build(deps): bump the github-actions group across 1 directory with 4 updates - #2
Closed
dependabot[bot] wants to merge 1 commit into
Closed
Conversation
dependabot
Bot
added
dependencies
…updates Bumps the github-actions group with 4 updates in the / directory: [actions/checkout](https://github.com/actions/checkout), [actions/configure-pages](https://github.com/actions/configure-pages), [actions/upload-pages-artifact](https://github.com/actions/upload-pages-artifact) and [actions/deploy-pages](https://github.com/actions/deploy-pages). Updates `actions/checkout` from 4 to 7 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@v4...v7) Updates `actions/configure-pages` from 5 to 6 - [Release notes](https://github.com/actions/configure-pages/releases) - [Commits](actions/configure-pages@v5...v6) Updates `actions/upload-pages-artifact` from 3 to 5 - [Release notes](https://github.com/actions/upload-pages-artifact/releases) - [Commits](actions/upload-pages-artifact@v3...v5) Updates `actions/deploy-pages` from 4 to 5 - [Release notes](https://github.com/actions/deploy-pages/releases) - [Commits](actions/deploy-pages@v4...v5) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/configure-pages dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/deploy-pages dependency-version: '5' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/upload-pages-artifact dependency-version: '5' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
changed the title
dependabot
Bot
force-pushed
the
dependabot/github_actions/github-actions-b0477e0607
branch
from
July 15, 2026 08:54
3e36a77 to
f14dbd1
Compare
Contributor
Author
|
Looks like these dependencies are updatable in another way, so this is no longer needed. |
dependabot
Bot
deleted the
dependabot/github_actions/github-actions-b0477e0607
branch
July 16, 2026 07:47
thomas-mangin
added a commit
that referenced
this pull request
Aug 22, 2026
Phase 6 of spec-record-answers-2-only-encoding, first of three. A record line's payload becomes a counted text: the three-letter kind, a space, the byte count of the payload, and then that many bytes. A reader slices the payload by arithmetic and never looks for the end of the line, which was the last scan left on the line that repeats. The owner's directive put the length after the token and before the content, and the shape is the counted text every other variable field already uses. `#2:42 row {"peer":"10.0.0.1"}` becomes `#2:42 row 2:19:{"peer":"10.0.0.1"}`, and the fault line follows it. appendAnswerRecordPrefix is the one writer of everything in front of the payload, and AnswerRecordLineSize measures a line by calling it, so a measured line and a written one cannot drift. answerRecordPrefixMax becomes answerRecordPrefixWidth and it is EXACT rather than a maximum: the id field at its widest, the kind token, the space that closes it, the counted number stating the payload's byte count, and the colon that closes that count. 51 bytes, arithmetic from five parts that each state their own bound. TestAnswerRecordLineSizeExact states EQUALITY against the widest prefix the writer can produce, which is what phase 5 could not do: a LOOSER constant costs nothing a running test can see, so a bound would have left the loose direction unproven. cutCountedBytes is cutCountedText for a value held as bytes, and it exists for the reason appendCountedBytes does: a record's payload reaches and leaves the wire without being copied into a string, on the line that repeats. countedDigits carries the refusals both readers share, so a malformed length is refused in one place. parseAnswerRecord then requires the line to END where the payload ends, which is the check the stated count buys and which the next commit turns into the frame's own guarantee. Two other speakers of this wire follow. test/scripts/ze_api.py writes the counted payload from _respond_answer and reads it through the new public answer_record_payload, which refuses a line carrying bytes past its payload. internal/exabgp/bridge needs no change here: it dispatches on the kind and decodes no record payload. test/plugin/answer-first-bounds-long-walk.ci is new. It proves the pipe still bounds a walk of 407 records to 10 after the reframe, and that the bound reaches the ENCODER rather than the rendering: the unbounded walk passes the 256-record threshold and `| ndjson` writes one line per record, while the same walk bounded to ten fits the threshold, is answered as one document, and writes that one line. It then compares the ten records against the walk's own records byte for byte. Mutation-verified, one mutation per guard. Writing the payload without its count reddens TestAppendAnswerRecordNoKey and TestAnswerRecordLineSizeExact, and reddens answer-many-records and answer-unconditional over the wire. A constant one byte loose reddens TestAnswerRecordLineSizeExact and leaves TestAnswerRecordLineSizeAllocatesNothing green, which is the direction phase 5 named as undiscriminated. A size that forgets the counted header reddens TestAnswerRecordLineSizeExact. Dropping parseAnswerRecord's trailing-byte refusal reddens TestAppendAnswerRecordNoKey. Making the `first` pipe pass its records through reddens answer-first-bounds-long-walk. In the Python harness, writing the record uncounted reddens plugin-pipe-alias-help. AC-18 and TestEnvelopeKeyOverLimitRefused are retired rather than implemented. They cap the envelope key and the error code at 35 bytes, and that cap existed only because the spec assumed a short length form. A counted text states its byte count as a counted number, so it carries a value of any length and nothing is capped by its own encoding. Neither was ever implemented: `grep -rn "envelopeKeyMax" --include=*.go .` returns nothing. replaceNewlines still rewrites a newline inside a value here. Deleting it needs the frame to stop splitting on a newline it does not own, which is the third commit. The second drops the id's length prefix, which the owner ruled on mid-phase after measuring it slower and two bytes wider than the plain `#42 ` a fused loop reads.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the github-actions group with 4 updates in the / directory: actions/checkout, actions/configure-pages, actions/upload-pages-artifact and actions/deploy-pages.
Updates
actions/checkoutfrom 4 to 7Release notes
Sourced from actions/checkout's releases.
... (truncated)
Changelog
Sourced from actions/checkout's changelog.
... (truncated)
Commits
9c091bbupdate error wording (#2467)1044a6dgetting ready for checkout v7 release (#2464)f028218Bump the minor-npm-dependencies group across 1 directory with 3 updates (#2462)d914b26upgrade module to esm and update dependencies (#2463)537c7efBump@actions/coreand@actions/tool-cacheand Remove uuid (#2459)130a169Bump js-yaml from 4.1.0 to 4.2.0 (#2461)7d09575Bump flatted from 3.3.1 to 3.4.2 (#2460)0f9f3aaBump actions/publish-immutable-action (#2458)f9e715ablock checking out fork pr for pull_request_target and workflow_run (#2454)df4cb1cUpdate changelog for v6.0.3 (#2446)Updates
actions/configure-pagesfrom 5 to 6Release notes
Sourced from actions/configure-pages's releases.
Commits
45bfe01Merge pull request #186 from salmanmkc/node24d8770c2Update Node version from 20 to 24 in action.ymlcb8a1a3upgrade to node 24d560657Merge pull request #165 from actions/Jcambass-patch-135e0ac4Upgrade IA Publish1dfbcbfMerge pull request #163 from actions/Jcambass-patch-12f4f988Add workflow file for publishing releases to immutable action package0d7570cMerge pull request #162 from actions/pin-draft-release-verssion3ea1966pin draft release versionaabcbc4Merge pull request #160 from actions/dependabot/npm_and_yarn/espree-10.1.0Updates
actions/upload-pages-artifactfrom 3 to 5Release notes
Sourced from actions/upload-pages-artifact's releases.
Commits
fc324d3Merge pull request #139 from Tom-van-Woudenberg/patch-1fe9d4b7Merge branch 'main' into patch-10ca1617Merge pull request #137 from jonchurch/include-hidden-files57f0e84Update action.yml4a90348v7 --> hash56f665aUpdate upload-artifact action to version 7f7615f5Addinclude-hidden-filesinput7b1f4a7Merge pull request #127 from heavymachinery/pin-sha4cc19c7Pinactions/upload-artifactto SHA2d163beMerge pull request #107 from KittyChiu/mainUpdates
actions/deploy-pagesfrom 4 to 5Release notes
Sourced from actions/deploy-pages's releases.
... (truncated)
Commits
cd2ce8fMerge pull request #404 from salmanmkc/node24bbe2a95Update Node.js version to 24.x854d7aaMerge pull request #374 from actions/Jcambass-patch-1306bb81Add workflow file for publishing releases to immutable action packageb742728Merge pull request #360 from actions/dependabot/npm_and_yarn/npm_and_yarn-513...7273294Bump braces in the npm_and_yarn group across 1 directory963791fMerge pull request #361 from actions/dependabot-friendly51bb29dMake the rebuild dist workflow safer for Dependabot89f3d10Merge pull request #358 from actions/dependabot/npm_and_yarn/non-breaking-cha...bce7355Merge branch 'main' into dependabot/npm_and_yarn/non-breaking-changes-99c12deb21