chore(deps): bump the github-actions group with 22 updates #531
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
Bumps the github-actions group with 22 updates: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `2` | `4` | | [peter-evans/create-or-update-comment](https://github.com/peter-evans/create-or-update-comment) | `3` | `4` | | [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) | `2` | `3` | | [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `2` | `3` | | [docker/metadata-action](https://github.com/docker/metadata-action) | `4.6.0` | `5.5.1` | | [docker/login-action](https://github.com/docker/login-action) | `2` | `3` | | [docker/build-push-action](https://github.com/docker/build-push-action) | `4` | `5` | | [actions/setup-go](https://github.com/actions/setup-go) | `4` | `5` | | [magnetikonline/action-golang-cache](https://github.com/magnetikonline/action-golang-cache) | `4` | `5` | | [codecov/codecov-action](https://github.com/codecov/codecov-action) | `3` | `4` | | [contributor-assistant/github-action](https://github.com/contributor-assistant/github-action) | `2.3.0` | `2.3.2` | | [github/codeql-action](https://github.com/github/codeql-action) | `2` | `3` | | [actions/dependency-review-action](https://github.com/actions/dependency-review-action) | `3` | `4` | | [dessant/lock-threads](https://github.com/dessant/lock-threads) | `4` | `5` | | [alex-page/github-project-automation-plus](https://github.com/alex-page/github-project-automation-plus) | `0.8.3` | `0.9.0` | | [actions/cache](https://github.com/actions/cache) | `3` | `4` | | [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) | `3.1.1` | `3.5.0` | | [anchore/sbom-action](https://github.com/anchore/sbom-action) | `0.14.3` | `0.15.11` | | [crazy-max/ghaction-upx](https://github.com/crazy-max/ghaction-upx) | `2` | `3` | | [cachix/install-nix-action](https://github.com/cachix/install-nix-action) | `22` | `26` | | [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) | `4` | `5` | | [actions/stale](https://github.com/actions/stale) | `8` | `9` | Updates `actions/checkout` from 2 to 4 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@v2...v4) Updates `peter-evans/create-or-update-comment` from 3 to 4 - [Release notes](https://github.com/peter-evans/create-or-update-comment/releases) - [Commits](peter-evans/create-or-update-comment@v3...v4) Updates `docker/setup-qemu-action` from 2 to 3 - [Release notes](https://github.com/docker/setup-qemu-action/releases) - [Commits](docker/setup-qemu-action@v2...v3) Updates `docker/setup-buildx-action` from 2 to 3 - [Release notes](https://github.com/docker/setup-buildx-action/releases) - [Commits](docker/setup-buildx-action@v2...v3) Updates `docker/metadata-action` from 4.6.0 to 5.5.1 - [Release notes](https://github.com/docker/metadata-action/releases) - [Upgrade guide](https://github.com/docker/metadata-action/blob/master/UPGRADE.md) - [Commits](docker/metadata-action@v4.6.0...v5.5.1) Updates `docker/login-action` from 2 to 3 - [Release notes](https://github.com/docker/login-action/releases) - [Commits](docker/login-action@v2...v3) Updates `docker/build-push-action` from 4 to 5 - [Release notes](https://github.com/docker/build-push-action/releases) - [Commits](docker/build-push-action@v4...v5) Updates `actions/setup-go` from 4 to 5 - [Release notes](https://github.com/actions/setup-go/releases) - [Commits](actions/setup-go@v4...v5) Updates `magnetikonline/action-golang-cache` from 4 to 5 - [Release notes](https://github.com/magnetikonline/action-golang-cache/releases) - [Commits](magnetikonline/action-golang-cache@v4...v5) Updates `codecov/codecov-action` from 3 to 4 - [Release notes](https://github.com/codecov/codecov-action/releases) - [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md) - [Commits](codecov/codecov-action@v3...v4) Updates `contributor-assistant/github-action` from 2.3.0 to 2.3.2 - [Release notes](https://github.com/contributor-assistant/github-action/releases) - [Commits](contributor-assistant/github-action@v2.3.0...v2.3.2) Updates `github/codeql-action` from 2 to 3 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@v2...v3) Updates `actions/dependency-review-action` from 3 to 4 - [Release notes](https://github.com/actions/dependency-review-action/releases) - [Commits](actions/dependency-review-action@v3...v4) Updates `dessant/lock-threads` from 4 to 5 - [Release notes](https://github.com/dessant/lock-threads/releases) - [Changelog](https://github.com/dessant/lock-threads/blob/main/CHANGELOG.md) - [Commits](dessant/lock-threads@v4...v5) Updates `alex-page/github-project-automation-plus` from 0.8.3 to 0.9.0 - [Release notes](https://github.com/alex-page/github-project-automation-plus/releases) - [Commits](alex-page/github-project-automation-plus@v0.8.3...v0.9.0) Updates `actions/cache` from 3 to 4 - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](actions/cache@v3...v4) Updates `sigstore/cosign-installer` from 3.1.1 to 3.5.0 - [Release notes](https://github.com/sigstore/cosign-installer/releases) - [Commits](sigstore/cosign-installer@v3.1.1...v3.5.0) Updates `anchore/sbom-action` from 0.14.3 to 0.15.11 - [Release notes](https://github.com/anchore/sbom-action/releases) - [Commits](anchore/sbom-action@v0.14.3...v0.15.11) Updates `crazy-max/ghaction-upx` from 2 to 3 - [Release notes](https://github.com/crazy-max/ghaction-upx/releases) - [Commits](crazy-max/ghaction-upx@v2...v3) Updates `cachix/install-nix-action` from 22 to 26 - [Release notes](https://github.com/cachix/install-nix-action/releases) - [Commits](cachix/install-nix-action@v22...v26) Updates `goreleaser/goreleaser-action` from 4 to 5 - [Release notes](https://github.com/goreleaser/goreleaser-action/releases) - [Commits](goreleaser/goreleaser-action@v4...v5) Updates `actions/stale` from 8 to 9 - [Release notes](https://github.com/actions/stale/releases) - [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md) - [Commits](actions/stale@v8...v9) --- updated-dependencies: - dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: peter-evans/create-or-update-comment dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: docker/setup-qemu-action dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: docker/setup-buildx-action dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: docker/metadata-action dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: docker/login-action dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: docker/build-push-action dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/setup-go dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: magnetikonline/action-golang-cache dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: codecov/codecov-action dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: contributor-assistant/github-action dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/dependency-review-action dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: dessant/lock-threads dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: alex-page/github-project-automation-plus dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: actions/cache dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: sigstore/cosign-installer dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: anchore/sbom-action dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: crazy-max/ghaction-upx dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: cachix/install-nix-action dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: goreleaser/goreleaser-action dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/stale dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
requested review from
skiffer-git,
withchao and
a team
as code owners
dependabot
bot
added
the
dependencies
pull-request-size
bot
added
the
size/L
|
Superseded by #535. |
dependabot
bot
deleted the
dependabot/github_actions/github-actions-242c439f50
branch
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the github-actions group with 22 updates:
243423234.6.05.5.123454545342.3.02.3.22334450.8.30.9.0343.1.13.5.00.14.30.15.112322264589Updates
actions/checkoutfrom 2 to 4Release notes
Sourced from actions/checkout's releases.
... (truncated)
Changelog
Sourced from actions/checkout's changelog.
... (truncated)
Commits
0ad4b8fPrep Release v4.1.4 (#1704)43045aeDisableextensions.worktreeConfigwhen disablingsparse-checkout(#1692)37b0821Bump the minor-actions-dependencies group with 2 updates (#1693)9839dc1Add dependabot config (#1688)9b4c13bBump word-wrap from 1.2.3 to 1.2.5 (#1643)1d96c77Add SSH user parameter (#1685)cd7d8d6Check git version before attempting to disablesparse-checkout(#1656)8410ad0Updateactions/checkoutversion inupdate-main-version.yml(#1650)9bb5618Prep for release of v4.1.2 (#1649)8eb1f6aBump@babel/traversefrom 7.20.5 to 7.24.0 (#1642)Updates
peter-evans/create-or-update-commentfrom 3 to 4Release notes
Sourced from peter-evans/create-or-update-comment's releases.
... (truncated)
Commits
71345befeat: update runtime to node 20 (#306)d41bfe3build(deps-dev): bump prettier from 3.2.3 to 3.2.4 (#305)73b4b9ebuild(deps-dev): bump@types/nodefrom 18.19.7 to 18.19.8 (#304)b865facbuild(deps-dev): bump@types/nodefrom 18.19.6 to 18.19.7 (#303)52b668abuild(deps-dev): bump eslint-plugin-jest from 27.6.1 to 27.6.3 (#302)974f56abuild(deps-dev): bump prettier from 3.1.1 to 3.2.3 (#301)2cbfe8bbuild(deps-dev): bump@types/nodefrom 18.19.4 to 18.19.6 (#300)761872abuild(deps-dev): bump eslint-plugin-prettier from 5.1.2 to 5.1.3 (#299)72c3238build(deps-dev): bump@types/nodefrom 18.19.3 to 18.19.4 (#298)07daf7bbuild(deps-dev): bump eslint-plugin-jest from 27.6.0 to 27.6.1 (#297)Updates
docker/setup-qemu-actionfrom 2 to 3Release notes
Sourced from docker/setup-qemu-action's releases.
Commits
6882732Merge pull request #103 from docker/dependabot/npm_and_yarn/actions/core-1.10.1183f4afchore: update generated contentf174935build(deps): bump@actions/corefrom 1.10.0 to 1.10.12e423ebMerge pull request #89 from docker/dependabot/npm_and_yarn/semver-6.3.1ecc406aBump semver from 6.3.0 to 6.3.112dec5eMerge pull request #102 from crazy-max/update-node20c29b312chore: node 20 as default runtime34ae628chore: update generated content1f3d2e1chore: fix author in package.json277dbe8vendor: bump@docker/actions-toolkitfrom 0.3.0 to 0.12.0Updates
docker/setup-buildx-actionfrom 2 to 3Release notes
Sourced from docker/setup-buildx-action's releases.
... (truncated)
Commits
d70bba7Merge pull request #307 from crazy-max/bump-toolkit7638634chore: update generated contentc68420fbump@docker/actions-toolkitfrom 0.19.0 to 0.20.02b51285Merge pull request #306 from docker/dependabot/npm_and_yarn/docker/actions-to...0f00370chore: update generated content11c9683build(deps): bump@docker/actions-toolkitfrom 0.18.0 to 0.19.056a16b8Merge pull request #303 from crazy-max/fix-inputsc23f46echore: update generated contentf876da6rename and align config inputsb7cf918Merge pull request #304 from crazy-max/rm-docs-dirUpdates
docker/metadata-actionfrom 4.6.0 to 5.5.1Release notes
Sourced from docker/metadata-action's releases.
Upgrade guide
Sourced from docker/metadata-action's upgrade guide.
... (truncated)
Commits
8e5442cMerge pull request #382 from crazy-max/dont-set-cwd-prefixeda41b7chore: update generated content388c08fdon't set cwd:// prefix for local bake filesdbef880Merge pull request #374 from docker/dependabot/npm_and_yarn/moment-timezone-0...b73e7a7chore: update generated contentb9fba69chore(deps): Bump moment-timezone from 0.5.43 to 0.5.44ac82374Merge pull request #373 from docker/dependabot/npm_and_yarn/moment-2.30.1c92519achore: update generated content3b4179dchore(deps): Bump moment from 2.29.4 to 2.30.10784993Merge pull request #371 from docker/dependabot/npm_and_yarn/docker/actions-to...Updates
docker/login-actionfrom 2 to 3Release notes
Sourced from docker/login-action's releases.
Commits
e92390cMerge pull request #685 from docker/dependabot/npm_and_yarn/aws-sdk-dependenc...1e752e2chore: update generated content51c6097build(deps): bump the aws-sdk-dependencies group with 2 updates8f079fbMerge pull request #676 from docker/dependabot/npm_and_yarn/proxy-agent-depen...16fa768chore: update generated content46d1619build(deps): bump the proxy-agent-dependencies group with 2 updates8c291c5Merge pull request #682 from docker/dependabot/npm_and_yarn/docker/actions-to...ec726f4build(deps): bump@docker/actions-toolkitfrom 0.14.0 to 0.18.05139682Merge pull request #677 from docker/dependabot/npm_and_yarn/undici-5.28.36d4e2bachore: update generated contentUpdates
docker/build-push-actionfrom 4 to 5Release notes
Sourced from docker/build-push-action's releases.