Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix missing update release body #365

Merged

Conversation

FirelightFlagboy
Copy link
Contributor

This PR correct the bug I was getting in #362.

This problem was that draft aren't updated once created.

I've rewrote how the function release handle a draft and a non-draft release to be processed in the same way.

Closes #362

@FirelightFlagboy FirelightFlagboy force-pushed the fix-missing-update-release-body branch 2 times, most recently from 8a622b0 to 5f81454 Compare June 29, 2023 13:02
@mitchelbaker-cisa
Copy link

Bumping this PR since I'm facing the same issue. At times the workflow I'm generating will create a new body which I want to overwrite what's contained in a draft release. Currently the draft stays the same.

@FirelightFlagboy FirelightFlagboy force-pushed the fix-missing-update-release-body branch from 5f81454 to d9a17b2 Compare March 4, 2024 10:53
@FirelightFlagboy
Copy link
Contributor Author

Hello @softprops, I'm pinging you in hope that you could review this PR :)

@chenrui333
Copy link
Collaborator

@FirelightFlagboy can you fix the merge conflicts? Thanks!

@chenrui333 chenrui333 added the bug Something isn't working label Jun 19, 2024
@FirelightFlagboy FirelightFlagboy force-pushed the fix-missing-update-release-body branch from d9a17b2 to a73b1ab Compare June 20, 2024 08:49
@FirelightFlagboy FirelightFlagboy force-pushed the fix-missing-update-release-body branch from a73b1ab to 395b9cc Compare June 20, 2024 08:50
@chenrui333 chenrui333 merged commit fb2d031 into softprops:master Jul 17, 2024
1 check passed
@chenrui333
Copy link
Collaborator

@FirelightFlagboy thanks for helping out.

@vadz vadz mentioned this pull request Jul 17, 2024
mergify bot referenced this pull request in andrzejressel/pulumi-wasm Jul 17, 2024
[![Mend Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [softprops/action-gh-release](https://github.com/softprops/action-gh-release) | action | patch | `v2.0.6` -> `v2.0.7` |

---

### Release Notes

<details>
<summary>softprops/action-gh-release (softprops/action-gh-release)</summary>

### [`v2.0.7`](https://github.com/softprops/action-gh-release/releases/tag/v2.0.7)

[Compare Source](https://github.com/softprops/action-gh-release/compare/v2.0.6...v2.0.7)



#### What's Changed

##### Bug fixes 🐛

-   Fix missing update release body by [@&#8203;FirelightFlagboy](https://github.com/FirelightFlagboy) in [https://github.com/softprops/action-gh-release/pull/365](https://github.com/softprops/action-gh-release/pull/365)

##### Other Changes 🔄

-   Bump [@&#8203;octokit/plugin-retry](https://github.com/octokit/plugin-retry) from 4.0.3 to 7.1.1 by [@&#8203;dependabot](https://github.com/dependabot) in [https://github.com/softprops/action-gh-release/pull/443](https://github.com/softprops/action-gh-release/pull/443)
-   Bump typescript from 4.9.5 to 5.5.2 by [@&#8203;dependabot](https://github.com/dependabot) in [https://github.com/softprops/action-gh-release/pull/467](https://github.com/softprops/action-gh-release/pull/467)
-   Bump [@&#8203;types/node](https://github.com/types/node) from 20.14.6 to 20.14.8 by [@&#8203;dependabot](https://github.com/dependabot) in [https://github.com/softprops/action-gh-release/pull/469](https://github.com/softprops/action-gh-release/pull/469)
-   Bump [@&#8203;types/node](https://github.com/types/node) from 20.14.8 to 20.14.9 by [@&#8203;dependabot](https://github.com/dependabot) in [https://github.com/softprops/action-gh-release/pull/473](https://github.com/softprops/action-gh-release/pull/473)
-   Bump typescript from 5.5.2 to 5.5.3 by [@&#8203;dependabot](https://github.com/dependabot) in [https://github.com/softprops/action-gh-release/pull/472](https://github.com/softprops/action-gh-release/pull/472)
-   Bump ts-jest from 29.1.5 to 29.2.2 by [@&#8203;dependabot](https://github.com/dependabot) in [https://github.com/softprops/action-gh-release/pull/479](https://github.com/softprops/action-gh-release/pull/479)
-   docs: document that existing releases are updated by [@&#8203;jvanbruegge](https://github.com/jvanbruegge) in [https://github.com/softprops/action-gh-release/pull/474](https://github.com/softprops/action-gh-release/pull/474)

#### New Contributors

-   [@&#8203;jvanbruegge](https://github.com/jvanbruegge) made their first contribution in [https://github.com/softprops/action-gh-release/pull/474](https://github.com/softprops/action-gh-release/pull/474)
-   [@&#8203;FirelightFlagboy](https://github.com/FirelightFlagboy) made their first contribution in [https://github.com/softprops/action-gh-release/pull/365](https://github.com/softprops/action-gh-release/pull/365)

**Full Changelog**: softprops/action-gh-release@v2.0.6...v2.0.7

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://developer.mend.io/github/andrzejressel/pulumi-wasm).
cgrindel-self-hosted-renovate bot referenced this pull request in cgrindel/renovate-bot Jul 17, 2024
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[softprops/action-gh-release](https://github.com/softprops/action-gh-release)
| action | patch | `v2.0.6` -> `v2.0.7` |

---

### Release Notes

<details>
<summary>softprops/action-gh-release
(softprops/action-gh-release)</summary>

###
[`v2.0.7`](https://github.com/softprops/action-gh-release/releases/tag/v2.0.7)

[Compare
Source](https://github.com/softprops/action-gh-release/compare/v2.0.6...v2.0.7)

<!-- Release notes generated using configuration in .github/release.yml
at master -->

#### What's Changed

##### Bug fixes 🐛

- Fix missing update release body by
[@&#8203;FirelightFlagboy](https://github.com/FirelightFlagboy) in
[https://github.com/softprops/action-gh-release/pull/365](https://github.com/softprops/action-gh-release/pull/365)

##### Other Changes 🔄

- Bump
[@&#8203;octokit/plugin-retry](https://github.com/octokit/plugin-retry)
from 4.0.3 to 7.1.1 by
[@&#8203;dependabot](https://github.com/dependabot) in
[https://github.com/softprops/action-gh-release/pull/443](https://github.com/softprops/action-gh-release/pull/443)
- Bump typescript from 4.9.5 to 5.5.2 by
[@&#8203;dependabot](https://github.com/dependabot) in
[https://github.com/softprops/action-gh-release/pull/467](https://github.com/softprops/action-gh-release/pull/467)
- Bump [@&#8203;types/node](https://github.com/types/node) from
20.14.6 to 20.14.8 by
[@&#8203;dependabot](https://github.com/dependabot) in
[https://github.com/softprops/action-gh-release/pull/469](https://github.com/softprops/action-gh-release/pull/469)
- Bump [@&#8203;types/node](https://github.com/types/node) from
20.14.8 to 20.14.9 by
[@&#8203;dependabot](https://github.com/dependabot) in
[https://github.com/softprops/action-gh-release/pull/473](https://github.com/softprops/action-gh-release/pull/473)
- Bump typescript from 5.5.2 to 5.5.3 by
[@&#8203;dependabot](https://github.com/dependabot) in
[https://github.com/softprops/action-gh-release/pull/472](https://github.com/softprops/action-gh-release/pull/472)
- Bump ts-jest from 29.1.5 to 29.2.2 by
[@&#8203;dependabot](https://github.com/dependabot) in
[https://github.com/softprops/action-gh-release/pull/479](https://github.com/softprops/action-gh-release/pull/479)
- docs: document that existing releases are updated by
[@&#8203;jvanbruegge](https://github.com/jvanbruegge) in
[https://github.com/softprops/action-gh-release/pull/474](https://github.com/softprops/action-gh-release/pull/474)

#### New Contributors

- [@&#8203;jvanbruegge](https://github.com/jvanbruegge) made their
first contribution in
[https://github.com/softprops/action-gh-release/pull/474](https://github.com/softprops/action-gh-release/pull/474)
- [@&#8203;FirelightFlagboy](https://github.com/FirelightFlagboy) made
their first contribution in
[https://github.com/softprops/action-gh-release/pull/365](https://github.com/softprops/action-gh-release/pull/365)

**Full Changelog**:
softprops/action-gh-release@v2.0.6...v2.0.7

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config help](https://github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNi4xMDkuNCIsInVwZGF0ZWRJblZlciI6IjM2LjEwOS40IiwidGFyZ2V0QnJhbmNoIjoibWFpbiJ9-->

Co-authored-by: Self-hosted Renovate Bot <361546+cgrindel-self-hosted-renovate[bot]@users.noreply.github.enterprise.com>
rpdelaney referenced this pull request in rpdelaney/downforeveryone Jul 18, 2024
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[softprops/action-gh-release](https://github.com/softprops/action-gh-release)
| action | patch | `v2.0.6` -> `v2.0.8` |

---

### Release Notes

<details>
<summary>softprops/action-gh-release
(softprops/action-gh-release)</summary>

###
[`v2.0.8`](https://github.com/softprops/action-gh-release/releases/tag/v2.0.8)

[Compare
Source](https://github.com/softprops/action-gh-release/compare/v2.0.7...v2.0.8)

<!-- Release notes generated using configuration in .github/release.yml
at master -->

#### What's Changed

##### Other Changes 🔄

- chore(deps): bump prettier from 2.8.0 to 3.3.3 by
[@&#8203;dependabot](https://github.com/dependabot) in
[https://github.com/softprops/action-gh-release/pull/480](https://github.com/softprops/action-gh-release/pull/480)
- chore(deps): bump
[@&#8203;types/node](https://github.com/types/node) from 20.14.9 to
20.14.11 by [@&#8203;dependabot](https://github.com/dependabot) in
[https://github.com/softprops/action-gh-release/pull/483](https://github.com/softprops/action-gh-release/pull/483)
- chore(deps): bump
[@&#8203;octokit/plugin-throttling](https://github.com/octokit/plugin-throttling)
from 9.3.0 to 9.3.1 by
[@&#8203;dependabot](https://github.com/dependabot) in
[https://github.com/softprops/action-gh-release/pull/484](https://github.com/softprops/action-gh-release/pull/484)
- chore(deps): bump glob from 10.4.2 to 11.0.0 by
[@&#8203;dependabot](https://github.com/dependabot) in
[https://github.com/softprops/action-gh-release/pull/477](https://github.com/softprops/action-gh-release/pull/477)
- refactor: write jest config in ts by
[@&#8203;chenrui333](https://github.com/chenrui333) in
[https://github.com/softprops/action-gh-release/pull/485](https://github.com/softprops/action-gh-release/pull/485)
- chore(deps): bump
[@&#8203;actions/github](https://github.com/actions/github) from 5.1.1
to 6.0.0 by [@&#8203;dependabot](https://github.com/dependabot) in
[https://github.com/softprops/action-gh-release/pull/470](https://github.com/softprops/action-gh-release/pull/470)

**Full Changelog**:
softprops/action-gh-release@v2...v2.0.8

###
[`v2.0.7`](https://github.com/softprops/action-gh-release/releases/tag/v2.0.7)

[Compare
Source](https://github.com/softprops/action-gh-release/compare/v2.0.6...v2.0.7)

<!-- Release notes generated using configuration in .github/release.yml
at master -->

#### What's Changed

##### Bug fixes 🐛

- Fix missing update release body by
[@&#8203;FirelightFlagboy](https://github.com/FirelightFlagboy) in
[https://github.com/softprops/action-gh-release/pull/365](https://github.com/softprops/action-gh-release/pull/365)

##### Other Changes 🔄

- Bump
[@&#8203;octokit/plugin-retry](https://github.com/octokit/plugin-retry)
from 4.0.3 to 7.1.1 by
[@&#8203;dependabot](https://github.com/dependabot) in
[https://github.com/softprops/action-gh-release/pull/443](https://github.com/softprops/action-gh-release/pull/443)
- Bump typescript from 4.9.5 to 5.5.2 by
[@&#8203;dependabot](https://github.com/dependabot) in
[https://github.com/softprops/action-gh-release/pull/467](https://github.com/softprops/action-gh-release/pull/467)
- Bump [@&#8203;types/node](https://github.com/types/node) from
20.14.6 to 20.14.8 by
[@&#8203;dependabot](https://github.com/dependabot) in
[https://github.com/softprops/action-gh-release/pull/469](https://github.com/softprops/action-gh-release/pull/469)
- Bump [@&#8203;types/node](https://github.com/types/node) from
20.14.8 to 20.14.9 by
[@&#8203;dependabot](https://github.com/dependabot) in
[https://github.com/softprops/action-gh-release/pull/473](https://github.com/softprops/action-gh-release/pull/473)
- Bump typescript from 5.5.2 to 5.5.3 by
[@&#8203;dependabot](https://github.com/dependabot) in
[https://github.com/softprops/action-gh-release/pull/472](https://github.com/softprops/action-gh-release/pull/472)
- Bump ts-jest from 29.1.5 to 29.2.2 by
[@&#8203;dependabot](https://github.com/dependabot) in
[https://github.com/softprops/action-gh-release/pull/479](https://github.com/softprops/action-gh-release/pull/479)
- docs: document that existing releases are updated by
[@&#8203;jvanbruegge](https://github.com/jvanbruegge) in
[https://github.com/softprops/action-gh-release/pull/474](https://github.com/softprops/action-gh-release/pull/474)

#### New Contributors

- [@&#8203;jvanbruegge](https://github.com/jvanbruegge) made their
first contribution in
[https://github.com/softprops/action-gh-release/pull/474](https://github.com/softprops/action-gh-release/pull/474)
- [@&#8203;FirelightFlagboy](https://github.com/FirelightFlagboy) made
their first contribution in
[https://github.com/softprops/action-gh-release/pull/365](https://github.com/softprops/action-gh-release/pull/365)

**Full Changelog**:
softprops/action-gh-release@v2.0.6...v2.0.7

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/rpdelaney/downforeveryone).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy40MzEuNCIsInVwZGF0ZWRJblZlciI6IjM3LjQzMS40IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiXX0=-->
ramonpetgrave64 referenced this pull request in slsa-framework/slsa-github-generator Aug 2, 2024
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| actions/checkout | action | digest | `692973e` -> `9a9194f` |
|
[actions/download-artifact](https://github.com/actions/download-artifact)
| action | patch | `v4.1.7` -> `v4.1.8` |
| [actions/setup-go](https://github.com/actions/setup-go) | action |
patch | `v5.0.1` -> `v5.0.2` |
| [actions/setup-node](https://github.com/actions/setup-node) | action
| patch | `v4.0.2` -> `v4.0.3` |
| [actions/setup-node](https://github.com/actions/setup-node) | action
| digest | `60edb5d` -> `1e60f62` |
|
[actions/upload-artifact](https://github.com/actions/upload-artifact)
| action | patch | `v4.3.3` -> `v4.3.5` |
| [github/codeql-action](https://github.com/github/codeql-action) |
action | patch | `v3.25.11` -> `v3.25.15` |
|
[gradle/gradle-build-action](https://github.com/gradle/gradle-build-action)
| action | minor | `v3.4.2` -> `v3.5.0` |
| [ossf/scorecard-action](https://github.com/ossf/scorecard-action) |
action | minor | `v2.3.3` -> `v2.4.0` |
|
[softprops/action-gh-release](https://github.com/softprops/action-gh-release)
| action | patch | `v2.0.6` -> `v2.0.8` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>actions/download-artifact (actions/download-artifact)</summary>

###
[`v4.1.8`](https://github.com/actions/download-artifact/releases/tag/v4.1.8)

[Compare
Source](https://github.com/actions/download-artifact/compare/v4.1.7...v4.1.8)

#### What's Changed

- Update
[@&#8203;actions/artifact](https://github.com/actions/artifact)
version, bump dependencies by
[@&#8203;robherley](https://github.com/robherley) in
[https://github.com/actions/download-artifact/pull/341](https://github.com/actions/download-artifact/pull/341)

**Full Changelog**:
actions/download-artifact@v4...v4.1.8

</details>

<details>
<summary>actions/setup-go (actions/setup-go)</summary>

###
[`v5.0.2`](https://github.com/actions/setup-go/compare/v5.0.1...v5.0.2)

[Compare
Source](https://github.com/actions/setup-go/compare/v5.0.1...v5.0.2)

</details>

<details>
<summary>actions/setup-node (actions/setup-node)</summary>

###
[`v4.0.3`](https://github.com/actions/setup-node/compare/v4.0.2...v4.0.3)

[Compare
Source](https://github.com/actions/setup-node/compare/v4.0.2...v4.0.3)

</details>

<details>
<summary>actions/upload-artifact (actions/upload-artifact)</summary>

###
[`v4.3.5`](https://github.com/actions/upload-artifact/compare/v4.3.4...v4.3.5)

[Compare
Source](https://github.com/actions/upload-artifact/compare/v4.3.4...v4.3.5)

###
[`v4.3.4`](https://github.com/actions/upload-artifact/releases/tag/v4.3.4)

[Compare
Source](https://github.com/actions/upload-artifact/compare/v4.3.3...v4.3.4)

##### What's Changed

- Update
[@&#8203;actions/artifact](https://github.com/actions/artifact)
version, bump dependencies by
[@&#8203;robherley](https://github.com/robherley) in
[https://github.com/actions/upload-artifact/pull/584](https://github.com/actions/upload-artifact/pull/584)

**Full Changelog**:
actions/upload-artifact@v4.3.3...v4.3.4

</details>

<details>
<summary>github/codeql-action (github/codeql-action)</summary>

###
[`v3.25.15`](https://github.com/github/codeql-action/compare/v3.25.14...v3.25.15)

[Compare
Source](https://github.com/github/codeql-action/compare/v3.25.14...v3.25.15)

###
[`v3.25.14`](https://github.com/github/codeql-action/compare/v3.25.13...v3.25.14)

[Compare
Source](https://github.com/github/codeql-action/compare/v3.25.13...v3.25.14)

###
[`v3.25.13`](https://github.com/github/codeql-action/compare/v3.25.12...v3.25.13)

[Compare
Source](https://github.com/github/codeql-action/compare/v3.25.12...v3.25.13)

###
[`v3.25.12`](https://github.com/github/codeql-action/compare/v3.25.11...v3.25.12)

[Compare
Source](https://github.com/github/codeql-action/compare/v3.25.11...v3.25.12)

</details>

<details>
<summary>gradle/gradle-build-action
(gradle/gradle-build-action)</summary>

###
[`v3.5.0`](https://github.com/gradle/gradle-build-action/releases/tag/v3.5.0)

[Compare
Source](https://github.com/gradle/gradle-build-action/compare/v3.4.2...v3.5.0)

> \[!IMPORTANT]
> As of `v3` this action has been superceded by
`gradle/actions/setup-gradle`.
> Any workflow that uses `gradle/gradle-build-action@v3` will
transparently delegate to `gradle/actions/setup-gradle@v3`.
>
> Users are encouraged to update their workflows, replacing:
>
>     uses: gradle/gradle-build-action@v3
>
> with
>
>     uses: gradle/actions/setup-gradle@v3
>
> See the [setup-gradle
documentation](https://github.com/gradle/actions/tree/main/setup-gradle)
for up-to-date documentation for `gradle/actions/setup-gradle`.

For release details, see
https://github.com/gradle/actions/releases/tag/v3.5.0

</details>

<details>
<summary>ossf/scorecard-action (ossf/scorecard-action)</summary>

###
[`v2.4.0`](https://github.com/ossf/scorecard-action/releases/tag/v2.4.0)

[Compare
Source](https://github.com/ossf/scorecard-action/compare/v2.3.3...v2.4.0)

#### What's Changed

This update bumps the Scorecard version to the v5 release. For a
complete list of changes, please refer to the [v5.0.0 release
notes](https://github.com/ossf/scorecard/releases/tag/v5.0.0). Of
special note to Scorecard Action is the Maintainer Annotation feature,
which can be used to suppress some Code Scanning false positives. Alerts
will not be generated for any Scorecard Check with an annotation.

- 🌱 Bump github.com/ossf/scorecard/v5 from v5.0.0-rc2 to v5.0.0
by [@&#8203;spencerschrock](https://github.com/spencerschrock) in
[https://github.com/ossf/scorecard-action/pull/1410](https://github.com/ossf/scorecard-action/pull/1410)
- 🐛 lower license sarif alert threshold to 9 by
[@&#8203;spencerschrock](https://github.com/spencerschrock) in
[https://github.com/ossf/scorecard-action/pull/1411](https://github.com/ossf/scorecard-action/pull/1411)

##### Documentation

- docs: dogfooding badge by
[@&#8203;jkowalleck](https://github.com/jkowalleck) in
[https://github.com/ossf/scorecard-action/pull/1399](https://github.com/ossf/scorecard-action/pull/1399)

#### New Contributors

- [@&#8203;jkowalleck](https://github.com/jkowalleck) made their first
contribution in
[https://github.com/ossf/scorecard-action/pull/1399](https://github.com/ossf/scorecard-action/pull/1399)

**Full Changelog**:
ossf/scorecard-action@v2.3.3...v2.4.0

</details>

<details>
<summary>softprops/action-gh-release
(softprops/action-gh-release)</summary>

###
[`v2.0.8`](https://github.com/softprops/action-gh-release/releases/tag/v2.0.8)

[Compare
Source](https://github.com/softprops/action-gh-release/compare/v2.0.7...v2.0.8)

<!-- Release notes generated using configuration in .github/release.yml
at master -->

#### What's Changed

##### Other Changes 🔄

- chore(deps): bump prettier from 2.8.0 to 3.3.3 by
[@&#8203;dependabot](https://github.com/dependabot) in
[https://github.com/softprops/action-gh-release/pull/480](https://github.com/softprops/action-gh-release/pull/480)
- chore(deps): bump
[@&#8203;types/node](https://github.com/types/node) from 20.14.9 to
20.14.11 by [@&#8203;dependabot](https://github.com/dependabot) in
[https://github.com/softprops/action-gh-release/pull/483](https://github.com/softprops/action-gh-release/pull/483)
- chore(deps): bump
[@&#8203;octokit/plugin-throttling](https://github.com/octokit/plugin-throttling)
from 9.3.0 to 9.3.1 by
[@&#8203;dependabot](https://github.com/dependabot) in
[https://github.com/softprops/action-gh-release/pull/484](https://github.com/softprops/action-gh-release/pull/484)
- chore(deps): bump glob from 10.4.2 to 11.0.0 by
[@&#8203;dependabot](https://github.com/dependabot) in
[https://github.com/softprops/action-gh-release/pull/477](https://github.com/softprops/action-gh-release/pull/477)
- refactor: write jest config in ts by
[@&#8203;chenrui333](https://github.com/chenrui333) in
[https://github.com/softprops/action-gh-release/pull/485](https://github.com/softprops/action-gh-release/pull/485)
- chore(deps): bump
[@&#8203;actions/github](https://github.com/actions/github) from 5.1.1
to 6.0.0 by [@&#8203;dependabot](https://github.com/dependabot) in
[https://github.com/softprops/action-gh-release/pull/470](https://github.com/softprops/action-gh-release/pull/470)

**Full Changelog**:
softprops/action-gh-release@v2...v2.0.8

###
[`v2.0.7`](https://github.com/softprops/action-gh-release/releases/tag/v2.0.7)

[Compare
Source](https://github.com/softprops/action-gh-release/compare/v2.0.6...v2.0.7)

<!-- Release notes generated using configuration in .github/release.yml
at master -->

#### What's Changed

##### Bug fixes 🐛

- Fix missing update release body by
[@&#8203;FirelightFlagboy](https://github.com/FirelightFlagboy) in
[https://github.com/softprops/action-gh-release/pull/365](https://github.com/softprops/action-gh-release/pull/365)

##### Other Changes 🔄

- Bump
[@&#8203;octokit/plugin-retry](https://github.com/octokit/plugin-retry)
from 4.0.3 to 7.1.1 by
[@&#8203;dependabot](https://github.com/dependabot) in
[https://github.com/softprops/action-gh-release/pull/443](https://github.com/softprops/action-gh-release/pull/443)
- Bump typescript from 4.9.5 to 5.5.2 by
[@&#8203;dependabot](https://github.com/dependabot) in
[https://github.com/softprops/action-gh-release/pull/467](https://github.com/softprops/action-gh-release/pull/467)
- Bump [@&#8203;types/node](https://github.com/types/node) from
20.14.6 to 20.14.8 by
[@&#8203;dependabot](https://github.com/dependabot) in
[https://github.com/softprops/action-gh-release/pull/469](https://github.com/softprops/action-gh-release/pull/469)
- Bump [@&#8203;types/node](https://github.com/types/node) from
20.14.8 to 20.14.9 by
[@&#8203;dependabot](https://github.com/dependabot) in
[https://github.com/softprops/action-gh-release/pull/473](https://github.com/softprops/action-gh-release/pull/473)
- Bump typescript from 5.5.2 to 5.5.3 by
[@&#8203;dependabot](https://github.com/dependabot) in
[https://github.com/softprops/action-gh-release/pull/472](https://github.com/softprops/action-gh-release/pull/472)
- Bump ts-jest from 29.1.5 to 29.2.2 by
[@&#8203;dependabot](https://github.com/dependabot) in
[https://github.com/softprops/action-gh-release/pull/479](https://github.com/softprops/action-gh-release/pull/479)
- docs: document that existing releases are updated by
[@&#8203;jvanbruegge](https://github.com/jvanbruegge) in
[https://github.com/softprops/action-gh-release/pull/474](https://github.com/softprops/action-gh-release/pull/474)

#### New Contributors

- [@&#8203;jvanbruegge](https://github.com/jvanbruegge) made their
first contribution in
[https://github.com/softprops/action-gh-release/pull/474](https://github.com/softprops/action-gh-release/pull/474)
- [@&#8203;FirelightFlagboy](https://github.com/FirelightFlagboy) made
their first contribution in
[https://github.com/softprops/action-gh-release/pull/365](https://github.com/softprops/action-gh-release/pull/365)

**Full Changelog**:
softprops/action-gh-release@v2.0.6...v2.0.7

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "before 4am on the first day of the
month" (UTC), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config help](https://github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View the
[repository job
log](https://developer.mend.io/github/slsa-framework/slsa-github-generator).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy40NDAuNyIsInVwZGF0ZWRJblZlciI6IjM3LjQ0MC43IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Signed-off-by: Mend Renovate <bot@renovateapp.com>
ramonpetgrave64 referenced this pull request in slsa-framework/slsa-github-generator Aug 16, 2024
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| actions/checkout | action | digest | `692973e` -> `9a9194f` |
|
[actions/download-artifact](https://github.com/actions/download-artifact)
| action | patch | `v4.1.7` -> `v4.1.8` |
| [actions/setup-go](https://github.com/actions/setup-go) | action |
patch | `v5.0.1` -> `v5.0.2` |
| [actions/setup-node](https://github.com/actions/setup-node) | action
| patch | `v4.0.2` -> `v4.0.3` |
| [actions/setup-node](https://github.com/actions/setup-node) | action
| digest | `60edb5d` -> `1e60f62` |
|
[actions/upload-artifact](https://github.com/actions/upload-artifact)
| action | patch | `v4.3.3` -> `v4.3.5` |
| [github/codeql-action](https://github.com/github/codeql-action) |
action | patch | `v3.25.11` -> `v3.25.15` |
|
[gradle/gradle-build-action](https://github.com/gradle/gradle-build-action)
| action | minor | `v3.4.2` -> `v3.5.0` |
| [ossf/scorecard-action](https://github.com/ossf/scorecard-action) |
action | minor | `v2.3.3` -> `v2.4.0` |
|
[softprops/action-gh-release](https://github.com/softprops/action-gh-release)
| action | patch | `v2.0.6` -> `v2.0.8` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>actions/download-artifact (actions/download-artifact)</summary>

###
[`v4.1.8`](https://github.com/actions/download-artifact/releases/tag/v4.1.8)

[Compare
Source](https://github.com/actions/download-artifact/compare/v4.1.7...v4.1.8)

#### What's Changed

- Update
[@&#8203;actions/artifact](https://github.com/actions/artifact)
version, bump dependencies by
[@&#8203;robherley](https://github.com/robherley) in
[https://github.com/actions/download-artifact/pull/341](https://github.com/actions/download-artifact/pull/341)

**Full Changelog**:
actions/download-artifact@v4...v4.1.8

</details>

<details>
<summary>actions/setup-go (actions/setup-go)</summary>

###
[`v5.0.2`](https://github.com/actions/setup-go/compare/v5.0.1...v5.0.2)

[Compare
Source](https://github.com/actions/setup-go/compare/v5.0.1...v5.0.2)

</details>

<details>
<summary>actions/setup-node (actions/setup-node)</summary>

###
[`v4.0.3`](https://github.com/actions/setup-node/compare/v4.0.2...v4.0.3)

[Compare
Source](https://github.com/actions/setup-node/compare/v4.0.2...v4.0.3)

</details>

<details>
<summary>actions/upload-artifact (actions/upload-artifact)</summary>

###
[`v4.3.5`](https://github.com/actions/upload-artifact/compare/v4.3.4...v4.3.5)

[Compare
Source](https://github.com/actions/upload-artifact/compare/v4.3.4...v4.3.5)

###
[`v4.3.4`](https://github.com/actions/upload-artifact/releases/tag/v4.3.4)

[Compare
Source](https://github.com/actions/upload-artifact/compare/v4.3.3...v4.3.4)

##### What's Changed

- Update
[@&#8203;actions/artifact](https://github.com/actions/artifact)
version, bump dependencies by
[@&#8203;robherley](https://github.com/robherley) in
[https://github.com/actions/upload-artifact/pull/584](https://github.com/actions/upload-artifact/pull/584)

**Full Changelog**:
actions/upload-artifact@v4.3.3...v4.3.4

</details>

<details>
<summary>github/codeql-action (github/codeql-action)</summary>

###
[`v3.25.15`](https://github.com/github/codeql-action/compare/v3.25.14...v3.25.15)

[Compare
Source](https://github.com/github/codeql-action/compare/v3.25.14...v3.25.15)

###
[`v3.25.14`](https://github.com/github/codeql-action/compare/v3.25.13...v3.25.14)

[Compare
Source](https://github.com/github/codeql-action/compare/v3.25.13...v3.25.14)

###
[`v3.25.13`](https://github.com/github/codeql-action/compare/v3.25.12...v3.25.13)

[Compare
Source](https://github.com/github/codeql-action/compare/v3.25.12...v3.25.13)

###
[`v3.25.12`](https://github.com/github/codeql-action/compare/v3.25.11...v3.25.12)

[Compare
Source](https://github.com/github/codeql-action/compare/v3.25.11...v3.25.12)

</details>

<details>
<summary>gradle/gradle-build-action
(gradle/gradle-build-action)</summary>

###
[`v3.5.0`](https://github.com/gradle/gradle-build-action/releases/tag/v3.5.0)

[Compare
Source](https://github.com/gradle/gradle-build-action/compare/v3.4.2...v3.5.0)

> \[!IMPORTANT]
> As of `v3` this action has been superceded by
`gradle/actions/setup-gradle`.
> Any workflow that uses `gradle/gradle-build-action@v3` will
transparently delegate to `gradle/actions/setup-gradle@v3`.
>
> Users are encouraged to update their workflows, replacing:
>
>     uses: gradle/gradle-build-action@v3
>
> with
>
>     uses: gradle/actions/setup-gradle@v3
>
> See the [setup-gradle
documentation](https://github.com/gradle/actions/tree/main/setup-gradle)
for up-to-date documentation for `gradle/actions/setup-gradle`.

For release details, see
https://github.com/gradle/actions/releases/tag/v3.5.0

</details>

<details>
<summary>ossf/scorecard-action (ossf/scorecard-action)</summary>

###
[`v2.4.0`](https://github.com/ossf/scorecard-action/releases/tag/v2.4.0)

[Compare
Source](https://github.com/ossf/scorecard-action/compare/v2.3.3...v2.4.0)

#### What's Changed

This update bumps the Scorecard version to the v5 release. For a
complete list of changes, please refer to the [v5.0.0 release
notes](https://github.com/ossf/scorecard/releases/tag/v5.0.0). Of
special note to Scorecard Action is the Maintainer Annotation feature,
which can be used to suppress some Code Scanning false positives. Alerts
will not be generated for any Scorecard Check with an annotation.

- 🌱 Bump github.com/ossf/scorecard/v5 from v5.0.0-rc2 to v5.0.0
by [@&#8203;spencerschrock](https://github.com/spencerschrock) in
[https://github.com/ossf/scorecard-action/pull/1410](https://github.com/ossf/scorecard-action/pull/1410)
- 🐛 lower license sarif alert threshold to 9 by
[@&#8203;spencerschrock](https://github.com/spencerschrock) in
[https://github.com/ossf/scorecard-action/pull/1411](https://github.com/ossf/scorecard-action/pull/1411)

##### Documentation

- docs: dogfooding badge by
[@&#8203;jkowalleck](https://github.com/jkowalleck) in
[https://github.com/ossf/scorecard-action/pull/1399](https://github.com/ossf/scorecard-action/pull/1399)

#### New Contributors

- [@&#8203;jkowalleck](https://github.com/jkowalleck) made their first
contribution in
[https://github.com/ossf/scorecard-action/pull/1399](https://github.com/ossf/scorecard-action/pull/1399)

**Full Changelog**:
ossf/scorecard-action@v2.3.3...v2.4.0

</details>

<details>
<summary>softprops/action-gh-release
(softprops/action-gh-release)</summary>

###
[`v2.0.8`](https://github.com/softprops/action-gh-release/releases/tag/v2.0.8)

[Compare
Source](https://github.com/softprops/action-gh-release/compare/v2.0.7...v2.0.8)

<!-- Release notes generated using configuration in .github/release.yml
at master -->

#### What's Changed

##### Other Changes 🔄

- chore(deps): bump prettier from 2.8.0 to 3.3.3 by
[@&#8203;dependabot](https://github.com/dependabot) in
[https://github.com/softprops/action-gh-release/pull/480](https://github.com/softprops/action-gh-release/pull/480)
- chore(deps): bump
[@&#8203;types/node](https://github.com/types/node) from 20.14.9 to
20.14.11 by [@&#8203;dependabot](https://github.com/dependabot) in
[https://github.com/softprops/action-gh-release/pull/483](https://github.com/softprops/action-gh-release/pull/483)
- chore(deps): bump
[@&#8203;octokit/plugin-throttling](https://github.com/octokit/plugin-throttling)
from 9.3.0 to 9.3.1 by
[@&#8203;dependabot](https://github.com/dependabot) in
[https://github.com/softprops/action-gh-release/pull/484](https://github.com/softprops/action-gh-release/pull/484)
- chore(deps): bump glob from 10.4.2 to 11.0.0 by
[@&#8203;dependabot](https://github.com/dependabot) in
[https://github.com/softprops/action-gh-release/pull/477](https://github.com/softprops/action-gh-release/pull/477)
- refactor: write jest config in ts by
[@&#8203;chenrui333](https://github.com/chenrui333) in
[https://github.com/softprops/action-gh-release/pull/485](https://github.com/softprops/action-gh-release/pull/485)
- chore(deps): bump
[@&#8203;actions/github](https://github.com/actions/github) from 5.1.1
to 6.0.0 by [@&#8203;dependabot](https://github.com/dependabot) in
[https://github.com/softprops/action-gh-release/pull/470](https://github.com/softprops/action-gh-release/pull/470)

**Full Changelog**:
softprops/action-gh-release@v2...v2.0.8

###
[`v2.0.7`](https://github.com/softprops/action-gh-release/releases/tag/v2.0.7)

[Compare
Source](https://github.com/softprops/action-gh-release/compare/v2.0.6...v2.0.7)

<!-- Release notes generated using configuration in .github/release.yml
at master -->

#### What's Changed

##### Bug fixes 🐛

- Fix missing update release body by
[@&#8203;FirelightFlagboy](https://github.com/FirelightFlagboy) in
[https://github.com/softprops/action-gh-release/pull/365](https://github.com/softprops/action-gh-release/pull/365)

##### Other Changes 🔄

- Bump
[@&#8203;octokit/plugin-retry](https://github.com/octokit/plugin-retry)
from 4.0.3 to 7.1.1 by
[@&#8203;dependabot](https://github.com/dependabot) in
[https://github.com/softprops/action-gh-release/pull/443](https://github.com/softprops/action-gh-release/pull/443)
- Bump typescript from 4.9.5 to 5.5.2 by
[@&#8203;dependabot](https://github.com/dependabot) in
[https://github.com/softprops/action-gh-release/pull/467](https://github.com/softprops/action-gh-release/pull/467)
- Bump [@&#8203;types/node](https://github.com/types/node) from
20.14.6 to 20.14.8 by
[@&#8203;dependabot](https://github.com/dependabot) in
[https://github.com/softprops/action-gh-release/pull/469](https://github.com/softprops/action-gh-release/pull/469)
- Bump [@&#8203;types/node](https://github.com/types/node) from
20.14.8 to 20.14.9 by
[@&#8203;dependabot](https://github.com/dependabot) in
[https://github.com/softprops/action-gh-release/pull/473](https://github.com/softprops/action-gh-release/pull/473)
- Bump typescript from 5.5.2 to 5.5.3 by
[@&#8203;dependabot](https://github.com/dependabot) in
[https://github.com/softprops/action-gh-release/pull/472](https://github.com/softprops/action-gh-release/pull/472)
- Bump ts-jest from 29.1.5 to 29.2.2 by
[@&#8203;dependabot](https://github.com/dependabot) in
[https://github.com/softprops/action-gh-release/pull/479](https://github.com/softprops/action-gh-release/pull/479)
- docs: document that existing releases are updated by
[@&#8203;jvanbruegge](https://github.com/jvanbruegge) in
[https://github.com/softprops/action-gh-release/pull/474](https://github.com/softprops/action-gh-release/pull/474)

#### New Contributors

- [@&#8203;jvanbruegge](https://github.com/jvanbruegge) made their
first contribution in
[https://github.com/softprops/action-gh-release/pull/474](https://github.com/softprops/action-gh-release/pull/474)
- [@&#8203;FirelightFlagboy](https://github.com/FirelightFlagboy) made
their first contribution in
[https://github.com/softprops/action-gh-release/pull/365](https://github.com/softprops/action-gh-release/pull/365)

**Full Changelog**:
softprops/action-gh-release@v2.0.6...v2.0.7

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "before 4am on the first day of the
month" (UTC), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config help](https://github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View the
[repository job
log](https://developer.mend.io/github/slsa-framework/slsa-github-generator).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy40NDAuNyIsInVwZGF0ZWRJblZlciI6IjM3LjQ0MC43IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Signed-off-by: Mend Renovate <bot@renovateapp.com>
Signed-off-by: Ramon Petgrave <ramon.petgrave64@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

Successfully merging this pull request may close these issues.

The body of a release is overwritten with the content of body_path or body
3 participants