Explicitly disable sparse checkout unless asked for #1598

dscho · 2024-01-31T14:00:22Z

When a worktree is reused by actions/checkout and the first time sparse checkout was enabled, we need to ensure that the second time it is only a sparse checkout if explicitly asked for. Otherwise we need to disable the sparse checkout so that a full checkout is the outcome of this Action.

This fixes #1475

This should allow users to reuse existing folders when running `actions/checkout` where a previous run asked for a sparse checkout but the current run does not ask for a sparse checkout. This fixes actions#1475 Signed-off-by: Johannes Schindelin <johannes.schindelin@gmx.de>

Signed-off-by: Johannes Schindelin <johannes.schindelin@gmx.de>

dscho · 2024-01-31T14:45:26Z

It looks as if the test-proxy job fails even without these here changes, so I'll call this PR good to go.

There are use cases in particular with non-ephemeral runners where an existing worktree (that has been initialized as a sparse checkout) is reused in subsequent CI runs (where `actions/checkout` is run _without_ any `sparse-checkout` parameter). In these scenarios, we need to make sure that th 8000 e sparse checkout is disabled before checking out the files. Signed-off-by: Johannes Schindelin <johannes.schindelin@gmx.de>

jww3 · 2024-02-01T11:40:49Z

dist/index.js

+            if (!settings.sparseCheckout) {
+                yield git.disableSparseCheckout();
+            }
+            else {
                core.startGroup('Setting up sparse checkout');


do you want to pop the .startGroup / .endGroup calls outside of the if block?

Consider core.startGroup('Applying sparse checkout options');

No, because we're not actually setting up a sparse checkout. We're disabling it. But saying that would only make sense if there was a worktree already, otherwise there'd be no sparse checkout to disable.

Added a clarifying comment about test branches.

@fhammerl

Try pointing `test-proxy` at a custom container image `fdev321123/ubuntu-with-git` (courtesy of @fhammerl)

joshmgross · 2024-02-16T20:48:45Z

.github/workflows/test.yml

@@ -175,7 +190,7 @@ jobs:
  test-proxy:
    runs-on: ubuntu-latest
    container:
-      image: alpine/git:latest
+      image: fdev321123/ubuntu-with-git:latest


We should be very careful about adding in external dependencies to our workflows - https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions

If this is something we internally built, could we publish it to ghcr.io within this repository or org?

Agreed. This was something @fhammerl provided as a proof-of-concept, but I was just reading up about how to publish packages to ghcr.io and like the idea of hosting this container image at ghcr.io/actions (see neighboring packages here)

source: https://git-scm.com/download/linux

[![Mend Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/checkout](https://togithub.com/actions/checkout) | action | patch | `v4.1.1` -> `v4.1.4` | --- ### Release Notes <details> <summary>actions/checkout (actions/checkout)</summary> ### [`v4.1.4`](https://togithub.com/actions/checkout/blob/HEAD/CHANGELOG.md#v414) [Compare Source](https://togithub.com/actions/checkout/compare/v4.1.3...v4.1.4) - Disable `extensions.worktreeConfig` when disabling `sparse-checkout` by [@jww3](https://togithub.com/jww3) in [https://github.com/actions/checkout/pull/1692](https://togithub.com/actions/checkout/pull/1692) - Add dependabot config by [@cory-miller](https://togithub.com/cory-miller) in [https://github.com/actions/checkout/pull/1688](https://togithub.com/actions/checkout/pull/1688) - Bump the minor-actions-dependencies group with 2 updates by [@dependabot](https://togithub.com/dependabot) in [https://github.com/actions/checkout/pull/1693](https://togithub.com/actions/checkout/pull/1693) - Bump word-wrap from 1.2.3 to 1.2.5 by [@dependabot](https://togithub.com/dependabot) in [https://github.com/actions/checkout/pull/1643](https://togithub.com/actions/checkout/pull/1643) ### [`v4.1.3`](https://togithub.com/actions/checkout/releases/tag/v4.1.3) [Compare Source](https://togithub.com/actions/checkout/compare/v4.1.2...v4.1.3) #### What's Changed - Update `actions/checkout` version in `update-main-version.yml` by [@jww3](https://togithub.com/jww3) in [https://github.com/actions/checkout/pull/1650](https://togithub.com/actions/checkout/pull/1650) - Check git version before attempting to disable `sparse-checkout` by [@jww3](https://togithub.com/jww3) in [https://github.com/actions/checkout/pull/1656](https://togithub.com/actions/checkout/pull/1656) - Add SSH user parameter by [@cory-miller](https://togithub.com/cory-miller) in [https://github.com/actions/checkout/pull/1685](https://togithub.com/actions/checkout/pull/1685) **Full Changelog**: actions/checkout@v4.1.2...v4.1.3 ### [`v4.1.2`](https://togithub.com/actions/checkout/blob/HEAD/CHANGELOG.md#v412) [Compare Source](https://togithub.com/actions/checkout/compare/v4.1.1...v4.1.2) - Fix: Disable sparse checkout whenever `sparse-checkout` option is not present [@dscho](https://togithub.com/dscho) in [https://github.com/actions/checkout/pull/1598](https://togithub.com/actions/checkout/pull/1598) </details> --- ### Configuration 📅 **Schedule**: Branch creation - "before 4am on Monday" (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://developer.mend.io/github/kumojin/go-uuid).

[![Mend Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com) This PR contains the following updates: | Package | Type | Update | Change | OpenSSF | |---|---|---|---|---| | [actions/checkout](https://togithub.com/actions/checkout) | action | patch | `v4.1.1` -> `v4.1.3` | [![OpenSSF Scorecard](https://api.securityscorecards.dev/projects/github.com/actions/checkout/badge)](https://securityscorecards.dev/viewer/?uri=github.com/actions/checkout) | --- ### Release Notes <details> <summary>actions/checkout (actions/checkout)</summary> ### [`v4.1.3`](https://togithub.com/actions/checkout/releases/tag/v4.1.3) [Compare Source](https://togithub.com/actions/checkout/compare/v4.1.2...v4.1.3) #### What's Changed - Update `actions/checkout` version in `update-main-version.yml` by [@jww3](https://togithub.com/jww3) in [https://github.com/actions/checkout/pull/1650](https://togithub.com/actions/checkout/pull/1650) - Check git version before attempting to disable `sparse-checkout` by [@jww3](https://togithub.com/jww3) in [https://github.com/actions/checkout/pull/1656](https://togithub.com/actions/checkout/pull/1656) - Add SSH user parameter by [@cory-miller](https://togithub.com/cory-miller) in [https://github.com/actions/checkout/pull/1685](https://togithub.com/actions/checkout/pull/1685) **Full Changelog**: actions/checkout@v4.1.2...v4.1.3 ### [`v4.1.2`](https://togithub.com/actions/checkout/blob/HEAD/CHANGELOG.md#v412) [Compare Source](https://togithub.com/actions/checkout/compare/v4.1.1...v4.1.2) - Fix: Disable sparse checkout whenever `sparse-checkout` option is not present [@dscho](https://togithub.com/dscho) in [https://github.com/actions/checkout/pull/1598](https://togithub.com/actions/checkout/pull/1598) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://developer.mend.io/github/chezmoi-sh/nex.rpi).

This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | Type | Update | |---|---|---|---|---|---|---|---| | [@nuxt/fonts](https://redirect.github.com/nuxt/fonts) | [`^0.5.1` -> `^0.7.2`](https://renovatebot.com/diffs/npm/@nuxt%2ffonts/0.5.1/0.7.2) | [![age](https://developer.mend.io/api/mc/badges/age/npm/@nuxt%2ffonts/0.7.2?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/@nuxt%2ffonts/0.7.2?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/@nuxt%2ffonts/0.5.1/0.7.2?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@nuxt%2ffonts/0.5.1/0.7.2?slim=true)](https://docs.renovatebot.com/merge-confidence/) | dependencies | minor | | [actions/checkout](https://redirect.github.com/actions/checkout) | `v4.1.1` -> `v4.1.7` | [![age](https://developer.mend.io/api/mc/badges/age/github-tags/actions%2fcheckout/v4.1.7?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/github-tags/actions%2fcheckout/v4.1.7?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/github-tags/actions%2fcheckout/v4.1.1/v4.1.7?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/github-tags/actions%2fcheckout/v4.1.1/v4.1.7?slim=true)](https://docs.renovatebot.com/merge-confidence/) | action | patch | | [amannn/action-semantic-pull-request](https://redirect.github.com/amannn/action-semantic-pull-request) | `v5.5.2` -> `v5.5.3` | [![age](https://developer.mend.io/api/mc/badges/age/github-tags/amannn%2faction-semantic-pull-request/v5.5.3?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/github-tags/amannn%2faction-semantic-pull-request/v5.5.3?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/github-tags/amannn%2faction-semantic-pull-request/v5.5.2/v5.5.3?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/github-tags/amannn%2faction-semantic-pull-request/v5.5.2/v5.5.3?slim=true)](https://docs.renovatebot.com/merge-confidence/) | action | patch | | [trufflesecurity/trufflehog](https://redirect.github.com/trufflesecurity/trufflehog) | `v3.69.0` -> `v3.81.10` | [![age](https://developer.mend.io/api/mc/badges/age/github-tags/trufflesecurity%2ftrufflehog/v3.81.10?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/github-tags/trufflesecurity%2ftrufflehog/v3.81.10?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/github-tags/trufflesecurity%2ftrufflehog/v3.69.0/v3.81.10?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/github-tags/trufflesecurity%2ftrufflehog/v3.69.0/v3.81.10?slim=true)](https://docs.renovatebot.com/merge-confidence/) | action | minor | --- ### Release Notes <details> <summary>nuxt/fonts (@nuxt/fonts)</summary> ### [`v0.7.2`](https://redirect.github.com/nuxt/fonts/blob/HEAD/CHANGELOG.md#v072) [Compare Source](https://redirect.github.com/nuxt/fonts/compare/v0.7.1...v0.7.2) [compare changes](https://redirect.github.com/nuxt/fonts/compare/v0.7.1...v0.7.2) ##### 🔥 Performance - **local:** Use `tinyglobby` to scan font files ([#205](https://redirect.github.com/nuxt/fonts/pull/205)) ##### 🩹 Fixes - Apply `-` replacement to filename ([d83aa0d](https://redirect.github.com/nuxt/fonts/commit/d83aa0d)) - **adobe:** Use provided `css_names` from API ([#192](https://redirect.github.com/nuxt/fonts/pull/192)) - **fontsource:** Use `/variable` endpoint for retrieving variable axes ([#196](https://redirect.github.com/nuxt/fonts/pull/196)) ##### 📖 Documentation - Fix link to how it works ([#197](https://redirect.github.com/nuxt/fonts/pull/197)) - Update carbon abs ([7b61b15](https://redirect.github.com/nuxt/fonts/commit/7b61b15)) - Improvements ([9dab0a3](https://redirect.github.com/nuxt/fonts/commit/9dab0a3)) - Update social og image ([2991df2](https://redirect.github.com/nuxt/fonts/commit/2991df2)) - Fix open an issue link on installation page ([#206](https://redirect.github.com/nuxt/fonts/pull/206)) ##### 🏡 Chore - Lint ([dabc1ce](https://redirect.github.com/nuxt/fonts/commit/dabc1ce)) ##### ✅ Tests - Update snapshots ([5bc9ae6](https://redirect.github.com/nuxt/fonts/commit/5bc9ae6)) ##### ❤️ Contributors - Ben McCann ([@benmccann](http://github.com/benmccann)) - Kethan Vegunta ([@kethan1](http://github.com/kethan1)) - Daniel Roe ([@danielroe](http://github.com/danielroe)) - Sébastien Chopin ([@atinux](http://github.com/atinux)) - Tom Tang ([@qwerzl](http://github.com/qwerzl)) - Michel EDIGHOFFER <edimitchel@gmail.com> ### [`v0.7.1`](https://redirect.github.com/nuxt/fonts/blob/HEAD/CHANGELOG.md#v071) [Compare Source](https://redirect.github.com/nuxt/fonts/compare/v0.7.0...v0.7.1) [compare changes](https://redirect.github.com/nuxt/fonts/compare/v0.7.0...v0.7.1) ##### 🩹 Fixes - **local:** Scan for fonts in all public assets dirs ([6e7ae2b](https://redirect.github.com/nuxt/fonts/commit/6e7ae2b)) - Ensure we don't have font filenames prefixed with `-` ([dfa252a](https://redirect.github.com/nuxt/fonts/commit/dfa252a)) ##### 📖 Documentation - Add docs page ([#146](https://redirect.github.com/nuxt/fonts/pull/146)) - Update home page links ([8c91318](https://redirect.github.com/nuxt/fonts/commit/8c91318)) - Two more links ([5af0e5e](https://redirect.github.com/nuxt/fonts/commit/5af0e5e)) ##### 🏡 Chore - Add CODEOWNERS file ([#156](https://redirect.github.com/nuxt/fonts/pull/156)) - Lint ([1632eee](https://redirect.github.com/nuxt/fonts/commit/1632eee)) ##### ❤️ Contributors - Daniel Roe ([@danielroe](http://github.com/danielroe)) - Tom Tang ([@qwerzl](http://github.com/qwerzl)) ### [`v0.7.0`](https://redirect.github.com/nuxt/fonts/blob/HEAD/CHANGELOG.md#v070) [Compare Source](https://redirect.github.com/nuxt/fonts/compare/v0.6.1...v0.7.0) [compare changes](https://redirect.github.com/nuxt/fonts/compare/v0.6.1...v0.7.0) ##### 🚀 Enhancements - Allow configuring `font-stretch` property in override ([d7ff458](https://redirect.github.com/nuxt/fonts/commit/d7ff458)) - Add `preload` override + preload non subsetted fonts ([#136](https://redirect.github.com/nuxt/fonts/pull/136)) ##### 🩹 Fixes - Do not apply ignore patterns to `_fonts` public dir ([4952673](https://redirect.github.com/nuxt/fonts/commit/4952673)) ##### 📖 Documentation - Clarify that `addPreloadLinks` only affects production ([d3cbcdb](https://redirect.github.com/nuxt/fonts/commit/d3cbcdb)) - **readme:** Replace provider count ([#125](https://redirect.github.com/nuxt/fonts/pull/125)) ##### 🏡 Chore - Migrate to eslint v9 ([#121](https://redirect.github.com/nuxt/fonts/pull/121)) - Lint ([7fa0ef5](https://redirect.github.com/nuxt/fonts/commit/7fa0ef5)) - Update to latest `@nuxt/module-builder` ([#139](https://redirect.github.com/nuxt/fonts/pull/139)) ##### 🤖 CI - Add codecov token ([#140](https://redirect.github.com/nuxt/fonts/pull/140)) ##### ❤️ Contributors - Daniel Roe ([@danielroe](http://github.com/danielroe)) - Jonas Thelemann <e-mail+github@jonas-thelemann.de> ### [`v0.6.1`](https://redirect.github.com/nuxt/fonts/blob/HEAD/CHANGELOG.md#v061) [Compare Source](https://redirect.github.com/nuxt/fonts/compare/v0.6.0...v0.6.1) [compare changes](https://redirect.github.com/nuxt/fonts/compare/v0.6.0...v0.6.1) ##### 🩹 Fixes - Add style in variable font local fallback name ([#110](https://redirect.github.com/nuxt/fonts/pull/110)) ##### 📖 Documentation - Add link to adobe's terms and warning to read ([7872b28](https://redirect.github.com/nuxt/fonts/commit/7872b28)) - Mention non-latin subset support for adobe provider ([#109](https://redirect.github.com/nuxt/fonts/pull/109)) ##### 🏡 Chore - **release:** V0.6.0 ([0913b4b](https://redirect.github.com/nuxt/fonts/commit/0913b4b)) ##### ❤️ Contributors - Tom Tang ([@qwerzl](http://github.com/qwerzl)) - Daniel Roe ([@danielroe](http://github.com/danielroe)) ### [`v0.6.0`](https://redirect.github.com/nuxt/fonts/blob/HEAD/CHANGELOG.md#v060) [Compare Source](https://redirect.github.com/nuxt/fonts/compare/v0.5.1...v0.6.0) [compare changes](https://redirect.github.com/nuxt/fonts/compare/v0.5.1...v0.6.0) ##### 🚀 Enhancements - **fontsource:** Support variable fonts ([#102](https://redirect.github.com/nuxt/fonts/pull/102)) ##### 🩹 Fixes - Render variable font weight correctly ([#99](https://redirect.github.com/nuxt/fonts/pull/99)) - Preserve `@font-face` order when rendering ([836a605](https://redirect.github.com/nuxt/fonts/commit/836a605)) - Only prepend once 🤣 and update snapshots ([8a000ae](https://redirect.github.com/nuxt/fonts/commit/8a000ae)) - Adopt forward-compatible approach to `builder:watch` ([#101](https://redirect.github.com/nuxt/fonts/pull/101)) - Handle custom `app.baseURL` in development ([d9f4fae](https://redirect.github.com/nuxt/fonts/commit/d9f4fae)) ##### 📖 Documentation - Add image ([608653b](https://redirect.github.com/nuxt/fonts/commit/608653b)) - Mention disabling unocss web fonts preset ([627125b](https://redirect.github.com/nuxt/fonts/commit/627125b)) ##### 🏡 Chore - Link to latest version in badges ([42e7030](https://redirect.github.com/nuxt/fonts/commit/42e7030)) ##### ✅ Tests - Update poppins snapshot ([274ae5f](https://redirect.github.com/nuxt/fonts/commit/274ae5f)) ##### ❤️ Contributors - Daniel Roe ([@danielroe](http://github.com/danielroe)) - Tom Tang ([@qwerzl](http://github.com/qwerzl)) - Sébastien Chopin ([@Atinux](http://github.com/Atinux)) </details> <details> <summary>actions/checkout (actions/checkout)</summary> ### [`v4.1.7`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v417) [Compare Source](https://redirect.github.com/actions/checkout/compare/v4.1.6...v4.1.7) - Bump the minor-npm-dependencies group across 1 directory with 4 updates by [@dependabot](https://redirect.github.com/dependabot) in [https://github.com/actions/checkout/pull/1739](https://redirect.github.com/actions/checkout/pull/1739) - Bump actions/checkout from 3 to 4 by [@dependabot](https://redirect.github.com/dependabot) in [https://github.com/actions/checkout/pull/1697](https://redirect.github.com/actions/checkout/pull/1697) - Check out other refs/\* by commit by [@orhantoy](https://redirect.github.com/orhantoy) in [https://github.com/actions/checkout/pull/1774](https://redirect.github.com/actions/checkout/pull/1774) - Pin actions/checkout's own workflows to a known, good, stable version. by [@jww3](https://redirect.github.com/jww3) in [https://github.com/actions/checkout/pull/1776](https://redirect.github.com/actions/checkout/pull/1776) ### [`v4.1.6`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v416) [Compare Source](https://redirect.github.com/actions/checkout/compare/v4.1.5...v4.1.6) - Check platform to set archive extension appropriately by [@cory-miller](https://redirect.github.com/cory-miller) in [https://github.com/actions/checkout/pull/1732](https://redirect.github.com/actions/checkout/pull/1732) ### [`v4.1.5`](https://redirect.github.com/actions/checkout/releases/tag/v4.1.5) [Compare Source](https://redirect.github.com/actions/checkout/compare/v4.1.4...v4.1.5) #### What's Changed - Update NPM dependencies by [@cory-miller](https://redirect.github.com/cory-miller) in [https://github.com/actions/checkout/pull/1703](https://redirect.github.com/actions/checkout/pull/1703) - Bump github/codeql-action from 2 to 3 by [@dependabot](https://redirect.github.com/dependabot) in [https://github.com/actions/checkout/pull/1694](https://redirect.github.com/actions/checkout/pull/1694) - Bump actions/setup-node from 1 to 4 by [@dependabot](https://redirect.github.com/dependabot) in [https://github.com/actions/checkout/pull/1696](https://redirect.github.com/actions/checkout/pull/1696) - Bump actions/upload-artifact from 2 to 4 by [@dependabot](https://redirect.github.com/dependabot) in [https://github.com/actions/checkout/pull/1695](https://redirect.github.com/actions/checkout/pull/1695) - README: Suggest `user.email` to be `41898282+github-actions[bot]@users.noreply.github.com` by [@cory-miller](https://redirect.github.com/cory-miller) in [https://github.com/actions/checkout/pull/1707](https://redirect.github.com/actions/checkout/pull/1707) **Full Changelog**: https://github.com/actions/checkout/compare/v4.1.4...v4.1.5 ### [`v4.1.4`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v414) [Compare Source](https://redirect.github.com/actions/checkout/compare/v4.1.3...v4.1.4) - Disable `extensions.worktreeConfig` when disabling `sparse-checkout` by [@jww3](https://redirect.github.com/jww3) in [https://github.com/actions/checkout/pull/1692](https://redirect.github.com/actions/checkout/pull/1692) - Add dependabot config by [@cory-miller](https://redirect.github.com/cory-miller) in [https://github.com/actions/checkout/pull/1688](https://redirect.github.com/actions/checkout/pull/1688) - Bump the minor-actions-dependencies group with 2 updates by [@dependabot](https://redirect.github.com/dependabot) in [https://github.com/actions/checkout/pull/1693](https://redirect.github.com/actions/checkout/pull/1693) - Bump word-wrap from 1.2.3 to 1.2.5 by [@dependabot](https://redirect.github.com/dependabot) in [https://github.com/actions/checkout/pull/1643](https://redirect.github.com/actions/checkout/pull/1643) ### [`v4.1.3`](https://redirect.github.com/actions/checkout/releases/tag/v4.1.3) [Compare Source](https://redirect.github.com/actions/checkout/compare/v4.1.2...v4.1.3) #### What's Changed - Update `actions/checkout` version in `update-main-version.yml` by [@jww3](https://redirect.github.com/jww3) in [https://github.com/actions/checkout/pull/1650](https://redirect.github.com/actions/checkout/pull/1650) - Check git version before attempting to disable `sparse-checkout` by [@jww3](https://redirect.github.com/jww3) in [https://github.com/actions/checkout/pull/1656](https://redirect.github.com/actions/checkout/pull/1656) - Add SSH user parameter by [@cory-miller](https://redirect.github.com/cory-miller) in [https://github.com/actions/checkout/pull/1685](https://redirect.github.com/actions/checkout/pull/1685) **Full Changelog**: https://github.com/actions/checkout/compare/v4.1.2...v4.1.3 ### [`v4.1.2`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v412) [Compare Source](https://redirect.github.com/actions/checkout/compare/v4.1.1...v4.1.2) - Fix: Disable sparse checkout whenever `sparse-checkout` option is not present [@dscho](https://redirect.github.com/dscho) in [https://github.com/actions/checkout/pull/1598](https://redirect.github.com/actions/checkout/pull/1598) </details> <details> <summary>amannn/action-semantic-pull-request (amannn/action-semantic-pull-request)</summary> ### [`v5.5.3`](https://redirect.github.com/amannn/action-semantic-pull-request/releases/tag/v5.5.3) [Compare Source](https://redirect.github.com/amannn/action-semantic-pull-request/compare/v5.5.2...v5.5.3) ##### Bug Fixes - Bump `braces` dependency ([#269](https://redirect.github.com/amannn/action-semantic-pull-request/issues/269). by [@EelcoLos](https://redirect.github.com/EelcoLos)) ([2d952a1](https://redirect.github.com/amannn/action-semantic-pull-request/commit/2d952a1bf90a6a7ab8f0293dc86f5fdf9acb1915)) </details> <details> <summary>trufflesecurity/trufflehog (trufflesecurity/trufflehog)</summary> ### [`v3.81.10`](https://redirect.github.com/trufflesecurity/trufflehog/releases/tag/v3.81.10) [Compare Source](https://redirect.github.com/trufflesecurity/trufflehog/compare/v3.81.9...v3.81.10) #### What's Changed - fix(deps): update module github.com/sendgrid/sendgrid-go to v3.15.0+incompatible by [@renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3214](https://redirect.github.com/trufflesecurity/trufflehog/pull/3214) - fix(deps): update module github.com/charmbracelet/bubbletea to v0.27.0 by [@renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3229](https://redirect.github.com/trufflesecurity/trufflehog/pull/3229) - chore(deps): update golang docker tag to v1.23 by [@renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3228](https://redirect.github.com/trufflesecurity/trufflehog/pull/3228) - fix(deps): update module github.com/prometheus/client_golang to v1.20.1 by [@renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3236](https://redirect.github.com/trufflesecurity/trufflehog/pull/3236) - fix(deps): update module google.golang.org/api to v0.192.0 by [@renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3237](https://redirect.github.com/trufflesecurity/trufflehog/pull/3237) - fix(deps): update module google.golang.org/api to v0.193.0 by [@renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3238](https://redirect.github.com/trufflesecurity/trufflehog/pull/3238) - fix(deps): update testcontainers-go monorepo to v0.33.0 by [@renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3239](https://redirect.github.com/trufflesecurity/trufflehog/pull/3239) - fix(deps): update module cloud.google.com/go/secretmanager to v1.14.0 by [@renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3240](https://redirect.github.com/trufflesecurity/trufflehog/pull/3240) - Customize results cleaning (using smuggled interface) by [@rosecodym](https://redirect.github.com/rosecodym) in [https://github.com/trufflesecurity/trufflehog/pull/3235](https://redirect.github.com/trufflesecurity/trufflehog/pull/3235) - Skip filtration for targeted scans by [@rosecodym](https://redirect.github.com/rosecodym) in [https://github.com/trufflesecurity/trufflehog/pull/3243](https://redirect.github.com/trufflesecurity/trufflehog/pull/3243) - Strip leading +/- from GitHub target diffs by [@rosecodym](https://redirect.github.com/rosecodym) in [https://github.com/trufflesecurity/trufflehog/pull/3244](https://redirect.github.com/trufflesecurity/trufflehog/pull/3244) - Th 899 postman panic issue by [@LaraCroftDev](https://redirect.github.com/LaraCroftDev) in [https://github.com/trufflesecurity/trufflehog/pull/3245](https://redirect.github.com/trufflesecurity/trufflehog/pull/3245) - Update rotation guide link for teams by [@hxnyk](https://redirect.github.com/hxnyk) in [https://github.com/trufflesecurity/trufflehog/pull/3248](https://redirect.github.com/trufflesecurity/trufflehog/pull/3248) - Download files when reverifying by [@rosecodym](https://redirect.github.com/rosecodym) in [https://github.com/trufflesecurity/trufflehog/pull/3252](https://redirect.github.com/trufflesecurity/trufflehog/pull/3252) - \[chore] - Update buffer by [@ahrav](https://redirect.github.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/3255](https://redirect.github.com/trufflesecurity/trufflehog/pull/3255) #### New Contributors - [@LaraCroftDev](https://redirect.github.com/LaraCroftDev) made their first contribution in [https://github.com/trufflesecurity/trufflehog/pull/3245](https://redirect.github.com/trufflesecurity/trufflehog/pull/3245) **Full Changelog**: https://github.com/trufflesecurity/trufflehog/compare/v3.81.9.. 97AE .v3.81.10 ### [`v3.81.9`](https://redirect.github.com/trufflesecurity/trufflehog/releases/tag/v3.81.9) [Compare Source](https://redirect.github.com/trufflesecurity/trufflehog/compare/v3.81.8...v3.81.9) #### What's Changed - Capture decoding time metric by [@rosecodym](https://redirect.github.com/rosecodym) in [https://github.com/trufflesecurity/trufflehog/pull/3209](https://redirect.github.com/trufflesecurity/trufflehog/pull/3209) - fix(deps): update module cloud.google.com/go/secretmanager to v1.13.6 by [@renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3208](https://redirect.github.com/trufflesecurity/trufflehog/pull/3208) - remove two letter keyword by [@0x1](https://redirect.github.com/0x1) in [https://github.com/trufflesecurity/trufflehog/pull/3210](https://redirect.github.com/trufflesecurity/trufflehog/pull/3210) - Add metrics for command invocation by [@mcastorina](https://redirect.github.com/mcastorina) in [https://github.com/trufflesecurity/trufflehog/pull/3185](https://redirect.github.com/trufflesecurity/trufflehog/pull/3185) - chore(deps): update sigstore/cosign-installer action to v3.6.0 by [@renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3211](https://redirect.github.com/trufflesecurity/trufflehog/pull/3211) - \[analyze] Capture the hierarchy of GitHub permissions by [@mcastorina](https://redirect.github.com/mcastorina) in [https://github.com/trufflesecurity/trufflehog/pull/3127](https://redirect.github.com/trufflesecurity/trufflehog/pull/3127) - \[analyze] Fix GitHub token expiration parsing by [@mcastorina](https://redirect.github.com/mcastorina) in [https://github.com/trufflesecurity/trufflehog/pull/3205](https://redirect.github.com/trufflesecurity/trufflehog/pull/3205) - \[chore] Fix lint errors by [@mcastorina](https://redirect.github.com/mcastorina) in [https://github.com/trufflesecurity/trufflehog/pull/3218](https://redirect.github.com/trufflesecurity/trufflehog/pull/3218) - \[chore] Ignore analyzer implementation tests in test-community by [@mcastorina](https://redirect.github.com/mcastorina) in [https://github.com/trufflesecurity/trufflehog/pull/3219](https://redirect.github.com/trufflesecurity/trufflehog/pull/3219) - Support for kebab case and dot notation in permission generation tool by [@abmussani](https://redirect.github.com/abmussani) in [https://github.com/trufflesecurity/trufflehog/pull/3222](https://redirect.github.com/trufflesecurity/trufflehog/pull/3222) - Improve domain / url handling in detectors by [@dustin-decker](https://redirect.github.com/dustin-decker) in [https://github.com/trufflesecurity/trufflehog/pull/3221](https://redirect.github.com/trufflesecurity/trufflehog/pull/3221) **Full Changelog**: https://github.com/trufflesecurity/trufflehog/compare/v3.81.8...v3.81.9 ### [`v3.81.8`](https://redirect.github.com/trufflesecurity/trufflehog/releases/tag/v3.81.8) [Compare Source](https://redirect.github.com/trufflesecurity/trufflehog/compare/v3.81.7...v3.81.8) #### What's Changed - \[analyze] Deduplicate finegrained GitHub permissions by [@mcastorina](https://redirect.github.com/mcastorina) in [https://github.com/trufflesecurity/trufflehog/pull/3196](https://redirect.github.com/trufflesecurity/trufflehog/pull/3196) - fix(deps): update module golang.org/x/net to v0.28.0 by [@renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3187](https://redirect.github.com/trufflesecurity/trufflehog/pull/3187) - \[analyze] Fix double-print in postgres analyzer by [@mcastorina](https://redirect.github.com/mcastorina) in [https://github.com/trufflesecurity/trufflehog/pull/3199](https://redirect.github.com/trufflesecurity/trufflehog/pull/3199) - fix(deps): update module go.mongodb.org/mongo-driver to v1.16.1 by [@renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3197](https://redirect.github.com/trufflesecurity/trufflehog/pull/3197) - Log when a detector ignores the timeout by [@rosecodym](https://redirect.github.com/rosecodym) in [https://github.com/trufflesecurity/trufflehog/pull/3201](https://redirect.github.com/trufflesecurity/trufflehog/pull/3201) - \[bug] - Correctly Handle Large Files in BufferedReadSeeker by [@ahrav](https://redirect.github.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/3203](https://redirect.github.com/trufflesecurity/trufflehog/pull/3203) - fix(deps): update module github.com/google/go-containerregistry to v0.20.2 by [@renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3184](https://redirect.github.com/trufflesecurity/trufflehog/pull/3184) **Full Changelog**: https://github.com/trufflesecurity/trufflehog/compare/v3.81.7...v3.81.8 ### [`v3.81.7`](https://redirect.github.com/trufflesecurity/trufflehog/releases/tag/v3.81.7) [Compare Source](https://redirect.github.com/trufflesecurity/trufflehog/compare/v3.81.6...v3.81.7) #### What's Changed - fix(deps): update module golang.org/x/crypto to v0.26.0 by [@renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3182](https://redirect.github.com/trufflesecurity/trufflehog/pull/3182) - fix(deps): update module golang.org/x/text to v0.17.0 - autoclosed by [@renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3183](https://redirect.github.com/trufflesecurity/trufflehog/pull/3183) - \[analyze] Add analyze option to main TUI and unhide subcommand by [@mcastorina](https://redirect.github.com/mcastorina) in [https://github.com/trufflesecurity/trufflehog/pull/3186](https://redirect.github.com/trufflesecurity/trufflehog/pull/3186) - Analyzer capitalization by [@hxnyk](https://redirect.github.com/hxnyk) in [https://github.com/trufflesecurity/trufflehog/pull/3188](https://redirect.github.com/trufflesecurity/trufflehog/pull/3188) - \[analyze] Bandaid solution for occasional slow startups by [@mcastorina](https://redirect.github.com/mcastorina) in [https://github.com/trufflesecurity/trufflehog/pull/3191](https://redirect.github.com/trufflesecurity/trufflehog/pull/3191) - \[analyze] Add basic section to README by [@mcastorina](https://redirect.github.com/mcastorina) in [https://github.com/trufflesecurity/trufflehog/pull/3190](https://redirect.github.com/trufflesecurity/trufflehog/pull/3190) - Fixes for a few finegrained token issues by [@dustin-decker](https://redirect.github.com/dustin-decker) in [https://github.com/trufflesecurity/trufflehog/pull/3194](https://redirect.github.com/trufflesecurity/trufflehog/pull/3194) **Full Changelog**: https://github.com/trufflesecurity/trufflehog/compare/v3.81.6...v3.81.7 ### [`v3.81.6`](https://redirect.github.com/trufflesecurity/trufflehog/releases/tag/v3.81.6) [Compare Source](https://redirect.github.com/trufflesecurity/trufflehog/compare/v3.81.5...v3.81.6) #### What's Changed - Auth GitHub in Init by [@rosecodym](https://redirect.github.com/rosecodym) in [https://github.com/trufflesecurity/trufflehog/pull/3131](https://redirect.github.com/trufflesecurity/trufflehog/pull/3131) - fix(deps): update module github.com/envoyproxy/protoc-gen-validate to v1.1.0 by [@renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3176](https://redirect.github.com/trufflesecurity/trufflehog/pull/3176) - Analyze TUI by [@mcastorina](https://redirect.github.com/mcastorina) in [https://github.com/trufflesecurity/trufflehog/pull/3172](https://redirect.github.com/trufflesecurity/trufflehog/pull/3172) - \[analyze] Separate SID from token in twilio analyzer by [@mcastorina](https://redirect.github.com/mcastorina) in [https://github.com/trufflesecurity/trufflehog/pull/3177](https://redirect.github.com/trufflesecurity/trufflehog/pull/3177) - \[chore] Use custom HTTP client in sendgrid analyzer by [@mcastorina](https://redirect.github.com/mcastorina) in [https://github.com/trufflesecurity/trufflehog/pull/3178](https://redirect.github.com/trufflesecurity/trufflehog/pull/3178) - Improve finegrained token support by [@dustin-decker](https://redirect.github.com/dustin-decker) in [https://github.com/trufflesecurity/trufflehog/pull/3179](https://redirect.github.com/trufflesecurity/trufflehog/pull/3179) **Full Changelog**: https://github.com/trufflesecurity/trufflehog/compare/v3.81.5...v3.81.6 ### [`v3.81.5`](https://redirect.github.com/trufflesecurity/trufflehog/releases/tag/v3.81.5) [Compare Source](https://redirect.github.com/trufflesecurity/trufflehog/compare/v3.81.4...v3.81.5) #### What's Changed - Update README.md for github experimental by [@joeleonjr](https://redirect.github.com/joeleonjr) in [https://github.com/trufflesecurity/trufflehog/pull/3160](https://redirect.github.com/trufflesecurity/trufflehog/pull/3160) - fix(deps): update module github.com/schollz/progressbar/v3 to v3.14.6 by [@renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3158](https://redirect.github.com/trufflesecurity/trufflehog/pull/3158) - \[analyze] Fix off-by-one error in generated data structures by [@mcastorina](https://redirect.github.com/mcastorina) in [https://github.com/trufflesecurity/trufflehog/pull/3162](https://redirect.github.com/trufflesecurity/trufflehog/pull/3162) - \[bug] - Create a new context with timeout per request by [@ahrav](https://redirect.github.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/3163](https://redirect.github.com/trufflesecurity/trufflehog/pull/3163) - \[analyze] Use permission enum values in openai analyzer by [@mcastorina](https://redirect.github.com/mcastorina) in [https://github.com/trufflesecurity/trufflehog/pull/3165](https://redirect.github.com/trufflesecurity/trufflehog/pull/3165) - update pattern by [@dustin-decker](https://redirect.github.com/dustin-decker) in [https://github.com/trufflesecurity/trufflehog/pull/3167](https://redirect.github.com/trufflesecurity/trufflehog/pull/3167) - Update Zulip detector by [@rgmz](https://redirect.github.com/rgmz) in [https://github.com/trufflesecurity/trufflehog/pull/2897](https://redirect.github.com/trufflesecurity/trufflehog/pull/2897) - fix(deps): update module golang.org/x/oauth2 to v0.22.0 by [@renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3168](https://redirect.github.com/trufflesecurity/trufflehog/pull/3168) - fix(deps): update module golang.org/x/sync to v0.8.0 by [@renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3169](https://redirect.github.com/trufflesecurity/trufflehog/pull/3169) - fix(deps): update github.com/tailscale/depaware digest to [`585336c`](https://redirect.github.com/trufflesecurity/trufflehog/commit/585336c) by [@renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3166](https://redirect.github.com/trufflesecurity/trufflehog/pull/3166) - Change log verbosity for detection errors by [@dustin-decker](https://redirect.github.com/dustin-decker) in [https://github.com/trufflesecurity/trufflehog/pull/3171](https://redirect.github.com/trufflesecurity/trufflehog/pull/3171) **Full Changelog**: https://github.com/trufflesecurity/trufflehog/compare/v3.81.4...v3.81.5 ### [`v3.81.4`](https://redirect.github.com/trufflesecurity/trufflehog/releases/tag/v3.81.4) [Compare Source](https://redirect.github.com/trufflesecurity/trufflehog/compare/v3.81.3...v3.81.4) #### What's Changed - \[bug] - add context timeout to ssh verification by [@ahrav](https://redirect.github.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/3161](https://redirect.github.com/trufflesecurity/trufflehog/pull/3161) **Full Changelog**: https://github.com/trufflesecurity/trufflehog/compare/v3.81.3...v3.81.4 ### [`v3.81.3`](https://redirect.github.com/trufflesecurity/trufflehog/releases/tag/v3.81.3) [Compare Source](https://redirect.github.com/trufflesecurity/trufflehog/compare/v3.81.2...v3.81.3) #### What's Changed - \[chore] - log detector type on error by [@ahrav](https://redirect.github.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/3159](https://redirect.github.com/trufflesecurity/trufflehog/pull/3159) **Full Changelog**: https://github.com/trufflesecurity/trufflehog/compare/v3.81.2...v3.81.3 ### [`v3.81.2`](https://redirect.github.com/trufflesecurity/trufflehog/releases/tag/v3.81.2) [Compare Source](https://redirect.github.com/trufflesecurity/trufflehog/compare/v3.81.1...v3.81.2) #### What's Changed - \[chore] - set custom transport for the Docker client by [@ahrav](https://redirect.github.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/3156](https://redirect.github.com/trufflesecurity/trufflehog/pull/3156) **Full Changelog**: https://github.com/trufflesecurity/trufflehog/compare/v3.81.1...v3.81.2 ### [`v3.81.1`](https://redirect.github.com/trufflesecurity/trufflehog/releases/tag/v3.81.1) [Compare Source](https://redirect.github.com/trufflesecurity/trufflehog/compare/v3.81.0...v3.81.1) #### What's Changed - \[chore] - enable block and mutex profiles by [@ahrav](https://redirect.github.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/3154](https://redirect.github.com/trufflesecurity/trufflehog/pull/3154) - Add Analyzers interface for Square by [@abmussani](https://redirect.github.com/abmussani) in [https://github.com/trufflesecurity/trufflehog/pull/3141](https://redirect.github.com/trufflesecurity/trufflehog/pull/3141) - Update module google.golang.org/api to v0.190.0 by [@renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3146](https://redirect.github.com/trufflesecurity/trufflehog/pull/3146) - quick patch for cfor enumeration by [@joeleonjr](https://redirect.github.com/joeleonjr) in [https://github.com/trufflesecurity/trufflehog/pull/3155](https://redirect.github.com/trufflesecurity/trufflehog/pull/3155) - Add Analyzers interface for HuggingFace by [@abmussani](https://redirect.github.com/abmussani) in [https://github.com/trufflesecurity/trufflehog/pull/3140](https://redirect.github.com/trufflesecurity/trufflehog/pull/3140) **Full Changelog**: https://github.com/trufflesecurity/trufflehog/compare/v3.81.0...v3.81.1 ### [`v3.81.0`](https://redirect.github.com/trufflesecurity/trufflehog/releases/tag/v3.81.0) [Compare Source](https://redirect.github.com/trufflesecurity/trufflehog/compare/v3.80.6...v3.81.0) #### What's Changed - Add progress bar to CFOR by [@dustin-decker](https://redirect.github.com/dustin-decker) in [https://github.com/trufflesecurity/trufflehog/pull/3151](https://redirect.github.com/trufflesecurity/trufflehog/pull/3151) - \[fix] Always configure the engine with the default detectors by [@mcastorina](https://redirect.github.com/mcastorina) in [https://github.com/trufflesecurity/trufflehog/pull/3152](https://redirect.github.com/trufflesecurity/trufflehog/pull/3152) **Full Changelog**: https://github.com/trufflesecurity/trufflehog/compare/v3.80.6...v3.81.0 ### [`v3.80.6`](https://redirect.github.com/trufflesecurity/trufflehog/releases/tag/v3.80.6) [Compare Source](https://redirect.github.com/trufflesecurity/trufflehog/compare/v3.80.5...v3.80.6) #### What's Changed - Add Analyze interface to Stripe by [@abmussani](https://redirect.github.com/abmussani) in [https://github.com/trufflesecurity/trufflehog/pull/3132](https://redirect.github.com/trufflesecurity/trufflehog/pull/3132) - \[analyze] Combine access level into permission value by [@mcastorina](https://redirect.github.com/mcastorina) in [https://github.com/trufflesecurity/trufflehog/pull/3144](https://redirect.github.com/trufflesecurity/trufflehog/pull/3144) - \[chore] - move automaxprocs to init by [@ahrav](https://redirect.github.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/3143](https://redirect.github.com/trufflesecurity/trufflehog/pull/3143) - add twilio analyze relationships by [@dustin-decker](https://redirect.github.com/dustin-decker) in [https://github.com/trufflesecurity/trufflehog/pull/3148](https://redirect.github.com/trufflesecurity/trufflehog/pull/3148) - \[chore] Only set default detectors if none are provided by [@mcastorina](https://redirect.github.com/mcastorina) in [https://github.com/trufflesecurity/trufflehog/pull/3147](https://redirect.github.com/trufflesecurity/trufflehog/pull/3147) - CFOR Commit Scanner by [@joeleonjr](https://redirect.github.com/joeleonjr) in [https://github.com/trufflesecurity/trufflehog/pull/3145](https://redirect.github.com/trufflesecurity/trufflehog/pull/3145) - \[perf] - Leverage pgzip for Parallel decompression by [@ahrav](https://redirect.github.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/3149](https://redirect.github.com/trufflesecurity/trufflehog/pull/3149) **Full Changelog**: https://github.com/trufflesecurity/trufflehog/compare/v3.80.5...v3.80.6 ### [`v3.80.5`](https://redirect.github.com/trufflesecurity/trufflehog/releases/tag/v3.80.5) [Compare Source](https://redirect.github.com/trufflesecurity/trufflehog/compare/3.80.4...v3.80.5) #### What's Changed - Add permissions lookup tables by [@dustin-decker](https://redirect.github.com/dustin-decker) in [https://github.com/trufflesecurity/trufflehog/pull/3125](https://redirect.github.com/trufflesecurity/trufflehog/pull/3125) - Export maps from permission generation by [@hxnyk](https://redirect.github.com/hxnyk) in [https://github.com/trufflesecurity/trufflehog/pull/3137](https://redirect.github.com/trufflesecurity/trufflehog/pull/3137) - \[chore] - Set GOMAXPROCS by [@ahrav](https://redirect.github.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/3136](https://redirect.github.com/trufflesecurity/trufflehog/pull/3136) - \[chore] - address linter by [@ahrav](https://redirect.github.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/3133](https://redirect.github.com/trufflesecurity/trufflehog/pull/3133) - \[refactor] - Improve Performance by Shifting Concurrency from Image to Layer Level by [@ahrav](https://redirect.github.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/3135](https://redirect.github.com/trufflesecurity/trufflehog/pull/3135) **Full Changelog**: https://github.com/trufflesecurity/trufflehog/compare/3.80.4...v3.80.5 ### [`v3.80.4`](https://redirect.github.com/trufflesecurity/trufflehog/releases/tag/3.80.4) [Compare Source](https://redirect.github.com/trufflesecurity/trufflehog/compare/v3.80.3...3.80.4) #### What's Changed - Analyzer partial implementations by [@mcastorina](https://redirect.github.com/mcastorina) in [https://github.com/trufflesecurity/trufflehog/pull/3114](https://redirect.github.com/trufflesecurity/trufflehog/pull/3114) - fix(deps): update module github.com/aws/aws-sdk-go to v1.55.5 by [@renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3116](https://redirect.github.com/trufflesecurity/trufflehog/pull/3116) - Separate out printing statements with anlayzer logic for Shopify by [@abmussani](https://redirect.github.com/abmussani) in [https://github.com/trufflesecurity/trufflehog/pull/3123](https://redirect.github.com/trufflesecurity/trufflehog/pull/3123) - Separate out printing statements with anlayzer logic for Square by [@abmussani](https://redirect.github.com/abmussani) in [https://github.com/trufflesecurity/trufflehog/pull/3122](https://redirect.github.com/trufflesecurity/trufflehog/pull/3122) - Separate out printing statements with anlayzer logic for twilio by [@abmussani](https://redirect.github.com/abmussani) in [https://github.com/trufflesecurity/trufflehog/pull/3118](https://redirect.github.com/trufflesecurity/trufflehog/pull/3118) - Add new canary ID by [@dustin-decker](https://redirect.github.com/dustin-decker) in [https://github.com/trufflesecurity/trufflehog/pull/3117](https://redirect.github.com/trufflesecurity/trufflehog/pull/3117) - Update GitHub integration tests by [@rosecodym](https://redirect.github.com/rosecodym) in [https://github.com/trufflesecurity/trufflehog/pull/3124](https://redirect.github.com/trufflesecurity/trufflehog/pull/3124) - Separate out printing statements with anlayzer logic for Slack by [@abmussani](https://redirect.github.com/abmussani) in [https://github.com/trufflesecurity/trufflehog/pull/3121](https://redirect.github.com/trufflesecurity/trufflehog/pull/3121) - Separate out printing statements with anlayzer logic for Stripe by [@abmussani](https://redirect.github.com/abmussani) in [https://github.com/trufflesecurity/trufflehog/pull/3120](https://redirect.github.com/trufflesecurity/trufflehog/pull/3120) - nitro detector was removed and needs to be deprecated by [@0x1](https://redirect.github.com/0x1) in [https://github.com/trufflesecurity/trufflehog/pull/3102](https://redirect.github.com/trufflesecurity/trufflehog/pull/3102) - Separate out printing statements with anlayzer logic for SourceGraph by [@abmussani](https://redirect.github.com/abmussani) in [https://github.com/trufflesecurity/trufflehog/pull/3119](https://redirect.github.com/trufflesecurity/trufflehog/pull/3119) **Full Changelog**: https://github.com/trufflesecurity/trufflehog/compare/v3.80.3...3.80.4 ### [`v3.80.3`](https://redirect.github.com/trufflesecurity/trufflehog/releases/tag/v3.80.3) [Compare Source](https://redirect.github.com/trufflesecurity/trufflehog/compare/v3.80.2...v3.80.3) #### What's Changed - fix(deps): update module github.com/gabriel-vasile/mimetype to v1.4.5 by [@renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3108](https://redirect.github.com/trufflesecurity/trufflehog/pull/3108) - \[chore] Move openai log message to proper function by [@mcastorina](https://redirect.github.com/mcastorina) in [https://github.com/trufflesecurity/trufflehog/pull/3105](https://redirect.github.com/trufflesecurity/trufflehog/pull/3105) - fix(deps): update module github.com/aws/aws-sdk-go to v1.55.3 by [@renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3107](https://redirect.github.com/trufflesecurity/trufflehog/pull/3107) - \[analyze] Implement Analyzer interface for github by [@mcastorina](https://redirect.github.com/mcastorina) in [https://github.com/trufflesecurity/trufflehog/pull/3110](https://redirect.github.com/trufflesecurity/trufflehog/pull/3110) - Support openai project and fine grained tokens by [@dustin-decker](https://redirect.github.com/dustin-decker) in [https://github.com/trufflesecurity/trufflehog/pull/3112](https://redirect.github.com/trufflesecurity/trufflehog/pull/3112) - \[analyze] Add description and user to openai metadata by [@mcastorina](https://redirect.github.com/mcastorina) in [https://github.com/trufflesecurity/trufflehog/pull/3111](https://redirect.github.com/trufflesecurity/trufflehog/pull/3111) - \[chore] - Manually update Depedencies by [@ahrav](https://redirect.github.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/3106](https://redirect.github.com/trufflesecurity/trufflehog/pull/3106) - Use non-canary credentials for AWS tests by [@rosecodym](https://redirect.github.com/rosecodym) in [https://github.com/trufflesecurity/trufflehog/pull/3109](https://redirect.github.com/trufflesecurity/trufflehog/pull/3109) - Include default detectors when using a config that contains detectors by [@harmonherring-pro](https://redirect.github.com/harmonherring-pro) in [https://github.com/trufflesecurity/trufflehog/pull/3115](https://redirect.github.com/trufflesecurity/trufflehog/pull/3115) **Full Changelog**: https://github.com/trufflesecurity/trufflehog/compare/v3.80.2...v3.80.3 ### [`v3.80.2`](https://redirect.github.com/trufflesecurity/trufflehog/releases/tag/v3.80.2) [Compare Source](https://redirect.github.com/trufflesecurity/trufflehog/compare/v3.80.1...v3.80.2) #### What's Changed - Added Twitter v2 Detector by [@abmussani](https://redirect.github.com/abmussani) in [https://github.com/trufflesecurity/trufflehog/pull/3016](https://redirect.github.com/trufflesecurity/trufflehog/pull/3016) - fix(deps): update module github.com/aws/aws-sdk-go to v1.54.20 by [@renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3077](https://redirect.github.com/trufflesecurity/trufflehog/pull/3077) - \[bug] - add verify check by [@ahrav](https://redirect.github.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/3079](https://redirect.github.com/trufflesecurity/trufflehog/pull/3079) - \[chore] - Reduce `VerificationOverlapWorker`s by [@ahrav](https://redirect.github.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/3082](https://redirect.github.com/trufflesecurity/trufflehog/pull/3082) - fix(deps): update module github.com/couchbase/gocb/v2 to v2.9.1 by [@renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3078](https://redirect.github.com/trufflesecurity/trufflehog/pull/3078) - fix(deps): update golang.org/x/exp digest to [`8a7402a`](https://redirect.github.com/trufflesecurity/trufflehog/commit/8a7402a) by [@renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3083](https://redirect.github.com/trufflesecurity/trufflehog/pull/3083) - fix(deps): update module github.com/googleapis/gax-go/v2 to v2.13.0 by [@renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3085](https://redirect.github.com/trufflesecurity/trufflehog/pull/3085) - fix(deps): update module google.golang.org/api to v0.189.0 by [@renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3086](https://redirect.github.com/trufflesecurity/trufflehog/pull/3086) - implemented a netsuite detector by [@abmussani](https://redirect.github.com/abmussani) in [https://github.com/trufflesecurity/trufflehog/pull/3068](https://redirect.github.com/trufflesecurity/trufflehog/pull/3068) - Remove onwater detector by [@trufflesteeeve](https://redirect.github.com/trufflesteeeve) in [https://github.com/trufflesecurity/trufflehog/pull/3088](https://redirect.github.com/trufflesecurity/trufflehog/pull/3088) - Fixed Crash issue in atlassian V2 if data in response is empty array by [@abmussani](https://redirect.github.com/abmussani) in [https://github.com/trufflesecurity/trufflehog/pull/3091](https://redirect.github.com/trufflesecurity/trufflehog/pull/3091) - fix(deps): update module github.com/aws/aws-sdk-go to v1.55.1 by [@renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3087](https://redirect.github.com/trufflesecurity/trufflehog/pull/3087) - fix(deps): update module github.com/aws/aws-sdk-go to v1.55.2 by [@renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3094](https://redirect.github.com/trufflesecurity/trufflehog/pull/3094) - \[chore] - remove deps from docker image by [@ahrav](https://redirect.github.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/3097](https://redirect.github.com/trufflesecurity/trufflehog/pull/3097) - \[bug]- Invalid Seek for Non-Seekable Readers by [@ahrav](https://redirect.github.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/3095](https://redirect.github.com/trufflesecurity/trufflehog/pull/3095) - chore: fix some comments by [@shangchenglumetro](https://redirect.github.com/shangchenglumetro) in [https://github.com/trufflesecurity/trufflehog/pull/3098](https://redirect.github.com/trufflesecurity/trufflehog/pull/3098) - Analyze by [@mcastorina](https://redirect.github.com/mcastorina) in [https://github.com/trufflesecurity/trufflehog/pull/3099](https://redirect.github.com/trufflesecurity/trufflehog/pull/3099) - fix(deps): update module cloud.google.com/go/secretmanager to v1.13.5 by [@renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3096](https://redirect.github.com/trufflesecurity/trufflehog/pull/3096) - \[chore] Fix Versioner interface for twitter by [@mcastorina](https://redirect.github.com/mcastorina) in [https://github.com/trufflesecurity/trufflehog/pull/3104](https://redirect.github.com/trufflesecurity/trufflehog/pull/3104) - Implement Analyzer interface for openai by [@mcastorina](https://redirect.github.com/mcastorina) in [https://github.com/trufflesecurity/trufflehog/pull/3101](https://redirect.github.com/trufflesecurity/trufflehog/pull/3101) #### New Contributors - [@shangchenglumetro](https://redirect.github.com/shangchenglumetro) made their first contribution in [https://github.com/trufflesecurity/trufflehog/pull/3098](https://redirect.github.com/trufflesecurity/trufflehog/pull/3098) **Full Changelog**: https://github.com/trufflesecurity/trufflehog/compare/v3.80.1...v3.80.2 ### [`v3.80.1`](https://redirect.github.com/trufflesecurity/trufflehog/releases/tag/v3.80.1) [Compare Source](https://redirect.github.com/trufflesecurity/trufflehog/compare/v3.80.0...v3.80.1) #### What's Changed - fix(deps): update golang.org/x/exp digest to [`e3f2596`](https://redirect.github.com/trufflesecurity/trufflehog/commit/e3f2596) by [@renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3071](https://redirect.github.com/trufflesecurity/trufflehog/pull/3071) - chore: fix goreleaser config and command line options for goreleaser v2 by [@suzuki-shunsuke](https://redirect.github.com/suzuki-shunsuke) in [https://github.com/trufflesecurity/trufflehog/pull/3073](https://redirect.github.com/trufflesecurity/trufflehog/pull/3073) #### New Contributors - [@suzuki-shunsuke](https://redirect.github.com/suzuki-shunsuke) made their first contribution in [https://github.com/trufflesecurity/trufflehog/pull/3073](https://redirect.github.com/trufflesecurity/trufflehog/pull/3073) **Full Changelog**: https://github.com/trufflesecurity/trufflehog/compare/v3.80.0...v3.80.1 ### [`v3.80.0`](https://redirect.github.com/trufflesecurity/trufflehog/releases/tag/v3.80.0) [Compare Source](https://redirect.github.com/trufflesecurity/trufflehog/compare/v3.79.0...v3.80.0) #### What's Changed - Add endorlabs detector by [@shreyas-sriram](https://redirect.github.com/shreyas-sriram) in [https://github.com/trufflesecurity/trufflehog/pull/3015](https://redirect.github.com/trufflesecurity/trufflehog/pull/3015) - New Source: HuggingFace by [@joeleonjr](https://redirect.github.com/joeleonjr) in [https://github.com/trufflesecurity/trufflehog/pull/3000](https://redirect.github.com/trufflesecurity/trufflehog/pull/3000) - Update README.md by [@joeleonjr](https://redirect.github.com/joeleonjr) in [https://github.com/trufflesecurity/trufflehog/pull/3019](https://redirect.github.com/trufflesecurity/trufflehog/pull/3019) - fixing docs by [@dylanTruffle](https://redirect.github.com/dylanTruffle) in [https://github.com/trufflesecurity/trufflehog/pull/3022](https://redirect.github.com/trufflesecurity/trufflehog/pull/3022) - fix(deps): update module github.com/charmbracelet/bubbletea to v0.26.6 by [@renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2998](https://redirect.github.com/trufflesecurity/trufflehog/pull/2998) - fix(deps): update module github.com/aws/aws-sdk-go to v1.54.11 by [@renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3025](https://redirect.github.com/trufflesecurity/trufflehog/pull/3025) - fix(deps): update module cloud.google.com/go/secretmanager to v1.13.2 by [@renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3024](https://redirect.github.com/trufflesecurity/trufflehog/pull/3024) - fix(deps): update module github.com/brianvoe/gofakeit/v7 to v7.0.4 by [@renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3026](https://redirect.github.com/trufflesecurity/trufflehog/pull/3026) - fix(deps): update module github.com/couchbase/gocb/v2 to v2.9.0 by [@renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3030](https://redirect.github.com/trufflesecurity/trufflehog/pull/3030) - update LaunchDarkly detector to use the caller-identity API by [@pkaeding](https://redirect.github.com/pkaeding) in [https://github.com/trufflesecurity/trufflehog/pull/3018](https://redirect.github.com/trufflesecurity/trufflehog/pull/3018) - fix(deps): update module github.com/wasilibs/go-re2 to v1.6.0 by [@renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3033](https://redirect.github.com/trufflesecurity/trufflehog/pull/3033) - fix(deps): update module github.com/xanzy/go-gitlab to v0.106.0 by [@renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3035](https://redirect.github.com/trufflesecurity/trufflehog/pull/3035) - \[chore] - remove launchdarkly dep by [@ahrav](https://redirect.github.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/3034](https://redirect.github.com/trufflesecurity/trufflehog/pull/3034) - Fix race in `caflou` and `ldap` detectors by [@rgmz](https://redirect.github.com/rgmz) in [https://github.com/trufflesecurity/trufflehog/pull/3028](https://redirect.github.com/trufflesecurity/trufflehog/pull/3028) - Elevenlabs detector by [@dylanTruffle](https://redirect.github.com/dylanTruffle) in [https://github.com/trufflesecurity/trufflehog/pull/3023](https://redirect.github.com/trufflesecurity/trufflehog/pull/3023) - fix(deps): update module go.mongodb.org/mongo-driver to v1.16.0 by [@renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3036](https://redirect.github.com/trufflesecurity/trufflehog/pull/3036) - fix(deps): update module cloud.google.com/go/secretmanager to v1.13.3 by [@renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3037](https://redirect.github.com/trufflesecurity/trufflehog/pull/3037) - fix(deps): update module github.com/aws/aws-sdk-go to v1.54.14 by [@renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3042](https://redirect.github.com/trufflesecurity/trufflehog/pull/3042) - fix(deps): update module cloud.google.com/go/storage to v1.43.0 by [@renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3043](https://redirect.github.com/trufflesecurity/trufflehog/pull/3043) - fix(deps): update module golang.org/x/net to v0.27.0 by [@renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3046](https://redirect.github.com/trufflesecurity/trufflehog/pull/3046) - fix(deps): update module golang.org/x/crypto to v0.25.0 by [@renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3045](https://redirect.github.com/trufflesecurity/trufflehog/pull/3045) - fix(deps): update module github.com/aws/aws-sdk-go to v1.54.15 by [@renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3049](https://redirect.github.com/trufflesecurity/trufflehog/pull/3049) - fix(deps): update testcontainers-go monorepo to v0.32.0 by [@renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3050](https://redirect.github.com/trufflesecurity/trufflehog/pull/3050) - \[chore] - remove dead Chunker code by [@ahrav](https://redirect.github.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/3044](https://redirect.github.com/trufflesecurity/trufflehog/pull/3044) - chore(deps): update goreleaser/goreleaser-action action to v6 by [@renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3051](https://redirect.github.com/trufflesecurity/trufflehog/pull/3051) - fix(deps): update golang.org/x/exp digest to [`46b0784`](https://redirect.github.com/trufflesecurity/trufflehog/commit/46b0784) by [@renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3053](https://redirect.github.com/trufflesecurity/trufflehog/pull/3053) - fix(deps): update module github.com/aws/aws-sdk-go to v1.54.16 by [@renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3054](https://redirect.github.com/trufflesecurity/trufflehog/pull/3054) - fix(deps): update module github.com/google/go-containerregistry to v0.20.0 by [@renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3055](https://redirect.github.com/trufflesecurity/trufflehog/pull/3055) - </details> --- ### Configuration 📅 **Schedule**: Branch creation - "every weekend" in timezone Europe/London, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge 741A this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/zkSync-Community-Hub/community-code).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Bump the all-actions group with 4 updates Bumps the all-actions group with 4 updates: actions/checkout, azure/setup-helm, actions/setup-python and peter-evans/create-pull-request. Updates actions/checkout from 3 to 4 Release notes Sourced from actions/checkout's releases. v4.0.0 What's Changed Update default runtime to node20 by @takost in actions/checkout#1436 Support fetching without the --progress option by @simonbaird in actions/checkout#1067 Release 4.0.0 by @takost in actions/checkout#1447 New Contributors @takost made their first contribution in actions/checkout#1436 @simonbaird made their first contribution in actions/checkout#1067 Full Changelog: actions/checkout@v3...v4.0.0 v3.6.0 What's Changed Mark test scripts with Bash'isms to be run via Bash by @dscho in actions/checkout#1377 Add option to fetch tags even if fetch-depth > 0 by @RobertWieczoreck in actions/checkout#579 Release 3.6.0 by @luketomlinson in actions/checkout#1437 New Contributors @RobertWieczoreck made their first contribution in actions/checkout#579 @luketomlinson made their first contribution in actions/checkout#1437 Full Changelog: actions/checkout@v3.5.3...v3.6.0 v3.5.3 What's Changed Fix: Checkout Issue in self hosted runner due to faulty submodule check-ins by @megamanics in actions/checkout#1196 Fix typos found by codespell by @DimitriPapadopoulos in actions/checkout#1287 Add support for sparse checkouts by @dscho and @dfdez in actions/checkout#1369 Release v3.5.3 by @TingluoHuang in actions/checkout#1376 New Contributors @megamanics made their first contribution in actions/checkout#1196 @DimitriPapadopoulos made their first contribution in actions/checkout#1287 @dfdez made their first contribution in actions/checkout#1369 Full Changelog: actions/checkout@v3...v3.5.3 v3.5.2 What's Changed Fix: Use correct API url / endpoint in GHES by @fhammerl in actions/checkout#1289 based on #1286 by @1newsr Full Changelog: actions/checkout@v3.5.1...v3.5.2 v3.5.1 What's Changed Improve checkout performance on Windows runners by upgrading @actions/github dependency by @BrettDong in actions/checkout#1246 New Contributors @BrettDong made their first contribution in actions/checkout#1246 ... (truncated) Changelog Sourced from actions/checkout's changelog. Changelog v4.2.2 url-helper.ts now leverages well-known environment variables by @jww3 in actions/checkout#1941 Expand unit test coverage for isGhes by @jww3 in actions/checkout#1946 v4.2.1 Check out other refs/* by commit if provided, fall back to ref by @orhantoy in actions/checkout#1924 v4.2.0 Add Ref and Commit outputs by @lucacome in actions/checkout#1180 Dependency updates by @dependabot- actions/checkout#1777, actions/checkout#1872 v4.1.7 Bump the minor-npm-dependencies group across 1 directory with 4 updates by @dependabot in actions/checkout#1739 Bump actions/checkout from 3 to 4 by @dependabot in actions/checkout#1697 Check out other refs/* by commit by @orhantoy in actions/checkout#1774 Pin actions/checkout's own workflows to a known, good, stable version. by @jww3 in actions/checkout#1776 v4.1.6 Check platform to set archive extension appropriately by @cory-miller in actions/checkout#1732 v4.1.5 Update NPM dependencies by @cory-miller in actions/checkout#1703 Bump github/codeql-action from 2 to 3 by @dependabot in actions/checkout#1694 Bump actions/setup-node from 1 to 4 by @dependabot in actions/checkout#1696 Bump actions/upload-artifact from 2 to 4 by @dependabot in actions/checkout#1695 README: Suggest user.email to be 41898282+github-actions[bot]@users.noreply.github.com by @cory-miller in actions/checkout#1707 v4.1.4 Disable extensions.worktreeConfig when disabling sparse-checkout by @jww3 in actions/checkout#1692 Add dependabot config by @cory-miller in actions/checkout#1688 Bump the minor-actions-dependencies group with 2 updates by @dependabot in actions/checkout#1693 Bump word-wrap from 1.2.3 to 1.2.5 by @dependabot in actions/checkout#1643 v4.1.3 Check git version before attempting to disable sparse-checkout by @jww3 in actions/checkout#1656 Add SSH user parameter by @cory-miller in actions/checkout#1685 Update actions/checkout version in update-main-version.yml by @jww3 in actions/checkout#1650 v4.1.2 Fix: Disable sparse checkout whenever sparse-checkout option is not present @dscho in actions/checkout#1598 v4.1.1 Correct link to GitHub Docs by @peterbe in actions/checkout#1511 Link to release page from what's new section by @cory-miller in actions/checkout#1514 v4.1.0 Add support for partial checkout filters ... (truncated) Commits 11bd719 Prepare 4.2.2 Release (#1953) e3d2460 Expand unit test coverage (#1946) 163217d url-helper.ts now leverages well-known environment variables. (#1941) eef6144 Prepare 4.2.1 release (#1925) 6b42224 Add workflow file for publishing releases to immutable action package (#1919) de5a000 Check out other refs/* by commit if provided, fall back to ref (#1924) d632683 Prepare 4.2.0 release (#1878) 6d193bf Bump braces from 3.0.2 to 3.0.3 (#1777) db0cee9 Bump the minor-npm-dependencies group across 1 directory with 4 updates (#1872) b684943 Add Ref and Commit outputs (#1180) Additional commits viewable in compare view Updates azure/setup-helm from 3 to 4 Release notes Sourced from azure/setup-helm's releases. v4.0.0 #121 update to node20 as node16 is deprecated v3.5 release Bump @actions/core version to remove output warning. v3.4 release Improves the querying method to find the latest Helm release. Takes advantage of new GitHub api changes. v3.3 release Add token input. Needed for fetching latest v3.1 release Swap to GraphQL GitHub API Changelog Sourced from azure/setup-helm's changelog. Change Log [4.3.0] - 2025-02-15 #152 feat: log when restoring from cache #157 Dependencies Update #137 Add dependabot [4.2.0] - 2024-04-15 #124 Fix OS detection and download OS-native archive extension [4.1.0] - 2024-03-01 #130 switches to use Helm published file to read latest version instead of using GitHub releases [4.0.0] - 2024-02-12 #121 update to node20 as node16 is deprecated Commits b9e5190 build 0e8654b Release setup-helm version 4.3.0 (#162) b48e1df feat: log when restoring from cache (#152) 855ae7a Bump the actions group across 1 directory with 3 updates (#159) 124c6d8 Dependencies Update (#157) 048f4e7 Bump the actions group across 1 directory with 2 updates (#151) 8618769 Bump the actions group across 1 directory with 4 updates (#149) 4eb898e Bump the actions group across 1 directory with 2 updates (#145) 7a2001c Bump the actions group across 1 directory with 2 updates (#143) e90c86c Bump the actions group across 1 directory with 9 updates (#141) Additional commits viewable in compare view Updates actions/setup-python from 4 to 5 Release notes Sourced from actions/setup-python's releases. v5.0.0 What's Changed In scope of this release, we update node version runtime from node16 to node20 (actions/setup-python#772). Besides, we update dependencies to the latest versions. Full Changelog: actions/setup-python@v4.8.0...v5.0.0 v4.9.1 What's Changed Add workflow file for publishing releases to immutable action package by @aparnajyothi-y in actions/setup-python#1084 Full Changelog: actions/setup-python@v4...v4.9.1 v4.9.0 What's Changed Upgrade actions/cache to 4.0.3 by @priya-kinthali in actions/setup-python#1073 In scope of this release we updated actions/cache package to ensure continued support and compatibility, as older versions of the package are now deprecated. For more information please refer to the toolkit/cache. Full Changelog: actions/setup-python@v4.8.0...v4.9.0 v4.8.0 What's Changed In scope of this release we added support for GraalPy (actions/setup-python#694). You can use this snippet to set up GraalPy: steps: - uses: actions/checkout@v4 - uses: actions/setup-python@v4 with: python-version: 'graalpy-22.3' - run: python my_script.py Besides, the release contains such changes as: Trim python version when reading from file by @FerranPares in actions/setup-python#628 Use non-deprecated versions in examples by @jeffwidman in actions/setup-python#724 Change deprecation comment to past tense by @jeffwidman in actions/setup-python#723 Bump @babel/traverse from 7.9.0 to 7.23.2 by @dependabot in actions/setup-python#743 advanced-usage.md: Encourage the use actions/checkout@v4 by @cclauss in actions/setup-python#729 Examples now use checkout@v4 by @simonw in actions/setup-python#738 Update actions/checkout to v4 by @dmitry-shibanov in actions/setup-python#761 New Contributors @FerranPares made their first contribution in actions/setup-python#628 @timfel made their first contribution in actions/setup-python#694 @jeffwidman made their first contribution in actions/setup-python#724 Full Changelog: actions/setup-python@v4...v4.8.0 ... (truncated) Commits a26af69 Bump ts-jest from 29.1.2 to 29.3.2 (#1081) 30eafe9 Bump prettier from 2.8.8 to 3.5.3 (#1046) 5d95bc1 Bump semver and @types/semver (#1091) 6ed2c67 Fix for Candidate Not Iterable Error (#1082) e348410 Remove Ubuntu 20.04 from workflows due to deprecation from 2025-04-15 (#1065) 8d9ed9a Add e2e Testing for free threaded and Bump @action/cache from 4.0.0 to 4.0.3 ... 19e4675 Add support for .tool-versions file in setup-python (#1043) 6fd11e1 Bump @actions/glob from 0.4.0 to 0.5.0 (#1015) 9e62be8 Support free threaded Python versions like '3.13t' (#973) 6ca8e85 Bump @vercel/ncc from 0.38.1 to 0.38.3 (#1016) Additional commits viewable in compare view Updates peter-evans/create-pull-request from 5 to 7 Release notes Sourced from peter-evans/create-pull-request's releases. Create Pull Request v7.0.0 ✨ Now supports commit signing with bot-generated tokens! See "What's new" below. ✍️🤖 Behaviour changes Action input git-token has been renamed branch-token, to be more clear about its purpose. The branch-token is the token that the action will use to create and update the branch. The action now handles requests that have been rate-limited by GitHub. Requests hitting a primary rate limit will retry twice, for a total of three attempts. Requests hitting a secondary rate limit will not be retried. The pull-request-operation output now returns none when no operation was executed. Removed deprecated output environment variable PULL_REQUEST_NUMBER. Please use the pull-request-number action output instead. What's new The action can now sign commits as github-actions[bot] when using GITHUB_TOKEN, or your own bot when using GitHub App tokens. See commit signing for details. Action input draft now accepts a new value always-true. This will set the pull request to draft status when the pull request is updated, as well as on creation. A new action input maintainer-can-modify indicates whether maintainers can modify the pull request. The default is true, which retains the existing behaviour of the action. A new output pull-request-commits-verified returns true or false, indicating whether GitHub considers the signature of the branch's commits to be verified. What's Changed build(deps-dev): bump @types/node from 18.19.36 to 18.19.39 by @dependabot in peter-evans/create-pull-request#3000 build(deps-dev): bump ts-jest from 29.1.5 to 29.2.0 by @dependabot in peter-evans/create-pull-request#3008 build(deps-dev): bump prettier from 3.3.2 to 3.3.3 by @dependabot in peter-evans/create-pull-request#3018 build(deps-dev): bump ts-jest from 29.2.0 to 29.2.2 by @dependabot in peter-evans/create-pull-request#3019 build(deps-dev): bump eslint-plugin-prettier from 5.1.3 to 5.2.1 by @dependabot in peter-evans/create-pull-request#3035 build(deps-dev): bump @types/node from 18.19.39 to 18.19.41 by @dependabot in peter-evans/create-pull-request#3037 build(deps): bump undici from 6.19.2 to 6.19.4 by @dependabot in peter-evans/create-pull-request#3036 build(deps-dev): bump ts-jest from 29.2.2 to 29.2.3 by @dependabot in peter-evans/create-pull-request#3038 build(deps-dev): bump @types/node from 18.19.41 to 18.19.42 by @dependabot in peter-evans/create-pull-request#3070 build(deps): bump undici from 6.19.4 to 6.19.5 by @dependabot in peter-evans/create-pull-request#3086 build(deps-dev): bump @types/node from 18.19.42 to 18.19.43 by @dependabot in peter-evans/create-pull-request#3087 build(deps-dev): bump ts-jest from 29.2.3 to 29.2.4 by @dependabot in peter-evans/create-pull-request#3088 build(deps): bump undici from 6.19.5 to 6.19.7 by @dependabot in peter-evans/create-pull-request#3145 build(deps-dev): bump @types/node from 18.19.43 to 18.19.44 by @dependabot in peter-evans/create-pull-request#3144 Update distribution by @actions-bot in peter-evans/create-pull-request#3154 build(deps): bump undici from 6.19.7 to 6.19.8 by @dependabot in peter-evans/create-pull-request#3213 build(deps-dev): bump @types/node from 18.19.44 to 18.19.45 by @dependabot in peter-evans/create-pull-request#3214 Update distribution by @actions-bot in peter-evans/create-pull-request#3221 build(deps-dev): bump eslint-import-resolver-typescript from 3.6.1 to 3.6.3 by @dependabot in peter-evans/create-pull-request#3255 build(deps-dev): bump @types/node from 18.19.45 to 18.19.46 by @dependabot in peter-evans/create-pull-request#3254 build(deps-dev): bump ts-jest from 29.2.4 to 29.2.5 by @dependabot in peter-evans/create-pull-request#3256 v7 - signed commits by @peter-evans in peter-evans/create-pull-request#3057 New Contributors @rustycl0ck made their first contribution in peter-evans/create-pull-request#3057 Full Changelog: peter-evans/create-pull-request@v6.1.0...v7.0.0 Create Pull Request v6.1.0 ✨ Adds pull-request-branch as an action output. What's Changed ... (truncated) Commits 271a8d0 fix: suppress output for some git operations (#3776) 6f7efd1 test: update cpr-example-command 13c47c5 build(deps-dev): bump prettier from 3.5.1 to 3.5.2 (#3754) 63e5829 build(deps): bump @octokit/plugin-paginate-rest from 11.4.2 to 11.4.3 (#3753) a92c90f build(deps-dev): bump eslint-import-resolver-typescript (#3752) b23b62d build(deps-dev): bump ts-jest from 29.2.5 to 29.2.6 (#3751) dd2324f fix: use showFileAtRefBase64 to read per-commit file contents (#3744) 367180c ci: remove testv5 cmd 25575a1 build: update distribution (#3736) a56e7a5 build(deps): bump @octokit/core from 6.1.3 to 6.1.4 (#3711) Additional commits viewable in compare view Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase. Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: @dependabot rebase will rebase this PR @dependabot recreate will recreate this PR, overwriting any edits that have been made to it @dependabot merge will merge this PR after your CI passes on it @dependabot squash and merge will squash and merge this PR after your CI passes on it @dependabot cancel merge will cancel a previously requested merge and block automerging @dependabot reopen will reopen this PR if it is closed @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions Reviewed-by: Vladimir Vshivkov

….yaml adding users to base (#1248) adding users to base Reviewed-by: Vladimir Vshivkov Addition of docker check of dependabot for system-config repository on daily bases (#1255) 1254 - Addition of docker check of dependabot for system-config repository Addapted dependabot.yaml for docker check on daily bases closes #1254 Reviewed-by: Vladimir Vshivkov chore: update helm chart dependencies (#1257) Update helm chart dependencies Helm Chart Dependencies Updates victoria-metrics-cluster (victoria-metrics-cluster) victoria-metrics-cluster: 0.21.0 → 0.22.1 kube-prometheus-stack (kube-prometheus-stack) kube-prometheus-stack: 72.3.0 → 72.5.0 victoria-metrics-auth (victoria-metrics-auth) victoria-metrics-auth: 0.13.0 → 0.14.1 Automatically created PR for helm chart dependencies updates. Please check before merge! Reviewed-by: Vladimir Vshivkov Enhance dependabot configuration to include GitHub Actions and update scheduling for Helm and Docker. Added daily checks at 09:00 for all specified ecosystems. (#1258) Enhance dependabot configuration to include GitHub Actions and update scheduling for Helm and Docker. Added daily checks at 09:00 for all specified ecosystems. Reviewed-by: Vladimir Hasko <vladimirhasko@gmail.com> Bump the all-actions group with 4 updates (#1260) Bump the all-actions group with 4 updates Bumps the all-actions group with 4 updates: actions/checkout, azure/setup-helm, actions/setup-python and peter-evans/create-pull-request. Updates actions/checkout from 3 to 4 Release notes Sourced from actions/checkout's releases. v4.0.0 What's Changed Update default runtime to node20 by @takost in actions/checkout#1436 Support fetching without the --progress option by @simonbaird in actions/checkout#1067 Release 4.0.0 by @takost in actions/checkout#1447 New Contributors @takost made their first contribution in actions/checkout#1436 @simonbaird made their first contribution in actions/checkout#1067 Full Changelog: actions/checkout@v3...v4.0.0 v3.6.0 What's Changed Mark test scripts with Bash'isms to be run via Bash by @dscho in actions/checkout#1377 Add option to fetch tags even if fetch-depth > 0 by @RobertWieczoreck in actions/checkout#579 Release 3.6.0 by @luketomlinson in actions/checkout#1437 New Contributors @RobertWieczoreck made their first contribution in actions/checkout#579 @luketomlinson made their first contribution in actions/checkout#1437 Full Changelog: actions/checkout@v3.5.3...v3.6.0 v3.5.3 What's Changed Fix: Checkout Issue in self hosted runner due to faulty submodule check-ins by @megamanics in actions/checkout#1196 Fix typos found by codespell by @DimitriPapadopoulos in actions/checkout#1287 Add support for sparse checkouts by @dscho and @dfdez in actions/checkout#1369 Release v3.5.3 by @TingluoHuang in actions/checkout#1376 New Contributors @megamanics made their first contribution in actions/checkout#1196 @DimitriPapadopoulos made their first contribution in actions/checkout#1287 @dfdez made their first contribution in actions/checkout#1369 Full Changelog: actions/checkout@v3...v3.5.3 v3.5.2 What's Changed Fix: Use correct API url / endpoint in GHES by @fhammerl in actions/checkout#1289 based on #1286 by @1newsr Full Changelog: actions/checkout@v3.5.1...v3.5.2 v3.5.1 What's Changed Improve checkout performance on Windows runners by upgrading @actions/github dependency by @BrettDong in actions/checkout#1246 New Contributors @BrettDong made their first contribution in actions/checkout#1246 ... (truncated) Changelog Sourced from actions/checkout's changelog. Changelog v4.2.2 url-helper.ts now leverages well-known environment variables by @jww3 in actions/checkout#1941 Expand unit test coverage for isGhes by @jww3 in actions/checkout#1946 v4.2.1 Check out other refs/* by commit if provided, fall back to ref by @orhantoy in actions/checkout#1924 v4.2.0 Add Ref and Commit outputs by @lucacome in actions/checkout#1180 Dependency updates by @dependabot- actions/checkout#1777, actions/checkout#1872 v4.1.7 Bump the minor-npm-dependencies group across 1 directory with 4 updates by @dependabot in actions/checkout#1739 Bump actions/checkout from 3 to 4 by @dependabot in actions/checkout#1697 Check out other refs/* by commit by @orhantoy in actions/checkout#1774 Pin actions/checkout's own workflows to a known, good, stable version. by @jww3 in actions/checkout#1776 v4.1.6 Check platform to set archive extension appropriately by @cory-miller in actions/checkout#1732 v4.1.5 Update NPM dependencies by @cory-miller in actions/checkout#1703 Bump github/codeql-action from 2 to 3 by @dependabot in actions/checkout#1694 Bump actions/setup-node from 1 to 4 by @dependabot in actions/checkout#1696 Bump actions/upload-artifact from 2 to 4 by @dependabot in actions/checkout#1695 README: Suggest user.email to be 41898282+github-actions[bot]@users.noreply.github.com by @cory-miller in actions/checkout#1707 v4.1.4 Disable extensions.worktreeConfig when disabling sparse-checkout by @jww3 in actions/checkout#1692 Add dependabot config by @cory-miller in actions/checkout#1688 Bump the minor-actions-dependencies group with 2 updates by @dependabot in actions/checkout#1693 Bump word-wrap from 1.2.3 to 1.2.5 by @dependabot in actions/checkout#1643 v4.1.3 Check git version before attempting to disable sparse-checkout by @jww3 in actions/checkout#1656 Add SSH user parameter by @cory-miller in actions/checkout#1685 Update actions/checkout version in update-main-version.yml by @jww3 in actions/checkout#1650 v4.1.2 Fix: Disable sparse checkout whenever sparse-checkout option is not present @dscho in actions/checkout#1598 v4.1.1 Correct link to GitHub Docs by @peterbe in actions/checkout#1511 Link to release page from what's new section by @cory-miller in actions/checkout#1514 v4.1.0 Add support for partial checkout filters ... (truncated) Commits 11bd719 Prepare 4.2.2 Release (#1953) e3d2460 Expand unit test coverage (#1946) 163217d url-helper.ts now leverages well-known environment variables. (#1941) eef6144 Prepare 4.2.1 release (#1925) 6b42224 Add workflow file for publishing releases to immutable action package (#1919) de5a000 Check out other refs/* by commit if provided, fall back to ref (#1924) d632683 Prepare 4.2.0 release (#1878) 6d193bf Bump braces from 3.0.2 to 3.0.3 (#1777) db0cee9 Bump the minor-npm-dependencies group across 1 directory with 4 updates (#1872) b684943 Add Ref and Commit outputs (#1180) Additional commits viewable in compare view Updates azure/setup-helm from 3 to 4 Release notes Sourced from azure/setup-helm's releases. v4.0.0 v3.5 release Bump @actions/core version to remove output warning. v3.4 release Improves the querying method to find the latest Helm release. Takes advantage of new GitHub api changes. v3.3 release Add token input. Needed for fetching latest v3.1 release Swap to GraphQL GitHub API Changelog Sourced from azure/setup-helm's changelog. Change Log [4.3.0] - 2025-02-15 [4.2.0] - 2024-04-15 [4.1.0] - 2024-03-01 [4.0.0] - 2024-02-12 Commits b9e5190 build 0e8654b Release setup-helm version 4.3.0 (#162) b48e1df feat: log when restoring from cache (#152) 855ae7a Bump the actions group across 1 directory with 3 updates (#159) 124c6d8 Dependencies Update (#157) 048f4e7 Bump the actions group across 1 directory with 2 updates (#151) 8618769 Bump the actions group across 1 directory with 4 updates (#149) 4eb898e Bump the actions group across 1 directory with 2 updates (#145) 7a2001c Bump the actions group across 1 directory with 2 updates (#143) e90c86c Bump the actions group across 1 directory with 9 updates (#141) Additional commits viewable in compare view Updates actions/setup-python from 4 to 5 Release notes Sourced from actions/setup-python's releases. v5.0.0 What's Changed In scope of this release, we update node version runtime from node16 to node20 (actions/setup-python#772). Besides, we update dependencies to the latest versions. Full Changelog: actions/setup-python@v4.8.0...v5.0.0 v4.9.1 What's Changed Add workflow file for publishing releases to immutable action package by @aparnajyothi-y in actions/setup-python#1084 Full Changelog: actions/setup-python@v4...v4.9.1 v4.9.0 What's Changed Upgrade actions/cache to 4.0.3 by @priya-kinthali in actions/setup-python#1073 In scope of this release we updated actions/cache package to ensure continued support and compatibility, as older versions of the package are now deprecated. For more information please refer to the toolkit/cache. Full Changelog: actions/setup-python@v4.8.0...v4.9.0 v4.8.0 What's Changed In scope of this release we added support for GraalPy (actions/setup-python#694). You can use this snippet to set up GraalPy: steps: - uses: actions/checkout@v4 - uses: actions/setup-python@v4 with: python-version: 'graalpy-22.3' - run: python my_script.py Besides, the release contains such changes as: Trim python version when reading from file by @FerranPares in actions/setup-python#628 Use non-deprecated versions in examples by @jeffwidman in actions/setup-python#724 Change deprecation comment to past tense by @jeffwidman in actions/setup-python#723 Bump @babel/traverse from 7.9.0 to 7.23.2 by @dependabot in actions/setup-python#743 advanced-usage.md: Encourage the use actions/checkout@v4 by @cclauss in actions/setup-python#729 Examples now use checkout@v4 by @simonw in actions/setup-python#738 Update actions/checkout to v4 by @dmitry-shibanov in actions/setup-python#761 New Contributors @FerranPares made their first contribution in actions/setup-python#628 @timfel made their first contribution in actions/setup-python#694 @jeffwidman made their first contribution in actions/setup-python#724 Full Changelog: actions/setup-python@v4...v4.8.0 ... (truncated) Commits a26af69 Bump ts-jest from 29.1.2 to 29.3.2 (#1081) 30eafe9 Bump prettier from 2.8.8 to 3.5.3 (#1046) 5d95bc1 Bump semver and @types/semver (#1091) 6ed2c67 Fix for Candidate Not Iterable Error (#1082) e348410 Remove Ubuntu 20.04 from workflows due to deprecation from 2025-04-15 (#1065) 8d9ed9a Add e2e Testing for free threaded and Bump @action/cache from 4.0.0 to 4.0.3 ... 19e4675 Add support for .tool-versions file in setup-python (#1043) 6fd11e1 Bump @actions/glob from 0.4.0 to 0.5.0 (#1015) 9e62be8 Support free threaded Python versions like '3.13t' (#973) 6ca8e85 Bump @vercel/ncc from 0.38.1 to 0.38.3 (#1016) Additional commits viewable in compare view Updates peter-evans/create-pull-request from 5 to 7 Release notes Sourced from peter-evans/create-pull-request's releases. Create Pull Request v7.0.0 ✨ Now supports commit signing with bot-generated tokens! See "What's new" below. ✍️🤖 Behaviour changes Action input git-token has been renamed branch-token, to be more clear about its purpose. The branch-token is the token that the action will use to create and update the branch. The action now handles requests that have been rate-limited by GitHub. Requests hitting a primary rate limit will retry twice, for a total of three attempts. Requests hitting a secondary rate limit will not be retried. The pull-request-operation output now returns none when no operation was executed. Removed deprecated output environment variable PULL_REQUEST_NUMBER. Please use the pull-request-number action output instead. What's new The action can now sign commits as github-actions[bot] when using GITHUB_TOKEN, or your own bot when using GitHub App tokens. See commit signing for details. Action input draft now accepts a new value always-true. This will set the pull request to draft status when the pull request is updated, as well as on creation. A new action input maintainer-can-modify indicates whether maintainers can modify the pull request. The default is true, which retains the existing behaviour of the action. A new output pull-request-commits-verified returns true or false, indicating whether GitHub considers the signature of the branch's commits to be verified. What's Changed build(deps-dev): bump @types/node from 18.19.36 to 18.19.39 by @dependabot in peter-evans/create-pull-request#3000 build(deps-dev): bump ts-jest from 29.1.5 to 29.2.0 by @dependabot in peter-evans/create-pull-request#3008 build(deps-dev): bump prettier from 3.3.2 to 3.3.3 by @dependabot in peter-evans/create-pull-request#3018 build(deps-dev): bump ts-jest from 29.2.0 to 29.2.2 by @dependabot in peter-evans/create-pull-request#3019 build(deps-dev): bump eslint-plugin-prettier from 5.1.3 to 5.2.1 by @dependabot in peter-evans/create-pull-request#3035 build(deps-dev): bump @types/node from 18.19.39 to 18.19.41 by @dependabot in peter-evans/create-pull-request#3037 build(deps): bump undici from 6.19.2 to 6.19.4 by @dependabot in peter-evans/create-pull-request#3036 build(deps-dev): bump ts-jest from 29.2.2 to 29.2.3 by @dependabot in peter-evans/create-pull-request#3038 build(deps-dev): bump @types/node from 18.19.41 to 18.19.42 by @dependabot in peter-evans/create-pull-request#3070 build(deps): bump undici from 6.19.4 to 6.19.5 by @dependabot in peter-evans/create-pull-request#3086 build(deps-dev): bump @types/node from 18.19.42 to 18.19.43 by @dependabot in peter-evans/create-pull-request#3087 build(deps-dev): bump ts-jest from 29.2.3 to 29.2.4 by @dependabot in peter-evans/create-pull-request#3088 build(deps): bump undici from 6.19.5 to 6.19.7 by @dependabot in peter-evans/create-pull-request#3145 build(deps-dev): bump @types/node from 18.19.43 to 18.19.44 by @dependabot in peter-evans/create-pull-request#3144 Update distribution by @actions-bot in peter-evans/create-pull-request#3154 build(deps): bump undici from 6.19.7 to 6.19.8 by @dependabot in peter-evans/create-pull-request#3213 build(deps-dev): bump @types/node from 18.19.44 to 18.19.45 by @dependabot in peter-evans/create-pull-request#3214 Update distribution by @actions-bot in peter-evans/create-pull-request#3221 build(deps-dev): bump eslint-import-resolver-typescript from 3.6.1 to 3.6.3 by @dependabot in peter-evans/create-pull-request#3255 build(deps-dev): bump @types/node from 18.19.45 to 18.19.46 by @dependabot in peter-evans/create-pull-request#3254 build(deps-dev): bump ts-jest from 29.2.4 to 29.2.5 by @dependabot in peter-evans/create-pull-request#3256 v7 - signed commits by @peter-evans in peter-evans/create-pull-request#3057 New Contributors @rustycl0ck made their first contribution in peter-evans/create-pull-request#3057 Full Changelog: peter-evans/create-pull-request@v6.1.0...v7.0.0 Create Pull Request v6.1.0 ✨ Adds pull-request-branch as an action output. What's Changed ... (truncated) Commits 271a8d0 fix: suppress output for some git operations (#3776) 6f7efd1 test: update cpr-example-command 13c47c5 build(deps-dev): bump prettier from 3.5.1 to 3.5.2 (#3754) 63e5829 build(deps): bump @octokit/plugin-paginate-rest from 11.4.2 to 11.4.3 (#3753) a92c90f build(deps-dev): bump eslint-import-resolver-typescript (#3752) b23b62d build(deps-dev): bump ts-jest from 29.2.5 to 29.2.6 (#3751) dd2324f fix: use showFileAtRefBase64 to read per-commit file contents (#3744) 367180c ci: remove testv5 cmd 25575a1 build: update distribution (#3736) a56e7a5 build(deps): bump @octokit/core from 6.1.3 to 6.1.4 (#3711) Additional commits viewable in compare view Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase. Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: @dependabot rebase will rebase this PR @dependabot recreate will recreate this PR, overwriting any edits that have been made to it @dependabot merge will merge this PR after your CI passes on it @dependabot squash and merge will squash and merge this PR after your CI passes on it @dependabot cancel merge will cancel a previously requested merge and block automerging @dependabot reopen will reopen this PR if it is closed @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions Reviewed-by: Vladimir Vshivkov

dscho added 2 commits January 31, 2024 14:52

npm run build

c4cda12

Signed-off-by: Johannes Schindelin <johannes.schindelin@gmx.de>

dscho force-pushed the explicitly-disable-sparse-checkout-unless-asked-for branch from 29f6b52 to 79dd834 Compare January 31, 2024 14:04

dscho mentioned this pull request Jan 31, 2024

ci: fix test-proxy #1599

Closed

dscho marked this pull request as ready for review January 31, 2024 14:45

dscho requested a review from a team as a code owner January 31, 2024 14:45

dscho force-pushed the explicitly-disable-sparse-checkout-unless-asked-for branch from 79dd834 to 6f108b2 Compare January 31, 2024 15:13

jww3 reviewed Feb 1, 2024

View reviewed changes

jww3 self-assigned this Feb 1, 2024

jww3 added 10 commits February 16, 2024 13:31

Prefer ubuntu over alpine in test-proxy workflow

6d74269

revert change to container image in test.yml

4dfc3ce

Bump actions/checkout version in test-proxy

463d088

prefer ununtu over alpine in test-proxy

ed56252

Temporarily disable failing test.

268a122

Added a clarifying comment about test branches.

Inspect git version during test-proxy

b300d42

fix order-of-operations in test.yml

9b4fb8b

Fix order-of-operations in test.yml

9397c07

Ensure test-proxy is using an up-to-date version of git

3940af5

Experiment on test-proxy

572f5de

Try pointing `test-proxy` at a custom container image `fdev321123/ubuntu-with-git` (courtesy of @fhammerl)

joshmgross reviewed Feb 16, 2024

View reviewed changes

jww3 added 8 commits February 17, 2024 00:48

Create ubuntu-with-git.Dockerfile

78c6190

Rename ubuntu-with-git.Dockerfile to Dockerfile

a48123a

Create ubuntu-with-git/action.yml

34a3ecd

Delete .github/ubuntu-with-git directory

6af92d2

Removed commented-out docker commands in test.yml

894f97f

Second attempt to install git via apt-get

996d145

Followed official guidance for installing git

87e9846

source: https://git-scm.com/download/linux

ensure software-properties-common is installed.

772739e

Trimell2006 mentioned this pull request Nov 17, 2024

chore(deps): Bump the all group across 1 directory with 4 updates puppeteer/replay#918

Closed

gesslar mentioned this pull request Mar 11, 2025

Bump actions/checkout from 3 to 4 gesslar/Oxidus#159

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Explicitly disable sparse checkout unless asked for #1598

Explicitly disable sparse checkout unless asked for #1598

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh! < 8000 /h3>

There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Uh oh!

Explicitly disable sparse checkout unless asked for #1598

Explicitly disable sparse checkout unless asked for #1598

Uh oh!

Conversation

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh! < 8000 /h3> There was an error while loading. Please reload this page.

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh! < 8000 /h3>

There was an error while loading. Please reload this page.