dependabot: bump lycheeverse/lychee-action from 1.2.0 to 2.0.2

[dependabot]

Bumps lycheeverse/lychee-action from 1.2.0 to 2.0.2.

Release notes

Sourced from lycheeverse/lychee-action's releases.

Version 2.0.2

What's Changed

• Fix a typos by @​szepeviktor in lycheeverse/lychee-action#257
• Document and use correct permissions in the GitHub workflows by @​dscho in lycheeverse/lychee-action#258
• Add security policy by @​mondeja in lycheeverse/lychee-action#259

New Contributors

• @​szepeviktor made their first contribution in lycheeverse/lychee-action#257
• @​mondeja made their first contribution in lycheeverse/lychee-action#259

Full Changelog: lycheeverse/lychee-action@v2...v2.0.2

Version 2.0.1

What's Changed

• Don't remove the lychee config file by @​dmathieu in lycheeverse/lychee-action#255
• Bump lycheeverse/lychee-action from 1 to 2 by @​dependabot in lycheeverse/lychee-action#252
• Fix variable name in docs by @​kdeldycke in lycheeverse/lychee-action#253

New Contributors

• @​dmathieu made their first contribution in lycheeverse/lychee-action#255

Full Changelog: lycheeverse/lychee-action@v2...v2.0.1

Version 2.0.0

Breaking Changes

Note: This release improves the action's robustness by changing default behaviors. Changes are only required if you want to opt out of the new failure conditions. Most users won't need to modify their existing configurations.

Fail pipeline on error by default

We've changed the default behavior: pipelines will now fail on broken links automatically. This addresses user feedback that not failing on broken links was unexpected (see [issue #71](lycheeverse/lychee-action#71)).

What you need to do:

• Update to version 2 of this action to apply this change.
• Users of the lychee-action@master branch don't need to make any changes, as fail: true has been the default there for a while.
• If you prefer the old behavior, explicitly set fail to false when updating:

- name: Link Checker
  id: lychee
  uses: lycheeverse/lychee-action@v2
  with:
    fail: false  # Don't fail action on broken links

Fail pipeline if no links were found

Similar to the above change, we now fail the pipeline if no links are found during a run. This helps warn users about potential configuration issues.

What you need to do:

... (truncated)

Commits

• 7cd0af4 Merge commit from fork
• 8ad54d3 fix link
• 762333c Create SECURITY.md (#259)
• 71a38a3 Document and use correct permissions in the GitHub workflows (#258)
• f141760 Fix a typos (#257)
• 2bb2326 don't remove the lychee config file (#255)
• 731bf1a Fix variable name (#253)
• e360f3c Bump lycheeverse/lychee-action from 1 to 2 (#252)
• f87f0a6 Update version to lycheeverse/lychee-action@v2 in docs
• 7da8ec1 Test latest lychee version tag (#236)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #763.