Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump the github-workflows group with 5 updates #5918

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 4, 2023

Bumps the github-workflows group with 5 updates:

Package From To
actions-rust-lang/setup-rust-toolchain 1.5.0 1.6.0
taiki-e/install-action 2.21.19 2.21.26
streetsidesoftware/cspell-action 5.0.0 5.0.1
docker/metadata-action 5.0.0 5.2.0
pypa/gh-action-pypi-publish 1.8.10 1.8.11

Updates actions-rust-lang/setup-rust-toolchain from 1.5.0 to 1.6.0

Changelog

Sourced from actions-rust-lang/setup-rust-toolchain's changelog.

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[Unreleased]

[1.6.0] - 2023-12-04

Added

  • Allow disabling problem matchers (#27) This can be useful when having a matrix of jobs, that produce the same errors.

[1.5.0] - 2023-05-29

Added

  • Support installing additional components and targets that are not listed in rust-toolchain (#14) Before only the items listed in rust-toolchain were installed. Now all the items from the toolchain file are installed and then all the targets and components that are provided as action inputs. This allows installing extra tools only for CI or simplify testing special targets in CI.

  • Allow skipping the creation of a RUSTFLAGS environment variable. Cargos logic for rustflags is complicated, and setting the RUSTFLAGS environment variable prevents other ways of working. Provide a new rustflags input, which controls the environment variable creation. If the value is set to the empty string, then RUSTFLAGS is not created.

    Pre-existing RUSTFLAGS variables are never modified by this extension.

[1.4.4] - 2023-03-18

Fixed

  • Use color aware problem matcher. The problem matcher currently runs against the colored terminal output (Bug 1, Bug 2). The previous matcher was not aware of ANSII color codes and did not work.

[1.4.3] - 2023-02-21

Fixed

  • Executing the action twice for different toolchains now no longer fails around unstable features #12. If multiple toolchains are installed, the "CARGO_REGISTRIES_CRATES_IO_PROTOCOL" can be downgraded to "git" if any of the installed toolchains require it.

[1.4.2] - 2023-02-15

Fixed

... (truncated)

Commits
  • c7e1de2 Update CHANGELOG.md
  • 24c9dd0 Merge pull request #24 from obi1kenobi/patch-1
  • 74a4154 Merge pull request #27 from oxideai/feature/config-matcher
  • 84ba0c9 Update README
  • 51173b3 feature(matcher): allow disabling problem matcher
  • 33678a4 Add docs for the cachekey output to the README
  • 317ed62 Update example workflow in readme
  • 8cb8f77 Merge pull request #23 from actions-rust-lang/dependabot/github_actions/actio...
  • 1f541c5 Bump actions/checkout from 3 to 4
  • See full diff in compare view

Updates taiki-e/install-action from 2.21.19 to 2.21.26

Release notes

Sourced from taiki-e/install-action's releases.

2.21.26

  • Update wasmtime@latest to 15.0.1.

2.21.25

  • Update dprint@latest to 0.43.2.

2.21.24

  • Update biome@latest to 1.4.1.

2.21.23

  • Update mdbook@latest to 0.4.36.

  • Update syft@latest to 0.98.0.

2.21.22

  • Update cargo-tarpaulin@latest to 0.27.2.

2.21.21

  • Update biome@latest to 1.4.0.

2.21.20

  • Update grcov@latest to 0.8.19.
Changelog

Sourced from taiki-e/install-action's changelog.

Changelog

All notable changes to this project will be documented in this file.

This project adheres to Semantic Versioning.

[Unreleased]

[2.21.26] - 2023-12-02

  • Update wasmtime@latest to 15.0.1.

[2.21.25] - 2023-12-01

  • Update dprint@latest to 0.43.2.

[2.21.24] - 2023-12-01

  • Update biome@latest to 1.4.1.

[2.21.23] - 2023-11-30

  • Update mdbook@latest to 0.4.36.

  • Update syft@latest to 0.98.0.

[2.21.22] - 2023-11-28

  • Update cargo-tarpaulin@latest to 0.27.2.

[2.21.21] - 2023-11-28

  • Update biome@latest to 1.4.0.

[2.21.20] - 2023-11-27

  • Update grcov@latest to 0.8.19.

[2.21.19] - 2023-11-26

  • Update dprint@latest to 0.43.1.

[2.21.18] - 2023-11-21

  • Update wasmtime@latest to 15.0.0.

... (truncated)

Commits

Updates streetsidesoftware/cspell-action from 5.0.0 to 5.0.1

Release notes

Sourced from streetsidesoftware/cspell-action's releases.

v5.0.1

5.0.1 (2023-12-01)

Documentation

Updates and Bug Fixes

  • Update Dictionaries and Dependencies (#1449) (4f0ad51)
  • Workflow Bot -- Update ALL Dependencies (main) (#1447) (b38483c)
  • Workflow Bot -- Update ALL Dependencies (main) (#1456) (cf545db)
Changelog

Sourced from streetsidesoftware/cspell-action's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

5.0.1 (2023-12-01)

Documentation

Updates and Bug Fixes

  • Update Dictionaries and Dependencies (#1449) (4f0ad51)
  • Workflow Bot -- Update ALL Dependencies (main) (#1447) (b38483c)
  • Workflow Bot -- Update ALL Dependencies (main) (#1456) (cf545db)

5.0.0 (2023-11-14)

⚠ BREAKING CHANGES

  • Update to CSpell version (8.0.0)

Features

  • Update to CSpell version (8.0.0) (22ab0ea)

Updates and Bug Fixes

  • Workflow Bot -- Update ALL Dependencies (bb7b0e7)
  • Workflow Bot -- Update ALL Dependencies (8cd560b)

4.0.1 (2023-11-07)

Documentation

  • Update README with correct version number (#1413) (bebf297)

Updates and Bug Fixes

... (truncated)

Commits

Updates docker/metadata-action from 5.0.0 to 5.2.0

Release notes

Sourced from docker/metadata-action's releases.

v5.2.0

Full Changelog: docker/metadata-action@v5.1.0...v5.2.0

v5.1.0

Full Changelog: docker/metadata-action@v5.0.0...v5.1.0

Commits
  • e6428a5 Merge pull request #361 from crazy-max/custom-annotations
  • 26b4721 Merge pull request #359 from favonia/document-annotations
  • 352ce8b chore: update generated content
  • cb0becc custom annotations support
  • 91224bc docs(README): add a hint about multi-arch builds
  • f19c369 Merge pull request #358 from crazy-max/empty-images
  • 4066f0c chore: update generated content
  • d6a296c chore: use anonymous func to generate tags and add tests
  • aacea38 feat: allow the images input to be empty, to output just tags
  • 051f7ea Merge pull request #357 from docker/dependabot/npm_and_yarn/docker/actions-to...
  • Additional commits viewable in compare view

Updates pypa/gh-action-pypi-publish from 1.8.10 to 1.8.11

Release notes

Sourced from pypa/gh-action-pypi-publish's releases.

v1.8.11

💅 Cosmetic output improvements

@​woodruffw added a nudge suggesting the users storing passwords in a GitHub Actions repository secrets to switch to using secretless publishing in pypa/gh-action-pypi-publish#190. This also reminds people that PyPI will start mandating two-factor authentication to perform uploads in 2024.

📝 What's Documented

@​di linked the configuration docs for Trusted Publishing in README via pypa/gh-action-pypi-publish#179.

🛠️ Internal dependencies

💪 New Contributors

🪞 Full Diff: pypa/gh-action-pypi-publish@v1.8.10...v1.8.11

Commits
  • 2f6f737 Merge commit PR #184 into unstable/v1
  • 2fa448a Merge PRs #190, #184, #185, #189 and #194 into unstable/v1
  • 824ad31 Revert flake8 to v4.0.1 for WPS
  • 41f3f53 Bump cryptography from 41.0.3 to 41.0.6 in /requirements
  • 2319287 twine-upload: ::error, switch nudge order
  • 254a0d4 twine-upload: add a nudge for password auth
  • 70a33ca Bump pip from 22.3.1 to 23.3 in /requirements
  • 102f507 Bump urllib3 from 2.0.6 to 2.0.7 in /requirements
  • 79739dc Merge pull request #183 from pypa/dependabot/pip/requirements/urllib3-2.0.6
  • 9a3f9ad [pre-commit.ci] pre-commit autoupdate
  • Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the github-workflows group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [actions-rust-lang/setup-rust-toolchain](https://github.com/actions-rust-lang/setup-rust-toolchain) | `1.5.0` | `1.6.0` |
| [taiki-e/install-action](https://github.com/taiki-e/install-action) | `2.21.19` | `2.21.26` |
| [streetsidesoftware/cspell-action](https://github.com/streetsidesoftware/cspell-action) | `5.0.0` | `5.0.1` |
| [docker/metadata-action](https://github.com/docker/metadata-action) | `5.0.0` | `5.2.0` |
| [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish) | `1.8.10` | `1.8.11` |


Updates `actions-rust-lang/setup-rust-toolchain` from 1.5.0 to 1.6.0
- [Release notes](https://github.com/actions-rust-lang/setup-rust-toolchain/releases)
- [Changelog](https://github.com/actions-rust-lang/setup-rust-toolchain/blob/main/CHANGELOG.md)
- [Commits](actions-rust-lang/setup-rust-toolchain@f3c84ee...c7e1de2)

Updates `taiki-e/install-action` from 2.21.19 to 2.21.26
- [Release notes](https://github.com/taiki-e/install-action/releases)
- [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md)
- [Commits](taiki-e/install-action@b614919...d211c4b)

Updates `streetsidesoftware/cspell-action` from 5.0.0 to 5.0.1
- [Release notes](https://github.com/streetsidesoftware/cspell-action/releases)
- [Changelog](https://github.com/streetsidesoftware/cspell-action/blob/main/CHANGELOG.md)
- [Commits](streetsidesoftware/cspell-action@52cba17...d4c3df1)

Updates `docker/metadata-action` from 5.0.0 to 5.2.0
- [Release notes](https://github.com/docker/metadata-action/releases)
- [Commits](docker/metadata-action@96383f4...e6428a5)

Updates `pypa/gh-action-pypi-publish` from 1.8.10 to 1.8.11
- [Release notes](https://github.com/pypa/gh-action-pypi-publish/releases)
- [Commits](pypa/gh-action-pypi-publish@b7f401d...2f6f737)

---
updated-dependencies:
- dependency-name: actions-rust-lang/setup-rust-toolchain
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-workflows
- dependency-name: taiki-e/install-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-workflows
- dependency-name: streetsidesoftware/cspell-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-workflows
- dependency-name: docker/metadata-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-workflows
- dependency-name: pypa/gh-action-pypi-publish
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-workflows
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot requested a review from a team as a code owner December 4, 2023 03:32
@dependabot dependabot bot added I-Dependency Impact: related to an dependency I-Github-Actions Impact: Github actions related stuff labels Dec 4, 2023
@FirelightFlagboy
Copy link
Contributor

Require #5924

@FirelightFlagboy
Copy link
Contributor

@dependabot rebase

Copy link
Contributor Author

dependabot bot commented on behalf of github Dec 4, 2023

Superseded by #5932.

@dependabot dependabot bot closed this Dec 4, 2023
@dependabot dependabot bot deleted the dependabot-github_actions-github-workflows-4c5e4878da branch December 4, 2023 15:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
I-Dependency Impact: related to an dependency I-Github-Actions Impact: Github actions related stuff
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant