Skip to content

ci(deps): update github actions #177

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 1 commit into from
Feb 1, 2025
Merged

ci(deps): update github actions #177

merged 1 commit into from
Feb 1, 2025

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Feb 1, 2025

This PR contains the following updates:

Package Type Update Change
actions/checkout action minor v4.1.1 -> v4.2.2
actions/create-github-app-token action patch v1.11.1 -> v1.11.2
actions/setup-java action minor v4.6.0 -> v4.7.0
actions/setup-node action minor v4.1.0 -> v4.2.0
actions/setup-python action minor v4.7.1 -> v4.8.0
actions/stale action minor v9.0.0 -> v9.1.0
actions/upload-artifact action minor v4.5.0 -> v4.6.0
astral-sh/ruff-action action minor v3.0.1 -> v3.1.0
aws-actions/configure-aws-credentials action patch v4.0.2 -> v4.0.3
docker/build-push-action action minor v6.11.0 -> v6.13.0
github/codeql-action action patch v3.28.0 -> v3.28.8
hoverkraft-tech/compose-action action minor v2.0.1 -> v2.2.0
rhysd/actionlint container patch 1.7.6 -> 1.7.7

Release Notes

actions/checkout (actions/checkout)

v4.2.2

Compare Source

v4.2.1

Compare Source

v4.2.0

Compare Source

v4.1.7

Compare Source

v4.1.6

Compare Source

v4.1.5

Compare Source

What's Changed

Full Changelog: actions/checkout@v4.1.4...v4.1.5

v4.1.4

Compare Source

v4.1.3

Compare Source

What's Changed

Full Changelog: actions/checkout@v4.1.2...v4.1.3

v4.1.2

Compare Source

actions/create-github-app-token (actions/create-github-app-token)

v1.11.2

Compare Source

Bug Fixes
actions/setup-java (actions/setup-java)

v4.7.0

Compare Source

What's Changed
New Contributors

Full Changelog: actions/setup-java@v4...v4.7.0

actions/setup-node (actions/setup-node)

v4.2.0

Compare Source

actions/setup-python (actions/setup-python)

v4.8.0

Compare Source

What's Changed

In scope of this release we added support for GraalPy (https://github.com/actions/setup-python/pull/694). You can use this snippet to set up GraalPy:

steps:
- uses: actions/checkout@v4
- uses: actions/setup-python@v4 
  with:
    python-version: 'graalpy-22.3' 
- run: python my_script.py

Besides, the release contains such changes as:

New Contributors

Full Changelog: actions/setup-python@v4...v4.8.0

actions/stale (actions/stale)

v9.1.0

Compare Source

What's Changed

New Contributors

Full Changelog: actions/stale@v9...v9.1.0

actions/upload-artifact (actions/upload-artifact)

v4.6.0

Compare Source

What's Changed

Full Changelog: actions/upload-artifact@v4...v4.6.0

astral-sh/ruff-action (astral-sh/ruff-action)

v3.1.0: 🌈 Determine ruff version from optional or dependency groups

Compare Source

Changes

Big thank you to @​AA-Turner for expanding the pyproject.toml parsing to also find the ruff version to use in the following scenarios:

[dependency-groups]
dev = [
    { include-group = "docs" },
    { include-group = "lint" },
]
docs = [
    "sphinx",
]
lint = [
    "ruff==0.8.3",
]
[project.optional-dependencies]
lint = [
    "ruff==0.8.3",
]

🚀 Enhancements

  • Read the [project.optional-dependencies] and [dependency-groups] tables @​AA-Turner (#​66)

v3.0.2: 🌈 Full support for GHES

Compare Source

Changes

This release fixes some issues that prevented use with GitHub Enterprise Server instances.
Parsing the ruff version from pyproject.toml now also uses a library that is fully TOML 1.0.0 compliant.

🐛 Bug fixes

🧰 Maintenance

📚 Documentation

⬆️ Dependency updates

aws-actions/configure-aws-credentials (aws-actions/configure-aws-credentials)

v4.0.3

Compare Source

Features
  • added release-please action config (0f88004)
Bug Fixes
Miscellaneous Chores
docker/build-push-action (docker/build-push-action)

v6.13.0

Compare Source

Full Changelog: docker/build-push-action@v6.12.0...v6.13.0

v6.12.0

Compare Source

Full Changelog: docker/build-push-action@v6.11.0...v6.12.0

github/codeql-action (github/codeql-action)

v3.28.8

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.8 - 29 Jan 2025

  • Enable support for Kotlin 2.1.10 when running with CodeQL CLI v2.20.3. #​2744

See the full CHANGELOG.md for more information.

v3.28.7

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.7 - 29 Jan 2025

No user facing changes.

See the full CHANGELOG.md for more information.

v3.28.6

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.6 - 27 Jan 2025

  • Re-enable debug artifact upload for CLI versions 2.20.3 or greater. #​2726

See the full CHANGELOG.md for more information.

v3.28.5

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.5 - 24 Jan 2025

  • Update default CodeQL bundle version to 2.20.3. #​2717

See the full CHANGELOG.md for more information.

v3.28.4

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.4 - 23 Jan 2025

No user facing changes.

See the full CHANGELOG.md for more information.

v3.28.3

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.3 - 22 Jan 2025
  • Update default CodeQL bundle version to 2.20.2. #​2707
  • Fix an issue downloading the CodeQL Bundle from a GitHub Enterprise Server instance which occurred when the CodeQL Bundle had been synced to the instance using the CodeQL Action sync tool and the Actions runner did not have Zstandard installed. #​2710
  • Uploading debug artifacts for CodeQL analysis is temporarily disabled. #​2712

See the full CHANGELOG.md for more information.

v3.28.2

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.2 - 21 Jan 2025

No user facing changes.

See the full CHANGELOG.md for more information.

v3.28.1

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.1 - 10 Jan 2025
  • CodeQL Action v2 is now deprecated, and is no longer updated or supported. For better performance, improved security, and new features, upgrade to v3. For more information, see this changelog post. #​2677
  • Update default CodeQL bundle version to 2.20.1. #​2678

See the full CHANGELOG.md for more information.

hoverkraft-tech/compose-action (hoverkraft-tech/compose-action)

v2.2.0

Compare Source

Release Summary

This release introduces a new feature allowing users to specify Docker flags as an input, enhancing flexibility in Docker Compose operations. A bug fix ensures that Docker Compose output is now printed only in debug mode, reducing unnecessary log verbosity. Additionally, documentation has been updated to reflect the latest actions and workflows. Dependencies have been updated for GitHub Actions to maintain compatibility and security.

No breaking changes were introduced in this release.

What's Changed

Full Changelog: hoverkraft-tech/compose-action@v2.1.0...v2.2.0

v2.1.0

Compare Source

Release Summary

This release introduces a new feature that supports specifying the Compose version, enhancing compatibility and usability. Documentation for actions and workflows has been updated, along with multiple dependency upgrades across npm and GitHub Actions to improve performance, security, and compatibility. Minor lint issues in documentation have been fixed to ensure compliance with standards. Development dependencies were updated extensively, including updates to eslint-plugin-jsonc, eslint-plugin-github, and other packages, ensuring a more robust development environment.

No Breaking changes

What's Changed

Full Changelog: hoverkraft-tech/compose-action@v2.0.2...v2.1.0

v2.0.2

Compare Source

Release Summary

This release introduces new tests for the attach-dependencies feature, along with support for absolute paths in the compose-file input. Documentation for actions and workflows has been updated, and several dependencies related to GitHub actions and npm development have been bumped to ensure better performance and stability.

No breaking changes have been introduced.

What's Changed

Full Changelog: hoverkraft-tech/compose-action@v2.0.1...v2.0.2

Configuration

📅 Schedule: Branch creation - "* * 1 * *" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added the dependency Dependency update by Renovate label Feb 1, 2025
@renovate renovate bot requested a review from a team as a code owner February 1, 2025 01:18
@renovate renovate bot enabled auto-merge (squash) February 1, 2025 01:18
HapagLloydTechnicalUser
HapagLloydTechnicalUser approved these changes Feb 1, 2025
View reviewed changes
Copy link

@HapagLloydTechnicalUser HapagLloydTechnicalUser left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Auto approve Renovate PR (organization rule)

@renovate renovate bot merged commit 2d930b8 into main Feb 1, 2025
10 checks passed
@renovate renovate bot deleted the renovate/github-actions branch February 1, 2025 01:18
@HapagLloydTechnicalUser
Copy link

🎉 This PR is included in version 1.13.1 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@HapagLloydTechnicalUser HapagLloydTechnicalUser HapagLloydTechnicalUser approved these changes

Assignees

No one assigned

Labels

dependency Dependency update by Renovate released

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@HapagLloydTechnicalUser