Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

build(deps): bump actions/setup-python from 2.2.2 to 2.3.1 #67

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 1, 2021

Bumps actions/setup-python from 2.2.2 to 2.3.1.

Release notes

Sourced from actions/setup-python's releases.

Update actions/cache version to 1.0.8

We have updated actions/cache dependency version to 1.0.8 to support 10GB cache upload

Support caching dependencies

This release introduces dependency caching support (actions/setup-python#266)

Caching dependencies.

The action has a built-in functionality for caching and restoring pip/pipenv dependencies. The cache input is optional, and caching is turned off by default.

Besides, this release introduces dependency caching support for mono repos and repositories with complex structure.

By default, the action searches for the dependency file (requirements.txt for pip or Pipfile.lock for pipenv) in the whole repository. Use the cache-dependency-path input for cases when you want to override current behaviour and use different file for hash generation (for example requirements-dev.txt). This input supports wildcards or a list of file names for caching multiple dependencies.

Caching pip dependencies:

steps:
- uses: actions/checkout@v2
- uses: actions/setup-python@v2
  with:
    python-version: '3.9'
    cache: 'pip'
- run: pip install -r requirements.txt
- run: pip test

Caching pipenv dependencies:

steps:
- uses: actions/checkout@v2
- name: Install pipenv
  run: pipx install pipenv
- uses: actions/setup-python@v2
  with:
    python-version: '3.9'
    cache: 'pipenv'
- run: pipenv install
- run: pipenv test

Change dependency file:

steps:
- uses: actions/checkout@v2
- uses: actions/setup-python@v2
  with:
    python-version: '3.9'
    cache: 'pip'
    cache-dependency-path: '**/requirements-dev.txt'
- run: pip install -r subdirectory/requirements-dev.txt
- run: pip test
</tr></table> 

... (truncated)

Commits
  • f382193 Update @​actions/cache version to 1.0.8 (#283)
  • 3ef38b8 Create ADR for integrating cache functionality to setup-python action (#247)
  • 0066b88 Add a workflow to release a new version of the action (#274)
  • 280924f Implementation of python's caching (#266)
  • 52636cf Fix consistency in README (#250)
  • ca5c590 Update version for setup-python in package.json (#264)
  • feeaa3b Add issue and pull request templates (#258)
  • 002b1e4 Change python version for pypy in workflow files (#259)
  • d12543a Merge pull request #252 from dmitry-shibanov/v-dmshib/update-dependencies
  • 4aa563b update dependencies
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added build Changes that affect the build system or external dependencies ci Changes to CI configuration files and scripts dependencies Pull requests that update a dependency file labels Dec 1, 2021
@coveralls
Copy link

coveralls commented Dec 1, 2021

Coverage Status

Coverage remained the same at 100.0% when pulling e41a596 on dependabot/github_actions/actions/setup-python-2.3.1 into 0c3d851 on master.

@dependabot dependabot bot force-pushed the dependabot/github_actions/actions/setup-python-2.3.1 branch from a97f773 to 1b16700 Compare December 2, 2021 22:45
Bumps [actions/setup-python](https://github.com/actions/setup-python) from 2.2.2 to 2.3.1.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](actions/setup-python@v2.2.2...v2.3.1)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/github_actions/actions/setup-python-2.3.1 branch from 1b16700 to e41a596 Compare December 2, 2021 22:50
@playpauseandstop playpauseandstop enabled auto-merge (squash) December 2, 2021 22:53
@playpauseandstop playpauseandstop merged commit 783e4ec into master Dec 2, 2021
@playpauseandstop playpauseandstop deleted the dependabot/github_actions/actions/setup-python-2.3.1 branch December 2, 2021 22:57
badabump-release-bot bot pushed a commit that referenced this pull request Jun 22, 2022
Refactoring:
------------

- [#81] **BREAKING CHANGE:** Bump aiohttp & async-timeout deps lower bounds (#105)

Other:
------

- **BREAKING CHANGE:** Drop support of Python 3.6 (#99)
- (**deps**) bump actions/checkout from 2.3.5 to 2.4.0 (#70)
- (**deps**) bump actions/cache from 2.1.6 to 2.1.7 (#66)
- (**deps**) bump actions/setup-python from 2.2.2 to 2.3.1 (#67)
- (**deps**) bump tibdex/github-app-token from 1.4 to 1.5 (#69)
- (**deps**) bump peter-evans/create-pull-request from 3.10.1 to 3.11.0 (#68)
- (**deps**) bump aiohttp from 3.8.0 to 3.8.1 (#65)
- (**deps**) bump async-timeout from 4.0.0 to 4.0.1 (#62)
- (**deps**) bump yarl from 1.7.0 to 1.7.2 (#64)
- (**deps-dev**) bump coverage from 6.1.1 to 6.2 (#63)
- (**deps**) bump async-timeout from 4.0.1 to 4.0.2 (#71)
- (**deps-dev**) bump mypy from 0.910 to 0.930 (#72)
- (**deps**) bump peter-evans/create-pull-request from 3.11.0 to 3.12.0 (#73)
- Update Python dev version to 3.10.1 (#74)
- (**deps**) bump pypa/gh-action-pypi-publish from 1.4.2 to 1.5.0 (#77)
- (**deps**) bump peter-evans/create-pull-request from 3.12.0 to 3.12.1 (#76)
- (**deps-dev**) bump mypy from 0.930 to 0.931 (#75)
- (**deps**) bump peter-evans/create-pull-request from 3.12.1 to 4.0.4 (#100)
- Update default branch name (#103)
- Bump requirements (#102)
- Various improvements for CI jobs (#104)
playpauseandstop added a commit that referenced this pull request Jun 22, 2022
**Drop support of Python 3.6 as well as bump lower bounds of library dependencies.**

Now `aiohttp-middlewares` requires,

- `aiohttp>=3.8.1,<4.0` instead of `>=3.7.0,<4.0`
- `async-timeout>=4.0.2,<5.0` instead of `>=3.0,<5.0`

Refactoring:
------------

- [#81] **BREAKING CHANGE:** Bump aiohttp & async-timeout deps lower bounds (#105)

Other:
------

- **BREAKING CHANGE:** Drop support of Python 3.6 (#99)
- (**deps**) bump actions/checkout from 2.3.5 to 2.4.0 (#70)
- (**deps**) bump actions/cache from 2.1.6 to 2.1.7 (#66)
- (**deps**) bump actions/setup-python from 2.2.2 to 2.3.1 (#67)
- (**deps**) bump tibdex/github-app-token from 1.4 to 1.5 (#69)
- (**deps**) bump peter-evans/create-pull-request from 3.10.1 to 3.11.0 (#68)
- (**deps**) bump aiohttp from 3.8.0 to 3.8.1 (#65)
- (**deps**) bump async-timeout from 4.0.0 to 4.0.1 (#62)
- (**deps**) bump yarl from 1.7.0 to 1.7.2 (#64)
- (**deps-dev**) bump coverage from 6.1.1 to 6.2 (#63)
- (**deps**) bump async-timeout from 4.0.1 to 4.0.2 (#71)
- (**deps-dev**) bump mypy from 0.910 to 0.930 (#72)
- (**deps**) bump peter-evans/create-pull-request from 3.11.0 to 3.12.0 (#73)
- Update Python dev version to 3.10.1 (#74)
- (**deps**) bump pypa/gh-action-pypi-publish from 1.4.2 to 1.5.0 (#77)
- (**deps**) bump peter-evans/create-pull-request from 3.12.0 to 3.12.1 (#76)
- (**deps-dev**) bump mypy from 0.930 to 0.931 (#75)
- (**deps**) bump peter-evans/create-pull-request from 3.12.1 to 4.0.4 (#100)
- Update default branch name (#103)
- Bump requirements (#102)
- Various improvements for CI jobs (#104)

Co-authored-by: playpauseandstop <playpauseandstop@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
build Changes that affect the build system or external dependencies ci Changes to CI configuration files and scripts dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants