Bump the ci group across 1 directory with 2 updates

Open dependabot[bot] opened this issue 1 year ago • 0 comments

Bumps the ci group with 2 updates in the / directory: docker/build-push-action and goreleaser/goreleaser-action.

Updates docker/build-push-action from 5 to 6

Release notes

Sourced from docker/build-push-action's releases.

v6.0.0

Export build record and generate build summary by @crazy-max in docker/build-push-action#1120

Bump @docker/actions-toolkit from 0.24.0 to 0.26.0 in docker/build-push-action#1132 docker/build-push-action#1136 docker/build-push-action#1138

Bump braces from 3.0.2 to 3.0.3 in docker/build-push-action#1137

[!NOTE] This major release adds support for generating Build summary and exporting build record for your build. You can disable this feature by setting DOCKER_BUILD_NO_SUMMARY: true environment variable in your workflow.

Full Changelog: https://github.com/docker/build-push-action/compare/v5.4.0...v6.0.0

v5.4.0

Show builder information before building by @crazy-max in docker/build-push-action#1128

Handle attestations correctly with provenance and sbom inputs by @crazy-max in docker/build-push-action#1086

Bump @docker/actions-toolkit from 0.19.0 to 0.24.0 in docker/build-push-action#1088 docker/build-push-action#1105 docker/build-push-action#1121 docker/build-push-action#1127

Bump undici from 5.28.3 to 5.28.4 in docker/build-push-action#1090

Full Changelog: https://github.com/docker/build-push-action/compare/v5.3.0...v5.4.0

v5.3.0

Bump @docker/actions-toolkit from 0.18.0 to 0.19.0 in docker/build-push-action#1080

Full Changelog: https://github.com/docker/build-push-action/compare/v5.2.0...v5.3.0

v5.2.0

Disable quotes detection for outputs input by @crazy-max in docker/build-push-action#1074

Warn about ignored inputs by @favonia in docker/build-push-action#1019

Bump @docker/actions-toolkit from 0.14.0 to 0.18.0 in docker/build-push-action#1070

Bump undici from 5.26.3 to 5.28.3 in docker/build-push-action#1057

Full Changelog: https://github.com/docker/build-push-action/compare/v5.1.0...v5.2.0

v5.1.0

Add annotations input by @crazy-max in docker/build-push-action#992

Add secret-envs input by @elias-lundgren in docker/build-push-action#980

Bump @babel/traverse from 7.17.3 to 7.23.2 in docker/build-push-action#991

Bump @docker/actions-toolkit from 0.13.0-rc.1 to 0.14.0 in docker/build-push-action#990 docker/build-push-action#1006

Full Changelog: https://github.com/docker/build-push-action/compare/v5.0.0...v5.1.0

Commits

c382f71 Merge pull request #1120 from crazy-max/build-summary
5a5b70d chore: update generated content
dc24cf9 don't generate summary for cloud driver
667cb22 DOCKER_BUILD_NO_SUMMARY env to disable summary
d880b19 generate build summary
e51051a export build record and upload artifact
86c2bd0 Merge pull request #1137 from docker/dependabot/npm_and_yarn/braces-3.0.3
268d2b1 Merge pull request #1138 from docker/dependabot/npm_and_yarn/docker/actions-t...
2b8dc7f chore: update generated content
840c12b chore(deps): Bump @docker/actions-toolkit from 0.25.1 to 0.26.0
Additional commits viewable in compare view

Updates goreleaser/goreleaser-action from 5 to 6

Release notes

Sourced from goreleaser/goreleaser-action's releases.

v6.0.0

[!WARNING] This is a breaking change!

Follow the instructions here to upgrade!

What's Changed

feat!: use "~> v2" as default by @caarlos0 in goreleaser/goreleaser-action#463

Full Changelog: https://github.com/goreleaser/goreleaser-action/compare/v5...v6.0.0

v5.1.0

Important

This version changes the default behavior of latest to ~> v1.

The next major of this action (v6), will change this to ~> v2, and will be launched together with GoReleaser v2.

What's Changed

docs: bump actions to latest major by @crazy-max in goreleaser/goreleaser-action#435

chore(deps): bump docker/bake-action from 3 to 4 by @dependabot in goreleaser/goreleaser-action#436

chore(deps): bump codecov/codecov-action from 3 to 4 by @dependabot in goreleaser/goreleaser-action#437

chore(deps): bump actions/setup-go from 4 to 5 by @dependabot in goreleaser/goreleaser-action#443

chore(deps): bump actions/upload-artifact from 3 to 4 by @dependabot in goreleaser/goreleaser-action#444

Delete .kodiak.toml by @vedantmgoyal9 in goreleaser/goreleaser-action#446

chore(deps): bump codecov/codecov-action from 3 to 4 by @dependabot in goreleaser/goreleaser-action#448

chore(deps): bump ip from 2.0.0 to 2.0.1 by @dependabot in goreleaser/goreleaser-action#450

Upgrade setup-go action version in README by @kishaningithub in goreleaser/goreleaser-action#455

chore(deps): bump tar from 6.1.14 to 6.2.1 by @dependabot in goreleaser/goreleaser-action#456

chore: use corepack to install yarn by @crazy-max in goreleaser/goreleaser-action#458

feat: lock this major version of the action to use '~> v1' as 'latest' by @caarlos0 in goreleaser/goreleaser-action#461

chore(deps): bump semver from 7.6.0 to 7.6.2 by @dependabot in goreleaser/goreleaser-action#462

chore(deps): bump @actions/http-client from 2.2.0 to 2.2.1 by @dependabot in goreleaser/goreleaser-action#451

New Contributors

@vedantmgoyal9 made their first contribution in goreleaser/goreleaser-action#446

Full Changelog: https://github.com/goreleaser/goreleaser-action/compare/v5.0.0...v5.1.0

Commits

286f3b1 ci: fix tests
beac410 ci: update workflow and .goreleaser.yml
18bbabc feat!: use "~> v2" as default (#463)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Jun 17 '24 11:06 dependabot[bot]