chore(deps): update all dependencies (major)#141
Open
renovate[bot] wants to merge 1 commit intomainfrom
Open
Conversation
Contributor
Author
|
5c7c430 to
06b68fb
Compare
aa685af to
dd89f31
Compare
d347a19 to
5281ea1
Compare
5281ea1 to
2c73305
Compare
55bed31 to
c36fe9b
Compare
b76d3cf to
2974886
Compare
2974886 to
4981b4c
Compare
d7e6fd5 to
65ce035
Compare
65ce035 to
3d627e3
Compare
dfff626 to
3067152
Compare
3067152 to
a168a22
Compare
a168a22 to
264fbe0
Compare
f08049f to
09ea8f8
Compare
09ea8f8 to
8080d07
Compare
8080d07 to
64cfdd2
Compare
64cfdd2 to
da5b617
Compare
da5b617 to
e194c58
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v1→v4v4→v6v4→v8v4→v7v4→v68.2.6→9.0.0Release Notes
actions/attest-build-provenance (actions/attest-build-provenance)
v4.1.0Compare Source
What's Changed
actions/attestfrom 4.0.0 to 4.1.0 by @bdehamer in #838@actions/attestfrom 3.0.0 to 3.1.0 by @bdehamer in actions/attest#362@actions/attestfrom 3.1.0 to 3.2.0 by @bdehamer in actions/attest#365subject-versioninput for inclusion in storage record by @bdehamer in actions/attest#364Full Changelog: actions/attest-build-provenance@v4.0.0...v4.1.0
v4.0.0Compare Source
What's Changed
Full Changelog: actions/attest-build-provenance@v3.2.0...v4.0.0
v4Compare Source
v3.2.0Compare Source
What's Changed
Full Changelog: actions/attest-build-provenance@v3.1.0...v3.2.0
v3.1.0Compare Source
What's Changed
New Contributors
Full Changelog: actions/attest-build-provenance@v3...v3.1.0
v3Compare Source
v3.0.0Compare Source
What's Changed
v2.327.1
Release Notes
Make sure your runner is updated to this version or newer to use this release.
Full Changelog: actions/attest-build-provenance@v2.4.0...v3.0.0
v2.4.0Compare Source
What's Changed
Full Changelog: actions/attest-build-provenance@v2.3.0...v2.4.0
v2.3.0Compare Source
What's Changed
actions/attestfrom 2.2.1 to 2.3.0 by @bdehamer in #615@sigstore/ocifrom 0.4.0 to 0.5.0Full Changelog: actions/attest-build-provenance@v2.2.3...v2.3.0
v2.2.3Compare Source
What's Changed
Full Changelog: actions/attest-build-provenance@v2.2.2...v2.2.3
v2.2.2Compare Source
What's Changed
workflow.reffield from therefclaim in the OIDC token (actions/toolkit#1969)Full Changelog: actions/attest-build-provenance@v2.2.1...v2.2.2
v2.2.1Compare Source
What's Changed
@actions/attestv1.6.0Full Changelog: actions/attest-build-provenance@v2.2.0...v2.2.1
v2.2.0Compare Source
What's Changed
subject-checksumsinput parameterFull Changelog: actions/attest-build-provenance@v2.1.0...v2.2.0
v2.1.0Compare Source
What's Changed
attestation-idandattestation-urloutputs by @bdehamer in #415Full Changelog: actions/attest-build-provenance@v2.0.1...v2.1.0
v2.0.1Compare Source
What's Changed
Full Changelog: actions/attest-build-provenance@v2.0.0...v2.0.1
v2.0.0Compare Source
The
attest-build-provenanceaction now supports attesting multiple subjects simultaneously. When identifying multiple subjects with thesubject-pathinput a single attestation is created with references to each of the supplied subjects, rather than generating separate attestations for each artifact. This reduces the number of attestations that you need to create and manage.What's Changed
actions/attestfrom 1.4.1 to 2.0.0 (w/ multi-subject attestation support)Full Changelog: actions/attest-build-provenance@v1.4.4...v2.0.0
v2Compare Source
v1.4.4Compare Source
What's Changed
workflow_refOIDC token claims containing the "@" symbol in the tag name (actions/toolkit#1863)Full Changelog: actions/attest-build-provenance@v1.4.3...v1.4.4
v1.4.3Compare Source
What's Changed
Full Changelog: actions/attest-build-provenance@v1.4.2...v1.4.3
v1.4.2Compare Source
What's Changed
Full Changelog: actions/attest-build-provenance@v1.4.1...v1.4.2
v1.4.1Compare Source
What's Changed
Full Changelog: actions/attest-build-provenance@v1.4.0...v1.4.1
v1.4.0Compare Source
What's Changed
show-summaryinputFull Changelog: actions/attest-build-provenance@v1.3.3...v1.4.0
v1.3.3Compare Source
What's Changed
subject-pathinputFull Changelog: actions/attest-build-provenance@v1.3.2...v1.3.3
v1.3.2Compare Source
What's Changed
Full Changelog: actions/attest-build-provenance@v1.3.1...v1.3.2
v1.3.1Compare Source
What's Changed
Full Changelog: actions/attest-build-provenance@v1.3.0...v1.3.1
v1.3.0Compare Source
What's Changed
Full Changelog: actions/attest-build-provenance@v1.2.0...v1.3.0
v1.2.0Compare Source
What's Changed
Full Changelog: actions/attest-build-provenance@v1.1.2...v1.2.0
v1.1.2Compare Source
What's Changed
Full Changelog: actions/attest-build-provenance@v1.1.1...v1.1.2
v1.1.1Compare Source
What's Changed
Full Changelog: actions/attest-build-provenance@v1.1.0...v1.1.1
v1.1.0Compare Source
What's Changed
subjectPathinputFull Changelog: actions/attest-build-provenance@v1.0.0...v1.1.0
actions/checkout (actions/checkout)
v6.0.2Compare Source
v6.0.1Compare Source
v6.0.0Compare Source
v6Compare Source
v5.0.1Compare Source
What's Changed
Full Changelog: actions/checkout@v5...v5.0.1
v5.0.0Compare Source
What's Changed
v2.327.1
Release Notes
Make sure your runner is updated to this version or newer to use this release.
Full Changelog: actions/checkout@v4...v5.0.0
v5Compare Source
v4.3.1Compare Source
What's Changed
Full Changelog: actions/checkout@v4...v4.3.1
v4.3.0Compare Source
What's Changed
New Contributors
Full Changelog: actions/checkout@v4...v4.3.0
v4.2.2Compare Source
url-helper.tsnow leverages well-known environment variables by @jww3 in #1941isGhesby @jww3 in #1946v4.2.1Compare Source
v4.2.0Compare Source
v4.1.7Compare Source
v4.1.6Compare Source
v4.1.5Compare Source
user.emailto be41898282+github-actions[bot]@​users.noreply.github.comby @cory-miller in #1707v4.1.4Compare Source
extensions.worktreeConfigwhen disablingsparse-checkoutby @jww3 in #1692v4.1.3Compare Source
sparse-checkoutby @jww3 in #1656actions/checkoutversion inupdate-main-version.ymlby @jww3 in #1650v4.1.2Compare Source
sparse-checkoutoption is not present @dscho in #1598v4.1.1Compare Source
v4.1.0Compare Source
actions/download-artifact (actions/download-artifact)
v8.0.1Compare Source
What's Changed
Full Changelog: actions/download-artifact@v8...v8.0.1
v8.0.0Compare Source
v8 - What's new
Direct downloads
To support direct uploads in
actions/upload-artifact, the action will no longer attempt to unzip all downloaded files. Instead, the action checks theContent-Typeheader ahead of unzipping and skips non-zipped files. Callers wishing to download a zipped file as-is can also set the newskip-decompressparameter tofalse.Enforced checks (breaking)
A previous release introduced digest checks on the download. If a download hash didn't match the expected hash from the server, the action would log a warning. Callers can now configure the behavior on mismatch with the
digest-mismatchparameter. To be secure by default, we are now defaulting the behavior toerrorwhich will fail the workflow run.ESM
To support new versions of the @actions/* packages, we've upgraded the package to ESM.
What's Changed
errorby @danwkennedy in #461Full Changelog: actions/download-artifact@v7...v8.0.0
v8Compare Source
v7Compare Source
v7.0.0Compare Source
v7 - What's new
Node.js 24
This release updates the runtime to Node.js 24. v6 had preliminary support for Node 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.
What's Changed
New Contributors
Full Changelog: actions/download-artifact@v6.0.0...v7.0.0
v6Compare Source
v6.0.0Compare Source
What's Changed
BREAKING CHANGE: this update supports Node
v24.x. This is not a breaking change per-se but we're treating it as such.@actions/artifacttov4.0.0v6.0.0by @danwkennedy in #438New Contributors
Full Changelog: actions/download-artifact@v5...v6.0.0
v5Compare Source
v5.0.0Compare Source
What's Changed
v5.0.0
🚨 Breaking Change
This release fixes an inconsistency in path behavior for single artifact downloads by ID. If you're downloading single artifacts by ID, the output path may change.
What Changed
Previously, single artifact downloads behaved differently depending on how you specified the artifact:
name: my-artifact→ extracted topath/(direct)artifact-ids: 12345→ extracted topath/my-artifact/(nested)Now both methods are consistent:
name: my-artifact→ extracted topath/(unchanged)artifact-ids: 12345→ extracted topath/(fixed - now direct)Migration Guide
✅ No Action Needed If:
merge-multiple: trueas a workaroundYou download single artifacts by ID and your workflows expect the nested directory structure.
Before v5 (nested structure):
To maintain old behavior (if needed):
New Contributors
Full Changelog: actions/download-artifact@v4...v5.0.0
v4.3.0Compare Source
What's Changed
artifact-idsinput by @GrantBirki in #401New Contributors
Full Changelog: actions/download-artifact@v4.2.1...v4.3.0
v4.2.1Compare Source
What's Changed
Full Changelog: actions/download-artifact@v4.2.0...v4.2.1
v4.2.0Compare Source
What's Changed
New Contributors
Full Changelog: actions/download-artifact@v4.1.9...v4.2.0
v4.1.9Compare Source
What's Changed
New Contributors
Full Changelog: actions/download-artifact@v4.1.8...v4.1.9
v4.1.8Compare Source
What's Changed
Full Changelog: actions/download-artifact@v4.1.7...v4.1.8
v4.1.7Compare Source
What's Changed
Full Changelog: actions/download-artifact@v4.1.6...v4.1.7
v4.1.6Compare Source
What's Changed
@actions/artifactdependency to v2.1.6 by @eggyhead in #324Full Changelog: actions/download-artifact@v4.1.5...v4.1.6
v4.1.5Compare Source
What's Changed
@actions/coreto v1.10.1 and@actions/artifactto v2.1.5Full Changelog: actions/download-artifact@v4.1.4...v4.1.5
v4.1.4Compare Source
What's Changed
Full Changelog: actions/download-artifact@v4...v4.1.4
v4.1.3Compare Source
What's Changed
New Contributors
Full Changelog: actions/download-artifact@v4...v4.1.3
v4.1.2Compare Source
v4.1.1Compare Source
@actions/artifactsto latest versionv4.1.0Compare Source
What's Changed
New Contributors
Full Changelog: actions/download-artifact@v4...v4.1.0
actions/upload-artifact (actions/upload-artifact)
v7.0.1Compare Source
What's Changed
Configuration
📅 Schedule: (UTC)
* 0-3 1 * *)🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.