Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump the github-actions group across 1 directory with 7 updates #7980

Merged

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Aug 12, 2024

Bumps the github-actions group with 7 updates in the / directory:

Package From To
actions/upload-artifact 4.3.4 4.3.6
taiki-e/install-action 2.42.9 2.42.22
github/codeql-action 3.25.15 3.26.0
streetsidesoftware/cspell-action 6.7.1 6.8.0
docker/setup-buildx-action 3.5.0 3.6.1
docker/build-push-action 6.5.0 6.6.1
pypa/cibuildwheel 2.19.2 2.20.0

Updates actions/upload-artifact from 4.3.4 to 4.3.6

Release notes

Sourced from actions/upload-artifact's releases.

v4.3.6

What's Changed

Full Changelog: actions/upload-artifact@v4...v4.3.6

v4.3.5

What's Changed

Full Changelog: actions/upload-artifact@v4.3.4...v4.3.5

Commits

Updates taiki-e/install-action from 2.42.9 to 2.42.22

Release notes

Sourced from taiki-e/install-action's releases.

2.42.22

  • Update cargo-careful@latest to 0.4.3.

2.42.21

  • Update cargo-binstall@latest to 1.10.0.

  • Update syft@latest to 1.11.0.

2.42.20

  • Update cargo-hack@latest to 0.6.31.

2.42.19

  • Update osv-scanner@latest to 1.8.3.

2.42.18

  • Update cargo-tarpaulin@latest to 0.31.1.

  • Update cargo-deny@latest to 0.16.1.

2.42.17

  • Update knope@latest to 0.17.0.

  • Update cargo-binstall@latest to 1.9.0.

2.42.16

  • Update just@latest to 1.34.0.

2.42.15

  • Update cargo-deny@latest to 0.16.0.

2.42.14

  • Update typos@latest to 1.23.6.

  • Update protoc@latest to 3.27.3.

2.42.13

  • Update just@latest to 1.33.0.

2.42.12

  • Update syft@latest to 1.10.0.

2.42.11

  • Update jaq@latest to 1.6.0.

2.42.10

  • Update cargo-make@latest to 0.37.15.

  • Update cargo-udeps@latest to 0.1.50.

Changelog

Sourced from taiki-e/install-action's changelog.

Changelog

All notable changes to this project will be documented in this file.

This project adheres to Semantic Versioning.

[Unreleased]

[2.42.22] - 2024-08-10

  • Update cargo-careful@latest to 0.4.3.

[2.42.21] - 2024-08-10

  • Update cargo-binstall@latest to 1.10.0.

  • Update syft@latest to 1.11.0.

[2.42.20] - 2024-08-08

  • Update cargo-hack@latest to 0.6.31.

[2.42.19] - 2024-08-07

  • Update osv-scanner@latest to 1.8.3.

[2.42.18] - 2024-08-05

  • Update cargo-tarpaulin@latest to 0.31.1.

  • Update cargo-deny@latest to 0.16.1.

[2.42.17] - 2024-08-04

  • Update knope@latest to 0.17.0.

  • Update cargo-binstall@latest to 1.9.0.

[2.42.16] - 2024-08-02

  • Update just@latest to 1.34.0.

[2.42.15] - 2024-08-02

  • Update cargo-deny@latest to 0.16.0.

... (truncated)

Commits

Updates github/codeql-action from 3.25.15 to 3.26.0

Changelog

Sourced from github/codeql-action's changelog.

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

[UNRELEASED]

No user facing changes.

3.26.0 - 06 Aug 2024

  • Deprecation: Swift analysis on Ubuntu runner images is no longer supported. Please migrate to a macOS runner if this affects you. #2403
  • Bump the minimum CodeQL bundle version to 2.13.5. #2408

3.25.15 - 26 Jul 2024

  • Update default CodeQL bundle version to 2.18.1. #2385

3.25.14 - 25 Jul 2024

  • Experimental: add a new start-proxy action which starts the same HTTP proxy as used by github/dependabot-action. Do not use this in production as it is part of an internal experiment and subject to change at any time. #2376

3.25.13 - 19 Jul 2024

  • Add codeql-version to outputs. #2368
  • Add a deprecation warning for customers using CodeQL version 2.13.4 and earlier. These versions of CodeQL were discontinued on 9 July 2024 alongside GitHub Enterprise Server 3.9, and will be unsupported by CodeQL Action versions 3.26.0 and later and versions 2.26.0 and later. #2375
    • If you are using one of these versions, please update to CodeQL CLI version 2.13.5 or later. For instance, if you have specified a custom version of the CLI using the 'tools' input to the 'init' Action, you can remove this input to use the default version.
    • Alternatively, if you want to continue using a version of the CodeQL CLI between 2.12.6 and 2.13.4, you can replace github/codeql-action/*@v3 by github/codeql-action/*@v3.25.13 and github/codeql-action/*@v2 by github/codeql-action/*@v2.25.13 in your code scanning workflow to ensure you continue using this version of the CodeQL Action.

3.25.12 - 12 Jul 2024

  • Improve the reliability and performance of analyzing code when analyzing a compiled language with the autobuild build mode on GitHub Enterprise Server. This feature is already available to GitHub.com users. #2353
  • Update default CodeQL bundle version to 2.18.0. #2364

3.25.11 - 28 Jun 2024

  • Avoid failing the workflow run if there is an error while uploading debug artifacts. #2349
  • Update default CodeQL bundle version to 2.17.6. #2352

3.25.10 - 13 Jun 2024

  • Update default CodeQL bundle version to 2.17.5. #2327

3.25.9 - 12 Jun 2024

  • Avoid failing database creation if the database folder already exists and contains some unexpected files. Requires CodeQL 2.18.0 or higher. #2330
  • The init Action will attempt to clean up the database cluster directory before creating a new database and at the end of the job. This will help to avoid issues where the database cluster directory is left in an inconsistent state. #2332

3.25.8 - 04 Jun 2024

... (truncated)

Commits
  • eb055d7 Merge pull request #2410 from github/update-v3.26.0-c24926b73
  • 3884d04 Update changelog for v3.26.0
  • c24926b Merge pull request #2407 from github/dependabot/npm_and_yarn/npm-7954a73ad2
  • 68ba39b Merge branch 'main' into dependabot/npm_and_yarn/npm-7954a73ad2
  • 8dd1773 Merge pull request #2408 from github/henrymercer/deprecate-codeql-2.13.4
  • 441c9d9 Merge pull request #2409 from github/henrymercer/fix-required-checks
  • f03da13 Exclude push-only unit tests job from required PR checks script
  • 29a5cfc Bump version to 3.26.0
  • 9e440ad Add changelog note
  • 136f5a5 Add CodeQL v2.17.6 to default test versions
  • Additional commits viewable in compare view

Updates streetsidesoftware/cspell-action from 6.7.1 to 6.8.0

Release notes

Sourced from streetsidesoftware/cspell-action's releases.

v6.8.0

6.8.0 (2024-08-02)

Features

Updates and Bug Fixes

Changelog

Sourced from streetsidesoftware/cspell-action's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

6.8.0 (2024-08-02)

Features

Updates and Bug Fixes

6.7.1 (2024-07-23)

Updates and Bug Fixes

6.7.0 (2024-07-23)

Features

Updates and Bug Fixes

6.6.0 (2024-07-06)

Features

Updates and Bug Fixes

... (truncated)

Commits

Updates docker/setup-buildx-action from 3.5.0 to 3.6.1

Release notes

Sourced from docker/setup-buildx-action's releases.

v3.6.1

Full Changelog: docker/setup-buildx-action@v3.6.0...v3.6.1

v3.6.0

Full Changelog: docker/setup-buildx-action@v3.5.0...v3.6.0

Commits
  • 988b5a0 Merge pull request #347 from crazy-max/skip-malformed-context
  • 2c21562 chore: update generated content
  • 3382292 check for malformed docker context
  • 3d68780 Merge pull request #341 from crazy-max/docker-context-tls
  • d069e98 chore: update generated content
  • 8b850f8 create docker context if default one has TLS data loaded
  • See full diff in compare view

Updates docker/build-push-action from 6.5.0 to 6.6.1

Release notes

Sourced from docker/build-push-action's releases.

v6.6.1

Full Changelog: docker/build-push-action@v6.6.0...v6.6.1

v6.6.0

Full Changelog: docker/build-push-action@v6.5.0...v6.6.0

Commits
  • 16ebe77 Merge pull request #1205 from docker/dependabot/npm_and_yarn/docker/actions-t...
  • 646a62b chore: update generated content
  • d92ab13 chore(deps): Bump @​docker/actions-toolkit from 0.37.0 to 0.37.1
  • 4f7cdeb Merge pull request #1198 from docker/dependabot/npm_and_yarn/docker/actions-t...
  • ad3cd77 chore: update generated content
  • 3efbc13 chore(deps): Bump @​docker/actions-toolkit from 0.36.0 to 0.37.0
  • 2dbe91d Merge pull request #1197 from crazy-max/build-checks
  • 7de3854 chore: update generated content
  • 175aa53 opt to disable github annotations generation for build checks
  • 806a2a4 generate GitHub annotations for build checks
  • Additional commits viewable in compare view

Updates pypa/cibuildwheel from 2.19.2 to 2.20.0

Release notes

Sourced from pypa/cibuildwheel's releases.

Version 2.20.0

  • 🌟 CPython 3.13 wheels are now built by default - without the CIBW_PRERELEASE_PYTHONS flag. It's time to build and upload these wheels to PyPI! This release includes CPython 3.13.0rc1, which is guaranteed to be ABI compatible with the final release. Free-threading is still behind a flag/config option. (#1950)
  • ✨ Provide a CIBW_ALLOW_EMPTY environment variable as an alternative to the command line flag. (#1937)
  • 🐛 Don't use uv on PyPy3.8 on Windows, it stopped working starting in 0.2.25. Note that PyPy 3.8 is EoL. (#1868)
  • 🛠 Set the VSCMD_ARG_TGT_ARCH variable based on target arch. (#1876)
  • 🛠 Undo cleaner output on pytest 8-8.2 now that 8.3 is out. (#1943)
  • 📚 Update examples to use Python 3.12 on host (cibuildwheel will require Python 3.11+ on the host machine starting in October 2024) (#1919)
Changelog

Sourced from pypa/cibuildwheel's changelog.


title: Changelog

Changelog

v2.20.0

  • 🌟 CPython 3.13 wheels are now built by default - without the CIBW_PRERELEASE_PYTHONS flag. It's time to build and upload these wheels to PyPI! This release includes CPython 3.13.0rc1, which is guaranteed to be ABI compatible with the final release. Free-threading is still behind a flag/config option. (#1950)
  • ✨ Provide a CIBW_ALLOW_EMPTY environment variable as an alternative to the command line flag. (#1937)
  • 🐛 Don't use uv on PyPy3.8 on Windows, it stopped working starting in 0.2.25. Note that PyPy 3.8 is EoL. (#1868)
  • 🛠 Set the VSCMD_ARG_TGT_ARCH variable based on target arch. (#1876)
  • 🛠 Undo cleaner output on pytest 8-8.2 now that 8.3 is out. (#1943)
  • 📚 Update examples to use Python 3.12 on host (cibuildwheel will require Python 3.11+ on the host machine starting in October 2024) (#1919)

v2.19.2

  • 🐛 Update manylinux2014 pins to versions that support past-EoL CentOS 7 mirrors. (#1917)
  • 🐛 Support --no-isolation with build[uv] build-frontend. (#1889)
  • 🛠 Provide attestations for releases at https://github.com/pypa/cibuildwheel/attestations. (#1916)
  • 🛠 Provide CPython 3.13.0b3. (#1913)
  • 🛠 Remove some workarounds now that pip 21.1 is available. (#1891, #1892)
  • 📚 Remove nosetest from our docs. (#1821)
  • 📚 Document the macOS ARM workaround for 3.8 on GHA. (#1871)
  • 📚 GitLab CI + macOS is now a supported platform with an example. (#1911)

v2.19.1

  • 🐛 Don't require setup-python on GHA for Pyodide (#1868)
  • 🐛 Specify full python path for uv (fixes issue in 0.2.10 & 0.2.11) (#1881)
  • 🛠 Update for pip 24.1b2 on CPython 3.13. (#1879)
  • 🛠 Fix a warning in our schema generation script. (#1866)
  • 🛠 Cleaner output on pytest 8-8.2. (#1865)

v2.19.0

See the release post for more info on new features!

  • 🌟 Add Pyodide platform. Set with --platform pyodide or CIBW_PLATFORM: pyodide on Linux with a host Python 3.12 to build WebAssembly wheels. Not accepted on PyPI currently, but usable directly in a website using Pyodide, for live docs, etc. (#1456, #1859)
  • 🌟 Add build[uv] backend, which will take a pre-existing uv install (or install cibuildwheel[uv]) and use uv for all environment setup and installs on Python 3.8+. This is significantly faster in most cases. (#1856)
  • ✨ Add free-threaded macOS builds and update CPython to 3.13.0b2. (#1854)
  • 🐛 Issue copying a wheel to a non-existent output dir fixed. (#1851, #1862)
  • 🐛 Better determinism for the test environment seeding. (#1835)
  • 🛠 VIRTUAL_ENV variable now set. (#1842)
  • 🛠 Remove a pip<21.3 workaround. (#1842)
  • 🛠 Error handling was refactored to use exceptions. (#1719)
  • 🛠 Hardcoded paths in tests avoided. (#1834)

... (truncated)

Commits

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the github-actions group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4.3.4` | `4.3.6` |
| [taiki-e/install-action](https://github.com/taiki-e/install-action) | `2.42.9` | `2.42.22` |
| [github/codeql-action](https://github.com/github/codeql-action) | `3.25.15` | `3.26.0` |
| [streetsidesoftware/cspell-action](https://github.com/streetsidesoftware/cspell-action) | `6.7.1` | `6.8.0` |
| [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `3.5.0` | `3.6.1` |
| [docker/build-push-action](https://github.com/docker/build-push-action) | `6.5.0` | `6.6.1` |
| [pypa/cibuildwheel](https://github.com/pypa/cibuildwheel) | `2.19.2` | `2.20.0` |



Updates `actions/upload-artifact` from 4.3.4 to 4.3.6
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@0b2256b...834a144)

Updates `taiki-e/install-action` from 2.42.9 to 2.42.22
- [Release notes](https://github.com/taiki-e/install-action/releases)
- [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md)
- [Commits](taiki-e/install-action@7277a40...8efaa9b)

Updates `github/codeql-action` from 3.25.15 to 3.26.0
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@afb54ba...eb055d7)

Updates `streetsidesoftware/cspell-action` from 6.7.1 to 6.8.0
- [Release notes](https://github.com/streetsidesoftware/cspell-action/releases)
- [Changelog](https://github.com/streetsidesoftware/cspell-action/blob/main/CHANGELOG.md)
- [Commits](streetsidesoftware/cspell-action@2db9e5f...0e63b88)

Updates `docker/setup-buildx-action` from 3.5.0 to 3.6.1
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](docker/setup-buildx-action@aa33708...988b5a0)

Updates `docker/build-push-action` from 6.5.0 to 6.6.1
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](docker/build-push-action@5176d81...16ebe77)

Updates `pypa/cibuildwheel` from 2.19.2 to 2.20.0
- [Release notes](https://github.com/pypa/cibuildwheel/releases)
- [Changelog](https://github.com/pypa/cibuildwheel/blob/main/docs/changelog.md)
- [Commits](pypa/cibuildwheel@7e5a838...bd033a4)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: taiki-e/install-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: streetsidesoftware/cspell-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: docker/setup-buildx-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: docker/build-push-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: pypa/cibuildwheel
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot requested a review from a team as a code owner August 12, 2024 03:06
@dependabot dependabot bot added I-Dependency Impact: related to an dependency I-Github-Actions Impact: Github actions related stuff labels Aug 12, 2024
@FirelightFlagboy FirelightFlagboy added this pull request to the merge queue Aug 12, 2024
Merged via the queue into master with commit 4677d39 Aug 12, 2024
38 of 46 checks passed
@FirelightFlagboy FirelightFlagboy deleted the dependabot-github_actions-github-actions-58176d0f7d branch August 12, 2024 06:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
I-Dependency Impact: related to an dependency I-Github-Actions Impact: Github actions related stuff
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant