Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[pull] main from github:main #2

Open
wants to merge 90 commits into
base: main
Choose a base branch
from
Open

Conversation

pull[bot]
Copy link

@pull pull bot commented Jul 1, 2024

See Commits and Changes for more details.


Created by pull[bot]

Can you help keep this open source service alive? 💖 Please sponsor : )

dependabot bot and others added 2 commits June 28, 2024 04:17
Bumps the dependencies group with 1 update: [ruby/setup-ruby](https://github.com/ruby/setup-ruby).


Updates `ruby/setup-ruby` from 1.180.1 to 1.182.0
- [Release notes](https://github.com/ruby/setup-ruby/releases)
- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)
- [Commits](ruby/setup-ruby@3783f19...af43264)

---
updated-dependencies:
- dependency-name: ruby/setup-ruby
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
…encies-857342319e

chore(deps): bump ruby/setup-ruby from 1.180.1 to 1.182.0 in the dependencies group
@pull pull bot added the ⤵️ pull label Jul 1, 2024
dependabot bot and others added 27 commits July 1, 2024 04:33
Bumps the dependencies group with 1 update: [ruby/setup-ruby](https://github.com/ruby/setup-ruby).


Updates `ruby/setup-ruby` from 1.182.0 to 1.183.0
- [Release notes](https://github.com/ruby/setup-ruby/releases)
- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)
- [Commits](ruby/setup-ruby@af43264...1d0e911)

---
updated-dependencies:
- dependency-name: ruby/setup-ruby
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
…encies-df26fd4422

chore(deps): bump ruby/setup-ruby from 1.182.0 to 1.183.0 in the dependencies group
Bumps the dependencies group with 1 update: [ruby/setup-ruby](https://github.com/ruby/setup-ruby).


Updates `ruby/setup-ruby` from 1.183.0 to 1.184.0
- [Release notes](https://github.com/ruby/setup-ruby/releases)
- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)
- [Commits](ruby/setup-ruby@1d0e911...97e35c5)

---
updated-dependencies:
- dependency-name: ruby/setup-ruby
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
…encies-8b55990afd

chore(deps): bump ruby/setup-ruby from 1.183.0 to 1.184.0 in the dependencies group
Bumps the dependencies group with 1 update: [ruby/setup-ruby](https://github.com/ruby/setup-ruby).


Updates `ruby/setup-ruby` from 1.184.0 to 1.185.0
- [Release notes](https://github.com/ruby/setup-ruby/releases)
- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)
- [Commits](ruby/setup-ruby@97e35c5...3a77c29)

---
updated-dependencies:
- dependency-name: ruby/setup-ruby
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
…encies-0a8ff968f9

chore(deps): bump ruby/setup-ruby from 1.184.0 to 1.185.0 in the dependencies group
…dates

Bumps the dependencies group with 2 updates in the / directory: [ruby/setup-ruby](https://github.com/ruby/setup-ruby) and [actions/setup-node](https://github.com/actions/setup-node).


Updates `ruby/setup-ruby` from 1.185.0 to 1.187.0
- [Release notes](https://github.com/ruby/setup-ruby/releases)
- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)
- [Commits](ruby/setup-ruby@3a77c29...161cd54)

Updates `actions/setup-node` from 4.0.2 to 4.0.3
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@60edb5d...1e60f62)

---
updated-dependencies:
- dependency-name: ruby/setup-ruby
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: actions/setup-node
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
…encies-17bff30933

chore(deps): bump the dependencies group across 1 directory with 2 updates
fix: Correct typos and spacing in Korean documentation (metrics page)
Bumps the dependencies group with 1 update: [ruby/setup-ruby](https://github.com/ruby/setup-ruby).


Updates `ruby/setup-ruby` from 1.187.0 to 1.188.0
- [Release notes](https://github.com/ruby/setup-ruby/releases)
- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)
- [Commits](ruby/setup-ruby@161cd54...50ba338)

---
updated-dependencies:
- dependency-name: ruby/setup-ruby
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
…encies-43281845a0

chore(deps): bump ruby/setup-ruby from 1.187.0 to 1.188.0 in the dependencies group
Bumps the dependencies group with 1 update: [ruby/setup-ruby](https://github.com/ruby/setup-ruby).


Updates `ruby/setup-ruby` from 1.188.0 to 1.190.0
- [Release notes](https://github.com/ruby/setup-ruby/releases)
- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)
- [Commits](ruby/setup-ruby@50ba338...a6e6f86)

---
updated-dependencies:
- dependency-name: ruby/setup-ruby
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
…encies-79d7dbbdf8

chore(deps): bump ruby/setup-ruby from 1.188.0 to 1.190.0 in the dependencies group
French/metrics.md: typo corrections, small reorganizations
Bumps the dependencies group with 1 update: [actions/jekyll-build-pages](https://github.com/actions/jekyll-build-pages).


Updates `actions/jekyll-build-pages` from 1.0.12 to 1.0.13
- [Release notes](https://github.com/actions/jekyll-build-pages/releases)
- [Commits](actions/jekyll-build-pages@b178f93...44a6e6b)

---
updated-dependencies:
- dependency-name: actions/jekyll-build-pages
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
…encies-b709c8c27f

chore(deps): bump actions/jekyll-build-pages from 1.0.12 to 1.0.13 in the dependencies group
docs: fix broken link to sourcecode.cio.gov
- [x] add permissions to stale workflow
- [x] add permissions to tests workflow
  - [x] remove empty brackers on pull_request branch in tests workflow

Signed-off-by: jmeridth <[email protected]>
Bumps the dependencies group with 1 update: [ruby/setup-ruby](https://github.com/ruby/setup-ruby).


Updates `ruby/setup-ruby` from 1.190.0 to 1.191.0
- [Release notes](https://github.com/ruby/setup-ruby/releases)
- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)
- [Commits](ruby/setup-ruby@a6e6f86...52753b7)

---
updated-dependencies:
- dependency-name: ruby/setup-ruby
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
…encies-965fa1a766

chore(deps): bump ruby/setup-ruby from 1.190.0 to 1.191.0 in the dependencies group
…_permissions

fix: code scanning alerts re: workflows permissions
Added "¡" marks where needed. Corrected some words with written accents.
kpotia and others added 30 commits October 20, 2024 07:28
Will look into why this is 403ing but we need to unblock other PRs

Signed-off-by: jmeridth <[email protected]>
fix: add readwrite url to ignored urls to pass CI
- [x] latest jekyll
- [x] ruby 3.3.5
- [x] devcontainer setup also
  - allows us to work in environment matching prod
  - was getting errorlocally when trying to run bundle install, this is easier IMO
- [x] update dependabot config for npm
- [x] removed Gemfile.lock from .gitignore so dependabot can actually issue gem updates

Signed-off-by: jmeridth <[email protected]>
…encies-2637c6182c

chore(deps): bump ruby/setup-ruby from 1.196.0 to 1.197.0 in the dependencies group
…ontainer

chore: upgrade to latest jekyll and ruby and devcontainer
… prevent TOCTOU

based on feedback from security folks

Signed-off-by: jmeridth <[email protected]>
Co-authored-by: Kylie Stradley <[email protected]>
fix: use deploy environment for build job and replace ref with sha to prevent TOCTOU
Bumps the dependencies group with 1 update: [actions/checkout](https://github.com/actions/checkout).


Updates `actions/checkout` from 4.2.1 to 4.2.2
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@eef6144...11bd719)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
…encies-5f967e2fbc

chore(deps): bump actions/checkout from 4.2.1 to 4.2.2 in the dependencies group
Bumps the dependencies group with 1 update: [actions/setup-node](https://github.com/actions/setup-node).


Updates `actions/setup-node` from 4.0.4 to 4.1.0
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@0a44ba7...39370e3)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
…encies-790168239a

chore(deps): bump actions/setup-node from 4.0.4 to 4.1.0 in the dependencies group
Bumps the bundler group with 1 update: [rexml](https://github.com/ruby/rexml).


Updates `rexml` from 3.3.8 to 3.3.9
- [Release notes](https://github.com/ruby/rexml/releases)
- [Changelog](https://github.com/ruby/rexml/blob/master/NEWS.md)
- [Commits](ruby/rexml@v3.3.8...v3.3.9)

---
updated-dependencies:
- dependency-name: rexml
  dependency-type: indirect
  dependency-group: bundler
...

Signed-off-by: dependabot[bot] <[email protected]>
…84133

chore(deps): bump rexml from 3.3.8 to 3.3.9 in the bundler group
Bumps the dependencies group with 1 update: [ruby/setup-ruby](https://github.com/ruby/setup-ruby).


Updates `ruby/setup-ruby` from 1.197.0 to 1.198.0
- [Release notes](https://github.com/ruby/setup-ruby/releases)
- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)
- [Commits](ruby/setup-ruby@7bae1d0...98aefb3)

---
updated-dependencies:
- dependency-name: ruby/setup-ruby
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
…encies-901819932d

chore(deps): bump ruby/setup-ruby from 1.197.0 to 1.198.0 in the dependencies group
Bumps the dependencies group with 1 update: [ruby/setup-ruby](https://github.com/ruby/setup-ruby).


Updates `ruby/setup-ruby` from 1.198.0 to 1.199.0
- [Release notes](https://github.com/ruby/setup-ruby/releases)
- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)
- [Commits](ruby/setup-ruby@98aefb3...7d3497f)

---
updated-dependencies:
- dependency-name: ruby/setup-ruby
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
…encies-98ddb9b283

chore(deps): bump ruby/setup-ruby from 1.198.0 to 1.199.0 in the dependencies group
To fix warning in CI

```
_articles/fr/maintaining-balance-for-open-source-maintainers.md
  78:1-83:9  warning  Missing blank line before block node  no-missing-blank-lines  remark-lint
```
Update maintaining-balance-for-open-source-maintainers.md
Bumps the dependencies group with 1 update: [ruby/setup-ruby](https://github.com/ruby/setup-ruby).


Updates `ruby/setup-ruby` from 1.199.0 to 1.200.0
- [Release notes](https://github.com/ruby/setup-ruby/releases)
- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)
- [Commits](ruby/setup-ruby@7d3497f...217c988)

---
updated-dependencies:
- dependency-name: ruby/setup-ruby
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
…encies-4e35575af4

chore(deps): bump ruby/setup-ruby from 1.199.0 to 1.200.0 in the dependencies group
Bumps the dependencies group with 1 update: [ruby/setup-ruby](https://github.com/ruby/setup-ruby).


Updates `ruby/setup-ruby` from 1.200.0 to 1.201.0
- [Release notes](https://github.com/ruby/setup-ruby/releases)
- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)
- [Commits](ruby/setup-ruby@217c988...46ca53b)

---
updated-dependencies:
- dependency-name: ruby/setup-ruby
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
…encies-622f03e299

chore(deps): bump ruby/setup-ruby from 1.200.0 to 1.201.0 in the dependencies group
Bumps the dependencies group with 1 update: [ruby/setup-ruby](https://github.com/ruby/setup-ruby).


Updates `ruby/setup-ruby` from 1.201.0 to 1.202.0
- [Release notes](https://github.com/ruby/setup-ruby/releases)
- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)
- [Commits](ruby/setup-ruby@46ca53b...a2bbe5b)

---
updated-dependencies:
- dependency-name: ruby/setup-ruby
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
…encies-c430e8e6da

chore(deps): bump ruby/setup-ruby from 1.201.0 to 1.202.0 in the dependencies group
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.