Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update github-actions deps #10145

Merged
merged 1 commit into from
May 14, 2024
Merged

Update github-actions deps #10145

merged 1 commit into from
May 14, 2024

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented May 14, 2024

Mend Renovate

This PR contains the following updates:

Package Type Update Change
actions/checkout action patch v4.1.4 -> v4.1.5
codecov/codecov-action action minor 4.3.1 -> 4.4.0
github/codeql-action action patch v3.25.3 -> v3.25.5
goreleaser/goreleaser-action action minor v5.0.0 -> v5.1.0
ossf/scorecard-action action patch v2.3.1 -> v2.3.3

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

actions/checkout (actions/checkout)

v4.1.5

Compare Source

What's Changed

Full Changelog: actions/checkout@v4.1.4...v4.1.5

codecov/codecov-action (codecov/codecov-action)

v4.4.0

Compare Source

github/codeql-action (github/codeql-action)

v3.25.5

Compare Source

v3.25.4

Compare Source

goreleaser/goreleaser-action (goreleaser/goreleaser-action)

v5.1.0

Compare Source

Important

This version changes the default behavior of latest to ~> v1.

The next major of this action (v6), will change this to ~> v2, and will be launched together with GoReleaser v2.

What's Changed

New Contributors

Full Changelog: goreleaser/goreleaser-action@v5.0.0...v5.1.0

ossf/scorecard-action (ossf/scorecard-action)

v2.3.3

Compare Source

v2.3.2

Compare Source


Configuration

📅 Schedule: Branch creation - "on tuesday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

@renovate renovate bot requested a review from a team as a code owner May 14, 2024 01:43
@renovate renovate bot added dependencies Pull requests that update a dependency file renovatebot labels May 14, 2024
@renovate renovate bot requested a review from atoulme May 14, 2024 01:43
Copy link

codecov bot commented May 14, 2024

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 91.65%. Comparing base (671dcbc) to head (889bbba).

Additional details and impacted files
@@           Coverage Diff           @@
##             main   #10145   +/-   ##
=======================================
  Coverage   91.65%   91.65%           
=======================================
  Files         356      356           
  Lines       16843    16843           
=======================================
  Hits        15437    15437           
  Misses       1063     1063           
  Partials      343      343           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@renovate renovate bot force-pushed the renovate/github-actions-deps branch from 9834572 to 889bbba Compare May 14, 2024 17:40
@codeboten codeboten merged commit 59b1607 into main May 14, 2024
49 checks passed
@codeboten codeboten deleted the renovate/github-actions-deps branch May 14, 2024 20:07
@github-actions github-actions bot added this to the next release milestone May 14, 2024
andrzej-stencel pushed a commit to andrzej-stencel/opentelemetry-collector that referenced this pull request May 27, 2024
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [actions/checkout](https://togithub.com/actions/checkout) | action |
patch | `v4.1.4` -> `v4.1.5` |
| [codecov/codecov-action](https://togithub.com/codecov/codecov-action)
| action | minor | `4.3.1` -> `4.4.0` |
| [github/codeql-action](https://togithub.com/github/codeql-action) |
action | patch | `v3.25.3` -> `v3.25.5` |
|
[goreleaser/goreleaser-action](https://togithub.com/goreleaser/goreleaser-action)
| action | minor | `v5.0.0` -> `v5.1.0` |
| [ossf/scorecard-action](https://togithub.com/ossf/scorecard-action) |
action | patch | `v2.3.1` -> `v2.3.3` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>actions/checkout (actions/checkout)</summary>

###
[`v4.1.5`](https://togithub.com/actions/checkout/releases/tag/v4.1.5)

[Compare
Source](https://togithub.com/actions/checkout/compare/v4.1.4...v4.1.5)

#### What's Changed

- Update NPM dependencies by
[@&open-telemetry#8203;cory-miller](https://togithub.com/cory-miller) in
[actions/checkout#1703
- Bump github/codeql-action from 2 to 3 by
[@&open-telemetry#8203;dependabot](https://togithub.com/dependabot) in
[actions/checkout#1694
- Bump actions/setup-node from 1 to 4 by
[@&open-telemetry#8203;dependabot](https://togithub.com/dependabot) in
[actions/checkout#1696
- Bump actions/upload-artifact from 2 to 4 by
[@&open-telemetry#8203;dependabot](https://togithub.com/dependabot) in
[actions/checkout#1695
- README: Suggest `user.email` to be
`41898282+github-actions[bot]@&open-telemetry#8203;users.noreply.github.com` by
[@&open-telemetry#8203;cory-miller](https://togithub.com/cory-miller) in
[actions/checkout#1707

**Full Changelog**:
actions/checkout@v4.1.4...v4.1.5

</details>

<details>
<summary>codecov/codecov-action (codecov/codecov-action)</summary>

###
[`v4.4.0`](https://togithub.com/codecov/codecov-action/compare/v4.3.1...v4.4.0)

[Compare
Source](https://togithub.com/codecov/codecov-action/compare/v4.3.1...v4.4.0)

</details>

<details>
<summary>github/codeql-action (github/codeql-action)</summary>

###
[`v3.25.5`](https://togithub.com/github/codeql-action/compare/v3.25.4...v3.25.5)

[Compare
Source](https://togithub.com/github/codeql-action/compare/v3.25.4...v3.25.5)

###
[`v3.25.4`](https://togithub.com/github/codeql-action/compare/v3.25.3...v3.25.4)

[Compare
Source](https://togithub.com/github/codeql-action/compare/v3.25.3...v3.25.4)

</details>

<details>
<summary>goreleaser/goreleaser-action
(goreleaser/goreleaser-action)</summary>

###
[`v5.1.0`](https://togithub.com/goreleaser/goreleaser-action/releases/tag/v5.1.0)

[Compare
Source](https://togithub.com/goreleaser/goreleaser-action/compare/v5.0.0...v5.1.0)

#### Important

This version changes the default behavior of `latest` to `~> v1`.

The next major of this action (v6), will change this to `~> v2`, and
will be launched together with GoReleaser v2.

#### What's Changed

- docs: bump actions to latest major by
[@&open-telemetry#8203;crazy-max](https://togithub.com/crazy-max) in
[goreleaser/goreleaser-action#435
- chore(deps): bump docker/bake-action from 3 to 4 by
[@&open-telemetry#8203;dependabot](https://togithub.com/dependabot) in
[goreleaser/goreleaser-action#436
- chore(deps): bump codecov/codecov-action from 3 to 4 by
[@&open-telemetry#8203;dependabot](https://togithub.com/dependabot) in
[goreleaser/goreleaser-action#437
- chore(deps): bump actions/setup-go from 4 to 5 by
[@&open-telemetry#8203;dependabot](https://togithub.com/dependabot) in
[goreleaser/goreleaser-action#443
- chore(deps): bump actions/upload-artifact from 3 to 4 by
[@&open-telemetry#8203;dependabot](https://togithub.com/dependabot) in
[goreleaser/goreleaser-action#444
- Delete .kodiak.toml by
[@&open-telemetry#8203;vedantmgoyal9](https://togithub.com/vedantmgoyal9) in
[goreleaser/goreleaser-action#446
- chore(deps): bump codecov/codecov-action from 3 to 4 by
[@&open-telemetry#8203;dependabot](https://togithub.com/dependabot) in
[goreleaser/goreleaser-action#448
- chore(deps): bump ip from 2.0.0 to 2.0.1 by
[@&open-telemetry#8203;dependabot](https://togithub.com/dependabot) in
[goreleaser/goreleaser-action#450
- Upgrade setup-go action version in README by
[@&open-telemetry#8203;kishaningithub](https://togithub.com/kishaningithub) in
[goreleaser/goreleaser-action#455
- chore(deps): bump tar from 6.1.14 to 6.2.1 by
[@&open-telemetry#8203;dependabot](https://togithub.com/dependabot) in
[goreleaser/goreleaser-action#456
- chore: use corepack to install yarn by
[@&open-telemetry#8203;crazy-max](https://togithub.com/crazy-max) in
[goreleaser/goreleaser-action#458
- feat: lock this major version of the action to use '~> v1' as 'latest'
by [@&open-telemetry#8203;caarlos0](https://togithub.com/caarlos0) in
[goreleaser/goreleaser-action#461
- chore(deps): bump semver from 7.6.0 to 7.6.2 by
[@&open-telemetry#8203;dependabot](https://togithub.com/dependabot) in
[goreleaser/goreleaser-action#462
- chore(deps): bump
[@&open-telemetry#8203;actions/http-client](https://togithub.com/actions/http-client)
from 2.2.0 to 2.2.1 by
[@&open-telemetry#8203;dependabot](https://togithub.com/dependabot) in
[goreleaser/goreleaser-action#451

#### New Contributors

- [@&open-telemetry#8203;vedantmgoyal9](https://togithub.com/vedantmgoyal9) made their
first contribution in
[goreleaser/goreleaser-action#446

**Full Changelog**:
goreleaser/goreleaser-action@v5.0.0...v5.1.0

</details>

<details>
<summary>ossf/scorecard-action (ossf/scorecard-action)</summary>

###
[`v2.3.3`](https://togithub.com/ossf/scorecard-action/compare/v2.3.2...v2.3.3)

[Compare
Source](https://togithub.com/ossf/scorecard-action/compare/v2.3.2...v2.3.3)

###
[`v2.3.2`](https://togithub.com/ossf/scorecard-action/compare/v2.3.1...v2.3.2)

[Compare
Source](https://togithub.com/ossf/scorecard-action/compare/v2.3.1...v2.3.2)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "on tuesday" (UTC), Automerge - At any
time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config help](https://togithub.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/open-telemetry/opentelemetry-collector).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4zNTEuMiIsInVwZGF0ZWRJblZlciI6IjM3LjM1MS4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJyZW5vdmF0ZWJvdCJdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file renovatebot
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant