Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 13, 2025

Bumps the github-actions group with 5 updates:

Package From To
actions/add-to-project 0.3.0 1.0.2
actions/checkout 3 4
actions/setup-python 4 5
peter-evans/create-pull-request 5 7
tj-actions/changed-files 41 45

Updates actions/add-to-project from 0.3.0 to 1.0.2

Release notes

Sourced from actions/add-to-project's releases.

v1.0.2

What's Changed

Full Changelog: actions/add-to-project@v1.0.1...v1.0.2

v1.0.1

Summary

This release includes dependency updates, including security fix to undici.

What's Changed

Full Changelog: actions/add-to-project@v1.0.0...v1.0.1

v1.0.0

Summary

This release promotes actions/add-to-projects to a major version 1 and marks the public API stable.

What's Changed

Full Changelog: actions/add-to-project@v0.6.1...v1.0.0

v0.6.1

What's Changed

... (truncated)

Commits
  • 244f685 Merge pull request #591 from actions/dependabot/npm_and_yarn/eslint-plugin-je...
  • 2a5ef71 Build and package
  • 8c11461 Update license for json-schema.dep.yml
  • 66f6cff Merge pull request #578 from actions/dependabot/npm_and_yarn/eslint-plugin-je...
  • ddf5099 Merge pull request #590 from actions/dependabot/npm_and_yarn/typescript-eslin...
  • da1ae5b build(deps-dev): bump @​typescript-eslint/eslint-plugin
  • ced87c7 Merge pull request #589 from actions/dependabot/npm_and_yarn/typescript-eslin...
  • c78e6a1 Merge pull request #582 from actions/dependabot/npm_and_yarn/ts-jest-29.1.5
  • 267a19f build(deps-dev): bump @​typescript-eslint/parser from 7.6.0 to 7.14.1
  • e005a86 Merge pull request #588 from actions/dependabot/npm_and_yarn/types/node-16.18...
  • Additional commits viewable in compare view

Updates actions/checkout from 3 to 4

Release notes

Sourced from actions/checkout's releases.

v4.0.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v3...v4.0.0

v3.6.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v3.5.3...v3.6.0

v3.5.3

What's Changed

New Contributors

Full Changelog: actions/checkout@v3...v3.5.3

v3.5.2

What's Changed

Full Changelog: actions/checkout@v3.5.1...v3.5.2

v3.5.1

What's Changed

New Contributors

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

v4.2.2

v4.2.1

v4.2.0

v4.1.7

v4.1.6

v4.1.5

v4.1.4

v4.1.3

v4.1.2

v4.1.1

v4.1.0

... (truncated)

Commits

Updates actions/setup-python from 4 to 5

Release notes

Sourced from actions/setup-python's releases.

v5.0.0

What's Changed

In scope of this release, we update node version runtime from node16 to node20 (actions/setup-python#772). Besides, we update dependencies to the latest versions.

Full Changelog: actions/setup-python@v4.8.0...v5.0.0

v4.8.0

What's Changed

In scope of this release we added support for GraalPy (actions/setup-python#694). You can use this snippet to set up GraalPy:

steps:
- uses: actions/checkout@v4
- uses: actions/setup-python@v4 
  with:
    python-version: 'graalpy-22.3' 
- run: python my_script.py

Besides, the release contains such changes as:

New Contributors

Full Changelog: actions/setup-python@v4...v4.8.0

v4.7.1

What's Changed

Full Changelog: actions/setup-python@v4...v4.7.1

v4.7.0

In scope of this release, the support for reading python version from pyproject.toml was added (actions/setup-python#669).

      - name: Setup Python
        uses: actions/setup-python@v4
</tr></table> 

... (truncated)

Commits
  • 0b93645 Enhance workflows: Add macOS 13 support, upgrade publish-action, and update d...
  • 9c76e71 Bump pillow from 7.2 to 10.2.0 in /tests/data (#956)
  • f4c5a11 Revise isGhes logic (#963)
  • 19dfb7b Bump default versions to latest (#905)
  • e9675cc Merge pull request #943 from actions/Jcambass-patch-1
  • 3226af6 Upgrade IA publish
  • 70dcb22 Merge pull request #941 from actions/Jcambass-patch-1
  • 65b48c7 Create publish-immutable-actions.yml
  • 29a37be initial commit (#938)
  • f677139 Bump pyinstaller from 3.6 to 5.13.1 in /tests/data (#923)
  • Additional commits viewable in compare view

Updates peter-evans/create-pull-request from 5 to 7

Release notes

Sourced from peter-evans/create-pull-request's releases.

Create Pull Request v7.0.0

✨ Now supports commit signing with bot-generated tokens! See "What's new" below. ✍️🤖

Behaviour changes

  • Action input git-token has been renamed branch-token, to be more clear about its purpose. The branch-token is the token that the action will use to create and update the branch.
  • The action now handles requests that have been rate-limited by GitHub. Requests hitting a primary rate limit will retry twice, for a total of three attempts. Requests hitting a secondary rate limit will not be retried.
  • The pull-request-operation output now returns none when no operation was executed.
  • Removed deprecated output environment variable PULL_REQUEST_NUMBER. Please use the pull-request-number action output instead.

What's new

  • The action can now sign commits as github-actions[bot] when using GITHUB_TOKEN, or your own bot when using GitHub App tokens. See commit signing for details.
  • Action input draft now accepts a new value always-true. This will set the pull request to draft status when the pull request is updated, as well as on creation.
  • A new action input maintainer-can-modify indicates whether maintainers can modify the pull request. The default is true, which retains the existing behaviour of the action.
  • A new output pull-request-commits-verified returns true or false, indicating whether GitHub considers the signature of the branch's commits to be verified.

What's Changed

New Contributors

Full Changelog: peter-evans/create-pull-request@v6.1.0...v7.0.0

Create Pull Request v6.1.0

✨ Adds pull-request-branch as an action output.

What's Changed

... (truncated)

Commits
  • 67ccf78 fix: preserve unicode in filepaths when commit signing (#3588)
  • bb88e27 build: update distribution (#3583)
  • b378ed5 build(deps): bump p-limit from 6.1.0 to 6.2.0 (#3578)
  • fa9200e build(deps-dev): bump @​types/node from 18.19.67 to 18.19.68 (#3570)
  • 16e0059 build(deps-dev): bump prettier from 3.4.1 to 3.4.2 (#3560)
  • 5bffd5a build(deps-dev): bump eslint-import-resolver-typescript (#3559)
  • a22a0dd build(deps-dev): bump prettier from 3.4.0 to 3.4.1 (#3544)
  • b27ce37 build(deps-dev): bump @​types/node from 18.19.66 to 18.19.67 (#3543)
  • 4e0cc19 build(deps): bump @​octokit/plugin-paginate-rest from 11.3.5 to 11.3.6 (#3542)
  • 25b6871 docs: update scopes for push-to-fork
  • Additional commits viewable in compare view

Updates tj-actions/changed-files from 41 to 45

Release notes

Sourced from tj-actions/changed-files's releases.

v45

Changes in v45.0.6

What's Changed

Full Changelog: tj-actions/changed-files@v45...v45.0.6


Changes in v45.0.5

What's Changed

Full Changelog: tj-actions/changed-files@v45...v45.0.5


... (truncated)

Changelog

Sourced from tj-actions/changed-files's changelog.

Changelog

45.0.6 - (2025-01-03)

🐛 Bug Fixes

  • deps: Update dependency yaml to v2.7.0 (#2383) (5f974c2) - (renovate[bot])

⚙️ Miscellaneous Tasks

  • deps: Update dependency @​types/lodash to v4.17.14 (#2388) (d6e91a2) - (renovate[bot])
  • deps: Update dependency @​types/node to v22.10.5 (#2387) (73401cd) - (renovate[bot])
  • deps: Update dependency @​types/node to v22.10.4 (#2386) (7f28b2b) - (renovate[bot])
  • deps: Update dependency @​types/node to v22.10.3 (#2385) (c1f82ce) - (renovate[bot])
  • deps: Lock file maintenance (#2382) (bb364ec) - (renovate[bot])
  • deps: Update peter-evans/create-pull-request action to v7.0.6 (#2380) (7ac5902) - (renovate[bot])
  • deps: Lock file maintenance (#2379) (7c5097f) - (renovate[bot])
  • deps: Update dependency eslint-plugin-jest to v28.10.0 (#2378) (37dc9a5) - (renovate[bot])
  • deps: Lock file maintenance (#2377) (515a6b3) - (renovate[bot])
  • deps: Update dependency @​types/node to v22.10.2 (#2376) (ac47125) - (renovate[bot])
  • deps: Lock file maintenance (#2375) (ef3b6f1) - (renovate[bot])

⬆️ Upgrades

  • Upgraded to v45.0.5 (#2374)

Co-authored-by: jackton1 [email protected] (8082fbc) - (tj-actions[bot])

45.0.5 - (2024-12-05)

⚙️ Miscellaneous Tasks

  • deps: Update dependency eslint-plugin-github to v5.1.4 (#2372) (bab30c2) - (renovate[bot])
  • deps: Update dependency prettier to v3.4.2 (#2370) (657a3f9) - (renovate[bot])
  • deps: Lock file maintenance (#2369) (05f0aba) - (renovate[bot])
  • deps: Update dependency @​types/node to v22.10.1 (#2368) (4623961) - (renovate[bot])
  • deps: Update dependency eslint-plugin-github to v5.1.3 (#2367) (c19a7eb) - (renovate[bot])
  • deps: Update dependency prettier to v3.4.1 (#2366) (c288441) - (renovate[bot])
  • deps: Update dependency prettier to v3.4.0 (#2365) (1d6ea46) - (renovate[bot])
  • deps: Update dependency @​types/node to v22.10.0 (#2364) (02b41f5) - (renovate[bot])
  • deps: Update dependency @​types/node to v22.9.4 (#2361) (b4a4dca) - (renovate[bot])
  • deps: Lock file maintenance (#2360) (602aacf) - (renovate[bot])
  • deps: Update dependency @​types/node to v22.9.3 (#2359) (51290e0) - (renovate[bot])
  • deps: Update dependency @​types/node to v22.9.2 (#2358) (b4badd8) - (renovate[bot])
  • deps: Update dependency typescript to v5.7.2 (#2357) (652b4c0) - (renovate[bot])
  • deps-dev: Bump eslint-plugin-github from 5.0.2 to 5.1.1 (#2356) (0b7a421) - (dependabot[bot])
  • deps: Bump yaml from 2.6.0 to 2.6.1 (#2353) (b26581a) - (dependabot[bot])
  • deps: Update dependency @​types/node to v22.9.1 (#2352) (43e6b45) - (renovate[bot])
  • deps: Lock file maintenance (#2349) (fe1bc0e) - (renovate[bot])
  • deps: Update dependency @​vercel/ncc to v0.38.3 (#2348) (d7917c6) - (renovate[bot])

... (truncated)

Commits
  • d6e91a2 chore(deps): update dependency @​types/lodash to v4.17.14 (#2388)
  • 73401cd chore(deps): update dependency @​types/node to v22.10.5 (#2387)
  • 7f28b2b chore(deps): update dependency @​types/node to v22.10.4 (#2386)
  • c1f82ce chore(deps): update dependency @​types/node to v22.10.3 (#2385)
  • 5f974c2 fix(deps): update dependency yaml to v2.7.0 (#2383)
  • bb364ec chore(deps): lock file maintenance (#2382)
  • 7ac5902 chore(deps): update peter-evans/create-pull-request action to v7.0.6 (#2380)
  • 7c5097f chore(deps): lock file maintenance (#2379)
  • 37dc9a5 chore(deps): update dependency eslint-plugin-jest to v28....

    Description has been truncated

Bumps the github-actions group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [actions/add-to-project](https://github.com/actions/add-to-project) | `0.3.0` | `1.0.2` |
| [actions/checkout](https://github.com/actions/checkout) | `3` | `4` |
| [actions/setup-python](https://github.com/actions/setup-python) | `4` | `5` |
| [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) | `5` | `7` |
| [tj-actions/changed-files](https://github.com/tj-actions/changed-files) | `41` | `45` |


Updates `actions/add-to-project` from 0.3.0 to 1.0.2
- [Release notes](https://github.com/actions/add-to-project/releases)
- [Commits](actions/add-to-project@v0.3.0...v1.0.2)

Updates `actions/checkout` from 3 to 4
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v3...v4)

Updates `actions/setup-python` from 4 to 5
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](actions/setup-python@v4...v5)

Updates `peter-evans/create-pull-request` from 5 to 7
- [Release notes](https://github.com/peter-evans/create-pull-request/releases)
- [Commits](peter-evans/create-pull-request@v5...v7)

Updates `tj-actions/changed-files` from 41 to 45
- [Release notes](https://github.com/tj-actions/changed-files/releases)
- [Changelog](https://github.com/tj-actions/changed-files/blob/main/HISTORY.md)
- [Commits](tj-actions/changed-files@v41...v45)

---
updated-dependencies:
- dependency-name: actions/add-to-project
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/setup-python
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: peter-evans/create-pull-request
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: tj-actions/changed-files
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Jan 13, 2025
@btylerburton btylerburton merged commit 0bd961f into main Jan 13, 2025
6 checks passed
@btylerburton btylerburton deleted the dependabot/github_actions/github-actions-69fba2c8bf branch January 13, 2025 23:00
FuhuXia pushed a commit that referenced this pull request Feb 10, 2025
…ions-69fba2c8bf

Bump the github-actions group with 5 updates
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants