From 6ff4d5e0350dc0875328d70ec8fb13c9fc8cb570 Mon Sep 17 00:00:00 2001 From: Matthias Mair Date: Fri, 22 Mar 2024 10:15:20 +0100 Subject: [PATCH 01/10] Fix new manifest path (#6814) * fix manifest path * simplify * add falback for old path * fix var name * remove css lookup, not needed anymore * fix test path --- InvenTree/web/templatetags/spa_helper.py | 23 +++++++++++------------ InvenTree/web/tests.py | 5 +---- 2 files changed, 12 insertions(+), 16 deletions(-) diff --git a/InvenTree/web/templatetags/spa_helper.py b/InvenTree/web/templatetags/spa_helper.py index 003682402a8c..f894bc7aa1c2 100644 --- a/InvenTree/web/templatetags/spa_helper.py +++ b/InvenTree/web/templatetags/spa_helper.py @@ -24,14 +24,20 @@ def get_url(file: str) -> str: return f'{settings.STATIC_URL}{app}/{file}' if manifest_path == '': - manifest_path = Path(__file__).parent.parent.joinpath( - 'static/web/manifest.json' + manifest = Path(__file__).parent.parent.joinpath( + 'static/web/.vite/manifest.json' ) - manifest = Path(manifest_path) + else: + manifest = Path(manifest_path) if not manifest.exists(): - logger.error('Manifest file not found') - return + # Try old path for manifest file + manifest = Path(__file__).parent.parent.joinpath('static/web/manifest.json') + + # Final check - fail if manifest file not found + if not manifest.exists(): + logger.error('Manifest file not found') + return try: manifest_data = json.load(manifest.open()) @@ -40,13 +46,6 @@ def get_url(file: str) -> str: return return_string = '' - # CSS (based on index.css file as entrypoint) - css_index = manifest_data.get('index.css') - if css_index: - return_string += ( - f'' - ) - # JS (based on index.html file as entrypoint) index = manifest_data.get('index.html') dynamic_files = index.get('dynamicImports', []) diff --git a/InvenTree/web/tests.py b/InvenTree/web/tests.py index eca79fa94be9..e3ab9042dc62 100644 --- a/InvenTree/web/tests.py +++ b/InvenTree/web/tests.py @@ -26,14 +26,11 @@ def assertSettings(self, settings_data): def test_spa_bundle(self): """Test the 'spa_bundle' template tag.""" resp = spa_helper.spa_bundle() - self.assertTrue( - resp.startswith(' Date: Sat, 23 Mar 2024 10:03:44 +1100 Subject: [PATCH 03/10] Bump @sentry/react from 7.107.0 to 7.108.0 in /src/frontend (#6820) Bumps [@sentry/react](https://github.com/getsentry/sentry-javascript) from 7.107.0 to 7.108.0. - [Release notes](https://github.com/getsentry/sentry-javascript/releases) - [Changelog](https://github.com/getsentry/sentry-javascript/blob/7.108.0/CHANGELOG.md) - [Commits](https://github.com/getsentry/sentry-javascript/compare/7.107.0...7.108.0) --- updated-dependencies: - dependency-name: "@sentry/react" dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- src/frontend/package.json | 2 +- src/frontend/yarn.lock | 150 +++++++++++++++++++------------------- 2 files changed, 76 insertions(+), 76 deletions(-) diff --git a/src/frontend/package.json b/src/frontend/package.json index 4d5dff992cbd..7d39a45f2500 100644 --- a/src/frontend/package.json +++ b/src/frontend/package.json @@ -28,7 +28,7 @@ "@mantine/modals": "<7", "@mantine/notifications": "<7", "@naisutech/react-tree": "^3.1.0", - "@sentry/react": "^7.102.1", + "@sentry/react": "^7.108.0", "@tabler/icons-react": "^2.47.0", "@tanstack/react-query": "^5.24.1", "@uiw/codemirror-theme-vscode": "^4.21.22", diff --git a/src/frontend/yarn.lock b/src/frontend/yarn.lock index 29eac2133bdb..e1360d69fc90 100644 --- a/src/frontend/yarn.lock +++ b/src/frontend/yarn.lock @@ -1336,87 +1336,87 @@ resolved "https://registry.yarnpkg.com/@rollup/rollup-win32-x64-msvc/-/rollup-win32-x64-msvc-4.13.0.tgz#6abd79db7ff8d01a58865ba20a63cfd23d9e2a10" integrity sha512-UKXUQNbO3DOhzLRwHSpa0HnhhCgNODvfoPWv2FCXme8N/ANFfhIPMGuOT+QuKd16+B5yxZ0HdpNlqPvTMS1qfw== -"@sentry-internal/feedback@7.107.0": - version "7.107.0" - resolved "https://registry.yarnpkg.com/@sentry-internal/feedback/-/feedback-7.107.0.tgz#144cf01b1c1739d61db3990519f59b49a356fef1" - integrity sha512-okF0B9AJHrpkwNMxNs/Lffw3N5ZNbGwz4uvCfyOfnMxc7E2VfDM18QzUvTBRvNr3bA9wl+InJ+EMG3aZhyPunA== - dependencies: - "@sentry/core" "7.107.0" - "@sentry/types" "7.107.0" - "@sentry/utils" "7.107.0" - -"@sentry-internal/replay-canvas@7.107.0": - version "7.107.0" - resolved "https://registry.yarnpkg.com/@sentry-internal/replay-canvas/-/replay-canvas-7.107.0.tgz#ce2a8f6bf63ab962e696f26b509cfb87aa931302" - integrity sha512-dmDL9g3QDfo7axBOsVnpiKdJ/DXrdeuRv1AqsLgwzJKvItsv0ZizX0u+rj5b1UoxcwbXRMxJ0hit5a1yt3t/ow== - dependencies: - "@sentry/core" "7.107.0" - "@sentry/replay" "7.107.0" - "@sentry/types" "7.107.0" - "@sentry/utils" "7.107.0" - -"@sentry-internal/tracing@7.107.0": - version "7.107.0" - resolved "https://registry.yarnpkg.com/@sentry-internal/tracing/-/tracing-7.107.0.tgz#a10b4abcbc9e0d8da948e3a95029574387ca7b16" - integrity sha512-le9wM8+OHBbq7m/8P7JUJ1UhSPIty+Z/HmRXc5Z64ODZcOwFV6TmDpYx729IXDdz36XUKmeI+BeM7yQdTTZPfQ== - dependencies: - "@sentry/core" "7.107.0" - "@sentry/types" "7.107.0" - "@sentry/utils" "7.107.0" - -"@sentry/browser@7.107.0": - version "7.107.0" - resolved "https://registry.yarnpkg.com/@sentry/browser/-/browser-7.107.0.tgz#a1caf4a3c39857862ba3314b9d4ed03f9259f338" - integrity sha512-KnqaQDhxv6w9dJ+mYLsNwPeGZfgbpM3vaismBNyJCKLgWn2V75kxkSq+bDX8LQT/13AyK7iFp317L6P8EuNa3g== - dependencies: - "@sentry-internal/feedback" "7.107.0" - "@sentry-internal/replay-canvas" "7.107.0" - "@sentry-internal/tracing" "7.107.0" - "@sentry/core" "7.107.0" - "@sentry/replay" "7.107.0" - "@sentry/types" "7.107.0" - "@sentry/utils" "7.107.0" - -"@sentry/core@7.107.0": - version "7.107.0" - resolved "https://registry.yarnpkg.com/@sentry/core/-/core-7.107.0.tgz#926838ba2c2861d6bd2bced0232e1f9d1ead6c75" - integrity sha512-C7ogye6+KPyBi8NVL0P8Rxx3Ur7Td8ufnjxosVy678lqY+dcYPk/HONROrzUFYW5fMKWL4/KYnwP+x9uHnkDmw== - dependencies: - "@sentry/types" "7.107.0" - "@sentry/utils" "7.107.0" - -"@sentry/react@^7.102.1": - version "7.107.0" - resolved "https://registry.yarnpkg.com/@sentry/react/-/react-7.107.0.tgz#45feb115383bde7d454e5f816663df34c1c28c39" - integrity sha512-3sXNKcDQjEimxwBPnRkewy3xNLt3KqStMAdDZ/dAF3rviOSVyk80DCQ3P6+HIqeB+IAXqWptg4eSWRA1qNZquA== - dependencies: - "@sentry/browser" "7.107.0" - "@sentry/core" "7.107.0" - "@sentry/types" "7.107.0" - "@sentry/utils" "7.107.0" +"@sentry-internal/feedback@7.108.0": + version "7.108.0" + resolved "https://registry.yarnpkg.com/@sentry-internal/feedback/-/feedback-7.108.0.tgz#7033352abd304f1383ec47640e056a0dfd5132b7" + integrity sha512-8JcgZEnk1uWrXJhsd3iRvFtEiVeaWOEhN0NZwhwQXHfvODqep6JtrkY1yCIyxbpA37aZmrPc2JhyotRERGfUjg== + dependencies: + "@sentry/core" "7.108.0" + "@sentry/types" "7.108.0" + "@sentry/utils" "7.108.0" + +"@sentry-internal/replay-canvas@7.108.0": + version "7.108.0" + resolved "https://registry.yarnpkg.com/@sentry-internal/replay-canvas/-/replay-canvas-7.108.0.tgz#641133c19c0e1c423617b8d791f53d6cd0b0a862" + integrity sha512-R5tvjGqWUV5vSk0N1eBgVW7wIADinrkfDEBZ9FyKP2mXHBobsyNGt30heJDEqYmVqluRqjU2NuIRapsnnrpGnA== + dependencies: + "@sentry/core" "7.108.0" + "@sentry/replay" "7.108.0" + "@sentry/types" "7.108.0" + "@sentry/utils" "7.108.0" + +"@sentry-internal/tracing@7.108.0": + version "7.108.0" + resolved "https://registry.yarnpkg.com/@sentry-internal/tracing/-/tracing-7.108.0.tgz#d1e660701fb860cfae72b6ebfa8fb267533421fa" + integrity sha512-zuK5XsTsb+U+hgn3SPetYDAogrXsM16U/LLoMW7+TlC6UjlHGYQvmX3o+M2vntejoU1QZS8m1bCAZSMWEypAEw== + dependencies: + "@sentry/core" "7.108.0" + "@sentry/types" "7.108.0" + "@sentry/utils" "7.108.0" + +"@sentry/browser@7.108.0": + version "7.108.0" + resolved "https://registry.yarnpkg.com/@sentry/browser/-/browser-7.108.0.tgz#b95810bb6572b63781f253615896f5afb1a3a5c0" + integrity sha512-FNpzsdTvGvdHJMUelqEouUXMZU7jC+dpN7CdT6IoHVVFEkoAgrjMVUhXZoQ/dmCkdKWHmFSQhJ8Fm6V+e9Aq0A== + dependencies: + "@sentry-internal/feedback" "7.108.0" + "@sentry-internal/replay-canvas" "7.108.0" + "@sentry-internal/tracing" "7.108.0" + "@sentry/core" "7.108.0" + "@sentry/replay" "7.108.0" + "@sentry/types" "7.108.0" + "@sentry/utils" "7.108.0" + +"@sentry/core@7.108.0": + version "7.108.0" + resolved "https://registry.yarnpkg.com/@sentry/core/-/core-7.108.0.tgz#a27e8d6f85f59c5730ce86071474f15ac899fde0" + integrity sha512-I/VNZCFgLASxHZaD0EtxZRM34WG9w2gozqgrKGNMzAymwmQ3K9g/1qmBy4e6iS3YRptb7J5UhQkZQHrcwBbjWQ== + dependencies: + "@sentry/types" "7.108.0" + "@sentry/utils" "7.108.0" + +"@sentry/react@^7.108.0": + version "7.108.0" + resolved "https://registry.yarnpkg.com/@sentry/react/-/react-7.108.0.tgz#26a50324f6d7a9576f3753c099e7bcd8def94f3c" + integrity sha512-C60arh5/gtO42eMU9l34aWlKDLZUO+1j1goaEf/XRSwUcyJS9tbJrs+mT4nbKxUsEG714It2gRbfSEvh1eXmCg== + dependencies: + "@sentry/browser" "7.108.0" + "@sentry/core" "7.108.0" + "@sentry/types" "7.108.0" + "@sentry/utils" "7.108.0" hoist-non-react-statics "^3.3.2" -"@sentry/replay@7.107.0": - version "7.107.0" - resolved "https://registry.yarnpkg.com/@sentry/replay/-/replay-7.107.0.tgz#d714f864ef8602e6d009b2fa8ff8e4ef63c3e9e4" - integrity sha512-BNJDEVaEwr/YnV22qnyVA1almx/3p615m3+KaF8lPo7YleYgJGSJv1auH64j1G8INkrJ0J0wFBujb1EFjMYkxA== +"@sentry/replay@7.108.0": + version "7.108.0" + resolved "https://registry.yarnpkg.com/@sentry/replay/-/replay-7.108.0.tgz#baa679bd19b4e3729e607d3f84cff5048aeb3415" + integrity sha512-jo8fDOzcZJclP1+4n9jUtVxTlBFT9hXwxhAMrhrt70FV/nfmCtYQMD3bzIj79nwbhUtFP6pN39JH1o7Xqt1hxQ== dependencies: - "@sentry-internal/tracing" "7.107.0" - "@sentry/core" "7.107.0" - "@sentry/types" "7.107.0" - "@sentry/utils" "7.107.0" + "@sentry-internal/tracing" "7.108.0" + "@sentry/core" "7.108.0" + "@sentry/types" "7.108.0" + "@sentry/utils" "7.108.0" -"@sentry/types@7.107.0": - version "7.107.0" - resolved "https://registry.yarnpkg.com/@sentry/types/-/types-7.107.0.tgz#5ba4b472be6ccad9aecd58dbc0141a09dafb68c1" - integrity sha512-H7qcPjPSUWHE/Zf5bR1EE24G0pGVuJgrSx8Tvvl5nKEepswMYlbXHRVSDN0gTk/E5Z7cqf+hUBOpkQgZyps77w== +"@sentry/types@7.108.0": + version "7.108.0" + resolved "https://registry.yarnpkg.com/@sentry/types/-/types-7.108.0.tgz#5ceb959c4dabe511fc441fec8c2465f2d624900f" + integrity sha512-bKtHITmBN3kqtqE5eVvL8mY8znM05vEodENwRpcm6TSrrBjC2RnwNWVwGstYDdHpNfFuKwC8mLY9bgMJcENo8g== -"@sentry/utils@7.107.0": - version "7.107.0" - resolved "https://registry.yarnpkg.com/@sentry/utils/-/utils-7.107.0.tgz#b8524539d052a40f9c5f34a8347501f0f81a0751" - integrity sha512-C6PbN5gHh73MRHohnReeQ60N8rrLYa9LciHue3Ru2290eSThg4CzsPnx4SzkGpkSeVlhhptKtKZ+hp/ha3iVuw== +"@sentry/utils@7.108.0": + version "7.108.0" + resolved "https://registry.yarnpkg.com/@sentry/utils/-/utils-7.108.0.tgz#0231042956aed2ef35809891592238530349dfd9" + integrity sha512-a45yEFD5qtgZaIFRAcFkG8C8lnDzn6t4LfLXuV4OafGAy/3ZAN3XN8wDnrruHkiUezSSANGsLg3bXaLW/JLvJw== dependencies: - "@sentry/types" "7.107.0" + "@sentry/types" "7.108.0" "@sinclair/typebox@^0.27.8": version "0.27.8" From 16a365f7495e366ccdd38a1ea125a583ce9830dc Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sat, 23 Mar 2024 10:04:00 +1100 Subject: [PATCH 04/10] Bump @types/react from 18.2.67 to 18.2.68 in /src/frontend (#6821) Bumps [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) from 18.2.67 to 18.2.68. - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) --- updated-dependencies: - dependency-name: "@types/react" dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- src/frontend/package.json | 2 +- src/frontend/yarn.lock | 8 ++++---- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/src/frontend/package.json b/src/frontend/package.json index 7d39a45f2500..05119e0fa277 100644 --- a/src/frontend/package.json +++ b/src/frontend/package.json @@ -59,7 +59,7 @@ "@lingui/macro": "^4.7.1", "@playwright/test": "^1.41.2", "@types/node": "^20.11.20", - "@types/react": "^18.2.59", + "@types/react": "^18.2.68", "@types/react-dom": "^18.2.19", "@types/react-grid-layout": "^1.3.5", "@types/react-router-dom": "^5.3.3", diff --git a/src/frontend/yarn.lock b/src/frontend/yarn.lock index e1360d69fc90..71beb64421cc 100644 --- a/src/frontend/yarn.lock +++ b/src/frontend/yarn.lock @@ -1577,10 +1577,10 @@ dependencies: "@types/react" "*" -"@types/react@*", "@types/react@^18.2.59": - version "18.2.67" - resolved "https://registry.yarnpkg.com/@types/react/-/react-18.2.67.tgz#96b7af0b5e79c756f4bdd981de2ca28472c858e5" - integrity sha512-vkIE2vTIMHQ/xL0rgmuoECBCkZFZeHr49HeWSc24AptMbNRo7pwSBvj73rlJJs9fGKj0koS+V7kQB1jHS0uCgw== +"@types/react@*", "@types/react@^18.2.68": + version "18.2.68" + resolved "https://registry.yarnpkg.com/@types/react/-/react-18.2.68.tgz#b4d0c3a9c883165d11842f7b998532743fc5adda" + integrity sha512-Fj/BAR6LDSRkqinWfo9nGzW9ndpjEtP049oIW8KWToucUq7AJVCr/fyY9NFpaJaCXnGrKHLLs2mwiHYE1SxaxA== dependencies: "@types/prop-types" "*" "@types/scheduler" "*" From 234e3f448bdc5766e4f7692dc52f7c7ce0157c82 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sat, 23 Mar 2024 10:04:15 +1100 Subject: [PATCH 05/10] Bump vite from 5.2.2 to 5.2.3 in /src/frontend (#6822) Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 5.2.2 to 5.2.3. - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/create-vite@5.2.3/packages/vite) --- updated-dependencies: - dependency-name: vite dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- src/frontend/package.json | 2 +- src/frontend/yarn.lock | 8 ++++---- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/src/frontend/package.json b/src/frontend/package.json index 05119e0fa277..7e6077f5cf7b 100644 --- a/src/frontend/package.json +++ b/src/frontend/package.json @@ -66,7 +66,7 @@ "@vitejs/plugin-react": "^4.2.1", "babel-plugin-macros": "^3.1.0", "typescript": "^5.3.3", - "vite": "^5.1.4", + "vite": "^5.2.3", "vite-plugin-babel-macros": "^1.0.6" } } diff --git a/src/frontend/yarn.lock b/src/frontend/yarn.lock index 71beb64421cc..b0991ac5d03b 100644 --- a/src/frontend/yarn.lock +++ b/src/frontend/yarn.lock @@ -3344,10 +3344,10 @@ vite-plugin-babel-macros@^1.0.6: "@types/babel__core" "^7.1.18" babel-plugin-macros "^3.1.0" -vite@^5.1.4: - version "5.2.2" - resolved "https://registry.yarnpkg.com/vite/-/vite-5.2.2.tgz#b98f8de352d22e21d99508274ddd053ef82bf238" - integrity sha512-FWZbz0oSdLq5snUI0b6sULbz58iXFXdvkZfZWR/F0ZJuKTSPO7v72QPXt6KqYeMFb0yytNp6kZosxJ96Nr/wDQ== +vite@^5.2.3: + version "5.2.3" + resolved "https://registry.yarnpkg.com/vite/-/vite-5.2.3.tgz#198efc2fd4d80eac813b146a68a4b0dbde884fc2" + integrity sha512-+i1oagbvkVIhEy9TnEV+fgXsng13nZM90JQbrcPrf6DvW2mXARlz+DK7DLiDP+qeKoD1FCVx/1SpFL1CLq9Mhw== dependencies: esbuild "^0.20.1" postcss "^8.4.36" From 5385d93a222e30988ced0fc826fd21d3a5a6a7d8 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sat, 23 Mar 2024 18:11:10 +1100 Subject: [PATCH 06/10] Bump ossf/scorecard-action from 2.1.2 to 2.3.1 (#6803) Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.1.2 to 2.3.1. - [Release notes](https://github.com/ossf/scorecard-action/releases) - [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md) - [Commits](https://github.com/ossf/scorecard-action/compare/e38b1902ae4f44df626f11ba0734b14fb91f8f86...0864cf19026789058feabb7e87baa5f140aac736) --- updated-dependencies: - dependency-name: ossf/scorecard-action dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- .github/workflows/scorecard.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index d9b48d8e2edf..99217836a7c9 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -37,7 +37,7 @@ jobs: persist-credentials: false - name: "Run analysis" - uses: ossf/scorecard-action@e38b1902ae4f44df626f11ba0734b14fb91f8f86 # v2.1.2 + uses: ossf/scorecard-action@0864cf19026789058feabb7e87baa5f140aac736 # v2.3.1 with: results_file: results.sarif results_format: sarif From 8777ca2bd1a34573c4c057074b9fcfb1258b780d Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sat, 23 Mar 2024 18:11:25 +1100 Subject: [PATCH 07/10] Bump actions/download-artifact from 3.0.2 to 4.1.4 (#6801) Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 3.0.2 to 4.1.4. - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](https://github.com/actions/download-artifact/compare/9bc31d5ccc31df68ecc42ccf4149144866c47d8a...c850b930e6ba138125429b7e5c93fc707a7f8427) --- updated-dependencies: - dependency-name: actions/download-artifact dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- .github/workflows/qc_checks.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/qc_checks.yaml b/.github/workflows/qc_checks.yaml index 77d0f8341c48..dc524bac38eb 100644 --- a/.github/workflows/qc_checks.yaml +++ b/.github/workflows/qc_checks.yaml @@ -192,7 +192,7 @@ jobs: repository: inventree/schema token: ${{ secrets.SCHEMA_PAT }} - name: Download schema artifact - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 + uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 with: name: schema.yml - name: Move schema to correct location From 34d8f5d65d0bb80b3da23439f2a4208076ee7835 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sat, 23 Mar 2024 18:11:36 +1100 Subject: [PATCH 08/10] Bump sqren/backport-github-action from 8.9.3 to 9.3.1 (#6802) Bumps [sqren/backport-github-action](https://github.com/sqren/backport-github-action) from 8.9.3 to 9.3.1. - [Release notes](https://github.com/sqren/backport-github-action/releases) - [Commits](https://github.com/sqren/backport-github-action/compare/f54e19901f2a57f8b82360f2490d47ee82ec82c6...f7073a2287aefc1fa12685eb25a712ab5620445c) --- updated-dependencies: - dependency-name: sqren/backport-github-action dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- .github/workflows/backport.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/backport.yml b/.github/workflows/backport.yml index cd97cccf9ffd..1aadcf8c4f48 100644 --- a/.github/workflows/backport.yml +++ b/.github/workflows/backport.yml @@ -22,7 +22,7 @@ jobs: ) steps: - name: Backport Action - uses: sqren/backport-github-action@f54e19901f2a57f8b82360f2490d47ee82ec82c6 # pin@v9.2.2 + uses: sqren/backport-github-action@f7073a2287aefc1fa12685eb25a712ab5620445c # pin@v9.2.2 with: github_token: ${{ secrets.GITHUB_TOKEN }} auto_backport_label_prefix: backport-to- From 08ad0f8e2879d51ae49c84b542de81c12ff31d2c Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sat, 23 Mar 2024 18:11:47 +1100 Subject: [PATCH 09/10] Bump docker/login-action from 3.0.0 to 3.1.0 (#6800) Bumps [docker/login-action](https://github.com/docker/login-action) from 3.0.0 to 3.1.0. - [Release notes](https://github.com/docker/login-action/releases) - [Commits](https://github.com/docker/login-action/compare/343f7c4344506bcbf9b4de18042ae17996df046d...e92390c5fb421da1463c202d546fed0ec5c39f20) --- updated-dependencies: - dependency-name: docker/login-action dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- .github/workflows/docker.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/docker.yaml b/.github/workflows/docker.yaml index 86dc0f69876c..0cbb5344ff64 100644 --- a/.github/workflows/docker.yaml +++ b/.github/workflows/docker.yaml @@ -138,14 +138,14 @@ jobs: fi - name: Login to Dockerhub if: github.event_name != 'pull_request' && steps.docker_login.outputs.skip_dockerhub_login != 'true' - uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d # pin@v3.0.0 + uses: docker/login-action@e92390c5fb421da1463c202d546fed0ec5c39f20 # pin@v3.1.0 with: username: ${{ secrets.DOCKER_USERNAME }} password: ${{ secrets.DOCKER_PASSWORD }} - name: Log into registry ghcr.io if: github.event_name != 'pull_request' - uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d # pin@v3.0.0 + uses: docker/login-action@e92390c5fb421da1463c202d546fed0ec5c39f20 # pin@v3.1.0 with: registry: ghcr.io username: ${{ github.actor }} From 7169b5de26604e1e2f001c669373ee2056282254 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sat, 23 Mar 2024 18:11:57 +1100 Subject: [PATCH 10/10] Bump actions/stale from 8.0.0 to 9.0.0 (#6799) Bumps [actions/stale](https://github.com/actions/stale) from 8.0.0 to 9.0.0. - [Release notes](https://github.com/actions/stale/releases) - [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/stale/compare/1160a2240286f5da8ec72b1c0816ce2481aabf84...28ca1036281a5e5922ead5184a1bbf96e5fc984e) --- updated-dependencies: - dependency-name: actions/stale dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- .github/workflows/stale.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/stale.yml b/.github/workflows/stale.yml index fd4696f65556..e48c2bd014d5 100644 --- a/.github/workflows/stale.yml +++ b/.github/workflows/stale.yml @@ -17,7 +17,7 @@ jobs: pull-requests: write steps: - - uses: actions/stale@1160a2240286f5da8ec72b1c0816ce2481aabf84 # pin@v8.0.0 + - uses: actions/stale@28ca1036281a5e5922ead5184a1bbf96e5fc984e # pin@v9.0.0 with: repo-token: ${{ secrets.GITHUB_TOKEN }} stale-issue-message: 'This issue seems stale. Please react to show this is still important.'