-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: docker/build-push-action
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: aquasecurity/trivy-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: nginxinc/aws-marketplace-publish
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: codecov/codecov-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: anchore/sbom-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: goreleaser/goreleaser-action
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: dependabot/fetch-metadata
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: actions/dependency-review-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: reviewdog/action-actionlint
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: peter-evans/create-pull-request
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update Github_actions code labels Jul 10, 2024
@cloudflare-workers-and-pages Cloudflare Workers and Pages
Copy link

cloudflare-workers-and-pages bot commented Jul 10, 2024 •
edited
Loading

Deploying kubernetes-ingress with  Cloudflare Pages  Cloudflare Pages

Latest commit: 7e5f2a1
Status:🚫  Build failed.

View logs

@github-actions github-actions bot added the chore label Jul 10, 2024
@dependabot Dependabot
Copy link
Author

dependabot bot commented on behalf of github Jul 11, 2024

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Jul 11, 2024
@dependabot dependabot bot deleted the dependabot/github_actions/actions-accd2f7cce branch July 11, 2024 13:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
chore dependencies Pull requests that update a dependency file github_actions Pull requests that update Github_actions code
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
0 participants