apm-agent-php Bump the github-actions group with 4 updates

Bumps the github-actions group with 4 updates: actions/download-artifact, hashicorp/vault-action, google-github-actions/auth and google-github-actions/upload-cloud-storage.

Updates actions/download-artifact from 3 to 4

Release notes

Sourced from actions/download-artifact's releases.

v4.0.0

What's Changed

The release of upload-artifact@v4 and download-artifact@v4 are major changes to the backend architecture of Artifacts. They have numerous performance and behavioral improvements.

ℹ️ However, this is a major update that includes breaking changes. Artifacts created with versions v3 and below are not compatible with the v4 actions. Uploads and downloads must use the same major actions versions. There are also key differences from previous versions that may require updates to your workflows.

For more information, please see:

The changelog post.

The README.

The migration documentation.

As well as the underlying npm package, @actions/artifact documentation.

New Contributors

@bflad made their first contribution in actions/download-artifact#194

Full Changelog: https://github.com/actions/download-artifact/compare/v3...v4.0.0

v3.0.2

Bump @actions/artifact to v1.1.1 - actions/download-artifact#195

Fixed a bug in Node16 where if an HTTP download finished too quickly (<1ms, e.g. when it's mocked) we attempt to delete a temp file that has not been created yet actions/toolkit#1278

v3.0.1

Bump @actions/core to 1.10.0

Commits

eaceaf8 Merge pull request #291 from actions/eggyhead/update-artifact-v2.1.1
81eafdc update artifact license
9ac5cad updating artifact dependency to version 2.1.1
3ad8411 Merge pull request #287 from actions/robherley/sync-migration-docs
1de4643 Sync migration docs with upload-artifact
bb3fa7f Merge pull request #275 from actions/robherley/better-log-msgs
a244de5 ncc
355659b clarify log messages when using pattern/merge-multiple params
6b208ae Merge pull request #274 from actions/vmjoseph/timeout-patch
6c5b580 only adding updated license
Additional commits viewable in compare view

Updates hashicorp/vault-action from 2.7.4 to 3.0.0

Release notes

Sourced from hashicorp/vault-action's releases.

v3.0.0

3.0.0 (February 15, 2024)

Improvements:

Bump node runtime from node16 to node20 GH-528

v2.8.1

2.8.1 (February 15, 2024)

Bugs:

Revert GH-509 which made a backwards incompatible bump of the node runtime from node16 to node20 GH-527

v2.8.0

2.8.0 (February 1, 2024)

Features:

Add ignoreNotFound input (default: false) to prevent the action from failing when a secret does not exist GH-518

Improvements:

bump jsrsasign from 10.8.6 to 11.0.0 GH-513

bump @actions/core from 1.10.0 to 1.10.1 GH-489

bump jest-when from 3.5.2 to 3.6.0 GH-484

bump jest from 29.5.0 to 29.7.0 GH-490

bump @vercel/ncc from 0.36.1 to 0.38.1 GH-503

v2.7.5

2.7.5 (January 30, 2024)

Improvements:

Bump node runtime from node16 to node20 GH-509

Bump got from 11.8.5 to 11.8.6 GH-492

Changelog

Sourced from hashicorp/vault-action's changelog.

3.0.0 (February 15, 2024)

Improvements:

Bump node runtime from node16 to node20 GH-529

2.8.1 (February 15, 2024)

Bugs:

Revert GH-509 which made a backwards incompatible bump of the node runtime from node16 to node20 GH-527

2.8.0 (February 1, 2024)

Features:

Add ignoreNotFound input (default: false) to prevent the action from failing when a secret does not exist GH-518

Improvements:

bump jsrsasign from 10.8.6 to 11.0.0 GH-513

bump @actions/core from 1.10.0 to 1.10.1 GH-489

bump jest-when from 3.5.2 to 3.6.0 GH-484

bump jest from 29.5.0 to 29.7.0 GH-490

bump @vercel/ncc from 0.36.1 to 0.38.1 GH-503

2.7.5 (January 30, 2024)

Improvements:

Bump node runtime from node16 to node20 GH-509

Bump got from 11.8.5 to 11.8.6 GH-492

Commits

d1720f0 fix changelog link (#530)
9262638 Prepare for v3.0.0 release (#529)
9c2d817 Fix changelog link (#528)
b477844 Prepare for v2.8.1 release (#527)
9f522b8 Update to v2.8.0 (#519)
efab57e feature: add ignoreNotFound option (#518)
d523bb0 chore(deps-dev): bump @vercel/ncc from 0.36.1 to 0.38.1 (#503)
11845b1 chore(deps-dev): bump jest from 29.5.0 to 29.7.0 (#490)
7a6258b chore(deps-dev): bump jest-when from 3.5.2 to 3.6.0 (#484)
a0b66b1 chore(deps-dev): bump @actions/core from 1.10.0 to 1.10.1 (#489)
Additional commits viewable in compare view

Updates google-github-actions/auth from 1 to 2

Release notes

Sourced from google-github-actions/auth's releases.

v2

Floating v2 alias

v1.3.0

What's Changed

Revert back to Node 16 for v1 series by @sethvargo in google-github-actions/auth#356

Release: v1.3.0 by @google-github-actions-bot in google-github-actions/auth#357

Full Changelog: https://github.com/google-github-actions/auth/compare/v1...v1.3.0

v1.2.0

⚠️ This version requires Node 20 or later on the runner! If you are using GitHub-managed runners, no action is needed. If you are using self-hosted runners, make sure the system version of Node is version 20 or higher. Reverted based on community feedback.

What's Changed

Update deps by @sethvargo in google-github-actions/auth#312

dependabot: only do security updates by @sethvargo in google-github-actions/auth#320

update all deps by @sethvargo in google-github-actions/auth#321

Update README.md by @mattseymour in google-github-actions/auth#332

~~Update deps to Node 20 by @sethvargo in google-github-actions/auth#339~~ Reverted based on community feedback.

Drop chai and mocha deps by @sethvargo in google-github-actions/auth#342

Switch to more resilient testing by @sethvargo in google-github-actions/auth#343

Build latest versions by @sethvargo in google-github-actions/auth#345

Release: v1.2.0 by @google-github-actions-bot in google-github-actions/auth#346

New Contributors

@mattseymour made their first contribution in google-github-actions/auth#332

Full Changelog: https://github.com/google-github-actions/auth/compare/v1...v1.2.0

v1.1.1

What's Changed

Add support info by @sethvargo in google-github-actions/auth#303

chore: update dependencies (automated) by @verbanicm in google-github-actions/auth#305

Release: v1.1.1 by @google-github-actions-bot in google-github-actions/auth#306

Full Changelog: https://github.com/google-github-actions/auth/compare/v1.1.0...v1.1.1

v1.1.0

What's Changed

fix: update doc versions by @verbanicm in google-github-actions/auth#240

Only emit a warning if the envvar has changed by @sethvargo in google-github-actions/auth#245

Update CI and deps by @sethvargo in google-github-actions/auth#248

Document possible issues with org policies by @sethvargo in google-github-actions/auth#258

Updated troubleshooting to add permissions example by @bseib in google-github-actions/auth#262

Note that Firebase Admin Node.js SDK doesn't support WLIF by @kevinthecheung in google-github-actions/auth#268

chore: update dependencies (automated) by @verbanicm in google-github-actions/auth#274

Document admission for all repos of an owner by @djbrown in google-github-actions/auth#279

Switch to pull non-secret values from env by @sethvargo in google-github-actions/auth#288

... (truncated)

Commits

a6e2e39 Release: v2.1.1 (#390)
b4f4057 Use an OAuth 2.0 access token for Domain-Wide Delegation (#388)
39c96a3 Remove retry logic (#389)
5a50e58 Release: v2.1.0 (#385)
aaf2e69 Update deps (#384)
f6de816 Release: v2.0.1 (#382)
a57dd04 Support newline-separated inputs for delegates and access_token_scopes (#381)
fb74905 Note .dockerignore in the exclusion for credentials (#376)
56562dd Use new markdown syntax for alerts (#371)
5f7afaa Add service_account to WIF through SA example (#369)
Additional commits viewable in compare view

Updates google-github-actions/upload-cloud-storage from 1 to 2

Release notes

Sourced from google-github-actions/upload-cloud-storage's releases.

v2

Floating v2 alias

v1.0.3

What's Changed

Add support info by @sethvargo in google-github-actions/upload-cloud-storage#325

chore: update dependencies (automated) by @verbanicm in google-github-actions/upload-cloud-storage#327

Release: v1.0.3 by @google-github-actions-bot in google-github-actions/upload-cloud-storage#328

Full Changelog: https://github.com/google-github-actions/upload-cloud-storage/compare/v1.0.2...v1.0.3

v1.0.2

What's Changed

Use client-side retries for failed uploads by @sethvargo in google-github-actions/upload-cloud-storage#321

Release: v1.0.2 by @google-github-actions-bot in google-github-actions/upload-cloud-storage#322

Full Changelog: https://github.com/google-github-actions/upload-cloud-storage/compare/v1.0.1...v1.0.2

v1.0.1

What's Changed

Clean up unit and integration tests, remove labeler by @sethvargo in google-github-actions/upload-cloud-storage#305

Update CI and deps by @sethvargo in google-github-actions/upload-cloud-storage#306

Drop unused configPath field by @sethvargo in google-github-actions/upload-cloud-storage#307

Update README.md headers settable field casing by @robertvanhoesel in google-github-actions/upload-cloud-storage#312

chore: update dependencies (automated) by @verbanicm in google-github-actions/upload-cloud-storage#315

Print warnings when a gcloudignore is not found by @sethvargo in google-github-actions/upload-cloud-storage#313

Switch to pull non-secret values from env by @sethvargo in google-github-actions/upload-cloud-storage#316

Update deps by @sethvargo in google-github-actions/upload-cloud-storage#318

Release: v1.0.1 by @google-github-actions-bot in google-github-actions/upload-cloud-storage#319

New Contributors

@robertvanhoesel made their first contribution in google-github-actions/upload-cloud-storage#312

Full Changelog: https://github.com/google-github-actions/upload-cloud-storage/compare/v1.0.0...v1.0.1

Commits

22121cd Release: v2.1.0 (#352)
630411a Update deps (#351)
d278d8c Release: v2.0.0 (#347)
5d472e4 Upgrade deps and drop unnecessary dependencies (#346)
490e8b9 Add CI for release branches (#345)
fa45b5c Allow integration tests on dispatch (#338)
ff23d2d update all deps (#335)
9824cc9 dependabot: only do security updates (#334)
99ea8dc checkout is mandatory (#330)
5e040a7 Fix README gzip description (#329)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Feb 18 '24 22:02 dependabot[bot]

@dependabot ignore actions/download-artifact ignore major

Feb 19 '24 11:02 v1v

@dependabot ignore actions/upload-artifact major version

Mar 18 '24 12:03 reakaleek

@dependabot ignore actions/download-artifact major version

Mar 18 '24 12:03 reakaleek

OK, I won't notify you about version 4.x.x of actions/download-artifact again, unless you unignore it.

Mar 18 '24 12:03 dependabot[bot]

OK, I won't notify you about version 4.x.x of actions/download-artifact again, unless you unignore it.

Mar 18 '24 12:03 dependabot[bot]

@dependabot recreate

Mar 18 '24 12:03 reakaleek

Looks like these dependencies are updatable in another way, so this is no longer needed.

Mar 18 '24 12:03 dependabot[bot]