Skip to content

Rollup dependabot updates #259

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 8 commits into from
May 27, 2025
Merged

Rollup dependabot updates #259

merged 8 commits into from
May 27, 2025

Conversation

lopopolo
Copy link
Member

No description provided.

dependabot bot and others added 4 commits May 27, 2025 01:07
Bumps the bundler-deps group with 2 updates: [rubocop](https://github.com/rubocop/rubocop) and [rubocop-rake](https://github.com/rubocop/rubocop-rake).


Updates `rubocop` from 1.71.2 to 1.75.1
- [Release notes](https://github.com/rubocop/rubocop/releases)
- [Changelog](https://github.com/rubocop/rubocop/blob/master/CHANGELOG.md)
- [Commits](rubocop/rubocop@v1.71.2...v1.75.1)

Updates `rubocop-rake` from 0.6.0 to 0.7.1
- [Release notes](https://github.com/rubocop/rubocop-rake/releases)
- [Changelog](https://github.com/rubocop/rubocop-rake/blob/master/CHANGELOG.md)
- [Commits](rubocop/rubocop-rake@v0.6.0...v0.7.1)

---
updated-dependencies:
- dependency-name: rubocop
  dependency-version: 1.75.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bundler-deps
- dependency-name: rubocop-rake
  dependency-version: 0.7.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: bundler-deps
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps the npm-deps group with 1 update: [prettier](https://github.com/prettier/prettier).


Updates `prettier` from 3.5.2 to 3.5.3
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.5.2...3.5.3)

---
updated-dependencies:
- dependency-name: prettier
  dependency-version: 3.5.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-deps
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps the gha-deps group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [ruby/setup-ruby](https://github.com/ruby/setup-ruby) | `1.221.0` | `1.236.0` |
| [docker/build-push-action](https://github.com/docker/build-push-action) | `6.15.0` | `6.16.0` |
| [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) | `5.3.0` | `6.0.1` |
| [actions/setup-node](https://github.com/actions/setup-node) | `4.2.0` | `4.4.0` |
| [docker/login-action](https://github.com/docker/login-action) | `3.3.0` | `3.4.0` |
| [crazy-max/ghaction-github-labeler](https://github.com/crazy-max/ghaction-github-labeler) | `5.2.0` | `5.3.0` |
| [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) | `7.0.7` | `7.0.8` |



Updates `ruby/setup-ruby` from 1.221.0 to 1.236.0
- [Release notes](https://github.com/ruby/setup-ruby/releases)
- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)
- [Commits](ruby/setup-ruby@32110d4...f41e084)

Updates `docker/build-push-action` from 6.15.0 to 6.16.0
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](docker/build-push-action@471d1dc...14487ce)

Updates `astral-sh/setup-uv` from 5.3.0 to 6.0.1
- [Release notes](https://github.com/astral-sh/setup-uv/releases)
- [Commits](astral-sh/setup-uv@1edb525...6b9c606)

Updates `actions/setup-node` from 4.2.0 to 4.4.0
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@1d0ff46...49933ea)

Updates `docker/login-action` from 3.3.0 to 3.4.0
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](docker/login-action@9780b0c...74a5d14)

Updates `crazy-max/ghaction-github-labeler` from 5.2.0 to 5.3.0
- [Release notes](https://github.com/crazy-max/ghaction-github-labeler/releases)
- [Commits](crazy-max/ghaction-github-labeler@31674a3...24d110a)

Updates `peter-evans/create-pull-request` from 7.0.7 to 7.0.8
- [Release notes](https://github.com/peter-evans/create-pull-request/releases)
- [Commits](peter-evans/create-pull-request@dd2324f...271a8d0)

---
updated-dependencies:
- dependency-name: ruby/setup-ruby
  dependency-version: 1.236.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gha-deps
- dependency-name: docker/build-push-action
  dependency-version: 6.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gha-deps
- dependency-name: astral-sh/setup-uv
  dependency-version: 6.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gha-deps
- dependency-name: actions/setup-node
  dependency-version: 4.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gha-deps
- dependency-name: docker/login-action
  dependency-version: 3.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gha-deps
- dependency-name: crazy-max/ghaction-github-labeler
  dependency-version: 5.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gha-deps
- dependency-name: peter-evans/create-pull-request
  dependency-version: 7.0.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gha-deps
...

Signed-off-by: dependabot[bot] <[email protected]>
Merge remote-tracking branches 'origin/dependabot/bundler/bundler-deps-4c6b266b4c', 'origin/dependabot/github_actions/gha-deps-0b2d47d626' and 'origin/dependabot/npm_and_yarn/npm-deps-8e6b994b08' into dev/lopopolo-rollup
@lopopolo lopopolo added the A-deps Area: Source and library dependencies. label May 27, 2025
lopopolo added 2 commits May 26, 2025 18:36
The Rust toolchain update job has been broken since #245 in February,
which means the Rust toolchain embedded in all of the Dockerfiles hasn't
been updated since Rust 1.84.1.

Artichoke's `Cargo.toml` currently specifies Rust 1.85.0. This means
that the nightly builds, which parse Artichoke's declared
`rust-toolchain.toml` and inject the Rust version via a Docker arg
continue to build successfully, but the bare CI job, which uses the
toolchain declared in the Dockerfiles, does not.

Cargo fails with a pretty bad error message:

```
0.048 + cargo install --target x86_64-unknown-linux-musl --git https://github.com/artichoke/artichoke --branch trunk --bins --locked [email protected]
0.098     Updating git repository `https://github.com/artichoke/artichoke`
2.888 From https://github.com/artichoke/artichoke
2.888  * [new branch]          trunk      -> origin/trunk
6.654 error: could not find `artichoke` in https://github.com/artichoke/artichoke?branch=trunk with version `=0.1.0-pre.0`
```
@lopopolo
Copy link
Member Author

@lopopolo lopopolo added the A-build Area: CI build infrastructure. label May 27, 2025
@lopopolo lopopolo merged commit 8e5eed7 into trunk May 27, 2025
15 checks passed
@lopopolo lopopolo deleted the dev/lopopolo-rollup branch May 27, 2025 02:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
A-build Area: CI build infrastructure. A-deps Area: Source and library dependencies.
Development

Successfully merging this pull request may close these issues.

1 participant