Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Apr 24, 2025

Bumps booxmedialtd/ws-action-parse-semver from 1.3.0 to 1.4.7.

Release notes

Sourced from booxmedialtd/ws-action-parse-semver's releases.

v1.4.7 build: rebuild dist directory

Automatic semver version bump

#26

Fixes #25

v1.4.6 feat: update to Node 16

Automatic semver version bump

#23

Github is deprecating/removing Node 12 support. Node 16 does require using a minimum Actions Runner version of v2.285.0, which is available in GHES 3.4 or later.

Edit: GH is also deprecating setting outputs directly, instead preferring to use the ENV file to set outputs and state. See https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/

I've update both the @actions/core and @actions/github package to handle those updates as well.

Close #22

v1.4.2 Fix for security issues with ws-action-parse-semver

Automatic semver version bump

#17

Address security issues with ws-action-parse-semver by updating latest "webpack": "^5.65.0" and "webpack-cli": "^4.9.1"

https://jira.24i.com/browse/BPLAT-15948

v1.4.1 Add workflow to run e2e tests for the action

Automatic semver version bump

#18

Added a new workflow that runs e2e tests on pull_request event for the action. Test runs assertions on expected result for 3 different input sets atm. Feel free to add more if needed.

I also realised a bug in the fullVersion part of the output. Thats fixed now, hence I have labeled the PR as bump:patch. Naveen should rebase on this version once its merged to the master.

v1.4.0 BPLAT-15124 GitHub actions for automatic versioning

Automatic semver version bump

#13

  • Check that pull requests to master contain one of the following labels: bump:major, bump:minor, bump:patch
  • Automatic version tagging according to pull request bump tag

https://jira.24i.com/browse/BPLAT-15124

Commits
  • 7784200 Merge pull request #26 from mattlewis92/rebuild-dist
  • 3bbc63c build: rebuild dist directory
  • e81ad80 Merge pull request #23 from andrew-welker/update-node
  • 1c552c3 chore: update packages
  • aefb53c feat: update to Node 16
  • e4a833c Merge pull request #20 from booxmedialtd/dependabot/npm_and_yarn/terser-5.14.2
  • 8d1e5ab Merge pull request #21 from booxmedialtd/dependabot/npm_and_yarn/actions/core...
  • 45a2f3f Bump @​actions/core from 1.6.0 to 1.9.1
  • 8589655 Bump terser from 5.10.0 to 5.14.2
  • 966a265 Merge pull request #19 from booxmedialtd/dependabot/npm_and_yarn/node-fetch-2...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [booxmedialtd/ws-action-parse-semver](https://github.com/booxmedialtd/ws-action-parse-semver) from 1.3.0 to 1.4.7.
- [Release notes](https://github.com/booxmedialtd/ws-action-parse-semver/releases)
- [Commits](booxmedialtd/ws-action-parse-semver@3576f3a...7784200)

---
updated-dependencies:
- dependency-name: booxmedialtd/ws-action-parse-semver
  dependency-version: 1.4.7
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update Github_actions code labels Apr 24, 2025
@pskrbasu pskrbasu changed the base branch from develop to v1.1.x May 15, 2025 09:12
@pskrbasu pskrbasu merged commit be9d002 into v1.1.x May 15, 2025
24 checks passed
@pskrbasu pskrbasu deleted the dependabot/github_actions/booxmedialtd/ws-action-parse-semver-1.4.7 branch May 15, 2025 09:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update Github_actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants