Skip to content

Conversation

dependabot[bot]
Copy link

@dependabot dependabot bot commented on behalf of github Apr 1, 2024

Bumps taskcluster from 44.2.2 to 64.2.1.

Release notes

Sourced from taskcluster's releases.

v64.2.1

GENERAL

▶ [patch] Upgrades rust version to 1.77.1 and ran cargo audit fix to fix insecure crates.

▶ [patch] Upgrades to Node.js v20.12.0

Automated Package Updates

  • build(deps-dev): bump github-slugger from 1.5.0 to 2.0.0 (775124f00)
  • build(deps): bump the node-deps group with 17 updates (fa332f0e2)
  • build(deps): bump the gh-actions-deps group with 1 update (14f6bb0fd)
  • build(deps): bump taskcluster from 62.0.0 to 64.2.0 in /taskcluster (b751b1dd3)
  • build(deps): bump the python-deps group in /taskcluster with 1 update (c0ae44ba8)
  • build(deps-dev): bump the client-node-deps group (bed1c9ac1)
  • build(deps-dev): bump the client-web-node-deps group (ad42d82be)

v64.2.0

WORKER-DEPLOYERS

▶ [patch] #6802 Worker Runner no longer polls the metadata service for the Google provider. Instead, we've added ?wait_for_change=true to the endpoint to perform a hanging GET request that'll return as soon as the metadata has changed and the VM has been preempted.

USERS

▶ [minor] Remove maxRunTime limitations for docker payloads in generic worker (d2g)

Automated Package Updates

  • build(deps): bump express from 4.18.2 to 4.19.2 in /ui (25af6aa6b)
  • build(deps): bump express from 4.18.3 to 4.19.2 (ccf689497)

v64.1.2

USERS

▶ [patch] #6928 D2G no longer adds --cap-add=SYS_PTRACE for the docker worker allowPtrace feature since all capabilities are already added with the --privileged flag being passed to all D2G commands as of #6890.

... (truncated)

Changelog

Sourced from taskcluster's changelog.

v64.2.1

GENERAL

▶ [patch] Upgrades rust version to 1.77.1 and ran cargo audit fix to fix insecure crates.

▶ [patch] Upgrades to Node.js v20.12.0

Automated Package Updates

  • build(deps-dev): bump github-slugger from 1.5.0 to 2.0.0 (775124f00)
  • build(deps): bump the node-deps group with 17 updates (fa332f0e2)
  • build(deps): bump the gh-actions-deps group with 1 update (14f6bb0fd)
  • build(deps): bump taskcluster from 62.0.0 to 64.2.0 in /taskcluster (b751b1dd3)
  • build(deps): bump the python-deps group in /taskcluster with 1 update (c0ae44ba8)
  • build(deps-dev): bump the client-node-deps group (bed1c9ac1)
  • build(deps-dev): bump the client-web-node-deps group (ad42d82be)

v64.2.0

WORKER-DEPLOYERS

▶ [patch] #6802 Worker Runner no longer polls the metadata service for the Google provider. Instead, we've added ?wait_for_change=true to the endpoint to perform a hanging GET request that'll return as soon as the metadata has changed and the VM has been preempted.

USERS

▶ [minor] Remove maxRunTime limitations for docker payloads in generic worker (d2g)

Automated Package Updates

  • build(deps): bump express from 4.18.2 to 4.19.2 in /ui (25af6aa6b)
  • build(deps): bump express from 4.18.3 to 4.19.2 (ccf689497)

v64.1.2

USERS

... (truncated)

Commits
  • f2eeeae v64.2.1
  • 8b0532a Merge pull request #6947 from taskcluster/matt-boris/rust1.77.1
  • 79c4089 build(deps): upgrade to rust 1.77.1 and run cargo audit fix
  • fc62b52 Merge pull request #6938 from taskcluster/dependabot/pip/taskcluster/taskclus...
  • fcdf80e Merge pull request #6942 from taskcluster/dependabot/npm_and_yarn/github-slug...
  • 00c8cc8 Merge pull request #6941 from taskcluster/dependabot/npm_and_yarn/node-deps-1...
  • 4eeb91f Merge pull request #6939 from taskcluster/dependabot/github_actions/gh-action...
  • 775124f build(deps-dev): bump github-slugger from 1.5.0 to 2.0.0
  • fa332f0 build(deps): bump the node-deps group with 17 updates
  • 9c16f1f Merge pull request #6937 from taskcluster/dependabot/pip/taskcluster/python-d...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [taskcluster](https://github.com/taskcluster/taskcluster) from 44.2.2 to 64.2.1.
- [Release notes](https://github.com/taskcluster/taskcluster/releases)
- [Changelog](https://github.com/taskcluster/taskcluster/blob/main/CHANGELOG.md)
- [Commits](taskcluster/taskcluster@v44.2.2...v64.2.1)

---
updated-dependencies:
- dependency-name: taskcluster
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Copy link
Author

dependabot bot commented on behalf of github Apr 1, 2024

The following labels could not be found: tools.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants