Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): bump the github-actions group with 6 updates #4

Closed

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github May 3, 2024

Bumps the github-actions group with 6 updates:

Package From To
actions/checkout 3 4
actions/setup-go 3 5
goreleaser/goreleaser-action 3.0.0 5.0.0
dominikh/staticcheck-action 1.0.0 1.3.1
hashicorp/setup-terraform 2 3
actions/add-to-project 0.5.0 1.0.1

Updates actions/checkout from 3 to 4

Release notes

Sourced from actions/checkout's releases.

v4.0.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v3...v4.0.0

v3.6.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v3.5.3...v3.6.0

v3.5.3

What's Changed

New Contributors

Full Changelog: actions/checkout@v3...v3.5.3

v3.5.2

What's Changed

Full Changelog: actions/checkout@v3.5.1...v3.5.2

v3.5.1

What's Changed

New Contributors

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

v4.1.4

v4.1.3

v4.1.2

v4.1.1

v4.1.0

v4.0.0

v3.6.0

v3.5.3

v3.5.2

v3.5.1

v3.5.0

v3.4.0

... (truncated)

Commits

Updates actions/setup-go from 3 to 5

Release notes

Sourced from actions/setup-go's releases.

v5.0.0

What's Changed

In scope of this release, we change Nodejs runtime from node16 to node20 (actions/setup-go#421). Moreover, we update some dependencies to the latest versions (actions/setup-go#445).

Besides, this release contains such changes as:

New Contributors

Full Changelog: actions/setup-go@v4...v5.0.0

v4.1.0

What's Changed

In scope of this release, slow installation on Windows was fixed by @​dsame in actions/setup-go#393 and OS version was added to primaryKey for Ubuntu runners to avoid conflicts (actions/setup-go#383)

This release also includes the following changes:

New Contributors

Full Changelog: actions/setup-go@v4...v4.1.0

v4.0.1

What's Changed

New Contributors

Full Changelog: actions/setup-go@v4...v4.0.1

v4.0.0

In scope of release we enable cache by default. The action won’t throw an error if the cache can’t be restored or saved. The action will throw a warning message but it won’t stop a build process. The cache can be disabled by specifying cache: false.

</tr></table> 

... (truncated)

Commits

Updates goreleaser/goreleaser-action from 3.0.0 to 5.0.0

Release notes

Sourced from goreleaser/goreleaser-action's releases.

v5.0.0

What's Changed

Full Changelog: goreleaser/goreleaser-action@v4.6.0...v5.0.0

v4.6.0

Reverts the change to node20 runtime.

Full Changelog: goreleaser/goreleaser-action@v4.5.0...v4.6.0

v4.5.0

What's Changed

New Contributors

Full Changelog: goreleaser/goreleaser-action@v4.4.0...v4.5.0

v4.4.0

What's Changed

Full Changelog: goreleaser/goreleaser-action@v4.3.0...v4.4.0

v4.3.0

What's Changed

New Contributors

Full Changelog: goreleaser/goreleaser-action@v4.2.0...v4.3.0

... (truncated)

Commits
  • 7ec5c2b chore(deps): bump @​actions/core from 1.10.0 to 1.10.1 (#434)
  • 3529a65 chore: node 20 as default runtime (#432)
  • d2f6e33 chore(deps): bump crazy-max/ghaction-import-gpg from 5 to 6 (#433)
  • 5fdedb9 revert: node20 change
  • 81d9ad7 feat: bump to use node20 runtime, actions/checkout to v4 (#430)
  • a10d0e3 chore(deps): bump word-wrap from 1.2.3 to 1.2.5 (#427)
  • 3fa32b8 feat(deps): update semver, @​actions/http-client
  • c7c9447 feat: support oss nightlies (#424)
  • 920a7cb chore(deps): bump semver from 7.5.0 to 7.5.1 (#417)
  • 336e299 feat: support nightly (#419)
  • Additional commits viewable in compare view

Updates dominikh/staticcheck-action from 1.0.0 to 1.3.1

Release notes

Sourced from dominikh/staticcheck-action's releases.

v1.3.1

No release notes provided.

v1.3.0

Version 1.3.0

v1.2.0

No release notes provided.

v1.1.0

No release notes provided.

Changelog

Sourced from dominikh/staticcheck-action's changelog.

1.3.1

  • Update README to be clearer
  • Update README to provide timeless examples
  • Update setup-go-faster dependency from v1.8.0 to v1.14.0
  • Update actions/cache dependency from v3 to v4
  • Update installed Go version from 1.19.x to "stable"

1.3.0

  • Add the output-format option
  • Add the output-file option
  • Add the merge-files option
  • Update action/cache dependency from v2 to v3
  • Update setup-go-faster dependency from v1.7.0 to v1.8.0
  • Update installed Go version from 1.17.x to 1.19.x

1.2.0

  • Add the checks option
  • Add the working-directory option

1.1.0

  • The action will store and restore Go's cache if install-go is set to true.
Commits
  • fe1dd0c Update changelog
  • 64a2c8e README: don't mention the Go version required for the action
  • b13f990 Update dependency on actions/cache
  • 980d787 README: improve documentation of min-go-version
  • ab775bd Change install-go to always install the latest release of Go
  • b452709 Update dependency on setup-go-faster
  • a380d20 README: don't depend on specific versions of Staticcheck or the action
  • ba60535 Fix formatting of changelog
  • 97b4433 Update versions used in examples
  • 51e00fb Add changelog
  • Additional commits viewable in compare view

Updates hashicorp/setup-terraform from 2 to 3

Release notes

Sourced from hashicorp/setup-terraform's releases.

v3.0.0

NOTES:

  • Updated default runtime to node20 (#346)
  • The wrapper around the installed Terraform binary has been fixed to return the exact STDOUT and STDERR from Terraform when executing commands. Previous versions of setup-terraform may have required workarounds to process the STDOUT in bash, such as filtering out the first line or selectively parsing STDOUT with jq. These workarounds may need to be adjusted with v3.0.0, which will now return just the STDOUT/STDERR from Terraform with no errant characters/statements. (#367)

BUG FIXES:

  • Fixed malformed stdout when wrapper is enabled (#367)

v2.0.3

What's Changed

NOTES

Full Changelog: hashicorp/setup-terraform@v2.0.2...v2.0.3

v2.0.2

What's Changed

NOTES

INTERNAL

Full Changelog: hashicorp/setup-terraform@v2.0.1...v2.0.2

v2.0.1

What's Changed

ENHANCEMENTS

BUG FIXES

INTERNAL

... (truncated)

Changelog

Sourced from hashicorp/setup-terraform's changelog.

3.1.0 (2024-04-23)

ENHANCEMENTS:

  • Automatically fallback to darwin/amd64 for Terraform versions before 1.0.2 as releases for darwin/arm64 are not available (#409)

3.0.0 (2023-10-30)

NOTES:

  • Updated default runtime to node20 (#346)
  • The wrapper around the installed Terraform binary has been fixed to return the exact STDOUT and STDERR from Terraform when executing commands. Previous versions of setup-terraform may have required workarounds to process the STDOUT in bash, such as filtering out the first line or selectively parsing STDOUT with jq. These workarounds may need to be adjusted with v3.0.0, which will now return just the STDOUT/STDERR from Terraform with no errant characters/statements. (#367)

BUG FIXES:

  • Fixed malformed stdout when wrapper is enabled (#367)

[2.0.3] (2022-11-01)

NOTES

  • Reduced occurrences of GitHub Actions warnings for setting output #247

[2.0.2] (2022-10-12)

BUG FIXES

INTERNAL

[2.0.1] (2022-10-12)

ENHANCEMENTS

BUG FIXES

INTERNAL

... (truncated)

Commits
  • 97f030c Update package version
  • c9227a4 Update changelog
  • 22013f7 Automatically fallback to darwin/amd64 for Terraform versions before 1.0.2 (#...
  • a75f1a3 Bump nock from 13.5.3 to 13.5.4 (#400)
  • b033326 Bump nock from 13.5.1 to 13.5.3 (#399)
  • 0051b26 Result of tsccr-helper -log-level=info gha update -latest . (#398)
  • e45327d Bump undici from 5.26.4 to 5.28.3 (#397)
  • 2417443 Remove husky tool + fix lint error (#394)
  • e12a014 Remove precommit and update dependabot (#393)
  • 521e785 Bump nock from 13.5.0 to 13.5.1 (#392)
  • Additional commits viewable in compare view

Updates actions/add-to-project from 0.5.0 to 1.0.1

Release notes

Sourced from actions/add-to-project's releases.

v1.0.1

Summary

This release includes dependency updates, including security fix to undici.

What's Changed

Full Changelog: actions/add-to-project@v1.0.0...v1.0.1

v1.0.0

Summary

This release promotes actions/add-to-projects to a major version 1 and marks the public API stable.

What's Changed

Full Changelog: actions/add-to-project@v0.6.1...v1.0.0

v0.6.1

What's Changed

... (truncated)

Commits
  • 9bfe908 Merge pull request #542 from actions/dependabot/npm_and_yarn/undici-5.28.4
  • aa4be74 Merge branch 'main' into dependabot/npm_and_yarn/undici-5.28.4
  • 2fbfb36 Merge pull request #548 from actions/dependabot/npm_and_yarn/types/node-16.18.96
  • 5bc7439 Merge pull request #549 from actions/dependabot/npm_and_yarn/typescript-5.4.5
  • 19e0b72 build(deps-dev): bump @​types/node from 16.18.91 to 16.18.96
  • 98a7c08 build(deps-dev): bump typescript from 5.4.3 to 5.4.5
  • 00c590e Merge pull request #547 from actions/dependabot/npm_and_yarn/typescript-eslin...
  • 52491a9 build(deps-dev): bump @​typescript-eslint/eslint-plugin
  • 4f1a839 Merge pull request #546 from actions/dependabot/npm_and_yarn/typescript-eslin...
  • 8c9ffb2 Merge pull request #550 from actions/dependabot/npm_and_yarn/undici-5.28.4-fixes
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the github-actions group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `3` | `4` |
| [actions/setup-go](https://github.com/actions/setup-go) | `3` | `5` |
| [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) | `3.0.0` | `5.0.0` |
| [dominikh/staticcheck-action](https://github.com/dominikh/staticcheck-action) | `1.0.0` | `1.3.1` |
| [hashicorp/setup-terraform](https://github.com/hashicorp/setup-terraform) | `2` | `3` |
| [actions/add-to-project](https://github.com/actions/add-to-project) | `0.5.0` | `1.0.1` |


Updates `actions/checkout` from 3 to 4
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v3...v4)

Updates `actions/setup-go` from 3 to 5
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](actions/setup-go@v3...v5)

Updates `goreleaser/goreleaser-action` from 3.0.0 to 5.0.0
- [Release notes](https://github.com/goreleaser/goreleaser-action/releases)
- [Commits](goreleaser/goreleaser-action@v3.0.0...v5.0.0)

Updates `dominikh/staticcheck-action` from 1.0.0 to 1.3.1
- [Release notes](https://github.com/dominikh/staticcheck-action/releases)
- [Changelog](https://github.com/dominikh/staticcheck-action/blob/master/CHANGES.md)
- [Commits](dominikh/staticcheck-action@v1.0.0...v1.3.1)

Updates `hashicorp/setup-terraform` from 2 to 3
- [Release notes](https://github.com/hashicorp/setup-terraform/releases)
- [Changelog](https://github.com/hashicorp/setup-terraform/blob/main/CHANGELOG.md)
- [Commits](hashicorp/setup-terraform@v2...v3)

Updates `actions/add-to-project` from 0.5.0 to 1.0.1
- [Release notes](https://github.com/actions/add-to-project/releases)
- [Commits](actions/add-to-project@v0.5.0...v1.0.1)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/setup-go
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: goreleaser/goreleaser-action
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: dominikh/staticcheck-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: hashicorp/setup-terraform
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/add-to-project
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot requested a review from a team as a code owner May 3, 2024 14:58
@dependabot dependabot bot requested a review from demeyerthom May 3, 2024 14:58
@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels May 3, 2024
Copy link

changeset-bot bot commented May 3, 2024

⚠️ No Changeset found

Latest commit: ee89294

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

Copy link
Contributor Author

dependabot bot commented on behalf of github May 7, 2024

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this May 7, 2024
@dependabot dependabot bot deleted the dependabot/github_actions/github-actions-976ecb7a7e branch May 7, 2024 13:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants