Commit c52c819
authored
chore(deps): update github actions dependencies (major) (#144)
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [actions/checkout](https://redirect.github.com/actions/checkout) |
action | major | `v6` → `v7` |
| [actions/setup-node](https://redirect.github.com/actions/setup-node) |
action | major | `v6` → `v7` |
|
[benhodgson87/conventional-pull-request-action](https://redirect.github.com/benhodgson87/conventional-pull-request-action)
| action | major | `v1.2.0` → `v2.0.1` |
---
### Release Notes
<details>
<summary>actions/checkout (actions/checkout)</summary>
###
[`v7.0.1`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v701)
[Compare
Source](https://redirect.github.com/actions/checkout/compare/v7.0.0...v7.0.1)
- Bump github/codeql-action from 3 to 4 by
[@​dependabot](https://redirect.github.com/dependabot)\[bot] in
[#​2475](https://redirect.github.com/actions/checkout/pull/2475)
- Bump actions/setup-node from 4 to 6 by
[@​dependabot](https://redirect.github.com/dependabot)\[bot] in
[#​2477](https://redirect.github.com/actions/checkout/pull/2477)
- Bump docker/build-push-action from 6.5.0 to 7.2.0 by
[@​dependabot](https://redirect.github.com/dependabot)\[bot] in
[#​2478](https://redirect.github.com/actions/checkout/pull/2478)
- Bump docker/login-action from 3.3.0 to 4.2.0 by
[@​dependabot](https://redirect.github.com/dependabot)\[bot] in
[#​2479](https://redirect.github.com/actions/checkout/pull/2479)
- Bump actions/checkout from 6 to 7 by
[@​dependabot](https://redirect.github.com/dependabot)\[bot] in
[#​2488](https://redirect.github.com/actions/checkout/pull/2488)
- Bump actions/upload-artifact from 4 to 7 by
[@​dependabot](https://redirect.github.com/dependabot)\[bot] in
[#​2476](https://redirect.github.com/actions/checkout/pull/2476)
- eslint 9 by
[@​dependabot](https://redirect.github.com/dependabot)\[bot] in
[#​2474](https://redirect.github.com/actions/checkout/pull/2474)
- Bump the minor-actions-dependencies group with 2 updates by
[@​dependabot](https://redirect.github.com/dependabot)\[bot] in
[#​2499](https://redirect.github.com/actions/checkout/pull/2499)
- skip running unsafe pr check if input is default by
[@​aiqiaoy](https://redirect.github.com/aiqiaoy) in
[#​2518](https://redirect.github.com/actions/checkout/pull/2518)
- trim only ascii whitespace for branch by
[@​aiqiaoy](https://redirect.github.com/aiqiaoy) in
[#​2521](https://redirect.github.com/actions/checkout/pull/2521)
- escape values passed to --unset by
[@​aiqiaoy](https://redirect.github.com/aiqiaoy) in
[#​2530](https://redirect.github.com/actions/checkout/pull/2530)
###
[`v7.0.0`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v700)
[Compare
Source](https://redirect.github.com/actions/checkout/compare/v7.0.0...v7.0.0)
- Block checking out fork PR for pull\_request\_target and workflow\_run
by [@​aiqiaoy](https://redirect.github.com/aiqiaoy) in
[#​2454](https://redirect.github.com/actions/checkout/pull/2454)
- Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the
minor-actions-dependencies group across 1 directory by
[@​dependabot](https://redirect.github.com/dependabot)\[bot] in
[#​2458](https://redirect.github.com/actions/checkout/pull/2458)
- Bump flatted from 3.3.1 to 3.4.2 by
[@​dependabot](https://redirect.github.com/dependabot)\[bot] in
[#​2460](https://redirect.github.com/actions/checkout/pull/2460)
- Bump js-yaml from 4.1.0 to 4.2.0 by
[@​dependabot](https://redirect.github.com/dependabot)\[bot] in
[#​2461](https://redirect.github.com/actions/checkout/pull/2461)
- Bump [@​actions/core](https://redirect.github.com/actions/core)
and
[@​actions/tool-cache](https://redirect.github.com/actions/tool-cache)
and Remove uuid by
[@​dependabot](https://redirect.github.com/dependabot)\[bot] in
[#​2459](https://redirect.github.com/actions/checkout/pull/2459)
- upgrade module to esm and update dependencies by
[@​aiqiaoy](https://redirect.github.com/aiqiaoy) in
[#​2463](https://redirect.github.com/actions/checkout/pull/2463)
- Bump the minor-npm-dependencies group across 1 directory with 3
updates by
[@​dependabot](https://redirect.github.com/dependabot)\[bot] in
[#​2462](https://redirect.github.com/actions/checkout/pull/2462)
###
[`v7`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v700)
[Compare
Source](https://redirect.github.com/actions/checkout/compare/v6.1.0...v7.0.0)
- Block checking out fork PR for pull\_request\_target and workflow\_run
by [@​aiqiaoy](https://redirect.github.com/aiqiaoy) in
[#​2454](https://redirect.github.com/actions/checkout/pull/2454)
- Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the
minor-actions-dependencies group across 1 directory by
[@​dependabot](https://redirect.github.com/dependabot)\[bot] in
[#​2458](https://redirect.github.com/actions/checkout/pull/2458)
- Bump flatted from 3.3.1 to 3.4.2 by
[@​dependabot](https://redirect.github.com/dependabot)\[bot] in
[#​2460](https://redirect.github.com/actions/checkout/pull/2460)
- Bump js-yaml from 4.1.0 to 4.2.0 by
[@​dependabot](https://redirect.github.com/dependabot)\[bot] in
[#​2461](https://redirect.github.com/actions/checkout/pull/2461)
- Bump [@​actions/core](https://redirect.github.com/actions/core)
and
[@​actions/tool-cache](https://redirect.github.com/actions/tool-cache)
and Remove uuid by
[@​dependabot](https://redirect.github.com/dependabot)\[bot] in
[#​2459](https://redirect.github.com/actions/checkout/pull/2459)
- upgrade module to esm and update dependencies by
[@​aiqiaoy](https://redirect.github.com/aiqiaoy) in
[#​2463](https://redirect.github.com/actions/checkout/pull/2463)
- Bump the minor-npm-dependencies group across 1 directory with 3
updates by
[@​dependabot](https://redirect.github.com/dependabot)\[bot] in
[#​2462](https://redirect.github.com/actions/checkout/pull/2462)
###
[`v6.1.0`](https://redirect.github.com/actions/checkout/compare/v6.0.3...v6.1.0)
[Compare
Source](https://redirect.github.com/actions/checkout/compare/v6.0.3...v6.1.0)
###
[`v6.0.3`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v603)
[Compare
Source](https://redirect.github.com/actions/checkout/compare/v6.0.2...v6.0.3)
- Fix checkout init for SHA-256 repositories by
[@​yaananth](https://redirect.github.com/yaananth) in
[#​2439](https://redirect.github.com/actions/checkout/pull/2439)
- fix: expand merge commit SHA regex and add SHA-256 test cases by
[@​yaananth](https://redirect.github.com/yaananth) in
[#​2414](https://redirect.github.com/actions/checkout/pull/2414)
###
[`v6.0.2`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v602)
[Compare
Source](https://redirect.github.com/actions/checkout/compare/v6.0.1...v6.0.2)
- Fix tag handling: preserve annotations and explicit fetch-tags by
[@​ericsciple](https://redirect.github.com/ericsciple) in
[#​2356](https://redirect.github.com/actions/checkout/pull/2356)
###
[`v6.0.1`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v601)
[Compare
Source](https://redirect.github.com/actions/checkout/compare/v6...v6.0.1)
- Add worktree support for persist-credentials includeIf by
[@​ericsciple](https://redirect.github.com/ericsciple) in
[#​2327](https://redirect.github.com/actions/checkout/pull/2327)
</details>
<details>
<summary>actions/setup-node (actions/setup-node)</summary>
###
[`v7.0.0`](https://redirect.github.com/actions/setup-node/releases/tag/v7.0.0)
[Compare
Source](https://redirect.github.com/actions/setup-node/compare/v7.0.0...v7.0.0)
##### What's Changed
##### Enhancements:
- Add cache-primary-key and cache-matched-key as outputs by
[@​gowridurgad](https://redirect.github.com/gowridurgad) in
[#​1577](https://redirect.github.com/actions/setup-node/pull/1577)
- Migrate to ESM and upgrade dependencies by
[@​gowridurgad](https://redirect.github.com/gowridurgad) in
[#​1574](https://redirect.github.com/actions/setup-node/pull/1574)
##### Bug fixes:
- Remove dummy NODE\_AUTH\_TOKEN export by
[@​gowridurgad](https://redirect.github.com/gowridurgad) in
[#​1558](https://redirect.github.com/actions/setup-node/pull/1558)
- Only use `mirrorToken` in `getManifest` if it's provided by
[@​deiga](https://redirect.github.com/deiga) in
[#​1548](https://redirect.github.com/actions/setup-node/pull/1548)
##### Documentation updates:
- Add documentation for publishing to npm with Trusted Publisher (OIDC)
by
[@​chiranjib-swain](https://redirect.github.com/chiranjib-swain)
in
[#​1536](https://redirect.github.com/actions/setup-node/pull/1536)
- docs: Update restore-only cache documentation by
[@​priya-kinthali](https://redirect.github.com/priya-kinthali) in
[#​1550](https://redirect.github.com/actions/setup-node/pull/1550)
- docs: Update caching recommendations to mitigate cache poisoning risks
by
[@​chiranjib-swain](https://redirect.github.com/chiranjib-swain)
in
[#​1567](https://redirect.github.com/actions/setup-node/pull/1567)
##### Dependency update:
- Upgrade
[@​actions/cache](https://redirect.github.com/actions/cache) to
5.1.0, log cache write denied by
[@​jasongin](https://redirect.github.com/jasongin) in
[#​1569](https://redirect.github.com/actions/setup-node/pull/1569)
##### New Contributors
- [@​chiranjib-swain](https://redirect.github.com/chiranjib-swain)
made their first contribution in
[#​1536](https://redirect.github.com/actions/setup-node/pull/1536)
- [@​deiga](https://redirect.github.com/deiga) made their first
contribution in
[#​1548](https://redirect.github.com/actions/setup-node/pull/1548)
- [@​jasongin](https://redirect.github.com/jasongin) made their
first contribution in
[#​1569](https://redirect.github.com/actions/setup-node/pull/1569)
**Full Changelog**:
<actions/setup-node@v6...v7.0.0>
###
[`v7`](https://redirect.github.com/actions/setup-node/compare/v6.5.0...v7.0.0)
[Compare
Source](https://redirect.github.com/actions/setup-node/compare/v6.5.0...v7.0.0)
###
[`v6.5.0`](https://redirect.github.com/actions/setup-node/releases/tag/v6.5.0)
[Compare
Source](https://redirect.github.com/actions/setup-node/compare/v6.4.0...v6.5.0)
##### What's Changed
- Update
[@​actions/cache](https://redirect.github.com/actions/cache) to
5.1.0 and add security overrides for undici and fast-xml-parser by
[@​HarithaVattikuti](https://redirect.github.com/HarithaVattikuti)
in
[#​1579](https://redirect.github.com/actions/setup-node/pull/1579)
**Full Changelog**:
<actions/setup-node@v6.4.0...v6.5.0>
###
[`v6.4.0`](https://redirect.github.com/actions/setup-node/releases/tag/v6.4.0)
[Compare
Source](https://redirect.github.com/actions/setup-node/compare/v6.3.0...v6.4.0)
#### What's Changed
##### Dependency updates:
- Upgrade [@​actions](https://redirect.github.com/actions)
dependencies by [@​Copilot](https://redirect.github.com/Copilot)
in
[#​1525](https://redirect.github.com/actions/setup-node/pull/1525)
- Update Node.js versions in versions.yml and bump package to v6.4.0 by
[@​priya-kinthali](https://redirect.github.com/priya-kinthali) in
[#​1533](https://redirect.github.com/actions/setup-node/pull/1533)
#### New Contributors
- [@​Copilot](https://redirect.github.com/Copilot) made their
first contribution in
[#​1525](https://redirect.github.com/actions/setup-node/pull/1525)
**Full Changelog**:
<actions/setup-node@v6...v6.4.0>
###
[`v6.3.0`](https://redirect.github.com/actions/setup-node/releases/tag/v6.3.0)
[Compare
Source](https://redirect.github.com/actions/setup-node/compare/v6.2.0...v6.3.0)
#### What's Changed
##### Enhancements:
- Support parsing `devEngines` field by
[@​susnux](https://redirect.github.com/susnux) in
[#​1283](https://redirect.github.com/actions/setup-node/pull/1283)
> When using node-version-file: package.json, setup-node now
prefers devEngines.runtime over engines.node.
##### Dependency updates:
- Fix npm audit issues by
[@​gowridurgad](https://redirect.github.com/gowridurgad) in
[#​1491](https://redirect.github.com/actions/setup-node/pull/1491)
- Replace uuid with crypto.randomUUID() by
[@​trivikr](https://redirect.github.com/trivikr) in
[#​1378](https://redirect.github.com/actions/setup-node/pull/1378)
- Upgrade minimatch from 3.1.2 to 3.1.5 by
[@​dependabot](https://redirect.github.com/dependabot) in
[#​1498](https://redirect.github.com/actions/setup-node/pull/1498)
##### Bug fixes:
- Remove hardcoded bearer for mirror-url
[@​marco-ippolito](https://redirect.github.com/marco-ippolito) in
[#​1467](https://redirect.github.com/actions/setup-node/pull/1467)
- Scope test lockfiles by package manager and update cache tests by
[@​gowridurgad](https://redirect.github.com/gowridurgad) in
[#​1495](https://redirect.github.com/actions/setup-node/pull/1495)
#### New Contributors
- [@​susnux](https://redirect.github.com/susnux) made their first
contribution in
[#​1283](https://redirect.github.com/actions/setup-node/pull/1283)
**Full Changelog**:
<actions/setup-node@v6...v6.3.0>
###
[`v6.2.0`](https://redirect.github.com/actions/setup-node/releases/tag/v6.2.0)
[Compare
Source](https://redirect.github.com/actions/setup-node/compare/v6.1.0...v6.2.0)
#### What's Changed
##### Documentation
- Documentation update related to absence of Lockfile by
[@​mahabaleshwars](https://redirect.github.com/mahabaleshwars) in
[#​1454](https://redirect.github.com/actions/setup-node/pull/1454)
- Correct mirror option typos by
[@​MikeMcC399](https://redirect.github.com/MikeMcC399) in
[#​1442](https://redirect.github.com/actions/setup-node/pull/1442)
- Readme update on checkout version v6 by
[@​deining](https://redirect.github.com/deining) in
[#​1446](https://redirect.github.com/actions/setup-node/pull/1446)
- Readme typo fixes
[@​munyari](https://redirect.github.com/munyari) in
[#​1226](https://redirect.github.com/actions/setup-node/pull/1226)
- Advanced document update on checkout version v6 by
[@​aparnajyothi-y](https://redirect.github.com/aparnajyothi-y) in
[#​1468](https://redirect.github.com/actions/setup-node/pull/1468)
##### Dependency updates:
- Upgrade
[@​actions/cache](https://redirect.github.com/actions/cache) to
v5.0.1 by [@​salmanmkc](https://redirect.github.com/salmanmkc) in
[#​1449](https://redirect.github.com/actions/setup-node/pull/1449)
#### New Contributors
- [@​mahabaleshwars](https://redirect.github.com/mahabaleshwars)
made their first contribution in
[#​1454](https://redirect.github.com/actions/setup-node/pull/1454)
- [@​MikeMcC399](https://redirect.github.com/MikeMcC399) made
their first contribution in
[#​1442](https://redirect.github.com/actions/setup-node/pull/1442)
- [@​deining](https://redirect.github.com/deining) made their
first contribution in
[#​1446](https://redirect.github.com/actions/setup-node/pull/1446)
- [@​munyari](https://redirect.github.com/munyari) made their
first contribution in
[#​1226](https://redirect.github.com/actions/setup-node/pull/1226)
**Full Changelog**:
<actions/setup-node@v6...v6.2.0>
###
[`v6.1.0`](https://redirect.github.com/actions/setup-node/releases/tag/v6.1.0)
[Compare
Source](https://redirect.github.com/actions/setup-node/compare/v6...v6.1.0)
#### What's Changed
##### Enhancement:
- Remove always-auth configuration handling by
[@​priyagupta108](https://redirect.github.com/priyagupta108) in
[#​1436](https://redirect.github.com/actions/setup-node/pull/1436)
##### Dependency updates:
- Upgrade
[@​actions/cache](https://redirect.github.com/actions/cache) from
4.0.3 to 4.1.0 by
[@​dependabot](https://redirect.github.com/dependabot)\[bot] in
[#​1384](https://redirect.github.com/actions/setup-node/pull/1384)
- Upgrade actions/checkout from 5 to 6 by
[@​dependabot](https://redirect.github.com/dependabot)\[bot] in
[#​1439](https://redirect.github.com/actions/setup-node/pull/1439)
- Upgrade js-yaml from 3.14.1 to 3.14.2 by
[@​dependabot](https://redirect.github.com/dependabot)\[bot] in
[#​1435](https://redirect.github.com/actions/setup-node/pull/1435)
##### Documentation update:
- Add example for restore-only cache in documentation by
[@​aparnajyothi-y](https://redirect.github.com/aparnajyothi-y) in
[#​1419](https://redirect.github.com/actions/setup-node/pull/1419)
**Full Changelog**:
<actions/setup-node@v6...v6.1.0>
</details>
<details>
<summary>benhodgson87/conventional-pull-request-action
(benhodgson87/conventional-pull-request-action)</summary>
###
[`v2.0.1`](https://redirect.github.com/benhodgson87/conventional-pull-request-action/releases/tag/v2.0.1)
[Compare
Source](https://redirect.github.com/benhodgson87/conventional-pull-request-action/compare/v2.0...v2.0.1)
##### Bug Fixes
- Await lint() to ensure errors are caught correctly
([#​28](https://redirect.github.com/benhodgson87/conventional-pull-request-action/issues/28))
([c7d49ab](https://redirect.github.com/benhodgson87/conventional-pull-request-action/commit/c7d49ab6c15c815e2cb2ae15235560e13c80d94a))
###
[`v2.0.0`](https://redirect.github.com/benhodgson87/conventional-pull-request-action/releases/tag/v2.0.0)
[Compare
Source](https://redirect.github.com/benhodgson87/conventional-pull-request-action/compare/v2.0...v2.0)
##### Breaking Changes
- Update action runtime to Node.js 24 (requires `node24` runner)
##### Bug Fixes
- Incorrect error message on scope type parser
##### Chores
- Add linting test for breaking change with scope
- Dependency bumps (undici, vite)
###
[`v2.0`](https://redirect.github.com/benhodgson87/conventional-pull-request-action/compare/v2.0...v2.0)
[Compare
Source](https://redirect.github.com/benhodgson87/conventional-pull-request-action/compare/v2.0...v2.0)
###
[`v2`](https://redirect.github.com/benhodgson87/conventional-pull-request-action/compare/v1.2.0...v2.0)
[Compare
Source](https://redirect.github.com/benhodgson87/conventional-pull-request-action/compare/v1.2.0...v2.0)
</details>
---
### Configuration
📅 **Schedule**: (UTC)
- Branch creation
- At any time (no schedule defined)
- Automerge
- At any time (no schedule defined)
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/Lendable/sloth).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yMDkuNCIsInVwZGF0ZWRJblZlciI6IjQzLjI4MC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJyZW5vdmF0ZSJdfQ==-->
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>1 parent e1a0a52 commit c52c819
4 files changed
Lines changed: 6 additions & 6 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
14 | 14 | | |
15 | 15 | | |
16 | 16 | | |
17 | | - | |
| 17 | + | |
18 | 18 | | |
19 | 19 | | |
20 | 20 | | |
21 | 21 | | |
22 | | - | |
| 22 | + | |
23 | 23 | | |
24 | 24 | | |
25 | 25 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
17 | 17 | | |
18 | 18 | | |
19 | 19 | | |
20 | | - | |
| 20 | + | |
21 | 21 | | |
22 | 22 | | |
23 | 23 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
9 | 9 | | |
10 | 10 | | |
11 | 11 | | |
12 | | - | |
| 12 | + | |
13 | 13 | | |
14 | 14 | | |
15 | 15 | | |
16 | 16 | | |
17 | 17 | | |
18 | | - | |
| 18 | + | |
19 | 19 | | |
20 | 20 | | |
21 | 21 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
33 | 33 | | |
34 | 34 | | |
35 | 35 | | |
36 | | - | |
| 36 | + | |
37 | 37 | | |
38 | 38 | | |
39 | 39 | | |
| |||
0 commit comments