-
Notifications
You must be signed in to change notification settings - Fork 0
Description
Dependabot Update
Bumps the github-actions group with 6 updates:
| Package | From | To |
|---|---|---|
| actions/checkout | 4 |
6 |
| actions/github-script | 7 |
8 |
| actions/create-github-app-token | 1 |
2 |
| actions/attest-build-provenance | 2 |
3 |
| helm/chart-testing-action | 2.7.0 |
2.8.0 |
| peter-evans/create-or-update-comment | 4 |
5 |
Updates actions/checkout from 4 to 6
Release notes
Sourced from actions/checkout's releases.
v6.0.0
What's Changed
- Update README to include Node.js 24 support details and requirements by
@salmanmkcin actions/checkout#2248- Persist creds to a separate file by
@ericsciplein actions/checkout#2286- v6-beta by
@ericsciplein actions/checkout#2298- update readme/changelog for v6 by
@ericsciplein actions/checkout#2311Full Changelog: actions/checkout@v5.0.0...v6.0.0
v6-beta
What's Changed
Updated persist-credentials to store the credentials under
$RUNNER_TEMPinstead of directly in the local git config.This requires a minimum Actions Runner version of v2.329.0 to access the persisted credentials for Docker container action scenarios.
v5.0.1
What's Changed
- Port v6 cleanup to v5 by
@ericsciplein actions/checkout#2301Full Changelog: actions/checkout@v5...v5.0.1
v5.0.0
What's Changed
- Update actions checkout to use node 24 by
@salmanmkcin actions/checkout#2226- Prepare v5.0.0 release by
@salmanmkcin actions/checkout#2238
⚠️ Minimum Compatible Runner Versionv2.327.1
Release NotesMake sure your runner is updated to this version or newer to use this release.
Full Changelog: actions/checkout@v4...v5.0.0
v4.3.1
What's Changed
- Port v6 cleanup to v4 by
@ericsciplein actions/checkout#2305Full Changelog: actions/checkout@v4...v4.3.1
v4.3.0
What's Changed
- docs: update README.md by
@motssin actions/checkout#1971- Add internal repos for checking out multiple repositories by
@mouismailin actions/checkout#1977- Documentation update - add recommended permissions to Readme by
@benwellsin actions/checkout#2043
... (truncated)
Changelog
Sourced from actions/checkout's changelog.
Changelog
v6.0.2
- Fix tag handling: preserve annotations and explicit fetch-tags by
@ericsciplein actions/checkout#2356v6.0.1
- Add worktree support for persist-credentials includeIf by
@ericsciplein actions/checkout#2327v6.0.0
- Persist creds to a separate file by
@ericsciplein actions/checkout#2286- Update README to include Node.js 24 support details and requirements by
@salmanmkcin actions/checkout#2248v5.0.1
- Port v6 cleanup to v5 by
@ericsciplein actions/checkout#2301v5.0.0
- Update actions checkout to use node 24 by
@salmanmkcin actions/checkout#2226v4.3.1
- Port v6 cleanup to v4 by
@ericsciplein actions/checkout#2305v4.3.0
- docs: update README.md by
@motssin actions/checkout#1971- Add internal repos for checking out multiple repositories by
@mouismailin actions/checkout#1977- Documentation update - add recommended permissions to Readme by
@benwellsin actions/checkout#2043- Adjust positioning of user email note and permissions heading by
@joshmgrossin actions/checkout#2044- Update README.md by
@nebuk89in actions/checkout#2194- Update CODEOWNERS for actions by
@TingluoHuangin actions/checkout#2224- Update package dependencies by
@salmanmkcin actions/checkout#2236v4.2.2
url-helper.tsnow leverages well-known environment variables by@jww3in actions/checkout#1941- Expand unit test coverage for
isGhesby@jww3in actions/checkout#1946v4.2.1
- Check out other refs/* by commit if provided, fall back to ref by
@orhantoyin actions/checkout#1924v4.2.0
- Add Ref and Commit outputs by
@lucacomein actions/checkout#1180- Dependency updates by
@dependabot- actions/checkout#1777, actions/checkout#1872v4.1.7
- Bump the minor-npm-dependencies group across 1 directory with 4 updates by
@dependabotin actions/checkout#1739- Bump actions/checkout from 3 to 4 by
@dependabotin actions/checkout#1697- Check out other refs/* by commit by
@orhantoyin actions/checkout#1774- Pin actions/checkout's own workflows to a known, good, stable version. by
@jww3in actions/checkout#1776v4.1.6
- Check platform to set archive extension appropriately by
@cory-millerin actions/checkout#1732
... (truncated)
Commits
8e8c483Clarify v6 README (#2328)033fa0dAdd worktree support for persist-credentials includeIf (#2327)c2d88d3Update all references from v5 and v4 to v6 (#2314)1af3b93update readme/changelog for v6 (#2311)71cf226v6-beta (#2298)069c695Persist creds to a separate file (#2286)ff7abcdUpdate README to include Node.js 24 support details and requirements (#2248)08c6903Prepare v5.0.0 release (#2238)9f26565Update actions checkout to use node 24 (#2226)- See full diff in compare view
Updates actions/github-script from 7 to 8
Release notes
Sourced from actions/github-script's releases.
v8.0.0
What's Changed
- Update Node.js version support to 24.x by
@salmanmkcin actions/github-script#637- README for updating actions/github-script from v7 to v8 by
@sneha-kripin actions/github-script#653
⚠️ Minimum Compatible Runner Versionv2.327.1
Release NotesMake sure your runner is updated to this version or newer to use this release.
New Contributors
@salmanmkcmade their first contribution in actions/github-script#637@sneha-kripmade their first contribution in actions/github-script#653Full Changelog: actions/github-script@v7.1.0...v8.0.0
v7.1.0
What's Changed
- Upgrade husky to v9 by
@benelanin actions/github-script#482- Add workflow file for publishing releases to immutable action package by
@Jcambassin actions/github-script#485- Upgrade IA Publish by
@Jcambassin actions/github-script#486- Fix workflow status badges by
@joshmgrossin actions/github-script#497- Update usage of
actions/upload-artifactby@joshmgrossin actions/github-script#512- Clear up package name confusion by
@joshmgrossin actions/github-script#514- Update dependencies with
npm audit fixby@joshmgrossin actions/github-script#515- Specify that the used script is JavaScript by
@timotkin actions/github-script#478- chore: Add Dependabot for NPM and Actions by
@nschonniin actions/github-script#472- Define
permissionsin workflows and update actions by@joshmgrossin actions/github-script#531- chore: Add Dependabot for .github/actions/install-dependencies by
@nschonniin actions/github-script#532- chore: Remove .vscode settings by
@nschonniin actions/github-script#533- ci: Use github/setup-licensed by
@nschonniin actions/github-script#473- make octokit instance available as octokit on top of github, to make it easier to seamlessly copy examples from GitHub rest api or octokit documentations by
@iamstarkovin actions/github-script#508- Remove
octokitREADME updates for v7 by@joshmgrossin actions/github-script#557- docs: add "exec" usage examples by
@neilimein actions/github-script#546- Bump ruby/setup-ruby from 1.213.0 to 1.222.0 by
@dependabot[bot] in actions/github-script#563- Bump ruby/setup-ruby from 1.222.0 to 1.229.0 by
@dependabot[bot] in actions/github-script#575- Clearly document passing inputs to the
scriptby@joshmgrossin actions/github-script#603- Update README.md by
@nebuk89in actions/github-script#610New Contributors
@benelanmade their first contribution in actions/github-script#482@Jcambassmade their first contribution in actions/github-script#485@timotkmade their first contribution in actions/github-script#478@iamstarkovmade their first contribution in actions/github-script#508@neilimemade their first contribution in actions/github-script#546@nebuk89made their first contribution in actions/github-script#610Full Changelog: actions/github-script@v7...v7.1.0
... (truncated)
Commits
ed59741Merge pull request #653 from actions/sneha-krip/readme-for-v82dc352eBold minimum Actions Runner version in README01e118cUpdate README for Node 24 runtime requirements8b222acApply suggestion from@salmanmkcadc0eeaREADME for updating actions/github-script from v7 to v820fe497Merge pull request #637 from actions/node24e7b7f22update licenses2c81ba0Update Node.js version support to 24.x- See full diff in compare view
Updates actions/create-github-app-token from 1 to 2
Release notes
Sourced from actions/create-github-app-token's releases.
v2.0.0
2.0.0 (2025-04-03)
BREAKING CHANGES
- Removed deprecated inputs (
app_id,private_key,skip_token_revoke) and madeapp-idandprivate-keyrequired in the action configuration.v1.12.0
1.12.0 (2025-03-27)
Features
v1.11.7
1.11.7 (2025-03-20)
Bug Fixes
v1.11.6
1.11.6 (2025-03-03)
Bug Fixes
v1.11.5
1.11.5 (2025-02-15)
Bug Fixes
... (truncated)
Commits
29824e6build(release): 2.2.1 [skip ci]b212e6afix(deps): bump the production-dependencies group with 2 updates (#311)8efbf9bci: create stale workflow (#309)7e473efbuild(release): 2.2.0 [skip ci]dce3be8fix(deps): bump p-retry from 6.2.1 to 7.1.0 (#294)5480f43fix(deps): bump glob from 10.4.5 to 10.5.0 (#305)d90aa53feat: update permission inputs (#296)55e2a4bfix(deps): bump the production-dependencies group with 2 updates (#292)cc6f999ci(test): trigger on merge_group (#308)40fa6b5build(deps-dev): bump@sinonjs/fake-timersfrom 14.0.0 to 15.0.0 (#295)- Additional commits viewable in compare view
Updates actions/attest-build-provenance from 2 to 3
Release notes
Sourced from actions/attest-build-provenance's releases.
v3.0.0
What's Changed
- Adjust node max-http-header-size setting by
@bdehamerin actions/attest-build-provenance#687- Bump actions/attest from v2.4.0 to v3.0.0 by
@bdehamerin actions/attest-build-provenance#691
- Bump to node24 runtime
- Improved checksum parsing
- Bump attest-build-provenance/predicate to v2.0.0 by
@bdehamerin actions/attest-build-provenance#693
- Bump to node24 runtime by
@bdehamerin actions/attest-build-provenance#692
⚠️ Minimum Compatible Runner Versionv2.327.1 Release Notes
Make sure your runner is updated to this version or newer to use this release.
Full Changelog: actions/attest-build-provenance@v2.4.0...v3.0.0
v2.4.0
What's Changed
- Bump undici from 5.28.5 to 5.29.0 by
@dependabotin actions/attest-build-provenance#633- Bump actions/attest from 2.3.0 to 2.4.0 by
@bdehamerin actions/attest-build-provenance#654
- Includes support for the new well-known summary file which will accumulate paths to all attestations generated in a given workflow run
Full Changelog: actions/attest-build-provenance@v2.3.0...v2.4.0
v2.3.0
What's Changed
- Bump
actions/attestfrom 2.2.1 to 2.3.0 by@bdehamerin actions/attest-build-provenance#615
- Updates
@sigstore/ocifrom 0.4.0 to 0.5.0Full Changelog: actions/attest-build-provenance@v2.2.3...v2.3.0
v2.2.3
What's Changed
- Pin actions/attest reference by commit SHA by
@bdehamerin actions/attest-build-provenance#493Full Changelog: actions/attest-build-provenance@v2.2.2...v2.2.3
v2.2.2
What's Changed
- Bump predicate action from 1.1.4 to 1.1.5 by
@bdehamerin actions/attest-build-provenance#485
- Bump
@actions/attestfrom 1.5.0 to 1.6.0 by@bdehamerin actions/attest-build-provenance#484
- Update buildSLSAProvenancePredicate to populate
workflow.reffield from therefclaim in the OIDC token (actions/toolkit#1969)Full Changelog: actions/attest-build-provenance@v2.2.1...v2.2.2
v2.2.1
... (truncated)
Commits
977bb37bump attest-build-provenance/predicate to v2.0.0 (#693)864457aBump to node24 runtime (#692)57aa2b0bump actions/attest from v2.4.0 to v3.0.0 (#691)8ee7163refactor eslint config (#690)91ca1c2Bump actions/checkout from 4.1.1 to 5.0.0 (#684)ff19f40custom node max-http-header-size (#687)8bd83f1pin workflow deps (#683)f0878deBump the npm-development group with 4 updates (#681)463e6dfBump the npm-development group with 3 updates (#678)fef91c1Bump the npm-development group with 6 updates (#673)- Additional commits viewable in compare view
Updates helm/chart-testing-action from 2.7.0 to 2.8.0
Release notes
Sourced from helm/chart-testing-action's releases.
v2.8.0
What's Changed
- Bump the actions group across 1 directory with 4 updates by
@dependabot[bot] in helm/chart-testing-action#171- Fix the broken link for GitHub Help Documentation by
@subramani95in helm/chart-testing-action#174- bump ct and yamale version by
@cpanatoin helm/chart-testing-action#178- Bump actions/checkout from 4.2.2 to 5.0.0 by
@dependabot[bot] in helm/chart-testing-action#181- Bump actions/setup-python from 5.4.0 to 6.0.0 by
@dependabot[bot] in helm/chart-testing-action#179- Bump the actions group across 1 directory with 2 updates by
@dependabot[bot] in helm/chart-testing-action#183- Use uv instead of python venv by
@nikolaikin helm/chart-testing-action#172- Bump sigstore/cosign-installer from 3.8.1 to 4.0.0 by
@dependabot[bot] in helm/chart-testing-action#184New Contributors
@subramani95made their first contribution in helm/chart-testing-action#174@nikolaikmade their first contribution in helm/chart-testing-action#172Full Changelog: helm/chart-testing-action@v2...v2.8.0
Commits
6ec842cBump sigstore/cosign-installer from 3.8.1 to 4.0.0 (#184)4ea74f6Use uv instead of python venv (#172)b0c0606Bump the actions group across 1 directory with 2 updates (#183)0bfa5c0Bump actions/setup-python from 5.4.0 to 6.0.0 (#179)e27de75Bump actions/checkout from 4.2.2 to 5.0.0 (#181)2fe8321bump ct and yamale version (#178)0941a6bFix the broken link for GitHub Help Documentation (#174)c71c0c7Bump the actions group across 1 directory with 4 updates (#171)- See full diff in compare view
Updates peter-evans/create-or-update-comment from 4 to 5
Release notes
Sourced from peter-evans/create-or-update-comment's releases.
Create or Update Comment v5.0.0
⚙️ Requires Actions Runner v2.327.1 or later if you are using a self-hosted runner for Node 24 support.
What's Changed
- build(deps): bump peter-evans/create-or-update-comment from 3 to 4 by
@dependabot[bot] in peter-evans/create-or-update-comment#307- build(deps-dev): bump
@types/nodefrom 18.19.8 to 18.19.11 by@dependabot[bot] in peter-evans/create-or-update-comment#308- build(deps): bump peter-evans/slash-command-dispatch from 3 to 4 by
@dependabot[bot] in peter-evans/create-or-update-comment#310- build(deps): bump peter-evans/create-pull-request from 5 to 6 by
@dependabot[bot] in peter-evans/create-or-update-comment#309- build(deps-dev): bump
@types/nodefrom 18.19.11 to 18.19.14 by@dependabot[bot] in peter-evans/create-or-update-comment#311- build(deps-dev): bump prettier from 3.2.4 to 3.2.5 by
@dependabot[bot] in peter-evans/create-or-update-comment#312- build(deps-dev): bump eslint-plugin-jest from 27.6.3 to 27.8.0 by
@dependabot[bot] in peter-evans/create-or-update-comment#313- build(deps-dev): bump
@types/nodefrom 18.19.14 to 18.19.15 by@dependabot[bot] in peter-evans/create-or-update-comment#314- build(deps-dev): bump
@types/nodefrom 18.19.15 to 18.19.17 by@dependabot[bot] in peter-evans/create-or-update-comment#315- build(deps-dev): bump eslint-plugin-jest from 27.8.0 to 27.9.0 by
@dependabot[bot] in peter-evans/create-or-update-comment#316- build(deps-dev): bump eslint from 8.56.0 to 8.57.0 by
@dependabot[bot] in peter-evans/create-or-update-comment#318- build(deps-dev): bump
@types/nodefrom 18.19.17 to 18.19.19 by@dependabot[bot] in peter-evans/create-or-update-comment#319- build(deps-dev): bump eslint-plugin-github from 4.10.1 to 4.10.2 by
@dependabot[bot] in peter-evans/create-or-update-comment#320- build(deps-dev): bump
@types/nodefrom 18.19.19 to 18.19.21 by@dependabot[bot] in peter-evans/create-or-update-comment#321- build(deps-dev): bump
@types/nodefrom 18.19.21 to 18.19.23 by@dependabot[bot] in peter-evans/create-or-update-comment#322- build(deps-dev): bump
@types/nodefrom 18.19.23 to 18.19.26 by@dependabot[bot] in peter-evans/create-or-update-comment#325- build(deps-dev): bump
@types/nodefrom 18.19.26 to 18.19.29 by@dependabot[bot] in peter-evans/create-or-update-comment#326- build(deps-dev): bump
@types/nodefrom 18.19.29 to 18.19.31 by@dependabot[bot] in peter-evans/create-or-update-comment#327- build(deps): bump chuhlomin/render-template from 1.9 to 1.10 by
@dependabot[bot] in peter-evans/create-or-update-comment#328- build(deps-dev): bump
@types/nodefrom 18.19.31 to 18.19.32 by@dependabot[bot] in peter-evans/create-or-update-comment#329- build(deps-dev): bump
@types/nodefrom 18.19.32 to 18.19.33 by@dependabot[bot] in peter-evans/create-or-update-comment#330- build(deps-dev): bump prettier from 3.2.5 to 3.3.0 by
@dependabot[bot] in peter-evans/create-or-update-comment#332- build(deps-dev): bump
@types/nodefrom 18.19.33 to 18.19.34 by@dependabot[bot] in peter-evans/create-or-update-comment#333- build(deps-dev): bump prettier from 3.3.0 to 3.3.2 by
@dependabot[bot] in peter-evans/create-or-update-comment#334- build(deps-dev): bump braces from 3.0.2 to 3.0.3 by
@dependabot[bot] in peter-evans/create-or-update-comment#335- build(deps-dev): bump ws from 7.5.9 to 7.5.10 by
@dependabot[bot] in peter-evans/create-or-update-comment#336- build(deps-dev): bump
@types/nodefrom 18.19.34 to 18.19.36 by@dependabot[bot] in peter-evans/create-or-update-comment#337- build(deps-dev): bump
@types/nodefrom 18.19.36 to 18.19.39 by@dependabot[bot] in peter-evans/create-or-update-comment#338- build(deps-dev): bump
@types/nodefrom 18.19.39 to 18.19.40 by@dependabot[bot] in peter-evans/create-or-update-comment#340- build(deps-dev): bump prettier from 3.3.2 to 3.3.3 by
@dependabot[bot] in peter-evans/create-or-update-comment#339- build(deps-dev): bump
@types/nodefrom 18.19.40 to 18.19.42 by@dependabot[bot] in peter-evans/create-or-update-comment#342- build(deps-dev): bump eslint-plugin-prettier from 5.1.3 to 5.2.1 by
@dependabot[bot] in peter-evans/create-or-update-comment#343- build(deps-dev): bump
@types/nodefrom 18.19.42 to 18.19.43 by@dependabot[bot] in peter-evans/create-or-update-comment#345- build(deps-dev): bump
@types/nodefrom 18.19.43 to 18.19.44 by@dependabot[bot] in peter-evans/create-or-update-comment#347- build(deps-dev): bump
@types/nodefrom 18.19.44 to 18.19.45 by@dependabot[bot] in peter-evans/create-or-update-comment#348- build(deps-dev): bump
@types/nodefrom 18.19.45 to 18.19.47 by@dependabot[bot] in peter-evans/create-or-update-comment#349- build(deps-dev): bump
@types/nodefrom 18.19.47 to 18.19.49 by@dependabot[bot] in peter-evans/create-or-update-comment#350- build(deps): bump peter-evans/create-pull-request from 6 to 7 by
@dependabot[bot] in peter-evans/create-or-update-comment#351- build(deps-dev): bump
@types/nodefrom 18.19.49 to 18.19.50 by@dependabot[bot] in peter-evans/create-or-update-comment#352- build(deps-dev): bump eslint from 8.57.0 to 8.57.1 by
@dependabot[bot] in peter-evans/create-or-update-comment#353- build(deps-dev): bump
@vercel/nccfrom 0.38.1 to 0.38.2 by@dependabot[bot] in peter-evans/create-or-update-comment#354- build(deps-dev): bump
@types/nodefrom 18.19.50 to 18.19.51 by@dependabot[bot] in peter-evans/create-or-update-comment#355- Update distribution by
@actions-botin peter-evans/create-or-update-comment#356- build(deps-dev): bump
@types/nodefrom 18.19.51 to 18.19.54 by@dependabot[bot] in peter-evans/create-or-update-comment#357- build(deps-dev): bump
@types/nodefrom 18.19.54 to 18.19.55 by@dependabot[bot] in peter-evans/create-or-update-comment#359- build(deps): bump
@actions/corefrom 1.10.1 to 1.11.1 by@dependabot[bot] in peter-evans/create-or-update-comment#360
... (truncated)
Commits
e8674b0feat: v5 (#439)fffe59ebuild(deps-dev): bump@types/nodefrom 18.19.127 to 18.19.129 (#438)076d572build(deps-dev): bump@types/nodefrom 18.19.126 to 18.19.127 (#437)86a2645build(deps-dev): bump@vercel/nccfrom 0.38.3 to 0.38.4 (#436)be17e0cbuild(deps-dev): bump@types/nodefrom 18.19.124 to 18.19.126 (#435)ef75eaebuild(deps-dev): bump@types/nodefrom 18.19.123 to 18.19.124 (#433)82a7ad0build(deps): bump actions/setup-node from 4 to 5 (#432)f7c845dbuild(deps-dev): bump@types/nodefrom 18.19.122 to 18.19.123 (#430)5da8e07build(deps-dev): bump eslint-plugin-prettier from 5.5.3 to 5.5.4 (#428)2de7f66build(deps-dev): bump@types/nodefrom 18.19.121 to 18.19.122 (#427)- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions
Pull Request
- PR: ci: bump the github-actions group with 6 updates #147
- Author: @dependabot[bot]
- URL: ci: bump the github-actions group with 6 updates #147
This issue was automatically created to track the Dependabot update.