-
-
Notifications
You must be signed in to change notification settings - Fork 4
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Bump the github-actions group across 1 directory with 13 updates #305
Open
dependabot
wants to merge
1
commit into
main
Choose a base branch
from
dependabot/github_actions/github-actions-6c7a0725f3
base: main
Could not load branches
Branch not found: {{ refName }}
Loading
Could not load tags
Nothing to show
Loading
Are you sure you want to change the base?
Some commits from the old base branch may be removed from the timeline,
and old review comments may become outdated.
Open
Bump the github-actions group across 1 directory with 13 updates #305
dependabot
wants to merge
1
commit into
main
from
dependabot/github_actions/github-actions-6c7a0725f3
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Bumps the github-actions group with 13 updates in the / directory: | Package | From | To | | --- | --- | --- | | [step-security/harden-runner](https://github.com/step-security/harden-runner) | `2.5.1` | `2.8.1` | | [actions/checkout](https://github.com/actions/checkout) | `3.5.3` | `4.1.7` | | [EmbarkStudios/cargo-deny-action](https://github.com/embarkstudios/cargo-deny-action) | `1.5.5` | `1.6.3` | | [docker/login-action](https://github.com/docker/login-action) | `3.0.0` | `3.2.0` | | [docker/metadata-action](https://github.com/docker/metadata-action) | `5.0.0` | `5.5.1` | | [docker/build-push-action](https://github.com/docker/build-push-action) | `5.0.0` | `6.1.0` | | [peter-evans/dockerhub-description](https://github.com/peter-evans/dockerhub-description) | `3.4.2` | `4.0.0` | | [fsfe/reuse-action](https://github.com/fsfe/reuse-action) | `2` | `3` | | [github/codeql-action](https://github.com/github/codeql-action) | `2.22.5` | `3.25.10` | | [ossf/scorecard-action](https://github.com/ossf/scorecard-action) | `2.3.1` | `2.3.3` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `3.1.2` | `4.3.3` | | [crate-ci/typos](https://github.com/crate-ci/typos) | `1.16.21` | `1.22.9` | | [codecov/codecov-action](https://github.com/codecov/codecov-action) | `3` | `4` | Updates `step-security/harden-runner` from 2.5.1 to 2.8.1 - [Release notes](https://github.com/step-security/harden-runner/releases) - [Commits](step-security/harden-runner@v2.5.1...17d0e2b) Updates `actions/checkout` from 3.5.3 to 4.1.7 - [Release notes](https://github.com/actions/checkout/releases) - [Commits](actions/checkout@v3.5.3...v4.1.7) Updates `EmbarkStudios/cargo-deny-action` from 1.5.5 to 1.6.3 - [Release notes](https://github.com/embarkstudios/cargo-deny-action/releases) - [Commits](EmbarkStudios/cargo-deny-action@1e59595...3f4a782) Updates `docker/login-action` from 3.0.0 to 3.2.0 - [Release notes](https://github.com/docker/login-action/releases) - [Commits](docker/login-action@343f7c4...0d4c9c5) Updates `docker/metadata-action` from 5.0.0 to 5.5.1 - [Release notes](https://github.com/docker/metadata-action/releases) - [Commits](docker/metadata-action@96383f4...8e5442c) Updates `docker/build-push-action` from 5.0.0 to 6.1.0 - [Release notes](https://github.com/docker/build-push-action/releases) - [Commits](docker/build-push-action@0565240...31159d4) Updates `peter-evans/dockerhub-description` from 3.4.2 to 4.0.0 - [Release notes](https://github.com/peter-evans/dockerhub-description/releases) - [Commits](peter-evans/dockerhub-description@dc67fad...e98e4d1) Updates `fsfe/reuse-action` from 2 to 3 - [Release notes](https://github.com/fsfe/reuse-action/releases) - [Commits](fsfe/reuse-action@v2...v3) Updates `github/codeql-action` from 2.22.5 to 3.25.10 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@74483a3...23acc5c) Updates `ossf/scorecard-action` from 2.3.1 to 2.3.3 - [Release notes](https://github.com/ossf/scorecard-action/releases) - [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md) - [Commits](ossf/scorecard-action@0864cf1...dc50aa9) Updates `actions/upload-artifact` from 3.1.2 to 4.3.3 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@v3.1.2...6546280) Updates `crate-ci/typos` from 1.16.21 to 1.22.9 - [Release notes](https://github.com/crate-ci/typos/releases) - [Changelog](https://github.com/crate-ci/typos/blob/master/CHANGELOG.md) - [Commits](crate-ci/typos@47dd297...c16dc8f) Updates `codecov/codecov-action` from 3 to 4 - [Release notes](https://github.com/codecov/codecov-action/releases) - [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md) - [Commits](codecov/codecov-action@v3...v4) --- updated-dependencies: - dependency-name: step-security/harden-runner dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: EmbarkStudios/cargo-deny-action dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: docker/login-action dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: docker/metadata-action dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: docker/build-push-action dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: peter-evans/dockerhub-description dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: fsfe/reuse-action dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: ossf/scorecard-action dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: actions/upload-artifact dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: crate-ci/typos dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: codecov/codecov-action dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
dependencies
Pull requests that update a dependency file
github_actions
Pull requests that update GitHub Actions code
labels
Jun 24, 2024
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Labels
dependencies
Pull requests that update a dependency file
github_actions
Pull requests that update GitHub Actions code
0 participants
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the github-actions group with 13 updates in the / directory:
2.5.1
2.8.1
3.5.3
4.1.7
1.5.5
1.6.3
3.0.0
3.2.0
5.0.0
5.5.1
5.0.0
6.1.0
3.4.2
4.0.0
2
3
2.22.5
3.25.10
2.3.1
2.3.3
3.1.2
4.3.3
1.16.21
1.22.9
3
4
Updates
step-security/harden-runner
from 2.5.1 to 2.8.1Release notes
Sourced from step-security/harden-runner's releases.
... (truncated)
Commits
17d0e2b
Merge pull request #425 from step-security/rc-9bb112d0
Update isGitHubHosted implementationf4f3f44
Merge pull request #407 from step-security/dependabot/github_actions/actions/...7a946b5
Bump actions/dependency-review-action from 3.1.3 to 4.3.275a01c2
Merge pull request #417 from step-security/dependabot/github_actions/step-sec...53413f1
Bump step-security/harden-runner from 2.7.1 to 2.8.0f086349
Merge pull request #416 from step-security/rc-8b9c325d
Update image808a771
Add info about file and process events7171429
Update agentUpdates
actions/checkout
from 3.5.3 to 4.1.7Release notes
Sourced from actions/checkout's releases.
... (truncated)
Commits
692973e
Prepare 4.1.7 release (#1775)6ccd57f
Pin actions/checkout's own workflows to a known, good, stable version. (#1776)b17fe1e
Handle hidden refs (#1774)b80ff79
Bump actions/checkout from 3 to 4 (#1697)b1ec302
Bump the minor-npm-dependencies group across 1 directory with 4 updates (#1739)a5ac7e5
Update for 4.1.6 release (#1733)24ed1a3
Check platform for extension (#1732)44c2b7a
README: Suggestuser.email
to be `41898282+github-actions[bot]@users
.norepl...8459bc0
Bump actions/upload-artifact from 2 to 4 (#1695)3f603f6
Bump actions/setup-node from 1 to 4 (#1696)Updates
EmbarkStudios/cargo-deny-action
from 1.5.5 to 1.6.3Release notes
Sourced from EmbarkStudios/cargo-deny-action's releases.
Commits
3f4a782
Bump to 0.14.21b01e7a8
Bump to 0.14.1964015a6
Bump to 0.14.16c3a7e67
Bump to 0.14.1578eae4c
Stick with v1 for now35ded44
Update to v2c4068a9
Prep release (#75)68cd9c5
Add actual testing of the changes in a PR (#72)549bc52
Add manifest-path variable (#70)c86e4a9
Add wasm-oidc-plugin (#69)Updates
docker/login-action
from 3.0.0 to 3.2.0Release notes
Sourced from docker/login-action's releases.
Commits
0d4c9c5
Merge pull request #722 from crazy-max/update-readmeb29e14f
add contributing section to README218a70c
Merge pull request #721 from docker/dependabot/npm_and_yarn/docker/actions-to...b820080
build(deps): bump@docker/actions-toolkit
from 0.23.0 to 0.24.027530a9
Merge pull request #720 from docker/dependabot/npm_and_yarn/aws-sdk-dependenc...d072a60
chore: update generated content7c627b5
build(deps): bump the aws-sdk-dependencies group across 1 directory with 2 up...787cfc6
Merge pull request #694 from docker/dependabot/npm_and_yarn/undici-5.28.48e66e91
chore: update generated content5ba5e97
build(deps): bump undici from 5.28.3 to 5.28.4Updates
docker/metadata-action
from 5.0.0 to 5.5.1Release notes
Sourced from docker/metadata-action's releases.
Commits
8e5442c
Merge pull request #382 from crazy-max/dont-set-cwd-prefixeda41b7
chore: update generated content388c08f
don't set cwd:// prefix for local bake filesdbef880
Merge pull request #374 from docker/dependabot/npm_and_yarn/moment-timezone-0...b73e7a7
chore: update generated contentb9fba69
chore(deps): Bump moment-timezone from 0.5.43 to 0.5.44ac82374
Merge pull request #373 from docker/dependabot/npm_and_yarn/moment-2.30.1c92519a
chore: update generated content3b4179d
chore(deps): Bump moment from 2.29.4 to 2.30.10784993
Merge pull request #371 from docker/dependabot/npm_and_yarn/docker/actions-to...Updates
docker/build-push-action
from 5.0.0 to 6.1.0Release notes
Sourced from docker/build-push-action's releases.
... (truncated)
Commits
31159d4
Merge pull request #1149 from docker/dependabot/npm_and_yarn/docker/actions-t...07e1c3e
chore: update generated contentf7febd6
chore(deps): Bump@docker/actions-toolkit
from 0.26.2 to 0.27.0f6010ea
Merge pull request #1147 from docker/dependabot/npm_and_yarn/docker/actions-t...c0a6b96
chore: update generated content0dfe9c3
chore(deps): Bump@docker/actions-toolkit
from 0.26.1 to 0.26.294f8f8c
Merge pull request #1142 from docker/dependabot/npm_and_yarn/docker/actions-t...22f4433
chore: update generated content6721c56
chore(deps): Bump@docker/actions-toolkit
from 0.26.0 to 0.26.14367da9
Merge pull request #1140 from docker/dependabot/github_actions/docker/bake-ac...Updates
peter-evans/dockerhub-description
from 3.4.2 to 4.0.0Release notes
Sourced from peter-evans/dockerhub-description's releases.
... (truncated)
Commits
e98e4d1
feat: update runtime to node 20 (#246)487b453
build(deps-dev): bump@types/node
from 16.18.70 to 16.18.73 (#245)f4367f9
build(deps-dev): bump prettier from 3.2.2 to 3.2.4 (#244)48ae68f
build(deps-dev): bump@types/node
from 16.18.69 to 16.18.70 (#241)dfc61b8
build(deps-dev): bump prettier from 3.1.1 to 3.2.2 (#243)74967fb
build(deps-dev): bump eslint-plugin-prettier from 5.1.2 to 5.1.3 (#242)7ea9d27
build(deps-dev): bump@types/node
from 16.18.68 to 16.18.69 (#240)7bc76ab
build(deps-dev): bump eslint-plugin-prettier from 5.0.1 to 5.1.2 (#239)5a219e7
build(deps): bump actions/download-artifact from 3 to 4 (#236)fb37f44
build(deps-dev): bump eslint from 8.55.0 to 8.56.0 (#238)Updates
fsfe/reuse-action
from 2 to 3Release notes
Sourced from fsfe/reuse-action's releases.
Commits
a46482c
Merge pull request #28 from fsfe/reuse-v3cd6bf02
test all major versions in workflow577d39f
bump to reuse-tool major version 34a900d3
Merge pull request #25 from ChristianTackeGSI/main1e652d5
chore: upgrade checkout step to v49522816
rename master -> mainc1c6c29
Merge pull request #23 from fsfe/ci-expand-tests7247931
improve and extend CI pipelineUpdates
github/codeql-action
from 2...Description has been truncated