build(deps): bump the cicd group across 1 directory with 6 updates - #3017
Open
dependabot[bot] wants to merge 6 commits into
Open
build(deps): bump the cicd group across 1 directory with 6 updates#3017dependabot[bot] wants to merge 6 commits into
dependabot[bot] wants to merge 6 commits into
Conversation
Bumps the cicd group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `6.0.2` | `6.1.0` | | [runs-on/action](https://github.com/runs-on/action) | `2.2.0` | `2.3.0` | | [cloudposse/.github/.github/workflows/shared-release-branches.yml](https://github.com/cloudposse/.github) | `0.167.3` | `0.168.0` | | [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) | `4.37.4` | `4.37.7` | | [cloudposse/.github/.github/workflows/shared-go-auto-release.yml](https://github.com/cloudposse/.github) | `0.167.3` | `0.168.0` | | [cloudposse/github-action-setup-atmos](https://github.com/cloudposse/github-action-setup-atmos) | `3.2.0` | `3.5.0` | Updates `actions/checkout` from 6.0.2 to 6.1.0 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@v6.0.2...d23441a) Updates `runs-on/action` from 2.2.0 to 2.3.0 - [Release notes](https://github.com/runs-on/action/releases) - [Commits](runs-on/action@4e5f723...46910bf) Updates `cloudposse/.github/.github/workflows/shared-release-branches.yml` from 0.167.3 to 0.168.0 - [Release notes](https://github.com/cloudposse/.github/releases) - [Commits](cloudposse/.github@49ac8cd...3911c66) Updates `github/codeql-action/upload-sarif` from 4.37.4 to 4.37.7 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@v4.37.4...ff2f1c6) Updates `cloudposse/.github/.github/workflows/shared-go-auto-release.yml` from 0.167.3 to 0.168.0 - [Release notes](https://github.com/cloudposse/.github/releases) - [Commits](cloudposse/.github@49ac8cd...3911c66) Updates `cloudposse/github-action-setup-atmos` from 3.2.0 to 3.5.0 - [Release notes](https://github.com/cloudposse/github-action-setup-atmos/releases) - [Commits](cloudposse/github-action-setup-atmos@89c34b2...60878d4) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 6.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cicd - dependency-name: runs-on/action dependency-version: 2.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cicd - dependency-name: cloudposse/.github/.github/workflows/shared-release-branches.yml dependency-version: 0.168.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cicd - dependency-name: github/codeql-action/upload-sarif dependency-version: 4.37.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cicd - dependency-name: cloudposse/.github/.github/workflows/shared-go-auto-release.yml dependency-version: 0.168.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cicd - dependency-name: cloudposse/github-action-setup-atmos dependency-version: 3.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cicd ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
Contributor
Author
LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
dependabot
Bot
added
no-release
Contributor
|
Tip Atmos Pro
No affected stacks workflow was detected for this pull request. 
|
github-actions
Bot
added
size/s
|
Warning SHA Pin Verification Passed — with documented exceptionsAll 229 third-party action reference(s) are covered, but 2 rely on a documented allowlist entry in
See the action run for full details. |
Dependency Review✅ No vulnerabilities or license issues found.Scanned Files
|
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## main #3017 +/- ##
==========================================
- Coverage 83.61% 83.61% -0.01%
==========================================
Files 1933 1933
Lines 189461 189461
==========================================
- Hits 158418 158410 -8
- Misses 23131 23136 +5
- Partials 7912 7915 +3
Flags with carried forward coverage won't be shown. Click here to find out more. 🚀 New features to boost your workflow:
|
Contributor
|
Important Cloud Posse Engineering Team Review RequiredThis pull request modifies files that require Cloud Posse's review. Please be patient, and a core maintainer will review your changes. To expedite this process, reach out to us on Slack in the |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the cicd group with 6 updates in the / directory:
6.0.26.1.02.2.02.3.00.167.30.168.04.37.44.37.70.167.30.168.03.2.03.5.0Updates
actions/checkoutfrom 6.0.2 to 6.1.0Release notes
Sourced from actions/checkout's releases.
Changelog
Sourced from actions/checkout's changelog.
... (truncated)
Commits
d23441abackport fixes to releases-v6 (#2527)f93ca50backportallow-unsafe-pr-checkoutto v6 (#2500)df4cb1cUpdate changelog for v6.0.3 (#2446)1cce339Fix checkout init for SHA-256 repositories (#2439)900f221fix: expand merge commit SHA regex and add SHA-256 test cases (#2414)0c366fdUpdate changelog (#2357)Updates
runs-on/actionfrom 2.2.0 to 2.3.0Release notes
Sourced from runs-on/action's releases.
Commits
46910bfdist: rebuild binaries for v2.3.0f729357Merge branch 'main' into v202347f1Bump README to v2.3.03321413Rebuild action binaries10fb12cAllow verified Windows sticky mount roots6377b28Refactor sticky cache runtime state (#46)76f7eafdist: rebuild binariesbaa006cAuthenticate read-only Git LFS lock requestsd5c5d9fRebuild action binariesfd25aafFix warm cache symlink mergesUpdates
cloudposse/.github/.github/workflows/shared-release-branches.ymlfrom 0.167.3 to 0.168.0Release notes
Sourced from cloudposse/.github/.github/workflows/shared-release-branches.yml's releases.
... (truncated)
Commits
3911c66Remove inf1/inf2/trn1 from RunsOn default spot instance families (#275)5b63235Update actions/checkout action to v7 (#258)1e4596dUpdate actions/upload-artifact action to v7 (#269)c8b0897Update cloudposse/github-action-auto-release action to v4.0.1 (#268)40513aeUpdate actions/checkout action to v4.4.0 (#130)Updates
github/codeql-action/upload-sariffrom 4.37.4 to 4.37.7Release notes
Sourced from github/codeql-action/upload-sarif's releases.
Changelog
Sourced from github/codeql-action/upload-sarif's changelog.
... (truncated)
Commits
ff2f1c6Merge pull request #4093 from github/update-v4.37.7-be7a3dbb8951a133Update changelog for v4.37.7be7a3dbMerge pull request #4087 from github/dependabot/npm_and_yarn/npm-minor-0aa561...9310334Merge pull request #4086 from github/mbg/thread-action-state-to-codeqlb4d8a54Rebuildab5db25Bump the npm-minor group across 1 directory with 8 updates38055a3DroploggerfromdatabaseInitClusterin interface1f87aedMerge pull request #4085 from github/update-bundle/codeql-bundle-v2.26.3dc1b98aMakeloggeravailable togetCodeQLForCmd6f0220eMerge pull request #4084 from github/navntoft/bump-undiciUpdates
cloudposse/.github/.github/workflows/shared-go-auto-release.ymlfrom 0.167.3 to 0.168.0Release notes
Sourced from cloudposse/.github/.github/workflows/shared-go-auto-release.yml's releases.
... (truncated)
Commits
3911c66Remove inf1/inf2/trn1 from RunsOn default spot instance families (#275)5b63235Update actions/checkout action to v7 (#258)1e4596dUpdate actions/upload-artifact action to v7 (#269)c8b0897Update cloudposse/github-action-auto-release action to v4.0.1 (#268)40513aeUpdate actions/checkout action to v4.4.0 (#130)Updates
cloudposse/github-action-setup-atmosfrom 3.2.0 to 3.5.0Release notes
Sourced from cloudposse/github-action-setup-atmos's releases.
... (truncated)
Commits
60878d4chore(deps): update dependency eslint to v10 (#89)af6b379chore(deps): update dependency eslint-plugin-sort-destructure-keys to v1.6.0 ...bad040achore(deps): update dependency@actions/githubto v6.0.1 (#109)5f4eb9cchore: update README.mded3a8a9chore(deps): update dependency eslint to v8.57.1 (#113)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions