E55F Bump the github-actions-version-updates group across 1 directory with 2 updates by dependabot[bot] · Pull Request #2800 · secureCodeBox/secureCodeBox · GitHub
[go: up one dir, main page]

Skip to content

Conversation

@dependabot
Copy link
Contributor
@dependabot dependabot bot commented on behalf of github Dec 9, 2024

Bumps the github-actions-version-updates group with 2 updates in the /.github/workflows directory: fsfe/reuse-action and mikefarah/yq.

Updates fsfe/reuse-action from 4 to 5

Commits
  • bb774aa Merge pull request #35 from carmenbianca/bump-v5
  • b8e23e7 Bump to v5
  • 37c9187 Merge pull request #33 from AndyScherzinger/chore/noid/toml-v4-doc-updates
  • b2cec8e docs: Update examples to use v4 and remove dep5 definition
  • f15b48b Merge pull request #34 from bernhardreiter/patch-1
  • 618b8e9 Update README.md for new major version of action @​v3 -> @​v4
  • See full diff in compare view

Updates mikefarah/yq from 4.44.3 to 4.44.6

Release notes

Sourced from mikefarah/yq's releases.

v4.44.6

v4.44.5

  • Format comments with a gray foreground (Thanks @​gabe565)
  • Fixed handling of nulls with sort_by expressions #2164
  • Force no color output when NO_COLOR env presents (Thanks @​narqo)
  • Fixed array subtraction update bug #2159
  • Fixed index out of range error
  • Can traverse straight from parent operator (parent.blah)
  • Bumped dependencies

Note: 4.44.4 was skipped as it had a release pipeline failure

Changelog

Sourced from mikefarah/yq's changelog.

4.44.6:

4.44.5:

  • Fixing release pipeline

4.44.4:

  • Format comments with a gray foreground (Thanks @​gabe565)
  • Fixed handling of nulls with sort_by expressions #2164
  • Force no color output when NO_COLOR env presents (Thanks @​narqo)
  • Fixed array subtraction update bug #2159
  • Fixed index out of range error
  • Can traverse straight from parent operator (parent.blah)
  • Bumped dependencies
Commits
  • 4839dbb Bumping version
  • 342efb2 Fixed panic on multipling string by very large number #2211
  • 2201381 Fixed multiply string by negative number panic #2211
  • 5273715 Fixed panic error #2211
  • e204677 Fixed no-colors regression #2218
  • f768159 Create docker image for armv7 / raspberry pi3
  • c16b180 Make sure to update the key when deleting array elements
  • 3bca3a2 Bump github.com/elliotchance/orderedmap from 1.6.0 to 1.7.0
  • 70bef5b Bump golang.org/x/net from 0.31.0 to 0.32.0
  • ea2ba18 Bump golang from 1.23.3 to 1.23.4
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Dec 9, 2024
@netlify
Copy link
netlify bot commented Dec 9, 2024

Deploy Preview for docs-securecodebox canceled.

Name Link
🔨 Latest commit aca8838
🔍 Latest deploy log https://app.netlify.com/sites/docs-securecodebox/deploys/676ed7632f064f0008035000

@dependabot dependabot bot force-pushed the dependabot/github_actions/dot-github/workflows/github-actions-version-updates-682b443a14 branch from a321538 to 096de98 Compare December 16, 2024 10:10
@Weltraumschaf
Copy link
Member

Blocked by #2812

@dependabot dependabot bot force-pushed the dependabot/github_actions/dot-github/workflows/github-actions-version-updates-682b443a14 branch from 096de98 to 80b3295 Compare December 23, 2024 10:12
… 2 updates

Bumps the github-actions-version-updates group with 2 updates in the /.github/workflows directory: [fsfe/reuse-action](https://github.com/fsfe/reuse-action) and [mikefarah/yq](https://github.com/mikefarah/yq).


Updates `fsfe/reuse-action` from 4 to 5
- [Release notes](https://github.com/fsfe/reuse-action/releases)
- [Commits](fsfe/reuse-action@v4...v5)

Updates `mikefarah/yq` from 4.44.3 to 4.44.6
- [Release notes](https://github.com/mikefarah/yq/releases)
- [Changelog](https://github.com/mikefarah/yq/blob/master/release_notes.txt)
- [Commits](mikefarah/yq@v4.44.3...v4.44.6)

---
updated-dependencies:
- dependency-name: fsfe/reuse-action
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions-version-updates
- dependency-name: mikefarah/yq
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions-version-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@J12934 J12934 force-pushed the dependabot/github_actions/dot-github/workflows/github-actions-version-updates-682b443a14 branch from 80b3295 to aca8838 Compare December 27, 2024 16:35
@sonarqubecloud
Copy link

@github-actions
Copy link
github-actions bot commented Dec 27, 2024

🦙 MegaLinter status: ⚠️ WARNING

Descriptor Linter Files Fixed Errors Elapsed time
⚠️ ACTION actionlint 3 17 0.05s
✅ YAML prettier 3 0 0.4s

See detailed report in MegaLinter reports
Set VALIDATE_ALL_CODEBASE: true in mega-linter.yml to validate all sources, not only the diff

MegaLinter is graciously provided by OX Security

@Weltraumschaf Weltraumschaf merged commit bc8be4e into main Dec 27, 2024
54 checks passed
@Weltraumschaf Weltraumschaf deleted the dependabot/github_actions/dot-github/workflows/github-actions-version-updates-682b443a14 branch December 27, 2024 17:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

Archived in project

Development

Successfully merging this pull request may close these issues.

1 participant

0