chore(deps): bump the github-actions group across 1 directory with 13 updates #68
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
… updates Bumps the github-actions group with 13 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `4.1.1` | `4.1.6` | | [actions/setup-go](https://github.com/actions/setup-go) | `5.0.0` | `5.0.1` | | [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) | `5.0.0` | `5.1.0` | | [docker/login-action](https://github.com/docker/login-action) | `3.0.0` | `3.1.0` | | [docker/build-push-action](https://github.com/docker/build-push-action) | `5.1.0` | `5.3.0` | | [github/codeql-action](https://github.com/github/codeql-action) | `3.24.6` | `3.25.5` | | [vladopajic/go-test-coverage](https://github.com/vladopajic/go-test-coverage) | `2.8.3` | `2.10.1` | | [dependabot/fetch-metadata](https://github.com/dependabot/fetch-metadata) | `1.6.0` | `2.1.0` | | [actions/dependency-review-action](https://github.com/actions/dependency-review-action) | `4.1.3` | `4.3.2` | | [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) | `4.0.0` | `6.0.1` | | [wagoid/commitlint-github-action](https://github.com/wagoid/commitlint-github-action) | `5.4.5` | `6.0.1` | | [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) | `3.4.0` | `3.5.0` | | [anchore/sbom-action](https://github.com/anchore/sbom-action) | `0.15.8` | `0.15.11` | Updates `actions/checkout` from 4.1.1 to 4.1.6 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@b4ffde6...a5ac7e5) Updates `actions/setup-go` from 5.0.0 to 5.0.1 - [Release notes](https://github.com/actions/setup-go/releases) - [Commits](actions/setup-go@0c52d54...cdcb360) Updates `goreleaser/goreleaser-action` from 5.0.0 to 5.1.0 - [Release notes](https://github.com/goreleaser/goreleaser-action/releases) - [Commits](goreleaser/goreleaser-action@7ec5c2b...5742e2a) Updates `docker/login-action` from 3.0.0 to 3.1.0 - [Release notes](https://github.com/docker/login-action/releases) - [Commits](docker/login-action@343f7c4...e92390c) Updates `docker/build-push-action` from 5.1.0 to 5.3.0 - [Release notes](https://github.com/docker/build-push-action/releases) - [Commits](docker/build-push-action@4a13e50...2cdde99) Updates `github/codeql-action` from 3.24.6 to 3.25.5 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@8a470fd...b7cec75) Updates `vladopajic/go-test-coverage` from 2.8.3 to 2.10.1 - [Release notes](https://github.com/vladopajic/go-test-coverage/releases) - [Commits](vladopajic/go-test-coverage@97ecc52...1079cd4) Updates `dependabot/fetch-metadata` from 1.6.0 to 2.1.0 - [Release notes](https://github.com/dependabot/fetch-metadata/releases) - [Commits](dependabot/fetch-metadata@c9c4182...5e5f996) Updates `actions/dependency-review-action` from 4.1.3 to 4.3.2 - [Release notes](https://github.com/actions/dependency-review-action/releases) - [Commits](actions/dependency-review-action@9129d7d...0c155c5) Updates `golangci/golangci-lint-action` from 4.0.0 to 6.0.1 - [Release notes](https://github.com/golangci/golangci-lint-action/releases) - [Commits](golangci/golangci-lint-action@3cfe3a4...a4f60bb) Updates `wagoid/commitlint-github-action` from 5.4.5 to 6.0.1 - [Changelog](https://github.com/wagoid/commitlint-github-action/blob/master/CHANGELOG.md) - [Commits](wagoid/commitlint-github-action@5ce82f5...7f0a61d) Updates `sigstore/cosign-installer` from 3.4.0 to 3.5.0 - [Release notes](https://github.com/sigstore/cosign-installer/releases) - [Commits](sigstore/cosign-installer@e1523de...59acb62) Updates `anchore/sbom-action` from 0.15.8 to 0.15.11 - [Release notes](https://github.com/anchore/sbom-action/releases) - [Commits](anchore/sbom-action@b6a39da...7ccf588) --- updated-dependencies: - dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: actions/setup-go dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: goreleaser/goreleaser-action dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: docker/login-action dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: docker/build-push-action dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: vladopajic/go-test-coverage dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: dependabot/fetch-metadata dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/dependency-review-action dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: golangci/golangci-lint-action dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: wagoid/commitlint-github-action dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: sigstore/cosign-installer dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: anchore/sbom-action dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
added
dependencies
|
Superseded by #71. |
auto-merge was automatically disabled
May 27, 2024 08:29
Pull request was closed
dependabot
bot
deleted the
dependabot/github_actions/github-actions-041786bd43
branch
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the github-actions group with 13 updates in the / directory:
4.1.14.1.65.0.05.0.15.0.05.1.03.0.03.1.05.1.05.3.03.24.63.25.52.8.32.10.11.6.02.1.04.1.34.3.24.0.06.0.15.4.56.0.13.4.03.5.00.15.80.15.11Updates
actions/checkoutfrom 4.1.1 to 4.1.6Release notes
Sourced from actions/checkout's releases.
Changelog
Sourced from actions/checkout's changelog.
... (truncated)
Commits
a5ac7e5Update for 4.1.6 release (#1733)24ed1a3Check platform for extension (#1732)44c2b7aREADME: Suggestuser.emailto be `41898282+github-actions[bot]@users.norepl...8459bc0Bump actions/upload-artifact from 2 to 4 (#1695)3f603f6Bump actions/setup-node from 1 to 4 (#1696)fd084cdBump github/codeql-action from 2 to 3 (#1694)9c1e94eUpdate NPM dependencies (#1703)0ad4b8fPrep Release v4.1.4 (#1704)43045aeDisableextensions.worktreeConfigwhen disablingsparse-checkout(#1692)37b0821Bump the minor-actions-dependencies group with 2 updates (#1693)Updates
actions/setup-gofrom 5.0.0 to 5.0.1Release notes
Sourced from actions/setup-go's releases.
Commits
cdcb360Remove the description of the old go.mod specification (#458)99176a8Update README.md with V5 release notes (#459)be1aa11Bump undici from 5.28.2 to 5.28.3 (#465)6c1fd22docs: bumpactions/setup-goto v5 (#449)Updates
goreleaser/goreleaser-actionfrom 5.0.0 to 5.1.0Release notes
Sourced from goreleaser/goreleaser-action's releases.
Commits
5742e2achore: re-generate70ccc5dchore(deps): bump@actions/http-clientfrom 2.2.0 to 2.2.1 (#451)d55bec7chore(deps): bump semver from 7.6.0 to 7.6.2 (#462)f1dbd53feat: lock this major version of the action to use '~> v1' as 'latest' (#461)2953d07chore(deps): update http-client62d4b8achore: use corepack to install yarn (#458)f09f1a7chore(deps): bump tar from 6.1.14 to 6.2.1 (#456)9937f9bRevert "docs: Upgrade setup-go action version in README (#455)"b7f6f16docs: Upgrade setup-go action version in README (#455)c21f56adocs: update readmeUpdates
docker/login-actionfrom 3.0.0 to 3.1.0Release notes
Sourced from docker/login-action's releases.
Commits
e92390cMerge pull request #685 from docker/dependabot/npm_and_yarn/aws-sdk-dependenc...1e752e2chore: update generated content51c6097build(deps): bump the aws-sdk-dependencies group with 2 updates8f079fbMerge pull request #676 from docker/dependabot/npm_and_yarn/proxy-agent-depen...16fa768chore: update generated content46d1619build(deps): bump the proxy-agent-dependencies group with 2 updates8c291c5Merge pull request #682 from docker/dependabot/npm_and_yarn/docker/actions-to...ec726f4build(deps): bump@docker/actions-toolkitfrom 0.14.0 to 0.18.05139682Merge pull request #677 from docker/dependabot/npm_and_yarn/undici-5.28.36d4e2bachore: update generated contentUpdates
docker/build-push-actionfrom 5.1.0 to 5.3.0Release notes
Sourced from docker/build-push-action's releases.
Commits
2cdde99Merge pull request #1080 from docker/dependabot/npm_and_yarn/docker/actions-t...008747achore: update generated content1580753chore(deps): Bump@docker/actions-toolkitfrom 0.18.0 to 0.19.02a7db1dMerge pull request #1075 from crazy-max/ci-multi-output35e7dd5ci: test multi outputaf5a7edMerge pull request #1074 from crazy-max/build-cmd-debug2a85189chore: update generated content6c20794disable quotes detection for "outputs" inputafdf0c0chore: debug build cmd and args00ae31aMerge pull request #1070 from docker/dependabot/npm_and_yarn/docker/actions-t...Updates
github/codeql-actionfrom 3.24.6 to 3.25.5Changelog
Sourced from github/codeql-action's changelog.
... (truncated)
Commits
b7cec75Merge pull request #2287 from github/update-v3.25.5-4a51972476778fe4Update changelog for v3.25.54a51972Merge pull request #2280 from github/henrymercer/on-demand-ffsa8c32fdMerge pull request #2283 from github/henrymercer/disable-fail-fastf73b0b7Disable fail fast for non-generated workflowsc59e052Disable fail fast in generated workflows33e416cComment thatlegacyApiis false by default67f8a36Merge branch 'main' into henrymercer/on-demand-ffs4995c49Merge pull request #2282 from github/henrymercer/no-build-mode-tracing-improv...def4d2cMerge pull request #2273 from github/aeisenberg/specify-versionsUpdates
vladopajic/go-test-coveragefrom 2.8.3 to 2.10.1Release notes
Sourced from vladopajic/go-test-coverage's releases.
Commits
1079cd4version bump: v2.10.15963a53fixed ThresholdTotal value check (#83)dc6bb7fUpdate README.mdc7f1d6fci: use combined coverage profiles (#81)e2d732eci release action: fix version check (#80)a1e0de1bump version to v2.10.0d35274aUpdate README.md0b76be5add ability to exclude body of switch and select with annotation (#79)fe6d2c4various improvements (cosmetics, lints, coverage) (#78)741802cexcluding whole body from coverage when having comment annotation (#77)Updates
dependabot/fetch-metadatafrom 1.6.0 to 2.1.0Release notes
Sourced from dependabot/fetch-metadata's releases.
... (truncated)
Commits
5e5f996Merge pull request #518 from dependabot/bump-to-v2.1.063415e5v2.1.076b7fe9Merge pull request #509 from dependabot/switch-to-monthly-release-cadence7c323d5Switch to monthly release cadence5c7b450Merge pull request #450 from HealthengineAU/handle-branches-with-hyphensa44a9dfHandle branch names containing hyphen separators518993cRelaxengine-strict=true(#510)0fb2170v2.0.0 (#508)dc2c459v2is the new tracking tag (#506)f2f0ad1Upgrade from node16 to node20 (#443)Updates
actions/dependency-review-actionfrom 4.1.3 to 4.3.2Release notes
Sourced from actions/dependency-review-action's releases.
... (truncated)
Commits
0c155c5Merge pull request #762 from actions/juxtin/prepare-4.3.2f3dac32Merge pull request #761 from actions/juxtin/fix-allow-dependencies-licensesd0d5cc3Update version number to 4.3.249fbbe0Fix package-url parsing for allow-dependencies-licensese58c696Merge pull request #758 from actions/juxtin/prepare-4.3.19b7c72dChange version to 4.3.17dcfabfMerge pull request #753 from actions/juxtin/debug-purl5f0808fValidate that deny-packages purls are completefcc66c2Refine purl parsing and tests