openbao
openbao copied to clipboard
openbao
Bump actions/upload-artifact from 3.1.2 to 4.3.1
Bumps actions/upload-artifact from 3.1.2 to 4.3.1.
Release notes
Sourced from actions/upload-artifact's releases.
v4.3.1
- Bump
@actions/artifactsto latest version to include updated GHES host checkv4.3.0
What's Changed
- Reorganize upload code in prep for merge logic & add more tests by
@robherleyin actions/upload-artifact#504- Add sub-action to merge artifacts by
@robherleyin actions/upload-artifact#505Full Changelog: https://github.com/actions/upload-artifact/compare/v4...v4.3.0
v4.2.0
What's Changed
- Ability to overwrite an Artifact by
@robherleyin actions/upload-artifact#501Full Changelog: https://github.com/actions/upload-artifact/compare/v4...v4.2.0
v4.1.0
What's Changed
- Add migrations docs by
@robherleyin actions/upload-artifact#482- Update README.md by
@samuelwinein actions/upload-artifact#492- Support artifact-url output by
@konradpabjanin actions/upload-artifact#496- Update readme to reflect new 500 artifact per job limit by
@robherleyin actions/upload-artifact#497New Contributors
@samuelwinemade their first contribution in actions/upload-artifact#492Full Changelog: https://github.com/actions/upload-artifact/compare/v4...v4.1.0
v4.0.0
What's Changed
The release of upload-artifact@v4 and download-artifact@v4 are major changes to the backend architecture of Artifacts. They have numerous performance and behavioral improvements.
ℹ️ However, this is a major update that includes breaking changes. Artifacts created with versions v3 and below are not compatible with the v4 actions. Uploads and downloads must use the same major actions versions. There are also key differences from previous versions that may require updates to your workflows.
For more information, please see:
- The changelog post.
- The README.
- The migration documentation.
- As well as the underlying npm package,
@actions/artifactdocumentation.New Contributors
@vmjosephmade their first contribution in actions/upload-artifact#464Full Changelog: https://github.com/actions/upload-artifact/compare/v3...v4.0.0
v3.1.3
What's Changed
... (truncated)
Commits
5d5d22aMerge pull request #515 from actions/eggyhead/update-artifact-v2.1.1f1e993dupdate artifact license4881bfdupdating dist:a30777e@eggyhead3a80482Merge pull request #511 from actions/robherley/migration-docs-typo9d63e3fMerge branch 'main' into robherley/migration-docs-typodfa1ab2fix typo with v3 artifact downloads in migration guided00351bMerge pull request #509 from markmssd/patch-1707f5a7Update limitation of10artifacts upload to50026f96dfMerge pull request #505 from actions/robherley/merge-artifacts- Additional commits viewable in compare view
You can trigger a rebase of this PR by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Note Automatic rebases have been disabled on this pull request as it has been open for over 30 days.
![dependabot[bot] avatar](https://avatars.githubusercontent.com/in/29110?v=4 "Published by a pub.dev verified publisher"){kind=small}
v4 of github's artifact actions are not backwards compatible with v3, and v4 actions cannot be mixed with v3. hashicorp/actions-docker-build uses v3 of actions/artifact-upload currently.
https://github.blog/2024-02-12-get-started-with-v4-of-github-actions-artifacts/ https://github.com/hashicorp/actions-docker-build/blob/main/action.yml
A newer version of actions/upload-artifact exists, but since this PR has been edited by someone other than Dependabot I haven't updated it. You'll get a PR for the updated version as normal once this PR is merged.
That makes sense. Why do we need to use hashicorp's docker-build action at all though? Is there a reason we can't use a stock docker-build action?
@jessebot That is basically what I did. The prior release pipeline will be removed from this repo in the future. I pulled a page from OpenTofu and built a GoReleaser pipeline. It gives us some nice features out of the box (gpg signing, cosign support, sboms, snapcraft, MacOS universal, Chocolatey, Apple signing, and etc). Its not perfect, does come with a down-side or two.
OK, that's awesome! I noticed that the opentofu repo is also still using hashicorp docker build though 🤔 Why is that? Is there a reason we can't replace it? (sorry if I'm asking obvious questions. I'm just confused)
it's already replaced, by function. The old pipeline is just hanging around still. That will start to get cleaned up post Beta, before GA.
@naphelps @cipherboy we removed the hashicorp build pipeline so I think this should be safe to merge now