Bump the github-actions group with 6 updates #1003
Closed
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the github-actions group with 6 updates:
3.1.3
4.3.3
4.1.1
4.1.4
4.7.1
5.1.0
2.7.0
2.9.0
17.3.0
21.0.0
1.9.0
2.0.0
Updates
actions/upload-artifact
from 3.1.3 to 4.3.3Release notes
Sourced from actions/upload-artifact's releases.
... (truncated)
Commits
6546280
updating package versionc004fb4
Merge branch 'main' into eggyhead/use-artifact-v2.1.690aba49
updating toolkit artifact dependency to 2.1.6b06cde3
Merge pull request #563 from actions/eggyhead/release-4.3.21746f4a
Revert "updating to release 4.3.2"31685d0
updating to release 4.3.218bf333
Merge pull request #562 from actions/eggyhead/update-artifact-v215dac413b
update package lock versionbb3b4a3
updating package version3e3da83
updating artifact and core dependenciesUpdates
actions/checkout
from 4.1.1 to 4.1.4Release notes
Sourced from actions/checkout's releases.
Changelog
Sourced from actions/checkout's changelog.
... (truncated)
Commits
0ad4b8f
Prep Release v4.1.4 (#1704)43045ae
Disableextensions.worktreeConfig
when disablingsparse-checkout
(#1692)37b0821
Bump the minor-actions-dependencies group with 2 updates (#1693)9839dc1
Add dependabot config (#1688)9b4c13b
Bump word-wrap from 1.2.3 to 1.2.5 (#1643)1d96c77
Add SSH user parameter (#1685)cd7d8d6
Check git version before attempting to disablesparse-checkout
(#1656)8410ad0
Updateactions/checkout
version inupdate-main-version.yml
(#1650)9bb5618
Prep for release of v4.1.2 (#1649)8eb1f6a
Bump@babel/traverse
from 7.20.5 to 7.24.0 (#1642)Updates
actions/setup-python
from 4.7.1 to 5.1.0Release notes
Sourced from actions/setup-python's releases.
... (truncated)
Commits
82c7e63
Documentation changes for avoiding rate limit issues on GHES (#835)10aa35a
feat: fallback to raw endpoint for manifest when rate limit is reached (#766)9a7ac94
Bump undici from 5.27.2 to 5.28.3 (#817)871daa9
Fix the "Specifying multiple Python/PyPy versions" link (#782)2f07895
Fix broken README.md link (#793)e9d6f99
Replace setup-python@v4 by setup-python@v5 in README (#776)0a5c615
Update action to node20 (#772)0ae5836
Add example of GraalPy to docs (#773)b64ffca
update actions/checkout to v4 (#761)8d28961
Examples now use checkout@v4 (#738)Updates
svenstaro/upload-release-action
from 2.7.0 to 2.9.0Release notes
Sourced from svenstaro/upload-release-action's releases.
Changelog
Sourced from svenstaro/upload-release-action's changelog.
... (truncated)
Commits
04733e0
This is 2.9.07b5b755
Add CHANGELOG entry for #11217449a2
Add draft release support (fixes #19)ec2ff03
Amend CHANGELOGff23fb2
This is 2.8.08e43835
Bump all depsfe68892
Merge pull request #113 from svenstaro/dependabot/npm_and_yarn/babel/traverse...a13e7b5
Merge pull request #116 from der-eismann/update-to-node20a4bae28
Update to node20c19ddf4
Bump@babel/traverse
from 7.22.8 to 7.23.2Updates
tj-actions/glob
from 17.3.0 to 21.0.0Release notes
Sourced from tj-actions/glob's releases.
... (truncated)
Changelog
Sourced from tj-actions/glob's changelog.
... (truncated)
Commits
2b2eb15
Merge pull request #1115 from tj-actions/feat/add-support-for-escaping-bracke...b43e435
Added missing changes and modified dist assets.2cf77b2
Merge 91d4eccb76cdae7ccaeca9e7e061a7dc62a42e46 into 383119cc90c3de8d8db8c713e...91d4ecc
feat: add support for escaping brackets used in paths383119c
chore(deps): update dependency@types/node
to v20.11.22901f20d
chore(deps): update dependency@types/node
to v20.11.219edb48d
chore(deps): update peter-evans/create-pull-request action to v6.0.1a243ea9
chore(deps): update typescript-eslint monorepo to v7.1.044ff6d2
chore(deps): lock file maintenancea4ed58b
chore(deps): update dependency eslint to v8.57.0Updates
slsa-framework/slsa-github-generator
from 1.9.0 to 2.0.0Release notes
Sourced from slsa-framework/slsa-github-generator's releases.
Changelog
Sourced from slsa-framework/slsa-github-generator's changelog.
Commits
5a775b3
chore: v2.0.0: update tags (#3583)41733f7
chore: v2.0.0-rc.0: update tags (#3578)3789345
docs: v.2.0.0: finalize CHANGELOG.md (#3577)02fc78b
fix: deadlock and improve debugging experience (#3570)4534a0b
break: Revert "chore: Revert "fix: upload-artifact and download-artifact v4""...e8c2dcf
fix(deps): Update Sigstore Dep to Sigstore 2.2.2 (#3491)2512315
feat(breaking): remove attestation-name input and output (#3456)4fbc6a9
chore: add ramonpetgrave64 to CODEOWNERS (#3490)8869c8a
fix: Switch to newer DSSE rekor type (#3299)9d81ca7
chore: Update slsa-verifier version (#3454)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase
will rebase this PR@dependabot recreate
will recreate this PR, overwriting any edits that have been made to it@dependabot merge
will merge this PR after your CI passes on it@dependabot squash and merge
will squash and merge this PR after your CI passes on it@dependabot cancel merge
will cancel a previously requested merge and block automerging@dependabot reopen
will reopen this PR if it is closed@dependabot close
will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditions
will show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major version
will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor version
will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>
will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>
will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>
will remove the ignore condition of the specified dependency and ignore conditions