Skip to content

Bump the all-actions group across 1 directory with 13 updates#78

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/all-actions-a592919818
Closed

Bump the all-actions group across 1 directory with 13 updates#78
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/all-actions-a592919818

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github Jan 26, 2025

Bumps the all-actions group with 13 updates in the / directory:

Package From To
actions/add-to-project 1.0.1 1.0.2
actions/checkout 4.1.3 4.2.2
ruby/setup-ruby 1.176.0 1.213.0
actions/setup-go 5.0.1 5.3.0
github/codeql-action 3.24.11 3.28.5
codespell-project/actions-codespell 2.0 2.1
actions/dependency-review-action 4.3.2 4.5.0
actions/create-github-app-token 1.10.0 1.11.1
sigstore/cosign-installer 3.5.0 3.7.0
ossf/scorecard-action 2.3.3 2.4.0
actions/cache 4.0.2 4.2.0
actions/upload-artifact 4.3.3 4.6.0
actions/stale 9.0.0 9.1.0

Updates actions/add-to-project from 1.0.1 to 1.0.2

Release notes

Sourced from actions/add-to-project's releases.

v1.0.2

What's Changed

Full Changelog: actions/add-to-project@v1.0.1...v1.0.2

Commits
  • 244f685 Merge pull request #591 from actions/dependabot/npm_and_yarn/eslint-plugin-je...
  • 2a5ef71 Build and package
  • 8c11461 Update license for json-schema.dep.yml
  • 66f6cff Merge pull request #578 from actions/dependabot/npm_and_yarn/eslint-plugin-je...
  • ddf5099 Merge pull request #590 from actions/dependabot/npm_and_yarn/typescript-eslin...
  • da1ae5b build(deps-dev): bump @​typescript-eslint/eslint-plugin
  • ced87c7 Merge pull request #589 from actions/dependabot/npm_and_yarn/typescript-eslin...
  • c78e6a1 Merge pull request #582 from actions/dependabot/npm_and_yarn/ts-jest-29.1.5
  • 267a19f build(deps-dev): bump @​typescript-eslint/parser from 7.6.0 to 7.14.1
  • e005a86 Merge pull request #588 from actions/dependabot/npm_and_yarn/types/node-16.18...
  • Additional commits viewable in compare view

Updates actions/checkout from 4.1.3 to 4.2.2

Release notes

Sourced from actions/checkout's releases.

v4.2.2

What's Changed

Full Changelog: actions/checkout@v4.2.1...v4.2.2

v4.2.1

What's Changed

New Contributors

Full Changelog: actions/checkout@v4.2.0...v4.2.1

v4.2.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v4.1.7...v4.2.0

v4.1.7

What's Changed

New Contributors

Full Changelog: actions/checkout@v4.1.6...v4.1.7

v4.1.6

What's Changed

Full Changelog: actions/checkout@v4.1.5...v4.1.6

v4.1.5

What's Changed

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

v4.2.2

v4.2.1

v4.2.0

v4.1.7

v4.1.6

v4.1.5

v4.1.4

v4.1.3

v4.1.2

v4.1.1

v4.1.0

... (truncated)

Commits

Updates ruby/setup-ruby from 1.176.0 to 1.213.0

Release notes

Sourced from ruby/setup-ruby's releases.

v1.213.0

  • Add ubuntu-22.04-arm64 and ubuntu-24.04-arm64 support.

Full Changelog: ruby/setup-ruby@v1.212.0...v1.213.0

v1.212.0

What's Changed

Full Changelog: ruby/setup-ruby@v1.211.0...v1.212.0

v1.211.0

What's Changed

Full Changelog: ruby/setup-ruby@v1.210.0...v1.211.0

v1.210.0

What's Changed

Full Changelog: ruby/setup-ruby@v1.209.0...v1.210.0

v1.209.0

What's Changed

New Contributors

Full Changelog: ruby/setup-ruby@v1.208.0...v1.209.0

v1.208.0

What's Changed

Full Changelog: ruby/setup-ruby@v1.207.0...v1.208.0

v1.207.0

What's Changed

Full Changelog: ruby/setup-ruby@v1.206.0...v1.207.0

v1.206.0

... (truncated)

Commits
  • 28c4ded ubuntu-22.04-arm64 and ubuntu-24.04-arm64 support is complete
  • fbaef13 Add support for ubuntu-22.04-arm64 and ubuntu-24.04-arm64
  • f72249c Update CRuby releases on Windows
  • 87b4893 test.yml -add windows-2025
  • fd2daea common.js - add windows-2025
  • 1d54274 yarn.lock - Remove @​actions/core 1.10.1, use @​actions/core 1.11.1
  • 7a63021 Workaround missing require 'logger' in Rails
  • 8e51ba9 Upgrade @​actions/cache to 4.0.0
  • 868b3f0 Add ruby-3.3.7
  • 4a9ddd6 Update CRuby releases on Windows
  • Additional commits viewable in compare view

Updates actions/setup-go from 5.0.1 to 5.3.0

Release notes

Sourced from actions/setup-go's releases.

v5.3.0

What's Changed

New Contributors

Full Changelog: actions/setup-go@v5...v5.3.0

v5.2.0

What's Changed

  • Leveraging the raw API to retrieve the version-manifest, as it does not impose a rate limit and hence facilitates unrestricted consumption without the need for a token for Github Enterprise Servers by @​Shegox in actions/setup-go#496

New Contributors

Full Changelog: actions/setup-go@v5...v5.2.0

v5.1.0

What's Changed

Bug Fixes

New Contributors

Full Changelog: actions/setup-go@v5...v5.1.0

v5.0.2

What's Changed

Bug fixes:

Dependency updates:

... (truncated)

Commits
  • f111f33 Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 (#534)
  • 3d10edb Add new permission section (#533)
  • 43e1389 Configure Dependabot settings (#530)
  • f81f022 Use the new cache service: upgrade @actions/cache to ^4.0.0 (#531)
  • 3041bf5 feat: fallback to "raw" endpoint for manifest when rate limit is reached (#496)
  • 41dfa10 Enhance workflows and Upgrade micromatch Dependency (#510)
  • 9419772 Revise isGhes logic (#511)
  • d60b41a Merge pull request #502 from actions/Jcambass-patch-1
  • e09f57f Upgrade IA Publish
  • df1a117 Merge pull request #500 from actions/Jcambass-patch-1
  • Additional commits viewable in compare view

Updates github/codeql-action from 3.24.11 to 3.28.5

Release notes

Sourced from github/codeql-action's releases.

v3.28.5

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.5 - 24 Jan 2025

  • Update default CodeQL bundle version to 2.20.3. #2717

See the full CHANGELOG.md for more information.

v3.28.4

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.4 - 23 Jan 2025

No user facing changes.

See the full CHANGELOG.md for more information.

v3.28.3

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.3 - 22 Jan 2025

  • Update default CodeQL bundle version to 2.20.2. #2707
  • Fix an issue downloading the CodeQL Bundle from a GitHub Enterprise Server instance which occurred when the CodeQL Bundle had been synced to the instance using the CodeQL Action sync tool and the Actions runner did not have Zstandard installed. #2710
  • Uploading debug artifacts for CodeQL analysis is temporarily disabled. #2712

See the full CHANGELOG.md for more information.

v3.28.2

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.2 - 21 Jan 2025

No user facing changes.

See the full CHANGELOG.md for more information.

v3.28.1

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

... (truncated)

Changelog

Sourced from github/codeql-action's changelog.

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

[UNRELEASED]

No user facing changes.

3.28.5 - 24 Jan 2025

  • Update default CodeQL bundle version to 2.20.3. #2717

3.28.4 - 23 Jan 2025

No user facing changes.

3.28.3 - 22 Jan 2025

  • Update default CodeQL bundle version to 2.20.2. #2707
  • Fix an issue downloading the CodeQL Bundle from a GitHub Enterprise Server instance which occurred when the CodeQL Bundle had been synced to the instance using the CodeQL Action sync tool and the Actions runner did not have Zstandard installed. #2710
  • Uploading debug artifacts for CodeQL analysis is temporarily disabled. #2712

3.28.2 - 21 Jan 2025

No user facing changes.

3.28.1 - 10 Jan 2025

  • CodeQL Action v2 is now deprecated, and is no longer updated or supported. For better performance, improved security, and new features, upgrade to v3. For more information, see this changelog post. #2677
  • Update default CodeQL bundle version to 2.20.1. #2678

3.28.0 - 20 Dec 2024

  • Bump the minimum CodeQL bundle version to 2.15.5. #2655
  • Don't fail in the unusual case that a file is on the search path. #2660.

3.27.9 - 12 Dec 2024

No user facing changes.

3.27.8 - 12 Dec 2024

  • Fixed an issue where streaming the download and extraction of the CodeQL bundle did not respect proxy settings. #2624

3.27.7 - 10 Dec 2024

  • We are rolling out a change in December 2024 that will extract the CodeQL bundle directly to the toolcache to improve performance. #2631
  • Update default CodeQL bundle version to 2.20.0. #2636

3.27.6 - 03 Dec 2024

... (truncated)

Commits
  • f6091c0 Merge pull request #2721 from github/update-v3.28.5-01f001931
  • 064af10 Update changelog for v3.28.5
  • 01f0019 Merge pull request #2717 from github/update-bundle/codeql-bundle-v2.20.3
  • 573ad88 Merge pull request #2718 from github/kaeluka/4779-1
  • d7f3976 permissions block in query-filters.yml
  • 428975c Add changelog note
  • 208091d Update default bundle to codeql-bundle-v2.20.3
  • 7e3036b Merge pull request #2716 from github/mergeback/v3.28.4-to-main-ee117c90
  • e32a0d6 Update checked-in dependencies
  • 67c21e4 Update changelog and version after v3.28.4
  • Additional commits viewable in compare view

Updates codespell-project/actions-codespell from 2.0 to 2.1

Release notes

Sourced from codespell-project/actions-codespell's releases.

v2.1

What's Changed

New Contributors

Full Changelog: codespell-project/actions-codespell@v2...v2.1

Commits

Updates actions/dependency-review-action from 4.3.2 to 4.5.0

Release notes

Sourced from actions/dependency-review-action's releases.

v4.5.0

What's Changed

New Contributors

Full Changelog: actions/dependency-review-action@v4...v4.5.0

v4.4.0

What's Changed

Full Changelog: actions/dependency-review-action@v4.3.5...v4.4.0

v4.3.5

What's Changed

New Contributors

Full Changelog: actions/dependency-review-action@v4.3.4...v4.3.5

v4.3.4

What's Changed

Full Changelog: actions/dependency-review-action@v4.3.3...v4.3.4

Notes for v4.3.3

What's Changed

... (truncated)

Commits
  • 3b139cf Merge pull request #851 from actions/ahmed3lmallah/prepare-for-4.5.0-release
  • d6807b6 updating generated code
  • c89b41f addressing lint issues
  • eee97d8 incrementing project version
  • 9d10182 Merge pull request #827 from ebickle/fix/comment-warn-only
  • 9192be9 Merge pull request #850 from actions/ahmed3lmallah/adressing-CVE-2024-21538
  • 2fc8e23 Using cross-spawn safe version
  • fb86db2 fix: resolve race conditions in async core.group calls
  • 0a198ab fix: replace integer failureCount with boolean
  • fc499fc Merge branch 'main' into fix/comment-warn-only
  • Additional commits viewable in compare view

Updates actions/create-github-app-token from 1.10.0 to 1.11.1

Release notes

Sourced from actions/create-github-app-token's releases.

v1.11.1

What's Changed

Bug Fixes

Full Changelog: actions/create-github-app-token@v1.11.0...v1.11.1

v1.11.0

What's Changed

Features

New Contributors

Full Changelog: actions/create-github-app-token@v1.10.4...v1.11.0

v1.10.4

What's Changed

Bug Fixes

New Contributors

Full Changelog: actions/create-github-app-token@v1.10.3...v1.10.4

v1.10.3

What's Changed

Bug Fixes

... (truncated)

Commits
  • c1a2851 build(release): 1.11.1 [skip ci]
  • fa6118c fix(deps): bump the production-dependencies group across 1 directory with 3 u...
  • ae140fa build(deps): bump actions/publish-immutable-action from 0.0.3 to 0.0.4 (#180)
  • c84b152 build(deps-dev): bump the development-dependencies group across 1 directory w...
  • 26a5f36 ci(dependabot): only group minor and patch updates (#192)
  • 6f99576 docs(README): fix typo (#186)
  • 25cc3bd refactor: remove redundant API call (#175)
  • a2c2dfa build(deps-dev): bump the development-dependencies group with 3 updates (#174)
  • 349e62c ci(release): add workflow file for publishing releases to immutable action pa...
  • 5d869da build(release): 1.11.0 [skip ci]
  • Additional commits viewable in compare view

Updates sigstore/cosign-installer from 3.5.0 to 3.7.0

Release notes

Sourced from sigstore/cosign-installer's releases.

v3.7.0

What's Changed

Full Changelog: sigstore/cosign-installer@v3.6.0...v3.7.0

v3.6.0

What's Changed

Bumps the all-actions group with 13 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [actions/add-to-project](https://github.com/actions/add-to-project) | `1.0.1` | `1.0.2` |
| [actions/checkout](https://github.com/actions/checkout) | `4.1.3` | `4.2.2` |
| [ruby/setup-ruby](https://github.com/ruby/setup-ruby) | `1.176.0` | `1.213.0` |
| [actions/setup-go](https://github.com/actions/setup-go) | `5.0.1` | `5.3.0` |
| [github/codeql-action](https://github.com/github/codeql-action) | `3.24.11` | `3.28.5` |
| [codespell-project/actions-codespell](https://github.com/codespell-project/actions-codespell) | `2.0` | `2.1` |
| [actions/dependency-review-action](https://github.com/actions/dependency-review-action) | `4.3.2` | `4.5.0` |
| [actions/create-github-app-token](https://github.com/actions/create-github-app-token) | `1.10.0` | `1.11.1` |
| [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) | `3.5.0` | `3.7.0` |
| [ossf/scorecard-action](https://github.com/ossf/scorecard-action) | `2.3.3` | `2.4.0` |
| [actions/cache](https://github.com/actions/cache) | `4.0.2` | `4.2.0` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4.3.3` | `4.6.0` |
| [actions/stale](https://github.com/actions/stale) | `9.0.0` | `9.1.0` |



Updates `actions/add-to-project` from 1.0.1 to 1.0.2
- [Release notes](https://github.com/actions/add-to-project/releases)
- [Commits](actions/add-to-project@9bfe908...244f685)

Updates `actions/checkout` from 4.1.3 to 4.2.2
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v4.1.3...11bd719)

Updates `ruby/setup-ruby` from 1.176.0 to 1.213.0
- [Release notes](https://github.com/ruby/setup-ruby/releases)
- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)
- [Commits](ruby/setup-ruby@cacc9f1...28c4ded)

Updates `actions/setup-go` from 5.0.1 to 5.3.0
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](actions/setup-go@cdcb360...f111f33)

Updates `github/codeql-action` from 3.24.11 to 3.28.5
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@v3.24.11...f6091c0)

Updates `codespell-project/actions-codespell` from 2.0 to 2.1
- [Release notes](https://github.com/codespell-project/actions-codespell/releases)
- [Commits](codespell-project/actions-codespell@94259cd...406322e)

Updates `actions/dependency-review-action` from 4.3.2 to 4.5.0
- [Release notes](https://github.com/actions/dependency-review-action/releases)
- [Commits](actions/dependency-review-action@0c155c5...3b139cf)

Updates `actions/create-github-app-token` from 1.10.0 to 1.11.1
- [Release notes](https://github.com/actions/create-github-app-token/releases)
- [Commits](actions/create-github-app-token@a0de6af...c1a2851)

Updates `sigstore/cosign-installer` from 3.5.0 to 3.7.0
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](sigstore/cosign-installer@59acb62...dc72c7d)

Updates `ossf/scorecard-action` from 2.3.3 to 2.4.0
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](ossf/scorecard-action@dc50aa9...62b2cac)

Updates `actions/cache` from 4.0.2 to 4.2.0
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](actions/cache@0c45773...1bd1e32)

Updates `actions/upload-artifact` from 4.3.3 to 4.6.0
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@6546280...65c4c4a)

Updates `actions/stale` from 9.0.0 to 9.1.0
- [Release notes](https://github.com/actions/stale/releases)
- [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md)
- [Commits](actions/stale@28ca103...5bef64f)

---
updated-dependencies:
- dependency-name: actions/add-to-project
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-actions
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-actions
- dependency-name: ruby/setup-ruby
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-actions
- dependency-name: actions/setup-go
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-actions
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-actions
- dependency-name: codespell-project/actions-codespell
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-actions
- dependency-name: actions/dependency-review-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-actions
- dependency-name: actions/create-github-app-token
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-actions
- dependency-name: sigstore/cosign-installer
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-actions
- dependency-name: ossf/scorecard-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-actions
- dependency-name: actions/cache
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-actions
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-actions
- dependency-name: actions/stale
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jan 26, 2025
@dependabot @github
Copy link
Copy Markdown
Author

dependabot Bot commented on behalf of github Feb 2, 2025

Superseded by #85.

@dependabot dependabot Bot closed this Feb 2, 2025
@dependabot dependabot Bot deleted the dependabot/github_actions/all-actions-a592919818 branch February 2, 2025 16:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants