build(deps): Bump the gh-actions group with 6 updates #57

dependabot · 2024-01-28T15:24:20Z

Bumps the gh-actions group with 6 updates:

Package	From	To
actions/checkout	`2`	`4`
actions/setup-python	`4`	`5`
abatilo/actions-poetry	`2`	`3`
actions/labeler	`4`	`5`
appleboy/ssh-action	`1.0.0`	`1.0.3`
actions/cache	`2`	`4`

Updates actions/checkout from 2 to 4

Release notes

Sourced from actions/checkout's releases.

v4.0.0

What's Changed

Update default runtime to node20 by @takost in actions/checkout#1436

Support fetching without the --progress option by @simonbaird in actions/checkout#1067

Release 4.0.0 by @takost in actions/checkout#1447

New Contributors

@takost made their first contribution in actions/checkout#1436

@simonbaird made their first contribution in actions/checkout#1067

Full Changelog: actions/checkout@v3...v4.0.0

v3.6.0

What's Changed

Mark test scripts with Bash'isms to be run via Bash by @dscho in actions/checkout#1377

Add option to fetch tags even if fetch-depth > 0 by @RobertWieczoreck in actions/checkout#579

Release 3.6.0 by @luketomlinson in actions/checkout#1437

New Contributors

@RobertWieczoreck made their first contribution in actions/checkout#579

@luketomlinson made their first contribution in actions/checkout#1437

Full Changelog: actions/checkout@v3.5.3...v3.6.0

v3.5.3

What's Changed

Fix: Checkout Issue in self hosted runner due to faulty submodule check-ins by @megamanics in actions/checkout#1196

Fix typos found by codespell by @DimitriPapadopoulos in actions/checkout#1287

Add support for sparse checkouts by @dscho and @dfdez in actions/checkout#1369

Release v3.5.3 by @TingluoHuang in actions/checkout#1376

New Contributors

@megamanics made their first contribution in actions/checkout#1196

@DimitriPapadopoulos made their first contribution in actions/checkout#1287

@dfdez made their first contribution in actions/checkout#1369

Full Changelog: actions/checkout@v3...v3.5.3

v3.5.2

What's Changed

Fix: Use correct API url / endpoint in GHES by @fhammerl in actions/checkout#1289 based on #1286 by @1newsr

Full Changelog: actions/checkout@v3.5.1...v3.5.2

v3.5.1

What's Changed

Improve checkout performance on Windows runners by upgrading @actions/github dependency by @BrettDong in actions/checkout#1246

New Contributors

@BrettDong made their first contribution in actions/checkout#1246

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

v4.1.0

Add support for partial checkout filters

v4.0.0

Support fetching without the --progress option

Update to node20

v3.6.0

Fix: Mark test scripts with Bash'isms to be run via Bash

Add option to fetch tags even if fetch-depth > 0

v3.5.3

Fix: Checkout fail in self-hosted runners when faulty submodule are checked-in

Fix typos found by codespell

Add support for sparse checkouts

v3.5.2

Fix api endpoint for GHES

v3.5.1

Fix slow checkout on Windows

v3.5.0

Add new public key for known_hosts

v3.4.0

Upgrade codeql actions to v2

Upgrade dependencies

Upgrade @actions/io

v3.3.0

Implement branch list using callbacks from exec function

Add in explicit reference to private checkout options

[Fix comment typos (that got added in #770)](actions/checkout#1057)

v3.2.0

Add GitHub Action to perform release

Fix status badge

Replace datadog/squid with ubuntu/squid Docker image

Wrap pipeline commands for submoduleForeach in quotes

Update @actions/io to 1.1.2

Upgrading version to 3.2.0

v3.1.0

Use @actions/core saveState and getState

Add github-server-url input

v3.0.2

... (truncated)

Commits

b4ffde6 Link to release page from what's new section (#1514)
8530928 Correct link to GitHub Docs (#1511)
7cdaf2f Update CODEOWNERS to Launch team (#1510)
8ade135 Prepare 4.1.0 release (#1496)
c533a0a Add support for partial checkout filters (#1396)
72f2cec Update README.md for V4 (#1452)
3df4ab1 Release 4.0.0 (#1447)
8b5e8b7 Support fetching without the --progress option (#1067)
97a652b Update default runtime to node20 (#1436)
f43a0e5 Release 3.6.0 (#1437)
Additional commits viewable in compare view

Updates actions/setup-python from 4 to 5

Release notes

Sourced from actions/setup-python's releases.

v5.0.0

What's Changed

In scope of this release, we update node version runtime from node16 to node20 (actions/setup-python#772). Besides, we update dependencies to the latest versions.

Full Changelog: actions/setup-python@v4.8.0...v5.0.0

v4.8.0

What's Changed

In scope of this release we added support for GraalPy (actions/setup-python#694). You can use this snippet to set up GraalPy:
steps:
- uses: actions/checkout@v4
- uses: actions/setup-python@v4 
  with:
    python-version: 'graalpy-22.3' 
- run: python my_script.py
Besides, the release contains such changes as:

Trim python version when reading from file by @FerranPares in actions/setup-python#628

Use non-deprecated versions in examples by @jeffwidman in actions/setup-python#724

Change deprecation comment to past tense by @jeffwidman in actions/setup-python#723

Bump @babel/traverse from 7.9.0 to 7.23.2 by @dependabot in actions/setup-python#743

advanced-usage.md: Encourage the use actions/checkout@v4 by @cclauss in actions/setup-python#729

Examples now use checkout@v4 by @simonw in actions/setup-python#738

Update actions/checkout to v4 by @dmitry-shibanov in actions/setup-python#761

New Contributors

@FerranPares made their first contribution in actions/setup-python#628

@timfel made their first contribution in actions/setup-python#694

@jeffwidman made their first contribution in actions/setup-python#724

Full Changelog: actions/setup-python@v4...v4.8.0

v4.7.1

What's Changed

Bump word-wrap from 1.2.3 to 1.2.4 by @dependabot in actions/setup-python#702

Add range validation for toml files by @dmitry-shibanov in actions/setup-python#726

Full Changelog: actions/setup-python@v4...v4.7.1

v4.7.0

In scope of this release, the support for reading python version from pyproject.toml was added (actions/setup-python#669).
      - name: Setup Python
        uses: actions/setup-python@v4
</tr></table> 

... (truncated)

Commits

0a5c615 Update action to node20 (#772)
0ae5836 Add example of GraalPy to docs (#773)
b64ffca update actions/checkout to v4 (#761)
8d28961 Examples now use checkout@v4 (#738)
7bc6abb advanced-usage.md: Encourage the use actions/checkout@v4 (#729)
e8111ce Bump @babel/traverse from 7.9.0 to 7.23.2 (#743)
a00ea43 add fix for graalpy ci (#741)
8635b1c Change deprecation comment to past tense (#723)
f6cc428 Use non-deprecated versions in examples (#724)
5f2af21 Add GraalPy support (#694)
Additional commits viewable in compare view

Updates abatilo/actions-poetry from 2 to 3

Release notes

Sourced from abatilo/actions-poetry's releases.

v3.0.0

3.0.0 (2024-1-11)

BREAKING CHANGE

Use pipx to isolate poetry (#63) (7b6d33e)

Functionality itself should expect to be the same but the affected virtualenv is different and people might have depended on this behavior so we're considering this a breaking change.

v2.4.0

2.4.0 (2023-12-29)

Features

Add ability to install plugins as part of the action setup (#66) (a5643c6)

v2.3.0

2.3.0 (2023-02-24)

Features

by default use the latest poetry version (#62) (192395c)

v2.2.0

2.2.0 (2022-11-26)

Features

update default Poetry version to 1.2.2 (#57) (f295866)

v2.1.6

2.1.6 (2022-08-23)

Bug Fixes

Updating default poetry version to 1.15 (#49) (0816ab2)

v2.1.5

2.1.5 (2022-06-26)

Bug Fixes

quote versions to fix parsing errors (c1aba0c)

... (truncated)

Commits

7b6d33e feat!: use pipx to isolate poetry (#63)
See full diff in compare view

Updates actions/labeler from 4 to 5

Release notes

Sourced from actions/labeler's releases.

v5.0.0

What's Changed

This release contains the following breaking changes:

The ability to apply labels based on the names of base and/or head branches was added (#186 and #54). The match object for changed files was expanded with new combinations in order to make it more intuitive and flexible (#423 and #101). As a result, the configuration file structure was significantly redesigned and is not compatible with the structure of the previous version. Please read the action documentation to find out how to adapt your configuration files for use with the new action version.

The bug related to the sync-labels input was fixed (#112). Now the input value is read correctly.

By default, dot input is set to true. Now, paths starting with a dot (e.g. .github) are matched by default.

Version 5 of this action updated the runtime to Node.js 20. All scripts are now run with Node.js 20 instead of Node.js 16 and are affected by any breaking changes between Node.js 16 and 20.

For more information, please read the action documentation.

New Contributors

@joshdales made their first contribution in actions/labeler#203

@dusan-trickovic made their first contribution in actions/labeler#626

@sungh0lim made their first contribution in actions/labeler#630

@TrianguloY made their first contribution in actions/labeler#629

Full Changelog: actions/labeler@v4...v5.0.0

v5.0.0-beta.1

What's Changed

In scope of this beta release, the structure of the configuration file (.github/labeler.yml) was changed from
LabelName:
- any:
  - changed-files: ['list', 'of', 'globs']
  - base-branch: ['list', 'of', 'regexps']
  - head-branch: ['list', 'of', 'regexps']
- all:
  - changed-files: ['list', 'of', 'globs']
  - base-branch: ['list', 'of', 'regexps']
  - head-branch: ['list', 'of', 'regexps']
to
LabelName:
- any:
  - changed-files: 
    - AnyGlobToAnyFile: ['list', 'of', 'globs']
    - AnyGlobToAllFiles: ['list', 'of', 'globs']
    - AllGlobsToAnyFile: ['list', 'of', 'globs']
    - AllGlobsToAllFiles: ['list', 'of', 'globs']
  - base-branch: ['list', 'of', 'regexps']
  - head-branch: ['list', 'of', 'regexps']
- all:
  - changed-files:
    - AnyGlobToAnyFile: ['list', 'of', 'globs']
    - AnyGlobToAllFiles: ['list', 'of', 'globs']
    - AllGlobsToAnyFile: ['list', 'of', 'globs']
</tr></table> 

... (truncated)

Commits

8558fd7 Merge pull request #709 from actions/v5.0.0-beta
000ca75 Merge pull request #700 from MaksimZhukov/apply-suggestions-and-update-docume...
cb66c2f Update dist
9181355 Apply suggestions for the beta vesrion and update the documentation
efe4c1c Merge pull request #699 from MaksimZhukov/update-node-runtime-and-dependencies
c0957ad Run Prettier
8dc8d18 Update Node.js version in reusable workflows
d0d0bbe Update documentation
1375c42 5.0.0
ab7411e Change version of Node.js runtime to node20
Additional commits viewable in compare view

Updates appleboy/ssh-action from 1.0.0 to 1.0.3

Release notes

Sourced from appleboy/ssh-action's releases.

v1.0.3

Support the new parameter request_pty to request a pseudo-terminal from the server, addressing the sudo command issue. appleboy/ssh-action#288

v1.0.2

upgrade ssh-proxy for security patch

v1.0.1 for security patch

No release notes provided.

Commits

029f5b4 docs: update README.md and improve code documentation
d134a26 fix(sudo): support request_pty to execute sudo command (#288)
2451745 chore: update SSH action version in README files
1f3c338 chore: update base image to 1.7.2 in Dockerfile
8f94919 chore: update appleboy/ssh-action to v1.0.1 in documentation
2344d97 chore(security): update drone-ssh to v1.7.1 (#286)
b9f6bf6 style: refine CI Workflow and Test Configurations
4330a1e docs: update appleboy/ssh-action version in README
See full diff in compare view

Updates actions/cache from 2 to 4

Release notes

Sourced from actions/cache's releases.

v4.0.0

What's Changed

Update action to node20 by @takost in actions/cache#1284

feat: save-always flag by @to-s in actions/cache#1242

New Contributors

@takost made their first contribution in actions/cache#1284

@to-s made their first contribution in actions/cache#1242

Full Changelog: actions/cache@v3...v4.0.0

v3.3.3

What's Changed

Cache v3.3.3 by @robherley in actions/cache#1302

New Contributors

@robherley made their first contribution in actions/cache#1302

Full Changelog: actions/cache@v3...v3.3.3

v3.3.2

What's Changed

Fixed readme with new segment timeout values by @kotewar in actions/cache#1133

Readme fixes by @kotewar in actions/cache#1134

Updated description of the lookup-only input for main action by @kotewar in actions/cache#1130

Change two new actions mention as quoted text by @bishal-pdMSFT in actions/cache#1131

Update Cross-OS Caching tips by @pdotl in actions/cache#1122

Bazel example (Take #2️⃣) by @vorburger in actions/cache#1132

Remove actions to add new PRs and issues to a project board by @jorendorff in actions/cache#1187

Consume latest toolkit and fix dangling promise bug by @chkimes in actions/cache#1217

Bump action version to 3.3.2 by @bethanyj28 in actions/cache#1236

New Contributors

@vorburger made their first contribution in actions/cache#1132

@jorendorff made their first contribution in actions/cache#1187

@chkimes made their first contribution in actions/cache#1217

@bethanyj28 made their first contribution in actions/cache#1236

Full Changelog: actions/cache@v3...v3.3.2

v3.3.1

What's Changed

Reduced download segment size to 128 MB and timeout to 10 minutes by @kotewar in actions/cache#1129

Full Changelog: actions/cache@v3...v3.3.1

v3.3.0

What's Changed

Bug: Permission is missing in cache delete example by @kotokaze in actions/cache#1123

... (truncated)

Changelog

Sourced from actions/cache's changelog.

Releases

3.0.0

Updated minimum runner version support from node 12 -> node 16

3.0.1

Added support for caching from GHES 3.5.

Fixed download issue for files > 2GB during restore.

3.0.2

Added support for dynamic cache size cap on GHES.

3.0.3

Fixed avoiding empty cache save when no files are available for caching. (issue)

3.0.4

Fixed tar creation error while trying to create tar with path as ~/ home folder on ubuntu-latest. (issue)

3.0.5

Removed error handling by consuming actions/cache 3.0 toolkit, Now cache server error handling will be done by toolkit. (PR)

3.0.6

Fixed #809 - zstd -d: no such file or directory error

Fixed #833 - cache doesn't work with github workspace directory

3.0.7

Fixed #810 - download stuck issue. A new timeout is introduced in the download process to abort the download if it gets stuck and doesn't finish within an hour.

3.0.8

Fix zstd not working for windows on gnu tar in issues #888 and #891.

Allowing users to provide a custom timeout as input for aborting download of a cache segment using an environment variable SEGMENT_DOWNLOAD_TIMEOUT_MINS. Default is 60 minutes.

3.0.9

Enhanced the warning message for cache unavailablity in case of GHES.

3.0.10

Fix a bug with sorting inputs.

Update definition for restore-keys in README.md

... (truncated)

Commits

13aacd8 Merge pull request #1242 from to-s/main
53b35c5 Merge branch 'main' into main
65b8989 Merge pull request #1284 from takost/update-to-node-20
d0be34d Fix dist
66cf064 Merge branch 'main' into update-to-node-20
1326563 Merge branch 'main' into main
e12d46a Merge pull request #1302 from actions/robherley/v3.3.3
1baebfc licensed
eb94f1a cache v3.3.3
e718767 Fix format
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the gh-actions group with 6 updates: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `2` | `4` | | [actions/setup-python](https://github.com/actions/setup-python) | `4` | `5` | | [abatilo/actions-poetry](https://github.com/abatilo/actions-poetry) | `2` | `3` | | [actions/labeler](https://github.com/actions/labeler) | `4` | `5` | | [appleboy/ssh-action](https://github.com/appleboy/ssh-action) | `1.0.0` | `1.0.3` | | [actions/cache](https://github.com/actions/cache) | `2` | `4` | Updates `actions/checkout` from 2 to 4 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@v2...v4) Updates `actions/setup-python` from 4 to 5 - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](actions/setup-python@v4...v5) Updates `abatilo/actions-poetry` from 2 to 3 - [Release notes](https://github.com/abatilo/actions-poetry/releases) - [Changelog](https://github.com/abatilo/actions-poetry/blob/master/.releaserc) - [Commits](abatilo/actions-poetry@v2...v3) Updates `actions/labeler` from 4 to 5 - [Release notes](https://github.com/actions/labeler/releases) - [Commits](actions/labeler@v4...v5) Updates `appleboy/ssh-action` from 1.0.0 to 1.0.3 - [Release notes](https://github.com/appleboy/ssh-action/releases) - [Commits](appleboy/ssh-action@v1.0.0...v1.0.3) Updates `actions/cache` from 2 to 4 - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](actions/cache@v2...v4) --- updated-dependencies: - dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-major dependency-group: gh-actions - dependency-name: actions/setup-python dependency-type: direct:production update-type: version-update:semver-major dependency-group: gh-actions - dependency-name: abatilo/actions-poetry dependency-type: direct:production update-type: version-update:semver-major dependency-group: gh-actions - dependency-name: actions/labeler dependency-type: direct:production update-type: version-update:semver-major dependency-group: gh-actions - dependency-name: appleboy/ssh-action dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gh-actions - dependency-name: actions/cache dependency-type: direct:production update-type: version-update:semver-major dependency-group: gh-actions ... Signed-off-by: dependabot[bot] <[email protected]>

…hub.com:quack-ai/contribution-api into dependabot/github_actions/gh-actions-0cb9f74eec

codecov · 2024-01-28T17:47:06Z

Codecov Report

All modified and coverable lines are covered by tests ✅

Comparison is base (a87c79a) 82.59% compared to head (7ab0db9) 82.59%.

Additional details and impacted files

@@           Coverage Diff           @@
##             main      #57   +/-   ##
=======================================
  Coverage   82.59%   82.59%           
=======================================
  Files          29       29           
  Lines         971      971           
=======================================
  Hits          802      802           
  Misses        169      169

Flag	Coverage Δ
unittests	`82.59% <ø> (ø)`

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

dependabot bot requested a review from frgfm as a code owner January 28, 2024 15:24

dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jan 28, 2024

dependabot bot assigned frgfm Jan 28, 2024

dependabot bot force-pushed the dependabot/github_actions/gh-actions-0cb9f74eec branch from 1fc17c9 to 4c447b1 Compare January 28, 2024 17:27

dependabot bot force-pushed the dependabot/github_actions/gh-actions-0cb9f74eec branch from 4c447b1 to 7e675c4 Compare January 28, 2024 17:33

frgfm added 3 commits January 28, 2024 18:44

Merge branch 'dependabot/github_actions/gh-actions-0cb9f74eec' of git…

96ddd68

…hub.com:quack-ai/contribution-api into dependabot/github_actions/gh-actions-0cb9f74eec

ci: Switch to major version speicifer for ssh action

f00ab69

ci: Updates labeler config

7ab0db9

github-actions bot added the topic: ci label Jan 28, 2024

frgfm approved these changes Jan 28, 2024

View reviewed changes

frgfm merged commit 33a10c1 into main Jan 28, 2024
12 checks passed

frgfm deleted the dependabot/github_actions/gh-actions-0cb9f74eec branch January 28, 2024 17:56

frgfm added the type: misc label Jan 28, 2024

frgfm added this to the 0.1.0 milestone Jan 28, 2024

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

build(deps): Bump the gh-actions group with 6 updates #57

build(deps): Bump the gh-actions group with 6 updates #57

dependabot bot commented on behalf of github Jan 28, 2024 •

edited

Loading

codecov bot commented Jan 28, 2024

build(deps): Bump the gh-actions group with 6 updates #57

build(deps): Bump the gh-actions group with 6 updates #57

Conversation

dependabot bot commented on behalf of github Jan 28, 2024 • edited Loading

v4.0.0

What's Changed

New Contributors

v3.6.0

What's Changed

New Contributors

v3.5.3

What's Changed

New Contributors

v3.5.2

What's Changed

v3.5.1

What's Changed

New Contributors

Changelog

v4.1.0

v4.0.0

v3.6.0

v3.5.3

v3.5.2

v3.5.1

v3.5.0

v3.4.0

v3.3.0

v3.2.0

v3.1.0

v3.0.2

v5.0.0

What's Changed

v4.8.0

What's Changed

New Contributors

v4.7.1

What's Changed

v4.7.0

v3.0.0

3.0.0 (2024-1-11)

BREAKING CHANGE

v2.4.0

2.4.0 (2023-12-29)

Features

v2.3.0

2.3.0 (2023-02-24)

Features

v2.2.0

2.2.0 (2022-11-26)

Features

v2.1.6

2.1.6 (2022-08-23)

Bug Fixes

v2.1.5

2.1.5 (2022-06-26)

Bug Fixes

v5.0.0

What's Changed

New Contributors

v5.0.0-beta.1

What's Changed

v1.0.3

v1.0.2

v1.0.1 for security patch

v4.0.0

What's Changed

New Contributors

v3.3.3

What's Changed

New Contributors

v3.3.2

What's Changed

New Contributors

v3.3.1

What's Changed

v3.3.0

What's Changed

Releases

3.0.0

dependabot bot commented on behalf of github Jan 28, 2024 •

edited

Loading