Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jun 1, 2024

Bumps the callable-workflows group with 11 updates in the / directory:

Package From To
sigstore/cosign-installer 3.4.0 3.5.0
docker/setup-buildx-action 3.1.0 3.3.0
docker/login-action 3.0.0 3.2.0
docker/build-push-action 5.2.0 5.3.0
actions/checkout 4.1.1 4.1.6
actions/setup-python 5.0.0 5.1.0
actions/cache 4.0.1 4.0.2
peaceiris/actions-hugo 2.6.0 3.0.0
actions/deploy-pages 4.0.4 4.0.5
actions/upload-artifact 4.3.1 4.3.3
codecov/codecov-action 4.1.0 4.4.1

Updates sigstore/cosign-installer from 3.4.0 to 3.5.0

Release notes

Sourced from sigstore/cosign-installer's releases.

v3.5.0

What's Changed

Full Changelog: sigstore/cosign-installer@v3.4.0...v3.5.0

Commits

Updates docker/setup-buildx-action from 3.1.0 to 3.3.0

Release notes

Sourced from docker/setup-buildx-action's releases.

v3.3.0

Full Changelog: docker/setup-buildx-action@v3.2.0...v3.3.0

v3.2.0

[!NOTE] config and config-inline input names are deprecated and will be removed in next major release.

Full Changelog: docker/setup-buildx-action@v3.1.0...v3.2.0

Commits
  • d70bba7 Merge pull request #307 from crazy-max/bump-toolkit
  • 7638634 chore: update generated content
  • c68420f bump @​docker/actions-toolkit from 0.19.0 to 0.20.0
  • 2b51285 Merge pull request #306 from docker/dependabot/npm_and_yarn/docker/actions-to...
  • 0f00370 chore: update generated content
  • 11c9683 build(deps): bump @​docker/actions-toolkit from 0.18.0 to 0.19.0
  • 56a16b8 Merge pull request #303 from crazy-max/fix-inputs
  • c23f46e chore: update generated content
  • f876da6 rename and align config inputs
  • b7cf918 Merge pull request #304 from crazy-max/rm-docs-dir
  • Additional commits viewable in compare view

Updates docker/login-action from 3.0.0 to 3.2.0

Release notes

Sourced from docker/login-action's releases.

v3.2.0

Full Changelog: docker/login-action@v3.1.0...v3.2.0

v3.1.0

Full Changelog: docker/login-action@v3.0.0...v3.1.0

Commits
  • 0d4c9c5 Merge pull request #722 from crazy-max/update-readme
  • b29e14f add contributing section to README
  • 218a70c Merge pull request #721 from docker/dependabot/npm_and_yarn/docker/actions-to...
  • b820080 build(deps): bump @​docker/actions-toolkit from 0.23.0 to 0.24.0
  • 27530a9 Merge pull request #720 from docker/dependabot/npm_and_yarn/aws-sdk-dependenc...
  • d072a60 chore: update generated content
  • 7c627b5 build(deps): bump the aws-sdk-dependencies group across 1 directory with 2 up...
  • 787cfc6 Merge pull request #694 from docker/dependabot/npm_and_yarn/undici-5.28.4
  • 8e66e91 chore: update generated content
  • 5ba5e97 build(deps): bump undici from 5.28.3 to 5.28.4
  • Additional commits viewable in compare view

Updates docker/build-push-action from 5.2.0 to 5.3.0

Release notes

Sourced from docker/build-push-action's releases.

v5.3.0

Full Changelog: docker/build-push-action@v5.2.0...v5.3.0

Commits
  • 2cdde99 Merge pull request #1080 from docker/dependabot/npm_and_yarn/docker/actions-t...
  • 008747a chore: update generated content
  • 1580753 chore(deps): Bump @​docker/actions-toolkit from 0.18.0 to 0.19.0
  • 2a7db1d Merge pull request #1075 from crazy-max/ci-multi-output
  • 35e7dd5 ci: test multi output
  • See full diff in compare view

Updates actions/checkout from 4.1.1 to 4.1.6

Release notes

Sourced from actions/checkout's releases.

v4.1.6

What's Changed

Full Changelog: actions/checkout@v4.1.5...v4.1.6

v4.1.5

What's Changed

Full Changelog: actions/checkout@v4.1.4...v4.1.5

v4.1.4

What's Changed

Full Changelog: actions/checkout@v4.1.3...v4.1.4

v4.1.3

What's Changed

Full Changelog: actions/checkout@v4.1.2...v4.1.3

v4.1.2

We are investigating the following issue with this release and have rolled-back the v4 tag to point to v4.1.1

What's Changed

New Contributors

Full Changelog: actions/checkout@v4.1.1...v4.1.2

Changelog

Sourced from actions/checkout's changelog.

Changelog

v4.1.6

v4.1.5

v4.1.4

v4.1.3

v4.1.2

v4.1.1

v4.1.0

v4.0.0

v3.6.0

v3.5.3

v3.5.2

v3.5.1

... (truncated)

Commits

Updates actions/setup-python from 5.0.0 to 5.1.0

Release notes

Sourced from actions/setup-python's releases.

v5.1.0

What's Changed

New Contributors

Full Changelog: actions/setup-python@v5.0.0...v5.1.0

Commits
  • 82c7e63 Documentation changes for avoiding rate limit issues on GHES (#835)
  • 10aa35a feat: fallback to raw endpoint for manifest when rate limit is reached (#766)
  • 9a7ac94 Bump undici from 5.27.2 to 5.28.3 (#817)
  • 871daa9 Fix the "Specifying multiple Python/PyPy versions" link (#782)
  • 2f07895 Fix broken README.md link (#793)
  • e9d6f99 Replace setup-python@v4 by setup-python@v5 in README (#776)
  • See full diff in compare view

Updates actions/cache from 4.0.1 to 4.0.2

Release notes

Sourced from actions/cache's releases.

v4.0.2

What's Changed

Full Changelog: actions/cache@v4.0.1...v4.0.2

Changelog

Sourced from actions/cache's changelog.

Releases

4.0.2

  • Fixed restore fail-on-cache-miss not working.

4.0.1

  • Updated isGhes check

4.0.0

  • Updated minimum runner version support from node 12 -> node 20

3.3.3

  • Updates @​actions/cache to v3.2.3 to fix accidental mutated path arguments to getCacheVersion actions/toolkit#1378
  • Additional audit fixes of npm package(s)

3.3.2

  • Fixes bug with Azure SDK causing blob downloads to get stuck.

3.3.1

  • Reduced segment size to 128MB and segment timeout to 10 minutes to fail fast in case the cache download is stuck.

3.3.0

  • Added option to lookup cache without downloading it.

3.2.6

  • Fix zstd not being used after zstd version upgrade to 1.5.4 on hosted runners.

3.2.5

  • Added fix to prevent from setting MYSYS environment variable globally.

3.2.4

  • Added option to fail job on cache miss.

3.2.3

  • Support cross os caching on Windows as an opt-in feature.
  • Fix issue with symlink restoration on Windows for cross-os caches.

3.2.2

... (truncated)

Commits

Updates peaceiris/actions-hugo from 2.6.0 to 3.0.0

Release notes

Sourced from peaceiris/actions-hugo's releases.

actions-hugo v3.0.0

See CHANGELOG.md for more details.

Changelog

Sourced from peaceiris/actions-hugo's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

3.0.0 (2024-04-02)

build

chore

ci

docs

feat

2.6.0 (2022-10-23)

chore

ci

  • add actions/dependency-review-action v1 (4809af4)

... (truncated)

Commits

Updates actions/deploy-pages from 4.0.4 to 4.0.5

Release notes

Sourced from actions/deploy-pages's releases.

v4.0.5

Changelog


See details of all code changes since previous release.

⚠️ For use with products other than GitHub.com, such as GitHub Enterprise Server, please consult the compatibility table.

Commits
  • d6db901 Merge pull request #324 from actions/error-message-request-id
  • 055f425 compile changes
  • 5ab929b Include request id in the error message of an error response
  • 3ff795b Merge pull request #318 from actions/dependabot/npm_and_yarn/non-breaking-cha...
  • f5a2f0d Update distributables after Dependabot 🤖
  • 1364cde Bump the non-breaking-changes group with 2 updates
  • 2ed07f7 Merge pull request #316 from actions/dependabot/npm_and_yarn/non-breaking-cha...
  • d5a892b Bump the non-breaking-changes group with 1 update
  • 05977f5 Merge pull request #314 from actions/dependabot/npm_and_yarn/non-breaking-cha...
  • 9414024 Update distributables after Dependabot 🤖
  • Additional commits viewable in compare view

Updates actions/upload-artifact from 4.3.1 to 4.3.3

Release notes

Sourced from actions/upload-artifact's releases.

v4.3.3

What's Changed

Full Changelog: actions/upload-artifact@v4.3.2...v4.3.3

v4.3.2

What's Changed

New Contributors

Full Changelog: actions/upload-artifact@v4.3.1...v4.3.2

Commits
  • 6546280 updating package version
  • c004fb4 Merge branch 'main' into eggyhead/use-artifact-v2.1.6
  • 90aba49 updating toolkit artifact dependency to 2.1.6
  • b06cde3 Merge pull request #563 from actions/eggyhead/release-4.3.2
  • 1746f4a Revert "updating to release 4.3.2"
  • 31685d0 updating to release 4.3.2
  • 18bf333 Merge pull request #562 from actions/eggyhead/update-artifact-v215
  • dac413b update package lock version
  • bb3b4a3 updating package version
  • 3e3da83 updating artifact and core dependencies
  • Additional commits viewable in compare view

Updates codecov/codecov-action from 4.1.0 to 4.4.1

Release notes

Sourced from codecov/codecov-action's releases.

v4.4.1

What's Changed

New Contributors

Full Changelog: codecov/codecov-action@v4.4.0...v4.4.1

What's Changed

New Contributors

Full Changelog: codecov/codecov-action@v4.4.0...v4.4.1

v4.4.0

What's Changed

Full Changelog: codecov/codecov-action@v4.3.1...v4.4.0

v4.3.1

What's Changed

... (truncated)

Commits
  • 125fc84 chore(release): 4.4.1 (#1441)
  • c9dbf6a fix: isPullRequestFromFork returns false for any PR (#1437)
  • 59fc46f build(deps): bump actions/checkout from 4.1.5 to 4.1.6 (#1438)
  • 3889fdd build(deps): bump github/codeql-action from 3.25.4 to 3.25.5 (#1439)
  • d42a336 fix: prevent xlarge from running on forks (#1432)
  • fd624e5 build(deps-dev): bump @​typescript-eslint/eslint-plugin from 7.8.0 to 7.9.0 (#...
  • 6d79887 chore(release): 4.4.0 (#1430)
  • 37364fa build(deps-dev): bump @​typescript-eslint/parser from 7.8.0 to 7.9.0 (#1428)
  • 2791a5c fix: remove GPG and run on spawn (#1426)
  • b71af43 build(deps): bump ossf/scorecard-action from 2.3.1 to 2.3.3 (#1420)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and st...

Description has been truncated

…h 11 updates

Bumps the callable-workflows group with 11 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) | `3.4.0` | `3.5.0` |
| [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `3.1.0` | `3.3.0` |
| [docker/login-action](https://github.com/docker/login-action) | `3.0.0` | `3.2.0` |
| [docker/build-push-action](https://github.com/docker/build-push-action) | `5.2.0` | `5.3.0` |
| [actions/checkout](https://github.com/actions/checkout) | `4.1.1` | `4.1.6` |
| [actions/setup-python](https://github.com/actions/setup-python) | `5.0.0` | `5.1.0` |
| [actions/cache](https://github.com/actions/cache) | `4.0.1` | `4.0.2` |
| [peaceiris/actions-hugo](https://github.com/peaceiris/actions-hugo) | `2.6.0` | `3.0.0` |
| [actions/deploy-pages](https://github.com/actions/deploy-pages) | `4.0.4` | `4.0.5` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4.3.1` | `4.3.3` |
| [codecov/codecov-action](https://github.com/codecov/codecov-action) | `4.1.0` | `4.4.1` |



Updates `sigstore/cosign-installer` from 3.4.0 to 3.5.0
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](sigstore/cosign-installer@e1523de...59acb62)

Updates `docker/setup-buildx-action` from 3.1.0 to 3.3.0
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](docker/setup-buildx-action@0d103c3...d70bba7)

Updates `docker/login-action` from 3.0.0 to 3.2.0
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](docker/login-action@343f7c4...0d4c9c5)

Updates `docker/build-push-action` from 5.2.0 to 5.3.0
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](docker/build-push-action@af5a7ed...2cdde99)

Updates `actions/checkout` from 4.1.1 to 4.1.6
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@b4ffde6...a5ac7e5)

Updates `actions/setup-python` from 5.0.0 to 5.1.0
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](actions/setup-python@0a5c615...82c7e63)

Updates `actions/cache` from 4.0.1 to 4.0.2
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](actions/cache@ab5e6d0...0c45773)

Updates `peaceiris/actions-hugo` from 2.6.0 to 3.0.0
- [Release notes](https://github.com/peaceiris/actions-hugo/releases)
- [Changelog](https://github.com/peaceiris/actions-hugo/blob/main/CHANGELOG.md)
- [Commits](peaceiris/actions-hugo@16361eb...75d2e84)

Updates `actions/deploy-pages` from 4.0.4 to 4.0.5
- [Release notes](https://github.com/actions/deploy-pages/releases)
- [Commits](actions/deploy-pages@decdde0...d6db901)

Updates `actions/upload-artifact` from 4.3.1 to 4.3.3
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@5d5d22a...6546280)

Updates `codecov/codecov-action` from 4.1.0 to 4.4.1
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](codecov/codecov-action@54bcd87...125fc84)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: callable-workflows
- dependency-name: docker/setup-buildx-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: callable-workflows
- dependency-name: docker/login-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: callable-workflows
- dependency-name: docker/build-push-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: callable-workflows
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: callable-workflows
- dependency-name: actions/setup-python
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: callable-workflows
- dependency-name: actions/cache
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: callable-workflows
- dependency-name: peaceiris/actions-hugo
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: callable-workflows
- dependency-name: actions/deploy-pages
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: callable-workflows
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: callable-workflows
- dependency-name: codecov/codecov-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: callable-workflows
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot requested a review from a team as a code owner June 1, 2024 11:31
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Jun 1, 2024
@shenanigansd shenanigansd merged commit 35ec518 into main Jun 1, 2024
@shenanigansd shenanigansd deleted the dependabot/github_actions/callable-workflows-94c33d2686 branch June 1, 2024 22:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants