chore: bump the actions group with 5 updates - #2
Conversation
Bumps the actions group with 5 updates: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `4.2.2` | `7.0.0` | | [azure/setup-helm](https://github.com/azure/setup-helm) | `4.3.0` | `5.0.1` | | [helm/chart-releaser-action](https://github.com/helm/chart-releaser-action) | `1.6.0` | `1.7.0` | | [actions/setup-python](https://github.com/actions/setup-python) | `5.3.0` | `6.3.0` | | [helm/chart-testing-action](https://github.com/helm/chart-testing-action) | `2.7.0` | `2.8.0` | Updates `actions/checkout` from 4.2.2 to 7.0.0 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@11bd719...9c091bb) Updates `azure/setup-helm` from 4.3.0 to 5.0.1 - [Release notes](https://github.com/azure/setup-helm/releases) - [Changelog](https://github.com/Azure/setup-helm/blob/main/CHANGELOG.md) - [Commits](Azure/setup-helm@b9e5190...9bc31f4) Updates `helm/chart-releaser-action` from 1.6.0 to 1.7.0 - [Release notes](https://github.com/helm/chart-releaser-action/releases) - [Commits](helm/chart-releaser-action@a917fd1...cae68fe) Updates `actions/setup-python` from 5.3.0 to 6.3.0 - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](actions/setup-python@0b93645...ece7cb0) Updates `helm/chart-testing-action` from 2.7.0 to 2.8.0 - [Release notes](https://github.com/helm/chart-testing-action/releases) - [Commits](helm/chart-testing-action@0d28d31...6ec842c) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: azure/setup-helm dependency-version: 5.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: helm/chart-releaser-action dependency-version: 1.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: actions/setup-python dependency-version: 6.3.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: helm/chart-testing-action dependency-version: 2.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions ... Signed-off-by: dependabot[bot] <support@github.com>
LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
joshdougall
left a comment
There was a problem hiding this comment.
approving.
I went through the three majors rather than just trusting the green check. checkout v4 to v7, setup-helm v4 to v5 and setup-python v5 to v6 are all the same thing, they move from node20 to node24. that needs runner 2.327.1 or newer. every job in here is ubuntu-latest github hosted, so that is fine. none of the action inputs changed either.
checkout v7.0.0 does have one real behaviour change. it blocks fork pr checkout under pull_request_target and workflow_run. neither of those triggers is used in this repo, so it does not apply here.
one thing to flag for after merge. chart-releaser-action v1.6.0 to v1.7.0 is the only bump that pr ci does not exercise, because that job only runs on push to main. checkout v6.0.0 also moved the persisted git credentials into a separate file, and chart-releaser needs those for the gh-pages push. I think both are fine and they are supported paths. it is just the one bit we cannot confirm until this lands, so can someone keep an eye on the first release run.
small nit, this has been open a month, and checkout v7.0.1 and setup-python v7.0.0 both shipped on july 20th. happy either way, we can rebase to pick those up or close it and let dependabot open a fresh one.
Bumps the actions group with 5 updates:
4.2.27.0.04.3.05.0.11.6.01.7.05.3.06.3.02.7.02.8.0Updates
actions/checkoutfrom 4.2.2 to 7.0.0Release notes
Sourced from actions/checkout's releases.
... (truncated)
Changelog
Sourced from actions/checkout's changelog.
... (truncated)
Commits
9c091bbupdate error wording (#2467)1044a6dgetting ready for checkout v7 release (#2464)f028218Bump the minor-npm-dependencies group across 1 directory with 3 updates (#2462)d914b26upgrade module to esm and update dependencies (#2463)537c7efBump@actions/coreand@actions/tool-cacheand Remove uuid (#2459)130a169Bump js-yaml from 4.1.0 to 4.2.0 (#2461)7d09575Bump flatted from 3.3.1 to 3.4.2 (#2460)0f9f3aaBump actions/publish-immutable-action (#2458)f9e715ablock checking out fork pr for pull_request_target and workflow_run (#2454)df4cb1cUpdate changelog for v6.0.3 (#2446)Updates
azure/setup-helmfrom 4.3.0 to 5.0.1Release notes
Sourced from azure/setup-helm's releases.
... (truncated)
Changelog
Sourced from azure/setup-helm's changelog.
... (truncated)
Commits
9bc31f4build95ecf49Bump version to 5.0.1 and update CHANGELOG with recent changes (#287)4180b1cBump the actions group with 2 updates (#285)6949b7fBump undici (#284)51ce767Bump actions/checkout in /.github/workflows in the actions group (#286)d6da4f4Bump the actions group with 5 updates (#283)7e2bc10Bump actions/checkout in /.github/workflows in the actions group (#280)64d6be9Bump the actions group with 2 updates (#279)69214f9fix: use chmod 755 instead of 777 for downloaded helm binary and folder (#278)9dad99fBump vitest from 4.1.7 to 4.1.8 in the actions group (#277)Updates
helm/chart-releaser-actionfrom 1.6.0 to 1.7.0Release notes
Sourced from helm/chart-releaser-action's releases.
Commits
cae68feupdate cr to v1.7.0 (#220)d1e09fdFix indention (#203)653ba94Bump actions/checkout in the actions group across 1 directory (#201)45af99fBump actions/checkout from 4.1.4 to 4.1.5 in the actions group (#192)95930dcUpdate checkout action to v4 tag in README.md (#187)0eba7f5Bump actions/checkout from 4.1.3 to 4.1.4 in the actions group (#190)09492f4Bump actions/checkout from 4.1.2 to 4.1.3 in the actions group (#189)13fe82aBump the actions group with 1 update (#182)6203d70Add --skip-upload input with latest helm/chart-releaser-action (#143)Updates
actions/setup-pythonfrom 5.3.0 to 6.3.0Release notes
Sourced from actions/setup-python's releases.
... (truncated)
Commits
ece7cb0Fix pip cache error handling on Windows. (#1040)1d18d7aUpdate advanced-usage.md (#811)d2b357aUpdate dependency versions and test workflow configuration (#1322)8f639b1Merge pull request #1324 from jasongin/update-actions-cache-5.1.06731c2bResolve high-severity audit issues0cb1a84Add RHEL support and include Linux distro in cache keys (#1323)dc6eab6Update dist6f4b74bStrict equalityfa8bde1Bump@actions/cacheto 5.1.0, log cache write deniedc8813baUpgrade@actionsdependencies and update licenses (#1303)Updates
helm/chart-testing-actionfrom 2.7.0 to 2.8.0Release notes
Sourced from helm/chart-testing-action's releases.
Commits
6ec842cBump sigstore/cosign-installer from 3.8.1 to 4.0.0 (#184)4ea74f6Use uv instead of python venv (#172)b0c0606Bump the actions group across 1 directory with 2 updates (#183)0bfa5c0Bump actions/setup-python from 5.4.0 to 6.0.0 (#179)e27de75Bump actions/checkout from 4.2.2 to 5.0.0 (#181)2fe8321bump ct and yamale version (#178)0941a6bFix the broken link for GitHub Help Documentation (#174)c71c0c7Bump the actions group across 1 directory with 4 updates (#171)You can trigger a rebase of this PR by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions