From bfba0b605fcb5f745b23ba5ab019d6abc892bf2a Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 19 Jun 2024 11:12:47 +0000 Subject: [PATCH] Bump the minor-patch group across 1 directory with 3 updates Bumps the minor-patch group with 3 updates in the / directory: [actions/checkout](https://github.com/actions/checkout), [actions/setup-node](https://github.com/actions/setup-node) and [changesets/action](https://github.com/changesets/action). Updates `actions/checkout` from 4.1.1 to 4.1.7 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/b4ffde65f46336ab88eb53be808477a3936bae11...692973e3d937129bcbf40652eb9f2f61becf3332) Updates `actions/setup-node` from 4.0.0 to 4.0.2 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](https://github.com/actions/setup-node/compare/8f152de45cc393bb48ce5d89d36b731f54556e65...60edb5dd545a775178f52524783378180af0d1f8) Updates `changesets/action` from 1.4.5 to 1.4.7 - [Release notes](https://github.com/changesets/action/releases) - [Changelog](https://github.com/changesets/action/blob/main/CHANGELOG.md) - [Commits](https://github.com/changesets/action/compare/f13b1baaa620fde937751f5d2c3572b9da32af23...aba318e9165b45b7948c60273e0b72fce0a64eb9) --- updated-dependencies: - dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-patch - dependency-name: actions/setup-node dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-patch - dependency-name: changesets/action dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-patch ... Signed-off-by: dependabot[bot] --- .github/workflows/ci.yml | 8 ++++---- .github/workflows/provenance.yml | 2 +- .github/workflows/release.yml | 6 +++--- 3 files changed, 8 insertions(+), 8 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 17c6693..1e07333 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -15,9 +15,9 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout source - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v3 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v3 - name: Setup node - uses: actions/setup-node@8f152de45cc393bb48ce5d89d36b731f54556e65 # v4 + uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4 with: node-version: 18 cache: npm @@ -33,9 +33,9 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout source - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v3 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v3 - name: Setup node - uses: actions/setup-node@8f152de45cc393bb48ce5d89d36b731f54556e65 # v4 + uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4 with: node-version: 18 cache: npm diff --git a/.github/workflows/provenance.yml b/.github/workflows/provenance.yml index 0f73016..bc1347b 100644 --- a/.github/workflows/provenance.yml +++ b/.github/workflows/provenance.yml @@ -12,7 +12,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Setup node - uses: actions/setup-node@8f152de45cc393bb48ce5d89d36b731f54556e65 # v4 + uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4 - name: Generate dummy package run: echo "hello world" > pkg && tar -czvf pkg.tgz pkg - name: Generate provenance statement with package as attestation subject diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 165e719..2d4d45a 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -20,10 +20,10 @@ jobs: id-token: write steps: - name: Checkout source - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v3 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v3 - name: Setup node - uses: actions/setup-node@8f152de45cc393bb48ce5d89d36b731f54556e65 # v4 + uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4 with: node-version: 18.17.0 registry-url: 'https://registry.npmjs.org' @@ -36,7 +36,7 @@ jobs: run: npm ci - name: Create Release Pull Request - uses: changesets/action@f13b1baaa620fde937751f5d2c3572b9da32af23 # v1.4.5 + uses: changesets/action@aba318e9165b45b7948c60273e0b72fce0a64eb9 # v1.4.7 with: publish: npm run release env: