Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

deps: bump tj-actions/glob from 17 to 18 #5058

Merged
merged 2 commits into from
Jan 14, 2024

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 5, 2024

Bumps tj-actions/glob from 17 to 18.

Release notes

Sourced from tj-actions/glob's releases.

v18

Changes in v18.0.0

🔥🔥 BREAKING CHANGE 🔥🔥

  • Input escape-paths is now enabled by default to prevent command injection via filenames

What's Changed

... (truncated)

Changelog

Sourced from tj-actions/glob's changelog.

➖ Remove

  • Deleted .github/workflows/auto-approve.yml (04b145f) - (Tonye Jack)
  • Deleted .github/workflows/greetings.yml (04628d2) - (Tonye Jack)
  • Deleted .github/ISSUE_TEMPLATE/feature_request.yaml (8c5da8a) - (Tonye Jack)
  • Deleted .github/ISSUE_TEMPLATE/bug_report.yaml (75787c1) - (Tonye Jack)
  • Deleted .github/FUNDING.yml (99143e4) - (Tonye Jack)

🔄 Update

  • Updated README.md (#1032)

Co-authored-by: jackton1 jackton1@users.noreply.github.com (7364209) - (tj-actions[bot])

  • Updated README.md (bc00b7c) - (jackton1)
  • Update README.md (1a402ff) - (Tonye Jack)
  • Updated README.md (811c474) - (repo-ranger[bot])
  • Update update-readme.yml (6d3d633) - (Tonye Jack)
  • Updated .github/FUNDING.yml (397e794) - (Tonye Jack)
  • Updated .github/FUNDING.yml (ecac9cc) - (Tonye Jack)
  • Updated README.md (cf554ca) - (repo-ranger[bot])

📝 Other

  • PR #1028: update dependency eslint-plugin-jest to v27.6.1 (5022ea0) - (repo-ranger[bot])
  • PR #1027: update typescript-eslint monorepo to v6.17.0 (3071c0c) - (repo-ranger[bot])
  • PR #1026: lock file maintenance (630f6b6) - (repo-ranger[bot])
  • PR #1025: update dependency @​types/node to v20.10.6 (c37f3bc) - (repo-ranger[bot])
  • PR #1023: tj-actions/verify-changed-files from 16 to 17 (1fe16e1) - (repo-ranger[bot])
  • PR #1024: update tj-actions/verify-changed-files action to v17 (9d96c31) - (repo-ranger[bot])
  • PR #1022: update typescript-eslint monorepo to v6.16.0 (0ba0602) - (repo-ranger[bot])
  • PR #1021: lock file maintenance (9c14630) - (repo-ranger[bot])
  • PR #1020: update dependency eslint-plugin-prettier to v5.1.2 (dff7478) - (repo-ranger[bot])
  • PR #1018: update dependency eslint-plugin-prettier to v5.1.1 (738eace) - (repo-ranger[bot])
  • PR #1017: update typescript-eslint monorepo to v6.15.0 (29910f5) - (repo-ranger[bot])
  • PR #1016: update actions/setup-node action to v4.0.1 (0922c47) - (repo-ranger[bot])
  • PR #1015: lock file maintenance (2a982ae) - (repo-ranger[bot])
  • PR #1014: update dependency @​types/node to v20.10.5 (5e92dee) - (repo-ranger[bot])
  • PR #1013: update dependency eslint to v8.56.0 (08fae9e) - (repo-ranger[bot])
  • PR #1008: update github/codeql-action action to v3 (f0013f9) - (repo-ranger[bot])
  • PR #1007: update typescript-eslint monorepo to v6.14.0 (2562494) - (repo-ranger[bot])
  • PR #1006: lock file maintenance (ebebee9) - (repo-ranger[bot])
  • PR #1005: update dependency prettier to v3.1.1 (29e4fb4) - (repo-ranger[bot])
  • PR #1004: README.md (cd776a0) - (repo-ranger[bot])
  • PR #1003: update dependency @​types/node to v20.10.4 (887c8ca) - (repo-ranger[bot])
  • PR #1002: update dependency typescript to v5.3.3 (179c38c) - (repo-ranger[bot])
  • PR #1001: update dependency @​types/jest to v29.5.11 (187fc5d) - (repo-ranger[bot])
  • PR #1000: update typescript-eslint monorepo to v6.13.2 (cdaa5f4) - (repo-ranger[bot])

... (truncated)

Commits
  • 7364209 Updated README.md (#1032)
  • 11737bf feat: enable escaping unsafe filename characters by default (#1031)
  • 37015c4 chore: update escapeString function (#1030)
  • 5022ea0 Merge pull request #1028 from tj-actions/renovate/eslint-plugin-jest-27.x
  • 46d02d8 chore(deps): update dependency eslint-plugin-jest to v27.6.1
  • 3071c0c Merge pull request #1027 from tj-actions/renovate/typescript-eslint-monorepo
  • 20bf59e chore(deps): update typescript-eslint monorepo to v6.17.0
  • 630f6b6 Merge pull request #1026 from tj-actions/renovate/lock-file-maintenance
  • 470402c chore(deps): lock file maintenance
  • c37f3bc Merge pull request #1025 from tj-actions/renovate/node-20.x
  • Additional commits viewable in compare view

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update Github_actions code labels Jan 5, 2024
@dependabot dependabot bot force-pushed the dependabot/github_actions/tj-actions/glob-18 branch 3 times, most recently from f502c6b to 495df2e Compare January 11, 2024 08:16
Bumps [tj-actions/glob](https://github.com/tj-actions/glob) from 17 to 18.
- [Release notes](https://github.com/tj-actions/glob/releases)
- [Changelog](https://github.com/tj-actions/glob/blob/main/HISTORY.md)
- [Commits](tj-actions/glob@v17...v18)

---
updated-dependencies:
- dependency-name: tj-actions/glob
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/github_actions/tj-actions/glob-18 branch from 495df2e to 9a7713c Compare January 12, 2024 08:04
@mergify mergify bot merged commit ca376f1 into master Jan 14, 2024
71 of 72 checks passed
@mergify mergify bot deleted the dependabot/github_actions/tj-actions/glob-18 branch January 14, 2024 00:02
AgeManning pushed a commit to sigp/rust-libp2p that referenced this pull request Jan 15, 2024
* ci: unset `RUSTFLAGS` value in semver job

Don't fail semver-checking if a dependency version has warnings, such as deprecation notices.

Related: libp2p#4932 (comment).
Related: obi1kenobi/cargo-semver-checks#589.

Pull-Request: libp2p#4942.

* deps(webrtc): bump alpha versions

Bumps versions of `libp2p-webrtc` and `libp2p-webrtc-websys` up one minor version.

Fixes: libp2p#4953.

Pull-Request: libp2p#4959.

* feat(request-response): derive `PartialOrd`,`Ord` for `{Out,In}RequestId`

Pull-Request: libp2p#4956.

* refactor(connection-limits): make `check_limit` a free-function

Pull-Request: libp2p#4958.

* chore(webrtc-utils): bump version to allow for new release

We didn't bump this crate's version despite it depending on `libp2p_noise`. As such, we can't release `libp2p-webrtc-websys` at the moment because it needs a new release of this crate.

Pull-Request: libp2p#4968.

* feat(webrtc-websys): hide `libp2p_noise` from the public API

Currently, `libp2p-webrtc-websys` exposes the `libp2p_noise` dependency in its public API. It should really be a private dependency of the crate. By wrapping it in a new-type, we can achieve this.

Pull-Request: libp2p#4969.

* fix(kad): iterator progress to be decided by any of new peers

Pull-Request: libp2p#4932.

* chore(quic): set `max_idle_timeout` to quinn default timeout

Resolves libp2p#4917.

Pull-Request: libp2p#4965.

* feat(core): impl Display on ListenerId

Fixes: libp2p#4935.

Pull-Request: libp2p#4936.

* feat(server): support websocket

Pull-Request: libp2p#4937.

* feat(swarm): implement `Copy` and `Clone` for `FromSwarm`

We can make `FromSwarm` implement `Copy` and `Close` which makes it much easier to

a) generate code in `libp2p-swarm-derive`
b) manually wrap a `NetworkBehaviour`

Previously, we couldn't do this because `ConnectionClosed` would have a `handler` field that cannot be cloned / copied.

Related: libp2p#4076.
Related: libp2p#4581.

Pull-Request: libp2p#4825.

* deps: bump wasm-bindgen-futures from 0.4.38 to 0.4.39

Pull-Request: libp2p#4946.

* feat(connection-limit): add function to mutate `ConnectionLimits`

Resolves: libp2p#4826.

Pull-Request: libp2p#4964.

* deps: bump web-sys from 0.3.65 to 0.3.66

Pull-Request: libp2p#4976.

* deps: bump wasm-bindgen-test from 0.3.38 to 0.3.39

Pull-Request: libp2p#4975.

* fix(kad): don't assume `QuerId`s are unique

We mistakenly assumed that `QueryId`s are unique in that, only a single request will be emitted per `QueryId`. This is wrong. A bootstrap for example will issue multiple requests as part of the same `QueryId`. Thus, we cannot use the `QueryId` as a key for the `FuturesMap`. Instead, we use a `FuturesTupleSet` to associate the `QueryId` with the in-flight request.

Related: libp2p#4901.
Resolves: libp2p#4948.

Pull-Request: libp2p#4971.

* fix(webrtc example): clarify idle connection timeout

When I ran the `example/browser-webrtc` example I discovered it would break after a ping or two.
The `Ping` idle timeout needed to be extended, on both the server and the wasm client, which is what this PR fixes.
I also added a small note to the README about ensuring `wasm-pack` is install for the users who are new to the ecosystem.

Fixes: libp2p#4950.

Pull-Request: libp2p#4966.

* docs(examples/readme): fix broken link

Related: libp2p#3536.

Pull-Request: libp2p#4984.

* feat(yamux): auto-tune (dynamic) stream receive window

libp2p/rust-yamux#176 enables auto-tuning for the Yamux stream receive window. While preserving small buffers on low-latency and/or low-bandwidth connections, this change allows for high-latency and/or high-bandwidth connections to exhaust the available bandwidth on a single stream.

Using the [libp2p perf](https://github.com/libp2p/test-plans/blob/master/perf/README.md) benchmark tools (60ms, 10Gbit/s) shows an **improvement from 33 Mbit/s to 1.3 Gbit/s** in single stream throughput.

See libp2p/rust-yamux#176 for details.

To ship the above Rust Yamux change in a libp2p patch release (non-breaking), this pull request uses `yamux` `v0.13` (new version) by default and falls back to `yamux` `v0.12` (old version) when setting any configuration options. Thus default users benefit from the increased performance, while power users with custom configurations maintain the old behavior.

Pull-Request: libp2p#4970.

* deps: bump actions/deploy-pages from 2 to 3

Pull-Request: libp2p#4978.

* deps: bump the axum group with 2 updates

Pull-Request: libp2p#4943.

* chore(webrtc-websys): remove unused dependencies

Pull-Request: libp2p#4973.

* chore(quic): fix link to PR in changelog

Pull-Request: libp2p#4993.

* deps: bump tokio from 1.34.0 to 1.35.0

Pull-Request: libp2p#4995.

* deps: bump syn from 2.0.39 to 2.0.40

Pull-Request: libp2p#4996.

* deps: bump once_cell from 1.18.0 to 1.19.0

Pull-Request: libp2p#4998.

* deps: bump hkdf from 0.12.3 to 0.12.4

Pull-Request: libp2p#5009.

* deps: bump clap from 4.4.10 to 4.4.11

Pull-Request: libp2p#4997.

* deps: bump thiserror from 1.0.50 to 1.0.51

Pull-Request: libp2p#5010.

* deps: bump syn from 2.0.40 to 2.0.41

Pull-Request: libp2p#5011.

* deps: bump async-io from 2.2.1 to 2.2.2

Pull-Request: libp2p#5012.

* deps: bump rust-embed from 8.0.0 to 8.1.0

Pull-Request: libp2p#5000.

* chore(deps): bump golang.org/x/crypto from 0.7.0 to 0.17.0

Pull-Request: libp2p#5019.

* deps: bump libc from 0.2.150 to 0.2.151

Pull-Request: libp2p#5002.

* docs: remove security@libp2p.io

I no longer have access to the mailing list. See
libp2p#5007.

Pull-Request: libp2p#5020.

* chore: fix typos

Pull-Request: libp2p#5021.

* fix(derive): restore support for inline generic type constraints

Fixes the `#[NetworkBehaviour]` macro to support generic constraints on behaviours without a where clause, which was the case before v0.51.

Pull-Request: libp2p#5003.

* deps: bump actions/deploy-pages from 3 to 4

Pull-Request: libp2p#5022.

* chore: fix several typos in documentation

Pull-Request: libp2p#5008.

* deps: bump async-trait from 0.1.74 to 0.1.75

Pull-Request: libp2p#5029.

* deps: bump anyhow from 1.0.75 to 1.0.76

Pull-Request: libp2p#5030.

* deps: bump futures-util from 0.3.29 to 0.3.30

Pull-Request: libp2p#5031.

* deps: bump syn from 2.0.41 to 2.0.43

Pull-Request: libp2p#5033.

* deps: bump tokio from 1.35.0 to 1.35.1

Pull-Request: libp2p#5034.

* deps: bump reqwest from 0.11.22 to 0.11.23

Pull-Request: libp2p#5035.

* deps: bump futures from 0.3.29 to 0.3.30

Pull-Request: libp2p#5032.

* deps: bump trybuild from 1.0.85 to 1.0.86

Pull-Request: libp2p#5036.

* deps: bump proc-macro2 from 1.0.69 to 1.0.71

Pull-Request: libp2p#5041.

* deps: bump actions/upload-pages-artifact from 2.0.0 to 3.0.0

Pull-Request: libp2p#5023.

* deps: bump Rust to 1.75 and fix clippy lints

Pull-Request: libp2p#5043.

* deps: bump thiserror from 1.0.51 to 1.0.53

Pull-Request: libp2p#5044.

* deps: bump clap from 4.4.11 to 4.4.12

Pull-Request: libp2p#5046.

* deps: bump tempfile from 3.8.1 to 3.9.0

Pull-Request: libp2p#5047.

* deps: bump rust-embed from 8.1.0 to 8.2.0

Pull-Request: libp2p#5049.

* deps: bump serde_json from 1.0.108 to 1.0.109

Pull-Request: libp2p#5050.

* deps: bump anyhow from 1.0.76 to 1.0.78

Pull-Request: libp2p#5051.

* deps: bump proc-macro2 from 1.0.71 to 1.0.73

Pull-Request: libp2p#5054.

* deps: bump quote from 1.0.33 to 1.0.34

Pull-Request: libp2p#5055.

* deps: bump anyhow from 1.0.78 to 1.0.79

Pull-Request: libp2p#5062.

* deps: bump serde_json from 1.0.109 to 1.0.111

Pull-Request: libp2p#5063.

* deps: bump thiserror from 1.0.53 to 1.0.56

Pull-Request: libp2p#5064.

* deps: bump libc from 0.2.151 to 0.2.152

Pull-Request: libp2p#5065.

* deps: bump trybuild from 1.0.86 to 1.0.88

Pull-Request: libp2p#5068.

* deps: bump proc-macro2 from 1.0.73 to 1.0.76

Pull-Request: libp2p#5069.

* deps: bump clap from 4.4.12 to 4.4.13

Pull-Request: libp2p#5070.

* deps: bump Swatinem/rust-cache from 2.7.1 to 2.7.2

Pull-Request: libp2p#5076.

* deps: bump tj-actions/glob from 17 to 18

Pull-Request: libp2p#5058.

* deps: bump the axum group with 1 update

Pull-Request: libp2p#5045.

* deps: bump quote from 1.0.34 to 1.0.35

Pull-Request: libp2p#5071.

* deps: bump async-trait from 0.1.75 to 0.1.77

Pull-Request: libp2p#5081.

* ci: add dependabot group for webrtc

Pull-Request: libp2p#5082.

* deps: bump base64 from 0.21.5 to 0.21.7

Pull-Request: libp2p#5086.

* deps: bump trybuild from 1.0.88 to 1.0.89

Pull-Request: libp2p#5087.

* deps: bump js-sys from 0.3.66 to 0.3.67

Pull-Request: libp2p#5091.

* deps: bump wasm-bindgen from 0.2.89 to 0.2.90

Pull-Request: libp2p#5089.

* add PeerId to ListenFailure

---------

Co-authored-by: Predrag Gruevski <2348618+obi1kenobi@users.noreply.github.com>
Co-authored-by: Doug A <douganderson444@gmail.com>
Co-authored-by: Darius Clark <dariusc93@users.noreply.github.com>
Co-authored-by: zhiqiangxu <652732310@qq.com>
Co-authored-by: Thomas Eizinger <thomas@eizinger.io>
Co-authored-by: maqi <qi.ma@maidsafe.net>
Co-authored-by: stormshield-frb <144998884+stormshield-frb@users.noreply.github.com>
Co-authored-by: Max Inden <mail@max-inden.de>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: NAHO <90870942+trueNAHO@users.noreply.github.com>
Co-authored-by: alex <152680487+bodhi-crypo@users.noreply.github.com>
Co-authored-by: Akosh Farkash <aakoshh@gmail.com>
Co-authored-by: Frieren <153332328+Frierened@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file github_actions Pull requests that update Github_actions code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant