Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

build(deps): bump the gh-actions group across 1 directory with 5 updates #293

Merged
merged 1 commit into from
Dec 10, 2024

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 10, 2024

Bumps the gh-actions group with 5 updates in the / directory:

Package From To
conda-incubator/setup-miniconda 2 3
webfactory/ssh-agent 0.4.1 0.9.0
JamesIves/github-pages-deploy-action 3.7.1 4.7.2
codecov/codecov-action 3 5
actions/labeler 4 5

Updates conda-incubator/setup-miniconda from 2 to 3

Release notes

Sourced from conda-incubator/setup-miniconda's releases.

Version 3.0.0

Features

  • #308 Update to node20
  • #291 Add conda-solver option (defaults to libmamba)

Fixes

  • #299 Fix condaBasePath when useBundled is false, and there's no pre-existing conda

Documentation

  • #309 Switch to main branch based development
  • #313 Specify team conda-incubator/setup-miniconda as codeowners
  • #318 README: update actions in examples, add security section, similar actions

Tasks and Maintenance

  • #307 Run dependabot against main branch and also update node packages
  • #311 Bump actions/checkout from 2 to 4
  • #310 Bump actions/cache from 1 to 3
  • #314 Strip/update dependencies
  • #315 Split lint into check and build, switch from npm install to npm ci
  • #317 Bump normalize-url from 4.5.1 to 8.0.0
  • #316 Faster workflow response / saving resources via timeout/concurrency policy

#308: conda-incubator/setup-miniconda#308 #291: conda-incubator/setup-miniconda#291 #299: conda-incubator/setup-miniconda#299 #309: conda-incubator/setup-miniconda#309 #313: conda-incubator/setup-miniconda#313 #318: conda-incubator/setup-miniconda#318 #307: conda-incubator/setup-miniconda#307 #311: conda-incubator/setup-miniconda#311 #310: conda-incubator/setup-miniconda#310 #314: conda-incubator/setup-miniconda#314 #315: conda-incubator/setup-miniconda#315 #317: conda-incubator/setup-miniconda#317 #316: conda-incubator/setup-miniconda#316

New Contributors

Full Changelog: conda-incubator/setup-miniconda@v2...v3.0.0

Version 2.3.0

Documentation

  • #263 Update links to GitHub shell docs

... (truncated)

Changelog

Sourced from conda-incubator/setup-miniconda's changelog.

v3.1.0 (2024-10-31)

Features

  • #367: Add conda-remove-defaults setting to remove the defaults channel if added implicitly
  • #342: Add installation-dir to customize where the installers are installed to
  • #328: Make conda's cache configurable via pkgs-dirs

Fixes

  • #360: Start deprecation of miniforge-variant: Mambaforge
  • #362: Ignore conda cygpath warning
  • #368: Address mamba v2 incompatibilities
  • #350: set CONDA environment variable regardless of useBundled option

Tasks and Maintenance

  • #348: Bump conda-incubator/setup-miniconda from 3.0.3 to 3.0.4
  • #353: Bump semver and @​types/semver
  • #356: Bump braces from 3.0.2 to 3.0.3
  • #359: Bump semver from 7.6.2 to 7.6.3
  • #370: Bump @​actions/core from 1.10.1 to 1.11.1

#360: conda-incubator/setup-miniconda#360 #362: conda-incubator/setup-miniconda#362 #368: conda-incubator/setup-miniconda#368 #367: conda-incubator/setup-miniconda#367 #342: conda-incubator/setup-miniconda#342 #328: conda-incubator/setup-miniconda#328 #350: conda-incubator/setup-miniconda#350 #348: conda-incubator/setup-miniconda#348 #353: conda-incubator/setup-miniconda#353 #356: conda-incubator/setup-miniconda#356 #359: conda-incubator/setup-miniconda#359 #370: conda-incubator/setup-miniconda#370

[v3.0.4] (2024-04-25)

Fixes

  • #345 Fix running on macOS 13 on Intel since the runners no longer provide miniconda by default.

Tasks and Maintenance

  • #337 Bump conda-incubator/setup-miniconda from 3.0.2 to 3.0.3 (#337)
  • #338 Bump normalize-url from 8.0.0 to 8.0.1

... (truncated)

Commits
  • d2e6a04 Update changelog for 3.1.0 (#373)
  • 0e14962 Bump @​actions/core from 1.10.1 to 1.11.1 (#370)
  • 4a3d80f Bump semver from 7.6.2 to 7.6.3 (#359)
  • 27f1202 set CONDA environment variable regardless of useBundled option (#350)
  • 1a6b55c Make conda’s package directories configurable (#328)
  • 6225267 Add installation-dir to customize where the installers are installed to (#342)
  • 65da104 Add 'conda-remove-defaults' setting and support 'nodefaults' as a keyword cha...
  • 899c78d Address mamba v2 incompatibilities (#368)
  • 8f65dda Ignore conda cygpath warning (#362)
  • e5293c8 Start deprecation of miniforge-variant: Mambaforge (#360)
  • Additional commits viewable in compare view

Updates webfactory/ssh-agent from 0.4.1 to 0.9.0

Release notes

Sourced from webfactory/ssh-agent's releases.

Update to node20

This release updates the action to run on Node.js v20. When you're running on GitHub hosted runners, just go ahead and update. When you're using self-hosted runners, please make sure you have Node.js v20 installed before updating from v0.8.0 to v0.9.0 of this action.

New Contributors

Full Changelog: webfactory/ssh-agent@v0.8.0...v0.9.0

What's Changed

New Contributors

Full Changelog: webfactory/ssh-agent@v0.8.0...v0.9.0

SSH host keys no longer managed – read below 👇

Starting with this release, this action no longer writes GitHub's SSH host keys into the known_hosts SSH config file upon start.

GitHub changed their host keys on short notice this morning, see https://github.blog/2023-03-23-we-updated-our-rsa-ssh-host-key/. We took this as an opportunity to stop maintaining GH SSH keys in the code shipped with this action (#171).

What you need to do:

Other code changes in this release

New Contributors

Full Changelog: webfactory/ssh-agent@v0.7.0...v0.8.0

... (truncated)

Changelog

Sourced from webfactory/ssh-agent's changelog.

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[Unreleased]

v0.7.0 [2022-10-19]

Added

  • Add the log-public-key input that can be used to turn off logging key identities (#122)

Fixed

  • Fix path to git binary on Windows, assuming GitHub-hosted runners (#136, #137)
  • Fix a nonsensical log message (#139)

v0.6.0 [2022-10-19]

Changed

v0.5.4 [2021-11-21]

Fixed

  • Update changed GitHub Host Keys (#102, #101)

Changed

  • Various documentation (README) improvements and additions
  • Change logging to more precisely state that public keys are being printed

v0.5.3 [2021-06-11]

Fixed

  • Fixed cleanup phase to really terminate the ssh-agent (#80)
  • Fix termination of ssh-agent also on workflow failure (#79)

Changed

  • Various documentation (README) improvements and additions

v0.5.2 [2021-04-07]

... (truncated)

Commits
  • dc588b6 Update version numbers in the README examples
  • 204eb35 Bump to node20 (#201)
  • 9f6f312 chore: update all versions of actions/checkout to v4 (#199)
  • 2e59dd7 Remove outdated claim from README (#206)
  • fd34b8d Update README.md to reflect latest version (#196)
  • d4b9b8f Stop adding GitHub SSH keys (#171)
  • ea17a05 Add missing semicolons (#159)
  • 9fbc246 Clarify usage for Docker build processes, especially with deployment keys (#145)
  • 6f828cc Allow the user to override the commands for git, ssh-agent, and ssh-add...
  • 209e2d7 Fix a typo in the README.md (#146)
  • Additional commits viewable in compare view

Updates JamesIves/github-pages-deploy-action from 3.7.1 to 4.7.2

Release notes

Sourced from JamesIves/github-pages-deploy-action's releases.

v4.7.2

What's Changed

Bug Fixes 🐝

Build 🔧

Full Changelog: JamesIves/github-pages-deploy-action@v4.7.1...v4.7.2

v4.7.1

What's Changed

Features ✨

New Contributors

Full Changelog: JamesIves/github-pages-deploy-action@v4.6.6...v4.7.1

v4.7.0

What's Changed

Features ✨

Build 🔧

New Contributors

Full Changelog: JamesIves/github-pages-deploy-action@v4.6.6...v4.7.0

v4.6.9

What's Changed

Dependencies 🤖

  • chore(deps): mass bump dependencies

... (truncated)

Commits
  • 15de0f0 Deploy Production Code for Commit d5dce9b90a6d5a8ff3cf3d2d8e6762aeddcc8026 🚀
  • d5dce9b Merge branch 'dev' into releases/v4
  • 389b85f fix: enable rsync mkpath to be backwards compatible (#1757)
  • 12622a2 build(deps): bump the misc group across 1 directory with 2 updates (#1756)
  • 588d83f Release 4.7.1 📣
  • dc18a3c Deploy Production Code for Commit 9716147417155c726a988252213c1286fdef81b3 🚀
  • 9716147 Merge branch 'dev' into releases/v4
  • d556f38 Update integration.yml
  • ceec23c Update integration.yml
  • 6418ff1 build(deps): bump the misc group across 1 directory with 6 updates (#1749)
  • Additional commits viewable in compare view

Updates codecov/codecov-action from 3 to 5

Release notes

Sourced from codecov/codecov-action's releases.

v5.0.0

v5 Release

v5 of the Codecov GitHub Action will use the Codecov Wrapper to encapsulate the CLI. This will help ensure that the Action gets updates quicker.

Migration Guide

The v5 release also coincides with the opt-out feature for tokens for public repositories. In the Global Upload Token section of the settings page of an organization in codecov.io, you can set the ability for Codecov to receive a coverage reports from any source. This will allow contributors or other members of a repository to upload without needing access to the Codecov token. For more details see how to upload without a token.

[!WARNING]
The following arguments have been changed

  • file (this has been deprecated in favor of files)
  • plugin (this has been deprecated in favor of plugins)

The following arguments have been added:

  • binary
  • gcov_args
  • gcov_executable
  • gcov_ignore
  • gcov_include
  • report_type
  • skip_validation
  • swift_project

You can see their usage in the action.yml file.

What's Changed

... (truncated)

Changelog

Sourced from codecov/codecov-action's changelog.

v5 Release

v5 of the Codecov GitHub Action will use the Codecov Wrapper to encapsulate the CLI. This will help ensure that the Action gets updates quicker.

Migration Guide

The v5 release also coincides with the opt-out feature for tokens for public repositories. In the Global Upload Token section of the settings page of an organization in codecov.io, you can set the ability for Codecov to receive a coverage reports from any source. This will allow contributors or other members of a repository to upload without needing access to the Codecov token. For more details see how to upload without a token.

[!WARNING] The following arguments have been changed

  • file (this has been deprecated in favor of files)
  • plugin (this has been deprecated in favor of plugins)

The following arguments have been added:

  • binary
  • gcov_args
  • gcov_executable
  • gcov_ignore
  • gcov_include
  • report_type
  • skip_validation
  • swift_project

You can see their usage in the action.yml file.

What's Changed

... (truncated)

Commits

Updates actions/labeler from 4 to 5

Release notes

Sourced from actions/labeler's releases.

v5.0.0

What's Changed

This release contains the following breaking changes:

  1. The ability to apply labels based on the names of base and/or head branches was added (#186 and #54). The match object for changed files was expanded with new combinations in order to make it more intuitive and flexible (#423 and #101). As a result, the configuration file structure was significantly redesigned and is not compatible with the structure of the previous version. Please read the action documentation to find out how to adapt your configuration files for use with the new action version.

  2. The bug related to the sync-labels input was fixed (#112). Now the input value is read correctly.

  3. By default, dot input is set to true. Now, paths starting with a dot (e.g. .github) are matched by default.

  4. Version 5 of this action updated the runtime to Node.js 20. All scripts are now run with Node.js 20 instead of Node.js 16 and are affected by any breaking changes between Node.js 16 and 20.

For more information, please read the action documentation.

New Contributors

Full Changelog: actions/labeler@v4...v5.0.0

v5.0.0-beta.1

What's Changed

In scope of this beta release, the structure of the configuration file (.github/labeler.yml) was changed from

LabelName:
- any:
  - changed-files: ['list', 'of', 'globs']
  - base-branch: ['list', 'of', 'regexps']
  - head-branch: ['list', 'of', 'regexps']
- all:
  - changed-files: ['list', 'of', 'globs']
  - base-branch: ['list', 'of', 'regexps']
  - head-branch: ['list', 'of', 'regexps']

to

LabelName:
- any:
  - changed-files: 
    - AnyGlobToAnyFile: ['list', 'of', 'globs']
    - AnyGlobToAllFiles: ['list', 'of', 'globs']
    - AllGlobsToAnyFile: ['list', 'of', 'globs']
    - AllGlobsToAllFiles: ['list', 'of', 'globs']
  - base-branch: ['list', 'of', 'regexps']
  - head-branch: ['list', 'of', 'regexps']
- all:
  - changed-files:
    - AnyGlobToAnyFile: ['list', 'of', 'globs']
    - AnyGlobToAllFiles: ['list', 'of', 'globs']
    - AllGlobsToAnyFile: ['list', 'of', 'globs']
</tr></table> 

... (truncated)

Commits
  • 8558fd7 Merge pull request #709 from actions/v5.0.0-beta
  • 000ca75 Merge pull request #700 from MaksimZhukov/apply-suggestions-and-update-docume...
  • cb66c2f Update dist
  • 9181355 Apply suggestions for the beta vesrion and update the documentation
  • efe4c1c Merge pull request #699 from MaksimZhukov/update-node-runtime-and-dependencies
  • c0957ad Run Prettier
  • 8dc8d18 Update Node.js version in reusable workflows
  • d0d0bbe Update documentation
  • 1375c42 5.0.0
  • ab7411e Change version of Node.js runtime to node20
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the gh-actions group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [conda-incubator/setup-miniconda](https://github.com/conda-incubator/setup-miniconda) | `2` | `3` |
| [webfactory/ssh-agent](https://github.com/webfactory/ssh-agent) | `0.4.1` | `0.9.0` |
| [JamesIves/github-pages-deploy-action](https://github.com/jamesives/github-pages-deploy-action) | `3.7.1` | `4.7.2` |
| [codecov/codecov-action](https://github.com/codecov/codecov-action) | `3` | `5` |
| [actions/labeler](https://github.com/actions/labeler) | `4` | `5` |



Updates `conda-incubator/setup-miniconda` from 2 to 3
- [Release notes](https://github.com/conda-incubator/setup-miniconda/releases)
- [Changelog](https://github.com/conda-incubator/setup-miniconda/blob/main/CHANGELOG.md)
- [Commits](conda-incubator/setup-miniconda@v2...v3)

Updates `webfactory/ssh-agent` from 0.4.1 to 0.9.0
- [Release notes](https://github.com/webfactory/ssh-agent/releases)
- [Changelog](https://github.com/webfactory/ssh-agent/blob/master/CHANGELOG.md)
- [Commits](webfactory/ssh-agent@v0.4.1...v0.9.0)

Updates `JamesIves/github-pages-deploy-action` from 3.7.1 to 4.7.2
- [Release notes](https://github.com/jamesives/github-pages-deploy-action/releases)
- [Commits](JamesIves/github-pages-deploy-action@3.7.1...v4.7.2)

Updates `codecov/codecov-action` from 3 to 5
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](codecov/codecov-action@v3...v5)

Updates `actions/labeler` from 4 to 5
- [Release notes](https://github.com/actions/labeler/releases)
- [Commits](actions/labeler@v4...v5)

---
updated-dependencies:
- dependency-name: conda-incubator/setup-miniconda
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gh-actions
- dependency-name: webfactory/ssh-agent
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gh-actions
- dependency-name: JamesIves/github-pages-deploy-action
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gh-actions
- dependency-name: codecov/codecov-action
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gh-actions
- dependency-name: actions/labeler
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gh-actions
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Dec 10, 2024
@dependabot dependabot bot requested a review from frgfm December 10, 2024 18:34
@frgfm frgfm merged commit 6db783b into main Dec 10, 2024
28 of 32 checks passed
@frgfm frgfm deleted the dependabot/github_actions/gh-actions-75af939dcb branch December 10, 2024 18:37
Copy link

codecov bot commented Dec 10, 2024

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 97.36%. Comparing base (e1182ef) to head (2304519).
Report is 1 commits behind head on main.

Additional details and impacted files

Impacted file tree graph

@@           Coverage Diff           @@
##             main     #293   +/-   ##
=======================================
  Coverage   97.36%   97.36%           
=======================================
  Files           8        8           
  Lines         455      455           
=======================================
  Hits          443      443           
  Misses         12       12           

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code topic: ci type: misc
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant