Skip to content

Running job with dependabot/fetch-metadata@v1.1.1 gets warning message #23383

@neko314

Description

@neko314

Code of Conduct

What article on docs.github.com is affected?

https://docs.github.com/en/code-security/dependabot/working-with-dependabot/automating-dependabot-with-github-actions

What part(s) of the article would you like to see updated?

Parts are dependabot/fetch-metadata@v1.1.1.

It's better to modify sample code not to return any warning messages as possible as it can.

GitHub released to duplicate using set-output without env vars.
https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/

dependabot/fetch-metadata@v1.1.1 is old version, witch does not yet fix to apply this security fix.
So, I get warning message: The 'set-output' command is deprecated and will be disabled soon. when I run a job with this dependabot/fetch-metadata@v1.1.1.

dependabot/fetch-metadata already fixed this warning at v1.3.5 and released it.
issue: dependabot/fetch-metadata#277
release: https://github.com/dependabot/fetch-metadata/releases/tag/v1.3.5

I expect to sample code not to get any warning messages as possible as it can.
I suggest to update doc like this

 steps:
  - name: Dependabot metadata
  id: metadata
-  uses: dependabot/fetch-metadata@v1.1.1
+  uses: dependabot/fetch-metadata@v1

Additional information

No response

Metadata

Metadata

Assignees

No one assigned

    Labels

    code securityContent related to code securitycontentThis issue or pull request belongs to the Docs Content teamdependabotContent related to Dependabotwaiting for reviewIssue/PR is waiting for a writer's review

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions