build(dependencies): bump the github-actions group with 7 updates [skip ci] #52
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
dependabot
bot
added
dependencies
dependabot
bot
force-pushed
the
dependabot/github_actions/github-actions-6dba0e1020
branch
from
a3effb4
to
10c1038
Compare
Bumps the github-actions group with 7 updates: | Package | From | To | | --- | --- | --- | | [step-security/harden-runner](https://github.com/step-security/harden-runner) | `2.7.0` | `2.8.1` | | [actions/checkout](https://github.com/actions/checkout) | `3` | `4` | | [actions/setup-node](https://github.com/actions/setup-node) | `3` | `4` | | [actions/download-artifact](https://github.com/actions/download-artifact) | `4.1.2` | `4.1.7` | | [actions/configure-pages](https://github.com/actions/configure-pages) | `3` | `5` | | [actions/upload-pages-artifact](https://github.com/actions/upload-pages-artifact) | `2` | `3` | | [actions/deploy-pages](https://github.com/actions/deploy-pages) | `2` | `4` | Updates `step-security/harden-runner` from 2.7.0 to 2.8.1 - [Release notes](https://github.com/step-security/harden-runner/releases) - [Commits](step-security/harden-runner@63c24ba...17d0e2b) Updates `actions/checkout` from 3 to 4 - [Release notes](https://github.com/actions/checkout/releases) - [Commits](actions/checkout@v3...v4) Updates `actions/setup-node` from 3 to 4 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](actions/setup-node@v3...v4) Updates `actions/download-artifact` from 4.1.2 to 4.1.7 - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](actions/download-artifact@eaceaf8...65a9edc) Updates `actions/configure-pages` from 3 to 5 - [Release notes](https://github.com/actions/configure-pages/releases) - [Commits](actions/configure-pages@v3...v5) Updates `actions/upload-pages-artifact` from 2 to 3 - [Release notes](https://github.com/actions/upload-pages-artifact/releases) - [Commits](actions/upload-pages-artifact@v2...v3) Updates `actions/deploy-pages` from 2 to 4 - [Release notes](https://github.com/actions/deploy-pages/releases) - [Commits](actions/deploy-pages@v2...v4) --- updated-dependencies: - dependency-name: step-security/harden-runner dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/setup-node dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/download-artifact dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: actions/configure-pages dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/upload-pages-artifact dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/deploy-pages dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com>
MLenterman
force-pushed
the
dependabot/github_actions/github-actions-6dba0e1020
branch
from
10c1038
to
82e9810
Compare
MLenterman
changed the title
MLenterman
deleted the
dependabot/github_actions/github-actions-6dba0e1020
branch
|
🎉 This PR is included in version 1.20.19 🎉 The release is available on GitHub release Your semantic-release bot 📦🚀 |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the github-actions group with 7 updates:
2.7.02.8.134344.1.24.1.7352324Updates
step-security/harden-runnerfrom 2.7.0 to 2.8.1Release notes
Sourced from step-security/harden-runner's releases.
Commits
17d0e2bMerge pull request #425 from step-security/rc-9bb112d0Update isGitHubHosted implementationf4f3f44Merge pull request #407 from step-security/dependabot/github_actions/actions/...7a946b5Bump actions/dependency-review-action from 3.1.3 to 4.3.275a01c2Merge pull request #417 from step-security/dependabot/github_actions/step-sec...53413f1Bump step-security/harden-runner from 2.7.1 to 2.8.0f086349Merge pull request #416 from step-security/rc-8b9c325dUpdate image808a771Add info about file and process events7171429Update agentUpdates
actions/checkoutfrom 3 to 4Release notes
Sourced from actions/checkout's releases.
... (truncated)
Commits
692973ePrepare 4.1.7 release (#1775)6ccd57fPin actions/checkout's own workflows to a known, good, stable version. (#1776)b17fe1eHandle hidden refs (#1774)b80ff79Bump actions/checkout from 3 to 4 (#1697)b1ec302Bump the minor-npm-dependencies group across 1 directory with 4 updates (#1739)a5ac7e5Update for 4.1.6 release (#1733)24ed1a3Check platform for extension (#1732)44c2b7aREADME: Suggestuser.emailto be `41898282+github-actions[bot]@users.norepl...8459bc0Bump actions/upload-artifact from 2 to 4 (#1695)3f603f6Bump actions/setup-node from 1 to 4 (#1696)Updates
actions/setup-nodefrom 3 to 4Release notes
Sourced from actions/setup-node's releases.
... (truncated)
Commits
60edb5dAdd support for arm64 Windows (#927)d86ebcdAdd support forvolta.extends(#921)b39b52dFix node-version-file interprets entire package.json as a version (#865)7247617Addpackage.jsontonode-version-filelist of examples. (#879)f3ec4caFix README.md (#898)ec97f37Add fix for cache (#917)5ef044fUpdate reusable workflows to use Node.js v20 (#889)c45882aupdate to setup-node@v4 in docs (#884)ee36e8bIgnore engines check in Yarn 1 e2e-cache tests (#882)8f152deUpdate actions/checkout for documentation and yaml (#876)Updates
actions/download-artifactfrom 4.1.2 to 4.1.7Release notes
Sourced from actions/download-artifact's releases.
Commits
65a9edcMerge pull request #325 from bethanyj28/mainfdd1595licensedc13dba1update@actions/artifactdependency0daa75eMerge pull request #324 from actions/eggyhead/use-artifact-v2.1.69c19ed7Merge branch 'main' into eggyhead/use-artifact-v2.1.63d3ea87updating license89af5dbupdating artifact package v2.1.6b4aefffMerge pull request #323 from actions/eggyhead/update-artifact-v2158caf195package lock updated7a2ec4updating package versionUpdates
actions/configure-pagesfrom 3 to 5Release notes
Sourced from actions/configure-pages's releases.
... (truncated)
Commits
983d773Merge pull request #139 from actions/config-auto-detect9cf6e24Tweak commentf304bd8Update distributables215cd51Attempt to detect existing config files matching the expected basename plus o...e9382acFront-load the file extension warning7781abdMerge pull request #138 from actions/error-utilsfc47e3cUpdate distributables9c9f8a2Update tests to use the Octokit RequestError class9a4705dUpdate distributablesf6ded38Fix syntax error and formattingUpdates
actions/upload-pages-artifactfrom 2 to 3Release notes
Sourced from actions/upload-pages-artifact's releases.
Commits
56afc60Merge pull request #94 from SilverRainZ/maind12fdfbMerge branch 'main' into mainaef5542Merge pull request #88 from uiolee/patch-129cedd7Merge branch 'main' into patch-1a69c22eMerge pull request #92 from actions/dependabot/github_actions/non-breaking-ch...794e304Group tar's output to prevent it from messing up logs14007f6Bump the non-breaking-changes group with 1 update0191170Merge pull request #91 from actions/dependabot-grouping0e7832dUpdate Dependabot config to group non-breaking changes1a6d9faUpdate README.mdUpdates
actions/deploy-pagesfrom 2 to 4Release notes
Sourced from actions/deploy-pages's releases.
... (truncated)
Commits
d6db901Merge pull request #324 from actions/error-message-request-id055f425compile changes5ab929bInclude request id in the error message of an error response3ff795bMerge pull request #318 from actions/dependabot/npm_and_yarn/non-breaking-cha...f5a2f0dUpdate distributables after Dependabot 🤖1364cdeBump the non-breaking-changes group with 2 updates2ed07f7Merge pull request #316 from actions/dependabot/npm_and_yarn/non-breaking-cha...d5a892bBump the non-breaking-changes group with 1 update05977f5Merge pull request #314 from actions/dependabot/npm_and_yarn/non-breaking-cha...9414024Update distributables after Dependabot 🤖Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions