Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump the github-actions group with 5 updates #59502

Merged
merged 1 commit into from
Mar 4, 2024

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 1, 2024

Bumps the github-actions group with 5 updates:

Package From To
actions/download-artifact 4.1.2 4.1.3
tj-actions/changed-files 42.0.4 42.0.5
actions/cache 4.0.0 4.0.1
shivammathur/setup-php 2.29.0 2.30.0
ramsey/composer-install 2.2.0 3.0.0

Updates actions/download-artifact from 4.1.2 to 4.1.3

Release notes

Sourced from actions/download-artifact's releases.

v4.1.3

What's Changed

New Contributors

Full Changelog: actions/download-artifact@v4...v4.1.3

Commits

Updates tj-actions/changed-files from 42.0.4 to 42.0.5

Release notes

Sourced from tj-actions/changed-files's releases.

v42.0.5

What's Changed

Full Changelog: tj-actions/changed-files@v42...v42.0.5

Changelog

Sourced from tj-actions/changed-files's changelog.

Changelog

42.0.5 - (2024-02-26)

🐛 Bug Fixes

  • deps: Update dependency yaml to v2.4.0 (2a2a5b6) - (renovate[bot])

➕ Add

  • Added missing changes and modified dist assets. (31c4d15) - (GitHub Action)
  • Added missing changes and modified dist assets. (9d447b9) - (GitHub Action)
  • Added missing changes and modified dist assets. (c2039de) - (GitHub Action)

🔄 Update

  • Update README.md (bb7502b) - (Tonye Jack)
  • Updated README.md (#1943)

Co-authored-by: jackton1 17484350+jackton1@users.noreply.github.com (9ef20a6) - (tj-actions[bot])

⚙️ Miscellaneous Tasks

  • deps: Lock file maintenance (800a282) - (renovate[bot])
  • Update README.md (#1952) (d8dcc13) - (Tonye Jack)
  • deps: Update dependency eslint to v8.57.0 (639ce0e) - (renovate[bot])
  • deps: Lock file maintenance (83bfc72) - (renovate[bot])
  • deps: Update dependency @​types/node to v20.11.20 (879c838) - (renovate[bot])
  • deps: Update typescript-eslint monorepo to v7.0.2 (5c5539c) - (renovate[bot])
  • deps: Lock file maintenance (0cbc9bc) - (renovate[bot])
  • Update action.yml (#1942) (a617853) - (Tonye Jack)

⬆️ Upgrades

  • Upgraded to v42.0.4 (#1941)

Co-authored-by: jackton1 17484350+jackton1@users.noreply.github.com (5c1bceb) - (tj-actions[bot])

42.0.4 - (2024-02-18)

⚙️ Miscellaneous Tasks

  • Update formatting and add missing dist changes (#1940) (3f54ebb) - (Tonye Jack)

⬆️ Upgrades

  • Upgraded to v42.0.3 (#1939)

... (truncated)

Commits
  • 800a282 chore(deps): lock file maintenance
  • 31c4d15 Added missing changes and modified dist assets.
  • 2a2a5b6 fix(deps): update dependency yaml to v2.4.0
  • d8dcc13 chore: Update README.md (#1952)
  • 639ce0e chore(deps): update dependency eslint to v8.57.0
  • 9d447b9 Added missing changes and modified dist assets.
  • 83bfc72 chore(deps): lock file maintenance
  • 879c838 chore(deps): update dependency @​types/node to v20.11.20
  • bb7502b Update README.md
  • 5c5539c chore(deps): update typescript-eslint monorepo to v7.0.2
  • Additional commits viewable in compare view

Updates actions/cache from 4.0.0 to 4.0.1

Release notes

Sourced from actions/cache's releases.

v4.0.1

What's Changed

New Contributors

Full Changelog: actions/cache@v4...v4.0.1

Changelog

Sourced from actions/cache's changelog.

Releases

4.0.1

  • Updated isGhes check

4.0.0

  • Updated minimum runner version support from node 12 -> node 20

3.3.3

  • Updates @​actions/cache to v3.2.3 to fix accidental mutated path arguments to getCacheVersion actions/toolkit#1378
  • Additional audit fixes of npm package(s)

3.3.2

  • Fixes bug with Azure SDK causing blob downloads to get stuck.

3.3.1

  • Reduced segment size to 128MB and segment timeout to 10 minutes to fail fast in case the cache download is stuck.

3.3.0

  • Added option to lookup cache without downloading it.

3.2.6

  • Fix zstd not being used after zstd version upgrade to 1.5.4 on hosted runners.

3.2.5

  • Added fix to prevent from setting MYSYS environment variable globally.

3.2.4

  • Added option to fail job on cache miss.

3.2.3

  • Support cross os caching on Windows as an opt-in feature.
  • Fix issue with symlink restoration on Windows for cross-os caches.

3.2.2

  • Reverted the changes made in 3.2.1 to use gnu tar and zstd by default on windows.

3.2.1

... (truncated)

Commits

Updates shivammathur/setup-php from 2.29.0 to 2.30.0

Release notes

Sourced from shivammathur/setup-php's releases.

2.30.0

Changelog

  • Add support to set custom composer timeout (#811)
- name: Setup PHP
  uses: shivammathur/setup-php@v2
  with:
    php-version: '8.3'
  env:
    COMPOSER_PROCESS_TIMEOUT: 300
  • Fix syncing dependency formulae on macOS. (#823, #825, #824)

  • Updated Node.js dependencies.

For the complete list of changes, please refer to the Full Changelog

Commits
  • a4e22b6 Bump version to 2.30.0
  • 4f6ab99 Sync brew core tap for all runners
  • a870b0a Update README [skip ci]
  • 6727113 Update README.md
  • a6ce3f5 Add support to use existing COMPOSER_PROCESS_TIMEOUT
  • 1a5ac4a Add more notes about debugging symbols in README [skip ci]
  • 765279d Merge pull request #813 from shivammathur/dependabot/github_actions/develop/c...
  • d71d15b Bump codecov/codecov-action from 3 to 4
  • ad24e86 Merge pull request #812 from shivammathur/dependabot/github_actions/develop/a...
  • 73dfd2f Bump actions/cache from 3 to 4
  • See full diff in compare view

Updates ramsey/composer-install from 2.2.0 to 3.0.0

Release notes

Sourced from ramsey/composer-install's releases.

3.0.0

Changed

  • Update actions/cache to v4 to avoid deprecation notices.

    This requires a new major version because actions/cache requires Node.js 20, which could cause backwards-compatibility breaks for any projects that require earlier versions of Node.js.

    For more details, see the discussion on #252.

2.3.1

Fixed

  • Removed upgrade to cache action runner v4 to avoid potential backwards-compatibility issues that might arise when using self-hosted runners that use Node.js 16 instead of version 20. For more details, see the discussion here: #252.

To avoid the actions/cache deprecation notices, upgrade to @v3 or @3.0.0.

2.3.0

Added

  • Add new require-lock-file input that forces a build failure if a composer.lock file is not present. (#251)

Fixed

  • Add --working-dir when looking up Composer's cache directory. This fixes "File composer.json could not be found in the current directory" errors when running composer install in sub-directories or other non-standard locations. (#225, #233, #246, #247)
  • Update cache action runner to v4 to avoid deprecation notices. (#252, #253, #254)
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the github-actions group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [actions/download-artifact](https://github.com/actions/download-artifact) | `4.1.2` | `4.1.3` |
| [tj-actions/changed-files](https://github.com/tj-actions/changed-files) | `42.0.4` | `42.0.5` |
| [actions/cache](https://github.com/actions/cache) | `4.0.0` | `4.0.1` |
| [shivammathur/setup-php](https://github.com/shivammathur/setup-php) | `2.29.0` | `2.30.0` |
| [ramsey/composer-install](https://github.com/ramsey/composer-install) | `2.2.0` | `3.0.0` |


Updates `actions/download-artifact` from 4.1.2 to 4.1.3
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](actions/download-artifact@v4.1.2...v4.1.3)

Updates `tj-actions/changed-files` from 42.0.4 to 42.0.5
- [Release notes](https://github.com/tj-actions/changed-files/releases)
- [Changelog](https://github.com/tj-actions/changed-files/blob/main/HISTORY.md)
- [Commits](tj-actions/changed-files@3f54ebb...800a282)

Updates `actions/cache` from 4.0.0 to 4.0.1
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](actions/cache@13aacd8...ab5e6d0)

Updates `shivammathur/setup-php` from 2.29.0 to 2.30.0
- [Release notes](https://github.com/shivammathur/setup-php/releases)
- [Commits](shivammathur/setup-php@6d7209f...a4e22b6)

Updates `ramsey/composer-install` from 2.2.0 to 3.0.0
- [Release notes](https://github.com/ramsey/composer-install/releases)
- [Commits](ramsey/composer-install@83af392...57532f8)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: tj-actions/changed-files
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: actions/cache
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: shivammathur/setup-php
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: ramsey/composer-install
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot requested a review from desrosj as a code owner March 1, 2024 13:10
@dependabot dependabot bot added [Type] Build Tooling Issues or PRs related to build tooling GitHub Actions Pull requests that update GitHub Actions code labels Mar 1, 2024
Copy link

github-actions bot commented Mar 4, 2024

The following accounts have interacted with this PR and/or linked issues. I will continue to update these lists as activity occurs. You can also manually ask me to refresh this list by adding the props-bot label.

If you're merging code through a pull request on GitHub, copy and paste the following into the bottom of the merge commit message.

Co-authored-by: desrosj <desrosj@git.wordpress.org>

To understand the WordPress project's expectations around crediting contributors, please review the Contributor Attribution page in the Core Handbook.

@desrosj desrosj merged commit 941d580 into trunk Mar 4, 2024
61 of 62 checks passed
@desrosj desrosj deleted the dependabot/github_actions/github-actions-f884dca274 branch March 4, 2024 11:15
@github-actions github-actions bot added this to the Gutenberg 17.9 milestone Mar 4, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
GitHub Actions Pull requests that update GitHub Actions code [Type] Build Tooling Issues or PRs related to build tooling
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant