Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump the actions-minor group with 4 updates #77

Closed

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Aug 5, 2024

Bumps the actions-minor group with 4 updates: koalalab-inc/bolt, actions/checkout, actions/upload-artifact and super-linter/super-linter.

Updates koalalab-inc/bolt from 1.5.0 to 1.6.2

Release notes

Sourced from koalalab-inc/bolt's releases.

v1.6.2

No release notes provided.

v1.6.2-rc

No release notes provided.

v1.6.1-rc

No release notes provided.

v1.6.0-rc

What's Changed

Full Changelog: v1.4.3...v1.6.0-rc

Commits
  • b7388cf Feature/slsa (#74)
  • 8064fb9 added signed release and slsa provenance (#72)
  • aa52c97 gha permissions + pinning + scorecard (#71)
  • a0e63c4 Bump @​actions/artifact from 2.1.7 to 2.1.8 in the npm-production group across...
  • 7c155a6 Bump the actions-minor group across 1 directory with 6 updates (#67)
  • e23ec31 fixed string escaping security issue (#69)
  • a590724 added SECUIRYT.md (#70)
  • 4b1055c Bump the npm-development group across 1 directory with 5 updates (#68)
  • 2683c14 Bump braces from 3.0.2 to 3.0.3 in the npm_and_yarn group (#64)
  • 1346804 added ossf scorecard workflow (#63)
  • See full diff in compare view

Updates actions/checkout from 4.1.1 to 4.1.7

Release notes

Sourced from actions/checkout's releases.

v4.1.7

What's Changed

New Contributors

Full Changelog: actions/checkout@v4.1.6...v4.1.7

v4.1.6

What's Changed

Full Changelog: actions/checkout@v4.1.5...v4.1.6

v4.1.5

What's Changed

Full Changelog: actions/checkout@v4.1.4...v4.1.5

v4.1.4

What's Changed

Full Changelog: actions/checkout@v4.1.3...v4.1.4

v4.1.3

What's Changed

Full Changelog: actions/checkout@v4.1.2...v4.1.3

v4.1.2

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

v4.1.7

v4.1.6

v4.1.5

v4.1.4

v4.1.3

v4.1.2

v4.1.1

v4.1.0

v4.0.0

v3.6.0

v3.5.3

... (truncated)

Commits

Updates actions/upload-artifact from 4.3.4 to 4.3.5

Release notes

Sourced from actions/upload-artifact's releases.

v4.3.5

What's Changed

Full Changelog: actions/upload-artifact@v4.3.4...v4.3.5

Commits

Updates super-linter/super-linter from 6.7.0 to 6.8.0

Release notes

Sourced from super-linter/super-linter's releases.

v6.8.0

6.8.0 (2024-07-31)

🚀 Features

🐛 Bugfixes

⬆️ Dependency updates

  • bundler: bump rubocop-minitest in /dependencies (#5875) (9751e62)
  • bundler: bump rubocop-performance in /dependencies (#5777) (763dcc4)
  • bundler: bump rubocop-rspec from 2.30.0 to 3.0.3 in /dependencies (#5878) (592d903)
  • dev-docker: bump node in /dev-dependencies (#5872) (587fe0a)
  • dev-npm: bump release-please in /dev-dependencies (#5754) (6bb3f78)
  • docker: bump alpine/helm from 3.14.4 to 3.15.3 (#5882) (b5bf9f2)
  • docker: bump alpine/terragrunt from 1.9.0 to 1.9.2 (#5883) (95feeac)
  • docker: bump dart from 3.4.2-sdk to 3.4.4-sdk (#5764) (b75f1cf)
  • docker: bump dotnet/sdk (#5873) (f068663)
  • docker: bump golangci/golangci-lint from v1.59.0 to v1.59.1 (#5748) (81ab76d)
  • docker: bump goreleaser/goreleaser from v1.26.2 to v2.1.0 (#5881) (d84d439)
  • docker: bump hashicorp/terraform from 1.8.4 to 1.9.2 (#5885) (d384e67)
  • docker: bump mstruebing/editorconfig-checker from v3.0.1 to v3.0.3 (#5856) (81196f4)
  • docker: bump python from 3.12.3-alpine3.20 to 3.12.4-alpine3.20 (#5884) (8a044b5)
  • docker: bump scalameta/scalafmt from v3.8.1 to v3.8.2 (#5765) (4931da5)
  • docker: bump terraform-linters/tflint from v0.51.2 to v0.52.0 (#5858) (ae1dba5)
  • docker: bump yoheimuta/protolint from 0.50.2 to 0.50.3 (#5857) (913bd0d)
  • docker: bump zricethezav/gitleaks from v8.18.3 to v8.18.4 (#5768) (33bb4b4)
  • github-actions: bump actions/download-artifact from 4.1.7 to 4.1.8 (#5861) (ed72e66)
  • github-actions: bump actions/upload-artifact from 4.3.3 to 4.3.4 (#5860) (dd4313c)
  • github-actions: bump docker/build-push-action from 5 to 6 (#5770) (27170b8)
  • java: bump com.pinterest.ktlint:ktlint-cli in /dependencies/ktlint (#5849) (19c5fce)
  • npm: bump @​babel/eslint-parser in /dependencies (#5886) (387a2b5)
  • npm: bump @​babel/preset-react in /dependencies (#5740) (4eeb628)
  • npm: bump @​babel/preset-typescript in /dependencies (#5734) (de4b193)
  • npm: bump @​react-native/eslint-config in /dependencies (#5835) (28c228d)
  • npm: bump @​typescript-eslint/eslint-plugin in /dependencies (#5895) (7f5b018)

... (truncated)

Changelog

Sourced from super-linter/super-linter's changelog.

Changelog

6.8.0 (2024-07-31)

🚀 Features

🐛 Bugfixes

⬆️ Dependency updates

  • bundler: bump rubocop-minitest in /dependencies (#5875) (9751e62)
  • bundler: bump rubocop-performance in /dependencies (#5777) (763dcc4)
  • bundler: bump rubocop-rspec from 2.30.0 to 3.0.3 in /dependencies (#5878) (592d903)
  • dev-docker: bump node in /dev-dependencies (#5872) (587fe0a)
  • dev-npm: bump release-please in /dev-dependencies (#5754) (6bb3f78)
  • docker: bump alpine/helm from 3.14.4 to 3.15.3 (#5882) (b5bf9f2)
  • docker: bump alpine/terragrunt from 1.9.0 to 1.9.2 (#5883) (95feeac)
  • docker: bump dart from 3.4.2-sdk to 3.4.4-sdk (#5764) (b75f1cf)
  • docker: bump dotnet/sdk (#5873) (f068663)
  • docker: bump golangci/golangci-lint from v1.59.0 to v1.59.1 (#5748) (81ab76d)
  • docker: bump goreleaser/goreleaser from v1.26.2 to v2.1.0 (#5881) (d84d439)
  • docker: bump hashicorp/terraform from 1.8.4 to 1.9.2 (#5885) (d384e67)
  • docker: bump mstruebing/editorconfig-checker from v3.0.1 to v3.0.3 (#5856) (81196f4)
  • docker: bump python from 3.12.3-alpine3.20 to 3.12.4-alpine3.20 (#5884) (8a044b5)
  • docker: bump scalameta/scalafmt from v3.8.1 to v3.8.2 (#5765) (4931da5)
  • docker: bump terraform-linters/tflint from v0.51.2 to v0.52.0 (#5858) (ae1dba5)
  • docker: bump yoheimuta/protolint from 0.50.2 to 0.50.3 (#5857) (913bd0d)
  • docker: bump zricethezav/gitleaks from v8.18.3 to v8.18.4 (#5768) (33bb4b4)
  • github-actions: bump actions/download-artifact from 4.1.7 to 4.1.8 (#5861) (ed72e66)
  • github-actions: bump actions/upload-artifact from 4.3.3 to 4.3.4 (#5860) (dd4313c)
  • github-actions: bump docker/build-push-action from 5 to 6 (#5770) (27170b8)
  • java: bump com.pinterest.ktlint:ktlint-cli in /dependencies/ktlint (#5849) (19c5fce)
  • npm: bump @​babel/eslint-parser in /dependencies (#5886) (387a2b5)
  • npm: bump @​babel/preset-react in /dependencies (#5740) (4eeb628)
  • npm: bump @​babel/preset-typescript in /dependencies (#5734) (de4b193)
  • npm: bump @​react-native/eslint-config in /dependencies (#5835) (28c228d)

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the actions-minor group with 4 updates: [koalalab-inc/bolt](https://github.com/koalalab-inc/bolt), [actions/checkout](https://github.com/actions/checkout), [actions/upload-artifact](https://github.com/actions/upload-artifact) and [super-linter/super-linter](https://github.com/super-linter/super-linter).


Updates `koalalab-inc/bolt` from 1.5.0 to 1.6.2
- [Release notes](https://github.com/koalalab-inc/bolt/releases)
- [Commits](7bc45c5...b7388cf)

Updates `actions/checkout` from 4.1.1 to 4.1.7
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v4.1.1...692973e)

Updates `actions/upload-artifact` from 4.3.4 to 4.3.5
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@0b2256b...89ef406)

Updates `super-linter/super-linter` from 6.7.0 to 6.8.0
- [Release notes](https://github.com/super-linter/super-linter/releases)
- [Changelog](https://github.com/super-linter/super-linter/blob/main/CHANGELOG.md)
- [Commits](super-linter/super-linter@3fe03ab...b4515bd)

---
updated-dependencies:
- dependency-name: koalalab-inc/bolt
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-minor
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-minor
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-minor
- dependency-name: super-linter/super-linter
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Aug 5, 2024
Copy link
Contributor Author

dependabot bot commented on behalf of github Aug 12, 2024

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Aug 12, 2024
@dependabot dependabot bot deleted the dependabot/github_actions/actions-minor-11b5f1c146 branch August 12, 2024 18:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants