build(deps): bump the ci group across 1 directory with 10 updates #1698
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the ci group with 10 updates in the / directory:
4.1.7
4.2.2
5.0.2
5.2.0
1.10.0
1.11.0
3.6.1
3.8.0
6.7.0
6.10.0
5.5.1
5.6.1
3.6.0
3.7.0
0.17.2
0.17.9
6.0.0
6.1.0
3.26.4
3.27.9
Updates
actions/checkout
from 4.1.7 to 4.2.2Release notes
Sourced from actions/checkout's releases.
Changelog
Sourced from actions/checkout's changelog.
... (truncated)
Commits
11bd719
Prepare 4.2.2 Release (#1953)e3d2460
Expand unit test coverage (#1946)163217d
url-helper.ts
now leverages well-known environment variables. (#1941)eef6144
Prepare 4.2.1 release (#1925)6b42224
Add workflow file for publishing releases to immutable action package (#1919)de5a000
Check out other refs/* by commit if provided, fall back to ref (#1924)d632683
Prepare 4.2.0 release (#1878)6d193bf
Bump braces from 3.0.2 to 3.0.3 (#1777)db0cee9
Bump the minor-npm-dependencies group across 1 directory with 4 updates (#1872)b684943
Add Ref and Commit outputs (#1180)Updates
actions/setup-go
from 5.0.2 to 5.2.0Release notes
Sourced from actions/setup-go's releases.
Commits
3041bf5
feat: fallback to "raw" endpoint for manifest when rate limit is reached (#496)41dfa10
Enhance workflows and Upgrade micromatch Dependency (#510)9419772
ReviseisGhes
logic (#511)d60b41a
Merge pull request #502 from actions/Jcambass-patch-1e09f57f
Upgrade IA Publishdf1a117
Merge pull request #500 from actions/Jcambass-patch-149582f6
Add workflow file for publishing releases to immutable action packageb26d402
fix: add arch to cache key (#493)Updates
helm/kind-action
from 1.10.0 to 1.11.0Release notes
Sourced from helm/kind-action's releases.
Commits
ae94020
update kind to default to release v0.24.0 (#122)9fdad06
fix: Use new mirror for downloading kubectl (#127)c93960c
Bump actions/checkout from 4.2.1 to 4.2.2 in the actions group (#125)fce224d
Bump actions/checkout from 4.2.0 to 4.2.1 in the actions group (#123)0958ddc
Bump actions/checkout from 4.1.7 to 4.2.0 in the actions group (#121)5d66646
feat: add custom kubeconfig option as action input (#119)6f17223
Bump actions/checkout from 4.1.7 to 4.2.0 in the actions group (#120)7e05df2
revert wget to use curl again (#110)b17b03a
Bump actions/checkout from 4.1.6 to 4.1.7 in the actions group (#117)674d091
Bump actions/checkout from 4.1.5 to 4.1.6 in the actions group (#115)Updates
docker/setup-buildx-action
from 3.6.1 to 3.8.0Release notes
Sourced from docker/setup-buildx-action's releases.
Commits
6524bf6
Merge pull request #390 from crazy-max/buildx-cloud-latest8d5e074
chore: update generated content7199e57
make cloud prefix optional to download buildx if driver is clouddb63cee
Merge pull request #381 from docker/dependabot/github_actions/codecov/codecov...043ebe1
Merge pull request #389 from docker/dependabot/npm_and_yarn/docker/actions-to...686da90
chore: update generated contenta3d7487
Merge pull request #382 from docker/dependabot/npm_and_yarn/cross-spawn-7.0.64dcdbce
build(deps): bump@docker/actions-toolkit
from 0.39.0 to 0.48.01a8ac74
ci: fix deprecated input for codecov-actione827ebe
build(deps): bump cross-spawn from 7.0.3 to 7.0.6Updates
docker/build-push-action
from 6.7.0 to 6.10.0Release notes
Sourced from docker/build-push-action's releases.
Commits
48aba3b
Merge pull request #1268 from docker/dependabot/npm_and_yarn/docker/actions-t...678328c
chore: update generated contentcdf0a37
chore(deps): Bump@docker/actions-toolkit
from 0.39.0 to 0.46.0d719b79
Merge pull request #1238 from docker/dependabot/npm_and_yarn/actions/core-1.11.1c333dfd
chore: update generated content6b56a4c
chore(deps): Bump@actions/core
from 1.10.1 to 1.11.192fb0d7
Merge pull request #1259 from docker/dependabot/github_actions/codecov/codeco...40532c5
ci: fix deprecated input for codecov-action70dd953
Merge pull request #1267 from crazy-max/fix-allow41b4e80
Merge pull request #1261 from docker/dependabot/npm_and_yarn/cross-spawn-7.0.6Updates
docker/metadata-action
from 5.5.1 to 5.6.1Release notes
Sourced from docker/metadata-action's releases.
Commits
369eb59
Merge pull request #480 from crazy-max/back-to-sha-77d870ce
chore: update generated contente44a9cd
back to commit sha length of 78cb0002
Merge pull request #478 from crazy-max/commit-date-requeste01ddd3
chore: update generated content861d98a
commiter_date: fix github api request fallback359e915
Merge pull request #475 from crazy-max/commit-date-changes0c395eb
commit_date: code cleanup and readme updates1156622
Merge pull request #474 from docker/dependabot/npm_and_yarn/cross-spawn-7.0.595ea8d0
chore(deps): Bump cross-spawn from 7.0.3 to 7.0.5Updates
sigstore/cosign-installer
from 3.6.0 to 3.7.0Release notes
Sourced from sigstore/cosign-installer's releases.
Commits
dc72c7d
bump for latest cosign v2.4.1 release (#173)08bb361
Bump actions/checkout from 4.1.7 to 4.2.0 (#172)Updates
anchore/sbom-action
from 0.17.2 to 0.17.9Release notes
Sourced from anchore/sbom-action's releases.
Commits
df80a98
chore(deps): update Syft to v1.18.1 (#510)33651ab
chore(deps): update Syft to v1.18.0 (#509)a5bbe18
fix: github correlator name when run in matrix build (#482)55dc4ee
chore(deps): update Syft to v1.17.0 (#507)fc46e51
chore(deps): update Syft to v1.16.0 (#506)251a468
chore(deps): update Syft to v1.15.0 (#505)6bb446c
chore(deps): bump actions/checkout from 4.2.1 to 4.2.2 (#504)1ca97d9
chore(deps): update Syft to v1.14.2 (#503)8d0a650
chore(deps): update Syft to v1.14.1 (#502)f5e124a
chore(deps): bump peter-evans/create-pull-request from 6.1.0 to 7.0.5 (#493)Updates
goreleaser/goreleaser-action
from 6.0.0 to 6.1.0Release notes
Sourced from goreleaser/goreleaser-action's releases.
Commits
9ed2f89
chore: update generated content (#480)cf63508
docs: bump upload-artifact version (#479)f7623f3
chore(deps): bump@actions/core
from 1.10.1 to 1.11.1 (#478)006a7a4
chore: updatee4066e6
chore(deps): bump micromatch from 4.0.5 to 4.0.8 (#475)22f558e
chore(deps): bump@actions/http-client
from 2.2.2 to 2.2.3 (#474)6e33108
chore(deps): bump@actions/http-client
from 2.2.1 to 2.2.2 (#473)7ca6450
chore(deps): bump semver from 7.6.2 to 7.6.3 (#470)d33b6f6
chore(deps): bump docker/bake-action from 4 to 5 (#468)85d0b9d
chore(deps): bump braces from 3.0.2 to 3.0.3 (#467)Updates
github/codeql-action
from 3.26.4 to 3.27.9Release notes
Sourced from github/codeql-action's releases.
... (truncated)
Changelog
Sourced from github/codeql-action's changelog.
... (truncated)
Commits
df409f7
Merge pull request #2649 from github/update-v3.27.9-7972a42f3feca44d
Update changelog for v3.27.97972a42
Merge pull request #2648 from github/aeisenberg/add-environment44bf16d
Merge pull request #2646 from github/mergeback/v3.27.8-to-main-8a93837af124ad0
Adds an environment for creating releases9275370
Update checked-in dependenciesa059a7a
Update changelog and version after v3.27.88a93837
Merge pull request #2645 from github/update-v3.27.8-9cfbef4bd90a2700
Update changelog for v3.27.89cfbef4
Merge pull request #2644 from github/aeisenberg/use-app-token-for-releaseDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase
will rebase this PR@dependabot recreate
will recreate this PR, overwriting any edits that have been made to it@dependabot merge
will merge this PR after your CI passes on it@dependabot squash and merge
will squash and merge this PR after your CI passes on it@dependabot cancel merge
will cancel a previously requested merge and block automerging@dependabot reopen
will reopen this PR if it is closed@dependabot close
will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditions
will show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major version
will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor version
will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>
will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>
will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>
will remove the ignore condition of the specified dependency and ignore conditions