Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

⬆️ Bump action #289

Merged
merged 5 commits into from
Nov 1, 2023
Merged

⬆️ Bump action #289

merged 5 commits into from
Nov 1, 2023

Conversation

flaxel
Copy link
Contributor

@flaxel flaxel commented Nov 1, 2023

Type of Change

  • Bugfix
  • Enhancement / new feature
  • Refactoring
  • Documentation

Description

  • bump node version
  • bump github actions
  • bump project dependencies
  • fix moderate vulnerability
  • bump version number

Checklist

  • Write tests
  • Make sure all tests pass
  • Update documentation
  • Review the Contributing Guideline and sign CLA
  • Reference relevant issue(s) and close them after merging

Copy link
Contributor

@0x46616c6b 0x46616c6b left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Why don't we update the Dependabot config to include grouped updates for GitHub Actions and npm? Additionally, automating dependency merging when the checks pass would minimize the effort required for that action.

WDYT?

@flaxel
Copy link
Contributor Author

flaxel commented Nov 1, 2023

Sounds great! 🙌 I created the PR #290 to do this. 🎉 And adjusted the configuration in infrastructure.

@flaxel flaxel merged commit 9ffcb95 into main Nov 1, 2023
4 checks passed
@flaxel flaxel deleted the bump-action branch November 1, 2023 12:17
@github-actions github-actions bot locked and limited conversation to collaborators Nov 1, 2023
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants