Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

build(deps): bump the ci group with 4 updates #4430

Closed
wants to merge 1 commit into from
Closed

build(deps): bump the ci group with 4 updates #4430

wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 27, 2023 •
edited
Loading

Bumps the ci group with 4 updates: Azure/login, google-github-actions/auth, anchore/sbom-action and fossa-contrib/fossa-action.

Updates Azure/login from 1.4.7 to 1.5.0

Release notes

Sourced from Azure/login's releases.

Azure Login Action v1.5.0

  • Updated the versions of dependencies.
  • Supported passwords to start with hyphen(-).
  • Enabled OIDC for sovereign clouds.
  • Supported Managed Identity Login.
Commits

Updates google-github-actions/auth from 1.1.1 to 1.2.0

Release notes

Sourced from google-github-actions/auth's releases.

v1.2.0

⚠️ This version requires Node 20 or later on the runner! If you are using GitHub-managed runners, no action is needed. If you are using self-hosted runners, make sure the system version of Node is version 20 or higher.

What's Changed

New Contributors

Full Changelog: google-github-actions/auth@v1...v1.2.0

Commits

Updates anchore/sbom-action from 0.14.3 to 0.15.0

Release notes

Sourced from anchore/sbom-action's releases.

v0.15.0

Changes in v0.14.4

Breaking Changes

  • Previously, running on Windows required WSL. Now, running on Windows expects to be run on native windows (#426) [willmurphyscode].

Other Changes

Commits

Updates fossa-contrib/fossa-action from 2.0.0 to 3.0.0

Release notes

Sourced from fossa-contrib/fossa-action's releases.

v3.0.0

Changed

  • Update default runtime to node20.
Changelog

Sourced from fossa-contrib/fossa-action's changelog.

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[unreleased]

[3.0.0] - 2023-11-24

Changed

  • Update default runtime to node20.

[2.0.0] - 2023-02-14

Changed

  • Update default runtime to node16.

[1.2.0] - 2021-11-14

Added

  • Allow the endpoint flag to be set.

[1.1.5] - 2021-11-14

Fixed

  • Introduce changes for fossa cli v3.

[1.1.4] - 2020-02-02

Fixed

  • Improve error handling at the entry point.

[1.1.3] - 2020-11-30

Changed

  • Provide the github.token by default.

[1.1.2] - 2020-10-16

Fixed

... (truncated)

Commits
  • cdc5065 Prepare v3.0.0
  • e0cd480 Update default runtime to node20
  • 2fb4cbd @tsconfig/node16 -> @tsconfig/node20
  • f8e8957 Update dependency @​types/node to v20.9.4
  • 79fdf90 Update dependency @​types/semver to v7.5.6
  • feee8c0 Update dependency @​types/node to v20.9.3
  • 2e41b6b Update dependency typescript to v5.3.2
  • 1c9d223 Update typescript-eslint monorepo to v6.12.0
  • bb587f5 Lock file maintenance
  • 798c451 Update dependency @​types/node to v20.9.2
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps): bump the ci group with 4 updates
879103e 
Bumps the ci group with 4 updates: [Azure/login](https://github.com/azure/login), [google-github-actions/auth](https://github.com/google-github-actions/auth), [anchore/sbom-action](https://github.com/anchore/sbom-action) and [fossa-contrib/fossa-action](https://github.com/fossa-contrib/fossa-action).


Updates `Azure/login` from 1.4.7 to 1.5.0
- [Release notes](https://github.com/azure/login/releases)
- [Commits](Azure/login@92a5484...4c88f01)

Updates `google-github-actions/auth` from 1.1.1 to 1.2.0
- [Release notes](https://github.com/google-github-actions/auth/releases)
- [Changelog](https://github.com/google-github-actions/auth/blob/main/CHANGELOG.md)
- [Commits](google-github-actions/auth@35b0e87...f105ef0)

Updates `anchore/sbom-action` from 0.14.3 to 0.15.0
- [Release notes](https://github.com/anchore/sbom-action/releases)
- [Commits](anchore/sbom-action@78fc58e...fd74a6f)

Updates `fossa-contrib/fossa-action` from 2.0.0 to 3.0.0
- [Release notes](https://github.com/fossa-contrib/fossa-action/releases)
- [Changelog](https://github.com/fossa-contrib/fossa-action/blob/master/CHANGELOG.md)
- [Commits](fossa-contrib/fossa-action@6728dc6...cdc5065)

---
updated-dependencies:
- dependency-name: Azure/login
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci
- dependency-name: google-github-actions/auth
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci
- dependency-name: anchore/sbom-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci
- dependency-name: fossa-contrib/fossa-action
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: ci
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added area/ci CI related issues and pull requests dependencies Pull requests that update a dependency labels Nov 27, 2023
@makkes
Copy link
Member

makkes commented Nov 27, 2023

@somtochiama I have no clue how to run the e2e-azure workflow to verify the version bump doesn't break anything. Would you mind running it, please?

@makkes makkes requested a review from somtochiama November 27, 2023 07:57
@stefanprodan
Copy link
Member

We no longer have an Azure subscription, we can merge this and when we get a subscription we can fix the auth then.

@dependabot Dependabot
Copy link
Contributor Author

dependabot bot commented on behalf of github Dec 4, 2023

Superseded by #4447.

@dependabot dependabot bot closed this Dec 4, 2023
@dependabot dependabot bot deleted the dependabot/github_actions/ci-59b4f99bbc branch December 4, 2023 01:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@makkes makkes makkes approved these changes

@somtochiama somtochiama Awaiting requested review from somtochiama

Assignees
No one assigned
Labels
area/ci CI related issues and pull requests dependencies Pull requests that update a dependency
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@makkes @stefanprodan