Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): bump the github-actions group with 8 updates #6693

Merged

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 8, 2024

Bumps the github-actions group with 8 updates:

Package From To
actions/checkout 3 4
tj-actions/changed-files 40 45
actions/setup-node 3 4
github/codeql-action 2 3
actions/dependency-review-action 3 4
ffurrer2/extract-release-notes 1 2
peter-evans/create-pull-request 6 7
actions/stale 7 9

Updates actions/checkout from 3 to 4

Release notes

Sourced from actions/checkout's releases.

v4.0.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v3...v4.0.0

v3.6.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v3.5.3...v3.6.0

v3.5.3

What's Changed

New Contributors

Full Changelog: actions/checkout@v3...v3.5.3

v3.5.2

What's Changed

Full Changelog: actions/checkout@v3.5.1...v3.5.2

v3.5.1

What's Changed

New Contributors

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

v4.2.2

v4.2.1

v4.2.0

v4.1.7

v4.1.6

v4.1.5

v4.1.4

v4.1.3

v4.1.2

v4.1.1

v4.1.0

... (truncated)

Commits

Updates tj-actions/changed-files from 40 to 45

Release notes

Sourced from tj-actions/changed-files's releases.

v45

Changes in v45.0.4

What's Changed

Full Changelog: tj-actions/changed-files@v45...v45.0.4


Changes in v45.0.3

What's Changed

... (truncated)

Changelog

Sourced from tj-actions/changed-files's changelog.

Changelog

45.0.4 - (2024-11-05)

🚀 Features

  • Prevent ignore files warning (#2318) (1f772e9) - (Tonye Jack)

🐛 Bug Fixes

  • deps: Update dependency @​actions/core to v1.11.1 (4d0aab9) - (renovate[bot])

➕ Add

  • Added missing changes and modified dist assets. (9d7201d) - (GitHub Action)
  • Added missing changes and modified dist assets. (0104c75) - (GitHub Action)

📝 Other

⚙️ Miscellaneous Tasks

  • deps: Update dependency eslint-plugin-jest to v28.9.0 (4edd678) - (renovate[bot])
  • deps: Update dependency @​types/node to v22.9.0 (f082558) - (renovate[bot])
  • deps: Lock file maintenance (92c02a0) - (renovate[bot])
  • deps: Update dependency @​types/node to v22.8.7 (b702211) - (renovate[bot])
  • deps: Update dependency @​types/node to v22.8.6 (435fd74) - (renovate[bot])
  • deps: Update dependency @​types/node to v22.8.5 (0626fa3) - (renovate[bot])
  • deps: Update dependency @​types/lodash to v4.17.13 (8817a79) - (renovate[bot])
  • deps: Update dependency @​types/node to v22.8.4 (5417491) - (renovate[bot])
  • deps: Update dependency @​types/node to v22.8.2 (84ef162) - (renovate[bot])
  • deps: Lock file maintenance (b672a51) - (renovate[bot])
  • deps: Update dependency @​types/node to v22.8.1 (678cdc2) - (renovate[bot])
  • deps: Update dependency @​types/node to v22.8.0 (27b7bbb) - (renovate[bot])
  • deps: Update actions/setup-node action to v4.1.0 (8361072) - (renovate[bot])
  • deps: Update dependency @​types/node to v22.7.9 (21acf46) - (renovate[bot])
  • deps: Update dependency @​types/jest to v29.5.14 (f356b3c) - (renovate[bot])
  • deps: Update dependency @​types/node to v22.7.8 (66275de) - (renovate[bot])
  • deps: Lock file maintenance (a16702b) - (renovate[bot])
  • deps: Update dependency @​types/lodash to v4.17.12 (aa11897) - (renovate[bot])
  • deps: Update dependency @​types/node to v22.7.7 (6513fe1) - (renovate[bot])
  • deps: Update dependency @​types/lodash to v4.17.11 (45e0c78) - (renovate[bot])
  • deps: Update dependency @​types/node to v22.7.6 (a949a83) - (renovate[bot])
  • deps: Lock file maintenance (f93ff33) - (renovate[bot])
  • deps: Update dependency typescript to v5.6.3 (729c704) - (renovate[bot])
  • deps: Update dependency @​types/node to v22.7.5 (2009d44) - (renovate[bot])
  • deps: Lock file maintenance (b693fc2) - (renovate[bot])

... (truncated)

Commits
  • 4edd678 chore(deps): update dependency eslint-plugin-jest to v28.9.0
  • f082558 chore(deps): update dependency @​types/node to v22.9.0
  • 92c02a0 chore(deps): lock file maintenance
  • b702211 chore(deps): update dependency @​types/node to v22.8.7
  • 435fd74 chore(deps): update dependency @​types/node to v22.8.6
  • 0626fa3 chore(deps): update dependency @​types/node to v22.8.5
  • 8817a79 chore(deps): update dependency @​types/lodash to v4.17.13
  • 5417491 chore(deps): update dependency @​types/node to v22.8.4
  • 84ef162 chore(deps): update dependency @​types/node to v22.8.2
  • b672a51 chore(deps): lock file maintenance
  • Additional commits viewable in compare view

Updates actions/setup-node from 3 to 4

Release notes

Sourced from actions/setup-node's releases.

v4.0.0

What's Changed

In scope of this release we changed version of node runtime for action from node16 to node20 and updated dependencies in actions/setup-node#866

Besides, release contains such changes as:

New Contributors

Full Changelog: actions/setup-node@v3...v4.0.0

v3.8.2

What's Changed

Full Changelog: actions/setup-node@v3...v3.8.2

v3.8.1

What's Changed

In scope of this release, the filter was removed within the cache-save step by @​dmitry-shibanov in actions/setup-node#831. It is filtered and checked in the toolkit/cache library.

Full Changelog: actions/setup-node@v3...v3.8.1

v3.8.0

What's Changed

Bug fixes:

Feature implementations:

Documentation changes:

Update dependencies:

... (truncated)

Commits

Updates github/codeql-action from 2 to 3

Release notes

Sourced from github/codeql-action's releases.

v2.27.0

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

2.27.0 - 22 Oct 2024

  • Bump the minimum CodeQL bundle version to 2.14.6. #2549
  • Fix an issue where the upload-sarif Action would fail with "upload-sarif post-action step failed: Input required and not supplied: token" when called in a composite Action that had a different set of inputs to the ones expected by the upload-sarif Action. #2557
  • Update default CodeQL bundle version to 2.19.2. #2552

See the full CHANGELOG.md for more information.

v2.26.13

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

2.26.13 - 14 Oct 2024

No user facing changes.

See the full CHANGELOG.md for more information.

v2.26.12

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

2.26.12 - 07 Oct 2024

  • Upcoming breaking change: Add a deprecation warning for customers using CodeQL version 2.14.5 and earlier. These versions of CodeQL were discontinued on 24 September 2024 alongside GitHub Enterprise Server 3.10, and will be unsupported by CodeQL Action versions 3.27.0 and later and versions 2.27.0 and later. #2520
    • If you are using one of these versions, please update to CodeQL CLI version 2.14.6 or later. For instance, if you have specified a custom version of the CLI using the 'tools' input to the 'init' Action, you can remove this input to use the default version.
    • Alternatively, if you want to continue using a version of the CodeQL CLI between 2.13.5 and 2.14.5, you can replace github/codeql-action/*@v3 by github/codeql-action/*@v3.26.11 and github/codeql-action/*@v2 by github/codeql-action/*@v2.26.11 in your code scanning workflow to ensure you continue using this version of the CodeQL Action.

See the full CHANGELOG.md for more information.

v2.26.11

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

... (truncated)

Changelog

Sourced from github/codeql-action's changelog.

3.27.0 - 22 Oct 2024

  • Bump the minimum CodeQL bundle version to 2.14.6. #2549
  • Fix an issue where the upload-sarif Action would fail with "upload-sarif post-action step failed: Input required and not supplied: token" when called in a composite Action that had a different set of inputs to the ones expected by the upload-sarif Action. #2557
  • Update default CodeQL bundle version to 2.19.2. #2552

3.26.13 - 14 Oct 2024

No user facing changes.

3.26.12 - 07 Oct 2024

  • Upcoming breaking change: Add a deprecation warning for customers using CodeQL version 2.14.5 and earlier. These versions of CodeQL were discontinued on 24 September 2024 alongside GitHub Enterprise Server 3.10, and will be unsupported by CodeQL Action versions 3.27.0 and later and versions 2.27.0 and later. #2520

    • If you are using one of these versions, please update to CodeQL CLI version 2.14.6 or later. For instance, if you have specified a custom version of the CLI using the 'tools' input to the 'init' Action, you can remove this input to use the default version.

    • Alternatively, if you want to continue using a version of the CodeQL CLI between 2.13.5 and 2.14.5, you can replace github/codeql-action/*@v3 by github/codeql-action/*@v3.26.11 and github/codeql-action/*@v2 by github/codeql-action/*@v2.26.11 in your code scanning workflow to ensure you continue using this version of the CodeQL Action.

3.26.11 - 03 Oct 2024

  • Upcoming breaking change: Add support for using actions/download-artifact@v4 to programmatically consume CodeQL Action debug artifacts.

    Starting November 30, 2024, GitHub.com customers will no longer be able to use actions/download-artifact@v3. Therefore, to avoid breakage, customers who programmatically download the CodeQL Action debug artifacts should set the CODEQL_ACTION_ARTIFACT_V4_UPGRADE environment variable to true and bump actions/download-artifact@v3 to actions/download-artifact@v4 in their workflows. The CodeQL Action will enable this behavior by default in early November and workflows that have not yet bumped to actions/download-artifact@v3 to actions/download-artifact@v4 will begin failing then.

    This change is currently unavailable for GitHub Enterprise Server customers, as actions/upload-artifact@v4 and actions/download-artifact@v4 are not yet compatible with GHES.

  • Update default CodeQL bundle version to 2.19.1. #2519

3.26.10 - 30 Sep 2024

  • We are rolling out a feature in September/October 2024 that sets up CodeQL using a bundle compressed with Zstandard. Our aim is to improve the performance of setting up CodeQL. #2502

3.26.9 - 24 Sep 2024

No user facing changes.

3.26.8 - 19 Sep 2024

  • Update default CodeQL bundle version to 2.19.0. #2483

3.26.7 - 13 Sep 2024

  • Update default CodeQL bundle version to 2.18.4. #2471

3.26.6 - 29 Aug 2024

  • Update default CodeQL bundle version to 2.18.3. #2449

3.26.5 - 23 Aug 2024

  • Fix an issue where the csrutil system call used for telemetry would fail on macOS ARM machines with System Integrity Protection disabled. #2441

... (truncated)

Commits
  • d591d17 Fix name of Python stdlib extraction feature flag
  • c470063 Merge pull request #2549 from github/henrymercer/remove-support-2.13.5
  • ad94f2f Merge pull request #2548 from github/angelapwen/fix-prepare-test
  • 57f465f Add changelog note
  • 9ccb1b7 Bump version to 3.27.0
  • 4f2715b Update supported GHES versions table
  • See full diff in compare view

Updates actions/dependency-review-action from 3 to 4

Release notes

Sourced from actions/dependency-review-action's releases.

v4.0.0

New Contributors

Full Changelog: actions/dependency-review-action@v3.1.5...v4.0.0

3.1.5

What's Changed

Full Changelog: actions/dependency-review-action@v3.1.4...v3.1.5

3.1.4

What's Changed

Full Changelog: actions/dependency-review-action@v3...v3.1.4

3.1.3

What's Changed

Full Changelog: actions/dependency-review-action@v3...v3.1.3

3.1.2

What's Changed

... (truncated)

Commits
  • 4081bf9 Merge pull request #846 from actions/merge-group-bug-fix
  • 03e585e fixing minor typo
  • 08b4117 updating dist code
  • 9c3441f updating dist code
  • 304a544 updating tests
  • e99353b fixing merge_group schema bug
  • a6993e2 Merge pull request #840 from actions/dependabot-updates
  • d92f08b Bump eslint-plugin-jest and ts-jest
  • 3e334b7 Merge pull request #822 from actions/dependabot/npm_and_yarn/got-14.4.2
  • 32b7d88 Merge pull request #832 from actions/jonjanego-patch-3
  • Additional commits viewable in compare view

Updates ffurrer2/extract-release-notes from 1 to 2

Release notes

Sourced from ffurrer2/extract-release-notes's releases.

v2.0.0

Changed

  • Default runtime updated to node20

v1.17.0

Changed

  • Dependencies updated

v1.16.0

Changed

  • Dependencies updated

v1.15.0

Changed

  • Dependencies updated

v1.14.0

Changed

  • Dependencies updated

v1.13.0

Changed

  • Dependencies updated

v1.12.0

Changed

  • Dependencies updated

v1.11.0

Added

  • Added prerelease parameter to extract the content between the first (## [Unreleased]) and second H2 header

Changed

  • Dependencies updated

v1.10.0

Changed

  • Dependencies updated
  • Node version bumped from 12.x to 16.x

... (truncated)

Changelog

Sourced from ffurrer2/extract-release-notes's changelog.

[2.2.0] - 2024-05-08

Fixed

  • The action now correctly handles the case where no release notes are found in the changelog. Thanks to kishor82 for his contribution....

    Description has been truncated

@cclauss
Copy link
Contributor

cclauss commented Nov 8, 2024

@dependabot rebase

The tests all pass. ;-)

@jasonsaayman, Can you please type the first line above in a comment below so that the bot will rebase this PR?
Dependabot will ignore my request because I am not a maintainer of this repo.

Copy link
Contributor Author

dependabot bot commented on behalf of github Nov 8, 2024

Sorry, only users with push access can use that command.

2 similar comments
Copy link
Contributor Author

dependabot bot commented on behalf of github Nov 8, 2024

Sorry, only users with push access can use that command.

Copy link
Contributor Author

dependabot bot commented on behalf of github Nov 8, 2024

Sorry, only users with push access can use that command.

Bumps the github-actions group with 8 updates:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `3` | `4` |
| [tj-actions/changed-files](https://github.com/tj-actions/changed-files) | `40` | `45` |
| [actions/setup-node](https://github.com/actions/setup-node) | `3` | `4` |
| [github/codeql-action](https://github.com/github/codeql-action) | `2` | `3` |
| [actions/dependency-review-action](https://github.com/actions/dependency-review-action) | `3` | `4` |
| [ffurrer2/extract-release-notes](https://github.com/ffurrer2/extract-release-notes) | `1` | `2` |
| [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) | `6` | `7` |
| [actions/stale](https://github.com/actions/stale) | `7` | `9` |


Updates `actions/checkout` from 3 to 4
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v3...v4)

Updates `tj-actions/changed-files` from 40 to 45
- [Release notes](https://github.com/tj-actions/changed-files/releases)
- [Changelog](https://github.com/tj-actions/changed-files/blob/main/HISTORY.md)
- [Commits](tj-actions/changed-files@v40...v45)

Updates `actions/setup-node` from 3 to 4
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@v3...v4)

Updates `github/codeql-action` from 2 to 3
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@v2...v3)

Updates `actions/dependency-review-action` from 3 to 4
- [Release notes](https://github.com/actions/dependency-review-action/releases)
- [Commits](actions/dependency-review-action@v3...v4)

Updates `ffurrer2/extract-release-notes` from 1 to 2
- [Release notes](https://github.com/ffurrer2/extract-release-notes/releases)
- [Changelog](https://github.com/ffurrer2/extract-release-notes/blob/main/CHANGELOG.md)
- [Commits](ffurrer2/extract-release-notes@v1...v2)

Updates `peter-evans/create-pull-request` from 6 to 7
- [Release notes](https://github.com/peter-evans/create-pull-request/releases)
- [Commits](peter-evans/create-pull-request@v6...v7)

Updates `actions/stale` from 7 to 9
- [Release notes](https://github.com/actions/stale/releases)
- [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md)
- [Commits](actions/stale@v7...v9)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: tj-actions/changed-files
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/setup-node
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/dependency-review-action
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: ffurrer2/extract-release-notes
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: peter-evans/create-pull-request
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/stale
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/github_actions/github-actions-3a80e77ed3 branch from bf2cf74 to a26a080 Compare November 11, 2024 10:36
@cclauss
Copy link
Contributor

cclauss commented Nov 11, 2024

@jasonsaayman Given that all the GitHub Actions pass, this should be merged.

@jasonsaayman jasonsaayman merged commit 6a63614 into v1.x Nov 11, 2024
16 checks passed
@jasonsaayman jasonsaayman deleted the dependabot/github_actions/github-actions-3a80e77ed3 branch November 11, 2024 14:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants