Skip to content
This repository has been archived by the owner on Nov 22, 2024. It is now read-only.

chore(deps): bump the github-actions group with 5 updates #105

Merged

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 24, 2024

Bumps the github-actions group with 5 updates:

Package From To
actions/checkout 3 4
golangci/golangci-lint-action 3 6
hashicorp/setup-terraform 2 3
crazy-max/ghaction-import-gpg 5 6
goreleaser/goreleaser-action 3.1.0 6.0.0

Updates actions/checkout from 3 to 4

Release notes

Sourced from actions/checkout's releases.

v4.0.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v3...v4.0.0

v3.6.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v3.5.3...v3.6.0

v3.5.3

What's Changed

New Contributors

Full Changelog: actions/checkout@v3...v3.5.3

v3.5.2

What's Changed

Full Changelog: actions/checkout@v3.5.1...v3.5.2

v3.5.1

What's Changed

New Contributors

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

v4.1.7

v4.1.6

v4.1.5

v4.1.4

v4.1.3

v4.1.2

v4.1.1

v4.1.0

v4.0.0

v3.6.0

v3.5.3

... (truncated)

Commits

Updates golangci/golangci-lint-action from 3 to 6

Release notes

Sourced from golangci/golangci-lint-action's releases.

v6.0.0

What's Changed

This version removes annotations option (because it was useless), and removes the default output format (github-actions). The annotations are still produced but with another approach.

Changes

Dependencies

Full Changelog: golangci/golangci-lint-action@v5.3.0...v6.0.0

v5.3.0

What's Changed

Changes

Full Changelog: golangci/golangci-lint-action@v5.2.0...v5.3.0

v5.2.0

What's Changed

Changes

Full Changelog: golangci/golangci-lint-action@v5.1.0...v5.2.0

v5.1.0

What's Changed

Changes

Dependencies

... (truncated)

Commits
  • aaa42aa feat: allow to skip golangci-lint installation (#1079)
  • 9ec8973 build(deps): bump @​types/node from 20.14.11 to 22.0.0 in the dependencies gro...
  • 58838cf build(deps-dev): bump the dev-dependencies group with 3 updates (#1077)
  • 9f3ba2c build(deps): bump @​types/node from 20.14.10 to 20.14.11 in the dependencies g...
  • 2bd7a04 build(deps-dev): bump the dev-dependencies group with 3 updates (#1074)
  • db819a1 build(deps-dev): bump the dev-dependencies group with 3 updates (#1073)
  • d09fb08 build(deps): bump @​types/node from 20.14.9 to 20.14.10 in the dependencies gr...
  • 605617a build(deps-dev): bump the dev-dependencies group with 4 updates (#1071)
  • 66f63c7 chore: generate
  • 2c01d26 fix: home dir on Windows
  • Additional commits viewable in compare view

Updates hashicorp/setup-terraform from 2 to 3

Release notes

Sourced from hashicorp/setup-terraform's releases.

v3.0.0

NOTES:

  • Updated default runtime to node20 (#346)
  • The wrapper around the installed Terraform binary has been fixed to return the exact STDOUT and STDERR from Terraform when executing commands. Previous versions of setup-terraform may have required workarounds to process the STDOUT in bash, such as filtering out the first line or selectively parsing STDOUT with jq. These workarounds may need to be adjusted with v3.0.0, which will now return just the STDOUT/STDERR from Terraform with no errant characters/statements. (#367)

BUG FIXES:

  • Fixed malformed stdout when wrapper is enabled (#367)

v2.0.3

What's Changed

NOTES

Full Changelog: hashicorp/setup-terraform@v2.0.2...v2.0.3

v2.0.2

What's Changed

NOTES

INTERNAL

Full Changelog: hashicorp/setup-terraform@v2.0.1...v2.0.2

v2.0.1

What's Changed

ENHANCEMENTS

BUG FIXES

INTERNAL

... (truncated)

Changelog

Sourced from hashicorp/setup-terraform's changelog.

3.1.2 (2024-08-19)

NOTES:

  • This release introduces no functional changes. It does however include dependency updates which address upstream CVEs. (#430)

3.1.1 (2024-05-07)

BUG FIXES:

  • wrapper: Fix wrapper to output to stdout and stderr immediately when data is received (#395)

3.1.0 (2024-04-23)

ENHANCEMENTS:

  • Automatically fallback to darwin/amd64 for Terraform versions before 1.0.2 as releases for darwin/arm64 are not available (#409)

3.0.0 (2023-10-30)

NOTES:

  • Updated default runtime to node20 (#346)
  • The wrapper around the installed Terraform binary has been fixed to return the exact STDOUT and STDERR from Terraform when executing commands. Previous versions of setup-terraform may have required workarounds to process the STDOUT in bash, such as filtering out the first line or selectively parsing STDOUT with jq. These workarounds may need to be adjusted with v3.0.0, which will now return just the STDOUT/STDERR from Terraform with no errant characters/statements. (#367)

BUG FIXES:

  • Fixed malformed stdout when wrapper is enabled (#367)

[2.0.3] (2022-11-01)

NOTES

  • Reduced occurrences of GitHub Actions warnings for setting output #247

[2.0.2] (2022-10-12)

BUG FIXES

INTERNAL

[2.0.1] (2022-10-12)

ENHANCEMENTS

... (truncated)

Commits
  • b9cd54a Update package version
  • 47b7a54 Update changelog
  • 20bffec Bump @​hashicorp/js-releases from 1.7.2 to 1.7.3 (#430)
  • 7f4493e Result of tsccr-helper -log-level=info gha update -latest . (#426)
  • bda2976 Bump semver from 7.6.2 to 7.6.3 (#427)
  • 3235006 Result of tsccr-helper -log-level=info gha update -latest . (#421)
  • 81777d5 deps: Bump braces to 3.0.3 (#423)
  • c5b46f3 [CI] Update lock workflow file
  • 0ec620c [CI] terraform-devex-repos automation
  • 02909a6 [CI] terraform-devex-repos automation
  • Additional commits viewable in compare view

Updates crazy-max/ghaction-import-gpg from 5 to 6

Release notes

Sourced from crazy-max/ghaction-import-gpg's releases.

v6.0.0

Full Changelog: crazy-max/ghaction-import-gpg@v5.4.0...v6.0.0

v5.4.0

Full Changelog: crazy-max/ghaction-import-gpg@v5.3.0...v5.4.0

v5.3.0

Full Changelog: crazy-max/ghaction-import-gpg@v5.2.0...v5.3.0

v5.2.0

  • Remove setOutput workaround by @​crazy-max (#152)
  • Bump @​actions/core from 1.9.0 to 1.10.0 (#147 #151)
  • Bump openpgp from 5.3.1 to 5.5.0 (#149)

Full Changelog: crazy-max/ghaction-import-gpg@v5.1.0...v5.2.0

v5.1.0

  • Bump openpgp from 5.2.1 to 5.3.1 (#145)
  • Bump @​actions/core from 1.6.0 to 1.9.0 (#143)
Commits
  • 01dd5d3 Merge pull request #186 from crazy-max/dependabot/npm_and_yarn/actions/core-1...
  • ab787ac chore: update generated content
  • c63a019 build(deps): bump @​actions/core from 1.10.0 to 1.10.1
  • 81f63a8 Merge pull request #191 from crazy-max/dependabot/npm_and_yarn/babel/traverse...
  • 98ff7fb Merge pull request #190 from crazy-max/dependabot/npm_and_yarn/debug-4.3.4
  • e83a2ea Merge pull request #193 from crazy-max/dependabot/github_actions/actions/gith...
  • 2e40814 Merge pull request #192 from crazy-max/dependabot/npm_and_yarn/openpgp-5.11.0
  • 480319b chore: update generated content
  • 019a31d build(deps): bump actions/github-script from 6 to 7
  • 24f4ba9 build(deps): bump openpgp from 5.10.1 to 5.11.0
  • Additional commits viewable in compare view

Updates goreleaser/goreleaser-action from 3.1.0 to 6.0.0

Release notes

Sourced from goreleaser/goreleaser-action's releases.

v6.0.0

[!WARNING] This is a breaking change!

Follow the instructions here to upgrade!

What's Changed

Full Changelog: goreleaser/goreleaser-action@v5...v6.0.0

v5.1.0

Important

This version changes the default behavior of latest to ~> v1.

The next major of this action (v6), will change this to ~> v2, and will be launched together with GoReleaser v2.

What's Changed

New Contributors

Full Changelog: goreleaser/goreleaser-action@v5.0.0...v5.1.0

v5.0.0

What's Changed

Full Changelog: goreleaser/goreleaser-action@v4.6.0...v5.0.0

v4.6.0

Reverts the change to node20 runtime.

... (truncated)

Commits
  • 286f3b1 ci: fix tests
  • beac410 ci: update workflow and .goreleaser.yml
  • 18bbabc feat!: use "~> v2" as default (#463)
  • 5742e2a chore: re-generate
  • 70ccc5d chore(deps): bump @​actions/http-client from 2.2.0 to 2.2.1 (#451)
  • d55bec7 chore(deps): bump semver from 7.6.0 to 7.6.2 (#462)
  • f1dbd53 feat: lock this major version of the action to use '~> v1' as 'latest' (#461)
  • 2953d07 chore(deps): update http-client
  • 62d4b8a chore: use corepack to install yarn (#458)
  • f09f1a7 chore(deps): bump tar from 6.1.14 to 6.2.1 (#456)
  • Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot bot requested a review from a team as a code owner September 24, 2024 06:54
@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Sep 24, 2024
@dependabot dependabot bot force-pushed the dependabot/github_actions/github-actions-65ba13113e branch from bbfce2c to 2d9b85c Compare September 24, 2024 06:54
Bumps the github-actions group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `3` | `4` |
| [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) | `3` | `6` |
| [hashicorp/setup-terraform](https://github.com/hashicorp/setup-terraform) | `2` | `3` |
| [crazy-max/ghaction-import-gpg](https://github.com/crazy-max/ghaction-import-gpg) | `5` | `6` |
| [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) | `3.1.0` | `6.0.0` |


Updates `actions/checkout` from 3 to 4
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v3...v4)

Updates `golangci/golangci-lint-action` from 3 to 6
- [Release notes](https://github.com/golangci/golangci-lint-action/releases)
- [Commits](golangci/golangci-lint-action@v3...v6)

Updates `hashicorp/setup-terraform` from 2 to 3
- [Release notes](https://github.com/hashicorp/setup-terraform/releases)
- [Changelog](https://github.com/hashicorp/setup-terraform/blob/main/CHANGELOG.md)
- [Commits](hashicorp/setup-terraform@v2...v3)

Updates `crazy-max/ghaction-import-gpg` from 5 to 6
- [Release notes](https://github.com/crazy-max/ghaction-import-gpg/releases)
- [Commits](crazy-max/ghaction-import-gpg@v5...v6)

Updates `goreleaser/goreleaser-action` from 3.1.0 to 6.0.0
- [Release notes](https://github.com/goreleaser/goreleaser-action/releases)
- [Commits](goreleaser/goreleaser-action@v3.1.0...v6.0.0)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: golangci/golangci-lint-action
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: hashicorp/setup-terraform
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: crazy-max/ghaction-import-gpg
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: goreleaser/goreleaser-action
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/github_actions/github-actions-65ba13113e branch from 2d9b85c to 7bf4ceb Compare October 1, 2024 17:17
@demeyerthom demeyerthom merged commit 7cac9ff into main Oct 24, 2024
5 checks passed
@demeyerthom demeyerthom deleted the dependabot/github_actions/github-actions-65ba13113e branch October 24, 2024 16:45
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant