From d74a35728fd859edec380a4df93b690a6b78ac98 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 11 Nov 2024 09:40:19 +0100 Subject: [PATCH] Bump the github-action-dependencies group across 1 directory with 5 updates (#430) Bumps the github-action-dependencies group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [google-github-actions/auth](https://github.com/google-github-actions/auth) | `2.1.5` | `2.1.7` | | [actions/setup-python](https://github.com/actions/setup-python) | `5.2.0` | `5.3.0` | | [crazy-max/ghaction-github-labeler](https://github.com/crazy-max/ghaction-github-labeler) | `5.0.0` | `5.1.0` | | [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish) | `1.10.0` | `1.11.0` | | [SonarSource/sonarcloud-github-action](https://github.com/sonarsource/sonarcloud-github-action) | `3.0.0` | `3.1.0` | Updates `google-github-actions/auth` from 2.1.5 to 2.1.7 - [Release notes](https://github.com/google-github-actions/auth/releases) - [Changelog](https://github.com/google-github-actions/auth/blob/main/CHANGELOG.md) - [Commits](https://github.com/google-github-actions/auth/compare/v2.1.5...v2.1.7) Updates `actions/setup-python` from 5.2.0 to 5.3.0 - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](https://github.com/actions/setup-python/compare/v5.2.0...v5.3.0) Updates `crazy-max/ghaction-github-labeler` from 5.0.0 to 5.1.0 - [Release notes](https://github.com/crazy-max/ghaction-github-labeler/releases) - [Commits](https://github.com/crazy-max/ghaction-github-labeler/compare/v5.0.0...v5.1.0) Updates `pypa/gh-action-pypi-publish` from 1.10.0 to 1.11.0 - [Release notes](https://github.com/pypa/gh-action-pypi-publish/releases) - [Commits](https://github.com/pypa/gh-action-pypi-publish/compare/v1.10.0...v1.11.0) Updates `SonarSource/sonarcloud-github-action` from 3.0.0 to 3.1.0 - [Release notes](https://github.com/sonarsource/sonarcloud-github-action/releases) - [Commits](https://github.com/sonarsource/sonarcloud-github-action/compare/v3.0.0...v3.1.0) --- updated-dependencies: - dependency-name: google-github-actions/auth dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-action-dependencies - dependency-name: actions/setup-python dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-action-dependencies - dependency-name: crazy-max/ghaction-github-labeler dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-action-dependencies - dependency-name: pypa/gh-action-pypi-publish dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-action-dependencies - dependency-name: SonarSource/sonarcloud-github-action dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-action-dependencies ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- .github/workflows/docker-build.yml | 2 +- .github/workflows/docs.yml | 2 +- .github/workflows/integration-test.yml | 2 +- .github/workflows/labeler.yml | 2 +- .github/workflows/release.yml | 6 +++--- .github/workflows/tests.yml | 6 +++--- 6 files changed, 10 insertions(+), 10 deletions(-) diff --git a/.github/workflows/docker-build.yml b/.github/workflows/docker-build.yml index a884be1c..10c32143 100644 --- a/.github/workflows/docker-build.yml +++ b/.github/workflows/docker-build.yml @@ -29,7 +29,7 @@ jobs: - name: "Authenticate to Google Cloud" id: "auth" - uses: "google-github-actions/auth@v2.1.5" + uses: "google-github-actions/auth@v2.1.7" with: workload_identity_provider: "projects/848539402404/locations/global/workloadIdentityPools/gh-actions/providers/gh-actions" service_account: "gh-actions-dapla-metadata@artifact-registry-5n.iam.gserviceaccount.com" diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml index 68f9e9d3..b1008042 100644 --- a/.github/workflows/docs.yml +++ b/.github/workflows/docs.yml @@ -34,7 +34,7 @@ jobs: poetry --version - name: Set up Python - uses: actions/setup-python@v5.2.0 + uses: actions/setup-python@v5.3.0 with: python-version: "3.11" cache: "poetry" diff --git a/.github/workflows/integration-test.yml b/.github/workflows/integration-test.yml index 0f97191d..9eb11d4f 100644 --- a/.github/workflows/integration-test.yml +++ b/.github/workflows/integration-test.yml @@ -28,7 +28,7 @@ jobs: - name: "Authenticate to Google Cloud" id: "auth" - uses: "google-github-actions/auth@v2.1.5" + uses: "google-github-actions/auth@v2.1.7" with: workload_identity_provider: "projects/906675412832/locations/global/workloadIdentityPools/ssb-identity-pool/providers/github-oidc-provider" service_account: "gh-ssb@nais-management-b3a7.iam.gserviceaccount.com" diff --git a/.github/workflows/labeler.yml b/.github/workflows/labeler.yml index de14cc5f..1e31b19b 100644 --- a/.github/workflows/labeler.yml +++ b/.github/workflows/labeler.yml @@ -20,6 +20,6 @@ jobs: uses: actions/checkout@v4 - name: Run Labeler - uses: crazy-max/ghaction-github-labeler@v5.0.0 + uses: crazy-max/ghaction-github-labeler@v5.1.0 with: skip-delete: true diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 5164ee5a..0c1cb7cf 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -28,7 +28,7 @@ jobs: fetch-depth: 2 - name: Set up Python - uses: actions/setup-python@v5.2.0 + uses: actions/setup-python@v5.3.0 with: python-version: "3.11" @@ -68,11 +68,11 @@ jobs: - name: Publish package on PyPI if: steps.check-version.outputs.tag - uses: pypa/gh-action-pypi-publish@v1.10.0 + uses: pypa/gh-action-pypi-publish@v1.11.0 - name: Publish package on TestPyPI if: (!steps.check-version.outputs.tag) - uses: pypa/gh-action-pypi-publish@v1.10.0 + uses: pypa/gh-action-pypi-publish@v1.11.0 with: repository-url: https://test.pypi.org/legacy/ diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml index e6553231..5b94743a 100644 --- a/.github/workflows/tests.yml +++ b/.github/workflows/tests.yml @@ -41,7 +41,7 @@ jobs: uses: actions/checkout@v4 - name: Set up Python ${{ matrix.python }} - uses: actions/setup-python@v5.2.0 + uses: actions/setup-python@v5.3.0 with: python-version: ${{ matrix.python }} cache: "pip" # caching pip dependencies @@ -125,7 +125,7 @@ jobs: fetch-depth: 0 # Shallow clones should be disabled for a better relevancy of analysis - name: Set up Python - uses: actions/setup-python@v5.2.0 + uses: actions/setup-python@v5.3.0 with: python-version: "3.12" cache: "pip" # caching pip dependencies @@ -173,4 +173,4 @@ jobs: SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }} # No need to run SonarCloud analysis if dependabot update or token not defined if: env.SONAR_TOKEN != '' && (github.actor != 'dependabot[bot]') - uses: SonarSource/sonarcloud-github-action@v3.0.0 + uses: SonarSource/sonarcloud-github-action@v3.1.0