Bump the actions group across 1 directory with 6 updates #567
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the actions group with 6 updates in the / directory:
4.1.7
4.2.0
3.5.0
3.7.0
0.17.0
0.17.2
1.4.0
1.4.3
4.0.2
4.1.0
6.1.0
6.1.1
Updates
actions/checkout
from 4.1.7 to 4.2.0Release notes
Sourced from actions/checkout's releases.
Changelog
Sourced from actions/checkout's changelog.
... (truncated)
Commits
d632683
Prepare 4.2.0 release (#1878)6d193bf
Bump braces from 3.0.2 to 3.0.3 (#1777)db0cee9
Bump the minor-npm-dependencies group across 1 directory with 4 updates (#1872)b684943
Add Ref and Commit outputs (#1180)2d7d9f7
Provide explanation for where user email came from (#1869)9a9194f
Bump docker/build-push-action from 5.3.0 to 6.5.0 (#1832)dd960bd
Bump docker/login-action in the minor-actions-dependencies group (#1831)Updates
sigstore/cosign-installer
from 3.5.0 to 3.7.0Release notes
Sourced from sigstore/cosign-installer's releases.
Commits
dc72c7d
bump for latest cosign v2.4.1 release (#173)08bb361
Bump actions/checkout from 4.1.7 to 4.2.0 (#172)4959ce0
update readme for new release (#170)45ffe83
bump default version to v2.4.0 release (#168)7e1d9c1
pin public key used for verification (#169)cc23fe1
Bump actions/setup-go from 5.0.1 to 5.0.2 (#167)b235ed9
Bump actions/checkout from 4.1.6 to 4.1.7 (#166)b49ef6b
Bump actions/checkout from 4.1.5 to 4.1.6 (#165)7a59e5a
Bump actions/checkout from 4.1.4 to 4.1.5 (#164)8d927bd
Bump actions/setup-go from 5.0.0 to 5.0.1 (#163)Updates
anchore/sbom-action
from 0.17.0 to 0.17.2Release notes
Sourced from anchore/sbom-action's releases.
Commits
61119d4
chore(deps): update Syft to v1.11.1 (#485)ab9d16d
chore(deps): update Syft to v1.11.0 (#483)fe5e7c3
doc: Updates for the Slack to Discourse migration (#484)f2d02cb
chore: Create issue template (#481)ca15f99
docs: CODE_OF_CONDUCT.md (#480)Updates
actions/attest-build-provenance
from 1.4.0 to 1.4.3Release notes
Sourced from actions/attest-build-provenance's releases.
Commits
1c608d1
bump predicate from 1.1.2 to 1.1.3 (#226)f1185f1
bump@actions/attest
from 1.4.1 to 1.4.2 (#225)d438876
add sigstore prober (#224)8f30a5c
Bump the npm-development group with 3 updates (#218)13f0f0d
Bump@actions/attest
from 1.3.1 to 1.4.1 (#212)a950611
Bump the npm-development group with 2 updates (#211)814a778
Bump the npm-development group with 3 updates (#206)6149ea5
bump actions/attest from 1.4.0 to 1.4.1 (#209)3eb3242
Bump super-linter/super-linter from 6 to 7 (#205)399bb17
Bump@types/node
from 22.2.0 to 22.4.0 in the npm-development group (#203)Updates
actions/cache
from 4.0.2 to 4.1.0Release notes
Sourced from actions/cache's releases.
Changelog
Sourced from actions/cache's changelog.
... (truncated)
Commits
2cdf405
Prepare4.1.0
release (#1464)a11fb02
restore action's README now references v4 instead of v3 (#1445)cf7a75e
Fix typo: depening -> depending (#1462)c74ca40
Deprecatesave-always
input (#1452)f8a7ab4
Merge pull request #1463 from actions/Jcambass-patch-145b7be0
Add workflow file for publishing releases to immutable action package81382a7
Merge pull request #1311 from todgru/todgru/v4-documentation-updatec4ee99a
Merge branch 'main' into todgru/v4-documentation-update57b8e40
Clarify that therestore-keys
input is a string in the docs (#1434)40c3b67
Fix cache-hit output when cache missed (#1404)Updates
golangci/golangci-lint-action
from 6.1.0 to 6.1.1Release notes
Sourced from golangci/golangci-lint-action's releases.
Commits
971e284
build(deps-dev): bump the dev-dependencies group with 3 updates (#1108)bbe7eb5
build(deps): bump@types/node
from 22.5.5 to 22.7.4 in the dependencies group...ebae5ce
build(deps-dev): bump the dev-dependencies group with 3 updates (#1105)06c3f3a
build(deps): bump@types/node
from 22.5.4 to 22.5.5 in the dependencies group...56689d8
build(deps-dev): bump the dev-dependencies group with 3 updates (#1103)c7bab6f
fix: clean go install output (#1102)33f56cc
build(deps-dev): bump the dev-dependencies group with 3 updates (#1099)e954224
build(deps): bump@types/node
from 22.5.2 to 22.5.4 in the dependencies group...68de804
build(deps): bump@types/node
from 22.5.1 to 22.5.2 in the dependencies group...22a3756
build(deps-dev): bump the dev-dependencies group with 2 updates (#1097)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase
will rebase this PR@dependabot recreate
will recreate this PR, overwriting any edits that have been made to it@dependabot merge
will merge this PR after your CI passes on it@dependabot squash and merge
will squash and merge this PR after your CI passes on it@dependabot cancel merge
will cancel a previously requested merge and block automerging@dependabot reopen
will reopen this PR if it is closed@dependabot close
will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditions
will show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major version
will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor version
will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>
will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>
will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>
will remove the ignore condition of the specified dependency and ignore conditions