Bump the gha-dependencies group with 7 updates #241

dependabot · 2024-07-19T13:53:37Z

Bumps the gha-dependencies group with 7 updates:

Package	From	To
actions/checkout	`2`	`4`
actions/setup-python	`2`	`5`
docker/metadata-action	`4`	`5`
docker/login-action	`2`	`3`
actions/upload-artifact	`2`	`4`
actions/download-artifact	`2`	`4`
softprops/action-gh-release	`0.1.14`	`2.0.8`

Updates actions/checkout from 2 to 4

Release notes

Sourced from actions/checkout's releases.

v4.0.0

What's Changed

Update default runtime to node20 by @takost in actions/checkout#1436

Support fetching without the --progress option by @simonbaird in actions/checkout#1067

Release 4.0.0 by @takost in actions/checkout#1447

New Contributors

@takost made their first contribution in actions/checkout#1436

@simonbaird made their first contribution in actions/checkout#1067

Full Changelog: actions/checkout@v3...v4.0.0

v3.6.0

What's Changed

Mark test scripts with Bash'isms to be run via Bash by @dscho in actions/checkout#1377

Add option to fetch tags even if fetch-depth > 0 by @RobertWieczoreck in actions/checkout#579

Release 3.6.0 by @luketomlinson in actions/checkout#1437

New Contributors

@RobertWieczoreck made their first contribution in actions/checkout#579

@luketomlinson made their first contribution in actions/checkout#1437

Full Changelog: actions/checkout@v3.5.3...v3.6.0

v3.5.3

What's Changed

Fix: Checkout Issue in self hosted runner due to faulty submodule check-ins by @megamanics in actions/checkout#1196

Fix typos found by codespell by @DimitriPapadopoulos in actions/checkout#1287

Add support for sparse checkouts by @dscho and @dfdez in actions/checkout#1369

Release v3.5.3 by @TingluoHuang in actions/checkout#1376

New Contributors

@megamanics made their first contribution in actions/checkout#1196

@DimitriPapadopoulos made their first contribution in actions/checkout#1287

@dfdez made their first contribution in actions/checkout#1369

Full Changelog: actions/checkout@v3...v3.5.3

v3.5.2

What's Changed

Fix: Use correct API url / endpoint in GHES by @fhammerl in actions/checkout#1289 based on #1286 by @1newsr

Full Changelog: actions/checkout@v3.5.1...v3.5.2

v3.5.1

What's Changed

Improve checkout performance on Windows runners by upgrading @actions/github dependency by @BrettDong in actions/checkout#1246

New Contributors

@BrettDong made their first contribution in actions/checkout#1246

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

v4.1.7

Bump the minor-npm-dependencies group across 1 directory with 4 updates by @dependabot in actions/checkout#1739

Bump actions/checkout from 3 to 4 by @dependabot in actions/checkout#1697

Check out other refs/* by commit by @orhantoy in actions/checkout#1774

Pin actions/checkout's own workflows to a known, good, stable version. by @jww3 in actions/checkout#1776

v4.1.6

Check platform to set archive extension appropriately by @cory-miller in actions/checkout#1732

v4.1.5

Update NPM dependencies by @cory-miller in actions/checkout#1703

Bump github/codeql-action from 2 to 3 by @dependabot in actions/checkout#1694

Bump actions/setup-node from 1 to 4 by @dependabot in actions/checkout#1696

Bump actions/upload-artifact from 2 to 4 by @dependabot in actions/checkout#1695

README: Suggest user.email to be 41898282+github-actions[bot]@users.noreply.github.com by @cory-miller in actions/checkout#1707

v4.1.4

Disable extensions.worktreeConfig when disabling sparse-checkout by @jww3 in actions/checkout#1692

Add dependabot config by @cory-miller in actions/checkout#1688

Bump the minor-actions-dependencies group with 2 updates by @dependabot in actions/checkout#1693

Bump word-wrap from 1.2.3 to 1.2.5 by @dependabot in actions/checkout#1643

v4.1.3

Check git version before attempting to disable sparse-checkout by @jww3 in actions/checkout#1656

Add SSH user parameter by @cory-miller in actions/checkout#1685

Update actions/checkout version in update-main-version.yml by @jww3 in actions/checkout#1650

v4.1.2

Fix: Disable sparse checkout whenever sparse-checkout option is not present @dscho in actions/checkout#1598

v4.1.1

Correct link to GitHub Docs by @peterbe in actions/checkout#1511

Link to release page from what's new section by @cory-miller in actions/checkout#1514

v4.1.0

Add support for partial checkout filters

v4.0.0

Support fetching without the --progress option

Update to node20

v3.6.0

Fix: Mark test scripts with Bash'isms to be run via Bash

Add option to fetch tags even if fetch-depth > 0

v3.5.3

Fix: Checkout fail in self-hosted runners when faulty submodule are checked-in

Fix typos found by codespell

... (truncated)

Commits

692973e Prepare 4.1.7 release (#1775)
6ccd57f Pin actions/checkout's own workflows to a known, good, stable version. (#1776)
b17fe1e Handle hidden refs (#1774)
b80ff79 Bump actions/checkout from 3 to 4 (#1697)
b1ec302 Bump the minor-npm-dependencies group across 1 directory with 4 updates (#1739)
a5ac7e5 Update for 4.1.6 release (#1733)
24ed1a3 Check platform for extension (#1732)
44c2b7a README: Suggest user.email to be `41898282+github-actions[bot]@users.norepl...
8459bc0 Bump actions/upload-artifact from 2 to 4 (#1695)
3f603f6 Bump actions/setup-node from 1 to 4 (#1696)
Additional commits viewable in compare view

Updates actions/setup-python from 2 to 5

Release notes

Sourced from actions/setup-python's releases.

v5.0.0

What's Changed

In scope of this release, we update node version runtime from node16 to node20 (actions/setup-python#772). Besides, we update dependencies to the latest versions.

Full Changelog: actions/setup-python@v4.8.0...v5.0.0

v4.8.0

What's Changed

In scope of this release we added support for GraalPy (actions/setup-python#694). You can use this snippet to set up GraalPy:
steps:
- uses: actions/checkout@v4
- uses: actions/setup-python@v4 
  with:
    python-version: 'graalpy-22.3' 
- run: python my_script.py
Besides, the release contains such changes as:

Trim python version when reading from file by @FerranPares in actions/setup-python#628

Use non-deprecated versions in examples by @jeffwidman in actions/setup-python#724

Change deprecation comment to past tense by @jeffwidman in actions/setup-python#723

Bump @babel/traverse from 7.9.0 to 7.23.2 by @dependabot in actions/setup-python#743

advanced-usage.md: Encourage the use actions/checkout@v4 by @cclauss in actions/setup-python#729

Examples now use checkout@v4 by @simonw in actions/setup-python#738

Update actions/checkout to v4 by @dmitry-shibanov in actions/setup-python#761

New Contributors

@FerranPares made their first contribution in actions/setup-python#628

@timfel made their first contribution in actions/setup-python#694

@jeffwidman made their first contribution in actions/setup-python#724

Full Changelog: actions/setup-python@v4...v4.8.0

v4.7.1

What's Changed

Bump word-wrap from 1.2.3 to 1.2.4 by @dependabot in actions/setup-python#702

Add range validation for toml files by @dmitry-shibanov in actions/setup-python#726

Full Changelog: actions/setup-python@v4...v4.7.1

v4.7.0

In scope of this release, the support for reading python version from pyproject.toml was added (actions/setup-python#669).
      - name: Setup Python
        uses: actions/setup-python@v4
</tr></table> 

... (truncated)

Commits

39cd149 Documentation update for cache (#873)
a0d74c0 fix(ci): update all failing workflows (#863)
4eb7dbc Bump braces from 3.0.2 to 3.0.3 (#893)
82c7e63 Documentation changes for avoiding rate limit issues on GHES (#835)
10aa35a feat: fallback to raw endpoint for manifest when rate limit is reached (#766)
9a7ac94 Bump undici from 5.27.2 to 5.28.3 (#817)
871daa9 Fix the "Specifying multiple Python/PyPy versions" link (#782)
2f07895 Fix broken README.md link (#793)
e9d6f99 Replace setup-python@v4 by setup-python@v5 in README (#776)
0a5c615 Update action to node20 (#772)
Additional commits viewable in compare view

Updates docker/metadata-action from 4 to 5

Release notes

Sourced from docker/metadata-action's releases.

v5.0.0

Node 20 as default runtime (requires Actions Runner v2.308.0 or later) by @crazy-max in docker/metadata-action#328

Bump @actions/core from 1.10.0 to 1.10.1 in docker/metadata-action#333

Bump csv-parse from 5.4.0 to 5.5.0 in docker/metadata-action#320

Bump semver from 7.5.1 to 7.5.2 in docker/metadata-action#304

Bump handlebars from 4.7.7 to 4.7.8 in docker/metadata-action#315

Full Changelog: docker/metadata-action@v4.6.0...v5.0.0

v4.6.0

Dedup and sort labels by @crazy-max in docker/metadata-action#301

Bump @docker/actions-toolkit from 0.3.0 to 0.5.0 in docker/metadata-action#302

Full Changelog: docker/metadata-action@v4.5.0...v4.6.0

v4.5.0

Bump @docker/actions-toolkit from 0.1.0 to 0.3.0 in docker/metadata-action#296

Bump csv-parse from 5.3.8 to 5.4.0 in docker/metadata-action#294

Full Changelog: docker/metadata-action@v4.4.0...v4.5.0

v4.4.0

Add context input to define the metadata provider by @neilime in docker/metadata-action#248

Switch to actions-toolkit implementation by @crazy-max in docker/metadata-action#266 docker/metadata-action#273 docker/metadata-action#284

Bump csv-parse from 5.3.3 to 5.3.8 in docker/metadata-action#271 docker/metadata-action#286

Bump moment-timezone from 0.5.40 to 0.5.43 in docker/metadata-action#268 docker/metadata-action#278 docker/metadata-action#281

Bump semver from 7.4.0 to 7.5.0 in docker/metadata-action#285

Full Changelog: docker/metadata-action@v4.3.0...v4.4.0

v4.3.0

Provide outputs as env vars by @crazy-max (#257)

Full Changelog: docker/metadata-action@v4.2.0...v4.3.0

v4.2.0

Add tz attribute to handlebar date function by @chroju (#251)

Bump minimatch from 3.0.4 to 3.1.2 (#242)

Bump csv-parse from 5.3.1 to 5.3.3 (#245)

Bump json5 from 2.2.0 to 2.2.3 (#252)

Full Changelog: docker/metadata-action@v4.1.1...v4.2.0

v4.1.1

Revert changes to set associated head sha on pull request event by @crazy-max (#239)

User can still set associated head sha on PR by setting the env var DOCKER_METADATA_PR_HEAD_SHA=true

Bump csv-parse from 5.3.0 to 5.3.1 (#237)

Full Changelog: docker/metadata-action@v4.1.0...v4.1.1

... (truncated)

Upgrade guide

Sourced from docker/metadata-action's upgrade guide.

Upgrade notes

v2 to v3

Repository has been moved to docker org. Replace crazy-max/ghaction-docker-meta@v2 with docker/metadata-action@v5

The default bake target has been changed: ghaction-docker-meta > docker-metadata-action

v1 to v2

inputs

tag-sha

tag-edge / tag-edge-branch

tag-semver

tag-match / tag-match-group

tag-latest

tag-schedule

tag-custom / tag-custom-only

label-custom

Basic workflow

Semver workflow

inputs

New Unchanged Removed

tags images tag-sha

flavor sep-tags tag-edge

labels sep-labels tag-edge-branch

tag-semver

tag-match

tag-match-group

tag-latest

tag-schedule

tag-custom

tag-custom-only

label-custom

tag-sha
tags: |
  type=sha
tag-edge / tag-edge-branch
tags: |
  # default branch
</tr></table> 

... (truncated)

Commits

8e5442c Merge pull request #382 from crazy-max/dont-set-cwd-prefix
eda41b7 chore: update generated content
388c08f don't set cwd:// prefix for local bake files
dbef880 Merge pull request #374 from docker/dependabot/npm_and_yarn/moment-timezone-0...
b73e7a7 chore: update generated content
b9fba69 chore(deps): Bump moment-timezone from 0.5.43 to 0.5.44
ac82374 Merge pull request #373 from docker/dependabot/npm_and_yarn/moment-2.30.1
c92519a chore: update generated content
3b4179d chore(deps): Bump moment from 2.29.4 to 2.30.1
0784993 Merge pull request #371 from docker/dependabot/npm_and_yarn/docker/actions-to...
Additional commits viewable in compare view

Updates docker/login-action from 2 to 3

Release notes

Sourced from docker/login-action's releases.

v3.0.0

Node 20 as default runtime (requires Actions Runner v2.308.0 or later) by @crazy-max in docker/login-action#593

Bump @actions/core from 1.10.0 to 1.10.1 in docker/login-action#598

Bump @aws-sdk/client-ecr and @aws-sdk/client-ecr-public to 3.410.0 in docker/login-action#555 docker/login-action#560 docker/login-action#582 docker/login-action#599

Bump semver from 6.3.0 to 6.3.1 in docker/login-action#556

Bump https-proxy-agent to 7.0.2 docker/login-action#561 docker/login-action#588

Full Changelog: docker/login-action@v2.2.0...v3.0.0

v2.2.0

Switch to actions-toolkit implementation by @crazy-max in docker/login-action#409 docker/login-action#470 docker/login-action#476

Bump @aws-sdk/client-ecr and @aws-sdk/client-ecr-public to 3.347.1 in docker/login-action#524 docker/login-action#364 docker/login-action#363

Bump minimatch from 3.0.4 to 3.1.2 in docker/login-action#354

Bump json5 from 2.2.0 to 2.2.3 in docker/login-action#378

Bump http-proxy-agent from 5.0.0 to 7.0.0 in docker/login-action#509

Bump https-proxy-agent from 5.0.1 to 7.0.0 in docker/login-action#508

Full Changelog: docker/login-action@v2.1.0...v2.2.0

v2.1.0

Ensure AWS temp credentials are redacted in workflow logs by @crazy-max (#275)

Bump @actions/core from 1.6.0 to 1.10.0 (#252 #292)

Bump @aws-sdk/client-ecr from 3.53.0 to 3.186.0 (#298)

Bump @aws-sdk/client-ecr-public from 3.53.0 to 3.186.0 (#299)

Full Changelog: docker/login-action@v2.0.0...v2.1.0

Commits

0d4c9c5 Merge pull request #722 from crazy-max/update-readme
b29e14f add contributing section to README
218a70c Merge pull request #721 from docker/dependabot/npm_and_yarn/docker/actions-to...
b820080 build(deps): bump @docker/actions-toolkit from 0.23.0 to 0.24.0
27530a9 Merge pull request #720 from docker/dependabot/npm_and_yarn/aws-sdk-dependenc...
d072a60 chore: update generated content
7c627b5 build(deps): bump the aws-sdk-dependencies group across 1 directory with 2 up...
787cfc6 Merge pull request #694 from docker/dependabot/npm_and_yarn/undici-5.28.4
8e66e91 chore: update generated content
5ba5e97 build(deps): bump undici from 5.28.3 to 5.28.4
Additional commits viewable in compare view

Updates actions/upload-artifact from 2 to 4

Release notes

Sourced from actions/upload-artifact's releases.

v4.0.0

What's Changed

The release of upload-artifact@v4 and download-artifact@v4 are major changes to the backend architecture of Artifacts. They have numerous performance and behavioral improvements.

ℹ️ However, this is a major update that includes breaking changes. Artifacts created with versions v3 and below are not compatible with the v4 actions. Uploads and downloads must use the same major actions versions. There are also key differences from previous versions that may require updates to your workflows.

For more information, please see:

The changelog post.

The README.

The migration documentation.

As well as the underlying npm package, @actions/artifact documentation.

New Contributors

@vmjoseph made their first contribution in actions/upload-artifact#464

Full Changelog: actions/upload-artifact@v3...v4.0.0

v3.1.3

What's Changed

chore(github): remove trailing whitespaces by @ljmf00 in actions/upload-artifact#313

Bump @actions/artifact version to v1.1.2 by @bethanyj28 in actions/upload-artifact#436

Full Changelog: actions/upload-artifact@v3...v3.1.3

v3.1.2

Update all @actions/* NPM packages to their latest versions- #374

Update all dev dependencies to their most recent versions - #375

v3.1.1

Update actions/core package to latest version to remove set-output deprecation warning #351

v3.1.0

What's Changed

Bump @actions/artifact to v1.1.0 (actions/upload-artifact#327)

Adds checksum headers on artifact upload (actions/toolkit#1095) (actions/toolkit#1063)

v3.0.0

What's Changed

Update default runtime to node16 (#293)

Update package-lock.json file version to 2 (#302)

Breaking Changes

With the update to Node 16, all scripts will now be run with Node 16 rather than Node 12.

v2.3.1

Fix for empty fails on Windows failing on upload #281

v2.3.0 Upload Artifact

... (truncated)

Commits

0b2256b Merge pull request #584 from actions/robherley/bump-pkgs
488dcef licensed cache
04c51f5 ncc
32a9e27 bump @actions/artifact and npm audit
552bf37 new version
79616d2 Merge pull request #565 from actions/eggyhead/use-artifact-v2.1.6
6546280 updating package version
c004fb4 Merge branch 'main' into eggyhead/use-artifact-v2.1.6
90aba49 updating toolkit artifact dependency to 2.1.6
b06cde3 Merge pull request #563 from actions/eggyhead/release-4.3.2
Additional commits viewable in compare view

Updates actions/download-artifact from 2 to 4

Release notes

Sourced from actions/download-artifact's releases.

v4.0.0

What's Changed

The release of upload-artifact@v4 and download-artifact@v4 are major changes to the backend architecture of Artifacts. They have numerous performance and behavioral improvements.

ℹ️ However, this is a major update that includes breaking changes. Artifacts created with versions v3 and below are not compatible with the v4 actions. Uploads and downloads must use the same major actions versions. There are also key differences from previous versions that may require updates to your workflows.

For more information, please see:

The changelog post.

The README.

The migration documentation.

As well as the underlying npm package, @actions/artifact documentation.

New Contributors

@bflad made their first contribution in actions/download-artifact#194

Full Changelog: actions/download-artifact@v3...v4.0.0

v3.0.2

Bump @actions/artifact to v1.1.1 - actions/download-artifact#195

Fixed a bug in Node16 where if an HTTP download finished too quickly (<1ms, e.g. when it's mocked) we attempt to delete a temp file that has not been created yet Migrate dev environment and workflows to node16 actions/toolkit#1278

v3.0.1

Bump @actions/core to 1.10.0

v3.0.0

What's Changed

Update default runtime to node16 (actions/download-artifact#134)

Update package-lock.json file version to 2 (actions/download-artifact#136)

Breaking Changes

With the update to Node 16, all scripts will now be run with Node 16 rather than Node 12.

v2.1.1

Bump @actions/core to the latest version to prevent breaking changes once set-output and save-state commands are deprecated #21

v2.1.0 Download Artifact

Improved output & logging

Fixed issue where downloading all artifacts could cause display percentages to be over 100%

Various small bug fixes & improvements

v2.0.10

Retry on HTTP 500 responses from the service

v2.0.9

Fixes to proxy related issues

v2.0.8

Improvements to retryability if an error is encountered during artifact download

... (truncated)

Commits

fa0a91b Merge pull request #341 from actions/robherley/bump-pkgs
b54d088 Update @actions/artifact version, bump dependencies
65a9edc Merge pull request #325 from bethanyj28/main
fdd1595 licensed
c13dba1 update @actions/artifact dependency
0daa75e Merge pull request #324 from actions/eggyhead/use-artifact-v2.1.6
9c19ed7 Merge branch 'main' into eggyhead/use-artifact-v2.1.6
3d3ea87 updating license
89af5db updating artifact package v2.1.6
b4aefff Merge pull request #323 from actions/eggyhead/update-artifact-v215
Additional commits viewable in compare view

Updates softprops/action-gh-release from 0.1.14 to 2.0.8

Release notes

Sourced from softprops/action-gh-release's releases.

v2.0.8

What's Changed

Other Changes 🔄

chore(deps): bump prettier from 2.8.0 to 3.3.3 by @dependabot in softprops/action-gh-release#480

chore(deps): bump @types/node from 20.14.9 to 20.14.11 by @dependabot in softprops/action-gh-release#483

chore(deps): bump @octokit/plugin-throttling from 9.3.0 to 9.3.1 by @dependabot in softprops/action-gh-release#484

chore(deps): bump glob from 10.4.2 to 11.0.0 by @dependabot in softprops/action-gh-release#477

refactor: write jest config in ts by @chenrui333 in softprops/action-gh-release#485

chore(deps): bump @actions/github from 5.1.1 to 6.0.0 by @dependabot in softprops/action-gh-release#470

Full Changelog: softprops/action-gh-release@v2...v2.0.8

v2.0.7

What's Changed

Bug fixes 🐛

Fix missing update release body by @FirelightFlagboy in softprops/action-gh-release#365

Other Changes 🔄

Bump @octokit/plugin-retry from 4.0.3 to 7.1.1 by @dependabot in softprops/action-gh-release#443

Bump typescript from 4.9.5 to 5.5.2 by @dependabot in softprops/action-gh-release#467

Bump @types/node from 20.14.6 to 20.14.8 by @dependabot in softprops/action-gh-release#469

Bump @types/node from 20.14.8 to 20.14.9 by @dependabot in softprops/action-gh-release#473

Bump typescript from 5.5.2 to 5.5.3 by @dependabot in softprops/action-gh-release#472

Bump ts-jest from 29.1.5 to 29.2.2 by @dependabot in softprops/action-gh-release#479

docs: document that existing releases are updated by @jvanbruegge in softprops/action-gh-release#474

New Contributors

@jvanbruegge made their first contribution in softprops/action-gh-release#474

@FirelightFlagboy made their first contribution in softprops/action-gh-release#365

Full Changelog: softprops/action-gh-release@v2.0.6...v2.0.7

v2.0.6

maintenance release with updated dependencies

v2.0.5

Factor in file names with spaces when upserting files #446 via @MystiPanda

Improvements to error handling #449 via @till

v2.0.4

Minor follow up to #417. #425

v2.0.2

Revisit approach to #384 making unresolved pattern failures opt-in #417

v2.0.1

Add support for make_latest property softprops/action-gh-release#304 via @samueljseay

... (truncated)

Changelog

Sourced from softprops/action-gh-release's changelog.

2.0.8

Other Changes 🔄

chore(deps): bump prettier from 2.8.0 to 3.3.3 by @dependabot in softprops/action-gh-release#480

chore(deps): bump @types/node from 20.14.9 to 20.14.11 by @dependabot in softprops/action-gh-release#483

chore(deps): bump @octokit/plugin-throttling from 9.3.0 to 9.3.1 by @dependabot in softprops/action-gh-release#484

chore(deps): bump glob from 10.4.2 to 11.0.0 by @dependabot in softprops/action-gh-release#477

refactor: write jest config in ts by @chenrui333 in softprops/action-gh-release#485

chore(deps): bump @actions/github from 5.1.1 to 6.0.0 by @dependabot in softprops/action-gh-release#470

2.0.7

Bug fixes 🐛

Fix missing update release body by @FirelightFlagboy in softprops/action-gh-release#365

Other Changes 🔄

Bump @octokit/plugin-retry from 4.0.3 to 7.1.1 by @dependabot in softprops/action-gh-release#443

Bump typescript from 4.9.5 to 5.5.2 by @dependabot in softprops/action-gh-release#467

Bump @types/node from 20.14.6 to 20.14.8 by @dependabot in softprops/action-gh-release#469

Bump @types/node from 20.14.8 to 20.14.9 by @dependabot in softprops/action-gh-release#473

Bump typescript from 5.5.2 to 5.5.3 by @dependabot in softprops/action-gh-release#472

Bump ts-jest from 29.1.5 to 29.2.2 by @dependabot in softprops/action-gh-release#479

docs: document that existing releases are updated by @jvanbruegge in softprops/action-gh-release#474

2.0.6

maintenance release with updated dependencies

2.0.5

Factor in file names with spaces when upserting files #446 via @MystiPanda

Improvements to error handling #449 via @till

2.0.4

Minor follow up to #417. #425

2.0.3

Declare make_latest as an input field in action.yml #419

2.0.2

Revisit approach to #384 making unresolved pattern failures opt-in #417

2.0.1

Add support for make_latest property #304 via @samueljseay

... (truncated)

Commits

c062e08 release 2.0.8
380635c chore(deps): bump @actions/github from 5.1.1 to 6.0.0 (#470)

Bumps the gha-dependencies group with 7 updates: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `2` | `4` | | [actions/setup-python](https://github.com/actions/setup-python) | `2` | `5` | | [docker/metadata-action](https://github.com/docker/metadata-action) | `4` | `5` | | [docker/login-action](https://github.com/docker/login-action) | `2` | `3` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `2` | `4` | | [actions/download-artifact](https://github.com/actions/download-artifact) | `2` | `4` | | [softprops/action-gh-release](https://github.com/softprops/action-gh-release) | `0.1.14` | `2.0.8` | Updates `actions/checkout` from 2 to 4 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@v2...v4) Updates `actions/setup-python` from 2 to 5 - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](actions/setup-python@v2...v5) Updates `docker/metadata-action` from 4 to 5 - [Release notes](https://github.com/docker/metadata-action/releases) - [Upgrade guide](https://github.com/docker/metadata-action/blob/master/UPGRADE.md) - [Commits](docker/metadata-action@v4...v5) Updates `docker/login-action` from 2 to 3 - [Release notes](https://github.com/docker/login-action/releases) - [Commits](docker/login-action@v2...v3) Updates `actions/upload-artifact` from 2 to 4 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@v2...v4) Updates `actions/download-artifact` from 2 to 4 - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](actions/download-artifact@v2...v4) Updates `softprops/action-gh-release` from 0.1.14 to 2.0.8 - [Release notes](https://github.com/softprops/action-gh-release/releases) - [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md) - [Commits](softprops/action-gh-release@v0.1.14...v2.0.8) --- updated-dependencies: - dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-major dependency-group: gha-dependencies - dependency-name: actions/setup-python dependency-type: direct:production update-type: version-update:semver-major dependency-group: gha-dependencies - dependency-name: docker/metadata-action dependency-type: direct:production update-type: version-update:semver-major dependency-group: gha-dependencies - dependency-name: docker/login-action dependency-type: direct:production update-type: version-update:semver-major dependency-group: gha-dependencies - dependency-name: actions/upload-artifact dependency-type: direct:production update-type: version-update:semver-major dependency-group: gha-dependencies - dependency-name: actions/download-artifact dependency-type: direct:production update-type: version-update:semver-major dependency-group: gha-dependencies - dependency-name: softprops/action-gh-release dependency-type: direct:production update-type: version-update:semver-major dependency-group: gha-dependencies ... Signed-off-by: dependabot[bot] <[email protected]>

for more information, see https://pre-commit.ci

dependabot bot added the dependencies Pull requests that update a dependency file label Jul 19, 2024

dependabot bot force-pushed the dependabot/github_actions/gha-dependencies-5c4cf31c5b branch from 873f913 to 61516b3 Compare September 1, 2024 09:40

[pre-commit.ci] auto fixes from pre-commit.com hooks

fa63a2e

for more information, see https://pre-commit.ci

unkcpz force-pushed the main branch from f6f9742 to 38e5ebd Compare December 3, 2024 15:01

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the gha-dependencies group with 7 updates #241

Bump the gha-dependencies group with 7 updates #241

Uh oh!

dependabot bot commented on behalf of github Jul 19, 2024 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

New	Unchanged	Removed
`tags`	`images`	`tag-sha`
`flavor`	`sep-tags`	`tag-edge`
`labels`	`sep-labels`	`tag-edge-branch`
		`tag-semver`
		`tag-match`
		`tag-match-group`
		`tag-latest`
		`tag-schedule`
		`tag-custom`
		`tag-custom-only`
		`label-custom`

Bump the gha-dependencies group with 7 updates #241

Are you sure you want to change the base?

Bump the gha-dependencies group with 7 updates #241

Uh oh!

Conversation

dependabot bot commented on behalf of github Jul 19, 2024 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v4.0.0

What's Changed

New Contributors

v3.6.0

What's Changed

New Contributors

v3.5.3

What's Changed

New Contributors

v3.5.2

What's Changed

v3.5.1

What's Changed

New Contributors

Changelog

v4.1.7

v4.1.6

v4.1.5

v4.1.4

v4.1.3

v4.1.2

v4.1.1

v4.1.0

v4.0.0

v3.6.0

v3.5.3

v5.0.0

What's Changed

v4.8.0

What's Changed

New Contributors

v4.7.1

What's Changed

v4.7.0

v5.0.0

v4.6.0

v4.5.0

v4.4.0

v4.3.0

v4.2.0

v4.1.1

Upgrade notes

v2 to v3

v1 to v2

inputs

tag-sha

tag-edge / tag-edge-branch

v3.0.0

v2.2.0

v2.1.0

v4.0.0

What's Changed

New Contributors

v3.1.3

What's Changed

v3.1.2

v3.1.1

v3.1.0

What's Changed

v3.0.0

What's Changed

Breaking Changes

v2.3.1

v2.3.0 Upload Artifact

v4.0.0

What's Changed

New Contributors

v3.0.2

v3.0.1

v3.0.0

What's Changed

Breaking Changes

v2.1.1

dependabot bot commented on behalf of github Jul 19, 2024 •

edited

Loading

`tag-sha`

`tag-edge` / `tag-edge-branch`