Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 1, 2024

Bumps the github-actions group with 11 updates in the / directory:

Package From To
actions/checkout 4.1.7 4.2.2
github/codeql-action 3.26.6 3.27.0
actions/setup-python 5.2.0 5.3.0
actions/cache 4.0.2 4.1.2
python-semantic-release/python-semantic-release 9.8.7 9.12.0
hynek/build-and-inspect-python-package 2.8.0 2.10.0
softprops/action-gh-release 2.0.8 2.0.9
pypa/gh-action-pypi-publish 1.10.0 1.11.0
docker/setup-buildx-action 3.6.1 3.7.1
docker/build-push-action 6.7.0 6.9.0
peter-evans/create-pull-request 6.1.0 7.0.5

Updates actions/checkout from 4.1.7 to 4.2.2

Release notes

Sourced from actions/checkout's releases.

v4.2.2

What's Changed

Full Changelog: actions/checkout@v4.2.1...v4.2.2

v4.2.1

What's Changed

New Contributors

Full Changelog: actions/checkout@v4.2.0...v4.2.1

v4.2.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v4.1.7...v4.2.0

Changelog

Sourced from actions/checkout's changelog.

Changelog

v4.2.2

v4.2.1

v4.2.0

v4.1.7

v4.1.6

v4.1.5

v4.1.4

v4.1.3

v4.1.2

v4.1.1

v4.1.0

... (truncated)

Commits

Updates github/codeql-action from 3.26.6 to 3.27.0

Release notes

Sourced from github/codeql-action's releases.

v3.27.0

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.27.0 - 22 Oct 2024

  • Bump the minimum CodeQL bundle version to 2.14.6. #2549
  • Fix an issue where the upload-sarif Action would fail with "upload-sarif post-action step failed: Input required and not supplied: token" when called in a composite Action that had a different set of inputs to the ones expected by the upload-sarif Action. #2557
  • Update default CodeQL bundle version to 2.19.2. #2552

See the full CHANGELOG.md for more information.

v3.26.13

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.26.13 - 14 Oct 2024

No user facing changes.

See the full CHANGELOG.md for more information.

v3.26.12

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.26.12 - 07 Oct 2024

  • Upcoming breaking change: Add a deprecation warning for customers using CodeQL version 2.14.5 and earlier. These versions of CodeQL were discontinued on 24 September 2024 alongside GitHub Enterprise Server 3.10, and will be unsupported by CodeQL Action versions 3.27.0 and later and versions 2.27.0 and later. #2520

    • If you are using one of these versions, please update to CodeQL CLI version 2.14.6 or later. For instance, if you have specified a custom version of the CLI using the 'tools' input to the 'init' Action, you can remove this input to use the default version.

    • Alternatively, if you want to continue using a version of the CodeQL CLI between 2.13.5 and 2.14.5, you can replace github/codeql-action/*@v3 by github/codeql-action/*@v3.26.11 and github/codeql-action/*@v2 by github/codeql-action/*@v2.26.11 in your code scanning workflow to ensure you continue using this version of the CodeQL Action.

See the full CHANGELOG.md for more information.

v3.26.11

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

... (truncated)

Changelog

Sourced from github/codeql-action's changelog.

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

[UNRELEASED]

No user facing changes.

3.27.0 - 22 Oct 2024

  • Bump the minimum CodeQL bundle version to 2.14.6. #2549
  • Fix an issue where the upload-sarif Action would fail with "upload-sarif post-action step failed: Input required and not supplied: token" when called in a composite Action that had a different set of inputs to the ones expected by the upload-sarif Action. #2557
  • Update default CodeQL bundle version to 2.19.2. #2552

3.26.13 - 14 Oct 2024

No user facing changes.

3.26.12 - 07 Oct 2024

  • Upcoming breaking change: Add a deprecation warning for customers using CodeQL version 2.14.5 and earlier. These versions of CodeQL were discontinued on 24 September 2024 alongside GitHub Enterprise Server 3.10, and will be unsupported by CodeQL Action versions 3.27.0 and later and versions 2.27.0 and later. #2520

    • If you are using one of these versions, please update to CodeQL CLI version 2.14.6 or later. For instance, if you have specified a custom version of the CLI using the 'tools' input to the 'init' Action, you can remove this input to use the default version.

    • Alternatively, if you want to continue using a version of the CodeQL CLI between 2.13.5 and 2.14.5, you can replace github/codeql-action/*@v3 by github/codeql-action/*@v3.26.11 and github/codeql-action/*@v2 by github/codeql-action/*@v2.26.11 in your code scanning workflow to ensure you continue using this version of the CodeQL Action.

3.26.11 - 03 Oct 2024

  • Upcoming breaking change: Add support for using actions/download-artifact@v4 to programmatically consume CodeQL Action debug artifacts.

    Starting November 30, 2024, GitHub.com customers will no longer be able to use actions/download-artifact@v3. Therefore, to avoid breakage, customers who programmatically download the CodeQL Action debug artifacts should set the CODEQL_ACTION_ARTIFACT_V4_UPGRADE environment variable to true and bump actions/download-artifact@v3 to actions/download-artifact@v4 in their workflows. The CodeQL Action will enable this behavior by default in early November and workflows that have not yet bumped to actions/download-artifact@v3 to actions/download-artifact@v4 will begin failing then.

    This change is currently unavailable for GitHub Enterprise Server customers, as actions/upload-artifact@v4 and actions/download-artifact@v4 are not yet compatible with GHES.

  • Update default CodeQL bundle version to 2.19.1. #2519

3.26.10 - 30 Sep 2024

  • We are rolling out a feature in September/October 2024 that sets up CodeQL using a bundle compressed with Zstandard. Our aim is to improve the performance of setting up CodeQL. #2502

3.26.9 - 24 Sep 2024

No user facing changes.

3.26.8 - 19 Sep 2024

  • Update default CodeQL bundle version to 2.19.0. #2483

3.26.7 - 13 Sep 2024

... (truncated)

Commits
  • 6624720 Merge pull request #2561 from github/update-v3.27.0-b35b023d9
  • ce7c2b5 Update changelog for v3.27.0
  • b35b023 Merge pull request #2552 from github/update-bundle/codeql-bundle-v2.19.2
  • dafc762 Merge pull request #2560 from github/aeisenberg/fix-required-checks
  • 0d1eb88 Remove ESLint from required checks
  • 0a30541 Merge pull request #2558 from github/dependabot/npm_and_yarn/npm-6515e6e328
  • 2a6a6ad Update checked-in dependencies
  • 26c18c2 Bump the npm group with 3 updates
  • 7080a68 Merge branch 'main' into update-bundle/codeql-bundle-v2.19.2
  • 63eb7bb Merge pull request #2551 from github/cklin/diff-informed-queries-feature
  • Additional commits viewable in compare view

Updates actions/setup-python from 5.2.0 to 5.3.0

Release notes

Sourced from actions/setup-python's releases.

v5.3.0

What's Changed

Bug Fixes:

Enhancements:

New Contributors

Full Changelog: actions/setup-python@v5...v5.3.0

Commits

Updates actions/cache from 4.0.2 to 4.1.2

Release notes

Sourced from actions/cache's releases.

v4.1.2

What's Changed

New Contributors

Full Changelog: actions/cache@v4...v4.1.2

v4.1.1

What's Changed

Full Changelog: actions/cache@v4.1.0...v4.1.1

v4.1.0

What's Changed

New Contributors

Full Changelog: actions/cache@v4.0.2...v4.1.0

Changelog

Sourced from actions/cache's changelog.

Releases

4.1.2

  • Add GitHub Enterprise Cloud instances hostname filters to inform API endpoint choices - #1474
  • Security fix: Bump braces from 3.0.2 to 3.0.3 - #1475

4.1.1

  • Restore original behavior of cache-hit output - #1467

4.1.0

  • Ensure cache-hit output is set when a cache is missed - #1404
  • Deprecate save-always input - #1452

4.0.2

  • Fixed restore fail-on-cache-miss not working.

4.0.1

  • Updated isGhes check

4.0.0

  • Updated minimum runner version support from node 12 -> node 20

3.3.3

  • Updates @​actions/cache to v3.2.3 to fix accidental mutated path arguments to getCacheVersion actions/toolkit#1378
  • Additional audit fixes of npm package(s)

3.3.2

  • Fixes bug with Azure SDK causing blob downloads to get stuck.

3.3.1

  • Reduced segment size to 128MB and segment timeout to 10 minutes to fail fast in case the cache download is stuck.

3.3.0

  • Added option to lookup cache without downloading it.

3.2.6

  • Fix zstd not being used after zstd version upgrade to 1.5.4 on hosted runners.

3.2.5

... (truncated)

Commits
  • 6849a64 Release 4.1.2 #1477
  • 5a1720c Merge branch 'Link-/prep-4.1.2' of https://github.com/actions/cache into Link...
  • d9fef48 Merge branch 'main' into Link-/prep-4.1.2
  • a50e8d0 Merge branch 'main' into Link-/prep-4.1.2
  • acc9ae5 Merge pull request #1481 from actions/dependabot/github_actions/actions/setup...
  • 1ea5f18 Merge branch 'main' into Link-/prep-4.1.2
  • cc679ff Merge branch 'main' into dependabot/github_actions/actions/setup-node-4
  • 366d43d Merge pull request #1483 from actions/dependabot/github_actions/github/codeql...
  • 02bf319 Bump github/codeql-action from 2 to 3
  • 6f6220b Merge branch 'main' into dependabot/github_actions/actions/setup-node-4
  • Additional commits viewable in compare view

Updates python-semantic-release/python-semantic-release from 9.8.7 to 9.12.0

Release notes

Sourced from python-semantic-release/python-semantic-release's releases.

v9.12.0 (2024-10-18)

Features

  • changelog: add autofit_text_width filter to template environment (#1062, 83e4b86)

Bug Fixes

  • changelog: ignore commit exclusion when a commit causes a version bump (e8f886e)

  • parser-angular: change Fixes commit type heading to Bug Fixes (#1064, 09e3a4d)

  • parser-emoji: enable the default bump level option (bc27995)

Documentation

  • changelog-templates: add definition & usage of autofit_text_width template filter (#1062, 83e4b86)

  • commit-parsers: add deprecation message for the tag parser (af94540)

  • configuration: add deprecation message for the tag parser (a83b7e4)


Detailed Changes: v9.11.1...v9.12.0

v9.11.1 (2024-10-15)

Bug Fixes

  • changelog: prevent custom template errors when components are in hidden folders (#1060, a7614b0)

Detailed Changes: python-semantic-release/python-semantic-release@v9.11.0...v9.11.1

v9.11.0 (2024-10-12)

Features

  • changelog: add convert_md_to_rst filter to changelog environment (#1055, c2e8831)

  • changelog: add default changelog in re-structured text format (#1055, c2e8831)

  • changelog: add default changelog template in reStructuredText format (#1055, c2e8831)

  • config: enable default changelog.insertion_flag based on output format (#1055, c2e8831)

  • config: enable target changelog filename to trigger RST output format (#1055, c2e8831)

... (truncated)

Changelog

Sourced from python-semantic-release/python-semantic-release's changelog.

CHANGELOG

v9.12.0 (2024-10-18)

Bug Fixes

  • fix(parser-emoji): enable the default bump level option (bc27995)

  • fix(changelog): ignore commit exclusion when a commit causes a version bump (e8f886e)

  • fix(parser-angular): change Fixes commit type heading to Bug Fixes (#1064)

  • test(fixtures): update expected changelog heading to Bug Fixes

  • test(unit): update expected changelog heading to Bug Fixes (09e3a4d)

Documentation

  • docs(configuration): add deprecation message for the tag parser (a83b7e4)

  • docs(commit-parsers): add deprecation message for the tag parser (af94540)

Features

  • feat(changelog): add autofit_text_width filter to template environment (#1062)

This change adds an equivalent style formatter that can apply a text alignment to a maximum width and also maintain an indent over paragraphs of text

  • docs(changelog-templates): add definition & usage of autofit_text_width template filter

  • test(changelog-context): add test cases to check autofit_text_width filter use (83e4b86)

v9.11.1 (2024-10-15)

Bug Fixes

  • fix(changelog): prevent custom template errors when components are in hidden folders (#1060) (a7614b0)

v9.11.0 (2024-10-12)

Features

  • feat(changelog): add default changelog template in reStructuredText format (#1055)

  • test(fixtures): update repo generation to create rst & md changelogs

... (truncated)

Commits
  • c1bcfdb 9.12.0
  • 83e4b86 feat(changelog): add autofit_text_width filter to template environment (#1...
  • d2c153a test: remove tag parser related test code
  • f0aa5f9 test(fixtures): remove tag parser related fixtures
  • a83b7e4 docs(configuration): add deprecation message for the tag parser
  • af94540 docs(commit-parsers): add deprecation message for the tag parser
  • e9dd7ce chore(config): deprecate legacy tag parser w/ configuration warning
  • df74202 refactor(cli): declutter logger output from redutant data
  • bf66e45 refactor(parser-tag): improve readability of log messages
  • fd381d4 refactor(parser-scipy): improve readability of log messages
  • Additional commits viewable in compare view

Updates hynek/build-and-inspect-python-package from 2.8.0 to 2.10.0

Release notes

Sourced from hynek/build-and-inspect-python-package's releases.

v2.10.0

Changed

v2.9.0

Changed

  • uv build is now used instead of the build package. Since the actual build of the packages is done by the packaging backend (the one you define in your pyproject.toml under build-system.build-backend -- for example, Setuptools or Hatchling), this should make no difference except for faster runs. #140
Changelog

Sourced from hynek/build-and-inspect-python-package's changelog.

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

Unreleased

2.10.0

Changed

2.9.0

Changed

  • uv build is now used instead of the build package. Since the actual build of the packages is done by the packaging backend (the one you define in your pyproject.toml under build-system.build-backend -- for example, Setuptools or Hatchling), this should make no difference except for faster runs. #140

2.8.0 - 2024-07-25

Changed

  • Use uv's new uv cache prune --ci to only cache downloaded files. This makes the cache smaller and faster to pack/unpack. #135

Fixed

  • Turns out, the default location of uv's cache cannot be cached and actions/cache fails silently with an opaque "Path(s) specified in the action for caching do(es) not exist, hence no cache is being saved." log message. We have moved the cache to /tmp. #135

2.7.0 - 2024-07-17

Added

  • A header before package contents in the summary. Especially useful together with a preceding build provenance attestation. #131

... (truncated)

Commits

Updates softprops/action-gh-release from 2.0.8 to 2.0.9

Release notes

Sourced from softprops/action-gh-release's releases.

v2.0.9

What's Changed

  • maintenance release with updated dependencies

New Contributors

Full Changelog: softprops/action-gh-release@v2...v2.0.9

Changelog

Sourced from softprops/action-gh-release's changelog.

2.0.9

  • maintenance release with updated dependencies

2.0.8

Other Changes 🔄

2.0.7

Bug fixes 🐛

Other Changes 🔄

2.0.6

  • maintenance release with updated dependencies

2.0.5

2.0.4

2.0.3

  • Declare make_latest as an input field in action.yml #419

2.0.2

  • Revisit approach to #384 making unresolved pattern failures opt-in #417

... (truncated)

Commits
  • e7a8f85 chore: release 2.0.9
  • 04afa13 chore(deps): bump actions/setup-node from 4.0.4 to 4.1.0 (#535)
  • 894468a chore(deps): bump actions/checkout from 4.2.1 to 4.2.2 (#534)
  • 3bd23aa chore(deps): bump @​types/node from 22.7.5 to 22.8.2 (#533)

Bumps the github-actions group with 11 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `4.1.7` | `4.2.2` |
| [github/codeql-action](https://github.com/github/codeql-action) | `3.26.6` | `3.27.0` |
| [actions/setup-python](https://github.com/actions/setup-python) | `5.2.0` | `5.3.0` |
| [actions/cache](https://github.com/actions/cache) | `4.0.2` | `4.1.2` |
| [python-semantic-release/python-semantic-release](https://github.com/python-semantic-release/python-semantic-release) | `9.8.7` | `9.12.0` |
| [hynek/build-and-inspect-python-package](https://github.com/hynek/build-and-inspect-python-package) | `2.8.0` | `2.10.0` |
| [softprops/action-gh-release](https://github.com/softprops/action-gh-release) | `2.0.8` | `2.0.9` |
| [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish) | `1.10.0` | `1.11.0` |
| [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `3.6.1` | `3.7.1` |
| [docker/build-push-action](https://github.com/docker/build-push-action) | `6.7.0` | `6.9.0` |
| [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) | `6.1.0` | `7.0.5` |



Updates `actions/checkout` from 4.1.7 to 4.2.2
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@692973e...11bd719)

Updates `github/codeql-action` from 3.26.6 to 3.27.0
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@4dd1613...6624720)

Updates `actions/setup-python` from 5.2.0 to 5.3.0
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](actions/setup-python@f677139...0b93645)

Updates `actions/cache` from 4.0.2 to 4.1.2
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](actions/cache@0c45773...6849a64)

Updates `python-semantic-release/python-semantic-release` from 9.8.7 to 9.12.0
- [Release notes](https://github.com/python-semantic-release/python-semantic-release/releases)
- [Changelog](https://github.com/python-semantic-release/python-semantic-release/blob/master/CHANGELOG.md)
- [Commits](python-semantic-release/python-semantic-release@708671d...c1bcfdb)

Updates `hynek/build-and-inspect-python-package` from 2.8.0 to 2.10.0
- [Release notes](https://github.com/hynek/build-and-inspect-python-package/releases)
- [Changelog](https://github.com/hynek/build-and-inspect-python-package/blob/main/CHANGELOG.md)
- [Commits](hynek/build-and-inspect-python-package@2dbbf2b...f01e4d0)

Updates `softprops/action-gh-release` from 2.0.8 to 2.0.9
- [Release notes](https://github.com/softprops/action-gh-release/releases)
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md)
- [Commits](softprops/action-gh-release@c062e08...e7a8f85)

Updates `pypa/gh-action-pypi-publish` from 1.10.0 to 1.11.0
- [Release notes](https://github.com/pypa/gh-action-pypi-publish/releases)
- [Commits](pypa/gh-action-pypi-publish@8a08d61...fb13cb3)

Updates `docker/setup-buildx-action` from 3.6.1 to 3.7.1
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](docker/setup-buildx-action@988b5a0...c47758b)

Updates `docker/build-push-action` from 6.7.0 to 6.9.0
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](docker/build-push-action@5cd11c3...4f58ea7)

Updates `peter-evans/create-pull-request` from 6.1.0 to 7.0.5
- [Release notes](https://github.com/peter-evans/create-pull-request/releases)
- [Commits](peter-evans/create-pull-request@c5a7806...5e91468)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: actions/setup-python
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: actions/cache
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: python-semantic-release/python-semantic-release
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: hynek/build-and-inspect-python-package
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: softprops/action-gh-release
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: pypa/gh-action-pypi-publish
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: docker/setup-buildx-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: docker/build-push-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: peter-evans/create-pull-request
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot requested a review from afuetterer as a code owner November 1, 2024 07:19
@dependabot dependabot bot added deps: github-actions Pull requests that update GitHub Actions code type: ci Continuous Integration labels Nov 1, 2024
@afuetterer
Copy link
Owner

@dependabot recreate

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Nov 11, 2024

Superseded by #198.

@dependabot dependabot bot closed this Nov 11, 2024
@dependabot dependabot bot deleted the dependabot/github_actions/github-actions-dca96cb67b branch November 11, 2024 12:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

deps: github-actions Pull requests that update GitHub Actions code type: ci Continuous Integration

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant