chore(deps): bump the github-actions group with 13 updates #280
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
Bumps the github-actions group with 13 updates: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `3` | `4` | | [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) | `2` | `3` | | [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `2` | `3` | | [docker/metadata-action](https://github.com/docker/metadata-action) | `4.6.0` | `5.0.0` | | [docker/login-action](https://github.com/docker/login-action) | `2` | `3` | | [docker/build-push-action](https://github.com/docker/build-push-action) | `4` | `5` | | [contributor-assistant/github-action](https://github.com/contributor-assistant/github-action) | `2.3.0` | `2.3.1` | | [dessant/lock-threads](https://github.com/dessant/lock-threads) | `4` | `5` | | [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) | `3.1.1` | `3.2.0` | | [anchore/sbom-action](https://github.com/anchore/sbom-action) | `0.14.3` | `0.15.0` | | [crazy-max/ghaction-upx](https://github.com/crazy-max/ghaction-upx) | `2` | `3` | | [cachix/install-nix-action](https://github.com/cachix/install-nix-action) | `22` | `24` | | [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) | `4` | `5` | Updates `actions/checkout` from 3 to 4 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@v3...v4) Updates `docker/setup-qemu-action` from 2 to 3 - [Release notes](https://github.com/docker/setup-qemu-action/releases) - [Commits](docker/setup-qemu-action@v2...v3) Updates `docker/setup-buildx-action` from 2 to 3 - [Release notes](https://github.com/docker/setup-buildx-action/releases) - [Commits](docker/setup-buildx-action@v2...v3) Updates `docker/metadata-action` from 4.6.0 to 5.0.0 - [Release notes](https://github.com/docker/metadata-action/releases) - [Upgrade guide](https://github.com/docker/metadata-action/blob/master/UPGRADE.md) - [Commits](docker/metadata-action@v4.6.0...v5.0.0) Updates `docker/login-action` from 2 to 3 - [Release notes](https://github.com/docker/login-action/releases) - [Commits](docker/login-action@v2...v3) Updates `docker/build-push-action` from 4 to 5 - [Release notes](https://github.com/docker/build-push-action/releases) - [Commits](docker/build-push-action@v4...v5) Updates `contributor-assistant/github-action` from 2.3.0 to 2.3.1 - [Release notes](https://github.com/contributor-assistant/github-action/releases) - [Commits](contributor-assistant/github-action@v2.3.0...v2.3.1) Updates `dessant/lock-threads` from 4 to 5 - [Release notes](https://github.com/dessant/lock-threads/releases) - [Changelog](https://github.com/dessant/lock-threads/blob/main/CHANGELOG.md) - [Commits](dessant/lock-threads@v4...v5) Updates `sigstore/cosign-installer` from 3.1.1 to 3.2.0 - [Release notes](https://github.com/sigstore/cosign-installer/releases) - [Commits](sigstore/cosign-installer@v3.1.1...v3.2.0) Updates `anchore/sbom-action` from 0.14.3 to 0.15.0 - [Release notes](https://github.com/anchore/sbom-action/releases) - [Commits](anchore/sbom-action@v0.14.3...v0.15.0) Updates `crazy-max/ghaction-upx` from 2 to 3 - [Release notes](https://github.com/crazy-max/ghaction-upx/releases) - [Commits](crazy-max/ghaction-upx@v2...v3) Updates `cachix/install-nix-action` from 22 to 24 - [Release notes](https://github.com/cachix/install-nix-action/releases) - [Commits](cachix/install-nix-action@v22...v24) Updates `goreleaser/goreleaser-action` from 4 to 5 - [Release notes](https://github.com/goreleaser/goreleaser-action/releases) - [Commits](goreleaser/goreleaser-action@v4...v5) --- updated-dependencies: - dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: docker/setup-qemu-action dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: docker/setup-buildx-action dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: docker/metadata-action dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: docker/login-action dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: docker/build-push-action dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: contributor-assistant/github-action dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: dessant/lock-threads dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: sigstore/cosign-installer dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: anchore/sbom-action dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: crazy-max/ghaction-upx dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: cachix/install-nix-action dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: goreleaser/goreleaser-action dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
added
the
dependencies
pull-request-size
bot
added
the
size/L
Apply Sweep Rules to your PR?
|
|
Superseded by #281. |
dependabot
bot
deleted the
dependabot/github_actions/github-actions-2a1c4ffb1a
branch
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the github-actions group with 13 updates:
3423234.6.05.0.023452.3.02.3.1453.1.13.2.00.14.30.15.023222445Updates
actions/checkoutfrom 3 to 4Release notes
Sourced from actions/checkout's releases.
... (truncated)
Changelog
Sourced from actions/checkout's changelog.
... (truncated)
Commits
b4ffde6Link to release page from what's new section (#1514)8530928Correct link to GitHub Docs (#1511)7cdaf2fUpdate CODEOWNERS to Launch team (#1510)8ade135Prepare 4.1.0 release (#1496)c533a0aAdd support for partial checkout filters (#1396)72f2cecUpdate README.md for V4 (#1452)3df4ab1Release 4.0.0 (#1447)8b5e8b7Support fetching without the --progress option (#1067)97a652bUpdate default runtime to node20 (#1436)Updates
docker/setup-qemu-actionfrom 2 to 3Release notes
Sourced from docker/setup-qemu-action's releases.
Commits
6882732Merge pull request #103 from docker/dependabot/npm_and_yarn/actions/core-1.10.1183f4afchore: update generated contentf174935build(deps): bump@actions/corefrom 1.10.0 to 1.10.12e423ebMerge pull request #89 from docker/dependabot/npm_and_yarn/semver-6.3.1ecc406aBump semver from 6.3.0 to 6.3.112dec5eMerge pull request #102 from crazy-max/update-node20c29b312chore: node 20 as default runtime34ae628chore: update generated content1f3d2e1chore: fix author in package.json277dbe8vendor: bump@docker/actions-toolkitfrom 0.3.0 to 0.12.0Updates
docker/setup-buildx-actionfrom 2 to 3Release notes
Sourced from docker/setup-buildx-action's releases.
... (truncated)
Commits
f95db51Merge pull request #267 from docker/dependabot/npm_and_yarn/actions/core-1.10.1998a87cchore: update generated content28bae59build(deps): bump@actions/corefrom 1.10.0 to 1.10.1c215341Merge pull request #264 from crazy-max/update-node2002e9319chore: node 20 as default runtime5c9160echore: update generated content1283140chore: fix author in package.jsonc6afe06vendor: bump@docker/actions-toolkitfrom 0.10.0 to 0.12.0f35e0d5chore: update dev dependenciesbaeb468dev: remove unneeded binariesUpdates
docker/metadata-actionfrom 4.6.0 to 5.0.0Release notes
Sourced from docker/metadata-action's releases.
Upgrade guide
Sourced from docker/metadata-action's upgrade guide.
... (truncated)
Commits
96383f4Merge pull request #320 from docker/dependabot/npm_and_yarn/csv-parse-5.5.0f138b96chore: update generated content9cf7015Bump csv-parse from 5.4.0 to 5.5.05a8a5ffMerge pull request #315 from docker/dependabot/npm_and_yarn/handlebars-4.7.82279d9achore: update generated contentc659933Bump handlebars from 4.7.7 to 4.7.848d23ccMerge pull request #333 from docker/dependabot/npm_and_yarn/actions/core-1.10.1b83ffb4chore: update generated content3207f24Bump@actions/corefrom 1.10.0 to 1.10.163f4a26Merge pull request #328 from crazy-max/update-node20Updates
docker/login-actionfrom 2 to 3Release notes
Sourced from docker/login-action's releases.
Commits
343f7c4Merge pull request #599 from docker/dependabot/npm_and_yarn/aws-sdk-dependenc...aad0f97chore: update generated content2e0cd39build(deps): bump the aws-sdk-dependencies group with 2 updates203bc9cMerge pull request #588 from docker/dependabot/npm_and_yarn/proxy-agent-depen...2199648chore: update generated contentb489376build(deps): bump the proxy-agent-dependencies group with 1 update7c309e7Merge pull request #598 from docker/dependabot/npm_and_yarn/actions/core-1.10.10ccf222chore: update generated content56d703eMerge pull request #597 from docker/dependabot/github_actions/aws-actions/con...24d3b35build(deps): bump@actions/corefrom 1.10.0 to 1.10.1Updates
docker/build-push-actionfrom 4 to 5Release notes
Sourced from docker/build-push-action's releases.
Commits
4a13e50Merge pull request #1006 from docker/dependabot/npm_and_yarn/docker/actions-t...7416668chore: update generated contentb4f76a5chore(deps): Bump@docker/actions-toolkitfrom 0.13.0 to 0.14.0b7feb76Merge pull request #1005 from crazy-max/ci-inspectfae8018ci: inspect sbom and provenanceb625868Merge pull request #1004 from crazy-max/ci-update-buildx5193ef1ci: update buildx to latestd3afd77Merge pull request #991 from docker/dependabot/npm_and_yarn/babel/traverse-7....7a786bbMerge pull request #992 from crazy-max/annotationsc66ae3achore: update generated contentUpdates
contributor-assistant/github-actionfrom 2.3.0 to 2.3.1Release notes
Sourced from contributor-assistant/github-action's releases.
Commits
a895a43Update action.yml8ceac4bdocs(contributor): contrib-readme-action has updated readme6b3a4e0Merge pull request #139 from darrellwarde/fix/check-all-repo-workflows-pagesdece446Fix error where repos with more than 30 workflows if workflow is not on first...f2ab9eeMerge pull request #137 from contributor-assistant/adds-energy-consumption-me...fb644d8Update nodejs.yml61d2e20Adds energy consumption measurement6f3a2c1docs(contributor): contrib-readme-action has updated readme0a1cc84Merge pull request #136 from wh201906/mentions70b1169Reduce unnecessary mentionsUpdates
dessant/lock-threadsfrom 4 to 5Release notes
Sourced from dessant/lock-threads's releases.
Changelog
Sourced from dessant/lock-threads's changelog.
... (truncated)
Commits
1bf7ec2chore(release): 5.0.1adf4aa5chore: update package0a63678fix: support filtering threads by labels with spacesd42e5f4chore(release): 5.0.0d8da6c1chore: update packagec1eab4bchore: update workflow0a0976ffeat: lock discussions53f3f0cchore: migrate package to ESM5a25b54fix: update dependenciesUpdates
sigstore/cosign-installerfrom 3.1.1 to 3.2.0Release notes
Sourced from sigstore/cosign-installer's releases.
Commits
1fc5bd3test with latest go version (#150)9ce7d60bump cosign to v2.2.1 (#148)4b014e3Support the runner context of gitea act (#147)38ab09dBump actions/checkout from 4.1.0 to 4.1.1 (#145)9c520b9Bump actions/checkout from 4.0.0 to 4.1.0 (#144)ef6a6b3Bump actions/checkout from 3.6.0 to 4.0.0 (#143)11086d2bump cosign to v2.2.0 (#142)4a86152Bump actions/checkout from 3.5.3 to 3.6.0 (#141)37f3871Bump actions/setup-go from 4.0.1 to 4.1.0 (#139)a5d81fbFix build and push step Readme missing id (#138)Updates
anchore/sbom-actionfrom 0.14.3 to 0.15.0Release notes
Sourced from anchore/sbom-action's releases.