Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

ci: bump the github-actions group across 1 directory with 8 updates #408

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

ci: bump the github-actions group across 1 directory with 8 updates #408

wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link

@dependabot dependabot bot commented on behalf of github Jan 1, 2025

Bumps the github-actions group with 8 updates in the / directory:

Package From To
actions/checkout 4.2.1 4.2.2
github/codeql-action 3.26.12 3.28.0
actions/setup-python 5.2.0 5.3.0
actions/cache 4.1.1 4.2.0
python-semantic-release/python-semantic-release 9.10.0 9.15.2
hynek/build-and-inspect-python-package 2.9.0 2.11.0
softprops/action-gh-release 2.0.8 2.2.0
pypa/gh-action-pypi-publish 1.10.3 1.12.3

Updates actions/checkout from 4.2.1 to 4.2.2

Release notes

Sourced from actions/checkout's releases.

v4.2.2

What's Changed

Full Changelog: actions/checkout@v4.2.1...v4.2.2

Changelog

Sourced from actions/checkout's changelog.

Changelog

v4.2.2

v4.2.1

v4.2.0

v4.1.7

v4.1.6

v4.1.5

v4.1.4

v4.1.3

v4.1.2

v4.1.1

v4.1.0

... (truncated)

Commits

Updates github/codeql-action from 3.26.12 to 3.28.0

Release notes

Sourced from github/codeql-action's releases.

v3.28.0

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.28.0 - 20 Dec 2024

  • Bump the minimum CodeQL bundle version to 2.15.5. #2655
  • Don't fail in the unusual case that a file is on the search path. #2660.

See the full CHANGELOG.md for more information.

v3.27.9

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.27.9 - 12 Dec 2024

No user facing changes.

See the full CHANGELOG.md for more information.

v3.27.7

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.27.7 - 10 Dec 2024

  • We are rolling out a change in December 2024 that will extract the CodeQL bundle directly to the toolcache to improve performance. #2631
  • Update default CodeQL bundle version to 2.20.0. #2636

See the full CHANGELOG.md for more information.

v3.27.6

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.27.6 - 03 Dec 2024

... (truncated)

Changelog

Sourced from github/codeql-action's changelog.

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

[UNRELEASED]

No user facing changes.

3.28.0 - 20 Dec 2024

  • Bump the minimum CodeQL bundle version to 2.15.5. #2655
  • Don't fail in the unusual case that a file is on the search path. #2660.

3.27.9 - 12 Dec 2024

No user facing changes.

3.27.8 - 12 Dec 2024

  • Fixed an issue where streaming the download and extraction of the CodeQL bundle did not respect proxy settings. #2624

3.27.7 - 10 Dec 2024

  • We are rolling out a change in December 2024 that will extract the CodeQL bundle directly to the toolcache to improve performance. #2631
  • Update default CodeQL bundle version to 2.20.0. #2636

3.27.6 - 03 Dec 2024

  • Update default CodeQL bundle version to 2.19.4. #2626

3.27.5 - 19 Nov 2024

No user facing changes.

3.27.4 - 14 Nov 2024

No user facing changes.

3.27.3 - 12 Nov 2024

No user facing changes.

3.27.2 - 12 Nov 2024

  • Fixed an issue where setting up the CodeQL tools would sometimes fail with the message "Invalid value 'undefined' for header 'authorization'". #2590

3.27.1 - 08 Nov 2024

... (truncated)

Commits
  • 48ab28a Merge pull request #2662 from github/update-v3.28.0-d01b25e64
  • 4946b76 Update changelog for v3.28.0
  • d01b25e Merge pull request #2660 from github/henrymercer/fix-error-file-on-path
  • 7d6d36c Add changelog note
  • b58f447 Use @actions/io to locate binaries
  • 64cc90b Merge pull request #2653 from github/dependabot/npm_and_yarn/npm-61c837125e
  • d8f8eca Merge branch 'main' into dependabot/npm_and_yarn/npm-61c837125e
  • 562042d Merge pull request #2655 from github/aeisenberg/deprecate-2.14
  • beed6ff Change codeql version used in test
  • 5f0a4d3 Bump the minimum supported version of CodeQL to 2.15.5
  • Additional commits viewable in compare view

Updates actions/setup-python from 5.2.0 to 5.3.0

Release notes

Sourced from actions/setup-python's releases.

v5.3.0

What's Changed

Bug Fixes:

Enhancements:

New Contributors

Full Changelog: actions/setup-python@v5...v5.3.0

Commits

Updates actions/cache from 4.1.1 to 4.2.0

Release notes

Sourced from actions/cache's releases.

v4.2.0

⚠️ Important Changes

The cache backend service has been rewritten from the ground up for improved performance and reliability. actions/cache now integrates with the new cache service (v2) APIs.

The new service will gradually roll out as of February 1st, 2025. The legacy service will also be sunset on the same date. Changes in these release are fully backward compatible.

We are deprecating some versions of this action. We recommend upgrading to version v4 or v3 as soon as possible before February 1st, 2025. (Upgrade instructions below).

If you are using pinned SHAs, please use the SHAs of versions v4.2.0 or v3.4.0

If you do not upgrade, all workflow runs using any of the deprecated actions/cache will fail.

Upgrading to the recommended versions will not break your workflows.

Read more about the change & access the migration guide: reference to the announcement.

Minor changes

Minor and patch version updates for these dependencies:

  • @​actions/core: 1.11.1
  • @​actions/io: 1.1.3
  • @​vercel/ncc: 0.38.3

Full Changelog: actions/cache@v4...v4.2.0

v4.1.2

What's Changed

New Contributors

Full Changelog: actions/cache@v4...v4.1.2

Changelog

Sourced from actions/cache's changelog.

Releases

4.2.0

TLDR; The cache backend service has been rewritten from the ground up for improved performance and reliability. actions/cache now integrates with the new cache service (v2) APIs.

The new service will gradually roll out as of February 1st, 2025. The legacy service will also be sunset on the same date. Changes in these release are fully backward compatible.

We are deprecating some versions of this action. We recommend upgrading to version v4 or v3 as soon as possible before February 1st, 2025. (Upgrade instructions below).

If you are using pinned SHAs, please use the SHAs of versions v4.2.0 or v3.4.0

If you do not upgrade, all workflow runs using any of the deprecated actions/cache will fail.

Upgrading to the recommended versions will not break your workflows.

4.1.2

  • Add GitHub Enterprise Cloud instances hostname filters to inform API endpoint choices - #1474
  • Security fix: Bump braces from 3.0.2 to 3.0.3 - #1475

4.1.1

  • Restore original behavior of cache-hit output - #1467

4.1.0

  • Ensure cache-hit output is set when a cache is missed - #1404
  • Deprecate save-always input - #1452

4.0.2

  • Fixed restore fail-on-cache-miss not working.

4.0.1

  • Updated isGhes check

4.0.0

  • Updated minimum runner version support from node 12 -> node 20

3.4.0

  • Integrated with the new cache service (v2) APIs

3.3.3

  • Updates @​actions/cache to v3.2.3 to fix accidental mutated path arguments to getCacheVersion actions/toolkit#1378
  • Additional audit fixes of npm package(s)

... (truncated)

Commits

Updates python-semantic-release/python-semantic-release from 9.10.0 to 9.15.2

Release notes

Sourced from python-semantic-release/python-semantic-release's releases.

v9.15.2 (2024-12-16)

Bug Fixes

  • changelog: Ensures user rendered files are trimmed to end with a single newline (#1118, 6dfbbb0)

  • cli: Add error message of how to gather full error output (#1116, ba85532)

  • cmd-version: Enable maintenance prereleases (#864, b88108e)

  • cmd-version: Fix handling of multiple prerelease token variants & git flow merges (#1120, 8784b9a)

  • cmd-version: Fix version determination algorithm to capture commits across merged branches (#1120, 8784b9a)

  • cmd-version: Forces tag timestamp to be same time as release commit (#1117, 7898b11)

  • cmd-version: Handle multiple prerelease token variants properly (#1120, 8784b9a)

  • config: Ensure default config loads on network mounted windows environments (#1124, a64cbc9)

  • version: Remove some excessive log msgs from debug to silly level (#1120, 8784b9a)

  • version-bump: Increment based on current commit's history only (#864, b88108e)

Performance Improvements

  • cmd-version: Refactor version determination algorithm for accuracy & speed (#1120, 8784b9a)

Resolved Issues

  • #789: Fix: Version determination of 4 branch GitFlow repo
  • #861: Releasing a prerelease patch of a maintenance version
  • #1123: Default configuration fails with changelog error on windows with network mounted directory path

Detailed Changes: v9.15.1...v9.15.2

v9.15.1 (2024-12-03)

Bug Fixes

  • changelog-md: Fix commit sort of breaking descriptions section (75b342e)

  • parser-angular: Ensure issues are sorted by numeric value rather than text sorted (3858add)

  • parser-emoji: Ensure issues are sorted by numeric value rather than text sorted (7b8d2d9)

... (truncated)

Changelog

Sourced from python-semantic-release/python-semantic-release's changelog.

CHANGELOG

v9.15.2 (2024-12-16)

Bug Fixes

  • changelog: Ensures user rendered files are trimmed to end with a single newline (#1118, 6dfbbb0)

  • cli: Add error message of how to gather full error output (#1116, ba85532)

  • cmd-version: Enable maintenance prereleases (#864, b88108e)

  • test(fixtures): improve changelog generator to filter by max version

  • test(fixtures): add repo fixture of a trunk only repo w/ dual version support

  • test(fixtures): add repo fixture of a trunk only repo w/ dual version support & prereleases

  • test(cmd-version): add rebuild repo tests for new dual version support repos

  • test(version-determination): adjust unit tests of increment_version logic

This clarifies repeated function calls and pytest parameter names included the unclear assert diff. Adds additional tests to check bad states for failures and refactored to match new function signature.

  • fix(version-bump): increment based on current commit's history only

Refactor duplicate logging messages and flow to process out odd cases in a fail fast methodology. This removes the reliance on any last full release that is not within the history of the current branch.

Resolves: #861

  • cmd-version: Fix handling of multiple prerelease token variants & git flow merges (#1120, 8784b9a)

  • refactor: define a custom logging level of silly

  • fix(version): remove some excessive log msgs from debug to silly level

  • test(fixtures): refactor builder functions for version file updates

... (truncated)

Commits
  • 7b3f716 9.15.2
  • a64cbc9 fix(config): ensure default config loads on network mounted windows environme...
  • 1346637 ci(deps): bump psr/publish-action & tj-actions/changed-files action versi...
  • b88108e fix(cmd-version): enable maintenance prereleases (#864)
  • ea10354 ci(pr-wkflow): add pipeline concurrency limit for branch updates of PRs
  • a72591c test(cmd-version): limit rebuild repos to only angular in non-comprehensive t...
  • 8784b9a fix(cmd-version): fix handling of multiple prerelease token variants & git fl...
  • 6dfbbb0 fix(changelog): ensures user rendered files are trimmed to end with a single ...
  • 7898b11 fix(cmd-version): forces tag timestamp to be same time as release commit (#1117)
  • ba85532 fix(cli): add error message of how to gather full error output (#1116)
  • Additional commits viewable in compare view

Updates hynek/build-and-inspect-python-package from 2.9.0 to 2.11.0

Release notes

Sourced from hynek/build-and-inspect-python-package's releases.

v2.11.0

Added

  • New output: package_version is the version of the package that was built. #152

v2.10.0

Changed

Changelog

Sourced from hynek/build-and-inspect-python-package's changelog.

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

Unreleased

2.11.0

Added

  • New output: package_version is the version of the package that was built. #152

2.10.0

Changed

2.9.0

Changed

  • uv build is now used instead of the build package. Since the actual build of the packages is done by the packaging backend (the one you define in your pyproject.toml under build-system.build-backend -- for example, Setuptools or Hatchling), this should make no difference except for faster runs. #140

2.8.0 - 2024-07-25

Changed

  • Use uv's new uv cache prune --ci to only cache downloaded files. This makes the cache smaller and faster to pack/unpack. #135

Fixed

  • Turns out, the default location of uv's cache cannot be cached and actions/cache fails silently with an opaque "Path(s) specified in the action for caching do(es) not exist, hence no cache is being saved." log message. We have moved the cache to /tmp. #135

... (truncated)

Commits

Updates softprops/action-gh-release from 2.0.8 to 2.2.0

Release notes

Sourced from softprops/action-gh-release's releases.

v2.2.0

What's Changed

Exciting New Features 🎉

Bug fixes 🐛

Other Changes 🔄

New Contributors

Full Changelog: softprops/action-gh-release@v2.1.0...v2.2.0

v2.1.0

What's Changed

Exciting New Features 🎉

Other Changes 🔄

New Contributors

Full Changelog: softprops/action-gh-release@v2...v2.1.0

v2.0.9

What's Changed

  • maintenance release with updated dependencies

New Contributors

Full Changelog: softprops/action-gh-release@v2...v2.0.9

Changelog

Sourced from softprops/action-gh-release's changelog.

2.2.0

What's Changed

Exciting New Features 🎉

Bug fixes 🐛

Other Changes 🔄

2.1.0

What's Changed

Exciting New Features 🎉

Other Changes 🔄

2.0.9

  • maintenance release with updated dependencies

2.0.8

Other Changes 🔄

2.0.7

Bug fixes 🐛

... (truncated)

Commits
  • 7b4da11 release 2.2.0
  • 64f1fa1 feat: read the release assets asynchronously (#552)
  • 9e35a64 chore(deps): bump prettier from 3.4.1 to 3.4.2 (#554)
  • 92bc83c chore(deps): bump @​types/node from 22.9.4 to 22.10.1 (#551)
  • 09f0e37 chore(deps): bump prettier from 3.3.3 to 3.4.1 (#550)
  • f138a07 chore(deps): bump @​vercel/ncc from 0.38.2 to 0.38.3 (#543)
  • 39a5683 fix(docs): clarify the default for tag_name (#544)
  • 62368ac chore(deps): bump cross-spawn from 7.0.3 to 7.0.6 (#545)
  • 181b5bc chore(deps): bump @​types/node from 22.9.0 to 22.9.4 (#547)
  • 3284404 chore(deps): bump typescript from 5.6.3 to 5.7.2 (#548)
  • Additional commits viewable in compare view

Updates pypa/gh-action-pypi-publish from 1.10.3 to 1.12.3

Release notes

Sourced from pypa/gh-action-pypi-publish's releases.

v1.12.3

✨ What's Improved

With the updates by @​woodruffw💰 and Description has been truncated

@dependabot
ci: bump the github-actions group across 1 directory with 8 updates
9559040 
Bumps the github-actions group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `4.2.1` | `4.2.2` |
| [github/codeql-action](https://github.com/github/codeql-action) | `3.26.12` | `3.28.0` |
| [actions/setup-python](https://github.com/actions/setup-python) | `5.2.0` | `5.3.0` |
| [actions/cache](https://github.com/actions/cache) | `4.1.1` | `4.2.0` |
| [python-semantic-release/python-semantic-release](https://github.com/python-semantic-release/python-semantic-release) | `9.10.0` | `9.15.2` |
| [hynek/build-and-inspect-python-package](https://github.com/hynek/build-and-inspect-python-package) | `2.9.0` | `2.11.0` |
| [softprops/action-gh-release](https://github.com/softprops/action-gh-release) | `2.0.8` | `2.2.0` |
| [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish) | `1.10.3` | `1.12.3` |



Updates `actions/checkout` from 4.2.1 to 4.2.2
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@eef6144...11bd719)

Updates `github/codeql-action` from 3.26.12 to 3.28.0
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@c36620d...48ab28a)

Updates `actions/setup-python` from 5.2.0 to 5.3.0
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](actions/setup-python@f677139...0b93645)

Updates `actions/cache` from 4.1.1 to 4.2.0
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](actions/cache@3624ceb...1bd1e32)

Updates `python-semantic-release/python-semantic-release` from 9.10.0 to 9.15.2
- [Release notes](https://github.com/python-semantic-release/python-semantic-release/releases)
- [Changelog](https://github.com/python-semantic-release/python-semantic-release/blob/master/CHANGELOG.md)
- [Commits](python-semantic-release/python-semantic-release@18399a7...7b3f716)

Updates `hynek/build-and-inspect-python-package` from 2.9.0 to 2.11.0
- [Release notes](https://github.com/hynek/build-and-inspect-python-package/releases)
- [Changelog](https://github.com/hynek/build-and-inspect-python-package/blob/main/CHANGELOG.md)
- [Commits](hynek/build-and-inspect-python-package@73aea39...14c7e53)

Updates `softprops/action-gh-release` from 2.0.8 to 2.2.0
- [Release notes](https://github.com/softprops/action-gh-release/releases)
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md)
- [Commits](softprops/action-gh-release@c062e08...7b4da11)

Updates `pypa/gh-action-pypi-publish` from 1.10.3 to 1.12.3
- [Release notes](https://github.com/pypa/gh-action-pypi-publish/releases)
- [Commits](pypa/gh-action-pypi-publish@f760068...67339c7)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: actions/setup-python
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: actions/cache
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: python-semantic-release/python-semantic-release
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: hynek/build-and-inspect-python-package
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: softprops/action-gh-release
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: pypa/gh-action-pypi-publish
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot requested a review from afuetterer as a code owner January 1, 2025 14:15
@dependabot dependabot bot added deps: github-actions Pull requests that update GitHub Actions code type: ci Continuous Integration labels Jan 1, 2025
@dependabot dependabot bot mentioned this pull request Jan 1, 2025
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@afuetterer afuetterer Awaiting requested review from afuetterer afuetterer is a code owner

At least 1 approving review is required to merge this pull request.

Assignees
No one assigned
Labels
deps: github-actions Pull requests that update GitHub Actions code type: ci Continuous Integration
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
0 participants