Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Bump the github-actions group with 10 updates #3343

Merged
merged 1 commit into from
Jan 22, 2025
Merged

Bump the github-actions group with 10 updates #3343

merged 1 commit into from
Jan 22, 2025

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 22, 2025

Bumps the github-actions group with 10 updates:

Package From To
actions/checkout 4.1.7 4.2.2
gaurav-nelson/github-action-markdown-link-check 1.0.15 1.0.16
github/codeql-action 3.26.6 3.28.2
anchore/scan-action 4.1.2 6.0.0
docker/setup-qemu-action 3.2.0 3.3.0
peter-evans/create-issue-from-file 5.0.0 5.0.1
sonarsource/sonarcloud-github-action 3.0.0 4.0.0
actions/stale 3f3b0175e8c66fb49b9a6d5a0cd1f8436d4c3ab6 5bef64f19d7facfb25b37b414482c7164d639639
actions/setup-go 5.0.2 5.3.0
actions/upload-artifact 4.4.0 4.6.0

Updates actions/checkout from 4.1.7 to 4.2.2

Release notes

Sourced from actions/checkout's releases.

v4.2.2

What's Changed

Full Changelog: actions/checkout@v4.2.1...v4.2.2

v4.2.1

What's Changed

New Contributors

Full Changelog: actions/checkout@v4.2.0...v4.2.1

v4.2.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v4.1.7...v4.2.0

Changelog

Sourced from actions/checkout's changelog.

Changelog

v4.2.2

v4.2.1

v4.2.0

v4.1.7

v4.1.6

v4.1.5

v4.1.4

v4.1.3

v4.1.2

v4.1.1

v4.1.0

... (truncated)

Commits

Updates gaurav-nelson/github-action-markdown-link-check from 1.0.15 to 1.0.16

Release notes

Sourced from gaurav-nelson/github-action-markdown-link-check's releases.

1.0.16

What's Changed

New Contributors

Full Changelog: gaurav-nelson/github-action-markdown-link-check@1.0.15...1.0.16

Commits
  • 1b916f2 Bump markdown-link-check and node image
  • 7d83e59 Update README.md
  • 25b2c43 Merge pull request #149 from gaurav-nelson/step-output
  • c541b5c Added results as output parameters
  • 0f074c8 maintenance-only README.md
  • a996638 Update README.md
  • 46e4421 Merge pull request #189 from gaurav-nelson/snyk-fix-28c2a22fe65aa69306d3041d1...
  • 1c7e3fe fix: Dockerfile to reduce vulnerabilities
  • 322b231 Merge pull request #184 from gaurav-nelson/fix-158
  • 5525016 Respect folder patch when modified only is used
  • Additional commits viewable in compare view

Updates github/codeql-action from 3.26.6 to 3.28.2

Release notes

Sourced from github/codeql-action's releases.

v3.28.2

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.2 - 21 Jan 2025

No user facing changes.

See the full CHANGELOG.md for more information.

v3.28.1

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.1 - 10 Jan 2025

  • CodeQL Action v2 is now deprecated, and is no longer updated or supported. For better performance, improved security, and new features, upgrade to v3. For more information, see this changelog post. #2677
  • Update default CodeQL bundle version to 2.20.1. #2678

See the full CHANGELOG.md for more information.

v3.28.0

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.28.0 - 20 Dec 2024

  • Bump the minimum CodeQL bundle version to 2.15.5. #2655
  • Don't fail in the unusual case that a file is on the search path. #2660.

See the full CHANGELOG.md for more information.

v3.27.9

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.27.9 - 12 Dec 2024

No user facing changes.

See the full CHANGELOG.md for more information.

... (truncated)

Changelog

Sourced from github/codeql-action's changelog.

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

[UNRELEASED]

  • Update default CodeQL bundle version to 2.20.2. #2707
  • Fix an issue downloading the CodeQL Bundle from a GitHub Enterprise Server instance which occurred when the CodeQL Bundle had been synced to the instance using the CodeQL Action sync tool and the Actions runner did not have Zstandard installed. #2710

3.28.2 - 21 Jan 2025

No user facing changes.

3.28.1 - 10 Jan 2025

  • CodeQL Action v2 is now deprecated, and is no longer updated or supported. For better performance, improved security, and new features, upgrade to v3. For more information, see this changelog post. #2677
  • Update default CodeQL bundle version to 2.20.1. #2678

3.28.0 - 20 Dec 2024

  • Bump the minimum CodeQL bundle version to 2.15.5. #2655
  • Don't fail in the unusual case that a file is on the search path. #2660.

3.27.9 - 12 Dec 2024

No user facing changes.

3.27.8 - 12 Dec 2024

  • Fixed an issue where streaming the download and extraction of the CodeQL bundle did not respect proxy settings. #2624

3.27.7 - 10 Dec 2024

  • We are rolling out a change in December 2024 that will extract the CodeQL bundle directly to the toolcache to improve performance. #2631
  • Update default CodeQL bundle version to 2.20.0. #2636

3.27.6 - 03 Dec 2024

  • Update default CodeQL bundle version to 2.19.4. #2626

3.27.5 - 19 Nov 2024

No user facing changes.

3.27.4 - 14 Nov 2024

No user facing changes.

3.27.3 - 12 Nov 2024

... (truncated)

Commits
  • d68b2d4 Merge pull request #2708 from github/update-v3.28.2-d90e07f32
  • ea23796 Update changelog for v3.28.2
  • d90e07f Merge pull request #2703 from github/dependabot/npm_and_yarn/npm-cd3f77644b
  • 7b7562b Update checked-in dependencies
  • c168638 build(deps): bump the npm group with 3 updates
  • 0f1559a Merge pull request #2699 from github/cklin/diff-informed-file-fallback
  • 2d608a3 Merge branch 'main' into cklin/diff-informed-file-fallback
  • 94f08f3 Merge pull request #2698 from github/cklin/diff-informed-status-report
  • 071996f getDiffRanges: better fallback for absent patch
  • 5889cfd Add analysis_is_diff_informed to status report
  • Additional commits viewable in compare view

Updates anchore/scan-action from 4.1.2 to 6.0.0

Release notes

Sourced from anchore/scan-action's releases.

v6.0.0

New in scan-action v6.0.0

Breaking Change

  • feat: add output-file option, default to random directory output in temp (#346) [kzantow]

The action no longer generates files in your working directory by default, instead you should use the action outputs: ${{ steps.<id>.outputs.sarif }} where the <id> needs to match the id you configured to reference the scan-action, e.g.:

      - uses: anchore/scan-action@v6
        id: scan
        ...
      - uses: github/codeql-action/upload-sarif@v3
        with:
          sarif_file: ${{ steps.scan.outputs.sarif }}

Other Changes

v5.3.0

New in scan-action v5.3.0

v5.2.1

New in scan-action v5.2.1

v5.2.0

New in scan-action v5.2.0

v5.1.0

New in scan-action v5.1.0

... (truncated)

Commits
  • abae793 chore(deps): update Grype to v0.86.1 (#416)
  • f02232c chore: exclude dev-deps from release drafter (#415)
  • 763018a feat: add support for cyclonedx and cyclonedx-json output-formats (#396)
  • e374579 chore(deps-dev): bump lint-staged from 15.2.10 to 15.2.11 (#414)
  • e90bc67 chore(deps): bump @​actions/cache from 3.3.0 to 4.0.0 (#412)
  • 028cd8f feat: add output-file option, default to random directory output in temp (#346)
  • 6e00665 chore(deps): update Grype to v0.86.0 (#413)
  • 15fee38 chore(deps-dev): bump eslint from 9.15.0 to 9.16.0 (#410)
  • c4c24ec chore(deps-dev): bump prettier from 3.3.3 to 3.4.2 (#411)
  • 869c549 chore(deps): update Grype to v0.85.0 (#408)
  • Additional commits viewable in compare view

Updates docker/setup-qemu-action from 3.2.0 to 3.3.0

Release notes

Sourced from docker/setup-qemu-action's releases.

v3.3.0

Full Changelog: docker/setup-qemu-action@v3.2.0...v3.3.0

Commits
  • 53851d1 Merge pull request #187 from docker/dependabot/npm_and_yarn/docker/actions-to...
  • 7066b90 chore: update generated content
  • 7559081 build(deps): bump @​docker/actions-toolkit from 0.35.0 to 0.49.0
  • 08d11eb Merge pull request #172 from docker/dependabot/npm_and_yarn/actions/core-1.11.1
  • e53506f chore: update generated content
  • 610b442 build(deps): bump @​actions/core from 1.10.1 to 1.11.1
  • 58a19f8 Merge pull request #182 from docker/dependabot/npm_and_yarn/cross-spawn-7.0.6
  • 49a12c4 Merge pull request #180 from docker/dependabot/github_actions/codecov/codecov...
  • 2b8ac83 ci: fix deprecated input for codecov-action
  • fdbeaac Merge pull request #130 from crazy-max/cache-image
  • Additional commits viewable in compare view

Updates peter-evans/create-issue-from-file from 5.0.0 to 5.0.1

Release notes

Sourced from peter-evans/create-issue-from-file's releases.

Create Issue From File v5.0.1

✨ The action will now truncate the issue body when it exceeds the max size permitted by GitHub's API

What's Changed

New Contributors

Full Changelog: peter-evans/create-issue-from-file@v5.0.0...v5.0.1

Commits

Updates sonarsource/sonarcloud-github-action from 3.0.0 to 4.0.0

Release notes

Sourced from sonarsource/sonarcloud-github-action's releases.

v4.0.0

⚠️ DEPRECATION WARNING ⚠️

This new version of the GitHub action for SonarQube Cloud is going to be the last one specifically designed for SonarQube Cloud.

Since v4.1.0, the former GitHub action for SonarQube Server (sonarqube-scan-action) is the entrypoint for both Server and Cloud: a single GitHub action to interact with the SonarQube solution, whether on premise or in the cloud!

You can read more about the unified action here.

What's Changed

New Contributors

Full Changelog: SonarSource/sonarcloud-github-action@v3...v4.0.0

v3.1.0

What's Changed

Full Changelog: SonarSource/sonarcloud-github-action@v3...v3.1.0

Commits
  • 02ef911 Shorten description and remove mend docker check
  • 4afec88 SCSCANGHA-28 Rebranding
  • 48d9e10 SCSCANGHA-25 Replace the Docker action by a composite action forwarding to th...
  • 982992a Add Jira integration
  • 9f9bba2 Recommend to not use this action for analysis of Dart code
  • 383f7e5 SCSCANGHA-24 Update the Docker base image to the latest minor 11.1
  • 2900b02 BUILD-6088 Fix bad link in SECURITY.md file
  • See full diff in compare view

Updates actions/stale from 3f3b0175e8c66fb49b9a6d5a0cd1f8436d4c3ab6 to 5bef64f19d7facfb25b37b414482c7164d639639

Changelog

Sourced from actions/stale's changelog.

Changelog

[7.0.0]

⚠️ Breaking change ⚠️

[6.0.1]

Update @​actions/core to v1.10.0 (#839)

[6.0.0]

⚠️ Breaking change ⚠️

Issues/PRs default close-issue-reason is now not_planned(#789)

[5.1.0]

Don't process stale issues right after they're marked stale [Add close-issue-reason option]#764#772 Various dependabot/dependency updates

4.1.0 (2021-07-14)

Features

4.0.0 (2021-07-14)

Features

Bug Fixes

  • dry-run: forbid mutations in dry-run (#500) (f1017f3), closes #499
  • logs: coloured logs (#465) (5fbbfba)
  • operations: fail fast the current batch to respect the operations limit (#474) (5f6f311), closes #466
  • label comparison: make label comparison case insensitive #517, closes #516
  • filtering comments by actor could have strange behavior: "stale" comments are now detected based on if the message is the stale message not who made the comment(#519), fixes #441, #509, #518

Breaking Changes

... (truncated)

Commits
  • 5bef64f build(deps): bump @​actions/cache from 3.2.2 to 4.0.0 (#1194)
  • fa77dfd build(deps-dev): bump @​types/jest from 29.5.11 to 29.5.14 (#1193)
  • f04443d build(deps): bump @​actions/core from 1.10.1 to 1.11.1 (#1191)
  • 5c715b0 build(deps-dev): bump ts-jest from 29.1.1 to 29.2.5 (#1175)
  • f691222 build(deps): bump actions/publish-action from 0.2.2 to 0.3.0 (#1147)
  • df990c2 build(deps): bump actions/checkout from 3 to 4 (#1091)
  • 6e472ce Merge pull request #1179 from actions/Jcambass-patch-1
  • d10ba64 Merge pull request #1150 from actions/dependabot/npm_and_yarn/undici-5.28.4
  • bbf3da5 resolve check failures
  • 6a2e61d Add workflow file for publishing releases to immutable action package
  • Additional commits viewable in compare view

Updates actions/setup-go from 5.0.2 to 5.3.0

Release notes

Sourced from actions/setup-...

Description has been truncated

@dependabot
Bump the github-actions group with 10 updates
ca1cbaa 
Bumps the github-actions group with 10 updates:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `4.1.7` | `4.2.2` |
| [gaurav-nelson/github-action-markdown-link-check](https://github.com/gaurav-nelson/github-action-markdown-link-check) | `1.0.15` | `1.0.16` |
| [github/codeql-action](https://github.com/github/codeql-action) | `3.26.6` | `3.28.2` |
| [anchore/scan-action](https://github.com/anchore/scan-action) | `4.1.2` | `6.0.0` |
| [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) | `3.2.0` | `3.3.0` |
| [peter-evans/create-issue-from-file](https://github.com/peter-evans/create-issue-from-file) | `5.0.0` | `5.0.1` |
| [sonarsource/sonarcloud-github-action](https://github.com/sonarsource/sonarcloud-github-action) | `3.0.0` | `4.0.0` |
| [actions/stale](https://github.com/actions/stale) | `3f3b0175e8c66fb49b9a6d5a0cd1f8436d4c3ab6` | `5bef64f19d7facfb25b37b414482c7164d639639` |
| [actions/setup-go](https://github.com/actions/setup-go) | `5.0.2` | `5.3.0` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4.4.0` | `4.6.0` |


Updates `actions/checkout` from 4.1.7 to 4.2.2
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@692973e...11bd719)

Updates `gaurav-nelson/github-action-markdown-link-check` from 1.0.15 to 1.0.16
- [Release notes](https://github.com/gaurav-nelson/github-action-markdown-link-check/releases)
- [Commits](gaurav-nelson/github-action-markdown-link-check@d53a906...1b916f2)

Updates `github/codeql-action` from 3.26.6 to 3.28.2
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@4dd1613...d68b2d4)

Updates `anchore/scan-action` from 4.1.2 to 6.0.0
- [Release notes](https://github.com/anchore/scan-action/releases)
- [Changelog](https://github.com/anchore/scan-action/blob/main/RELEASE.md)
- [Commits](anchore/scan-action@64a33b2...abae793)

Updates `docker/setup-qemu-action` from 3.2.0 to 3.3.0
- [Release notes](https://github.com/docker/setup-qemu-action/releases)
- [Commits](docker/setup-qemu-action@49b3bc8...53851d1)

Updates `peter-evans/create-issue-from-file` from 5.0.0 to 5.0.1
- [Release notes](https://github.com/peter-evans/create-issue-from-file/releases)
- [Commits](peter-evans/create-issue-from-file@24452a7...e8ef132)

Updates `sonarsource/sonarcloud-github-action` from 3.0.0 to 4.0.0
- [Release notes](https://github.com/sonarsource/sonarcloud-github-action/releases)
- [Commits](SonarSource/sonarcloud-github-action@eb21172...02ef911)

Updates `actions/stale` from 3f3b0175e8c66fb49b9a6d5a0cd1f8436d4c3ab6 to 5bef64f19d7facfb25b37b414482c7164d639639
- [Release notes](https://github.com/actions/stale/releases)
- [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md)
- [Commits](actions/stale@3f3b017...5bef64f)

Updates `actions/setup-go` from 5.0.2 to 5.3.0
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](actions/setup-go@0a12ed9...f111f33)

Updates `actions/upload-artifact` from 4.4.0 to 4.6.0
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@5076954...65c4c4a)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: gaurav-nelson/github-action-markdown-link-check
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: anchore/scan-action
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: docker/setup-qemu-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: peter-evans/create-issue-from-file
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: sonarsource/sonarcloud-github-action
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/stale
  dependency-type: direct:production
  dependency-group: github-actions
- dependency-name: actions/setup-go
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Jan 22, 2025
@dependabot dependabot bot requested a review from vthapar as a code owner January 22, 2025 16:16
@dependabot dependabot bot added the github_actions Pull requests that update GitHub Actions code label Jan 22, 2025
@tpantelis tpantelis enabled auto-merge (rebase) January 22, 2025 16:25
@submariner-bot submariner-bot added the ready-to-test When a PR is ready for full E2E testing label Jan 22, 2025
@tpantelis tpantelis merged commit 7f98e68 into release-0.19 Jan 22, 2025
50 checks passed
@dependabot dependabot bot deleted the dependabot/github_actions/release-0.19/github-actions-db4165d06a branch January 22, 2025 16:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@tpantelis tpantelis tpantelis approved these changes

@skitt skitt skitt approved these changes

@mkolesnik mkolesnik Awaiting requested review from mkolesnik mkolesnik is a code owner

@Oats87 Oats87 Awaiting requested review from Oats87 Oats87 is a code owner

@sridhargaddam sridhargaddam Awaiting requested review from sridhargaddam sridhargaddam is a code owner

@vthapar vthapar Awaiting requested review from vthapar vthapar is a code owner

Assignees
No one assigned
Labels
dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code ready-to-test When a PR is ready for full E2E testing
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
3 participants
@skitt @tpantelis @submariner-bot