Bump the github-actions group across 1 directory with 8 updates #9265
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
Bumps the github-actions group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4.4.3` | `4.5.0` | | [Swatinem/rust-cache](https://github.com/swatinem/rust-cache) | `2.7.5` | `2.7.7` | | [taiki-e/install-action](https://github.com/taiki-e/install-action) | `2.46.4` | `2.47.0` | | [github/codeql-action](https://github.com/github/codeql-action) | `3.27.6` | `3.28.0` | | [streetsidesoftware/cspell-action](https://github.com/streetsidesoftware/cspell-action) | `6.9.0` | `6.10.0` | | [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `3.7.1` | `3.8.0` | | [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish) | `1.12.2` | `1.12.3` | | [softprops/action-gh-release](https://github.com/softprops/action-gh-release) | `2.1.0` | `2.2.0` | Updates `actions/upload-artifact` from 4.4.3 to 4.5.0 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@b4b15b8...6f51ac0) Updates `Swatinem/rust-cache` from 2.7.5 to 2.7.7 - [Release notes](https://github.com/swatinem/rust-cache/releases) - [Changelog](https://github.com/Swatinem/rust-cache/blob/master/CHANGELOG.md) - [Commits](Swatinem/rust-cache@82a92a6...f0deed1) Updates `taiki-e/install-action` from 2.46.4 to 2.47.0 - [Release notes](https://github.com/taiki-e/install-action/releases) - [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md) - [Commits](taiki-e/install-action@acf70b3...acd2589) Updates `github/codeql-action` from 3.27.6 to 3.28.0 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@aa57810...48ab28a) Updates `streetsidesoftware/cspell-action` from 6.9.0 to 6.10.0 - [Release notes](https://github.com/streetsidesoftware/cspell-action/releases) - [Changelog](https://github.com/streetsidesoftware/cspell-action/blob/main/CHANGELOG.md) - [Commits](streetsidesoftware/cspell-action@9759be9...ef95dc4) Updates `docker/setup-buildx-action` from 3.7.1 to 3.8.0 - [Release notes](https://github.com/docker/setup-buildx-action/releases) - [Commits](docker/setup-buildx-action@c47758b...6524bf6) Updates `pypa/gh-action-pypi-publish` from 1.12.2 to 1.12.3 - [Release notes](https://github.com/pypa/gh-action-pypi-publish/releases) - [Commits](pypa/gh-action-pypi-publish@15c56db...67339c7) Updates `softprops/action-gh-release` from 2.1.0 to 2.2.0 - [Release notes](https://github.com/softprops/action-gh-release/releases) - [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md) - [Commits](softprops/action-gh-release@01570a1...7b4da11) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: Swatinem/rust-cache dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: taiki-e/install-action dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: streetsidesoftware/cspell-action dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: docker/setup-buildx-action dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: pypa/gh-action-pypi-publish dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: softprops/action-gh-release dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
added
I-Dependency
|
Superseded by #9283. |
dependabot
bot
deleted the
dependabot-github_actions-github-actions-eb93bc720e
branch
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the github-actions group with 8 updates in the / directory:
4.4.34.5.02.7.52.7.72.46.42.47.03.27.63.28.06.9.06.10.03.7.13.8.01.12.21.12.32.1.02.2.0Updates
actions/upload-artifactfrom 4.4.3 to 4.5.0Release notes
Sourced from actions/upload-artifact's releases.
Commits
6f51ac0Merge pull request #656 from bdehamer/bdehamer/artifact-digestc40c16dadd new artifact-digest output735efb4bump@actions/artifactfrom 2.1.11 to 2.2.0184d73bMerge pull request #578 from hamirmahal/fix/deprecated-nodejs-usage-in-actionb4a0a98Merge branch 'main' into fix/deprecated-nodejs-usage-in-actionUpdates
Swatinem/rust-cachefrom 2.7.5 to 2.7.7Release notes
Sourced from Swatinem/rust-cache's releases.
Commits
f0deed12.7.7008623falso cachecargo installmetadata720f7e42.7.64b1f006update dependencies, in particular@actions/cachee8e63cdAllow opting out of caching $CARGO_HOME/bin. (#216)9a2e0d3add runner OS in cache key (#220)c00f302Adds an option to do lookup-only of the cache (#217)68b3cb7Updated artifact upload action to v4 (#212)Updates
taiki-e/install-actionfrom 2.46.4 to 2.47.0Release notes
Sourced from taiki-e/install-action's releases.
... (truncated)
Changelog
Sourced from taiki-e/install-action's changelog.
... (truncated)
Commits
acd2589Release 2.47.0d1519faUpdate changelog31e0d9eAdd trunk (#795)194e80bUpdatecargo-lambda@latestto 1.6.2dc05cefAdd wash (#794)8484225Release 2.46.201aa2832Updatedprint@latestto 0.48.0e37f44cRelease 2.46.19214cf6aUpdatecargo-llvm-cov@latestto 0.6.15c5172adUpdatecargo-lambda@latestto 1.6.1Updates
github/codeql-actionfrom 3.27.6 to 3.28.0Release notes
Sourced from github/codeql-action's releases.
Changelog
Sourced from github/codeql-action's changelog.
... (truncated)
Commits
48ab28aMerge pull request #2662 from github/update-v3.28.0-d01b25e644946b76Update changelog for v3.28.0d01b25eMerge pull request #2660 from github/henrymercer/fix-error-file-on-path7d6d36cAdd changelog noteb58f447Use@actions/ioto locate binaries64cc90bMerge pull request #2653 from github/dependabot/npm_and_yarn/npm-61c837125ed8f8ecaMerge branch 'main' into dependabot/npm_and_yarn/npm-61c837125e562042dMerge pull request #2655 from github/aeisenberg/deprecate-2.14beed6ffChange codeql version used in test5f0a4d3Bump the minimum supported version of CodeQL to 2.15.5Updates
streetsidesoftware/cspell-actionfrom 6.9.0 to 6.10.0Release notes
Sourced from streetsidesoftware/cspell-action's releases.
Changelog
Sourced from streetsidesoftware/cspell-action's changelog.
... (truncated)
Commits
ef95dc4chore(main): release 6.10.0 (#2045)645589eci: Workflow Bot -- Update ALL Dependencies (main) (#2088)d2f25b7feat: Update CSpell version (8.17.1) (#2090)5ac1408ci: Workflow Bot -- Update ALL Dependencies (main) (#2084)f4339a9fix: Update Dictionaries and Dependencies (#2085)a7257c5ci: Workflow Bot -- Update ALL Dependencies (main) (#2083)0ef27f2ci: Workflow Bot -- Update ALL Dependencies (main) (#2082)54d23f8chore(deps): bump codecov/codecov-action from 5.0.7 to 5.1.1 (#2081)ac3b9d1ci: Workflow Bot -- Update ALL Dependencies (main) (#2080)f872d14fix: Update Dictionaries and Dependencies (#2074)Updates
docker/setup-buildx-actionfrom 3.7.1 to 3.8.0Release notes
Sourced from docker/setup-buildx-action's releases.
Commits
6524bf6Merge pull request #390 from crazy-max/buildx-cloud-latest8d5e074chore: update generated content7199e57make cloud prefix optional to download buildx if driver is clouddb63ceeMerge pull request #381 from docker/dependabot/github_actions/codecov/codecov...043ebe1Merge pull request #389 from docker/dependabot/npm_and_yarn/docker/actions-to...686da90chore: update generated contenta3d7487Merge pull request #382 from docker/dependabot/npm_and_yarn/cross-spawn-7.0.64dcdbcebuild(deps): bump@docker/actions-toolkitfrom 0.39.0 to 0.48.01a8ac74ci: fix deprecated input for codecov-actione827ebebuild(deps): bump cross-spawn from 7.0.3 to 7.0.6Updates
pypa/gh-action-pypi-publishfrom 1.12.2 to 1.12.3Release notes
Sourced from pypa/gh-action-pypi-publish's releases.
Commits
67339c7📦 Only keep lower bounds @ input requirementscbd6d01📝Fix a typo in "privileges" @ README7252a9a📝 Outline unsupported scenarios in READMEa536fa9📌📦 Include jeepney & secretstorage pins43caae4💅📦 Split transitive dep constraintsf371c3dMerge pull request #313 from webknjaz/maintenance/metadata-2.4138a121📌📦 Pinpkginfoto v1.12 @ runtime depsff2b051🧪 Add a Maturin-based package to CI0a0a6ae🧪 Allow CI to register multiple distributionse7723a4Merge pull request #309 from trail-of-forks/ww/bumptwineUpdates
softprops/action-gh-releasefrom 2.1.0 to 2.2.0Release notes
Sourced from softprops/action-gh-release's releases.
Changelog
Sourced from softprops/action-gh-release's changelog.
... (truncated)
Commits
7b4da11release 2.2.064f1fa1feat: read the release assets asynchronously (#552)9e35a64chore(deps): bump prettier from 3.4.1 to 3.4.2 (#554)92bc83cchore(deps): bump@types/nodefrom 22.9.4 to 22.10.1 (#551)09f0e37chore(deps): bump prettier from 3.3.3 to 3.4.1 (#550)f138a07chore(deps): bump@vercel/nccfrom 0.38.2 to 0.38.3 (#543)39a5683fix(docs): clarify the default for tag_name (#544)62368acchore(deps): bump cross-spawn from 7.0.3 to 7.0.6 (#545)181b5bcchore(deps): bump@types/nodefrom 22.9.0 to 22.9.4 (#547)3284404chore(deps): bump typescript from 5.6.3 to 5.7.2 (#548)You can trigger a rebase of this PR by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions