-
Notifications
You must be signed in to change notification settings - Fork 2k
Bump actions/checkout from 3 to 4 #1697
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Bump actions/checkout from 3 to 4 #1697
Conversation
4fe14ba
to
6c55aed
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Since this is the actions/checkout
repo, we want to pin our validation workflows to a known, good, stable actions/checkout
version.
At this time, that probably means v4.1.1
at the latest. v3
is also an acceptable choice.
Unfortunately v3 is based on an end-of-life version of Node.js so that would be a poor choice. See the warnings at the bottom right of |
6c55aed
to
bf55b60
Compare
Bumps [actions/checkout](https://github.com/actions/checkout) from 3 to 4. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](v3...v4) --- updated-dependencies: - dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
bf55b60
to
1822540
Compare
I think we might want to revisit how we use checkout within the workflows in this repo. In the meantime we should get off Node 16. I don't know any specific dates, but removal of Node 16 is coming up in Actions Runner soon as I understand it. |
* Bump actions/checkout from 3 to 4 Bumps [actions/checkout](https://github.com/actions/checkout) from 3 to 4. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@v3...v4) --- updated-dependencies: - dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> * Apply suggestions from code review * . --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Cory Miller <13227161+cory-miller@users.noreply.github.com>
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/checkout](https://togithub.com/actions/checkout) | action | patch | `v4.1.6` -> `v4.1.7` | --- ### Release Notes <details> <summary>actions/checkout (actions/checkout)</summary> ### [`v4.1.7`](https://togithub.com/actions/checkout/blob/HEAD/CHANGELOG.md#v417) [Compare Source](https://togithub.com/actions/checkout/compare/v4.1.6...v4.1.7) - Bump the minor-npm-dependencies group across 1 directory with 4 updates by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/actions/checkout/pull/1739](https://togithub.com/actions/checkout/pull/1739) - Bump actions/checkout from 3 to 4 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/actions/checkout/pull/1697](https://togithub.com/actions/checkout/pull/1697) - Check out other refs/\* by commit by [@​orhantoy](https://togithub.com/orhantoy) in [https://github.com/actions/checkout/pull/1774](https://togithub.com/actions/checkout/pull/1774) - Pin actions/checkout's own workflows to a known, good, stable version. by [@​jww3](https://togithub.com/jww3) in [https://github.com/actions/checkout/pull/1776](https://togithub.com/actions/checkout/pull/1776) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://togithub.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy40MDYuMSIsInVwZGF0ZWRJblZlciI6IjM3LjQwNi4xIiwidGFyZ2V0QnJhbmNoIjoiZGV2IiwibGFiZWxzIjpbInJlbm92YXRlL2dpdGh1Yi1hY3Rpb24iLCJyZW5vdmF0ZS9naXRodWItcmVsZWFzZSIsInR5cGUvcGF0Y2giXX0=--> Co-authored-by: bloopy-boi[bot] <98279278+bloopy-boi[bot]@users.noreply.github.com>
[](https://renovatebot.com) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/checkout](https://togithub.com/actions/checkout) | action | patch | `v4.1.6` -> `v4.1.7` | --- ### Release Notes <details> <summary>actions/checkout (actions/checkout)</summary> ### [`v4.1.7`](https://togithub.com/actions/checkout/blob/HEAD/CHANGELOG.md#v417) [Compare Source](https://togithub.com/actions/checkout/compare/v4.1.6...v4.1.7) - Bump the minor-npm-dependencies group across 1 directory with 4 updates by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/actions/checkout/pull/1739](https://togithub.com/actions/checkout/pull/1739) - Bump actions/checkout from 3 to 4 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/actions/checkout/pull/1697](https://togithub.com/actions/checkout/pull/1697) - Check out other refs/\* by commit by [@​orhantoy](https://togithub.com/orhantoy) in [https://github.com/actions/checkout/pull/1774](https://togithub.com/actions/checkout/pull/1774) - Pin actions/checkout's own workflows to a known, good, stable version. by [@​jww3](https://togithub.com/jww3) in [https://github.com/actions/checkout/pull/1776](https://togithub.com/actions/checkout/pull/1776) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://developer.mend.io/github/apollographql/subgraph-csharp-hotchocolate-annotation). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4zOTMuMCIsInVwZGF0ZWRJblZlciI6IjM3LjM5My4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
[](https://renovatebot.com) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/checkout](https://togithub.com/actions/checkout) | action | patch | `v4.1.6` -> `v4.1.7` | --- ### Release Notes <details> <summary>actions/checkout (actions/checkout)</summary> ### [`v4.1.7`](https://togithub.com/actions/checkout/blob/HEAD/CHANGELOG.md#v417) [Compare Source](https://togithub.com/actions/checkout/compare/v4.1.6...v4.1.7) - Bump the minor-npm-dependencies group across 1 directory with 4 updates by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/actions/checkout/pull/1739](https://togithub.com/actions/checkout/pull/1739) - Bump actions/checkout from 3 to 4 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/actions/checkout/pull/1697](https://togithub.com/actions/checkout/pull/1697) - Check out other refs/\* by commit by [@​orhantoy](https://togithub.com/orhantoy) in [https://github.com/actions/checkout/pull/1774](https://togithub.com/actions/checkout/pull/1774) - Pin actions/checkout's own workflows to a known, good, stable version. by [@​jww3](https://togithub.com/jww3) in [https://github.com/actions/checkout/pull/1776](https://togithub.com/actions/checkout/pull/1776) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://developer.mend.io/github/openapi-generators/openapi-python-client). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4zOTMuMCIsInVwZGF0ZWRJblZlciI6IjM3LjM5My4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
[](https://renovatebot.com) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/checkout](https://togithub.com/actions/checkout) | action | patch | `v4.1.6` -> `v4.1.7` | --- ### Release Notes <details> <summary>actions/checkout (actions/checkout)</summary> ### [`v4.1.7`](https://togithub.com/actions/checkout/blob/HEAD/CHANGELOG.md#v417) [Compare Source](https://togithub.com/actions/checkout/compare/v4.1.6...v4.1.7) - Bump the minor-npm-dependencies group across 1 directory with 4 updates by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/actions/checkout/pull/1739](https://togithub.com/actions/checkout/pull/1739) - Bump actions/checkout from 3 to 4 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/actions/checkout/pull/1697](https://togithub.com/actions/checkout/pull/1697) - Check out other refs/\* by commit by [@​orhantoy](https://togithub.com/orhantoy) in [https://github.com/actions/checkout/pull/1774](https://togithub.com/actions/checkout/pull/1774) - Pin actions/checkout's own workflows to a known, good, stable version. by [@​jww3](https://togithub.com/jww3) in [https://github.com/actions/checkout/pull/1776](https://togithub.com/actions/checkout/pull/1776) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://developer.mend.io/github/rpdelaney/downforeveryone). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4zOTMuMCIsInVwZGF0ZWRJblZlciI6IjM3LjM5My4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiXX0=-->
[](https://renovatebot.com) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/checkout](https://togithub.com/actions/checkout) | action | patch | `v4.1.6` -> `v4.1.7` | --- ### Release Notes <details> <summary>actions/checkout (actions/checkout)</summary> ### [`v4.1.7`](https://togithub.com/actions/checkout/blob/HEAD/CHANGELOG.md#v417) [Compare Source](https://togithub.com/actions/checkout/compare/v4.1.6...v4.1.7) - Bump the minor-npm-dependencies group across 1 directory with 4 updates by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/actions/checkout/pull/1739](https://togithub.com/actions/checkout/pull/1739) - Bump actions/checkout from 3 to 4 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/actions/checkout/pull/1697](https://togithub.com/actions/checkout/pull/1697) - Check out other refs/\* by commit by [@​orhantoy](https://togithub.com/orhantoy) in [https://github.com/actions/checkout/pull/1774](https://togithub.com/actions/checkout/pull/1774) - Pin actions/checkout's own workflows to a known, good, stable version. by [@​jww3](https://togithub.com/jww3) in [https://github.com/actions/checkout/pull/1776](https://togithub.com/actions/checkout/pull/1776) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://developer.mend.io/github/Johannes-Andersen/Johannes). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4zOTMuMCIsInVwZGF0ZWRJblZlciI6IjM3LjM5My4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJ0eXBlL2RlcGVuZGVuY2llcyJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
[](https://renovatebot.com) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/checkout](https://togithub.com/actions/checkout) | action | patch | `v4.1.6` -> `v4.1.7` | --- ### Release Notes <details> <summary>actions/checkout (actions/checkout)</summary> ### [`v4.1.7`](https://togithub.com/actions/checkout/blob/HEAD/CHANGELOG.md#v417) [Compare Source](https://togithub.com/actions/checkout/compare/v4.1.6...v4.1.7) - Bump the minor-npm-dependencies group across 1 directory with 4 updates by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/actions/checkout/pull/1739](https://togithub.com/actions/checkout/pull/1739) - Bump actions/checkout from 3 to 4 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/actions/checkout/pull/1697](https://togithub.com/actions/checkout/pull/1697) - Check out other refs/\* by commit by [@​orhantoy](https://togithub.com/orhantoy) in [https://github.com/actions/checkout/pull/1774](https://togithub.com/actions/checkout/pull/1774) - Pin actions/checkout's own workflows to a known, good, stable version. by [@​jww3](https://togithub.com/jww3) in [https://github.com/actions/checkout/pull/1776](https://togithub.com/actions/checkout/pull/1776) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://developer.mend.io/github/Johannes-Andersen/partall). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4zOTMuMCIsInVwZGF0ZWRJblZlciI6IjM3LjM5My4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJ0eXBlL2RlcGVuZGVuY2llcyJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
[](https://renovatebot.com) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/checkout](https://togithub.com/actions/checkout) | action | patch | `v4.1.6` -> `v4.1.7` | --- ### Release Notes <details> <summary>actions/checkout (actions/checkout)</summary> ### [`v4.1.7`](https://togithub.com/actions/checkout/blob/HEAD/CHANGELOG.md#v417) [Compare Source](https://togithub.com/actions/checkout/compare/v4.1.6...v4.1.7) - Bump the minor-npm-dependencies group across 1 directory with 4 updates by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/actions/checkout/pull/1739](https://togithub.com/actions/checkout/pull/1739) - Bump actions/checkout from 3 to 4 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/actions/checkout/pull/1697](https://togithub.com/actions/checkout/pull/1697) - Check out other refs/\* by commit by [@​orhantoy](https://togithub.com/orhantoy) in [https://github.com/actions/checkout/pull/1774](https://togithub.com/actions/checkout/pull/1774) - Pin actions/checkout's own workflows to a known, good, stable version. by [@​jww3](https://togithub.com/jww3) in [https://github.com/actions/checkout/pull/1776](https://togithub.com/actions/checkout/pull/1776) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://developer.mend.io/github/defenseunicorns/uds-core). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4zOTMuMCIsInVwZGF0ZWRJblZlciI6IjM3LjM5My4wIiwidGFyZ2V0QnJhbmNo 6D47 IjoibWFpbiIsImxhYmVscyI6W119--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
[](https://renovatebot.com) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/checkout](https://togithub.com/actions/checkout) | action | patch | `v4.1.6` -> `v4.1.7` | --- ### Release Notes <details> <summary>actions/checkout (actions/checkout)</summary> ### [`v4.1.7`](https://togithub.com/actions/checkout/blob/HEAD/CHANGELOG.md#v417) [Compare Source](https://togithub.com/actions/checkout/compare/v4.1.6...v4.1.7) - Bump the minor-npm-dependencies group across 1 directory with 4 updates by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/actions/checkout/pull/1739](https://togithub.com/actions/checkout/pull/1739) - Bump actions/checkout from 3 to 4 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/actions/checkout/pull/1697](https://togithub.com/actions/checkout/pull/1697) - Check out other refs/\* by commit by [@​orhantoy](https://togithub.com/orhantoy) in [https://github.com/actions/checkout/pull/1774](https://togithub.com/actions/checkout/pull/1774) - Pin actions/checkout's own workflows to a known, good, stable version. by [@​jww3](https://togithub.com/jww3) in [https://github.com/actions/checkout/pull/1776](https://togithub.com/actions/checkout/pull/1776) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://developer.mend.io/github/dubzzz/fast-check). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4zOTMuMCIsInVwZGF0ZWRJblZlciI6IjM3LjM5My4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiXX0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
##### [vv4](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v417) - Bump the minor-npm-dependencies group across 1 directory with 4 updates by [@dependabot](https://github.com/dependabot) in actions/checkout#1739 - Bump actions/checkout from 3 to 4 by [@dependabot](https://github.com/dependabot) in actions/checkout#1697 - Check out other refs/\* by commit by [@orhantoy](https://github.com/orhantoy) in actions/checkout#1774 - Pin actions/checkout's own workflows to a known, good, stable version. by [@jww3](https://github.com/jww3) in actions/checkout#1776
##### [vv4](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v417) - Bump the minor-npm-dependencies group across 1 directory with 4 updates by [@dependabot](https://github.com/dependabot) in actions/checkout#1739 - Bump actions/checkout from 3 to 4 by [@dependabot](https://github.com/dependabot) in actions/checkout#1697 - Check out other refs/\* by commit by [@orhantoy](https://github.com/orhantoy) in actions/checkout#1774 - Pin actions/checkout's own workflows to a known, good, stable version. by [@jww3](https://github.com/jww3) in actions/checkout#1776
##### [vv4](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v417) - Bump the minor-npm-dependencies group across 1 directory with 4 updates by [@dependabot](https://github.com/dependabot) in actions/checkout#1739 - Bump actions/checkout from 3 to 4 by [@dependabot](https://github.com/dependabot) in actions/checkout#1697 - Check out other refs/\* by commit by [@orhantoy](https://github.com/orhantoy) in actions/checkout#1774 - Pin actions/checkout's own workflows to a known, good, stable version. by [@jww3](https://github.com/jww3) in actions/checkout#1776
##### [vv4](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v417) - Bump the minor-npm-dependencies group across 1 directory with 4 updates by [@dependabot](https://github.com/dependabot) in actions/checkout#1739 - Bump actions/checkout from 3 to 4 by [@dependabot](https://github.com/dependabot) in actions/checkout#1697 - Check out other refs/\* by commit by [@orhantoy](https://github.com/orhantoy) in actions/checkout#1774 - Pin actions/checkout's own workflows to a known, good, stable version. by [@jww3](https://github.com/jww3) in actions/checkout#1776
##### [vv4](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v417) - Bump the minor-npm-dependencies group across 1 directory with 4 updates by [@dependabot](https://github.com/dependabot) in actions/checkout#1739 - Bump actions/checkout from 3 to 4 by [@dependabot](https://github.com/dependabot) in actions/checkout#1697 - Check out other refs/\* by commit by [@orhantoy](https://github.com/orhantoy) in actions/checkout#1774 - Pin actions/checkout's own workflows to a known, good, stable version. by [@jww3](https://github.com/jww3) in actions/checkout#1776
##### [vv4](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v417) - Bump the minor-npm-dependencies group across 1 directory with 4 updates by [@dependabot](https://github.com/dependabot) in actions/checkout#1739 - Bump actions/checkout from 3 to 4 by [@dependabot](https://github.com/dependabot) in actions/checkout#1697 - Check out other refs/\* by commit by [@orhantoy](https://github.com/orhantoy) in actions/checkout#1774 - Pin actions/checkout's own workflows to a known, good, stable version. by [@jww3](https://github.com/jww3) in actions/checkout#1776
[](https://renovatebot.com) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/checkout](https://togithub.com/actions/checkout) | action | major | `v2` -> `v4` | --- ### Release Notes <details> <summary>actions/checkout (actions/checkout)</summary> ### [`v4`](https://togithub.com/actions/checkout/blob/HEAD/CHANGELOG.md#v417) [Compare Source](https://togithub.com/actions/checkout/compare/v3...v4) - Bump the minor-npm-dependencies group across 1 directory with 4 updates by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/actions/checkout/pull/1739](https://togithub.com/actions/checkout/pull/1739) - Bump actions/checkout from 3 to 4 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/actions/checkout/pull/1697](https://togithub.com/actions/checkout/pull/1697) - Check out other refs/\* by commit by [@​orhantoy](https://togithub.com/orhantoy) in [https://github.com/actions/checkout/pull/1774](https://togithub.com/actions/checkout/pull/1774) - Pin actions/checkout's own workflows to a known, good, stable version. by [@​jww3](https://togithub.com/jww3) in [https://github.com/actions/checkout/pull/1776](https://togithub.com/actions/checkout/pull/1776) ### [`v3`](https://togithub.com/actions/checkout/blob/HEAD/CHANGELOG.md#v360) [Compare Source](https://togithub.com/actions/checkout/compare/v2...v3) - [Fix: Mark test scripts with Bash'isms to be run via Bash](https://togithub.com/actions/checkout/pull/1377) - [Add option to fetch tags even if fetch-depth > 0](https://togithub.com/actions/checkout/pull/579) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View the [repository job log](https://developer.mend.io/github/nordic-game-lab/web-crawler). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC4yNi4xIiwidXBkYXRlZEluVmVyIjoiMzguMjYuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiZGVwZW5kZW5jaWVzIl19-->
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/checkout](https://togithub.com/actions/checkout) | action | major | `v3` -> `v4` | --- ### Release Notes <details> <summary>actions/checkout (actions/checkout)</summary> ### [`v4`](https://togithub.com/actions/checkout/blob/HEAD/CHANGELOG.md#v417) [Compare Source](https://togithub.com/actions/checkout/compare/v3...v4) - Bump the minor-npm-dependencies group across 1 directory with 4 updates by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/actions/checkout/pull/1739](https://togithub.com/actions/checkout/pull/1739) - Bump actions/checkout from 3 to 4 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/actions/checkout/pull/1697](https://togithub.com/actions/checkout/pull/1697) - Check out other refs/\* by commit by [@​orhantoy](https://togithub.com/orhantoy) in [https://github.com/actions/checkout/pull/1774](https://togithub.com/actions/checkout/pull/1774) - Pin actions/checkout's own workflows to a known, good, stable version. by [@​jww3](https://togithub.com/jww3) in [https://github.com/actions/checkout/pull/1776](https://togithub.com/actions/checkout/pull/1776) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/bosun-ai/swiftide). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC4yNi4xIiwidXBkYXRlZEluVmVyIjoiMzguNTYuMCIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6W119--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/checkout](https://redirect.github.com/actions/checkout) | action | major | `v2` -> `v4` | | [actions/checkout](https://redirect.github.com/actions/checkout) | action | major | `v3` -> `v4` | --- ### Release Notes <details> <summary>actions/checkout (actions/checkout)</summary> ### [`v4`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v417) [Compare Source](https://redirect.github.com/actions/checkout/compare/v3...v4) - Bump the minor-npm-dependencies group across 1 directory with 4 updates by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/actions/checkout/pull/1739](https://redirect.github.com/actions/checkout/pull/1739) - Bump actions/checkout from 3 to 4 by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/actions/checkout/pull/1697](https://redirect.github.com/actions/checkout/pull/1697) - Check out other refs/\* by commit by [@​orhantoy](https://redirect.github.com/orhantoy) in [https://github.com/actions/checkout/pull/1774](https://redirect.github.com/actions/checkout/pull/1774) - Pin actions/checkout's own workflows to a known, good, stable version. by [@​jww3](https://redirect.github.com/jww3) in [https://github.com/actions/checkout/pull/1776](https://redirect.github.com/actions/checkout/pull/1776) ### [`v3`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v360) [Compare Source](https://redirect.github.com/actions/checkout/compare/v2...v3) - [Fix: Mark test scripts with Bash'isms to be run via Bash](https://redirect.github.com/actions/checkout/pull/1377) - [Add option to fetch tags even if fetch-depth > 0](https://redirect.github.com/actions/checkout/pull/579) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/zeebe-io/zeebe-chaos). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC4yNi4xIiwidXBkYXRlZEluVmVyIjoiMzguNTkuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/checkout](https://redirect.github.com/actions/checkout) | action | major | `v3` -> `v4` | --- ### Release Notes <details> <summary>actions/checkout (actions/checkout)</summary> ### [`v4`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v417) [Compare Source](https://redirect.github.com/actions/checkout/compare/v3...v4) - Bump the minor-npm-dependencies group across 1 directory with 4 updates by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/actions/checkout/pull/1739](https://redirect.github.com/actions/checkout/pull/1739) - Bump actions/checkout from 3 to 4 by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/actions/checkout/pull/1697](https://redirect.github.com/actions/checkout/pull/1697) - Check out other refs/\* by commit by [@​orhantoy](https://redirect.github.com/orhantoy) in [https://github.com/actions/checkout/pull/1774](https://redirect.github.com/actions/checkout/pull/1774) - Pin actions/checkout's own workflows to a known, good, stable version. by [@​jww3](https://redirect.github.com/jww3) in [https://github.com/actions/checkout/pull/1776](https://redirect.github.com/actions/checkout/pull/1776) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/toeverything/blocksuite). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC41OS4yIiwidXBkYXRlZEluVmVyIjoiMzguNTkuMiIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6W119-->
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/checkout](https://redirect.github.com/actions/checkout) | action | major | `v3` -> `v4` | --- ### Release Notes <details> <summary>actions/checkout (actions/checkout)</summary> ### [`v4`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v417) [Compare Source](https://redirect.github.com/actions/checkout/compare/v3...v4) - Bump the minor-npm-dependencies group across 1 directory with 4 updates by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/actions/checkout/pull/1739](https://redirect.github.com/actions/checkout/pull/1739) - Bump actions/checkout from 3 to 4 by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/actions/checkout/pull/1697](https://redirect.github.com/actions/checkout/pull/1697) - Check out other refs/\* by commit by [@​orhantoy](https://redirect.github.com/orhantoy) in [https://github.com/actions/checkout/pull/1774](https://redirect.github.com/actions/checkout/pull/1774) - Pin actions/checkout's own workflows to a known, good, stable version. by [@​jww3](https://redirect.github.com/jww3) in [https://github.com/actions/checkout/pull/1776](https://redirect.github.com/actions/checkout/pull/1776) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/equinix-labs/ansible-collection-equinix). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC41OS4yIiwidXBkYXRlZEluVmVyIjoiMzguNTkuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | Type | Update | |---|---|---|---|---|---|---|---| | [@nuxt/fonts](https://redirect.github.com/nuxt/fonts) | [`^0.5.1` -> `^0.7.2`](https://renovatebot.com/diffs/npm/@nuxt%2ffonts/0.5.1/0.7.2) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | dependencies | minor | | [actions/checkout](https://redirect.github.com/actions/checkout) | `v4.1.1` -> `v4.1.7` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | action | patch | | [amannn/action-semantic-pull-request](https://redirect.github.com/amannn/action-semantic-pull-request) | `v5.5.2` -> `v5.5.3` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | action | patch | | [trufflesecurity/trufflehog](https://redirect.github.com/trufflesecurity/trufflehog) | `v3.69.0` -> `v3.81.10` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | action | minor | --- ### Release Notes <details> <summary>nuxt/fonts (@​nuxt/fonts)</summary> ### [`v0.7.2`](https://redirect.github.com/nuxt/fonts/blob/HEAD/CHANGELOG.md#v072) [Compare Source](https://redirect.github.com/nuxt/fonts/compare/v0.7.1...v0.7.2) [compare changes](https://redirect.github.com/nuxt/fonts/compare/v0.7.1...v0.7.2) ##### 🔥 Performance - **local:** Use `tinyglobby` to scan font files ([#​205](https://redirect.github.com/nuxt/fonts/pull/205)) ##### 🩹 Fixes - Apply `-` replacement to filename ([d83aa0d](https://redirect.github.com/nuxt/fonts/commit/d83aa0d)) - **adobe:** Use provided `css_names` from API ([#​192](https://redirect.github.com/nuxt/fonts/pull/192)) - **fontsource:** Use `/variable` endpoint for retrieving variable axes ([#​196](https://redirect.github.com/nuxt/fonts/pull/196)) ##### 📖 Documentation - Fix link to how it works ([#​197](https://redirect.github.com/nuxt/fonts/pull/197)) - Update carbon abs ([7b61b15](https://redirect.github.com/nuxt/fonts/commit/7b61b15)) - Improvements ([9dab0a3](https://redirect.github.com/nuxt/fonts/commit/9dab0a3)) - Update social og image ([2991df2](https://redirect.github.com/nuxt/fonts/commit/2991df2)) - Fix open an issue link on installation page ([#​206](https://redirect.github.com/nuxt/fonts/pull/206)) ##### 🏡 Chore - Lint ([dabc1ce](https://redirect.github.com/nuxt/fonts/commit/dabc1ce)) ##### ✅ Tests - Update snapshots ([5bc9ae6](https://redirect.github.com/nuxt/fonts/commit/5bc9ae6)) ##### ❤️ Contributors - Ben McCann ([@​benmccann](http://github.com/benmccann)) - Kethan Vegunta ([@​kethan1](http://github.com/kethan1)) - Daniel Roe ([@​danielroe](http://github.com/danielroe)) - Sébastien Chopin ([@​atinux](http://github.com/atinux)) - Tom Tang ([@​qwerzl](http://github.com/qwerzl)) - Michel EDIGHOFFER <edimitchel@gmail.com> ### [`v0.7.1`](https://redirect.github.com/nuxt/fonts/blob/HEAD/CHANGELOG.md#v071) [Compare Source](https://redirect.github.com/nuxt/fonts/compare/v0.7.0...v0.7.1) [compare changes](https://redirect.github.com/nuxt/fonts/compare/v0.7.0...v0.7.1) ##### 🩹 Fixes - **local:** Scan for fonts in all public assets dirs ([6e7ae2b](https://redirect.github.com/nuxt/fonts/commit/6e7ae2b)) - Ensure we don't have font filenames prefixed with `-` ([dfa252a](https://redirect.github.com/nuxt/fonts/commit/dfa252a)) ##### 📖 Documentation - Add docs page ([#​146](https://redirect.github.com/nuxt/fonts/pull/146)) - Update home page links ([8c91318](https://redirect.github.com/nuxt/fonts/commit/8c91318)) - Two more links ([5af0e5e](https://redirect.github.com/nuxt/fonts/commit/5af0e5e)) ##### 🏡 Chore - Add CODEOWNERS file ([#​156](https://redirect.github.com/nuxt/fonts/pull/156)) - Lint ([1632eee](https://redirect.github.com/nuxt/fonts/commit/1632eee)) ##### ❤️ Contributors - Daniel Roe ([@​danielroe](http://github.com/danielroe)) - Tom Tang ([@​qwerzl](http://github.com/qwerzl)) ### [`v0.7.0`](https://redirect.github.com/nuxt/fonts/blob/HEAD/CHANGELOG.md#v070) [Compare Source](https://redirect.github.com/nuxt/fonts/compare/v0.6.1...v0.7.0) [compare changes](https://redirect.github.com/nuxt/fonts/compare/v0.6.1...v0.7.0) ##### 🚀 Enhancements - Allow configuring `font-stretch` property in override ([d7ff458](https://redirect.github.com/nuxt/fonts/commit/d7ff458)) - Add `preload` override + preload non subsetted fonts ([#​136](https://redirect.github.com/nuxt/fonts/pull/136)) ##### 🩹 Fixes - Do not apply ignore patterns to `_fonts` public dir ([4952673](https://redirect.github.com/nuxt/fonts/commit/4952673)) ##### 📖 Documentation - Clarify that `addPreloadLinks` only affects production ([d3cbcdb](https://redirect.github.com/nuxt/fonts/commit/d3cbcdb)) - **readme:** Replace provider count ([#​125](https://redirect.github.com/nuxt/fonts/pull/125)) ##### 🏡 Chore - Migrate to eslint v9 ([#​121](https://redirect.github.com/nuxt/fonts/pull/121)) - Lint ([7fa0ef5](https://redirect.github.com/nuxt/fonts/commit/7fa0ef5)) - Update to latest `@nuxt/module-builder` ([#​139](https://redirect.github.com/nuxt/fonts/pull/139)) ##### 🤖 CI - Add codecov token ([#​140](https://redirect.github.com/nuxt/fonts/pull/140)) ##### ❤️ Contributors - Daniel Roe ([@​danielroe](http://github.com/danielroe)) - Jonas Thelemann <e-mail+github@jonas-thelemann.de> ### [`v0.6.1`](https://redirect.github.com/nuxt/fonts/blob/HEAD/CHANGELOG.md#v061) [Compare Source](https://redirect.github.com/nuxt/fonts/compare/v0.6.0...v0.6.1) [compare changes](https://redirect.github.com/nuxt/fonts/compare/v0.6.0...v0.6.1) ##### 🩹 Fixes - Add style in variable font local fallback name ([#​110](https://redirect.github.com/nuxt/fonts/pull/110)) ##### 📖 Documentation - Add link to adobe's terms and warning to read ([7872b28](https://redirect.github.com/nuxt/fonts/commit/7872b28)) - Mention non-latin subset support for adobe provider ([#​109](https://redirect.github.com/nuxt/fonts/pull/109)) ##### 🏡 Chore - **release:** V0.6.0 ([0913b4b](https://redirect.github.com/nuxt/fonts/commit/0913b4b)) ##### ❤️ Contributors - Tom Tang ([@​qwerzl](http://github.com/qwerzl)) - Daniel Roe ([@​danielroe](http://github.com/danielroe)) ### [`v0.6.0`](https://redirect.github.com/nuxt/fonts/blob/HEAD/CHANGELOG.md#v060) [Compare Source](https://redirect.github.com/nuxt/fonts/compare/v0.5.1...v0.6.0) [compare changes](https://redirect.github.com/nuxt/fonts/compare/v0.5.1...v0.6.0) ##### 🚀 Enhancements - **fontsource:** Support variable fonts ([#​102](https://redirect.github.com/nuxt/fonts/pull/102)) ##### 🩹 Fixes - Render variable font weight correctly ([#​99](https://redirect.github.com/nuxt/fonts/pull/99)) - Preserve `@font-face` order when rendering ([836a605](https://redirect.github.com/nuxt/fonts/commit/836a605)) - Only prepend once 🤣 and update snapshots ([8a000ae](https://redirect.github.com/nuxt/fonts/commit/8a000ae)) - Adopt forward-compatible approach to `builder:watch` ([#​101](https://redirect.github.com/nuxt/fonts/pull/101)) - Handle custom `app.baseURL` in development ([d9f4fae](https://redirect.github.com/nuxt/fonts/commit/d9f4fae)) ##### 📖 Documentation - Add image ([608653b](https://redirect.github.com/nuxt/fonts/commit/608653b)) - Mention disabling unocss web fonts preset ([627125b](https://redirect.github.com/nuxt/fonts/commit/627125b)) ##### 🏡 Chore - Link to latest version in badges ([42e7030](https://redirect.github.com/nuxt/fonts/commit/42e7030)) ##### ✅ Tests - Update poppins snapshot ([274ae5f](https://redirect.github.com/nuxt/fonts/commit/274ae5f)) ##### ❤️ Contributors - Daniel Roe ([@​danielroe](http://github.com/danielroe)) - Tom Tang ([@​qwerzl](http://github.com/qwerzl)) - Sébastien Chopin ([@​Atinux](http://github.com/Atinux)) </details> <details> <summary>actions/checkout (actions/checkout)</summary> ### [`v4.1.7`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v417) [Compare Source](https://redirect.github.com/actions/checkout/compare/v4.1.6...v4.1.7) - Bump the minor-npm-dependencies group across 1 directory with 4 updates by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/actions/checkout/pull/1739](https://redirect.github.com/actions/checkout/pull/1739) - Bump actions/checkout from 3 to 4 by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/actions/checkout/pull/1697](https://redirect.github.com/actions/checkout/pull/1697) - Check out other refs/\* by commit by [@​orhantoy](https://redirect.github.com/orhantoy) in [https://github.com/actions/checkout/pull/1774](https://redirect.github.com/actions/checkout/pull/1774) - Pin actions/checkout's own workflows to a known, good, stable version. by [@​jww3](https://redirect.github.com/jww3) in [https://github.com/actions/checkout/pull/1776](https://redirect.github.com/actions/checkout/pull/1776) ### [`v4.1.6`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v416) [Compare Source](https://redirect.github.com/actions/checkout/compare/v4.1.5...v4.1.6) - Check platform to set archive extension appropriately by [@​cory-miller](https://redirect.github.com/cory-miller) in [https://github.com/actions/checkout/pull/1732](https://redirect.github.com/actions/checkout/pull/1732) ### [`v4.1.5`](https://redirect.github.com/actions/checkout/releases/tag/v4.1.5) [Compare Source](https://redirect.github.com/actions/checkout/compare/v4.1.4...v4.1.5) #### What's Changed - Update NPM dependencies by [@​cory-miller](https://redirect.github.com/cory-miller) in [https://github.com/actions/checkout/pull/1703](https://redirect.github.com/actions/checkout/pull/1703) - Bump github/codeql-action from 2 to 3 by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/actions/checkout/pull/1694](https://redirect.github.com/actions/checkout/pull/1694) - Bump actions/setup-node from 1 to 4 by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/actions/checkout/pull/1696](https://redirect.github.com/actions/checkout/pull/1696) - Bump actions/upload-artifact from 2 to 4 by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/actions/checkout/pull/1695](https://redirect.github.com/actions/checkout/pull/1695) - README: Suggest `user.email` to be `41898282+github-actions[bot]@​users.noreply.github.com` by [@​cory-miller](https://redirect.github.com/cory-miller) in [https://github.com/actions/checkout/pull/1707](https://redirect.github.com/actions/checkout/pull/1707) **Full Changelog**: https://github.com/actions/checkout/compare/v4.1.4...v4.1.5 ### [`v4.1.4`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v414) [Compare Source](https://redirect.github.com/actions/checkout/compare/v4.1.3...v4.1.4) - Disable `extensions.worktreeConfig` when disabling `sparse-checkout` by [@​jww3](https://redirect.github.com/jww3) in [https://github.com/actions/checkout/pull/1692](https://redirect.github.com/actions/checkout/pull/1692) - Add dependabot config by [@​cory-miller](https://redirect.github.com/cory-miller) in [https://github.com/actions/checkout/pull/1688](https://redirect.github.com/actions/checkout/pull/1688) - Bump the minor-actions-dependencies group with 2 updates by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/actions/checkout/pull/1693](https://redirect.github.com/actions/checkout/pull/1693) - Bump word-wrap from 1.2.3 to 1.2.5 by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/actions/checkout/pull/1643](https://redirect.github.com/actions/checkout/pull/1643) ### [`v4.1.3`](https://redirect.github.com/actions/checkout/releases/tag/v4.1.3) [Compare Source](https://redirect.github.com/actions/checkout/compare/v4.1.2...v4.1.3) #### What's Changed - Update `actions/checkout` version in `update-main-version.yml` by [@​jww3](https://redirect.github.com/jww3) in [https://github.com/actions/checkout/pull/1650](https://redirect.github.com/actions/checkout/pull/1650) - Check git version before attempting to disable `sparse-checkout` by [@​jww3](https://redirect.github.com/jww3) in [https://github.com/actions/checkout/pull/1656](https://redirect.github.com/actions/checkout/pull/1656) - Add SSH user parameter by [@​cory-miller](https://redirect.github.com/cory-miller) in [https://github.com/actions/checkout/pull/1685](https://redirect.github.com/actions/checkout/pull/1685) **Full Changelog**: https://github.com/actions/checkout/compare/v4.1.2...v4.1.3 ### [`v4.1.2`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v412) [Compare Source](https://redirect.github.com/actions/checkout/compare/v4.1.1...v4.1.2) - Fix: Disable sparse checkout whenever `sparse-checkout` option is not present [@​dscho](https://redirect.github.com/dscho) in [https://github.com/actions/checkout/pull/1598](https://redirect.github.com/actions/checkout/pull/1598) </details> <details> <summary>amannn/action-semantic-pull-request (amannn/action-semantic-pull-request)</summary> ### [`v5.5.3`](https://redirect.github.com/amannn/action-semantic-pull-request/releases/tag/v5.5.3) [Compare Source](https://redirect.github.com/amannn/action-semantic-pull-request/compare/v5.5.2...v5.5.3) ##### Bug Fixes - Bump `braces` dependency ([#​269](https://redirect.github.com/amannn/action-semantic-pull-request/issues/269). by [@​EelcoLos](https://redirect.github.com/EelcoLos)) ([2d952a1](https://redirect.github.com/amannn/action-semantic-pull-request/commit/2d952a1bf90a6a7ab8f0293dc86f5fdf9acb1915)) </details> <details> <summary>trufflesecurity/trufflehog (trufflesecurity/trufflehog)</summary> ### [`v3.81.10`](https://redirect.github.com/trufflesecurity/trufflehog/releases/tag/v3.81.10) [Compare Source](https://redirect.github.com/trufflesecurity/trufflehog/compare/v3.81.9...v3.81.10) #### What's Changed - fix(deps): update module github.com/sendgrid/sendgrid-go to v3.15.0+incompatible by [@​renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3214](https://redirect.github.com/trufflesecurity/trufflehog/pull/3214) - fix(deps): update module github.com/charmbracelet/bubbletea to v0.27.0 by [@​renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3229](https://redirect.github.com/trufflesecurity/trufflehog/pull/3229) - chore(deps): update golang docker tag to v1.23 by [@​renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3228](https://redirect.github.com/trufflesecurity/trufflehog/pull/3228) - fix(deps): update module github.com/prometheus/client_golang to v1.20.1 by [@​renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3236](https://redirect.github.com/trufflesecurity/trufflehog/pull/3236) - fix(deps): update module google.golang.org/api to v0.192.0 by [@​renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3237](https://redirect.github.com/trufflesecurity/trufflehog/pull/3237) - fix(deps): update module google.golang.org/api to v0.193.0 by [@​renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3238](https://redirect.github.com/trufflesecurity/trufflehog/pull/3238) - fix(deps): update testcontainers-go monorepo to v0.33.0 by [@​renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3239](https://redirect.github.com/trufflesecurity/trufflehog/pull/3239) - fix(deps): update module cloud.google.com/go/secretmanager to v1.14.0 by [@​renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3240](https://redirect.github.com/trufflesecurity/trufflehog/pull/3240) - Customize results cleaning (using smuggled interface) by [@​rosecodym](https://redirect.github.com/rosecodym) in [https://github.com/trufflesecurity/trufflehog/pull/3235](https://redirect.github.com/trufflesecurity/trufflehog/pull/3235) - Skip filtration for targeted scans by [@​rosecodym](https://redirect.github.com/rosecodym) in [https://github.com/trufflesecurity/trufflehog/pull/3243](https://redirect.github.com/trufflesecurity/trufflehog/pull/3243) - Strip leading +/- from GitHub target diffs by [@​rosecodym](https://redirect.github.com/rosecodym) in [https://github.com/trufflesecurity/trufflehog/pull/3244](https://redirect.github.com/trufflesecurity/trufflehog/pull/3244) - Th 899 postman panic issue by [@​LaraCroftDev](https://redirect.github.com/LaraCroftDev) in [https://github.com/trufflesecurity/trufflehog/pull/3245](https://redirect.github.com/trufflesecurity/trufflehog/pull/3245) - Update rotation guide link for teams by [@​hxnyk](https://redirect.github.com/hxnyk) in [https://github.com/trufflesecurity/trufflehog/pull/3248](https://redirect.github.com/trufflesecurity/trufflehog/pull/3248) - Download files when reverifying by [@​rosecodym](https://redirect.github.com/rosecodym) in [https://github.com/trufflesecurity/trufflehog/pull/3252](https://redirect.github.com/trufflesecurity/trufflehog/pull/3252) - \[chore] - Update buffer by [@​ahrav](https://redirect.github.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/3255](https://redirect.github.com/trufflesecurity/trufflehog/pull/3255) #### New Contributors - [@​LaraCroftDev](https://redirect.github.com/LaraCroftDev) made their first contribution in [https://github.com/trufflesecurity/trufflehog/pull/3245](https://redirect.github.com/trufflesecurity/trufflehog/pull/3245) **Full Changelog**: https://github.com/trufflesecurity/trufflehog/compare/v3.81.9...v3.81.10 ### [`v3.81.9`](https://redirect.github.com/trufflesecurity/trufflehog/releases/tag/v3.81.9) [Compare Source](https://redirect.github.com/trufflesecurity/trufflehog/compare/v3.81.8...v3.81.9) #### What's Changed - Capture decoding time metric by [@​rosecodym](https://redirect.github.com/rosecodym) in [https://github.com/trufflesecurity/trufflehog/pull/3209](https://redirect.github.com/trufflesecurity/trufflehog/pull/3209) - fix(deps): update module cloud.google.com/go/secretmanager to v1.13.6 by [@​renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3208](https://redirect.github.com/trufflesecurity/trufflehog/pull/3208) - remove two letter keyword by [@​0x1](https://redirect.github.com/0x1) in [https://github.com/trufflesecurity/trufflehog/pull/3210](https://redirect.github.com/trufflesecurity/trufflehog/pull/3210) - Add metrics for command invocation by [@​mcastorina](https://redirect.github.com/mcastorina) in [https://github.com/trufflesecurity/trufflehog/pull/3185](https://redirect.github.com/trufflesecurity/trufflehog/pull/3185) - chore(deps): update sigstore/cosign-installer action to v3.6.0 by [@​renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3211](https://redirect.github.com/trufflesecurity/trufflehog/pull/3211) - \[analyze] Capture the hierarchy of GitHub permissions by [@​mcastorina](https://redirect.github.com/mcastorina) in [https://github.com/trufflesecurity/trufflehog/pull/3127](https://redirect.github.com/trufflesecurity/trufflehog/pull/3127) - \[analyze] Fix GitHub token expiration parsing by [@​mcastorina](https://redirect.github.com/mcastorina) in [https://github.com/trufflesecurity/trufflehog/pull/3205](https://redirect.github.com/trufflesecurity/trufflehog/pull/3205) - \[chore] Fix lint errors by [@​mcastorina](https://redirect.github.com/mcastorina) in [https://github.com/trufflesecurity/trufflehog/pull/3218](https://redirect.github.com/trufflesecurity/trufflehog/pull/3218) - \[chore] Ignore analyzer implementation tests in test-community by [@​mcastorina](https://redirect.github.com/mcastorina) in [https://github.com/trufflesecurity/trufflehog/pull/3219](https://redirect.github.com/trufflesecurity/trufflehog/pull/3219) - Support for kebab case and dot notation in permission generation tool by [@​abmussani](https://redirect.github.com/abmussani) in [https://github.com/trufflesecurity/trufflehog/pull/3222](https://redirect.github.com/trufflesecurity/trufflehog/pull/3222) - Improve domain / url handling in detectors by [@​dustin-decker](https://redirect.github.com/dustin-decker) in [https://github.com/trufflesecurity/trufflehog/pull/3221](https://redirect.github.com/trufflesecurity/trufflehog/pull/3221) **Full Changelog**: https://github.com/trufflesecurity/trufflehog/compare/v3.81.8...v3.81.9 ### [`v3.81.8`](https://redirect.github.com/trufflesecurity/trufflehog/releases/tag/v3.81.8) [Compare Source](https://redirect.github.com/trufflesecurity/trufflehog/compare/v3.81.7...v3.81.8) #### What's Changed - \[analyze] Deduplicate finegrained GitHub permissions by [@​mcastorina](https://redirect.github.com/mcastorina) in [https://github.com/trufflesecurity/trufflehog/pull/3196](https://redirect.github.com/trufflesecurity/trufflehog/pull/3196) - fix(deps): update module golang.org/x/net to v0.28.0 by [@​renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3187](https://redirect.github.com/trufflesecurity/trufflehog/pull/3187) - \[analyze] Fix double-print in postgres analyzer by [@​mcastorina](https://redirect.github.com/mcastorina) in [https://github.com/trufflesecurity/trufflehog/pull/3199](https://redirect.github.com/trufflesecurity/trufflehog/pull/3199) - fix(deps): update module go.mongodb.org/mongo-driver to v1.16.1 by [@​renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3197](https://redirect.github.com/trufflesecurity/trufflehog/pull/3197) - Log when a detector ignores the timeout by [@​rosecodym](https://redirect.github.com/rosecodym) in [https://github.com/trufflesecurity/trufflehog/pull/3201](https://redirect.github.com/trufflesecurity/trufflehog/pull/3201) - \[bug] - Correctly Handle Large Files in BufferedReadSeeker by [@​ahrav](https://redirect.github.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/3203](https://redirect.github.com/trufflesecurity/trufflehog/pull/3203) - fix(deps): update module github.com/google/go-containerregistry to v0.20.2 by [@​renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3184](https://redirect.github.com/trufflesecurity/trufflehog/pull/3184) **Full Changelog**: https://github.com/trufflesecurity/trufflehog/compare/v3.81.7...v3.81.8 ### [`v3.81.7`](https://redirect.github.com/trufflesecurity/trufflehog/releases/tag/v3.81.7) [Compare Source](https://redirect.github.com/trufflesecurity/trufflehog/compare/v3.81.6...v3.81.7) #### What's Changed - fix(deps): update module golang.org/x/crypto to v0.26.0 by [@​renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3182](https://redirect.github.com/trufflesecurity/trufflehog/pull/3182) - fix(deps): update module golang.org/x/text to v0.17.0 - autoclosed by [@​renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3183](https://redirect.github.com/trufflesecurity/trufflehog/pull/3183) - \[analyze] Add analyze option to main TUI and unhide subcommand by [@​mcastorina](https://redirect.github.com/mcastorina) in [https://github.com/trufflesecurity/trufflehog/pull/3186](https://redirect.github.com/trufflesecurity/trufflehog/pull/3186) - Analyzer capitalization by [@​hxnyk](https://redirect.github.com/hxnyk) in [https://github.com/trufflesecurity/trufflehog/pull/3188](https://redirect.github.com/trufflesecurity/trufflehog/pull/3188) - \[analyze] Bandaid solution for occasional slow startups by [@​mcastorina](https://redirect.github.com/mcastorina) in [https://github.com/trufflesecurity/trufflehog/pull/3191](https://redirect.github.com/trufflesecurity/trufflehog/pull/3191) - \[analyze] Add basic section to README by [@​mcastorina](https://redirect.github.com/mcastorina) in [https://github.com/trufflesecurity/trufflehog/pull/3190](https://redirect.github.com/trufflesecurity/trufflehog/pull/3190) - Fixes for a few finegrained token issues by [@​dustin-decker](https://redirect.github.com/dustin-decker) in [https://github.com/trufflesecurity/trufflehog/pull/3194](https://redirect.github.com/trufflesecurity/trufflehog/pull/3194) **Full Changelog**: https://github.com/trufflesecurity/trufflehog/compare/v3.81.6...v3.81.7 ### [`v3.81.6`](https://redirect.github.com/trufflesecurity/trufflehog/releases/tag/v3.81.6) [Compare Source](https://redirect.github.com/trufflesecurity/trufflehog/compare/v3.81.5...v3.81.6) #### What's Changed - Auth GitHub in Init by [@​rosecodym](https://redirect.github.com/rosecodym) in [https://github.com/trufflesecurity/trufflehog/pull/3131](https://redirect.github.com/trufflesecurity/trufflehog/pull/3131) - fix(deps): update module github.com/envoyproxy/protoc-gen-validate to v1.1.0 by [@​renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3176](https://redirect.github.com/trufflesecurity/trufflehog/pull/3176) - Analyze TUI by [@​mcastorina](https://redirect.github.com/mcastorina) in [https://github.com/trufflesecurity/trufflehog/pull/3172](https://redirect.github.com/trufflesecurity/trufflehog/pull/3172) - \[analyze] Separate SID from token in twilio analyzer by [@​mcastorina](https://redirect.github.com/mcastorina) in [https://github.com/trufflesecurity/trufflehog/pull/3177](https://redirect.github.com/trufflesecurity/trufflehog/pull/3177) - \[chore] Use custom HTTP client in sendgrid analyzer by [@​mcastorina](https://redirect.github.com/mcastorina) in [https://github.com/trufflesecurity/trufflehog/pull/3178](https://redirect.github.com/trufflesecurity/trufflehog/pull/3178) - Improve finegrained token support by [@​dustin-decker](https://redirect.github.com/dustin-decker) in [https://github.com/trufflesecurity/trufflehog/pull/3179](https://redirect.github.com/trufflesecurity/trufflehog/pull/3179) **Full Changelog**: https://github.com/trufflesecurity/trufflehog/compare/v3.81.5...v3.81.6 ### [`v3.81.5`](https://redirect.github.com/trufflesecurity/trufflehog/releases/tag/v3.81.5) [Compare Source](https://redirect.github.com/trufflesecurity/trufflehog/compare/v3.81.4...v3.81.5) #### What's Changed - Update README.md for github experimental by [@​joeleonjr](https://redirect.github.com/joeleonjr) in [https://github.com/trufflesecurity/trufflehog/pull/3160](https://redirect.github.com/trufflesecurity/trufflehog/pull/3160) - fix(deps): update module github.com/schollz/progressbar/v3 to v3.14.6 by [@​renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3158](https://redirect.github.com/trufflesecurity/trufflehog/pull/3158) - \[analyze] Fix off-by-one error in generated data structures by [@​mcastorina](https://redirect.github.com/mcastorina) in [https://github.com/trufflesecurity/trufflehog/pull/3162](https://redirect.github.com/trufflesecurity/trufflehog/pull/3162) - \[bug] - Create a new context with timeout per request by [@​ahrav](https://redirect.github.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/3163](https://redirect.github.com/trufflesecurity/trufflehog/pull/3163) - \[analyze] Use permission enum values in openai analyzer by [@​mcastorina](https://redirect.github.com/mcastorina) in [https://github.com/trufflesecurity/trufflehog/pull/3165](https://redirect.github.com/trufflesecurity/trufflehog/pull/3165) - update pattern by [@​dustin-decker](https://redirect.github.com/dustin-decker) in [https://github.com/trufflesecurity/trufflehog/pull/3167](https://redirect.github.com/trufflesecurity/trufflehog/pull/3167) - Update Zulip detector by [@​rgmz](https://redirect.github.com/rgmz) in [https://github.com/trufflesecurity/trufflehog/pull/2897](https://redirect.github.com/trufflesecurity/trufflehog/pull/2897) - fix(deps): update module golang.org/x/oauth2 to v0.22.0 by [@​renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3168](https://redirect.github.com/trufflesecurity/trufflehog/pull/3168) - fix(deps): update module golang.org/x/sync to v0.8.0 by [@​renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3169](https://redirect.github.com/trufflesecurity/trufflehog/pull/3169) - fix(deps): update github.com/tailscale/depaware digest to [`585336c`](https://redirect.github.com/trufflesecurity/trufflehog/commit/585336c) by [@​renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3166](https://redirect.github.com/trufflesecurity/trufflehog/pull/3166) - Change log verbosity for detection errors by [@​dustin-decker](https://redirect.github.com/dustin-decker) in [https://github.com/trufflesecurity/trufflehog/pull/3171](https://redirect.github.com/trufflesecurity/trufflehog/pull/3171) **Full Changelog**: https://github.com/trufflesecurity/trufflehog/compare/v3.81.4...v3.81.5 ### [`v3.81.4`](https://redirect.github.com/trufflesecurity/trufflehog/releases/tag/v3.81.4) [Compare Source](https://redirect.github.com/trufflesecurity/trufflehog/compare/v3.81.3...v3.81.4) #### What's Changed - \[bug] - add context timeout to ssh verification by [@​ahrav](https://redirect.github.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/3161](https://redirect.github.com/trufflesecurity/trufflehog/pull/3161) **Full Changelog**: https://github.com/trufflesecurity/trufflehog/compare/v3.81.3...v3.81.4 ### [`v3.81.3`](https://redirect.github.com/trufflesecurity/trufflehog/releases/tag/v3.81.3) [Compare Source](https://redirect.github.com/trufflesecurity/trufflehog/compare/v3.81.2...v3.81.3) #### What's Changed - \[chore] - log detector type on error by [@​ahrav](https://redirect.github.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/3159](https://redirect.github.com/trufflesecurity/trufflehog/pull/3159) **Full Changelog**: https://github.com/trufflesecurity/trufflehog/compare/v3.81.2...v3.81.3 ### [`v3.81.2`](https://redirect.github.com/trufflesecurity/trufflehog/releases/tag/v3.81.2) [Compare Source](https://redirect.github.com/trufflesecurity/trufflehog/compare/v3.81.1...v3.81.2) #### What's Changed - \[chore] - set custom transport for the Docker client by [@​ahrav](https://redirect.github.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/3156](https://redirect.github.com/trufflesecurity/trufflehog/pull/3156) **Full Changelog**: https://github.com/trufflesecurity/trufflehog/compare/v3.81.1...v3.81.2 ### [`v3.81.1`](https://redirect.github.com/trufflesecurity/trufflehog/releases/tag/v3.81.1) [Compare Source](https://redirect.github.com/trufflesecurity/trufflehog/compare/v3.81.0...v3.81.1) #### What's Changed - \[chore] - enable block and mutex profiles by [@​ahrav](https://redirect.github.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/3154](https://redirect.github.com/trufflesecurity/trufflehog/pull/3154) - Add Analyzers interface for Square by [@​abmussani](https://redirect.github.com/abmussani) in [https://github.com/trufflesecurity/trufflehog/pull/3141](https://redirect.github.com/trufflesecurity/trufflehog/pull/3141) - Update module google.golang.org/api to v0.190.0 by [@​renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3146](https://redirect.github.com/trufflesecurity/trufflehog/pull/3146) - quick patch for cfor enumeration by [@​joeleonjr](https://redirect.github.com/joeleonjr) in [https://github.com/trufflesecurity/trufflehog/pull/3155](https://redirect.github.com/trufflesecurity/trufflehog/pull/3155) - Add Analyzers interface for HuggingFace by [@​abmussani](https://redirect.github.com/abmussani) in [https://github.com/trufflesecurity/trufflehog/pull/3140](https://redirect.github.com/trufflesecurity/trufflehog/pull/3140) **Full Changelog**: https://github.com/trufflesecurity/trufflehog/compare/v3.81.0...v3.81.1 ### [`v3.81.0`](https://redirect.github.com/trufflesecurity/trufflehog/releases/tag/v3.81.0) [Compare Source](https://redirect.github.com/trufflesecurity/trufflehog/compare/v3.80.6...v3.81.0) #### What's Changed - Add progress bar to CFOR by [@​dustin-decker](https://redirect.github.com/dustin-decker) in [https://github.com/trufflesecurity/trufflehog/pull/3151](https://redirect.github.com/trufflesecurity/trufflehog/pull/3151) - \[fix] Always configure the engine with the default detectors by [@​mcastorina](https://redirect.github.com/mcastorina) in [https://github.com/trufflesecurity/trufflehog/pull/3152](https://redirect.github.com/trufflesecurity/trufflehog/pull/3152) **Full Changelog**: https://github.com/trufflesecurity/trufflehog/compare/v3.80.6...v3.81.0 ### [`v3.80.6`](https://redirect.github.com/trufflesecurity/trufflehog/releases/tag/v3.80.6) [Compare Source](https://redirect.github.com/trufflesecurity/trufflehog/compare/v3.80.5...v3.80.6) #### What's Changed - Add Analyze interface to Stripe by [@​abmussani](https://redirect.github.com/abmussani) in [https://github.com/trufflesecurity/trufflehog/pull/3132](https://redirect.github.com/trufflesecurity/trufflehog/pull/3132) - \[analyze] Combine access level into permission value by [@​mcastorina](https://redirect.github.com/mcastorina) in [https://github.com/trufflesecurity/trufflehog/pull/3144](https://redirect.github.com/trufflesecurity/trufflehog/pull/3144) - \[chore] - move automaxprocs to init by [@​ahrav](https://redirect.github.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/3143](https://redirect.github.com/trufflesecurity/trufflehog/pull/3143) - add twilio analyze relationships by [@​dustin-decker](https://redirect.github.com/dustin-decker) in [https://github.com/trufflesecurity/trufflehog/pull/3148](https://redirect.github.com/trufflesecurity/trufflehog/pull/3148) - \[chore] Only set default detectors if none are provided by [@​mcastorina](https://redirect.github.com/mcastorina) in [https://github.com/trufflesecurity/trufflehog/pull/3147](https://redirect.github.com/trufflesecurity/trufflehog/pull/3147) - CFOR Commit Scanner by [@​joeleonjr](https://redirect.github.com/joeleonjr) in [https://github.com/trufflesecurity/trufflehog/pull/3145](https://redirect.github.com/trufflesecurity/trufflehog/pull/3145) - \[perf] - Leverage pgzip for Parallel decompression by [@​ahrav](https://redirect.github.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/3149](https://redirect.github.com/trufflesecurity/trufflehog/pull/3149) **Full Changelog**: https://github.com/trufflesecurity/trufflehog/compare/v3.80.5...v3.80.6 ### [`v3.80.5`](https://redirect.github.com/trufflesecurity/trufflehog/releases/tag/v3.80.5) [Compare Source](https://redirect.github.com/trufflesecurity/trufflehog/compare/3.80.4...v3.80.5) #### What's Changed - Add permissions lookup tables by [@​dustin-decker](https://redirect.github.com/dustin-decker) in [https://github.com/trufflesecurity/trufflehog/pull/3125](https://redirect.github.com/trufflesecurity/trufflehog/pull/3125) - Export maps from permission generation by [@​hxnyk](https://redirect.github.com/hxnyk) in [https://github.com/trufflesecurity/trufflehog/pull/3137](https://redirect.github.com/trufflesecurity/trufflehog/pull/3137) - \[chore] - Set GOMAXPROCS by [@​ahrav](https://redirect.github.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/3136](https://redirect.github.com/trufflesecurity/trufflehog/pull/3136) - \[chore] - address linter by [@​ahrav](https://redirect.github.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/3133](https://redirect.github.com/trufflesecurity/trufflehog/pull/3133) - \[refactor] - Improve Performance by Shifting Concurrency from Image to Layer Level by [@​ahrav](https://redirect.github.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/3135](https://redirect.github.com/trufflesecurity/trufflehog/pull/3135) **Full Changelog**: https://github.com/trufflesecurity/trufflehog/compare/3.80.4...v3.80.5 ### [`v3.80.4`](https://redirect.github.com/trufflesecurity/trufflehog/releases/tag/3.80.4) [Compare Source](https://redirect.github.com/trufflesecurity/trufflehog/compare/v3.80.3...3.80.4) #### What's Changed - Analyzer partial implementations by [@​mcastorina](https://redirect.github.com/mcastorina) in [https://github.com/trufflesecurity/trufflehog/pull/3114](https://redirect.github.com/trufflesecurity/trufflehog/pull/3114) - fix(deps): update module github.com/aws/aws-sdk-go to v1.55.5 by [@​renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3116](https://redirect.github.com/trufflesecurity/trufflehog/pull/3116) - Separate out printing statements with anlayzer logic for Shopify by [@​abmussani](https://redirect.github.com/abmussani) in [https://github.com/trufflesecurity/trufflehog/pull/3123](https://redirect.github.com/trufflesecurity/trufflehog/pull/3123) - Separate out printing statements with anlayzer logic for Square by [@​abmussani](https://redirect.github.com/abmussani) in [https://github.com/trufflesecurity/trufflehog/pull/3122](https://redirect.github.com/trufflesecurity/trufflehog/pull/3122) - Separate out printing statements with anlayzer logic for twilio by [@​abmussani](https://redirect.github.com/abmussani) in [https://github.com/trufflesecurity/trufflehog/pull/3118](https://redirect.github.com/trufflesecurity/trufflehog/pull/3118) - Add new canary ID by [@​dustin-decker](https://redirect.github.com/dustin-decker) in [https://github.com/trufflesecurity/trufflehog/pull/3117](https://redirect.github.com/trufflesecurity/trufflehog/pull/3117) - Update GitHub integration tests by [@​rosecodym](https://redirect.github.com/rosecodym) in [https://github.com/trufflesecurity/trufflehog/pull/3124](https://redirect.github.com/trufflesecurity/trufflehog/pull/3124) - Separate out printing statements with anlayzer logic for Slack by [@​abmussani](https://redirect.github.com/abmussani) in [https://github.com/trufflesecurity/trufflehog/pull/3121](https://redirect.github.com/trufflesecurity/trufflehog/pull/3121) - Separate out printing statements with anlayzer logic for Stripe by [@​abmussani](https://redirect.github.com/abmussani) in [https://github.com/trufflesecurity/trufflehog/pull/3120](https://redirect.github.com/trufflesecurity/trufflehog/pull/3120) - nitro detector was removed and needs to be deprecated by [@​0x1](https://redirect.github.com/0x1) in [https://github.com/trufflesecurity/trufflehog/pull/3102](https://redirect.github.com/trufflesecurity/trufflehog/pull/3102) - Separate out printing statements with anlayzer logic for SourceGraph by [@​abmussani](https://redirect.github.com/abmussani) in [https://github.com/trufflesecurity/trufflehog/pull/3119](https://redirect.github.com/trufflesecurity/trufflehog/pull/3119) **Full Changelog**: https://github.com/trufflesecurity/trufflehog/compare/v3.80.3...3.80.4 ### [`v3.80.3`](https://redirect.github.com/trufflesecurity/trufflehog/releases/tag/v3.80.3) [Compare Source](https://redirect.github.com/trufflesecurity/trufflehog/compare/v3.80.2...v3.80.3) #### What's Changed - fix(deps): update module github.com/gabriel-vasile/mimetype to v1.4.5 by [@​renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3108](https://redirect.github.com/trufflesecurity/trufflehog/pull/3108) - \[chore] Move openai log message to proper function by [@​mcastorina](https://redirect.github.com/mcastorina) in [https://github.com/trufflesecurity/trufflehog/pull/3105](https://redirect.github.com/trufflesecurity/trufflehog/pull/3105) - fix(deps): update module github.com/aws/aws-sdk-go to v1.55.3 by [@​renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3107](https://redirect.github.com/trufflesecurity/trufflehog/pull/3107) - \[analyze] Implement Analyzer interface for github by [@​mcastorina](https://redirect.github.com/mcastorina) in [https://github.com/trufflesecurity/trufflehog/pull/3110](https://redirect.github.com/trufflesecurity/trufflehog/pull/3110) - Support openai project and fine grained tokens by [@​dustin-decker](https://redirect.github.com/dustin-decker) in [https://github.com/trufflesecurity/trufflehog/pull/3112](https://redirect.github.com/trufflesecurity/trufflehog/pull/3112) - \[analyze] Add description and user to openai metadata by [@​mcastorina](https://redirect.github.com/mcastorina) in [https://github.com/trufflesecurity/trufflehog/pull/3111](https://redirect.github.com/trufflesecurity/trufflehog/pull/3111) - \[chore] - Manually update Depedencies by [@​ahrav](https://redirect.github.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/3106](https://redirect.github.com/trufflesecurity/trufflehog/pull/3106) - Use non-canary credentials for AWS tests by [@​rosecodym](https://redirect.github.com/rosecodym) in [https://github.com/trufflesecurity/trufflehog/pull/3109](https://redirect.github.com/trufflesecurity/trufflehog/pull/3109) - Include default detectors when using a config that contains detectors by [@​harmonherring-pro](https://redirect.github.com/harmonherring-pro) in [https://github.com/trufflesecurity/trufflehog/pull/3115](https://redirect.github.com/trufflesecurity/trufflehog/pull/3115) **Full Changelog**: https://github.com/trufflesecurity/trufflehog/compare/v3.80.2...v3.80.3 ### [`v3.80.2`](https://redirect.github.com/trufflesecurity/trufflehog/releases/tag/v3.80.2) [Compare Source](https://redirect.github.com/trufflesecurity/trufflehog/compare/v3.80.1...v3.80.2) #### What's Changed - Added Twitter v2 Detector by [@​abmussani](https://redirect.github.com/abmussani) in [https://github.com/trufflesecurity/trufflehog/pull/3016](https://redirect.github.com/trufflesecurity/trufflehog/pull/3016) - fix(deps): update module github.com/aws/aws-sdk-go to v1.54.20 by [@​renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3077](https://redirect.github.com/trufflesecurity/trufflehog/pull/3077) - \[bug] - add verify check by [@​ahrav](https://redirect.github.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/3079](https://redirect.github.com/trufflesecurity/trufflehog/pull/3079) - \[chore] - Reduce `VerificationOverlapWorker`s by [@​ahrav](https://redirect.github.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/3082](https://redirect.github.com/trufflesecurity/trufflehog/pull/3082) - fix(deps): update module github.com/couchbase/gocb/v2 to v2.9.1 by [@​renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3078](https://redirect.github.com/trufflesecurity/trufflehog/pull/3078) - fix(deps): update golang.org/x/exp digest to [`8a7402a`](https://redirect.github.com/trufflesecurity/trufflehog/commit/8a7402a) by [@​renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3083](https://redirect.github.com/trufflesecurity/trufflehog/pull/3083) - fix(deps): update module github.com/googleapis/gax-go/v2 to v2.13.0 by [@​renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3085](https://redirect.github.com/trufflesecurity/trufflehog/pull/3085) - fix(deps): update module google.golang.org/api to v0.189.0 by [@​renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3086](https://redirect.github.com/trufflesecurity/trufflehog/pull/3086) - implemented a netsuite detector by [@​abmussani](https://redirect.github.com/abmussani) in [https://github.com/trufflesecurity/trufflehog/pull/3068](https://redirect.github.com/trufflesecurity/trufflehog/pull/3068) - Remove onwater detector by [@​trufflesteeeve](https://redirect.github.com/trufflesteeeve) in [https://github.com/trufflesecurity/trufflehog/pull/3088](https://redirect.github.com/trufflesecurity/trufflehog/pull/3088) - Fixed Crash issue in atlassian V2 if data in response is empty array by [@​abmussani](https://redirect.github.com/abmussani) in [https://github.com/trufflesecurity/trufflehog/pull/3091](https://redirect.github.com/trufflesecurity/trufflehog/pull/3091) - fix(deps): update module github.com/aws/aws-sdk-go to v1.55.1 by [@​renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3087](https://redirect.github.com/trufflesecurity/trufflehog/pull/3087) - fix(deps): update module github.com/aws/aws-sdk-go to v1.55.2 by [@​renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3094](https://redirect.github.com/trufflesecurity/trufflehog/pull/3094) - \[chore] - remove deps from docker image by [@​ahrav](https://redirect.github.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/3097](https://redirect.github.com/trufflesecurity/trufflehog/pull/3097) - \[bug]- Invalid Seek for Non-Seekable Readers by [@​ahrav](https://redirect.github.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/3095](https://redirect.github.com/trufflesecurity/trufflehog/pull/3095) - chore: fix some comments by [@​shangchenglumetro](https://redirect.github.com/shangchenglumetro) in [https://github.com/trufflesecurity/trufflehog/pull/3098](https://redirect.github.com/trufflesecurity/trufflehog/pull/3098) - Analyze by [@​mcastorina](https://redirect.github.com/mcastorina) in [https://github.com/trufflesecurity/trufflehog/pull/3099](https://redirect.github.com/trufflesecurity/trufflehog/pull/3099) - fix(deps): update module cloud.google.com/go/secretmanager to v1.13.5 by [@​renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3096](https://redirect.github.com/trufflesecurity/trufflehog/pull/3096) - \[chore] Fix Versioner interface for twitter by [@​mcastorina](https://redirect.github.com/mcastorina) in [https://github.com/trufflesecurity/trufflehog/pull/3104](https://redirect.github.com/trufflesecurity/trufflehog/pull/3104) - Implement Analyzer interface for openai by [@​mcastorina](https://redirect.github.com/mcastorina) in [https://github.com/trufflesecurity/trufflehog/pull/3101](https://redirect.github.com/trufflesecurity/trufflehog/pull/3101) #### New Contributors - [@​shangchenglumetro](https://redirect.github.com/shangchenglumetro) made their first contribution in [https://github.com/trufflesecurity/trufflehog/pull/3098](https://redirect.github.com/trufflesecurity/trufflehog/pull/3098) **Full Changelog**: https://github.com/trufflesecurity/trufflehog/compare/v3.80.1...v3.80.2 ### [`v3.80.1`](https://redirect.github.com/trufflesecurity/trufflehog/releases/tag/v3.80.1) [Compare Source](https://redirect.github.com/trufflesecurity/trufflehog/compare/v3.80.0...v3.80.1) #### What's Changed - fix(deps): update golang.org/x/exp digest to [`e3f2596`](https://redirect.github.com/trufflesecurity/trufflehog/commit/e3f2596) by [@​renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3071](https://redirect.github.com/trufflesecurity/trufflehog/pull/3071) - chore: fix goreleaser config and command line options for goreleaser v2 by [@​suzuki-shunsuke](https://redirect.github.com/suzuki-shunsuke) in [https://github.com/trufflesecurity/trufflehog/pull/3073](https://redirect.github.com/trufflesecurity/trufflehog/pull/3073) #### New Contributors - [@​suzuki-shunsuke](https://redirect.github.com/suzuki-shunsuke) made their first contribution in [https://github.com/trufflesecurity/trufflehog/pull/3073](https://redirect.github.com/trufflesecurity/trufflehog/pull/3073) **Full Changelog**: https://github.com/trufflesecurity/trufflehog/compare/v3.80.0...v3.80.1 ### [`v3.80.0`](https://redirect.github.com/trufflesecurity/trufflehog/releases/tag/v3.80.0) [Compare Source](https://redirect.github.com/trufflesecurity/trufflehog/compare/v3.79.0...v3.80.0) #### What's Changed - Add endorlabs detector by [@​shreyas-sriram](https://redirect.github.com/shreyas-sriram) in [https://github.com/trufflesecurity/trufflehog/pull/3015](https://redirect.github.com/trufflesecurity/trufflehog/pull/3015) - New Source: HuggingFace by [@​joeleonjr](https://redirect.github.com/joeleonjr) in [https://github.com/trufflesecurity/trufflehog/pull/3000](https://redirect.github.com/trufflesecurity/trufflehog/pull/3000) - Update README.md by [@​joeleonjr](https://redirect.github.com/joeleonjr) in [https://github.com/trufflesecurity/trufflehog/pull/3019](https://redirect.github.com/trufflesecurity/trufflehog/pull/3019) - fixing docs by [@​dylanTruffle](https://redirect.github.com/dylanTruffle) in [https://github.com/trufflesecurity/trufflehog/pull/3022](https://redirect.github.com/trufflesecurity/trufflehog/pull/3022) - fix(deps): update module github.com/charmbracelet/bubbletea to v0.26.6 by [@​renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/2998](https://redirect.github.com/trufflesecurity/trufflehog/pull/2998) - fix(deps): update module github.com/aws/aws-sdk-go to v1.54.11 by [@​renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3025](https://redirect.github.com/trufflesecurity/trufflehog/pull/3025) - fix(deps): update module cloud.google.com/go/secretmanager to v1.13.2 by [@​renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3024](https://redirect.github.com/trufflesecurity/trufflehog/pull/3024) - fix(deps): update module github.com/brianvoe/gofakeit/v7 to v7.0.4 by [@​renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3026](https://redirect.github.com/trufflesecurity/trufflehog/pull/3026) - fix(deps): update module github.com/couchbase/gocb/v2 to v2.9.0 by [@​renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3030](https://redirect.github.com/trufflesecurity/trufflehog/pull/3030) - update LaunchDarkly detector to use the caller-identity API by [@​pkaeding](https://redirect.github.com/pkaeding) in [https://github.com/trufflesecurity/trufflehog/pull/3018](https://redirect.github.com/trufflesecurity/trufflehog/pull/3018) - fix(deps): update module github.com/wasilibs/go-re2 to v1.6.0 by [@​renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3033](https://redirect.github.com/trufflesecurity/trufflehog/pull/3033) - fix(deps): update module github.com/xanzy/go-gitlab to v0.106.0 by [@​renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3035](https://redirect.github.com/trufflesecurity/trufflehog/pull/3035) - \[chore] - remove launchdarkly dep by [@​ahrav](https://redirect.github.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/3034](https://redirect.github.com/trufflesecurity/trufflehog/pull/3034) - Fix race in `caflou` and `ldap` detectors by [@​rgmz](https://redirect.github.com/rgmz) in [https://github.com/trufflesecurity/trufflehog/pull/3028](https://redirect.github.com/trufflesecurity/trufflehog/pull/3028) - Elevenlabs detector by [@​dylanTruffle](https://redirect.github.com/dylanTruffle) in [https://github.com/trufflesecurity/trufflehog/pull/3023](https://redirect.github.com/trufflesecurity/trufflehog/pull/3023) - fix(deps): update module go.mongodb.org/mongo-driver to v1.16.0 by [@​renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3036](https://redirect.github.com/trufflesecurity/trufflehog/pull/3036) - fix(deps): update module cloud.google.com/go/secretmanager to v1.13.3 by [@​renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3037](https://redirect.github.com/trufflesecurity/trufflehog/pull/3037) - fix(deps): update module github.com/aws/aws-sdk-go to v1.54.14 by [@​renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3042](https://redirect.github.com/trufflesecurity/trufflehog/pull/3042) - fix(deps): update module cloud.google.com/go/storage to v1.43.0 by [@​renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3043](https://redirect.github.com/trufflesecurity/trufflehog/pull/3043) - fix(deps): update module golang.org/x/net to v0.27.0 by [@​renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3046](https://redirect.github.com/trufflesecurity/trufflehog/pull/3046) - fix(deps): update module golang.org/x/crypto to v0.25.0 by [@​renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3045](https://redirect.github.com/trufflesecurity/trufflehog/pull/3045) - fix(deps): update module github.com/aws/aws-sdk-go to v1.54.15 by [@​renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3049](https://redirect.github.com/trufflesecurity/trufflehog/pull/3049) - fix(deps): update testcontainers-go monorepo to v0.32.0 by [@​renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3050](https://redirect.github.com/trufflesecurity/trufflehog/pull/3050) - \[chore] - remove dead Chunker code by [@​ahrav](https://redirect.github.com/ahrav) in [https://github.com/trufflesecurity/trufflehog/pull/3044](https://redirect.github.com/trufflesecurity/trufflehog/pull/3044) - chore(deps): update goreleaser/goreleaser-action action to v6 by [@​renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3051](https://redirect.github.com/trufflesecurity/trufflehog/pull/3051) - fix(deps): update golang.org/x/exp digest to [`46b0784`](https://redirect.github.com/trufflesecurity/trufflehog/commit/46b0784) by [@​renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3053](https://redirect.github.com/trufflesecurity/trufflehog/pull/3053) - fix(deps): update module github.com/aws/aws-sdk-go to v1.54.16 by [@​renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3054](https://redirect.github.com/trufflesecurity/trufflehog/pull/3054) - fix(deps): update module github.com/google/go-containerregistry to v0.20.0 by [@​renovate](https://redirect.github.com/renovate) in [https://github.com/trufflesecurity/trufflehog/pull/3055](https://redirect.github.com/trufflesecurity/trufflehog/pull/3055) - </details> --- ### Configuration 📅 **Schedule**: Branch creation - "every weekend" in timezone Europe/London, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/zkSync-Community-Hub/community-code). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC41OS4yIiwidXBkYXRlZEluVmVyIjoiMzguNTkuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/checkout](https://redirect.github.com/actions/checkout) | action | patch | `v4.1.1` -> `v4.1.7` | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>actions/checkout (actions/checkout)</summary> ### [`v4.1.7`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v417) [Compare Source](https://redirect.github.com/actions/checkout/compare/v4.1.6...v4.1.7) - Bump the minor-npm-dependencies group across 1 directory with 4 updates by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/actions/checkout/pull/1739](https://redirect.github.com/actions/checkout/pull/1739) - Bump actions/checkout from 3 to 4 by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/actions/checkout/pull/1697](https://redirect.github.com/actions/checkout/pull/1697) - Check out other refs/\* by commit by [@​orhantoy](https://redirect.github.com/orhantoy) in [https://github.com/actions/checkout/pull/1774](https://redirect.github.com/actions/checkout/pull/1774) - Pin actions/checkout's own workflows to a known, good, stable version. by [@​jww3](https://redirect.github.com/jww3) in [https://github.com/actions/checkout/pull/1776](https://redirect.github.com/actions/checkout/pull/1776) ### [`v4.1.6`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v416) [Compare Source](https://redirect.github.com/actions/checkout/compare/v4.1.5...v4.1.6) - Check platform to set archive extension appropriately by [@​cory-miller](https://redirect.github.com/cory-miller) in [https://github.com/actions/checkout/pull/1732](https://redirect.github.com/actions/checkout/pull/1732) ### [`v4.1.5`](https://redirect.github.com/actions/checkout/releases/tag/v4.1.5) [Compare Source](https://redirect.github.com/actions/checkout/compare/v4.1.4...v4.1.5) #### What's Changed - Update NPM dependencies by [@​cory-miller](https://redirect.github.com/cory-miller) in [https://github.com/actions/checkout/pull/1703](https://redirect.github.com/actions/checkout/pull/1703) - Bump github/codeql-action from 2 to 3 by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/actions/checkout/pull/1694](https://redirect.github.com/actions/checkout/pull/1694) - Bump actions/setup-node from 1 to 4 by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/actions/checkout/pull/1696](https://redirect.github.com/actions/checkout/pull/1696) - Bump actions/upload-artifact from 2 to 4 by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/actions/checkout/pull/1695](https://redirect.github.com/actions/checkout/pull/1695) - README: Suggest `user.email` to be `41898282+github-actions[bot]@​users.noreply.github.com` by [@​cory-miller](https://redirect.github.com/cory-miller) in [https://github.com/actions/checkout/pull/1707](https://redirect.github.com/actions/checkout/pull/1707) **Full Changelog**: actions/checkout@v4.1.4...v4.1.5 ### [`v4.1.4`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v414) [Compare Source](https://redirect.github.com/actions/checkout/compare/v4.1.3...v4.1.4) - Disable `extensions.worktreeConfig` when disabling `sparse-checkout` by [@​jww3](https://redirect.github.com/jww3) in [https://github.com/actions/checkout/pull/1692](https://redirect.github.com/actions/checkout/pull/1692) - Add dependabot config by [@​cory-miller](https://redirect.github.com/cory-miller) in [https://github.com/actions/checkout/pull/1688](https://redirect.github.com/actions/checkout/pull/1688) - Bump the minor-actions-dependencies group with 2 updates by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/actions/checkout/pull/1693](https://redirect.github.com/actions/checkout/pull/1693) - Bump word-wrap from 1.2.3 to 1.2.5 by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/actions/checkout/pull/1643](https://redirect.github.com/actions/checkout/pull/1643) ### [`v4.1.3`](https://redirect.github.com/actions/checkout/releases/tag/v4.1.3) [Compare Source](https://redirect.github.com/actions/checkout/compare/v4.1.2...v4.1.3) #### What's Changed - Update `actions/checkout` version in `update-main-version.yml` by [@​jww3](https://redirect.github.com/jww3) in [https://github.com/actions/checkout/pull/1650](https://redirect.github.com/actions/checkout/pull/1650) - Check git version before attempting to disable `sparse-checkout` by [@​jww3](https://redirect.github.com/jww3) in [https://github.com/actions/checkout/pull/1656](https://redirect.github.com/actions/checkout/pull/1656) - Add SSH user parameter by [@​cory-miller](https://redirect.github.com/cory-miller) in [https://github.com/actions/checkout/pull/1685](https://redirect.github.com/actions/checkout/pull/1685) **Full Changelog**: actions/checkout@v4.1.2...v4.1.3 ### [`v4.1.2`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v412) [Compare Source](https://redirect.github.com/actions/checkout/compare/v4.1.1...v4.1.2) - Fix: Disable sparse checkout whenever `sparse-checkout` option is not present [@​dscho](https://redirect.github.com/dscho) in [https://github.com/actions/checkout/pull/1598](https://redirect.github.com/actions/checkout/pull/1598) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/redwoodjs/redwood). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC41OS4yIiwidXBkYXRlZEluVmVyIjoiMzguNTkuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/checkout](https://redirect.github.com/actions/checkout) | action | patch | `v4.1.1` -> `v4.1.7` | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>actions/checkout (actions/checkout)</summary> ### [`v4.1.7`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v417) [Compare Source](https://redirect.github.com/actions/checkout/compare/v4.1.6...v4.1.7) - Bump the minor-npm-dependencies group across 1 directory with 4 updates by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/actions/checkout/pull/1739](https://redirect.github.com/actions/checkout/pull/1739) - Bump actions/checkout from 3 to 4 by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/actions/checkout/pull/1697](https://redirect.github.com/actions/checkout/pull/1697) - Check out other refs/\* by commit by [@​orhantoy](https://redirect.github.com/orhantoy) in [https://github.com/actions/checkout/pull/1774](https://redirect.github.com/actions/checkout/pull/1774) - Pin actions/checkout's own workflows to a known, good, stable version. by [@​jww3](https://redirect.github.com/jww3) in [https://github.com/actions/checkout/pull/1776](https://redirect.github.com/actions/checkout/pull/1776) ### [`v4.1.6`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v416) [Compare Source](https://redirect.github.com/actions/checkout/compare/v4.1.5...v4.1.6) - Check platform to set archive extension appropriately by [@​cory-miller](https://redirect.github.com/cory-miller) in [https://github.com/actions/checkout/pull/1732](https://redirect.github.com/actions/checkout/pull/1732) ### [`v4.1.5`](https://redirect.github.com/actions/checkout/releases/tag/v4.1.5) [Compare Source](https://redirect.github.com/actions/checkout/compare/v4.1.4...v4.1.5) #### What's Changed - Update NPM dependencies by [@​cory-miller](https://redirect.github.com/cory-miller) in [https://github.com/actions/checkout/pull/1703](https://redirect.github.com/actions/checkout/pull/1703) - Bump github/codeql-action from 2 to 3 by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/actions/checkout/pull/1694](https://redirect.github.com/actions/checkout/pull/1694) - Bump actions/setup-node from 1 to 4 by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/actions/checkout/pull/1696](https://redirect.github.com/actions/checkout/pull/1696) - Bump actions/upload-artifact from 2 to 4 by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/actions/checkout/pull/1695](https://redirect.github.com/actions/checkout/pull/1695) - README: Suggest `user.email` to be `41898282+github-actions[bot]@​users.noreply.github.com` by [@​cory-miller](https://redirect.github.com/cory-miller) in [https://github.com/actions/checkout/pull/1707](https://redirect.github.com/actions/checkout/pull/1707) **Full Changelog**: actions/checkout@v4.1.4...v4.1.5 ### [`v4.1.4`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v414) [Compare Source](https://redirect.github.com/actions/checkout/compare/v4.1.3...v4.1.4) - Disable `extensions.worktreeConfig` when disabling `sparse-checkout` by [@​jww3](https://redirect.github.com/jww3) in [https://github.com/actions/checkout/pull/1692](https://redirect.github.com/actions/checkout/pull/1692) - Add dependabot config by [@​cory-miller](https://redirect.github.com/cory-miller) in [https://github.com/actions/checkout/pull/1688](https://redirect.github.com/actions/checkout/pull/1688) - Bump the minor-actions-dependencies group with 2 updates by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/actions/checkout/pull/1693](https://redirect.github.com/actions/checkout/pull/1693) - Bump word-wrap from 1.2.3 to 1.2.5 by [@​dependabot](https://redirect.github.com/dependa 10000 bot) in [https://github.com/actions/checkout/pull/1643](https://redirect.github.com/actions/checkout/pull/1643) ### [`v4.1.3`](https://redirect.github.com/actions/checkout/releases/tag/v4.1.3) [Compare Source](https://redirect.github.com/actions/checkout/compare/v4.1.2...v4.1.3) #### What's Changed - Update `actions/checkout` version in `update-main-version.yml` by [@​jww3](https://redirect.github.com/jww3) in [https://github.com/actions/checkout/pull/1650](https://redirect.github.com/actions/checkout/pull/1650) - Check git version before attempting to disable `sparse-checkout` by [@​jww3](https://redirect.github.com/jww3) in [https://github.com/actions/checkout/pull/1656](https://redirect.github.com/actions/checkout/pull/1656) - Add SSH user parameter by [@​cory-miller](https://redirect.github.com/cory-miller) in [https://github.com/actions/checkout/pull/1685](https://redirect.github.com/actions/checkout/pull/1685) **Full Changelog**: actions/checkout@v4.1.2...v4.1.3 ### [`v4.1.2`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v412) [Compare Source](https://redirect.github.com/actions/checkout/compare/v4.1.1...v4.1.2) - Fix: Disable sparse checkout whenever `sparse-checkout` option is not present [@​dscho](https://redirect.github.com/dscho) in [https://github.com/actions/checkout/pull/1598](https://redirect.github.com/actions/checkout/pull/1598) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/redwoodjs/redwood). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC41OS4yIiwidXBkYXRlZEluVmVyIjoiMzguNTkuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/checkout](https://togithub.com/actions/checkout) | action | patch | `v4.1.6` -> `v4.1.7` | --- ### Release Notes <details> <summary>actions/checkout (actions/checkout)</summary> ### [`v4.1.7`](https://togithub.com/actions/checkout/blob/HEAD/CHANGELOG.md#v417) [Compare Source](https://togithub.com/actions/checkout/compare/v4.1.6...v4.1.7) - Bump the minor-npm-dependencies group across 1 directory with 4 updates by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/actions/checkout/pull/1739](https://togithub.com/actions/checkout/pull/1739) - Bump actions/checkout from 3 to 4 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/actions/checkout/pull/1697](https://togithub.com/actions/checkout/pull/1697) - Check out other refs/\* by commit by [@​orhantoy](https://togithub.com/orhantoy) in [https://github.com/actions/checkout/pull/1774](https://togithub.com/actions/checkout/pull/1774) - Pin actions/checkout's own workflows to a known, good, stable version. by [@​jww3](https://togithub.com/jww3) in [https://github.com/actions/checkout/pull/1776](https://togithub.com/actions/checkout/pull/1776) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/Kislovskiy/talks). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4zOTMuMCIsInVwZGF0ZWRJblZlciI6IjM4LjU2LjAiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbXX0=-->
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/checkout](https://redirect.github.com/actions/checkout) | action | major | `v2` -> `v4` | --- ### Release Notes <details> <summary>actions/checkout (actions/checkout)</summary> ### [`v4`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v417) [Compare Source](https://redirect.github.com/actions/checkout/compare/v3...v4) - Bump the minor-npm-dependencies group across 1 directory with 4 updates by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/actions/checkout/pull/1739](https://redirect.github.com/actions/checkout/pull/1739) - Bump actions/checkout from 3 to 4 by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/actions/checkout/pull/1697](https://redirect.github.com/actions/checkout/pull/1697) - Check out other refs/\* by commit by [@​orhantoy](https://redirect.github.com/orhantoy) in [https://github.com/actions/checkout/pull/1774](https://redirect.github.com/actions/checkout/pull/1774) - Pin actions/checkout's own workflows to a known, good, stable version. by [@​jww3](https://redirect.github.com/jww3) in [https://github.com/actions/checkout/pull/1776](https://redirect.github.com/actions/checkout/pull/1776) ### [`v3`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v360) [Compare Source](https://redirect.github.com/actions/checkout/compare/v2...v3) - [Fix: Mark test scripts with Bash'isms to be run via Bash](https://redirect.github.com/actions/checkout/pull/1377) - [Add option to fetch tags even if fetch-depth > 0](https://redirect.github.com/actions/checkout/pull/579) </details> --- ### Configuration 📅 **Schedule**: Branch creation - "before 8am on Monday,before 8am on Tuesday,before 8am on Wednesday,before 8am on Thursday,before 8am on Friday" in timezone Europe/Berlin, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/kozaxinan/android-lints). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC41OS4yIiwidXBkYXRlZEluVmVyIjoiMzguNTkuMiIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6WyJkZXBlbmRlbmN5Il19--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/checkout](https://redirect.github.com/actions/checkout) | action | major | `v3` -> `v4` | --- ### Release Notes <details> <summary>actions/checkout (actions/checkout)</summary> ### [`v4`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v417) [Compare Source](https://redirect.github.com/actions/checkout/compare/v3...v4) - Bump the minor-npm-dependencies group across 1 directory with 4 updates by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/actions/checkout/pull/1739](https://redirect.github.com/actions/checkout/pull/1739) - Bump actions/checkout from 3 to 4 by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/actions/checkout/pull/1697](https://redirect.github.com/actions/checkout/pull/1697) - Check out other refs/\* by commit by [@​orhantoy](https://redirect.github.com/orhantoy) in [https://github.com/actions/checkout/pull/1774](https://redirect.github.com/actions/checkout/pull/1774) - Pin actions/checkout's own workflows to a known, good, stable version. by [@​jww3](https://redirect.github.com/jww3) in [https://github.com/actions/checkout/pull/1776](https://redirect.github.com/actions/checkout/pull/1776) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/hironow/dotfiles). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC43NC4xIiwidXBkYXRlZEluVmVyIjoiMzguNzQuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/checkout](https://redirect.github.com/actions/checkout) | action | major | `v3` -> `v4` | --- ### Release Notes <details> <summary>actions/checkout (actions/checkout)</summary> ### [`v4`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v417) [Compare Source](https://redirect.github.com/actions/checkout/compare/v3...v4) - Bump the minor-npm-dependencies group across 1 directory with 4 updates by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/actions/checkout/pull/1739](https://redirect.github.com/actions/checkout/pull/1739) - Bump actions/checkout from 3 to 4 by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/actions/checkout/pull/1697](https://redirect.github.com/actions/checkout/pull/1697) - Check out other refs/\* by commit by [@​orhantoy](https://redirect.github.com/orhantoy) in [https://github.com/actions/checkout/pull/1774](https://redirect.github.com/actions/checkout/pull/1774) - Pin actions/checkout's own workflows to a known, good, stable version. by [@​jww3](https://redirect.github.com/jww3) in [https://github.com/actions/checkout/pull/1776](https://redirect.github.com/actions/checkout/pull/1776) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/bosun-ai/swiftide). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC44MC4wIiwidXBkYXRlZEluVmVyIjoiMzguODAuMCIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6W119--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [Gr1N/setup-poetry](https://redirect.github.com/Gr1N/setup-poetry) | action | major | `v8` -> `v9` | | [actions/cache](https://redirect.github.com/actions/cache) | action | major | `v3` -> `v4` | | [actions/checkout](https://redirect.github.com/actions/checkout) | action | major | `v3` -> `v4` | | [actions/configure-pages](https://redirect.github.com/actions/configure-pages) | action | major | `v2` -> `v5` | | [actions/deploy-pages](https://redirect.github.com/actions/deploy-pages) | action | major | `v1` -> `v4` | | [actions/labeler](https://redirect.github.com/actions/labeler) | action | major | `v4` -> `v5` | | [actions/setup-go](https://redirect.github.com/actions/setup-go) | action | major | `v3` -> `v5` | | [actions/setup-node](https://redirect.github.com/actions/setup-node) | action | major | `v3` -> `v4` | | [actions/setup-python](https://redirect.github.com/actions/setup-python) | action | major | `v4` -> `v5` | | [actions/upload-artifact](https://redirect.github.com/actions/upload-artifact) | action | major | `v3` -> `v4` | | [actions/upload-pages-artifact](https://redirect.github.com/actions/upload-pages-artifact) | action | major | `v1` -> `v3` | | [anchore/scan-action](https://redirect.github.com/anchore/scan-action) | action | major | `v3` -> `v4` | | [aws-actions/configure-aws-credentials](https://redirect.github.com/aws-actions/configure-aws-credentials) | action | major | `v3` -> `v4` | | [hashicorp/setup-terraform](https://redirect.github.com/hashicorp/setup-terraform) | action | major | `v2` -> `v3` | --- ### Release Notes <details> <summary>Gr1N/setup-poetry (Gr1N/setup-poetry)</summary> ### [`v9`](https://redirect.github.com/Gr1N/setup-poetry/releases/tag/v9) [Compare Source](https://redirect.github.com/Gr1N/setup-poetry/compare/v8...v9) - Action updated to use Node 20 - Support for Python 3.12 - **Breaking Change**, removed support for Python 3.7 </details> <details> <summary>actions/cache (actions/cache)</summary> ### [`v4`](https://redirect.github.com/actions/cache/compare/v3...v4) [Compare Source](https://redirect.github.com/actions/cache/compare/v3...v4) </details> <details> <summary>actions/checkout (actions/checkout)</summary> ### [`v4`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v417) [Compare Source](https://redirect.github.com/actions/checkout/compare/v3...v4) - Bump the minor-npm-dependencies group across 1 directory with 4 updates by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/actions/checkout/pull/1739](https://redirect.github.com/actions/checkout/pull/1739) - Bump actions/checkout from 3 to 4 by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/actions/checkout/pull/1697](https://redirect.github.com/actions/checkout/pull/1697) - Check out other refs/\* by commit by [@​orhantoy](https://redirect.github.com/orhantoy) in [https://github.com/actions/checkout/pull/1774](https://redirect.github.com/actions/checkout/pull/1774) - Pin actions/checkout's own workflows to a known, good, stable version. by [@​jww3](https://redirect.github.com/jww3) in [https://github.com/actions/checkout/pull/1776](https://redirect.github.com/actions/checkout/pull/1776) </details> <details> <summary>actions/configure-pages (actions/configure-pages)</summary> ### [`v5`](https://redirect.github.com/actions/configure-pages/compare/v4...v5) [Compare Source](https://redirect.github.com/actions/configure-pages/compare/v4...v5) ### [`v4`](https://redirect.github.com/actions/configure-pages/compare/v3...v4) [Compare Source](https://redirect.github.com/actions/configure-pages/compare/v3...v4) ### [`v3`](https://redirect.github.com/actions/configure-pages/compare/v2...v3) [Compare Source](https://redirect.github.com/actions/configure-pages/compare/v2...v3) </details> <details> <summary>actions/deploy-pages (actions/deploy-pages)</summary> ### [`v4`](https://redirect.github.com/actions/deploy-pages/compare/v3...v4) [Compare Source](https://redirect.github.com/actions/deploy-pages/compare/v3...v4) ### [`v3`](https://redirect.github.com/actions/deploy-pages/compare/v2...v3) [Compare Source](https://redirect.github.com/actions/deploy-pages/compare/v2...v3) ### [`v2`](https://redirect.github.com/actions/deploy-pages/compare/v1...v2) [Compare Source](https://redirect.github.com/actions/deploy-pages/compare/v1...v2) </details> <details> <summary>actions/labeler (actions/labeler)</summary> ### [`v5`](https://redirect.github.com/actions/labeler/compare/v4...v5) [Compare Source](https://redirect.github.com/actions/labeler/compare/v4...v5) </details> <details> <summary>actions/setup-go (actions/setup-go)</summary> ### [`v5`](https://redirect.github.com/actions/setup-go/compare/v4...v5) [Compare Source](https://redirect.github.com/actions/setup-go/compare/v4...v5) ### [`v4`](https://redirect.github.com/actions/setup-go/compare/v3...v4) [Compare Source](https://redirect.github.com/actions/setup-go/compare/v3...v4) </details> <details> <summary>actions/setup-node (actions/setup-node)</summary> ### [`v4`](https://redirect.github.com/actions/setup-node/compare/v3...v4) [Compare Source](https://redirect.github.com/actions/setup-node/compare/v3...v4) </details> <details> <summary>actions/setup-python (actions/setup-python)</summary> ### [`v5`](https://redirect.github.com/actions/setup-python/compare/v4...v5) [Compare Source](https://redirect.github.com/actions/setup-python/compare/v4...v5) </details> <details> <summary>actions/upload-artifact (actions/upload-artifact)</summary> ### [`v4`](https://redirect.github.com/actions/upload-artifact/compare/v3...v4) [Compare Source](https://redirect.github.com/actions/upload-artifact/compare/v3...v4) </details> <details> <summary>actions/upload-pages-artifact (actions/upload-pages-artifact)</summary> ### [`v3`](https://redirect.github.com/actions/upload-pages-artifact/compare/v2...v3) [Compare Source](https://redirect.github.com/actions/upload-pages-artifact/compare/v2...v3) ### [`v2`](https://redirect.github.com/actions/upload-pages-artifact/compare/v1...v2) [Compare Source](https://redirect.github.com/actions/upload-pages-artifact/compare/v1...v2) </details> <details> <summary>anchore/scan-action (anchore/scan-action)</summary> ### [`v4`](https://redirect.github.com/anchore/scan-action/compare/v3...v4) [Compare Source](https://redirect.github.com/anchore/scan-action/compare/v3...v4) </details> <details> <summary>aws-actions/configure-aws-credentials (aws-actions/configure-aws-credentials)</summary> ### [`v4`](https://redirect.github.com/aws-actions/configure-aws-credentials/releases/tag/v4) [Compare Source](https://redirect.github.com/aws-actions/configure-aws-credentials/compare/v3...v4) This tag tracks the latest v4.x.x release </details> <details> <summary>hashicorp/setup-terraform (hashicorp/setup-terraform)</summary> ### [`v3`](https://redirect.github.com/hashicorp/setup-terraform/compare/v2...v3) [Compare Source](https://redirect.github.com/hashicorp/setup-terraform/compare/v2...v3) </details> --- ### Configuration 📅 **Schedule**: Branch creation - "on the 2nd and 4th day instance on sunday after 9pm" in timezone America/New_York, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/HHS/simpler-grants-gov). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC44MC4wIiwidXBkYXRlZEluVmVyIjoiMzguOTcuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiZGVwZW5kZW5jaWVzIl19--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Bump the all-actions group with 4 updates Bumps the all-actions group with 4 updates: actions/checkout, azure/setup-helm, actions/setup-python and peter-evans/create-pull-request. Updates actions/checkout from 3 to 4 Release notes Sourced from actions/checkout's releases. v4.0.0 What's Changed Update default runtime to node20 by @takost in actions/checkout#1436 Support fetching without the --progress option by @simonbaird in actions/checkout#1067 Release 4.0.0 by @takost in actions/checkout#1447 New Contributors @takost made their first contribution in actions/checkout#1436 @simonbaird made their first contribution in actions/checkout#1067 Full Changelog: actions/checkout@v3...v4.0.0 v3.6.0 What's Changed Mark test scripts with Bash'isms to be run via Bash by @dscho in actions/checkout#1377 Add option to fetch tags even if fetch-depth > 0 by @RobertWieczoreck in actions/checkout#579 Release 3.6.0 by @luketomlinson in actions/checkout#1437 New Contributors @RobertWieczoreck made their first contribution in actions/checkout#579 @luketomlinson made their first contribution in actions/checkout#1437 Full Changelog: actions/checkout@v3.5.3...v3.6.0 v3.5.3 What's Changed Fix: Checkout Issue in self hosted runner due to faulty submodule check-ins by @megamanics in actions/checkout#1196 Fix typos found by codespell by @DimitriPapadopoulos in actions/checkout#1287 Add support for sparse checkouts by @dscho and @dfdez in actions/checkout#1369 Release v3.5.3 by @TingluoHuang in actions/checkout#1376 New Contributors @megamanics made their first contribution in actions/checkout#1196 @DimitriPapadopoulos made their first contribution in actions/checkout#1287 @dfdez made their first contribution in actions/checkout#1369 Full Changelog: actions/checkout@v3...v3.5.3 v3.5.2 What's Changed Fix: Use correct API url / endpoint in GHES by @fhammerl in actions/checkout#1289 based on #1286 by @1newsr Full Changelog: actions/checkout@v3.5.1...v3.5.2 v3.5.1 What's Changed Improve checkout performance on Windows runners by upgrading @actions/github dependency by @BrettDong in actions/checkout#1246 New Contributors @BrettDong made their first contribution in actions/checkout#1246 ... (truncated) Changelog Sourced from actions/checkout's changelog. Changelog v4.2.2 url-helper.ts now leverages well-known environment variables by @jww3 in actions/checkout#1941 Expand unit test coverage for isGhes by @jww3 in actions/checkout#1946 v4.2.1 Check out other refs/* by commit if provided, fall back to ref by @orhantoy in actions/checkout#1924 v4.2.0 Add Ref and Commit outputs by @lucacome in actions/checkout#1180 Dependency updates by @dependabot- actions/checkout#1777, actions/checkout#1872 v4.1.7 Bump the minor-npm-dependencies group across 1 directory with 4 updates by @dependabot in actions/checkout#1739 Bump actions/checkout from 3 to 4 by @dependabot in actions/checkout#1697 Check out other refs/* by commit by @orhantoy in actions/checkout#1774 Pin actions/checkout's own workflows to a known, good, stable version. by @jww3 in actions/checkout#1776 v4.1.6 Check platform to set archive extension appropriately by @cory-miller in actions/checkout#1732 v4.1.5 Update NPM dependencies by @cory-miller in actions/checkout#1703 Bump github/codeql-action from 2 to 3 by @dependabot in actions/checkout#1694 Bump actions/setup-node from 1 to 4 by @dependabot in actions/checkout#1696 Bump actions/upload-artifact from 2 to 4 by @dependabot in actions/checkout#1695 README: Suggest user.email to be 41898282+github-actions[bot]@users.noreply.github.com by @cory-miller in actions/checkout#1707 v4.1.4 Disable extensions.worktreeConfig when disabling sparse-checkout by @jww3 in actions/checkout#1692 Add dependabot config by @cory-miller in actions/checkout#1688 Bump the minor-actions-dependencies group with 2 updates by @dependabot in actions/checkout#1693 Bump word-wrap from 1.2.3 to 1.2.5 by @dependabot in actions/checkout#1643 v4.1.3 Check git version before attempting to disable sparse-checkout by @jww3 in actions/checkout#1656 Add SSH user parameter by @cory-miller in actions/checkout#1685 Update actions/checkout version in update-main-version.yml by @jww3 in actions/checkout#1650 v4.1.2 Fix: Disable sparse checkout whenever sparse-checkout option is not present @dscho in actions/checkout#1598 v4.1.1 Correct link to GitHub Docs by @peterbe in actions/checkout#1511 Link to release page from what's new section by @cory-miller in actions/checkout#1514 v4.1.0 Add support for partial checkout filters ... (truncated) Commits 11bd719 Prepare 4.2.2 Release (#1953) e3d2460 Expand unit test coverage (#1946) 163217d url-helper.ts now leverages well-known environment variables. (#1941) eef6144 Prepare 4.2.1 release (#1925) 6b42224 Add workflow file for publishing releases to immutable action package (#1919) de5a000 Check out other refs/* by commit if provided, fall back to ref (#1924) d632683 Prepare 4.2.0 release (#1878) 6d193bf Bump braces from 3.0.2 to 3.0.3 (#1777) db0cee9 Bump the minor-npm-dependencies group across 1 directory with 4 updates (#1872) b684943 Add Ref and Commit outputs (#1180) Additional commits viewable in compare view Updates azure/setup-helm from 3 to 4 Release notes Sourced from azure/setup-helm's releases. v4.0.0 #121 update to node20 as node16 is deprecated v3.5 release Bump @actions/core version to remove output warning. v3.4 release Improves the querying method to find the latest Helm release. Takes advantage of new GitHub api changes. v3.3 release Add token input. Needed for fetching latest v3.1 release Swap to GraphQL GitHub API Changelog Sourced from azure/setup-helm's changelog. Change Log [4.3.0] - 2025-02-15 #152 feat: log when restoring from cache #157 Dependencies Update #137 Add dependabot [4.2.0] - 2024-04-15 #124 Fix OS detection and download OS-native archive extension [4.1.0] - 2024-03-01 #130 switches to use Helm published file to read latest version instead of using GitHub releases [4.0.0] - 2024-02-12 #121 update to node20 as node16 is deprecated Commits b9e5190 build 0e8654b Release setup-helm version 4.3.0 (#162) b48e1df feat: log when restoring from cache (#152) 855ae7a Bump the actions group across 1 directory with 3 updates (#159) 124c6d8 Dependencies Update (#157) 048f4e7 Bump the actions group across 1 directory with 2 updates (#151) 8618769 Bump the actions group across 1 directory with 4 updates (#149) 4eb898e Bump the actions group across 1 directory with 2 updates (#145) 7a2001c Bump the actions group across 1 directory with 2 updates (#143) e90c86c Bump the actions group across 1 directory with 9 updates (#141) Additional commits viewable in compare view Updates actions/setup-python from 4 to 5 Release notes Sourced from actions/setup-python's releases. v5.0.0 What's Changed In scope of this release, we update node version runtime from node16 to node20 (actions/setup-python#772). Besides, we update dependencies to the latest versions. Full Changelog: actions/setup-python@v4.8.0...v5.0.0 v4.9.1 What's Changed Add workflow file for publishing releases to immutable action package by @aparnajyothi-y in actions/setup-python#1084 Full Changelog: actions/setup-python@v4...v4.9.1 v4.9.0 What's Changed Upgrade actions/cache to 4.0.3 by @priya-kinthali in actions/setup-python#1073 In scope of this release we updated actions/cache package to ensure continued support and compatibility, as older versions of the package are now deprecated. For more information please refer to the toolkit/cache. Full Changelog: actions/setup-python@v4.8.0...v4.9.0 v4.8.0 What's Changed In scope of this release we added support for GraalPy (actions/setup-python#694). You can use this snippet to set up GraalPy: steps: - uses: actions/checkout@v4 - uses: actions/setup-python@v4 with: python-version: 'graalpy-22.3' - run: python my_script.py Besides, the release contains such changes as: Trim python version when reading from file by @FerranPares in actions/setup-python#628 Use non-deprecated versions in examples by @jeffwidman in actions/setup-python#724 Change deprecation comment to past tense by @jeffwidman in actions/setup-python#723 Bump @babel/traverse from 7.9.0 to 7.23.2 by @dependabot in actions/setup-python#743 advanced-usage.md: Encourage the use actions/checkout@v4 by @cclauss in actions/setup-python#729 Examples now use checkout@v4 by @simonw in actions/setup-python#738 Update actions/checkout to v4 by @dmitry-shibanov in actions/setup-python#761 New Contributors @FerranPares made their first contribution in actions/setup-python#628 @timfel made their first contribution in actions/setup-python#694 @jeffwidman made their first contribution in actions/setup-python#724 Full Changelog: actions/setup-python@v4...v4.8.0 ... (truncated) Commits a26af69 Bump ts-jest from 29.1.2 to 29.3.2 (#1081) 30eafe9 Bump prettier from 2.8.8 to 3.5.3 (#1046) 5d95bc1 Bump semver and @types/semver (#1091) 6ed2c67 Fix for Candidate Not Iterable Error (#1082) e348410 Remove Ubuntu 20.04 from workflows due to deprecation from 2025-04-15 (#1065) 8d9ed9a Add e2e Testing for free threaded and Bump @action/cache from 4.0.0 to 4.0.3 ... 19e4675 Add support for .tool-versions file in setup-python (#1043) 6fd11e1 Bump @actions/glob from 0.4.0 to 0.5.0 (#1015) 9e62be8 Support free threaded Python versions like '3.13t' (#973) 6ca8e85 Bump @vercel/ncc from 0.38.1 to 0.38.3 (#1016) Additional commits viewable in compare view Updates peter-evans/create-pull-request from 5 to 7 Release notes Sourced from peter-evans/create-pull-request's releases. Create Pull Request v7.0.0 ✨ Now supports commit signing with bot-generated tokens! See "What's new" below. ✍️🤖 Behaviour changes Action input git-token has been renamed branch-token, to be more clear about its purpose. The branch-token is the token that the action will use to create and update the branch. The action now handles requests that have been rate-limited by GitHub. Requests hitting a primary rate limit will retry twice, for a total of three attempts. Requests hitting a secondary rate limit will not be retried. The pull-request-operation output now returns none when no operation was executed. Removed deprecated output environment variable PULL_REQUEST_NUMBER. Please use the pull-request-number action output instead. What's new The action can now sign commits as github-actions[bot] when using GITHUB_TOKEN, or your own bot when using GitHub App tokens. See commit signing for details. Action input draft now accepts a new value always-true. This will set the pull request to draft status when the pull request is updated, as well as on creation. A new action input maintainer-can-modify indicates whether maintainers can modify the pull request. The default is true, which retains the existing behaviour of the action. A new output pull-request-commits-verified returns true or false, indicating whether GitHub considers the signature of the branch's commits to be verified. What's Changed build(deps-dev): bump @types/node from 18.19.36 to 18.19.39 by @dependabot in peter-evans/create-pull-request#3000 build(deps-dev): bump ts-jest from 29.1.5 to 29.2.0 by @dependabot in peter-evans/create-pull-request#3008 build(deps-dev): bump prettier from 3.3.2 to 3.3.3 by @dependabot in peter-evans/create-pull-request#3018 build(deps-dev): bump ts-jest from 29.2.0 to 29.2.2 by @dependabot in peter-evans/create-pull-request#3019 build(deps-dev): bump eslint-plugin-prettier from 5.1.3 to 5.2.1 by @dependabot in peter-evans/create-pull-request#3035 build(deps-dev): bump @types/node from 18.19.39 to 18.19.41 by @dependabot in peter-evans/create-pull-request#3037 build(deps): bump undici from 6.19.2 to 6.19.4 by @dependabot in peter-evans/create-pull-request#3036 build(deps-dev): bump ts-jest from 29.2.2 to 29.2.3 by @dependabot in peter-evans/create-pull-request#3038 build(deps-dev): bump @types/node from 18.19.41 to 18.19.42 by @dependabot in peter-evans/create-pull-request#3070 build(deps): bump undici from 6.19.4 to 6.19.5 by @dependabot in peter-evans/create-pull-request#3086 build(deps-dev): bump @types/node from 18.19.42 to 18.19.43 by @dependabot in peter-evans/create-pull-request#3087 build(deps-dev): bump ts-jest from 29.2.3 to 29.2.4 by @dependabot in peter-evans/create-pull-request#3088 build(deps): bump undici from 6.19.5 to 6.19.7 by @dependabot in peter-evans/create-pull-request#3145 build(deps-dev): bump @types/node from 18.19.43 to 18.19.44 by @dependabot in peter-evans/create-pull-request#3144 Update distribution by @actions-bot in peter-evans/create-pull-request#3154 build(deps): bump undici from 6.19.7 to 6.19.8 by @dependabot in peter-evans/create-pull-request#3213 build(deps-dev): bump @types/node from 18.19.44 to 18.19.45 by @dependabot in peter-evans/create-pull-request#3214 Update distribution by @actions-bot in peter-evans/create-pull-request#3221 build(deps-dev): bump eslint-import-resolver-typescript from 3.6.1 to 3.6.3 by @dependabot in peter-evans/create-pull-request#3255 build(deps-dev): bump @types/node from 18.19.45 to 18.19.46 by @dependabot in peter-evans/create-pull-request#3254 build(deps-dev): bump ts-jest from 29.2.4 to 29.2.5 by @dependabot in peter-evans/create-pull-request#3256 v7 - signed commits by @peter-evans in peter-evans/create-pull-request#3057 New Contributors @rustycl0ck made their first contribution in peter-evans/create-pull-request#3057 Full Changelog: peter-evans/create-pull-request@v6.1.0...v7.0.0 Create Pull Request v6.1.0 ✨ Adds pull-request-branch as an action output. What's Changed ... (truncated) Commits 271a8d0 fix: suppress output for some git operations (#3776) 6f7efd1 test: update cpr-example-command 13c47c5 build(deps-dev): bump prettier from 3.5.1 to 3.5.2 (#3754) 63e5829 build(deps): bump @octokit/plugin-paginate-rest from 11.4.2 to 11.4.3 (#3753) a92c90f build(deps-dev): bump eslint-import-resolver-typescript (#3752) b23b62d build(deps-dev): bump ts-jest from 29.2.5 to 29.2.6 (#3751) dd2324f fix: use showFileAtRefBase64 to read per-commit file contents (#3744) 367180c ci: remove testv5 cmd 25575a1 build: update distribution (#3736) a56e7a5 build(deps): bump @octokit/core from 6.1.3 to 6.1.4 (#3711) Additional commits viewable in compare view Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase. Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: @dependabot rebase will rebase this PR @dependabot recreate will recreate this PR, overwriting any edits that have been made to it @dependabot merge will merge this PR after your CI passes on it @dependabot squash and merge will squash and merge this PR after your CI passes on it @dependabot cancel merge will cancel a previously requested merge and block automerging @dependabot reopen will reopen this PR if it is closed @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions Reviewed-by: Vladimir Vshivkov
Bump the all-actions group with 4 updates Bumps the all-actions group with 4 updates: actions/checkout, azure/setup-helm, actions/setup-python and peter-evans/create-pull-request. Updates actions/checkout from 3 to 4 Release notes Sourced from actions/checkout's releases. v4.0.0 What's Changed Update default runtime to node20 by @takost in actions/checkout#1436 Support fetching without the --progress option by @simonbaird in actions/checkout#1067 Release 4.0.0 by @takost in actions/checkout#1447 New Contributors @takost made their first contribution in actions/checkout#1436 @simonbaird made their first contribution in actions/checkout#1067 Full Changelog: actions/checkout@v3...v4.0.0 v3.6.0 What's Changed Mark test scripts with Bash'isms to be run via Bash by @dscho in actions/checkout#1377 Add option to fetch tags even if fetch-depth > 0 by @RobertWieczoreck in actions/checkout#579 Release 3.6.0 by @luketomlinson in actions/checkout#1437 New Contributors @RobertWieczoreck made their first contribution in actions/checkout#579 @luketomlinson made their first contribution in actions/checkout#1437 Full Changelog: actions/checkout@v3.5.3...v3.6.0 v3.5.3 What's Changed Fix: Checkout Issue in self hosted runner due to faulty submodule check-ins by @megamanics in actions/checkout#1196 Fix typos found by codespell by @DimitriPapadopoulos in actions/checkout#1287 Add support for sparse checkouts by @dscho and @dfdez in actions/checkout#1369 Release v3.5.3 by @TingluoHuang in actions/checkout#1376 New Contributors @megamanics made their first contribution in actions/checkout#1196 @DimitriPapadopoulos made their first contribution in actions/checkout#1287 @dfdez made their first contribution in actions/checkout#1369 Full Changelog: actions/checkout@v3...v3.5.3 v3.5.2 What's Changed Fix: Use correct API url / endpoint in GHES by @fhammerl in actions/checkout#1289 based on #1286 by @1newsr Full Changelog: actions/checkout@v3.5.1...v3.5.2 v3.5.1 What's Changed Improve checkout performance on Windows runners by upgrading @actions/github dependency by @BrettDong in actions/checkout#1246 New Contributors @BrettDong made their first contribution in actions/checkout#1246 ... (truncated) Changelog Sourced from actions/checkout's changelog. Changelog v4.2.2 url-helper.ts now leverages well-known environment variables by @jww3 in actions/checkout#1941 Expand unit test coverage for isGhes by @jww3 in actions/checkout#1946 v4.2.1 Check out other refs/* by commit if provided, fall back to ref by @orhantoy in actions/checkout#1924 v4.2.0 Add Ref and Commit outputs by @lucacome in actions/checkout#1180 Dependency updates by @dependabot- actions/checkout#1777, actions/checkout#1872 v4.1.7 Bump the minor-npm-dependencies group across 1 directory with 4 updates by @dependabot in actions/checkout#1739 Bump actions/checkout from 3 to 4 by @dependabot in actions/checkout#1697 Check out other refs/* by commit by @orhantoy in actions/checkout#1774 Pin actions/checkout's own workflows to a known, good, stable version. by @jww3 in actions/checkout#1776 F438 v4.1.6 Check platform to set archive extension appropriately by @cory-miller in actions/checkout#1732 v4.1.5 Update NPM dependencies by @cory-miller in actions/checkout#1703 Bump github/codeql-action from 2 to 3 by @dependabot in actions/checkout#1694 Bump actions/setup-node from 1 to 4 by @dependabot in actions/checkout#1696 Bump actions/upload-artifact from 2 to 4 by @dependabot in actions/checkout#1695 README: Suggest user.email to be 41898282+github-actions[bot]@users.noreply.github.com by @cory-miller in actions/checkout#1707 v4.1.4 Disable extensions.worktreeConfig when disabling sparse-checkout by @jww3 in actions/checkout#1692 Add dependabot config by @cory-miller in actions/checkout#1688 Bump the minor-actions-dependencies group with 2 updates by @dependabot in actions/checkout#1693 Bump word-wrap from 1.2.3 to 1.2.5 by @dependabot in actions/checkout#1643 v4.1.3 Check git version before attempting to disable sparse-checkout by @jww3 in actions/checkout#1656 Add SSH user parameter by @cory-miller in actions/checkout#1685 Update actions/checkout version in update-main-version.yml by @jww3 in actions/checkout#1650 v4.1.2 Fix: Disable sparse checkout whenever sparse-checkout option is not present @dscho in actions/checkout#1598 v4.1.1 Correct link to GitHub Docs by @peterbe in actions/checkout#1511 Link to release page from what's new section by @cory-miller in actions/checkout#1514 v4.1.0 Add support for partial checkout filters ... (truncated) Commits 11bd719 Prepare 4.2.2 Release (#1953) e3d2460 Expand unit test coverage (#1946) 163217d url-helper.ts now leverages well-known environment variables. (#1941) eef6144 Prepare 4.2.1 release (#1925) 6b42224 Add workflow file for publishing releases to immutable action package (#1919) de5a000 Check out other refs/* by commit if provided, fall back to ref (#1924) d632683 Prepare 4.2.0 release (#1878) 6d193bf Bump braces from 3.0.2 to 3.0.3 (#1777) db0cee9 Bump the minor-npm-dependencies group across 1 directory with 4 updates (#1872) b684943 Add Ref and Commit outputs (#1180) Additional commits viewable in compare view Updates azure/setup-helm from 3 to 4 Release notes Sourced from azure/setup-helm's releases. v4.0.0 #121 update to node20 as node16 is deprecated v3.5 release Bump @actions/core version to remove output warning. v3.4 release Improves the querying method to find the latest Helm release. Takes advantage of new GitHub api changes. v3.3 release Add token input. Needed for fetching latest v3.1 release Swap to GraphQL GitHub API Changelog Sourced from azure/setup-helm's changelog. Change Log [4.3.0] - 2025-02-15 #152 feat: log when restoring from cache #157 Dependencies Update #137 Add dependabot [4.2.0] - 2024-04-15 #124 Fix OS detection and download OS-native archive extension [4.1.0] - 2024-03-01 #130 switches to use Helm published file to read latest version instead of using GitHub releases [4.0.0] - 2024-02-12 #121 update to node20 as node16 is deprecated Commits b9e5190 build 0e8654b Release setup-helm version 4.3.0 (#162) b48e1df feat: log when restoring from cache (#152) 855ae7a Bump the actions group across 1 directory with 3 updates (#159) 124c6d8 Dependencies Update (#157) 048f4e7 Bump the actions group across 1 directory with 2 updates (#151) 8618769 Bump the actions group across 1 directory with 4 updates (#149) 4eb898e Bump the actions group across 1 directory with 2 updates (#145) 7a2001c Bump the actions group across 1 directory with 2 updates (#143) e90c86c Bump the actions group across 1 directory with 9 updates (#141) Additional commits viewable in compare view Updates actions/setup-python from 4 to 5 Release notes Sourced from actions/setup-python's releases. v5.0.0 What's Changed In scope of this release, we update node version runtime from node16 to node20 (actions/setup-python#772). Besides, we update dependencies to the latest versions. Full Changelog: actions/setup-python@v4.8.0...v5.0.0 v4.9.1 What's Changed Add workflow file for publishing releases to immutable action package by @aparnajyothi-y in actions/setup-python#1084 Full Changelog: actions/setup-python@v4...v4.9.1 v4.9.0 What's Changed Upgrade actions/cache to 4.0.3 by @priya-kinthali in actions/setup-python#1073 In scope of this release we updated actions/cache package to ensure continued support and compatibility, as older versions of the package are now deprecated. For more information please refer to the toolkit/cache. Full Changelog: actions/setup-python@v4.8.0...v4.9.0 v4.8.0 What's Changed In scope of this release we added support for GraalPy (actions/setup-python#694). You can use this snippet to set up GraalPy: steps: - uses: actions/checkout@v4 - uses: actions/setup-python@v4 with: python-version: 'graalpy-22.3' - run: python my_script.py Besides, the release contains such changes as: Trim python version when reading from file by @FerranPares in actions/setup-python#628 Use non-deprecated versions in examples by @jeffwidman in actions/setup-python#724 Change deprecation comment to past tense by @jeffwidman in actions/setup-python#723 Bump @babel/traverse from 7.9.0 to 7.23.2 by @dependabot in actions/setup-python#743 advanced-usage.md: Encourage the use actions/checkout@v4 by @cclauss in actions/setup-python#729 Examples now use checkout@v4 by @simonw in actions/setup-python#738 Update actions/checkout to v4 by @dmitry-shibanov in actions/setup-python#761 New Contributors @FerranPares made their first contribution in actions/setup-python#628 @timfel made their first contribution in actions/setup-python#694 @jeffwidman made their first contribution in actions/setup-python#724 Full Changelog: actions/setup-python@v4...v4.8.0 ... (truncated) Commits a26af69 Bump ts-jest from 29.1.2 to 29.3.2 (#1081) 30eafe9 Bump prettier from 2.8.8 to 3.5.3 (#1046) 5d95bc1 Bump semver and @types/semver (#1091) 6ed2c67 Fix for Candidate Not Iterable Error (#1082) e348410 Remove Ubuntu 20.04 from workflows due to deprecation from 2025-04-15 (#1065) 8d9ed9a Add e2e Testing for free threaded and Bump @action/cache from 4.0.0 to 4.0.3 ... 19e4675 Add support for .tool-versions file in setup-python (#1043) 6fd11e1 Bump @actions/glob from 0.4.0 to 0.5.0 (#1015) 9e62be8 Support free threaded Python versions like '3.13t' (#973) 6ca8e85 Bump @vercel/ncc from 0.38.1 to 0.38.3 (#1016) Additional commits viewable in compare view Updates peter-evans/create-pull-request from 5 to 7 Release notes Sourced from peter-evans/create-pull-request's releases. Create Pull Request v7.0.0 ✨ Now supports commit signing with bot-generated tokens! See "What's new" below. ✍️🤖 Behaviour changes Action input git-token has been renamed branch-token, to be more clear about its purpose. The branch-token is the token that the action will use to create and update the branch. The action now handles requests that have been rate-limited by GitHub. Requests hitting a primary rate limit will retry twice, for a total of three attempts. Requests hitting a secondary rate limit will not be retried. The pull-request-operation output now returns none when no operation was executed. Removed deprecated output environment variable PULL_REQUEST_NUMBER. Please use the pull-request-number action output instead. What's new The action can now sign commits as github-actions[bot] when using GITHUB_TOKEN, or your own bot when using GitHub App tokens. See commit signing for details. Action input draft now accepts a new value always-true. This will set the pull request to draft status when the pull request is updated, as well as on creation. A new action input maintainer-can-modify indicates whether maintainers can modify the pull request. The default is true, which retains the existing behaviour of the action. A new output pull-request-commits-verified returns true or false, indicating whether GitHub considers the signature of the branch's commits to be verified. What's Changed build(deps-dev): bump @types/node from 18.19.36 to 18.19.39 by @dependabot in peter-evans/create-pull-request#3000 build(deps-dev): bump ts-jest from 29.1.5 to 29.2.0 by @dependabot in peter-evans/create-pull-request#3008 build(deps-dev): bump prettier from 3.3.2 to 3.3.3 by @dependabot in peter-evans/create-pull-request#3018 build(deps-dev): bump ts-jest from 29.2.0 to 29.2.2 by @dependabot in peter-evans/create-pull-request#3019 build(deps-dev): bump eslint-plugin-prettier from 5.1.3 to 5.2.1 by @dependabot in peter-evans/create-pull-request#3035 build(deps-dev): bump @types/node from 18.19.39 to 18.19.41 by @dependabot in peter-evans/create-pull-request#3037 build(deps): bump undici from 6.19.2 to 6.19.4 by @dependabot in peter-evans/create-pull-request#3036 build(deps-dev): bump ts-jest from 29.2.2 to 29.2.3 by @dependabot in peter-evans/create-pull-request#3038 build(deps-dev): bump @types/node from 18.19.41 to 18.19.42 by @dependabot in peter-evans/create-pull-request#3070 build(deps): bump undici from 6.19.4 to 6.19.5 by @dependabot in peter-evans/create-pull-request#3086 build(deps-dev): bump @types/node from 18.19.42 to 18.19.43 by @dependabot in peter-evans/create-pull-request#3087 build(deps-dev): bump ts-jest from 29.2.3 to 29.2.4 by @dependabot in peter-evans/create-pull-request#3088 build(deps): bump undici from 6.19.5 to 6.19.7 by @dependabot in peter-evans/create-pull-request#3145 build(deps-dev): bump @types/node from 18.19.43 to 18.19.44 by @dependabot in peter-evans/create-pull-request#3144 Update distribution by @actions-bot in peter-evans/create-pull-request#3154 build(deps): bump undici from 6.19.7 to 6.19.8 by @dependabot in peter-evans/create-pull-request#3213 build(deps-dev): bump @types/node from 18.19.44 to 18.19.45 by @dependabot in peter-evans/create-pull-request#3214 Update distribution by @actions-bot in peter-evans/create-pull-request#3221 build(deps-dev): bump eslint-import-resolver-typescript from 3.6.1 to 3.6.3 by @dependabot in peter-evans/create-pull-request#3255 build(deps-dev): bump @types/node from 18.19.45 to 18.19.46 by @dependabot in peter-evans/create-pull-request#3254 build(deps-dev): bump ts-jest from 29.2.4 to 29.2.5 by @dependabot in peter-evans/create-pull-request#3256 v7 - signed commits by @peter-evans in peter-evans/create-pull-request#3057 New Contributors @rustycl0ck made their first contribution in peter-evans/create-pull-request#3057 Full Changelog: peter-evans/create-pull-request@v6.1.0...v7.0.0 Create Pull Request v6.1.0 ✨ Adds pull-request-branch as an action output. What's Changed ... (truncated) Commits 271a8d0 fix: suppress output for some git operations (#3776) 6f7efd1 test: update cpr-example-command 13c47c5 build(deps-dev): bump prettier from 3.5.1 to 3.5.2 (#3754) 63e5829 build(deps): bump @octokit/plugin-paginate-rest from 11.4.2 to 11.4.3 (#3753) a92c90f build(deps-dev): bump eslint-import-resolver-typescript (#3752) b23b62d build(deps-dev): bump ts-jest from 29.2.5 to 29.2.6 (#3751) dd2324f fix: use showFileAtRefBase64 to read per-commit file contents (#3744) 367180c ci: remove testv5 cmd 25575a1 build: update distribution (#3736) a56e7a5 build(deps): bump @octokit/core from 6.1.3 to 6.1.4 (#3711) Additional commits viewable in compare view Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase. Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: @dependabot rebase will rebase this PR @dependabot recreate will recreate this PR, overwriting any edits that have been made to it @dependabot merge will merge this PR after your CI passes on it @dependabot squash and merge will squash and merge this PR after your CI passes on it @dependabot cancel merge will cancel a previously requested merge and block automerging @dependabot reopen will reopen this PR if it is closed @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions Reviewed-by: Vladimir Vshivkov
….yaml adding users to base (#1248) adding users to base Reviewed-by: Vladimir Vshivkov Addition of docker check of dependabot for system-config repository on daily bases (#1255) 1254 - Addition of docker check of dependabot for system-config repository Addapted dependabot.yaml for docker check on daily bases closes #1254 Reviewed-by: Vladimir Vshivkov chore: update helm chart dependencies (#1257) Update helm chart dependencies Helm Chart Dependencies Updates victoria-metrics-cluster (victoria-metrics-cluster) victoria-metrics-cluster: 0.21.0 → 0.22.1 kube-prometheus-stack (kube-prometheus-stack) kube-prometheus-stack: 72.3.0 → 72.5.0 victoria-metrics-auth (victoria-metrics-auth) victoria-metrics-auth: 0.13.0 → 0.14.1 Automatically created PR for helm chart dependencies updates. Please check before merge! Reviewed-by: Vladimir Vshivkov Enhance dependabot configuration to include GitHub Actions and update scheduling for Helm and Docker. Added daily checks at 09:00 for all specified ecosystems. (#1258) Enhance dependabot configuration to include GitHub Actions and update scheduling for Helm and Docker. Added daily checks at 09:00 for all specified ecosystems. Reviewed-by: Vladimir Hasko <vladimirhasko@gmail.com> Bump the all-actions group with 4 updates (#1260) Bump the all-actions group with 4 updates Bumps the all-actions group with 4 updates: actions/checkout, azure/setup-helm, actions/setup-python and peter-evans/create-pull-request. Updates actions/checkout from 3 to 4 Release notes Sourced from actions/checkout's releases. v4.0.0 What's Changed Update default runtime to node20 by @takost in actions/checkout#1436 Support fetching without the --progress option by @simonbaird in actions/checkout#1067 Release 4.0.0 by @takost in actions/checkout#1447 New Contributors @takost made their first contribution in actions/checkout#1436 @simonbaird made their first contribution in actions/checkout#1067 Full Changelog: actions/checkout@v3...v4.0.0 v3.6.0 What's Changed Mark test scripts with Bash'isms to be run via Bash by @dscho in actions/checkout#1377 Add option to fetch tags even if fetch-depth > 0 by @RobertWieczoreck in actions/checkout#579 Release 3.6.0 by @luketomlinson in actions/checkout#1437 New Contributors @RobertWieczoreck made their first contribution in actions/checkout#579 @luketomlinson made their first contribution in actions/checkout#1437 Full Changelog: actions/checkout@v3.5.3...v3.6.0 v3.5.3 What's Changed Fix: Checkout Issue in self hosted runner due to faulty submodule check-ins by @megamanics in actions/checkout#1196 Fix typos found by codespell by @DimitriPapadopoulos in actions/checkout#1287 Add support for sparse checkouts by @dscho and @dfdez in actions/checkout#1369 Release v3.5.3 by @TingluoHuang in actions/checkout#1376 New Contributors @megamanics made their first contribution in actions/checkout#1196 @DimitriPapadopoulos made their first contribution in actions/checkout#1287 @dfdez made their first contribution in actions/checkout#1369 Full Changelog: actions/checkout@v3...v3.5.3 v3.5.2 What's Changed Fix: Use correct API url / endpoint in GHES by @fhammerl in actions/checkout#1289 based on #1286 by @1newsr Full Changelog: actions/checkout@v3.5.1...v3.5.2 v3.5.1 What's Changed Improve checkout performance on Windows runners by upgrading @actions/github dependency by @BrettDong in actions/checkout#1246 New Contributors @BrettDong made their first contribution in actions/checkout#1246 ... (truncated) Changelog Sourced from actions/checkout's changelog. Changelog v4.2.2 url-helper.ts now leverages well-known environment variables by @jww3 in actions/checkout#1941 Expand unit test coverage for isGhes by @jww3 in actions/checkout#1946 v4.2.1 Check out other refs/* by commit if provided, fall back to ref by @orhantoy in actions/checkout#1924 v4.2.0 Add Ref and Commit outputs by @lucacome in actions/checkout#1180 Dependency updates by @dependabot- actions/checkout#1777, actions/checkout#1872 v4.1.7 Bump the minor-npm-dependencies group across 1 directory with 4 updates by @dependabot in actions/checkout#1739 Bump actions/checkout from 3 to 4 by @dependabot in actions/checkout#1697 Check out other refs/* by commit by @orhantoy in actions/checkout#1774 Pin actions/checkout's own workflows to a known, good, stable version. by @jww3 in actions/checkout#1776 v4.1.6 Check platform to set archive extension appropriately by @cory-miller in actions/checkout#1732 v4.1.5 Update NPM dependencies by @cory-miller in actions/checkout#1703 Bump github/codeql-action from 2 to 3 by @dependabot in actions/checkout#1694 Bump actions/setup-node from 1 to 4 by @dependabot in actions/checkout#1696 Bump actions/upload-artifact from 2 to 4 by @dependabot in actions/checkout#1695 README: Suggest user.email to be 41898282+github-actions[bot]@users.noreply.github.com by @cory-miller in actions/checkout#1707 v4.1.4 Disable extensions.worktreeConfig when disabling sparse-checkout by @jww3 in actions/checkout#1692 Add dependabot config by @cory-miller in actions/checkout#1688 Bump the minor-actions-dependencies group with 2 updates by @dependabot in actions/checkout#1693 Bump word-wrap from 1.2.3 to 1.2.5 by @dependabot in actions/checkout#1643 v4.1.3 Check git version before attempting to disable sparse-checkout by @jww3 in actions/checkout#1656 Add SSH user parameter by @cory-miller in actions/checkout#1685 Update actions/checkout version in update-main-version.yml by @jww3 in actions/checkout#1650 v4.1.2 Fix: Disable sparse checkout whenever sparse-checkout option is not present @dscho in actions/checkout#1598 v4.1.1 Correct link to GitHub Docs by @peterbe in actions/checkout#1511 Link to release page from what's new section by @cory-miller in actions/checkout#1514 v4.1.0 Add support for partial checkout filters ... (truncated) Commits 11bd719 Prepare 4.2.2 Release (#1953) e3d2460 Expand unit test coverage (#1946) 163217d url-helper.ts now leverages well-known environment variables. (#1941) eef6144 Prepare 4.2.1 release (#1925) 6b42224 Add workflow file for publishing releases to immutable action package (#1919) de5a000 Check out other refs/* by commit if provided, fall back to ref (#1924) d632683 Prepare 4.2.0 release (#1878) 6d193bf Bump braces from 3.0.2 to 3.0.3 (#1777) db0cee9 Bump the minor-npm-dependencies group across 1 directory with 4 updates (#1872) b684943 Add Ref and Commit outputs (#1180) Additional commits viewable in compare view Updates azure/setup-helm from 3 to 4 Release notes Sourced from azure/setup-helm's releases. v4.0.0 v3.5 release Bump @actions/core version to remove output warning. v3.4 release Improves the querying method to find the latest Helm release. Takes advantage of new GitHub api changes. v3.3 release Add token input. Needed for fetching latest v3.1 release Swap to GraphQL GitHub API Changelog Sourced from azure/setup-helm's changelog. Change Log [4.3.0] - 2025-02-15 [4.2.0] - 2024-04-15 [4.1.0] - 2024-03-01 [4.0.0] - 2024-02-12 Commits b9e5190 build 0e8654b Release setup-helm version 4.3.0 (#162) b48e1df feat: log when restoring from cache (#152) 855ae7a Bump the actions group across 1 directory with 3 updates (#159) 124c6d8 Dependencies Update (#157) 048f4e7 Bump the actions group across 1 directory with 2 updates (#151) 8618769 Bump the actions group across 1 directory with 4 updates (#149) 4eb898e Bump the actions group across 1 directory with 2 updates (#145) 7a2001c Bump the actions group across 1 directory with 2 updates (#143) e90c86c Bump the actions group across 1 directory with 9 updates (#141) Additional commits viewable in compare view Updates actions/setup-python from 4 to 5 Release notes Sourced from actions/setup-python's releases. v5.0.0 What's Changed In scope of this release, we update node version runtime from node16 to node20 (actions/setup-python#772). Besides, we update dependencies to the latest versions. Full Changelog: actions/setup-python@v4.8.0...v5.0.0 v4.9.1 What's Changed Add workflow file for publishing releases to immutable action package by @aparnajyothi-y in actions/setup-python#1084 Full Changelog: actions/setup-python@v4...v4.9.1 v4.9.0 What's Changed Upgrade actions/cache to 4.0.3 by @priya-kinthali in actions/setup-python#1073 In scope of this release we updated actions/cache package to ensure continued support and compatibility, as older versions of the package are now deprecated. For more information please refer to the toolkit/cache. Full Changelog: actions/setup-python@v4.8.0...v4.9.0 v4.8.0 What's Changed In scope of this release we added support for GraalPy (actions/setup-python#694). You can use this snippet to set up GraalPy: steps: - uses: actions/checkout@v4 - uses: actions/setup-python@v4 with: python-version: 'graalpy-22.3' - run: python my_script.py Besides, the release contains such changes as: Trim python version when reading from file by @FerranPares in actions/setup-python#628 Use non-deprecated versions in examples by @jeffwidman in actions/setup-python#724 Change deprecation comment to past tense by @jeffwidman in actions/setup-python#723 Bump @babel/traverse from 7.9.0 to 7.23.2 by @dependabot in actions/setup-python#743 advanced-usage.md: Encourage the use actions/checkout@v4 by @cclauss in actions/setup-python#729 Examples now use checkout@v4 by @simonw in actions/setup-python#738 Update actions/checkout to v4 by @dmitry-shibanov in actions/setup-python#761 New Contributors @FerranPares made their first contribution in actions/setup-python#628 @timfel made their first contribution in actions/setup-python#694 @jeffwidman made their first contribution in actions/setup-python#724 Full Changelog: actions/setup-python@v4...v4.8.0 ... (truncated) Commits a26af69 Bump ts-jest from 29.1.2 to 29.3.2 (#1081) 30eafe9 Bump prettier from 2.8.8 to 3.5.3 (#1046) 5d95bc1 Bump semver and @types/semver (#1091) 6ed2c67 Fix for Candidate Not Iterable Error (#1082) e348410 Remove Ubuntu 20.04 from workflows due to deprecation from 2025-04-15 (#1065) 8d9ed9a Add e2e Testing for free threaded and Bump @action/cache from 4.0.0 to 4.0.3 ... 19e4675 Add support for .tool-versions file in setup-python (#1043) 6fd11e1 Bump @actions/glob from 0.4.0 to 0.5.0 (#1015) 9e62be8 Support free threaded Python versions like '3.13t' (#973) 6ca8e85 Bump @vercel/ncc from 0.38.1 to 0.38.3 (#1016) Additional commits viewable in compare view Updates peter-evans/create-pull-request from 5 to 7 Release notes Sourced from peter-evans/create-pull-request's releases. Create Pull Request v7.0.0 ✨ Now supports commit signing with bot-generated tokens! See "What's new" below. ✍️🤖 Behaviour changes Action input git-token has been renamed branch-token, to be more clear about its purpose. The branch-token is the token that the action will use to create and update the branch. The action now handles requests that have been rate-limited by GitHub. Requests hitting a primary rate limit will retry twice, for a total of three attempts. Requests hitting a secondary rate limit will not be retried. The pull-request-operation output now returns none when no operation was executed. Removed deprecated output environment variable PULL_REQUEST_NUMBER. Please use the pull-request-number action output instead. What's new The action can now sign commits as github-actions[bot] when using GITHUB_TOKEN, or your own bot when using GitHub App tokens. See commit signing for details. Action input draft now accepts a new value always-true. This will set the pull request to draft status when the pull request is updated, as well as on creation. A new action input maintainer-can-modify indicates whether maintainers can modify the pull request. The default is true, which retains the existing behaviour of the action. A new output pull-request-commits-verified returns true or false, indicating whether GitHub considers the signature of the branch's commits to be verified. What's Changed build(deps-dev): bump @types/node from 18.19.36 to 18.19.39 by @dependabot in peter-evans/create-pull-request#3000 build(deps-dev): bump ts-jest from 29.1.5 to 29.2.0 by @dependabot in peter-evans/create-pull-request#3008 build(deps-dev): bump prettier from 3.3.2 to 3.3.3 by @dependabot in peter-evans/create-pull-request#3018 build(deps-dev): bump ts-jest from 29.2.0 to 29.2.2 by @dependabot in peter-evans/create-pull-request#3019 build(deps-dev): bump eslint-plugin-prettier from 5.1.3 to 5.2.1 by @dependabot in peter-evans/create-pull-request#3035 build(deps-dev): bump @types/node from 18.19.39 to 18.19.41 by @dependabot in peter-evans/create-pull-request#3037 build(deps): bump undici from 6.19.2 to 6.19.4 by @dependabot in peter-evans/create-pull-request#3036 build(deps-dev): bump ts-jest from 29.2.2 to 29.2.3 by @dependabot in peter-evans/create-pull-request#3038 build(deps-dev): bump @types/node from 18.19.41 to 18.19.42 by @dependabot in peter-evans/create-pull-request#3070 build(deps): bump undici from 6.19.4 to 6.19.5 by @dependabot in peter-evans/create-pull-request#3086 build(deps-dev): bump @types/node from 18.19.42 to 18.19.43 by @dependabot in peter-evans/create-pull-request#3087 build(deps-dev): bump ts-jest from 29.2.3 to 29.2.4 by @dependabot in peter-evans/create-pull-request#3088 build(deps): bump undici from 6.19.5 to 6.19.7 by @dependabot in peter-evans/create-pull-request#3145 build(deps-dev): bump @types/node from 18.19.43 to 18.19.44 by @dependabot in peter-evans/create-pull-request#3144 Update distribution by @actions-bot in peter-evans/create-pull-request#3154 build(deps): bump undici from 6.19.7 to 6.19.8 by @dependabot in peter-evans/create-pull-request#3213 build(deps-dev): bump @types/node from 18.19.44 to 18.19.45 by @dependabot in peter-evans/create-pull-request#3214 Update distribution by @actions-bot in peter-evans/create-pull-request#3221 build(deps-dev): bump eslint-import-resolver-typescript from 3.6.1 to 3.6.3 by @dependabot in peter-evans/create-pull-request#3255 build(deps-dev): bump @types/node from 18.19.45 to 18.19.46 by @dependabot in peter-evans/create-pull-request#3254 build(deps-dev): bump ts-jest from 29.2.4 to 29.2.5 by @dependabot in peter-evans/create-pull-request#3256 v7 - signed commits by @peter-evans in peter-evans/create-pull-request#3057 New Contributors @rustycl0ck made their first contribution in peter-evans/create-pull-request#3057 Full Changelog: peter-evans/create-pull-request@v6.1.0...v7.0.0 Create Pull Request v6.1.0 ✨ Adds pull-request-branch as an action output. What's Changed ... (truncated) Commits 271a8d0 fix: suppress output for some git operations (#3776) 6f7efd1 test: update cpr-example-command 13c47c5 build(deps-dev): bump prettier from 3.5.1 to 3.5.2 (#3754) 63e5829 build(deps): bump @octokit/plugin-paginate-rest from 11.4.2 to 11.4.3 (#3753) a92c90f build(deps-dev): bump eslint-import-resolver-typescript (#3752) b23b62d build(deps-dev): bump ts-jest from 29.2.5 to 29.2.6 (#3751) dd2324f fix: use showFileAtRefBase64 to read per-commit file contents (#3744) 367180c ci: remove testv5 cmd 25575a1 build: update distribution (#3736) a56e7a5 build(deps): bump @octokit/core from 6.1.3 to 6.1.4 (#3711) Additional commits viewable in compare view Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase. Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: @dependabot rebase will rebase this PR @dependabot recreate will recreate this PR, overwriting any edits that have been made to it @dependabot merge will merge this PR after your CI passes on it @dependabot squash and merge will squash and merge this PR after your CI passes on it @dependabot cancel merge will cancel a previously requested merge and block automerging @dependabot reopen will reopen this PR if it is closed @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions Reviewed-by: Vladimir Vshivkov
Bumps actions/checkout from 3 to 4.
Release notes
Sourced from actions/checkout's releases.
... (truncated)
Changelog
Sourced from actions/checkout's changelog.
... (truncated)
Commits
1d96c77
Add SSH user parameter (#1685)cd7d8d6
Check git version before attempting to disablesparse-checkout
(#1656)8410ad0
Updateactions/checkout
version inupdate-main-version.yml
(#1650)9bb5618
Prep for release of v4.1.2 (#1649)8eb1f6a
Bump@babel/traverse
from 7.20.5 to 7.24.0 (#1642)556e4c3
Bump tough-cookie from 4.0.0 to 4.1.3 (#1406)b32f140
Warn on attempts to publishtest-ubuntu-git
from non-main branch. (#1623)2650dbd
Givetest-ubuntu-git
its ownREADME
(#1620)aadec89
Explicitly disable sparse checkout unless asked for (#1598)df0bcdd
Refine workflow for generatingtest-ubuntu-git
(#1617)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase
will rebase this PR@dependabot recreate
will recreate this PR, overwriting any edits that have been made to it@dependabot merge
will merge this PR after your CI passes on it@dependabot squash and merge
will squash and merge this PR after your CI passes on it@dependabot cancel merge
will cancel a previously requested merge and block automerging@dependabot reopen
will reopen this PR if it is closed@dependabot close
will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditions
will show all of the ignore conditions of the specified dependency@dependabot ignore this major version
will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor version
will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependency
will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)