Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Build(deps): Bump the actions group with 8 updates #808

Merged
merged 1 commit into from
Feb 29, 2024

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 29, 2024

Bumps the actions group with 8 updates:

Package From To
actions/checkout 2 4
peaceiris/actions-gh-pages 3.8.0 3.9.3
styfle/cancel-workflow-action 0.9.1 0.12.1
actions/setup-python 4 5
pre-commit/action 3.0.0 3.0.1
actions/upload-artifact 3 4
actions/download-artifact 3 4
pypa/gh-action-pypi-publish 1.8.10 1.8.12

Updates actions/checkout from 2 to 4

Release notes

Sourced from actions/checkout's releases.

v4.0.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v3...v4.0.0

v3.6.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v3.5.3...v3.6.0

v3.5.3

What's Changed

New Contributors

Full Changelog: actions/checkout@v3...v3.5.3

v3.5.2

What's Changed

Full Changelog: actions/checkout@v3.5.1...v3.5.2

v3.5.1

What's Changed

New Contributors

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

v4.1.0

v4.0.0

v3.6.0

v3.5.3

v3.5.2

v3.5.1

v3.5.0

v3.4.0

v3.3.0

v3.2.0

v3.1.0

v3.0.2

... (truncated)

Commits

Updates peaceiris/actions-gh-pages from 3.8.0 to 3.9.3

Release notes

Sourced from peaceiris/actions-gh-pages's releases.

actions-github-pages v3.9.3

See CHANGELOG.md for more details.

actions-github-pages v3.9.2

See CHANGELOG.md for more details.

actions-github-pages v3.9.1

  • update deps

See CHANGELOG.md for more details.

actions-github-pages v3.9.0

  • deps: bump node12 to node16
  • deps: bump @​actions/core from 1.6.0 to 1.10.0

See CHANGELOG.md for more details.

Changelog

Sourced from peaceiris/actions-gh-pages's changelog.

3.9.3 (2023-03-30)

docs

fix

3.9.2 (2023-01-17)

chore

ci

deps

3.9.1 (2023-01-05)

chore

ci

  • add Renovate config (#802) (072d16c), closes #802
  • bump actions/dependency-review-action from 2 to 3 (#799) (e3b45f2), closes #799
  • bump peaceiris/actions-github-app-token from 1.1.4 to 1.1.5 (#798) (a5f971f), closes #798
  • bump peaceiris/actions-mdbook from 1.1.14 to 1.2.0 (#793) (9af6a68), closes #793
  • bump peaceiris/workflows from 0.17.1 to 0.17.2 (#794) (087a759), closes #794

... (truncated)

Commits
  • 373f7f2 chore(release): 3.9.3
  • 00e2f33 chore(release): Add build assets
  • 31c15f0 fix: update known_hosts (#871)
  • 6f6875c chore(deps): update dependency @​types/node to v16.18.23 (#880)
  • ee58d74 chore(deps): update node.js to v16.20.0 (#879)
  • 67383c9 chore(deps): update typescript-eslint monorepo to v5.57.0 (#875)
  • f2f45dd chore(deps): update dependency eslint to v8.37.0 (#877)
  • 69c02d4 chore(deps): update dependency @​types/node to v16.18.22 (#876)
  • b8ecadf chore(deps): update dependency @​types/node to v16.18.21 (#874)
  • 66f12e7 chore(deps): update dependency @​types/node to v16.18.20 (#873)
  • Additional commits viewable in compare view

Updates styfle/cancel-workflow-action from 0.9.1 to 0.12.1

Release notes

Sourced from styfle/cancel-workflow-action's releases.

0.12.1

Patches

  • Fix: bump to node20: #212

0.12.0

Changes

  • Feat: add option only_status: #210
  • Chore(deps): bump actions/setup-node from 3.5.0 to 3.5.1: #188
  • Chore: add a warning to docs about missing version: #184
  • Chore(deps-dev): bump husky from 8.0.1 to 8.0.2: #190
  • Chore(deps-dev): bump typescript from 4.8.4 to 4.9.3: #192
  • Chore(deps-dev): bump prettier from 2.7.1 to 2.8.0: #193
  • Chore(deps-dev): bump prettier from 2.8.0 to 2.8.1: #194
  • Chore(deps-dev): bump typescript from 4.9.3 to 4.9.4: #195
  • Chore(deps-dev): bump @​vercel/ncc from 0.34.0 to 0.36.0: #196
  • Chore(deps): bump actions/setup-node from 3.5.1 to 3.6.0: #197
  • Chore(deps-dev): bump prettier from 2.8.1 to 2.8.2: #199
  • Chore(deps-dev): bump husky from 8.0.2 to 8.0.3: #198
  • Chore(docs): document the native behavior: #201
  • Chore(docs): simplify readme warning: 25b1072e6989f076cfebf162ba7109fcde126aa6
  • Chore: remove dependabot: #206
  • Chore(deps-dev): bump typescript from 4.9.4 to 4.9.5: #205
  • Chore(deps-dev): bump @​vercel/ncc from 0.36.0 to 0.36.1: #204
  • Chore(deps-dev): bump prettier from 2.8.2 to 2.8.3: #203

Credits

Huge thanks to @​chenxsan and @​8666 for helping!

0.11.0

Minor Changes

  • Update to Node 16: #186
  • Chore: rebuild: 1e0e690cd3756927cda56ad0033137ff1268c477
  • Chore(deps-dev): bump typescript from 4.8.3 to 4.8.4: #181
  • Chore(deps): bump @​actions/github from 5.1.0 to 5.1.1: #182
  • Chore(deps): bump @​actions/core from 1.9.1 to 1.10.0: #183

Credits

Huge thanks to @​mattjohnsonpint for helping!

0.10.1

Patches

  • Bump actions/setup-node from 3.3.0 to 3.4.0: #171
  • Bump actions/setup-node from 3.4.0 to 3.4.1: #172
  • Bump @​actions/core from 1.9.0 to 1.9.1: #176

... (truncated)

Commits

Updates actions/setup-python from 4 to 5

Release notes

Sourced from actions/setup-python's releases.

v5.0.0

What's Changed

In scope of this release, we update node version runtime from node16 to node20 (actions/setup-python#772). Besides, we update dependencies to the latest versions.

Full Changelog: actions/setup-python@v4.8.0...v5.0.0

v4.8.0

What's Changed

In scope of this release we added support for GraalPy (actions/setup-python#694). You can use this snippet to set up GraalPy:

steps:
- uses: actions/checkout@v4
- uses: actions/setup-python@v4 
  with:
    python-version: 'graalpy-22.3' 
- run: python my_script.py

Besides, the release contains such changes as:

New Contributors

Full Changelog: actions/setup-python@v4...v4.8.0

v4.7.1

What's Changed

Full Changelog: actions/setup-python@v4...v4.7.1

v4.7.0

In scope of this release, the support for reading python version from pyproject.toml was added (actions/setup-python#669).

      - name: Setup Python
        uses: actions/setup-python@v4
</tr></table> 

... (truncated)

Commits

Updates pre-commit/action from 3.0.0 to 3.0.1

Release notes

Sourced from pre-commit/action's releases.

pre-commit/action@v3.0.1

Misc

Commits
  • 2c7b380 v3.0.1
  • 8e2deeb Merge pull request #190 from SukiCZ/upgrade-action/cache-v4
  • 0dbc303 Upgrade action/cache to v4. Fixes: #189
  • c7d159c Merge pull request #185 from pre-commit/asottile-patch-1
  • 9dd4237 fix main badge
  • 37faf8a Merge pull request #184 from pre-commit/pre-commit-ci-update-config
  • 049686e [pre-commit.ci] pre-commit autoupdate
  • 5f528da move back to maintenance-only
  • efd3bcf Merge pull request #170 from pre-commit/pre-commit-ci-update-config
  • df308c7 [pre-commit.ci] pre-commit autoupdate
  • Additional commits viewable in compare view

Updates actions/upload-artifact from 3 to 4

Release notes

Sourced from actions/upload-artifact's releases.

v4.0.0

What's Changed

The release of upload-artifact@v4 and download-artifact@v4 are major changes to the backend architecture of Artifacts. They have numerous performance and behavioral improvements.

ℹ️ However, this is a major update that includes breaking changes. Artifacts created with versions v3 and below are not compatible with the v4 actions. Uploads and downloads must use the same major actions versions. There are also key differences from previous versions that may require updates to your workflows.

For more information, please see:

  1. The changelog post.
  2. The README.
  3. The migration documentation.
  4. As well as the underlying npm package, @​actions/artifact documentation.

New Contributors

Full Changelog: actions/upload-artifact@v3...v4.0.0

v3.1.3

What's Changed

Full Changelog: actions/upload-artifact@v3...v3.1.3

v3.1.2

  • Update all @actions/* NPM packages to their latest versions- #374
  • Update all dev dependencies to their most recent versions - #375

v3.1.1

  • Update actions/core package to latest version to remove set-output deprecation warning #351

v3.1.0

What's Changed

Commits
  • 5d5d22a Merge pull request #515 from actions/eggyhead/update-artifact-v2.1.1
  • f1e993d update artifact license
  • 4881bfd updating dist:
  • a30777e @​eggyhead
  • 3a80482 Merge pull request #511 from actions/robherley/migration-docs-typo
  • 9d63e3f Merge branch 'main' into robherley/migration-docs-typo
  • dfa1ab2 fix typo with v3 artifact downloads in migration guide
  • d00351b Merge pull request #509 from markmssd/patch-1
  • 707f5a7 Update limitation of 10 artifacts upload to 500
  • 26f96df Merge pull request #505 from actions/robherley/merge-artifacts
  • Additional commits viewable in compare view

Updates actions/download-artifact from 3 to 4

Release notes

Sourced from actions/download-artifact's releases.

v4.0.0

What's Changed

The release of upload-artifact@v4 and download-artifact@v4 are major changes to the backend architecture of Artifacts. They have numerous performance and behavioral improvements.

ℹ️ However, this is a major update that includes breaking changes. Artifacts created with versions v3 and below are not compatible with the v4 actions. Uploads and downloads must use the same major actions versions. There are also key differences from previous versions that may require updates to your workflows.

For more information, please see:

  1. The changelog post.
  2. The README.
  3. The migration documentation.
  4. As well as the underlying npm package, @​actions/artifact documentation.

New Contributors

Full Changelog: actions/download-artifact@v3...v4.0.0

v3.0.2

v3.0.1

Commits

Updates pypa/gh-action-pypi-publish from 1.8.10 to 1.8.12

Release notes

Sourced from pypa/gh-action-pypi-publish's releases.

v1.8.12

💅 Cosmetic Output Improvements

@​woodruffw💰 replaced the notice annotations with simplified debug messages related to authentication methanism selection via #196. The also improved the error clarity during OIDC exchange on PRs from forks via #203.

📝 What's Documented

@​virtuald💰 updated the docs and pointer messages were updated to mention that reusable workflows aren't supported right now in #186 and @​xuanzhi33💰 later corrected the markdown syntax there via #216.

🛠️ Internal Dependencies

  • pre-commit linters got autoupdated @ #204
  • Cryptography was bumped from 41.0.6 to 42.0.4 @ #210, #213 and #214

⚙️ Secret Stuff

@​woodruffw proactively updated the OIDC minting API endpoint used during the exchange via #206. Nothing you should be too concerned about, promise!

💪 New Contributors

🪞 Full Diff: pypa/gh-action-pypi-publish@v1.8.11...v1.8.12

🧔‍♂️ Release Manager: @​webknjaz 🇺🇦

v1.8.11

💅 Cosmetic output improvements

@​woodruffw added a nudge suggesting the users storing passwords in a GitHub Actions repository secrets to switch to using secretless publishing in pypa/gh-action-pypi-publish#190. This also reminds people that PyPI will start mandating two-factor authentication to perform uploads in 2024.

📝 What's Documented

@​di linked the configuration docs for Trusted Publishing in README via pypa/gh-action-pypi-publish#179.

🛠️ Internal dependencies

💪 New Contributors

🪞 Full Diff: pypa/gh-action-pypi-publish@v1.8.10...v1.8.11

Commits
  • e53eb8b Clarify the error during OIDC exchange on PRs from forks
  • edfa8f3 Merge pull request #216 from xuanzhi33/unstable/v1
  • aeff019 docs(fix): Fix a markdown alert
  • 24c5d5c Merge pull request #214 from pypa/dependabot/pip/requirements/cryptography-42...
  • c13b4aa build(deps): bump cryptography from 42.0.2 to 42.0.4 in /requirements
  • 72a79c8 Merge pull request #213 from pypa/dependabot/pip/requirements/cryptography-42...
  • 751e5b8 build(deps): bump cryptography from 42.0.0 to 42.0.2 in /requirements
  • 0580fcb Merge pull request #210 from pypa/dependabot/pip/requirements/cryptography-42...
  • a524841 build(deps): bump cryptography from 41.0.6 to 42.0.0 in /requirements
  • 3f824c7 Merge pull request #204 from pypa/pre-commit-ci-update-config
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the actions group with 8 updates:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `2` | `4` |
| [peaceiris/actions-gh-pages](https://github.com/peaceiris/actions-gh-pages) | `3.8.0` | `3.9.3` |
| [styfle/cancel-workflow-action](https://github.com/styfle/cancel-workflow-action) | `0.9.1` | `0.12.1` |
| [actions/setup-python](https://github.com/actions/setup-python) | `4` | `5` |
| [pre-commit/action](https://github.com/pre-commit/action) | `3.0.0` | `3.0.1` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact) | `3` | `4` |
| [actions/download-artifact](https://github.com/actions/download-artifact) | `3` | `4` |
| [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish) | `1.8.10` | `1.8.12` |


Updates `actions/checkout` from 2 to 4
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v2...v4)

Updates `peaceiris/actions-gh-pages` from 3.8.0 to 3.9.3
- [Release notes](https://github.com/peaceiris/actions-gh-pages/releases)
- [Changelog](https://github.com/peaceiris/actions-gh-pages/blob/main/CHANGELOG.md)
- [Commits](peaceiris/actions-gh-pages@v3.8.0...v3.9.3)

Updates `styfle/cancel-workflow-action` from 0.9.1 to 0.12.1
- [Release notes](https://github.com/styfle/cancel-workflow-action/releases)
- [Commits](styfle/cancel-workflow-action@0.9.1...0.12.1)

Updates `actions/setup-python` from 4 to 5
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](actions/setup-python@v4...v5)

Updates `pre-commit/action` from 3.0.0 to 3.0.1
- [Release notes](https://github.com/pre-commit/action/releases)
- [Commits](pre-commit/action@v3.0.0...v3.0.1)

Updates `actions/upload-artifact` from 3 to 4
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@v3...v4)

Updates `actions/download-artifact` from 3 to 4
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](actions/download-artifact@v3...v4)

Updates `pypa/gh-action-pypi-publish` from 1.8.10 to 1.8.12
- [Release notes](https://github.com/pypa/gh-action-pypi-publish/releases)
- [Commits](pypa/gh-action-pypi-publish@v1.8.10...v1.8.12)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: peaceiris/actions-gh-pages
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: styfle/cancel-workflow-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: actions/setup-python
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: pre-commit/action
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: actions/download-artifact
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: pypa/gh-action-pypi-publish
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Feb 29, 2024
@zssherman zssherman merged commit f8ca2f8 into main Feb 29, 2024
20 checks passed
@dependabot dependabot bot deleted the 34c5dependabot/github_actions/actions-54b50c9d02 branch February 29, 2024 20:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants