Bump the github-actions group with 8 updates #4
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
Bumps the github-actions group with 8 updates: | Package | From | To | | --- | --- | --- | | [actions/download-artifact](https://github.com/actions/download-artifact) | `3` | `4` | | [tj-actions/changed-files](https://github.com/tj-actions/changed-files) | `39` | `44` | | [actions/setup-python](https://github.com/actions/setup-python) | `4` | `5` | | [actions/github-script](https://github.com/actions/github-script) | `3` | `7` | | [actions/setup-node](https://github.com/actions/setup-node) | `3` | `4` | | [actions/labeler](https://github.com/actions/labeler) | `4` | `5` | | [ossf/scorecard-action](https://github.com/ossf/scorecard-action) | `2.3.1` | `2.3.3` | | [github/codeql-action](https://github.com/github/codeql-action) | `2.2.4` | `3.25.7` | Updates `actions/download-artifact` from 3 to 4 - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](actions/download-artifact@v3...v4) Updates `tj-actions/changed-files` from 39 to 44 - [Release notes](https://github.com/tj-actions/changed-files/releases) - [Changelog](https://github.com/tj-actions/changed-files/blob/main/HISTORY.md) - [Commits](tj-actions/changed-files@v39...v44) Updates `actions/setup-python` from 4 to 5 - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](actions/setup-python@v4...v5) Updates `actions/github-script` from 3 to 7 - [Release notes](https://github.com/actions/github-script/releases) - [Commits](actions/github-script@v3...v7) Updates `actions/setup-node` from 3 to 4 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](actions/setup-node@v3...v4) Updates `actions/labeler` from 4 to 5 - [Release notes](https://github.com/actions/labeler/releases) - [Commits](actions/labeler@v4...v5) Updates `ossf/scorecard-action` from 2.3.1 to 2.3.3 - [Release notes](https://github.com/ossf/scorecard-action/releases) - [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md) - [Commits](ossf/scorecard-action@0864cf1...dc50aa9) Updates `github/codeql-action` from 2.2.4 to 3.25.7 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@17573ee...f079b84) --- updated-dependencies: - dependency-name: actions/download-artifact dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: tj-actions/changed-files dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/setup-python dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/github-script dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/setup-node dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/labeler dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: ossf/scorecard-action dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
dependencies
|
Unable to locate .performanceTestingBot config file |
|
Seems you are using me but didn't get OPENAI_API_KEY seted in Variables/Secrets for this repo. you could follow readme for more information |
|
Processing PR updates... |
|
Thanks @dependabot[bot] for opening this PR! For COLLABORATOR only :
|
|
Check out the playback for this Pull Request here. |
![gitginie[bot]](https://avatars.githubusercontent.com/in/712912?s=60&v=4){kind=small}
There was a problem hiding this comment.
@dependabot[bot]
Thank you for your contribution to this repository! We appreciate your effort in opening pull request.
Happy coding!
|
Important Review skippedBot user detected. To trigger a single review, invoke the You can disable this status message by setting the Thank you for using CodeRabbit. We offer it for free to the OSS community and would appreciate your support in helping us grow. If you find it useful, would you consider giving us a shout-out on your favorite social media? TipsChatThere are 3 ways to chat with CodeRabbit:
Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments. CodeRabbit Commands (invoked as PR comments)
Additionally, you can add CodeRabbit Configration File (
|
labels-and-badges
bot
added
NO JIRA
|
PR Details of @dependabot[bot] in apple-llvm-project :
|
|
Looks like these dependencies are updatable in another way, so this is no longer needed. |
dependabot
bot
deleted the
dependabot/github_actions/github-actions-b20a2a61d9
branch
There was a problem hiding this comment.
@dependabot[bot]
Thank you for your contribution to this repository! We appreciate your effort in closing pull request.
Happy coding!
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the github-actions group with 8 updates:
343944453734452.3.12.3.32.2.43.25.7Updates
actions/download-artifactfrom 3 to 4Release notes
Sourced from actions/download-artifact's releases.
Commits
65a9edcMerge pull request #325 from bethanyj28/mainfdd1595licensedc13dba1update@actions/artifactdependency0daa75eMerge pull request #324 from actions/eggyhead/use-artifact-v2.1.69c19ed7Merge branch 'main' into eggyhead/use-artifact-v2.1.63d3ea87updating license89af5dbupdating artifact package v2.1.6b4aefffMerge pull request #323 from actions/eggyhead/update-artifact-v2158caf195package lock updated7a2ec4updating package versionUpdates
tj-actions/changed-filesfrom 39 to 44Release notes
Sourced from tj-actions/changed-files's releases.
... (truncated)
Changelog
Sourced from tj-actions/changed-files's changelog.
... (truncated)
Commits
d6babd6fix: warning with fetch_missing_history_max_retries using REST API (#2114)0a79e54chore(deps): update dependency@types/nodeto v20.12.139d06a2achore(deps): update dependency ts-jest to v29.1.47e8e88bchore(deps): update typescript-eslint monorepo to v7.11.0b510737chore(deps): lock file maintenance2e70979chore(deps): lock file maintenance625929dUpgraded to v44.5.1 (#2108)03334d0fix: bug detecting previous tag when workflow is rerun (#2107)8a0655fAdded missing changes and modified dist assets.98e187efix(deps): update dependency micromatch to v4.0.7Updates
actions/setup-pythonfrom 4 to 5Release notes
Sourced from actions/setup-python's releases.
... (truncated)
Commits
82c7e63Documentation changes for avoiding rate limit issues on GHES (#835)10aa35afeat: fallback to raw endpoint for manifest when rate limit is reached (#766)9a7ac94Bump undici from 5.27.2 to 5.28.3 (#817)871daa9Fix the "Specifying multiple Python/PyPy versions" link (#782)2f07895Fix broken README.md link (#793)e9d6f99Replace setup-python@v4 by setup-python@v5 in README (#776)0a5c615Update action to node20 (#772)0ae5836Add example of GraalPy to docs (#773)b64ffcaupdate actions/checkout to v4 (#761)8d28961Examples now use checkout@v4 (#738)Updates
actions/github-scriptfrom 3 to 7Release notes
Sourced from actions/github-script's releases.
... (truncated)
Commits
60a0d83Merge pull request #440 from actions/joshmgross/v7.0.1b7fb200Update version to 7.0.112e22edMerge pull request #439 from actions/joshmgross/avoid-setting-base-urld319f8fAvoid settingbaseUrlto undefined when input is not providede69ef54Merge pull request #425 from actions/joshmgross/node-20ee0914bUpdate licensesd6fc56fUse@types/nodefor Node 20384d6cfFix quotations in tests8472492Only validate GraphQLpreviews84903f5Removenode-fetchfrom typeUpdates
actions/setup-nodefrom 3 to 4Release notes
Sourced from actions/setup-node's releases.
... (truncated)
Commits
60edb5dAdd support for arm64 Windows (#927)d86ebcdAdd support forvolta.extends(#921)b39b52dFix node-version-file interprets entire package.json as a version (#865)7247617Addpackage.jsontonode-version-filelist of examples. (#879)f3ec4caFix README.md (#898)ec97f37Add fix for cache (#917)5ef044fUpdate reusable workflows to use Node.js v20 (#889)c45882aupdate to setup-node@v4 in docs (#884)ee36e8bIgnore engines check in Yarn 1 e2e-cache tests (#882)8f152deUpdate actions/checkout for documentation and yaml (#876)Updates
actions/labelerfrom 4 to 5Release notes
Sourced from actions/labeler's releases.
... (truncated)
Commits
8558fd7Merge pull request #709 from actions/v5.0.0-beta000ca75Merge pull request #700 from MaksimZhukov/apply-suggestions-and-update-docume...cb66c2fUpdate dist9181355Apply suggestions for the beta vesrion and update the documentationefe4c1cMerge pull request #699 from MaksimZhukov/update-node-runtime-and-dependenciesc0957adRun Prettier8dc8d18Update Node.js version in reusable workflowsd0d0bbeUpdate documentation1375c425.0.0ab7411eChange version of Node.js runtime to node20Updates
ossf/scorecard-actionfrom 2.3.1 to 2.3.3Release notes
Sourced from ossf/scorecard-action's releases.
Commits
dc50aa9🌱 Bump docker tag for v2.3.3 release (#1368)8ff5700🌱 Bump github.com/ossf/scorecard/v5 from v5.0.0-rc2 to v5.0.0-rc2.0....8ba5e73update api links to new scorecard.dev site (#1376)92ddde3Bump github.com/ossf/scorecard/v5 from v5.0.0-rc1 to v5.0.0-rc2 (#1374)6c55905🌱 Bump golang.org/x/net from 0.24.0 to 0.25.0 (#1373)09bb953🌱 Bump distroless/base in the docker-images group (#1372)1511e13🌱 Bump the github-actions group across 1 directory with 6 updates (#...df66cd8🌱 Bump the docker-images group with 2 updates (#1370)fad9a3c🌱 Bump distroless/base in the docker-images group (#1364)1e01a30🌱 Bump the github-actions group with 3 updates (#1365)Updates
github/codeql-actionfrom 2.2.4 to 3.25.7Release notes
Sourced from github/codeql-action's releases.
... (truncated)
Changelog
Sourced from github/codeql-action's changelog.