ci(deps): bump the all group across 1 directory with 17 updates #7360
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
Bumps the all group with 17 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `4.1.1` | `4.2.2` | | [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) | `6.1.0` | `7.0.7` | | [thollander/actions-comment-pull-request](https://github.com/thollander/actions-comment-pull-request) | `b07c7f86be67002023e6cb13f57df3f21cdd3411` | `e4a76dd2b0a3c2027c3fd84147a67c22ee4c90fa` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4.6.0` | `4.6.1` | | [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `3.4.0` | `3.10.0` | | [actions/cache](https://github.com/actions/cache) | `4.2.0` | `4.2.2` | | [docker/build-push-action](https://github.com/docker/build-push-action) | `6.4.1` | `6.15.0` | | [actions/setup-python](https://github.com/actions/setup-python) | `4` | `5` | | [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) | `6.1.0` | `6.5.0` | | [securego/gosec](https://github.com/securego/gosec) | `2.20.0` | `2.22.1` | | [github/codeql-action](https://github.com/github/codeql-action) | `2bbafcdd7fbf96243689e764c2f15d9735164f33` | `83923549f688e42b34d0b90ee94725f7c30532fc` | | [checkmarx/kics-github-action](https://github.com/checkmarx/kics-github-action) | `2.1.4` | `2.1.5` | | [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) | `3.1.0` | `3.6.0` | | [docker/metadata-action](https://github.com/docker/metadata-action) | `5.5.1` | `5.7.0` | | [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) | `5.1.0` | `6.2.1` | | [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) | `0.24.0` | `0.29.0` | | [anchore/scan-action](https://github.com/anchore/scan-action) | `4.1.0` | `6.1.0` | Updates `actions/checkout` from 4.1.1 to 4.2.2 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@b4ffde6...11bd719) Updates `peter-evans/create-pull-request` from 6.1.0 to 7.0.7 - [Release notes](https://github.com/peter-evans/create-pull-request/releases) - [Commits](peter-evans/create-pull-request@c5a7806...dd2324f) Updates `thollander/actions-comment-pull-request` from b07c7f86be67002023e6cb13f57df3f21cdd3411 to e4a76dd2b0a3c2027c3fd84147a67c22ee4c90fa - [Release notes](https://github.com/thollander/actions-comment-pull-request/releases) - [Commits](thollander/actions-comment-pull-request@b07c7f8...e4a76dd) Updates `actions/upload-artifact` from 4.6.0 to 4.6.1 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@65c4c4a...4cec3d8) Updates `docker/setup-buildx-action` from 3.4.0 to 3.10.0 - [Release notes](https://github.com/docker/setup-buildx-action/releases) - [Commits](docker/setup-buildx-action@v3.4.0...b5ca514) Updates `actions/cache` from 4.2.0 to 4.2.2 - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](actions/cache@1bd1e32...d4323d4) Updates `docker/build-push-action` from 6.4.1 to 6.15.0 - [Release notes](https://github.com/docker/build-push-action/releases) - [Commits](docker/build-push-action@v6.4.1...471d1dc) Updates `actions/setup-python` from 4 to 5 - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](actions/setup-python@v4...v5) Updates `golangci/golangci-lint-action` from 6.1.0 to 6.5.0 - [Release notes](https://github.com/golangci/golangci-lint-action/releases) - [Commits](golangci/golangci-lint-action@aaa42aa...2226d7c) Updates `securego/gosec` from 2.20.0 to 2.22.1 - [Release notes](https://github.com/securego/gosec/releases) - [Changelog](https://github.com/securego/gosec/blob/master/.goreleaser.yml) - [Commits](securego/gosec@6fbd381...43fee88) Updates `github/codeql-action` from 2bbafcdd7fbf96243689e764c2f15d9735164f33 to 83923549f688e42b34d0b90ee94725f7c30532fc - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@2bbafcd...8392354) Updates `checkmarx/kics-github-action` from 2.1.4 to 2.1.5 - [Release notes](https://github.com/checkmarx/kics-github-action/releases) - [Commits](Checkmarx/kics-github-action@5a6152e...3246fb4) Updates `docker/setup-qemu-action` from 3.1.0 to 3.6.0 - [Release notes](https://github.com/docker/setup-qemu-action/releases) - [Commits](docker/setup-qemu-action@5927c83...2910929) Updates `docker/metadata-action` from 5.5.1 to 5.7.0 - [Release notes](https://github.com/docker/metadata-action/releases) - [Commits](docker/metadata-action@8e5442c...902fa8e) Updates `goreleaser/goreleaser-action` from 5.1.0 to 6.2.1 - [Release notes](https://github.com/goreleaser/goreleaser-action/releases) - [Commits](goreleaser/goreleaser-action@5742e2a...90a3faa) Updates `aquasecurity/trivy-action` from 0.24.0 to 0.29.0 - [Release notes](https://github.com/aquasecurity/trivy-action/releases) - [Commits](aquasecurity/trivy-action@6e7b7d1...18f2510) Updates `anchore/scan-action` from 4.1.0 to 6.1.0 - [Release notes](https://github.com/anchore/scan-action/releases) - [Changelog](https://github.com/anchore/scan-action/blob/main/RELEASE.md) - [Commits](anchore/scan-action@d43cc1d...7c05671) --- updated-dependencies: - dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: peter-evans/create-pull-request dependency-type: direct:production update-type: version-update:semver-major dependency-group: all - dependency-name: thollander/actions-comment-pull-request dependency-type: direct:production dependency-group: all - dependency-name: actions/upload-artifact dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: docker/setup-buildx-action dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: actions/cache dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: docker/build-push-action dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: actions/setup-python dependency-type: direct:production update-type: version-update:semver-major dependency-group: all - dependency-name: golangci/golangci-lint-action dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: securego/gosec dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: github/codeql-action dependency-type: direct:production dependency-group: all - dependency-name: checkmarx/kics-github-action dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: docker/setup-qemu-action dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: docker/metadata-action dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: goreleaser/goreleaser-action dependency-type: direct:production update-type: version-update:semver-major dependency-group: all - dependency-name: aquasecurity/trivy-action dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: anchore/scan-action dependency-type: direct:production update-type: version-update:semver-major dependency-group: all ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
added
dependencies
|
Superseded by #7371. |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the all group with 17 updates in the / directory:
4.1.14.2.26.1.07.0.7b07c7f86be67002023e6cb13f57df3f21cdd3411e4a76dd2b0a3c2027c3fd84147a67c22ee4c90fa4.6.04.6.13.4.03.10.04.2.04.2.26.4.16.15.0456.1.06.5.02.20.02.22.12bbafcdd7fbf96243689e764c2f15d9735164f3383923549f688e42b34d0b90ee94725f7c30532fc2.1.42.1.53.1.03.6.05.5.15.7.05.1.06.2.10.24.00.29.04.1.06.1.0Updates
actions/checkoutfrom 4.1.1 to 4.2.2Release notes
Sourced from actions/checkout's releases.
... (truncated)
Changelog
Sourced from actions/checkout's changelog.
... (truncated)
Commits
11bd719Prepare 4.2.2 Release (#1953)e3d2460Expand unit test coverage (#1946)163217durl-helper.tsnow leverages well-known environment variables. (#1941)eef6144Prepare 4.2.1 release (#1925)6b42224Add workflow file for publishing releases to immutable action package (#1919)de5a000Check out other refs/* by commit if provided, fall back to ref (#1924)d632683Prepare 4.2.0 release (#1878)6d193bfBump braces from 3.0.2 to 3.0.3 (#1777)db0cee9Bump the minor-npm-dependencies group across 1 directory with 4 updates (#1872)b684943Add Ref and Commit outputs (#1180)Updates
peter-evans/create-pull-requestfrom 6.1.0 to 7.0.7Release notes
Sourced from peter-evans/create-pull-request's releases.
... (truncated)
Commits
dd2324ffix: use showFileAtRefBase64 to read per-commit file contents (#3744)367180cci: remove testv5 cmd25575a1build: update distribution (#3736)a56e7a5build(deps): bump@octokit/corefrom 6.1.3 to 6.1.4 (#3711)eac17dcbuild(deps-dev): bump@types/nodefrom 18.19.75 to 18.19.76 (#3712)a2e685fbuild(deps): bump@octokit/plugin-paginate-restfrom 11.4.1 to 11.4.2 (#3713)6cfd146build(deps-dev): bump eslint-import-resolver-typescript (#3710)b38e8d3build(deps-dev): bump prettier from 3.5.0 to 3.5.1 (#3709)8a41570build: update distribution (#3691)2e9b4ccbuild(deps): bump@octokit/endpointfrom 10.1.2 to 10.1.3 (#3700)Updates
thollander/actions-comment-pull-requestfrom b07c7f86be67002023e6cb13f57df3f21cdd3411 to e4a76dd2b0a3c2027c3fd84147a67c22ee4c90faCommits
e4a76ddMerge pull request #411 from thollander/docs/fix-filepathe703e74Merge pull request #408 from thollander/dependabot/npm_and_yarn/types/node-22...460ec66docs: fix filePath in readme24bffb9Merge pull request #410 from thollander/chore/release-3.0.15fd7012chore: release 3.0.1a38b001Merge pull request #409 from thollander/fix/wrong-var-renaminga11fbfefix: some wrong variables renamingddf65fcchore(deps-dev): bump@types/nodefrom 22.7.5 to 22.8.6cb13519Merge pull request #300 from thollander/dependabot/npm_and_yarn/actions/githu...38af97bchore(deps): bump@actions/githubfrom 5.1.1 to 6.0.0Updates
actions/upload-artifactfrom 4.6.0 to 4.6.1Release notes
Sourced from actions/upload-artifact's releases.
Commits
4cec3d8Merge pull request #673 from actions/yacaovsnc/artifact_2.2.2e9fad96license cache update for artifactb26fd06Update to use artifact 2.2.2 packageUpdates
docker/setup-buildx-actionfrom 3.4.0 to 3.10.0Release notes
Sourced from docker/setup-buildx-action's releases.
Commits
b5ca514Merge pull request #408 from docker/dependabot/npm_and_yarn/docker/actions-to...1418a4echore: update generated content93acf83build(deps): bump@docker/actions-toolkitfrom 0.54.0 to 0.56.0f7ce87cMerge pull request #404 from docker/dependabot/npm_and_yarn/docker/actions-to...aa1e2a0chore: update generated content673e008build(deps): bump@docker/actions-toolkitfrom 0.53.0 to 0.54.0ba31df4Merge pull request #402 from docker/dependabot/npm_and_yarn/docker/actions-to...5475af1chore: update generated contentacacad9build(deps): bump@docker/actions-toolkitfrom 0.48.0 to 0.53.06a25f98Merge pull request #396 from crazy-max/bake-v6Updates
actions/cachefrom 4.2.0 to 4.2.2Release notes
Sourced from actions/cache's releases.
Changelog
Sourced from actions/cache's changelog.
... (truncated)
Commits
d4323d4Merge pull request #1560 from actions/robherley/v4.2.2da26677bump@actions/cacheto v4.0.2, prep for v4.2.2 release7921ae2Merge pull request #1557 from actions/robherley/ia-workflow-released3937731Update publish-immutable-actions.yml0c907a7Merge pull request #1554 from actions/robherley/v4.2.1710893cbump@actions/cacheto v4.0.19fa7e61Update force deletion docs due a recent deprecation (#1500)36f1e14docs: Make the "always save prime numbers" example more clear (#1525)53aa38cCorrect GitHub Spelling in caching-strategies.md (#1526)Updates
docker/build-push-actionfrom 6.4.1 to 6.15.0Release notes
Sourced from docker/build-push-action's releases.
... (truncated)
Commits
471d1dcMerge pull request #1330 from docker/dependabot/npm_and_yarn/docker/actions-t...b89ff0achore: update generated content1e3ae3achore(deps): Bump@docker/actions-toolkitfrom 0.55.0 to 0.56.0b16f42fMerge pull request #1325 from crazy-max/buildx-edgedc0fea5ci: update buildx to edge and buildkit to latest0adf995Merge pull request #1324 from docker/dependabot/npm_and_yarn/docker/actions-t...d88cd28chore: update generated content3d09a6bchore(deps): Bump@docker/actions-toolkitfrom 0.53.0 to 0.55.0ca877d9Merge pull request #1308 from docker/dependabot/npm_and_yarn/docker/actions-t...d2fe919chore: update generated contentUpdates
actions/setup-pythonfrom 4 to 5Release notes
Sourced from actions/setup-python's releases.
... (truncated)
Commits
4237552Improve Advanced Usage examples (#645)709bfa5Bump requests from 2.24.0 to 2.32.2 in /tests/data (#1019)ceb20b2Bump@actions/http-clientfrom 2.2.1 to 2.2.3 (#1020)0dc2d2cBump actions/publish-immutable-action from 0.0.3 to 0.0.4 (#1014)feb9c6eBump urllib3 from 1.25.9 to 1.26.19 in /tests/data (#895)d0b4fc4Bump undici from 5.28.4 to 5.28.5 (#1012)e3dfaacConfigure Dependabot settings (#1008)b8cf3ebUse the new cache service: upgrade@actions/cacheto^4.0.0(#1007)1928ae6Update README.md (#1009)3fddbeeEnhance Workflows: Add Ubuntu-24, Remove Python 3.8 (#985)Updates
golangci/golangci-lint-actionfrom 6.1.0 to 6.5.0Release notes
Sourced from golangci/golangci-lint-action's releases.