Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

gh-actions(deps): Bump the gh-actions-dependencies group with 6 updates #92

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 6, 2023

Bumps the gh-actions-dependencies group with 6 updates:

Package From To
actions/checkout 3 4
hynek/build-and-inspect-python-package 1.5.3 1.5.4
python-semantic-release/python-semantic-release 8.2.0 8.3.0
pypa/gh-action-pypi-publish 1.8.8 1.8.10
actions/setup-node 3 4
thedoctor0/zip-release 0.7.1 0.7.6

Updates actions/checkout from 3 to 4

Release notes

Sourced from actions/checkout's releases.

v4.0.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v3...v4.0.0

v3.6.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v3.5.3...v3.6.0

v3.5.3

What's Changed

New Contributors

Full Changelog: actions/checkout@v3...v3.5.3

v3.5.2

What's Changed

Full Changelog: actions/checkout@v3.5.1...v3.5.2

v3.5.1

What's Changed

New Contributors

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

v4.1.0

v4.0.0

v3.6.0

v3.5.3

v3.5.2

v3.5.1

v3.5.0

v3.4.0

v3.3.0

v3.2.0

v3.1.0

v3.0.2

... (truncated)

Commits

Updates hynek/build-and-inspect-python-package from 1.5.3 to 1.5.4

Release notes

Sourced from hynek/build-and-inspect-python-package's releases.

v1.5.4

Fixed

  • Stop trying to cache. Fixes Error: No file in /home/runner/work/pytest-cpp/pytest-cpp matched to [**/requirements.txt or **/pyproject.toml], make sure you have checked out the target repository #76
Changelog

Sourced from hynek/build-and-inspect-python-package's changelog.

1.5.4 - 2023-11-01

Fixed

  • Stop trying to cache. Fixes Error: No file in /home/runner/work/pytest-cpp/pytest-cpp matched to [**/requirements.txt or **/pyproject.toml], make sure you have checked out the target repository #76
Commits

Updates python-semantic-release/python-semantic-release from 8.2.0 to 8.3.0

Release notes

Sourced from python-semantic-release/python-semantic-release's releases.

v8.3.0 (2023-10-23)

Feature

  • feat(action): use composite action for semantic release (#692)

Co-authored-by: Bernard Cooke <[email protected]> (4648d87)

Changelog

Sourced from python-semantic-release/python-semantic-release's changelog.

v8.3.0 (2023-10-23)

Feature

  • feat(action): use composite action for semantic release (#692)

Co-authored-by: Bernard Cooke <[email protected]> (4648d87)

Commits

Updates pypa/gh-action-pypi-publish from 1.8.8 to 1.8.10

Release notes

Sourced from pypa/gh-action-pypi-publish's releases.

v1.8.10

🐛 What's Fixed

@​woodruffw fixed decoding OIDC claims in debug output on failure by applying correct padding to the encoded payload via pypa/gh-action-pypi-publish#177.

Full Diff: pypa/gh-action-pypi-publish@v1.8.9...v1.8.10

v1.8.9

💅 Cosmetic output improvements

🛠️ Internal dependencies

Full Diff: pypa/gh-action-pypi-publish@v1.8.8...v1.8.9

Commits
  • b7f401d Merge PR #177 into unstable/v1
  • ba3ecc9 oidc-exchange: fix padding
  • ade57f5 Merge PRs #174 #175 and #172 into unstable/v1
  • 637917e README: re-add "pro tip" language
  • 4864f13 README: use semantic callouts
  • 326f9ad oidc-exchange: add-trailing-comma
  • e5f0690 oidc-exchange: ignore a nested function
  • 8bdd0cc oidc-exchange: lintage
  • 71a0032 oidc-exchange: render claims if exchange fails
  • adef75a Bump cryptography from 41.0.2 to 41.0.3 in /requirements
  • Additional commits viewable in compare view

Updates actions/setup-node from 3 to 4

Release notes

Sourced from actions/setup-node's releases.

v4.0.0

What's Changed

In scope of this release we changed version of node runtime for action from node16 to node20 and updated dependencies in actions/setup-node#866

Besides, release contains such changes as:

New Contributors

Full Changelog: actions/setup-node@v3...v4.0.0

v3.8.2

What's Changed

Full Changelog: actions/setup-node@v3...v3.8.2

v3.8.1

What's Changed

In scope of this release, the filter was removed within the cache-save step by @​dmitry-shibanov in actions/setup-node#831. It is filtered and checked in the toolkit/cache library.

Full Changelog: actions/setup-node@v3...v3.8.1

v3.8.0

What's Changed

Bug fixes:

Feature implementations:

Documentation changes:

Update dependencies:

... (truncated)

Commits

Updates thedoctor0/zip-release from 0.7.1 to 0.7.6

Release notes

Sourced from thedoctor0/zip-release's releases.

0.7.6

  • Revert quotes for $INPUT_PATH parameter (#50)

0.7.5

0.7.3

  • Add support for 7z (#44)

0.7.2

  • Add double quotes around filenames, and paths (#47)
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the gh-actions-dependencies group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `3` | `4` |
| [hynek/build-and-inspect-python-package](https://github.com/hynek/build-and-inspect-python-package) | `1.5.3` | `1.5.4` |
| [python-semantic-release/python-semantic-release](https://github.com/python-semantic-release/python-semantic-release) | `8.2.0` | `8.3.0` |
| [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish) | `1.8.8` | `1.8.10` |
| [actions/setup-node](https://github.com/actions/setup-node) | `3` | `4` |
| [thedoctor0/zip-release](https://github.com/thedoctor0/zip-release) | `0.7.1` | `0.7.6` |


Updates `actions/checkout` from 3 to 4
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v3...v4)

Updates `hynek/build-and-inspect-python-package` from 1.5.3 to 1.5.4
- [Release notes](https://github.com/hynek/build-and-inspect-python-package/releases)
- [Changelog](https://github.com/hynek/build-and-inspect-python-package/blob/main/CHANGELOG.md)
- [Commits](hynek/build-and-inspect-python-package@v1.5.3...v1.5.4)

Updates `python-semantic-release/python-semantic-release` from 8.2.0 to 8.3.0
- [Release notes](https://github.com/python-semantic-release/python-semantic-release/releases)
- [Changelog](https://github.com/python-semantic-release/python-semantic-release/blob/master/CHANGELOG.md)
- [Commits](python-semantic-release/python-semantic-release@v8.2.0...v8.3.0)

Updates `pypa/gh-action-pypi-publish` from 1.8.8 to 1.8.10
- [Release notes](https://github.com/pypa/gh-action-pypi-publish/releases)
- [Commits](pypa/gh-action-pypi-publish@v1.8.8...v1.8.10)

Updates `actions/setup-node` from 3 to 4
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@v3...v4)

Updates `thedoctor0/zip-release` from 0.7.1 to 0.7.6
- [Release notes](https://github.com/thedoctor0/zip-release/releases)
- [Commits](TheDoctor0/zip-release@0.7.1...0.7.6)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gh-actions-dependencies
- dependency-name: hynek/build-and-inspect-python-package
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gh-actions-dependencies
- dependency-name: python-semantic-release/python-semantic-release
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gh-actions-dependencies
- dependency-name: pypa/gh-action-pypi-publish
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gh-actions-dependencies
- dependency-name: actions/setup-node
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gh-actions-dependencies
- dependency-name: thedoctor0/zip-release
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gh-actions-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
Copy link

codecov bot commented Nov 6, 2023

Codecov Report

Merging #92 (d025231) into main (3ad8547) will not change coverage.
The diff coverage is n/a.

@@            Coverage Diff            @@
##              main       #92   +/-   ##
=========================================
  Coverage   100.00%   100.00%           
=========================================
  Files          168       168           
  Lines         3768      3768           
  Branches       646       646           
=========================================
  Hits          3768      3768           

📣 Codecov offers a browser extension for seamless coverage viewing on GitHub. Try it in Chrome or Firefox today!

@@ -43,7 +43,7 @@ jobs:
git add python_semantic_release_templates
git config --global tag.gpgSign true
- name: Python Semantic Release
uses: python-semantic-release/python-semantic-release@v8.2.0 # 8.3.0 has a bug in the version output variable
uses: python-semantic-release/python-semantic-release@v8.3.0 # 8.3.0 has a bug in the version output variable
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This will need to be reverted.

@nfelt14
Copy link
Collaborator

nfelt14 commented Nov 6, 2023

@dependabot ignore python-semantic-release/python-semantic-release minor version

Copy link
Contributor Author

dependabot bot commented on behalf of github Nov 6, 2023

OK, I won't notify you about version 8.3.x of python-semantic-release/python-semantic-release again, unless you unignore it.

Copy link
Contributor Author

dependabot bot commented on behalf of github Nov 6, 2023

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Nov 6, 2023
@dependabot dependabot bot deleted the dependabot/github_actions/gh-actions-dependencies-07dca848ef branch November 6, 2023 21:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant