llvm-project
llvm-project copied to clipboard
Bump the github-actions group with 10 updates
Bumps the github-actions group with 10 updates:
Package | From | To |
---|---|---|
actions/checkout | 3.1.0 |
4.1.1 |
tj-actions/changed-files | 39 |
42 |
actions/setup-python | 4 |
5 |
actions/upload-artifact | 3 |
4 |
actions/download-artifact | 3 |
4 |
actions/setup-node | 3 |
4 |
actions/github-script | 6 |
7 |
actions/labeler | 4 |
5 |
ossf/scorecard-action | 2.1.2 |
2.3.1 |
github/codeql-action | 2.2.4 |
3.23.1 |
Updates actions/checkout
from 3.1.0 to 4.1.1
Release notes
Sourced from actions/checkout's releases.
v4.1.1
What's Changed
- Update CODEOWNERS to Launch team by
@joshmgross
in actions/checkout#1510- Correct link to GitHub Docs by
@peterbe
in actions/checkout#1511- Link to release page from what's new section by
@cory-miller
in actions/checkout#1514New Contributors
@joshmgross
made their first contribution in actions/checkout#1510@peterbe
made their first contribution in actions/checkout#1511Full Changelog: https://github.com/actions/checkout/compare/v4.1.0...v4.1.1
v4.1.0
What's Changed
- Update README.md for V4 by
@sivapalan
in actions/checkout#1452- Add support for partial checkout filters by
@finleygn
in actions/checkout#1396- Prepare 4.1.0 release by
@cory-miller
in actions/checkout#1496New Contributors
@sivapalan
made their first contribution in actions/checkout#1452@finleygn
made their first contribution in actions/checkout#1396Full Changelog: https://github.com/actions/checkout/compare/v4.0.0...v4.1.0
v4.0.0
What's Changed
- Update default runtime to node20 by
@takost
in actions/checkout#1436- Support fetching without the --progress option by
@simonbaird
in actions/checkout#1067- Release 4.0.0 by
@takost
in actions/checkout#1447New Contributors
@takost
made their first contribution in actions/checkout#1436@simonbaird
made their first contribution in actions/checkout#1067Full Changelog: https://github.com/actions/checkout/compare/v3...v4.0.0
v3.6.0
What's Changed
- Mark test scripts with Bash'isms to be run via Bash by
@dscho
in actions/checkout#1377- Add option to fetch tags even if fetch-depth > 0 by
@RobertWieczoreck
in actions/checkout#579- Release 3.6.0 by
@luketomlinson
in actions/checkout#1437New Contributors
@RobertWieczoreck
made their first contribution in actions/checkout#579@luketomlinson
made their first contribution in actions/checkout#1437Full Changelog: https://github.com/actions/checkout/compare/v3.5.3...v3.6.0
v3.5.3
What's Changed
... (truncated)
Commits
b4ffde6
Link to release page from what's new section (#1514)8530928
Correct link to GitHub Docs (#1511)7cdaf2f
Update CODEOWNERS to Launch team (#1510)8ade135
Prepare 4.1.0 release (#1496)c533a0a
Add support for partial checkout filters (#1396)72f2cec
Update README.md for V4 (#1452)3df4ab1
Release 4.0.0 (#1447)8b5e8b7
Support fetching without the --progress option (#1067)97a652b
Update default runtime to node20 (#1436)f43a0e5
Release 3.6.0 (#1437)- Additional commits viewable in compare view
Updates tj-actions/changed-files
from 39 to 42
Release notes
Sourced from tj-actions/changed-files's releases.
v42
Changes in v42.0.0
🔥🔥 BREAKING CHANGE 🔥🔥
- Input file patterns that end with a
/
would now match all sub-files within the directory without requiring you to specify the globstar pattern.... - name: Get changed files id: changed-files uses: tj-actions/changed-files@v42 with: files: 'dir/' # Would also be the same as dir/**
What's Changed
- Upgraded to v41.1.2 by
@tj-actions-bot
in tj-actions/changed-files#1869- chore(deps): update dependency prettier to v3.2.4 by
@renovate
in tj-actions/changed-files#1871- fix: update input warning by
@jackton1
in tj-actions/changed-files#1870- rename: unsupported REST API inputs constant name by
@jackton1
in tj-actions/changed-files#1872- feat: add support for include/exclude all nested files when a directory is specified and ends with a slash by
@jackton1
in tj-actions/changed-files#1873Full Changelog: https://github.com/tj-actions/changed-files/compare/v41...v42.0.0
v42.0.0
🔥🔥 BREAKING CHANGE 🔥🔥
- Input file patterns that end with a
/
would now match all sub-files within the directory without requiring you to specify the globstar pattern.... - name: Get changed files id: changed-files uses: tj-actions/changed-files@v42 with: files: 'dir/' # Would also be the same as dir/**
What's Changed
- Upgraded to v41.1.2 by
@tj-actions-bot
in tj-actions/changed-files#1869- chore(deps): update dependency prettier to v3.2.4 by
@renovate
in tj-actions/changed-files#1871- fix: update input warning by
@jackton1
in tj-actions/changed-files#1870- rename: unsupported REST API inputs constant name by
@jackton1
in tj-actions/changed-files#1872- feat: add support for include/exclude all nested files when a directory is specified and ends with a slash by
@jackton1
in tj-actions/changed-files#1873
... (truncated)
Changelog
Sourced from tj-actions/changed-files's changelog.
Changelog
42.0.0 - (2024-01-18)
🚀 Features
- Add support for include/exclude all nested files when a directory is specified and ends with a slash (#1873) (ae82ed4) - (Tonye Jack)
🐛 Bug Fixes
📝 Rename
⚙️ Miscellaneous Tasks
- deps: Update dependency prettier to v3.2.4 (79b060d) - (renovate[bot])
⬆️ Upgrades
- Upgraded to v41.1.2 (#1869)
Co-authored-by: jackton1 [email protected] (434b67e) - (tj-actions[bot])
41.1.2 - (2024-01-17)
🚀 Features
🐛 Bug Fixes
⚙️ Miscellaneous Tasks
- deps: Update dependency
@types/node
to v20.11.5 (cbda684) - (renovate[bot])- deps: Update dependency prettier to v3.2.3 (67a1f54) - (renovate[bot])
- deps: Update tj-actions/eslint-changed-files action to v22 (#1864) (99248a4) - (renovate[bot])
- deps: Update dependency
@types/node
to v20.11.4 (8787431) - (renovate[bot])- deps: Update dependency
@types/node
to v20.11.3 (98d1d84) - (renovate[bot])- deps: Update typescript-eslint monorepo to v6.19.0 (bc46e4c) - (renovate[bot])
- deps: Update dependency
@types/node
to v20.11.2 (fba4067) - (renovate[bot])- deps: Update dependency
@types/node
to v20.11.1 (e4b8674) - (renovate[bot])- deps: Lock file maintenance (bc2b5ae) - (renovate[bot])
- deps: Update dependency prettier to v3.2.2 (63c36a5) - (renovate[bot])
⬆️ Upgrades
... (truncated)
Commits
ae82ed4
feat: add support for include/exclude all nested files when a directory is sp...cbd5907
rename: unsupported REST API inputs constant name (#1872)6c9dcea
fix: update input warning (#1870)79b060d
chore(deps): update dependency prettier to v3.2.4434b67e
Upgraded to v41.1.2 (#1869)cbda684
chore(deps): update dependency@types/node
to v20.11.53f81899
fix: bug with incorrect action path (#1866)67a1f54
chore(deps): update dependency prettier to v3.2.399248a4
chore(deps): update tj-actions/eslint-changed-files action to v22 (#1864)8787431
chore(deps): update dependency@types/node
to v20.11.4- Additional commits viewable in compare view
Updates actions/setup-python
from 4 to 5
Release notes
Sourced from actions/setup-python's releases.
v5.0.0
What's Changed
In scope of this release, we update node version runtime from node16 to node20 (actions/setup-python#772). Besides, we update dependencies to the latest versions.
Full Changelog: https://github.com/actions/setup-python/compare/v4.8.0...v5.0.0
v4.8.0
What's Changed
In scope of this release we added support for GraalPy (actions/setup-python#694). You can use this snippet to set up GraalPy:
steps: - uses: actions/checkout@v4 - uses: actions/setup-python@v4 with: python-version: 'graalpy-22.3' - run: python my_script.py
Besides, the release contains such changes as:
- Trim python version when reading from file by
@FerranPares
in actions/setup-python#628- Use non-deprecated versions in examples by
@jeffwidman
in actions/setup-python#724- Change deprecation comment to past tense by
@jeffwidman
in actions/setup-python#723- Bump
@babel/traverse
from 7.9.0 to 7.23.2 by@dependabot
in actions/setup-python#743- advanced-usage.md: Encourage the use actions/checkout@v4 by
@cclauss
in actions/setup-python#729- Examples now use checkout@v4 by
@simonw
in actions/setup-python#738- Update actions/checkout to v4 by
@dmitry-shibanov
in actions/setup-python#761New Contributors
@FerranPares
made their first contribution in actions/setup-python#628@timfel
made their first contribution in actions/setup-python#694@jeffwidman
made their first contribution in actions/setup-python#724Full Changelog: https://github.com/actions/setup-python/compare/v4...v4.8.0
v4.7.1
What's Changed
- Bump word-wrap from 1.2.3 to 1.2.4 by
@dependabot
in actions/setup-python#702- Add range validation for toml files by
@dmitry-shibanov
in actions/setup-python#726Full Changelog: https://github.com/actions/setup-python/compare/v4...v4.7.1
v4.7.0
In scope of this release, the support for reading python version from pyproject.toml was added (actions/setup-python#669).
- name: Setup Python uses: actions/setup-python@v4 </tr></table>
... (truncated)
Commits
0a5c615
Update action to node20 (#772)0ae5836
Add example of GraalPy to docs (#773)b64ffca
update actions/checkout to v4 (#761)8d28961
Examples now use checkout@v4 (#738)7bc6abb
advanced-usage.md: Encourage the use actions/checkout@v4 (#729)e8111ce
Bump@babel/traverse
from 7.9.0 to 7.23.2 (#743)a00ea43
add fix for graalpy ci (#741)8635b1c
Change deprecation comment to past tense (#723)f6cc428
Use non-deprecated versions in examples (#724)5f2af21
Add GraalPy support (#694)- Additional commits viewable in compare view
Updates actions/upload-artifact
from 3 to 4
Release notes
Sourced from actions/upload-artifact's releases.
v4.0.0
What's Changed
The release of upload-artifact@v4 and download-artifact@v4 are major changes to the backend architecture of Artifacts. They have numerous performance and behavioral improvements.
ℹ️ However, this is a major update that includes breaking changes. Artifacts created with versions v3 and below are not compatible with the v4 actions. Uploads and downloads must use the same major actions versions. There are also key differences from previous versions that may require updates to your workflows.
For more information, please see:
- The changelog post.
- The README.
- The migration documentation.
- As well as the underlying npm package,
@actions/artifact
documentation.New Contributors
@vmjoseph
made their first contribution in actions/upload-artifact#464Full Changelog: https://github.com/actions/upload-artifact/compare/v3...v4.0.0
v3.1.3
What's Changed
- chore(github): remove trailing whitespaces by
@ljmf00
in actions/upload-artifact#313- Bump
@actions/artifact
version to v1.1.2 by@bethanyj28
in actions/upload-artifact#436Full Changelog: https://github.com/actions/upload-artifact/compare/v3...v3.1.3
v3.1.2
- Update all
@actions/*
NPM packages to their latest versions- #374- Update all dev dependencies to their most recent versions - #375
v3.1.1
- Update actions/core package to latest version to remove
set-output
deprecation warning #351v3.1.0
What's Changed
- Bump
@actions/artifact
to v1.1.0 (actions/upload-artifact#327)
- Adds checksum headers on artifact upload (actions/toolkit#1095) (actions/toolkit#1063)
Commits
694cdab
Merge pull request #501 from actions/robherley/overwrite-artifact05d4fe6
run licensed against version that matches ci40b3052
update readme49552fc
add overwrite tests to workflow7961590
licensed cache11ff42c
add new overwrite input & docs1eb3cb2
Merge pull request #497 from actions/robherley/update-readme-limit8688a86
Update readme to reflect new artifact/job limit73d8b66
Support artifact-url output (#496)c320f57
Update README.md (#492)- Additional commits viewable in compare view
Updates actions/download-artifact
from 3 to 4
Release notes
Sourced from actions/download-artifact's releases.
v4.0.0
What's Changed
The release of upload-artifact@v4 and download-artifact@v4 are major changes to the backend architecture of Artifacts. They have numerous performance and behavioral improvements.
ℹ️ However, this is a major update that includes breaking changes. Artifacts created with versions v3 and below are not compatible with the v4 actions. Uploads and downloads must use the same major actions versions. There are also key differences from previous versions that may require updates to your workflows.
For more information, please see:
- The changelog post.
- The README.
- The migration documentation.
- As well as the underlying npm package,
@actions/artifact
documentation.New Contributors
@bflad
made their first contribution in actions/download-artifact#194Full Changelog: https://github.com/actions/download-artifact/compare/v3...v4.0.0
v3.0.2
- Bump
@actions/artifact
to v1.1.1 - actions/download-artifact#195- Fixed a bug in Node16 where if an HTTP download finished too quickly (<1ms, e.g. when it's mocked) we attempt to delete a temp file that has not been created yet actions/toolkit#1278
v3.0.1
Commits
6b208ae
Merge pull request #274 from actions/vmjoseph/timeout-patch6c5b580
only adding updated license5f5015d
readding index1fddaaf
Revert "updating licenses"8aa9e21
Revert "updating dist"657edd9
updating licenses555a2fc
updating dist4fc4d70
updating lock072ac9d
updating version no038dc03
updating version no- Additional commits viewable in compare view
Updates actions/setup-node
from 3 to 4
Release notes
Sourced from actions/setup-node's releases.
v4.0.0
What's Changed
In scope of this release we changed version of node runtime for action from node16 to node20 and updated dependencies in actions/setup-node#866
Besides, release contains such changes as:
- Upgrade actions/checkout to v4 by
@gmembre-zenika
in actions/setup-node#868- Update actions/checkout for documentation and yaml by
@dmitry-shibanov
in actions/setup-node#876New Contributors
@gmembre-zenika
made their first contribution in actions/setup-node#868Full Changelog: https://github.com/actions/setup-node/compare/v3...v4.0.0
v3.8.2
What's Changed
- Update semver by
@dmitry-shibanov
in actions/setup-node#861- Update temp directory creation by
@nikolai-laevskii
in actions/setup-node#859- Bump
@babel/traverse
from 7.15.4 to 7.23.2 by@dependabot
in actions/setup-node#870- Add notice about binaries not being updated yet by
@nikolai-laevskii
in actions/setup-node#872- Update toolkit cache and core by
@dmitry-shibanov
and@seongwon-privatenote
in actions/setup-node#875Full Changelog: https://github.com/actions/setup-node/compare/v3...v3.8.2
v3.8.1
What's Changed
In scope of this release, the filter was removed within the cache-save step by
@dmitry-shibanov
in actions/setup-node#831. It is filtered and checked in the toolkit/cache library.Full Changelog: https://github.com/actions/setup-node/compare/v3...v3.8.1
v3.8.0
What's Changed
Bug fixes:
- Add check for existing paths by
@dmitry-shibanov
in actions/setup-node#803- Resolve SymbolicLink by
@dmitry-shibanov
in actions/setup-node#809- Change passing logic for cache input by
@dmitry-shibanov
in actions/setup-node#816- Fix armv7 cache issue by
@louislam
in actions/setup-node#794- Update check-dist workflow name by
@sinchang
in actions/setup-node#710Feature implementations:
- feat: handling the case where "node" is used for tool-versions file. by
@xytis
in actions/setup-node#812Documentation changes:
- Refer to semver package name in README.md by
@olleolleolle
in actions/setup-node#808Update dependencies:
- Update toolkit cache to fix zstd by
@dmitry-shibanov
in actions/setup-node#804- Bump tough-cookie and
@azure/ms-rest-js
by@dependabot
in actions/setup-node#802- Bump semver from 6.1.2 to 6.3.1 by
@dependabot
in actions/setup-node#807
... (truncated)
Commits
b39b52d
Fix node-version-file interprets entire package.json as a version (#865)7247617
Addpackage.json
tonode-version-file
list of examples. (#879)f3ec4ca
Fix README.md (#898)ec97f37
Add fix for cache (#917)5ef044f
Update reusable workflows to use Node.js v20 (#889)c45882a
update to setup-node@v4 in docs (#884)ee36e8b
Ignore engines check in Yarn 1 e2e-cache tests (#882)8f152de
Update actions/checkout for documentation and yaml (#876)23755b5
upgrade actions/checkout to v4 (#868)54534a2
Change node version for action to node20 (#866)- See full diff in compare view
Updates actions/github-script
from 6 to 7
Release notes
Sourced from actions/github-script's releases.
v7.0.0
What's Changed
- Add base-url option by
@robandpdx
in actions/github-script#429- Expose async-function argument type by
@viktorlott
in actions/github-script#402, see for details https://github.com/actions/github-script#use-scripts-with-jsdoc-support- Update dependencies and use Node 20 by
@joshmgross
in actions/github-script#425New Contributors
@navarroaxel
made their first contribution in actions/github-script#285@robandpdx
made their first contribution in actions/github-script#429@viktorlott
made their first contribution in actions/github-script#402Full Changelog: https://github.com/actions/github-script/compare/v6.4.1...v7.0.0
v6.4.1
What's Changed
- Add
@octokit/plugin-request-log
, to produce debug output for requests by@mjpieters
in actions/github-script#358- fix input handling by
@mjpieters
in actions/github-script#357- Remove unused dependencies by
@mjpieters
in actions/github-script#356- Default debug to current runner debug state by
@mjpieters
in actions/github-script#363New Contributors
@mjpieters
made their first contribution in actions/github-script#358Full Changelog: https://github.com/actions/github-script/compare/v6.4.0...v6.4.1
v6.4.0
What's Changed
- Bump json5 from 2.1.3 to 2.2.3 by
@dependabot
in actions/github-script#319- Bump minimatch from 3.0.4 to 3.1.2 by
@dependabot
in actions/github-script#320- Add node-fetch by
@danmichaelo
in actions/github-script#321New Contributors
@jongwooo
made their first contribution in actions/github-script#313@austinvazquez
made their first contribution in actions/github-script#306@danmichaelo
made their first contribution in actions/github-script#321Full Changelog: https://github.com/actions/github-script/compare/v6.3.3...v6.4.0
v6.3.3
What's Changed
- Update
@actions/glob
to 0.3.0 by@nineinchnick
in actions/github-script#279New Contributors
@nineinchnick
made their first contribution in actions/github-script#279Full Changelog: https://github.com/actions/github-script/compare/v6.3.2...v6.3.3
v6.3.2
What's Changed
- Update
@actions/core
to 1.10.0 by@rentziass
in actions/github-script#295
... (truncated)
Commits
60a0d83
Merge pull request #440 from actions/joshmgross/v7.0.1b7fb200
Update version to 7.0.112e22ed
Merge pull request #439 from actions/joshmgross/avoid-setting-base-urld319f8f
Avoid settingbaseUrl
to undefined when input is not providede69ef54
Merge pull request #425 from actions/joshmgross/node-20ee0914b
Update licensesd6fc56f
Use@types/node
for Node 20384d6cf
Fix quotations in tests8472492
Only validate GraphQLpreviews
84903f5
Removenode-fetch
from type- Additional commits viewable in compare view
Updates actions/labeler
from 4 to 5
Release notes
Sourced from actions/labeler's releases.
v5.0.0
What's Changed
This release contains the following breaking changes:
The ability to apply labels based on the names of base and/or head branches was added (#186 and #54). The match object for changed files was expanded with new combinations in order to make it more intuitive and flexible (#423 and #101). As a result, the configuration file structure was significantly redesigned and is not compatible with the structure of the previous version. Please read the action documentation to find out how to adapt your configuration files for use with the new action version.
The bug related to the
sync-labels
input was fixed (#112). Now the input value is read correctly.By default,
dot
input is set totrue
. Now, paths starting with a dot (e.g..github
) are matched by default.Version 5 of this action updated the runtime to Node.js 20. All scripts are now run with Node.js 20 instead of Node.js 16 and are affected by any breaking changes between Node.js 16 and 20.
For more information, please read the action documentation.
New Contributors
@joshdales
made their first contribution in actions/labeler#203@dusan-trickovic
made their first contribution in actions/labeler#626@sungh0lim
made their first contribution in actions/labeler#630@TrianguloY
made their first contribution in actions/labeler#629Full Changelog: https://github.com/actions/labeler/compare/v4...v5.0.0
v5.0.0-beta.1
What's Changed
In scope of this beta release, the structure of the configuration file (
.github/labeler.yml
) was changed fromLabelName: - any: - changed-files: ['list', 'of', 'globs'] - base-branch: ['list', 'of', 'regexps'] - head-branch: ['list', 'of', 'regexps'] - all: - changed-files: ['list', 'of', 'globs'] - base-branch: ['list', 'of', 'regexps'] - head-branch: ['list', 'of', 'regexps']
to
LabelName: - any: - changed-files: - AnyGlobToAnyFile: ['list', 'of', 'globs'] - AnyGlobToAllFiles: ['list', 'of', 'globs'] - AllGlobsToAnyFile: ['list', 'of', 'globs'] - AllGlobsToAllFiles: ['list', 'of', 'globs'] - base-branch: ['list', 'of', 'regexps'] - head-branch: ['list', 'of', 'regexps'] - all: - changed-files: - AnyGlobToAnyFile: ['list', 'of', 'globs'] - AnyGlobToAllFiles: ['list', 'of', 'globs'] - AllGlobsToAnyFile: ['list', 'of', 'globs'] </tr></table>
... (truncated)
Commits
8558fd7
Merge pull request #709 from actions/v5.0.0-beta000ca75
Merge pull request #700 from MaksimZhukov/apply-suggestions-and-update-docume...cb66c2f
Update dist9181355
Apply suggestions for the beta vesrion and update the documentationefe4c1c
Merge pull request #699 from MaksimZhukov/update-node-runtime-and-dependenciesc0957ad
Run Prettier8dc8d18
Update Node.js version in reusable workflowsd0d0bbe
Update documentation1375c42
5.0.0ab7411e
Change version of Node.js runtime to node20- Additional commits viewable in compare view
Updates ossf/scorecard-action
from 2.1.2 to 2.3.1
Release notes
Sourced from ossf/scorecard-action's releases.
v2.3.1
What's Changed
- :seedling: Bump github.com/ossf/scorecard/v4 from v4.13.0 to v4.13.1 by
@spencerschrock
in ossf/scorecard-action#1282
- Adds additional Fuzzing detection and fixes a SAST bug related to detecting CodeQL. For a full changelist of what this includes, see the v4.13.1 release notes
Full Changelog: https://github.com/ossf/scorecard-action/compare/v2.3.0...v2.3.1
v2.3.0
What's Changed
- :seedling: Bump github.com/ossf/scorecard/v4 from v4.11.0 to v4.13.0 by
@spencerschrock
in ossf/scorecard-action#1270- :sparkles: Send rekor tlog index to webapp when publishing results by
@spencerschrock
in ossf/scorecard-action#1169- :bug: Prevent url clipping for GHES instances by
@rajbos
in ossf/scorecard-action#1225Documentation
- :book: Update access rights needed to see the results in code scanning by
@rajbos
in ossf/scorecard-action#1229- :book: Add package comments. by
@spencerschrock
in ossf/scorecard-action#1221- :book: Add SECURITY.md file by
@david-a-wheeler
in ossf/scorecard-action#1250- :book: Fix typo in token input docs by
@aabouzaid
in ossf/scorecard-action#1258New Contributors
@david-a-wheeler
made their first contribution in ossf/scorecard-action#1250@aabouzaid
made their first contribution in ossf/scorecard-action#1258Full Changelog: https://github.com/ossf/scorecard-action/compare/v2.2.0...v2.3.0
v2.2.0
What's Changed
- :seedling: Bump github.com/ossf/scorecard/v4 from v4.10.5 to v4.11.0 by
@spencerschrock
in ossf/scorecard-action#1192Scorecard Result Viewer
Thanks to contributions from
@cynthia-sg
and@tegioz
at CLOMonitor, there is a new Scorecard Result visualization page athttps://securityscorecards.dev/viewer/?uri=<project-url>
.