build(deps): bump the ci_dependencies group across 1 directory with 10 updates #10474
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
dependabot
bot
added
A1-insubstantial
…0 updates Bumps the ci_dependencies group with 10 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `4` | `6` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4.3.1` | `5.0.0` | | [actions/create-github-app-token](https://github.com/actions/create-github-app-token) | `2.1.4` | `2.2.0` | | [actions/setup-node](https://github.com/actions/setup-node) | `5.0.0` | `6.0.0` | | [Swatinem/rust-cache](https://github.com/swatinem/rust-cache) | `2.8.1` | `2.8.2` | | [actions-rust-lang/setup-rust-toolchain](https://github.com/actions-rust-lang/setup-rust-toolchain) | `1.13.0` | `1.15.2` | | [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) | `7.0.8` | `7.0.9` | | [actions/setup-python](https://github.com/actions/setup-python) | `6.0.0` | `6.1.0` | | [aws-actions/configure-aws-credentials](https://github.com/aws-actions/configure-aws-credentials) | `5.1.0` | `5.1.1` | | [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance) | `2.4.0` | `3.0.0` | Updates `actions/checkout` from 4 to 6 - [Release notes](https://github.com/actions/checkout/releases) - [Commits](actions/checkout@v4...v6) Updates `actions/upload-artifact` from 4.3.1 to 5.0.0 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@v4.3.1...330a01c) Updates `actions/create-github-app-token` from 2.1.4 to 2.2.0 - [Release notes](https://github.com/actions/create-github-app-token/releases) - [Commits](actions/create-github-app-token@6701853...7e473ef) Updates `actions/setup-node` from 5.0.0 to 6.0.0 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](actions/setup-node@v5...2028fbc) Updates `Swatinem/rust-cache` from 2.8.1 to 2.8.2 - [Release notes](https://github.com/swatinem/rust-cache/releases) - [Changelog](https://github.com/Swatinem/rust-cache/blob/master/CHANGELOG.md) - [Commits](Swatinem/rust-cache@f13886b...779680d) Updates `actions-rust-lang/setup-rust-toolchain` from 1.13.0 to 1.15.2 - [Release notes](https://github.com/actions-rust-lang/setup-rust-toolchain/releases) - [Changelog](https://github.com/actions-rust-lang/setup-rust-toolchain/blob/main/CHANGELOG.md) - [Commits](actions-rust-lang/setup-rust-toolchain@v1.13...1780873) Updates `peter-evans/create-pull-request` from 7.0.8 to 7.0.9 - [Release notes](https://github.com/peter-evans/create-pull-request/releases) - [Commits](peter-evans/create-pull-request@271a8d0...84ae59a) Updates `actions/setup-python` from 6.0.0 to 6.1.0 - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](actions/setup-python@e797f83...83679a8) Updates `aws-actions/configure-aws-credentials` from 5.1.0 to 5.1.1 - [Release notes](https://github.com/aws-actions/configure-aws-credentials/releases) - [Changelog](https://github.com/aws-actions/configure-aws-credentials/blob/main/CHANGELOG.md) - [Commits](aws-actions/configure-aws-credentials@0094301...61815dc) Updates `actions/attest-build-provenance` from 2.4.0 to 3.0.0 - [Release notes](https://github.com/actions/attest-build-provenance/releases) - [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md) - [Commits](actions/attest-build-provenance@v2.4.0...977bb37) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major dependency-group: ci_dependencies - dependency-name: actions/upload-artifact dependency-version: 5.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: ci_dependencies - dependency-name: actions/create-github-app-token dependency-version: 2.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ci_dependencies - dependency-name: actions/setup-node dependency-version: 6.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: ci_dependencies - dependency-name: Swatinem/rust-cache dependency-version: 2.8.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: ci_dependencies - dependency-name: actions-rust-lang/setup-rust-toolchain dependency-version: 1.15.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ci_dependencies - dependency-name: peter-evans/create-pull-request dependency-version: 7.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: ci_dependencies - dependency-name: actions/setup-python dependency-version: 6.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ci_dependencies - dependency-name: aws-actions/configure-aws-credentials dependency-version: 5.1.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: ci_dependencies - dependency-name: actions/attest-build-provenance dependency-version: 3.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: ci_dependencies ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
force-pushed
the
dependabot/github_actions/ci_dependencies-aca9d06fce
branch
from
c7c1f02 to
fe90d85
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the ci_dependencies group with 10 updates in the / directory:
464.3.15.0.02.1.42.2.05.0.06.0.02.8.12.8.21.13.01.15.27.0.87.0.96.0.06.1.05.1.05.1.12.4.03.0.0Updates
actions/checkoutfrom 4 to 6Release notes
Sourced from actions/checkout's releases.
... (truncated)
Commits
1af3b93update readme/changelog for v6 (#2311)71cf226v6-beta (#2298)069c695Persist creds to a separate file (#2286)ff7abcdUpdate README to include Node.js 24 support details and requirements (#2248)08c6903Prepare v5.0.0 release (#2238)9f26565Update actions checkout to use node 24 (#2226)Updates
actions/upload-artifactfrom 4.3.1 to 5.0.0Release notes
Sourced from actions/upload-artifact's releases.
... (truncated)
Commits
330a01cMerge pull request #734 from actions/danwkennedy/prepare-5.0.003f2824Updategithub.dep.yml905a1ecPreparev5.0.02d9f9cdMerge pull request #725 from patrikpolyak/patch-19687587Merge branch 'main' into patch-12848b2cMerge pull request #727 from danwkennedy/patch-19b51177Spell out the first use of GHEScd231caUpdate GHES guidance to include reference to Node 20 versionde65e23Merge pull request #712 from actions/nebuk89-patch-18747d8cUpdate README.mdUpdates
actions/create-github-app-tokenfrom 2.1.4 to 2.2.0Release notes
Sourced from actions/create-github-app-token's releases.
Commits
7e473efbuild(release): 2.2.0 [skip ci]dce3be8fix(deps): bump p-retry from 6.2.1 to 7.1.0 (#294)5480f43fix(deps): bump glob from 10.4.5 to 10.5.0 (#305)d90aa53feat: update permission inputs (#296)55e2a4bfix(deps): bump the production-dependencies group with 2 updates (#292)cc6f999ci(test): trigger on merge_group (#308)40fa6b5build(deps-dev): bump@sinonjs/fake-timersfrom 14.0.0 to 15.0.0 (#295)396e502build(deps): bump actions/checkout from 5 to 6 (#306)f48f2ebbuild(deps): bump stefanzweifel/git-auto-commit-action from 6.0.1 to 7.0.0 (#...b7f83f6build(deps): bump actions/setup-node from 4 to 6 (#299)Updates
actions/setup-nodefrom 5.0.0 to 6.0.0Release notes
Sourced from actions/setup-node's releases.
Commits
2028fbcLimit automatic caching to npm, update workflows and documentation (#1374)1342781Bump actions/publish-action from 0.3.0 to 0.4.0 (#1362)89d709dBump prettier from 2.8.8 to 3.6.2 (#1334)cd2651cBump ts-jest from 29.1.2 to 29.4.1 (#1336)Updates
Swatinem/rust-cachefrom 2.8.1 to 2.8.2Release notes
Sourced from Swatinem/rust-cache's releases.
Changelog
Sourced from Swatinem/rust-cache's changelog.
... (truncated)
Commits
779680d2.8.22ea64efBump smol-toml from 1.4.2 to 1.5.2 in the prd-minor group (#287)8930d9cBump the actions group with 3 updates (#288)c071727Bump@actions/iofrom 1.1.3 to 2.0.0 in the prd-major group (#281)f2a41b7Bump@types/nodefrom 24.9.0 to 24.10.0 in the dev-minor group (#282)e306f83Don't overwrite env for cargo-metadata call (#285)c911900Merge pull request #284 from Swatinem/dependabot/github_actions/actions-baeb0...3aaed55Bump the actions group with 2 updates972b315Merge pull request #283 from Swatinem/dependabot/github_actions/actions-b360d...07caf06Bump taiki-e/install-action from 2.62.45 to 2.62.49 in the actions groupUpdates
actions-rust-lang/setup-rust-toolchainfrom 1.13.0 to 1.15.2Release notes
Sourced from actions-rust-lang/setup-rust-toolchain's releases.
Changelog
Sourced from actions-rust-lang/setup-rust-toolchain's changelog.
... (truncated)
Commits
1780873Fix: Run the version detection steps in the selectedrust-src-dirdirectory.063a3b9Use correct quoting style for working-directoryf89a806Use the built-in working-directory selector and default to "." if rust-src-di...5189717Gate the rust-src-dir check by first checking if the value is setd6688fbPrint an error and exit if 'rust-src-dir' does not point to an existing direc...02be93dUpdateSwatinem/rust-cacheto v2.8.169e4802Merge pull request #73 from actions-rust-lang/dependabot/github_actions/Swati...183cfebBump Swatinem/rust-cache from 2.8.0 to 2.8.12fcdc49Update readme and changelog for 1.15.089d3d96Merge pull request #69 from Kubaryt/mainUpdates
peter-evans/create-pull-requestfrom 7.0.8 to 7.0.9Release notes
Sourced from peter-evans/create-pull-request's releases.
Commits
84ae59afix: compatibility with actions/checkout@v6 (#4230)b4733b9build(deps-dev): bump js-yaml from 4.1.0 to 4.1.1 (#4222)0edc001build(deps-dev): bump the npm group with 2 updates (#4201)430aea0build(deps): bump the github-actions group with 3 updates (#4200)46cdba7build(deps-dev): bump the npm group with 3 updates (#4185)b937339build(deps): bump the github-actions group with 2 updates (#4184)e9af275ci: update dependabot configd3e081abuild(deps-dev): bump@types/nodefrom 18.19.127 to 18.19.128 (#4178)9ec683ebuild(deps-dev): bump@types/nodefrom 18.19.125 to 18.19.127 (#4165)65d8d10build(deps-dev): bump ts-jest from 29.4.2 to 29.4.4 (#4163)Updates
actions/setup-pythonfrom 6.0.0 to 6.1.0Release notes
Sourced from actions/setup-python's releases.
Commits
83679a8Bump@types/nodefrom 24.1.0 to 24.9.1 and update macos-13 to macos-15-intel ...bfc4944Bump prettier from 3.5.3 to 3.6.2 (#1234)97aeb3eBump requests from 2.32.2 to 2.32.4 in /tests/data (#1130)443da59Bump actions/publish-action from 0.3.0 to 0.4.0 & Documentation update for pi...cfd55cagraalpy: add graalpy early-access and windows builds (#880)bba65e5Bump typescript from 5.4.2 to 5.9.3 and update docs/advanced-usage.md (#1094)18566f8Improve wording and "fix example" (remove 3.13) on testing against pre-releas...2e3e4b1Add support for pip-install input (#1201)4267e28Bump urllib3 from 1.26.19 to 2.5.0 in /tests/data and document breaking c...Updates
aws-actions/configure-aws-credentialsfrom 5.1.0 to 5.1.1Release notes
Sourced from aws-actions/configure-aws-credentials's releases.
Changelog
Sourced from aws-actions/configure-aws-credentials's changelog.
... (truncated)
Commits
61815dcchore(main): release 5.1.1 (#1564)56d6a58chore: release 5.1.14a54c24chore(deps-dev): bump glob from 10.4.5 to 10.5.0 (#1563)b2793c9chore(deps-dev): bump@types/nodefrom 24.10.0 to 24.10.1 (#1559)8c230bfchore: Update distf7a5b07chore(deps): bump@aws-sdk/client-stsfrom 3.928.0 to 3.933.0 (#1558)730fc04chore(deps-dev): bump@biomejs/biomefrom 2.3.4 to 2.3.6 (#1555)bc0dd36chore(deps-dev): bump memfs from 4.50.0 to 4.51.0 (#1556)f2964c7chore: Update distcf46495chore(deps): bump@aws-sdk/client-stsfrom 3.922.0 to 3.928.0 (#1548)Updates
actions/attest-build-provenancefrom 2.4.0 to 3.0.0Release notes
Sourced from actions/attest-build-provenance's releases.
Commits
977bb37bump attest-build-provenance/predicate to v2.0.0 (#693)864457aBump to node24 runtime (#692)57aa2b0bump actions/attest from v2.4.0 to v3.0.0 (#691)8ee7163refactor eslint config (#690)91ca1c2Bump actions/checkout from 4.1.1 to 5.0.0 (#684)ff19f40custom node max-http-header-size (#687)8bd83f1pin workflow deps (#683)f0878deBump the npm-development group with 4 updates (#681)463e6dfBump the npm-development group with 3 updates (#678)fef91c1Bump the npm-development group with 6 updates (#673)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions