Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

build(deps): bump the gh-actions-packages group across 1 directory with 9 updates #3162

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 6, 2025

Bumps the gh-actions-packages group with 9 updates in the / directory:

Package From To
actions/checkout 2.7.0 4.2.2
actions/setup-go 3.5.0 5.3.0
github/codeql-action 2.28.1 3.28.8
slackapi/slack-github-action 1.24.0 2.0.0
peter-evans/create-pull-request 6.1.0 7.0.6
docker/setup-buildx-action 3.8.0 3.9.0
docker/build-push-action 5.4.0 6.13.0
actions/stale 8.0.0 9.1.0
DataDog/dd-trace-go 2.pre.dev 2.pre.vits

Updates actions/checkout from 2.7.0 to 4.2.2

Release notes

Sourced from actions/checkout's releases.

v4.2.2

What's Changed

Full Changelog: actions/checkout@v4.2.1...v4.2.2

v4.2.1

What's Changed

New Contributors

Full Changelog: actions/checkout@v4.2.0...v4.2.1

v4.2.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v4.1.7...v4.2.0

v4.1.7

What's Changed

New Contributors

Full Changelog: actions/checkout@v4.1.6...v4.1.7

v4.1.6

What's Changed

Full Changelog: actions/checkout@v4.1.5...v4.1.6

v4.1.5

What's Changed

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

v4.2.2

v4.2.1

v4.2.0

v4.1.7

v4.1.6

v4.1.5

v4.1.4

v4.1.3

v4.1.2

v4.1.1

v4.1.0

... (truncated)

Commits

Updates actions/setup-go from 3.5.0 to 5.3.0

Release notes

Sourced from actions/setup-go's releases.

v5.3.0

What's Changed

New Contributors

Full Changelog: actions/setup-go@v5...v5.3.0

v5.2.0

What's Changed

  • Leveraging the raw API to retrieve the version-manifest, as it does not impose a rate limit and hence facilitates unrestricted consumption without the need for a token for Github Enterprise Servers by @​Shegox in actions/setup-go#496

New Contributors

Full Changelog: actions/setup-go@v5...v5.2.0

v5.1.0

What's Changed

Bug Fixes

New Contributors

Full Changelog: actions/setup-go@v5...v5.1.0

v5.0.2

What's Changed

Bug fixes:

Dependency updates:

... (truncated)

Commits
  • f111f33 Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 (#534)
  • 3d10edb Add new permission section (#533)
  • 43e1389 Configure Dependabot settings (#530)
  • f81f022 Use the new cache service: upgrade @actions/cache to ^4.0.0 (#531)
  • 3041bf5 feat: fallback to "raw" endpoint for manifest when rate limit is reached (#496)
  • 41dfa10 Enhance workflows and Upgrade micromatch Dependency (#510)
  • 9419772 Revise isGhes logic (#511)
  • d60b41a Merge pull request #502 from actions/Jcambass-patch-1
  • e09f57f Upgrade IA Publish
  • df1a117 Merge pull request #500 from actions/Jcambass-patch-1
  • Additional commits viewable in compare view

Updates github/codeql-action from 2.28.1 to 3.28.8

Release notes

Sourced from github/codeql-action's releases.

v3.28.8

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.8 - 29 Jan 2025

  • Enable support for Kotlin 2.1.10 when running with CodeQL CLI v2.20.3. #2744

See the full CHANGELOG.md for more information.

v3.28.7

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.7 - 29 Jan 2025

No user facing changes.

See the full CHANGELOG.md for more information.

v3.28.6

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.6 - 27 Jan 2025

  • Re-enable debug artifact upload for CLI versions 2.20.3 or greater. #2726

See the full CHANGELOG.md for more information.

v3.28.5

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.5 - 24 Jan 2025

  • Update default CodeQL bundle version to 2.20.3. #2717

See the full CHANGELOG.md for more information.

v3.28.4

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.4 - 23 Jan 2025

... (truncated)

Changelog

Sourced from github/codeql-action's changelog.

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

[UNRELEASED]

  • Update default CodeQL bundle version to 2.20.4. #2753

3.28.8 - 29 Jan 2025

  • Enable support for Kotlin 2.1.10 when running with CodeQL CLI v2.20.3. #2744

3.28.7 - 29 Jan 2025

No user facing changes.

3.28.6 - 27 Jan 2025

  • Re-enable debug artifact upload for CLI versions 2.20.3 or greater. #2726

3.28.5 - 24 Jan 2025

  • Update default CodeQL bundle version to 2.20.3. #2717

3.28.4 - 23 Jan 2025

No user facing changes.

3.28.3 - 22 Jan 2025

  • Update default CodeQL bundle version to 2.20.2. #2707
  • Fix an issue downloading the CodeQL Bundle from a GitHub Enterprise Server instance which occurred when the CodeQL Bundle had been synced to the instance using the CodeQL Action sync tool and the Actions runner did not have Zstandard installed. #2710
  • Uploading debug artifacts for CodeQL analysis is temporarily disabled. #2712

3.28.2 - 21 Jan 2025

No user facing changes.

3.28.1 - 10 Jan 2025

  • CodeQL Action v2 is now deprecated, and is no longer updated or supported. For better performance, improved security, and new features, upgrade to v3. For more information, see this changelog post. #2677
  • Update default CodeQL bundle version to 2.20.1. #2678

3.28.0 - 20 Dec 2024

  • Bump the minimum CodeQL bundle version to 2.15.5. #2655
  • Don't fail in the unusual case that a file is on the search path. #2660.

3.27.9 - 12 Dec 2024

... (truncated)

Commits
  • dd74661 Merge pull request #2746 from github/update-v3.28.8-a91a3f767
  • 3210a3c Fix Kotlin version in changelog
  • 72f9d02 Update changelog for v3.28.8
  • a91a3f7 Merge pull request #2744 from github/igfoo/kot2.1.10
  • c520fb5 Merge pull request #2745 from github/mergeback/v3.28.7-to-main-6e545590
  • 3879c57 Add changelog entry
  • 0c21937 Run "npm run build"
  • 5a61bf0 Kotlin: The 2.20.3 release supports Kotlin 2.1.10.
  • 163d119 Update checked-in dependencies
  • bcf5cec Update changelog and version after v3.28.7
  • Additional commits viewable in compare view

Updates slackapi/slack-github-action from 1.24.0 to 2.0.0

Release notes

Sourced from slackapi/slack-github-action's releases.

Slack Send v2.0.0

YAML! And more API methods! With improved erroring! And more!

Sending data to Slack can now be done with the YAML format, and that data can be sent to [a Slack API method][methods] or technique of choice with the provided payload. And additional configurations can improve error handling or customize values between steps.

Breaking changes happen with this update and recommended migration strategies are detailed below. Adding this step to new workflows might prefer to follow the README instead 📚

What's changed

Both inputs of payload variables, techniques for sending the payload, additional configurations, and expected outputs were changed:

... (truncated)

Commits
  • 485a9d4 Release
  • e598089 chore(release): tag version 2.0.0
  • e9b3a6b feat!: wrap payloads to send to a "method" with "token" or "webhook" (#333)
  • 74ae656 chore(release): tag version 1.27.1
  • bd0e281 build(deps): bump codecov/codecov-action from 4.5.0 to 4.6.0 (#355)
  • e127529 build(deps): bump @​actions/core from 1.10.1 to 1.11.1 (#354)
  • 6b51022 build(deps-dev): bump eslint-plugin-jsdoc from 50.3.1 to 50.4.3 (#353)
  • 555e4ad build(deps-dev): bump eslint-plugin-import from 2.30.0 to 2.31.0 (#352)
  • 8d4500e build(deps): bump @​slack/web-api from 7.5.0 to 7.7.0 (#351)
  • d0dece6 build(deps-dev): bump mocha from 10.7.3 to 10.8.2 (#350)
  • Additional commits viewable in compare view

Updates peter-evans/create-pull-request from 6.1.0 to 7.0.6

Release notes

Sourced from peter-evans/create-pull-request's releases.

Create Pull Request v7.0.6

⚙️ Fixes an issue with commit signing where unicode characters in file paths were not preserved.

What's Changed

New Contributors

... (truncated)

Commits
  • 67ccf78 fix: preserve unicode in filepaths when commit signing (#3588)
  • bb88e27 build: update distribution (#3583)
  • b378ed5 build(deps): bump p-limit from 6.1.0 to 6.2.0 (#3578)
  • fa9200e build(deps-dev): bump @​types/node from 18.19.67 to 18.19.68 (#3570)
  • 16e0059 build(deps-dev): bump prettier from 3.4.1 to 3.4.2 (#3560)
  • 5bffd5a build(deps-dev): bump eslint-import-resolver-typescript (#3559)
  • a22a0dd build(deps-dev): bump prettier from 3.4.0 to 3.4.1 (#3544)
  • b27ce37 build(deps-dev): bump @​types/node from 18.19.66 to 18.19.67 (#3543)
  • 4e0cc19 build(deps): bump @​octokit/plugin-paginate-rest from 11.3.5 to 11.3.6 (#3542)
  • 25b6871 docs: update scopes for push-to-fork
  • Additional commits viewable in compare view

Updates docker/setup-buildx-action from 3.8.0 to 3.9.0

Release notes

Sourced from docker/setup-buildx-action's releases.

v3.9.0

Full Changelog: docker/setup-buildx-action@v3.8.0...v3.9.0

Commits
  • f7ce87c Merge pull request #404 from docker/dependabot/npm_and_yarn/docker/actions-to...
  • aa1e2a0 chore: update generated content
  • 673e008 build(deps): bump @​docker/actions-toolkit from 0.53.0 to 0.54.0
  • ba31df4 Merge pull request #402 from docker/dependabot/npm_and_yarn/docker/actions-to...
  • 5475af1 chore: update generated content
  • acacad9 build(deps): bump @​docker/actions-toolkit from 0.48.0 to 0.53.0
  • 6a25f98 Merge pull request #396 from crazy-max/bake-v6
  • ca1af17 update bake-action to v6
  • See full diff in compare view

Updates docker/build-push-action from 5.4.0 to 6.13.0

Release notes

Sourced from docker/build-push-action's releases.

v6.13.0

Full Changelog: docker/build-push-action@v6.12.0...v6.13.0

v6.12.0

Full Changelog: docker/build-push-action@v6.11.0...v6.12.0

v6.11.0

Full Changelog: docker/build-push-action@v6.10.0...v6.11.0

v6.10.0

Full Changelog: docker/build-push-action@v6.9.0...v6.10.0

v6.9.0

Full Changelog: docker/build-push-action@v6.8.0...v6.9.0

v6.8.0

Full Changelog: docker/build-push-action@v6.7.0...v6.8.0

v6.7.0

Full Changelog: docker/build-push-action@v6.6.1...v6.7.0

v6.6.1

Full Changelog: docker/build-push-action@v6.6.0...v6.6.1

v6.6.0

Full Changelog: docker/build-push-action@v6.5.0...v6.6.0

... (truncated)

Commits
  • ca877d9 Merge pull request #1308 from docker/dependabot/npm_and_yarn/docker/actions-t...
  • d2fe919 chore: update generated content
  • f0fc9ec chore(deps): Bump @​docker/actions-toolkit from 0.51.0 to 0.53.0
  • 67a2d40 Merge pull request #1300 from docker/dependabot/npm_and_yarn/docker/actions-t...
  • 0b1b1c9 chore: update generated content
  • b6a7c2c chore(deps): Bump @​docker/actions-toolkit from 0.49.0 to 0.51.0
  • 31ca4e5 Merge pull request #1296 from crazy-max/bake-v6
  • e613db9 update bake-action to v6
  • b32b51a Merge pull request #1281 from docker/dependabot/npm_and_yarn/docker/actions-t...
  • 594bf46 Merge pull request #1294 from crazy-max/fix-e2e
  • Additional commits viewable in compare view

Updates actions/stale from 8.0.0 to 9.1.0

Release notes

Sourced f...

Description has been truncated

…th 9 updates

Bumps the gh-actions-packages group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `2.7.0` | `4.2.2` |
| [actions/setup-go](https://github.com/actions/setup-go) | `3.5.0` | `5.3.0` |
| [github/codeql-action](https://github.com/github/codeql-action) | `2.28.1` | `3.28.8` |
| [slackapi/slack-github-action](https://github.com/slackapi/slack-github-action) | `1.24.0` | `2.0.0` |
| [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) | `6.1.0` | `7.0.6` |
| [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `3.8.0` | `3.9.0` |
| [docker/build-push-action](https://github.com/docker/build-push-action) | `5.4.0` | `6.13.0` |
| [actions/stale](https://github.com/actions/stale) | `8.0.0` | `9.1.0` |
| [DataDog/dd-trace-go](https://github.com/datadog/dd-trace-go) | `2.pre.dev` | `2.pre.vits` |



Updates `actions/checkout` from 2.7.0 to 4.2.2
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v2.7.0...11bd719)

Updates `actions/setup-go` from 3.5.0 to 5.3.0
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](actions/setup-go@v3.5.0...f111f33)

Updates `github/codeql-action` from 2.28.1 to 3.28.8
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@b8d3b6e...dd74661)

Updates `slackapi/slack-github-action` from 1.24.0 to 2.0.0
- [Release notes](https://github.com/slackapi/slack-github-action/releases)
- [Commits](slackapi/slack-github-action@e28cf16...485a9d4)

Updates `peter-evans/create-pull-request` from 6.1.0 to 7.0.6
- [Release notes](https://github.com/peter-evans/create-pull-request/releases)
- [Commits](peter-evans/create-pull-request@c5a7806...67ccf78)

Updates `docker/setup-buildx-action` from 3.8.0 to 3.9.0
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](docker/setup-buildx-action@6524bf6...f7ce87c)

Updates `docker/build-push-action` from 5.4.0 to 6.13.0
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](docker/build-push-action@v5.4.0...ca877d9)

Updates `actions/stale` from 8.0.0 to 9.1.0
- [Release notes](https://github.com/actions/stale/releases)
- [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md)
- [Commits](actions/stale@1160a22...5bef64f)

Updates `DataDog/dd-trace-go` from 2.pre.dev to 2.pre.vits
- [Release notes](https://github.com/datadog/dd-trace-go/releases)
- [Commits](v2-dev...v2-vits)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gh-actions-packages
- dependency-name: actions/setup-go
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gh-actions-packages
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gh-actions-packages
- dependency-name: slackapi/slack-github-action
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gh-actions-packages
- dependency-name: peter-evans/create-pull-request
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gh-actions-packages
- dependency-name: docker/setup-buildx-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gh-actions-packages
- dependency-name: docker/build-push-action
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gh-actions-packages
- dependency-name: actions/stale
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gh-actions-packages
- dependency-name: DataDog/dd-trace-go
  dependency-type: direct:production
  dependency-group: gh-actions-packages
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot requested review from a team as code owners February 6, 2025 20:49
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Feb 6, 2025
@pr-commenter
Copy link

pr-commenter bot commented Feb 6, 2025

Benchmarks

Benchmark execution time: 2025-02-06 21:16:11

Comparing candidate commit b6dd636 in PR branch dependabot/github_actions/gh-actions-packages-fa5edb1b73 with baseline commit a323121 in branch main.

Found 0 performance improvements and 0 performance regressions! Performance is the same for 59 metrics, 0 unstable metrics.

Copy link
Contributor Author

dependabot bot commented on behalf of github Feb 7, 2025

Superseded by #3165.

@dependabot dependabot bot closed this Feb 7, 2025
@dependabot dependabot bot deleted the dependabot/github_actions/gh-actions-packages-fa5edb1b73 branch February 7, 2025 15:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants