Bump the actions group across 1 directory with 5 updates

[dependabot]

Bumps the actions group with 5 updates in the / directory:

Package	From	To
azure/setup-helm	4.2.0	4.3.0
peter-murray/workflow-application-token-action	3.0.0	4.0.1
docker/build-push-action	6.15.0	6.16.0
github/codeql-action	2	3
actions/stale	6	9

Updates azure/setup-helm from 4.2.0 to 4.3.0

Release notes

Sourced from azure/setup-helm's releases.

v4.3.0

• #152 feat: log when restoring from cache
• #157 Dependencies Update
• #137 Add dependabot

Changelog

Sourced from azure/setup-helm's changelog.

Change Log

[4.3.0] - 2025-02-15

• #152 feat: log when restoring from cache
• #157 Dependencies Update
• #137 Add dependabot

[4.2.0] - 2024-04-15

• #124 Fix OS detection and download OS-native archive extension

[4.1.0] - 2024-03-01

• #130 switches to use Helm published file to read latest version instead of using GitHub releases

[4.0.0] - 2024-02-12

• #121 update to node20 as node16 is deprecated

Commits

• b9e5190 build
• 0e8654b Release setup-helm version 4.3.0 (#162)
• b48e1df feat: log when restoring from cache (#152)
• 855ae7a Bump the actions group across 1 directory with 3 updates (#159)
• 124c6d8 Dependencies Update (#157)
• 048f4e7 Bump the actions group across 1 directory with 2 updates (#151)
• 8618769 Bump the actions group across 1 directory with 4 updates (#149)
• 4eb898e Bump the actions group across 1 directory with 2 updates (#145)
• 7a2001c Bump the actions group across 1 directory with 2 updates (#143)
• e90c86c Bump the actions group across 1 directory with 9 updates (#141)
• Additional commits viewable in compare view

Updates peter-murray/workflow-application-token-action from 3.0.0 to 4.0.1

Release notes

Sourced from peter-murray/workflow-application-token-action's releases.

v4.0.1

Updating dependencies to resolve security vulnerabilities

v4.0.0

What's Changed

• Typescript by @​peter-murray in peter-murray/workflow-application-token-action#42

• Change to TypeScript for the implementation

• Test framework switched to vitest

• Proxy implementation switched over to undici fetch and proxy agent

Full Changelog: peter-murray/workflow-application-token-action@v3.0.1...v4.0.0

v3.0.1

• Switches back to the legacy Node.js url.parse() for URL parsing as @​vercel/ncc appears to be messing up the call and resulting in a TypeError: a is not a constructor errors
• Libraries incrementally updated

Commits

• d17e3a9 Updating packages
• 8f7fb6a Update README.md to reference v4 version of actions examples
• 8e4e6fb 4.0.0
• c0f4dcf Typescript (#42)
• baa1ef2 3.0.1
• 4ace3f2 Switching back to legacy URL parsing as it is breaking in actions runner envi...
• See full diff in compare view

Updates docker/build-push-action from 6.15.0 to 6.16.0

Release notes

Sourced from docker/build-push-action's releases.

v6.16.0

• Handle no default attestations env var by @​crazy-max in docker/build-push-action#1343
• Only print secret keys in build summary output by @​crazy-max in docker/build-push-action#1353
• Bump @​docker/actions-toolkit from 0.56.0 to 0.59.0 in docker/build-push-action#1352

Full Changelog: docker/build-push-action@v6.15.0...v6.16.0

Commits

• 14487ce Merge pull request #1343 from crazy-max/fix-no-default-attest
• 0ec9126 Merge pull request #1366 from crazy-max/pr-assign-author
• b749522 pr-assign-author workflow
• c566248 Merge pull request #1363 from crazy-max/fix-codecov
• 13275dd ci: fix missing source for codecov
• 67dc78b Merge pull request #1361 from mschoettle/patch-1
• 0760504 docs: add validating build configuration example
• 1c198f4 chore: update generated content
• 288d9e2 handle no default attestations env var
• 88844b9 Merge pull request #1353 from crazy-max/summary-secret-keys
• Additional commits viewable in compare view

Updates github/codeql-action from 2 to 3

Release notes

Sourced from github/codeql-action's releases.

v2.28.1

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

This is the last planned release of the v2. To continue getting updates for the CodeQL Action, please switch to v3.

2.28.1 - 10 Jan 2025

• CodeQL Action v2 is now deprecated, and is no longer updated or supported. For better performance, improved security, and new features, upgrade to v3. For more information, see this changelog post. #2677
• Update default CodeQL bundle version to 2.20.1. #2678

See the full CHANGELOG.md for more information.

v2.28.0

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

This is the last planned release of the v2. To continue getting updates for the CodeQL Action, please switch to v3.

2.28.0 - 20 Dec 2024

• Bump the minimum CodeQL bundle version to 2.15.5. #2655
• Don't fail in the unusual case that a file is on the search path. #2660.

See the full CHANGELOG.md for more information.

v2.27.9

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

2.27.9 - 12 Dec 2024

No user facing changes.

See the full CHANGELOG.md for more information.

v2.27.7

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

... (truncated)

Changelog

Sourced from github/codeql-action's changelog.

Commits

• 28deaed Merge pull request #2865 from github/update-v3.28.16-2a8cbadc0
• 03c5d71 Update changelog for v3.28.16
• 2a8cbad Merge pull request #2863 from github/update-bundle/codeql-bundle-v2.21.1
• f76eaf5 Add changelog note
• e63b3f5 Update default bundle to codeql-bundle-v2.21.1
• 4c3e536 Merge pull request #2853 from github/dependabot/npm_and_yarn/npm-7d84c66b66
• 56dd02f Merge pull request #2852 from github/dependabot/github_actions/actions-457587...
• 192406d Merge branch 'main' into dependabot/github_actions/actions-4575878e06
• c7dbb20 Merge pull request #2857 from github/nickfyson/address-vulns
• 9a45cd8 move use of input variables into env vars
• Additional commits viewable in compare view

Updates actions/stale from 6 to 9

Release notes

Sourced from actions/stale's releases.

v9.0.0

Breaking Changes

1. Action is now stateful: If the action ends because of operations-per-run then the next run will start from the first unprocessed issue skipping the issues processed during the previous run(s). The state is reset when all the issues are processed. This should be considered for scheduling workflow runs.
2. Version 9 of this action updated the runtime to Node.js 20. All scripts are now run with Node.js 20 instead of Node.js 16 and are affected by any breaking changes between Node.js 16 and 20.

What Else Changed

1. Performance optimization that removes unnecessary API calls by @​dsame #1033 fixes #792
2. Logs displaying current github API rate limit by @​dsame #1032 addresses #1029

For more information, please read the action documentation and its section about statefulness

New Contributors

• @​jmeridth made their first contribution in actions/stale#984
• @​nikolai-laevskii made their first contribution in actions/stale#1020
• @​dusan-trickovic made their first contribution in actions/stale#1056
• @​aparnajyothi-y made their first contribution in actions/stale#1110

Full Changelog: actions/stale@v8...v9.0.0

v8.0.0

⚠️ This version contains breaking changes ⚠️

What's Changed

• New option labels-to-remove-when-stale enables users to specify list of comma delimited labels that will be removed when the issue or PR becomes stale by @​panticmilos actions/stale#770
• Skip deleting the branch in the upstream of a forked repo by @​dsame actions/stale#913
• abort the build on the error by @​dsame in actions/stale#935

Breaking Changes

• In this release we prevent scenarios when the build is not interrupted on some exceptions, which led to successful builds when they are supposed to fail

Example

name: 'Remove labels when the issue or PR becomes stale'
on:
  schedule:
    - cron: '30 1 * * *'
permissions:
pull-requests: write
jobs:
stale:
runs-on: ubuntu-latest
steps:
- uses: actions/stale@v8
with:
labels-to-remove-when-stale: 'label1,label2'

v7.0.0

... (truncated)

Changelog

Sourced from actions/stale's changelog.

Changelog

[9.1.0]

What's Changed

• Documentation update by @​Marukome0743 in actions/stale#1116
• Add workflow file for publishing releases to immutable action package by @​Jcambass in actions/stale#1179
• Update undici from 5.28.2 to 5.28.4 by @​dependabot in actions/stale#1150
• Update actions/checkout from 3 to 4 by @​dependabot in actions/stale#1091
• Update actions/publish-action from 0.2.2 to 0.3.0 by @​dependabot in actions/stale#1147
• Update ts-jest from 29.1.1 to 29.2.5 by @​dependabot in actions/stale#1175
• Update @​actions/core from 1.10.1 to 1.11.1 by @​dependabot in actions/stale#1191
• Update @​types/jest from 29.5.11 to 29.5.14 by @​dependabot in actions/stale#1193
• Update @​actions/cache from 3.2.2 to 4.0.0 by @​dependabot in actions/stale#1194

[9.0.0]

Breaking Changes

1. Action is now stateful: If the action ends because of operations-per-run then the next run will start from the first unprocessed issue skipping the issues processed during the previous run(s). The state is reset when all the issues are processed. This should be considered for scheduling workflow runs.
2. Version 9 of this action updated the runtime to Node.js 20. All scripts are now run with Node.js 20 instead of Node.js 16 and are affected by any breaking changes between Node.js 16 and 20.

What Else Changed

1. Performance optimization that removes unnecessary API calls by @​dsame in #1033; fixes #792
2. Logs displaying current GitHub API rate limit by @​dsame in #1032; addresses #1029

For more information, please read the action documentation and its section about statefulness

[4.1.1]

In scope of this release we updated actions/core to 1.10.0 for v4 and fixed issues operation count.

[8.0.0]

⚠️ This version contains breaking changes ⚠️

• New option labels-to-remove-when-stale enables users to specify list of comma delimited labels that will be removed when the issue or PR becomes stale by @​panticmilos actions/stale#770
• Skip deleting the branch in the upstream of a forked repo by @​dsame actions/stale#913
• abort the build on the error by @​dsame in actions/stale#935

[7.0.0]

⚠️ Breaking change ⚠️

• Allow daysBeforeStale options to be float by @​irega in actions/stale#841
• Use cache in check-dist.yml by @​jongwooo in actions/stale#876
• fix print outputs step in existing workflows by @​irega in actions/stale#859
• Update issue and PR templates, add/delete workflow files by @​IvanZosimov in actions/stale#880
• Update how stale handles exempt items by @​johnsudol in actions/stale#874

... (truncated)

Commits

• 5bef64f build(deps): bump @​actions/cache from 3.2.2 to 4.0.0 (#1194)
• fa77dfd build(deps-dev): bump @​types/jest from 29.5.11 to 29.5.14 (#1193)
• f04443d build(deps): bump @​actions/core from 1.10.1 to 1.11.1 (#1191)
• 5c715b0 build(deps-dev): bump ts-jest from 29.1.1 to 29.2.5 (#1175)
• f691222 build(deps): bump actions/publish-action from 0.2.2 to 0.3.0 (#1147)
• df990c2 build(deps): bump actions/checkout from 3 to 4 (#1091)
• 6e472ce Merge pull request #1179 from actions/Jcambass-patch-1
• d10ba64 Merge pull request #1150 from actions/dependabot/npm_and_yarn/undici-5.28.4
• bbf3da5 resolve check failures
• 6a2e61d Add workflow file for publishing releases to immutable action package
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.