Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

build(deps): bump the ci group across 1 directory with 10 updates #232

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 1, 2024

Bumps the ci group with 10 updates in the / directory:

Package From To
mercedesbenzio/detect-action 1 2
peaceiris/actions-mdbook 1 2
peaceiris/actions-gh-pages 3 4
actions/cache 3 4
helm/kind-action 1.8.0 1.10.0
yokawasa/action-setup-kube-tools 0.9.3 0.11.1
slackapi/slack-github-action 1.24.0 1.27.0
8BitJonny/gh-get-current-pr 2.2.0 3.0.0
thollander/actions-comment-pull-request 2.4.3 2.5.0
goreleaser/goreleaser-action 5 6

Updates mercedesbenzio/detect-action from 1 to 2

Release notes

Sourced from mercedesbenzio/detect-action's releases.

v2.0.0

What's Changed

Full Changelog: tvcsantos/detect-action@v1.5.0...v2.0.0

v1.5.0

What's Changed

Full Changelog: tvcsantos/detect-action@v1.4.1...v1.5.0

v1.4.1

What's Changed

Full Changelog: tvcsantos/detect-action@v1.4.0...v1.4.1

v1.4.0

What's Changed

Full Changelog: tvcsantos/detect-action@v1.3.0...v1.4.0

v1.3.0

What's Changed

Full Changelog: tvcsantos/detect-action@v1.2.0...v1.3.0

v1.2.0

What's Changed

Full Changelog: tvcsantos/detect-action@v1.1.0...v1.2.0

v1.1.0

What's Changed

Full Changelog: tvcsantos/detect-action@v1.0.0...v1.1.0

Changelog

Sourced from mercedesbenzio/detect-action's changelog.

Commits

Updates peaceiris/actions-mdbook from 1 to 2

Release notes

Sourced from peaceiris/actions-mdbook's releases.

actions-mdbook v2.0.0

See CHANGELOG.md for more details.

actions-mdbook v1.2.0

  • deps: bump node12 to node16
  • deps: bump @​actions/core from 1.6.0 to 1.10.0

See CHANGELOG.md for more details.

actions-mdbook v1.1.14

See CHANGELOG.md for more details.

actions-mdbook v1.1.13

See CHANGELOG.md for more details.

actions-mdbook v1.1.12

See CHANGELOG.md for more details.

actions-mdbook v1.1.11

See CHANGELOG.md for more details.

actions-mdbook v1.1.10

See CHANGELOG.md for more details.

This action was featured at GitHub Action Hero: Shohei Ueda - The GitHub Blog. Thanks all.

actions-mdbook v1.1.9

See CHANGELOG.md for more details.

actions-mdbook v1.1.8

See CHANGELOG.md for more details.

actions-mdbook v1.1.7

See CHANGELOG.md for more details.

actions-mdbook v1.1.6

See CHANGELOG.md for more details.

actions-mdbook v1.1.5

See CHANGELOG.md for more details.

Release v1.1.4

See CHANGELOG.md for more details.

Release v1.1.3

See CHANGELOG.md for more details.

Release v1.1.2

See CHANGELOG.md for more details.

... (truncated)

Changelog

Sourced from peaceiris/actions-mdbook's changelog.

2.0.0 (2024-04-08)

build

chore

ci

feat

Commits
  • ee69d23 chore(release): 2.0.0
  • 2d79d45 chore(release): Add build assets
  • c95f05c chore: revert build
  • cb4d902 build: bump node to 20.12.1 (#504)
  • 46c97c2 feat: bump to node20 runtime (#500)
  • 7b0c98f ci: bump codecov/codecov-action from 3 to 4 (#490)
  • 60cc2ff ci: bump actions/dependency-review-action from 3.0.8 to 3.1.0 (#488)
  • c0c1ffe ci: bump actions/checkout from 3 to 4 (#487)
  • c6c9e0f ci: bump actions/setup-node from 3.8.0 to 3.8.1 (#486)
  • 162a198 ci: bump actions/dependency-review-action from 3.0.7 to 3.0.8 (#485)
  • Additional commits viewable in compare view

Updates peaceiris/actions-gh-pages from 3 to 4

Release notes

Sourced from peaceiris/actions-gh-pages's releases.

actions-github-pages v4.0.0

See CHANGELOG.md for more details.

actions-github-pages v3.9.3

See CHANGELOG.md for more details.

actions-github-pages v3.9.2

See CHANGELOG.md for more details.

actions-github-pages v3.9.1

  • update deps

See CHANGELOG.md for more details.

actions-github-pages v3.9.0

  • deps: bump node12 to node16
  • deps: bump @​actions/core from 1.6.0 to 1.10.0

See CHANGELOG.md for more details.

actions-github-pages v3.8.0

See CHANGELOG.md for more details.

actions-github-pages v3.7.3

See CHANGELOG.md for more details.

actions-github-pages v3.7.2

See CHANGELOG.md for more details.

actions-github-pages v3.7.1

See CHANGELOG.md for more details.

actions-github-pages v3.7.0

See CHANGELOG.md for more details.

Overviews:

  • Add .nojekyll file by default for all branches (#438) (079d483), closes #438
  • Add destination_dir option (#403) (f30118c), closes #403 #324 #390
  • Add exclude_assets option (#416) (0f5c65e), closes #416 #163
  • exclude_assets supports glob patterns (#417) (6f45501), closes #417 #163

actions-github-pages v3.6.4

See CHANGELOG.md for more details.

actions-github-pages v3.6.3

See CHANGELOG.md for more details.

actions-github-pages v3.6.2

See CHANGELOG.md for more details.

... (truncated)

Changelog

Sourced from peaceiris/actions-gh-pages's changelog.

3.9.3 (2023-03-30)

docs

fix

3.9.2 (2023-01-17)

chore

ci

deps

3.9.1 (2023-01-05)

chore

ci

  • add Renovate config (#802) (072d16c), closes #802
  • bump actions/dependency-review-action from 2 to 3 (#799) (e3b45f2), closes #799
  • bump peaceiris/actions-github-app-token from 1.1.4 to 1.1.5 (#798) (a5f971f), closes #798
  • bump peaceiris/actions-mdbook from 1.1.14 to 1.2.0 (#793) (9af6a68), closes #793
  • bump peaceiris/workflows from 0.17.1 to 0.17.2 (#794) (087a759), closes #794

... (truncated)

Commits
  • 4f9cc66 chore(release): 4.0.0
  • 9c75028 chore(release): Add build assets
  • 5049354 build: node 20.11.1
  • 4eb285e chore: bump node16 to node20 (#1067)
  • cdc09a3 chore(deps): update dependency @​types/node to v16.18.77 (#1065)
  • d830378 chore(deps): update dependency @​types/node to v16.18.76 (#1063)
  • 80daa1d chore(deps): update dependency @​types/node to v16.18.75 (#1061)
  • 108285e chore(deps): update dependency ts-jest to v29.1.2 (#1060)
  • 99c95ff chore(deps): update dependency @​types/node to v16.18.74 (#1058)
  • 1f46537 chore(deps): update dependency @​types/node to v16.18.73 (#1057)
  • Additional commits viewable in compare view

Updates actions/cache from 3 to 4

Release notes

Sourced from actions/cache's releases.

v4.0.0

What's Changed

New Contributors

Full Changelog: actions/cache@v3...v4.0.0

v3.3.3

What's Changed

New Contributors

Full Changelog: actions/cache@v3...v3.3.3

v3.3.2

What's Changed

New Contributors

Full Changelog: actions/cache@v3...v3.3.2

v3.3.1

What's Changed

Full Changelog: actions/cache@v3...v3.3.1

v3.3.0

What's Changed

... (truncated)

Changelog

Sourced from actions/cache's changelog.

Releases

4.0.2

  • Fixed restore fail-on-cache-miss not working.

4.0.1

  • Updated isGhes check

4.0.0

  • Updated minimum runner version support from node 12 -> node 20

3.3.3

  • Updates @​actions/cache to v3.2.3 to fix accidental mutated path arguments to getCacheVersion actions/toolkit#1378
  • Additional audit fixes of npm package(s)

3.3.2

  • Fixes bug with Azure SDK causing blob downloads to get stuck.

3.3.1

  • Reduced segment size to 128MB and segment timeout to 10 minutes to fail fast in case the cache download is stuck.

3.3.0

  • Added option to lookup cache without downloading it.

3.2.6

  • Fix zstd not being used after zstd version upgrade to 1.5.4 on hosted runners.

3.2.5

  • Added fix to prevent from setting MYSYS environment variable globally.

3.2.4

  • Added option to fail job on cache miss.

3.2.3

  • Support cross os caching on Windows as an opt-in feature.
  • Fix issue with symlink restoration on Windows for cross-os caches.

3.2.2

... (truncated)

Commits

Updates helm/kind-action from 1.8.0 to 1.10.0

Release notes

Sourced from helm/kind-action's releases.

v1.10.0

Requirements

We changed to use wget instead of curl

What's Changed

Full Changelog: helm/kind-action@v1.9.0...v1.10.0

v1.9.0

What's Changed

New Contributors

Full Changelog: helm/kind-action@v1.8.0...v1.9.0

Commits
  • 0025e74 Bump actions/checkout from 4.1.2 to 4.1.3 in the actions group (#109)
  • 2a7d25f bump kind to 0.22.0 / kubectl and general housekeeping (#107)
  • d821386 Bump actions/checkout from 4.1.2 to 4.1.3 (#108)
  • e89fbc4 Bump actions/checkout from 4.1.1 to 4.1.2 (#106)
  • 8300bd0 Update kind to release v0.21.0 (#104)
  • 99576bf docs: bump outdated action version in README (#92)
  • 0ca85d0 docs: fix default version in action.yml (#91)
  • fc8d4ed Fix arch detection in non-Debian distros (#93)
  • 4be822c chore: Bump node version to node20 (#102)
  • 100421e Bump actions/checkout from 4.1.0 to 4.1.1 (#99)
  • Additional commits viewable in compare view

Updates yokawasa/action-setup-kube-tools from 0.9.3 to 0.11.1

Release notes

Sourced from yokawasa/action-setup-kube-tools's releases.

v0.11.1

What's Changed

Full Changelog: yokawasa/action-setup-kube-tools@v0.11.0...v0.11.1

v0.11.0

What's Changed

Full Changelog: yokawasa/action-setup-kube-tools@v0.10.0...v0.11.0

v0.10.0

What's Changed

New Contributors

Full Changelog: yokawasa/action-setup-kube-tools@v0.9.3...v0.10.0

Commits
  • 5fe3850 Merge pull request #57 from yokawasa/release-v0.11.1
  • 31ec3e1 update README, remove CHANGELOG
  • 714d1f0 Merge pull request #56 from yokawasa/dependabot/npm_and_yarn/undici-5.28.4
  • ad566aa Bump undici from 5.28.3 to 5.28.4
  • 448b9bd Merge pull request #55 from yokawasa/update-readme
  • 06c35f4 updated sample tool versions
  • dc0754a Merge pull request #54 from yokawasa/release-v0.11.0
  • 953eee8 release v0.11.0
  • 2e3262f Merge pull request #53 from yokawasa/add-arch-type
  • e651ff0 fix test
  • Additional commits viewable in compare view

Updates slackapi/slack-github-action from 1.24.0 to 1.27.0

Release notes

Sourced from slackapi/slack-github-action's releases.

Slack Send V1.27.0

What's changed

This release introduces an optional payload-delimiter parameter for flattening nested objects with a customized delimiter before the payload is sent to Slack Workflow Builder when using workflow webhook triggers.

  - name: Send a custom flattened payload
    uses: slackapi/[email protected]
+   with:
+     payload-delimiter: "_"
    env:
      SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL }}

Setting this value to an underscore (_) is recommended when using nested inputs within Workflow Builder to match expected input formats of Workflow Builder, but the actual value can be changed to something else! This "flattening" behavior did exist prior to this version, but used a period (.) which is not valid for webook inputs in Workflow Builder.

The resulting output of flattened objects is not always clear, but the following can hopefully serve as a quick reference as well as these specs when using _ as the delimiter:

Input:

{
    "apples": "tree",
    "bananas": {
        "truthiness": true
    }
}

Output:

{
    "apples": "tree",
    "bananas_truthiness": "true"
}

Notice that bananas_truthiness is also stringified in this process, as part of updating values to match the expected inputs of Workflow Builder!

Changes

In addition to the changes above, the following lists all of the changes since the prior version with the complete changelog changes found here: slackapi/slack-github-action@v1.26.0...v1.27.0

🎁 Enhancements

... (truncated)

Commits
  • 37ebaef Automatic compilation
  • 5d1fb07 chore(release): tag version 1.27.0
  • 3bc0671 chore(deps): bump axios to 1.7.5 (#332)
  • b452451 feat: make the payload delimiter configurable for workflow webhook triggers (...
  • c50e848 build(deps-dev): bump mocha from 10.5.2 to 10.7.0 (#328)
  • e4a9c4b build(deps): bump @​slack/web-api from 7.2.0 to 7.3.2 (#327)
  • 9a7f0fa build(deps-dev): bump chai from 4.4.1 to 4.5.0 (#326)
  • 73b7062 build(deps-dev): bump eslint-plugin-jsdoc from 48.5.0 to 48.10.2 (#325)
  • 3d5207b build(deps): bump https-proxy-agent from 7.0.4 to 7.0.5 (#320)
  • 4e15b6a build(deps): bump @​slack/web-api from 7.0.4 to 7.2.0 (#323)
  • Additional commits viewable in

Bumps the ci group with 10 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [mercedesbenzio/detect-action](https://github.com/mercedesbenzio/detect-action) | `1` | `2` |
| [peaceiris/actions-mdbook](https://github.com/peaceiris/actions-mdbook) | `1` | `2` |
| [peaceiris/actions-gh-pages](https://github.com/peaceiris/actions-gh-pages) | `3` | `4` |
| [actions/cache](https://github.com/actions/cache) | `3` | `4` |
| [helm/kind-action](https://github.com/helm/kind-action) | `1.8.0` | `1.10.0` |
| [yokawasa/action-setup-kube-tools](https://github.com/yokawasa/action-setup-kube-tools) | `0.9.3` | `0.11.1` |
| [slackapi/slack-github-action](https://github.com/slackapi/slack-github-action) | `1.24.0` | `1.27.0` |
| [8BitJonny/gh-get-current-pr](https://github.com/8bitjonny/gh-get-current-pr) | `2.2.0` | `3.0.0` |
| [thollander/actions-comment-pull-request](https://github.com/thollander/actions-comment-pull-request) | `2.4.3` | `2.5.0` |
| [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) | `5` | `6` |



Updates `mercedesbenzio/detect-action` from 1 to 2
- [Release notes](https://github.com/mercedesbenzio/detect-action/releases)
- [Changelog](https://github.com/tvcsantos/detect-action/blob/main/CHANGELOG.md)
- [Commits](tvcsantos/detect-action@v1...v2)

Updates `peaceiris/actions-mdbook` from 1 to 2
- [Release notes](https://github.com/peaceiris/actions-mdbook/releases)
- [Changelog](https://github.com/peaceiris/actions-mdbook/blob/main/CHANGELOG.md)
- [Commits](peaceiris/actions-mdbook@v1...v2)

Updates `peaceiris/actions-gh-pages` from 3 to 4
- [Release notes](https://github.com/peaceiris/actions-gh-pages/releases)
- [Changelog](https://github.com/peaceiris/actions-gh-pages/blob/main/CHANGELOG.md)
- [Commits](peaceiris/actions-gh-pages@v3...v4)

Updates `actions/cache` from 3 to 4
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](actions/cache@v3...v4)

Updates `helm/kind-action` from 1.8.0 to 1.10.0
- [Release notes](https://github.com/helm/kind-action/releases)
- [Commits](helm/kind-action@v1.8.0...v1.10.0)

Updates `yokawasa/action-setup-kube-tools` from 0.9.3 to 0.11.1
- [Release notes](https://github.com/yokawasa/action-setup-kube-tools/releases)
- [Commits](yokawasa/action-setup-kube-tools@v0.9.3...v0.11.1)

Updates `slackapi/slack-github-action` from 1.24.0 to 1.27.0
- [Release notes](https://github.com/slackapi/slack-github-action/releases)
- [Commits](slackapi/slack-github-action@v1.24.0...v1.27.0)

Updates `8BitJonny/gh-get-current-pr` from 2.2.0 to 3.0.0
- [Release notes](https://github.com/8bitjonny/gh-get-current-pr/releases)
- [Commits](8BitJonny/gh-get-current-pr@2.2.0...3.0.0)

Updates `thollander/actions-comment-pull-request` from 2.4.3 to 2.5.0
- [Release notes](https://github.com/thollander/actions-comment-pull-request/releases)
- [Commits](thollander/actions-comment-pull-request@v2.4.3...v2.5.0)

Updates `goreleaser/goreleaser-action` from 5 to 6
- [Release notes](https://github.com/goreleaser/goreleaser-action/releases)
- [Commits](goreleaser/goreleaser-action@v5...v6)

---
updated-dependencies:
- dependency-name: mercedesbenzio/detect-action
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: ci
- dependency-name: peaceiris/actions-mdbook
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: ci
- dependency-name: peaceiris/actions-gh-pages
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: ci
- dependency-name: actions/cache
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: ci
- dependency-name: helm/kind-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci
- dependency-name: yokawasa/action-setup-kube-tools
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci
- dependency-name: slackapi/slack-github-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci
- dependency-name: 8BitJonny/gh-get-current-pr
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: ci
- dependency-name: thollander/actions-comment-pull-request
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci
- dependency-name: goreleaser/goreleaser-action
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: ci
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Sep 1, 2024
Copy link

github-actions bot commented Sep 1, 2024

Mend Scan Summary: ❌

Repository: open-component-model/MPAS

VIOLATION DESCRIPTION NUMBER OF VIOLATIONS
HIGH/CRITICAL SECURITY VULNERABILITIES 6
MAJOR UPDATES AVAILABLE 0
LICENSE REQUIRES REVIEW 0
LICENSE RISK HIGH 7
RESTRICTIED LICENSE FOR ON-PREMISE DELIVERY 0

Detailed Logs: mend-scan-> Generate Report
Mend UI

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants