Sourced from actions/checkout's releases.
v4.2.2
What's Changed
url-helper.ts
now leverages well-known environment variables by@jww3
in actions/checkout#1941- Expand unit test coverage for
isGhes
by@jww3
in actions/checkout#1946Full Changelog: https://github.com/actions/checkout/compare/v4.2.1...v4.2.2
Sourced from actions/checkout's changelog.
Changelog
v4.2.2
url-helper.ts
now leverages well-known environment variables by@jww3
in actions/checkout#1941- Expand unit test coverage for
isGhes
by@jww3
in actions/checkout#1946v4.2.1
- Check out other refs/* by commit if provided, fall back to ref by
@orhantoy
in actions/checkout#1924v4.2.0
- Add Ref and Commit outputs by
@lucacome
in actions/checkout#1180- Dependency updates by
@dependabot
- actions/checkout#1777, actions/checkout#1872v4.1.7
- Bump the minor-npm-dependencies group across 1 directory with 4 updates by
@dependabot
in actions/checkout#1739- Bump actions/checkout from 3 to 4 by
@dependabot
in actions/checkout#1697- Check out other refs/* by commit by
@orhantoy
in actions/checkout#1774- Pin actions/checkout's own workflows to a known, good, stable version. by
@jww3
in actions/checkout#1776v4.1.6
- Check platform to set archive extension appropriately by
@cory-miller
in actions/checkout#1732v4.1.5
- Update NPM dependencies by
@cory-miller
in actions/checkout#1703- Bump github/codeql-action from 2 to 3 by
@dependabot
in actions/checkout#1694- Bump actions/setup-node from 1 to 4 by
@dependabot
in actions/checkout#1696- Bump actions/upload-artifact from 2 to 4 by
@dependabot
in actions/checkout#1695- README: Suggest
user.email
to be41898282+github-actions[bot]@users.noreply.github.com
by@cory-miller
in actions/checkout#1707v4.1.4
- Disable
extensions.worktreeConfig
when disablingsparse-checkout
by@jww3
in actions/checkout#1692- Add dependabot config by
@cory-miller
in actions/checkout#1688- Bump the minor-actions-dependencies group with 2 updates by
@dependabot
in actions/checkout#1693- Bump word-wrap from 1.2.3 to 1.2.5 by
@dependabot
in actions/checkout#1643v4.1.3
- Check git version before attempting to disable
sparse-checkout
by@jww3
in actions/checkout#1656- Add SSH user parameter by
@cory-miller
in actions/checkout#1685- Update
actions/checkout
version inupdate-main-version.yml
by@jww3
in actions/checkout#1650v4.1.2
- Fix: Disable sparse checkout whenever
sparse-checkout
option is not present@dscho
in actions/checkout#1598v4.1.1
- Correct link to GitHub Docs by
@peterbe
in actions/checkout#1511- Link to release page from what's new section by
@cory-miller
in actions/checkout#1514v4.1.0
... (truncated)
Sourced from actions/setup-node's releases.
v4.1.0
What's Changed
- Resolve High Security Alerts by upgrading Dependencies by
@aparnajyothi-y
in actions/setup-node#1132- Upgrade IA Publish by
@Jcambass
in actions/setup-node#1134- Revise
isGhes
logic by@jww3
in actions/setup-node#1148- Add architecture to cache key by
@pengx17
in actions/setup-node#843 This addresses issues with caching by adding the architecture (arch) to the cache key, ensuring that cache keys are accurate to prevent conflicts. Note: This change may break previous cache keys as they will no longer be compatible with the new format.New Contributors
@jww3
made their first contribution in actions/setup-node#1148@pengx17
made their first contribution in actions/setup-node#843Full Changelog: https://github.com/actions/setup-node/compare/v4...v4.1.0
Sourced from actions/setup-dotnet's releases.
v4.1.0
What's Changed
- Add workflow file for publishing releases to immutable action package by
@Jcambass
in actions/setup-dotnet#548- Upgrade IA Publish by
@Jcambass
in actions/setup-dotnet#550Bug fixes :
- Fixed Basic Validation failure checks by
@HarithaVattikuti
in actions/setup-dotnet#545- Revise
isGhes
logic by@jww3
in actions/setup-dotnet#556Dependency updates :
- Bump fast-xml-parser from 4.3.6 to 4.4.1 by
@dependabot
in actions/setup-dotnet#540New Contributors
@Jcambass
made their first contribution in actions/setup-dotnet#548@jww3
made their first contribution in actions/setup-dotnet#556Full Changelog: https://github.com/actions/setup-dotnet/compare/v4...v4.1.0
3e891b0
Revise isGhes
logic (#556)2e0b259
Merge pull request #550
from actions/Jcambass-patch-229640e4
Upgrade IA Publishcbeba61
Merge pull request #548
from actions/Jcambass-patch-1344ba5f
Add workflow file for publishing releases to immutable action
package9be03d3
Fix failure checks (#545)dbebe35
Bump fast-xml-parser from 4.3.6 to 4.4.1 (#540)Sourced from actions/setup-python's releases.
v5.3.0
What's Changed
- Add workflow file for publishing releases to immutable action package by
@Jcambass
in actions/setup-python#941- Upgrade IA publish by
@Jcambass
in actions/setup-python#943Bug Fixes:
- Normalise Line Endings to Ensure Cross-Platform Consistency by
@priya-kinthali
in actions/setup-python#938- Revise
isGhes
logic by@jww3
in actions/setup-python#963- Bump pillow from 7.2 to 10.2.0 by
@aparnajyothi-y
in actions/setup-python#956Enhancements:
- Enhance workflows and documentation updates by
@priya-kinthali
in actions/setup-python#965- Bump default versions to latest by
@jeffwidman
in actions/setup-python#905New Contributors
@Jcambass
made their first contribution in actions/setup-python#941@jww3
made their first contribution in actions/setup-python#963Full Changelog: https://github.com/actions/setup-python/compare/v5...v5.3.0
0b93645
Enhance workflows: Add macOS 13 support, upgrade publish-action, and
update d...9c76e71
Bump pillow from 7.2 to 10.2.0 in /tests/data (#956)f4c5a11
Revise isGhes
logic (#963)19dfb7b
Bump default versions to latest (#905)e9675cc
Merge pull request #943
from actions/Jcambass-patch-13226af6
Upgrade IA publish70dcb22
Merge pull request #941
from actions/Jcambass-patch-165b48c7
Create publish-immutable-actions.yml29a37be
initial commit (#938)Sourced from actions/dependency-review-action's releases.
v4.4.0
What's Changed
- Fix for merge_group event bug by
@Ahmed3lmallah
in actions/dependency-review-action#846Full Changelog: https://github.com/actions/dependency-review-action/compare/v4.3.5...v4.4.0
v4.3.5
What's Changed
- fix: getRefs function to handle merge_group events by
@louis-bompart
in actions/dependency-review-action#766- Create pull_request_template.md by
@jonjanego
in actions/dependency-review-action#794- Update CONTRIBUTING.md by
@jonjanego
in actions/dependency-review-action#793- Bump
@types/node
from 20.11.28 to 20.16.0 by@dependabot
in actions/dependency-review-action#815- Upgrade transitive micromatch library by
@elireisman
in actions/dependency-review-action#829- Do not list changed dependencies in summary by
@hmaurer
in actions/dependency-review-action#828- Update stale.yaml by
@jonjanego
in actions/dependency-review-action#832- Bump got from 14.4.1 to 14.4.2 by
@dependabot
in actions/dependency-review-action#822- Bump eslint-plugin-jest and ts-jest by
@Ahmed3lmallah
in actions/dependency-review-action#840New Contributors
@louis-bompart
made their first contribution in actions/dependency-review-action#766@Ahmed3lmallah
made their first contribution in actions/dependency-review-action#840Full Changelog: https://github.com/actions/dependency-review-action/compare/v4.3.4...v4.3.5
4081bf9
Merge pull request #846
from actions/merge-group-bug-fix03e585e
fixing minor typo08b4117
updating dist code9c3441f
updating dist code304a544
updating testse99353b
fixing merge_group schema buga6993e2
Merge pull request #840
from actions/dependabot-updatesd92f08b
Bump eslint-plugin-jest and ts-jest3e334b7
Merge pull request #822
from actions/dependabot/npm_and_yarn/got-14.4.232b7d88
Merge pull request #832
from actions/jonjanego-patch-3Sourced from github/codeql-action's releases.
v3.27.0
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
Note that the only difference between
v2
andv3
of the CodeQL Action is the node version they support, withv3
running on node 20 while we continue to releasev2
to support running on node 16. For example3.22.11
was the firstv3
release and is functionally identical to2.22.11
. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.3.27.0 - 22 Oct 2024
- Bump the minimum CodeQL bundle version to 2.14.6. #2549
- Fix an issue where the
upload-sarif
Action would fail with "upload-sarif post-action step failed: Input required and not supplied: token" when called in a composite Action that had a different set of inputs to the ones expected by theupload-sarif
Action. #2557- Update default CodeQL bundle version to 2.19.2. #2552
See the full CHANGELOG.md for more information.
Sourced from github/codeql-action's changelog.
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
Note that the only difference between
v2
andv3
of the CodeQL Action is the node version they support, withv3
running on node 20 while we continue to releasev2
to support running on node 16. For example3.22.11
was the firstv3
release and is functionally identical to2.22.11
. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.[UNRELEASED]
No user facing changes.
3.27.0 - 22 Oct 2024
- Bump the minimum CodeQL bundle version to 2.14.6. #2549
- Fix an issue where the
upload-sarif
Action would fail with "upload-sarif post-action step failed: Input required and not supplied: token" when called in a composite Action that had a different set of inputs to the ones expected by theupload-sarif
Action. #2557- Update default CodeQL bundle version to 2.19.2. #2552
3.26.13 - 14 Oct 2024
No user facing changes.
3.26.12 - 07 Oct 2024
Upcoming breaking change: Add a deprecation warning for customers using CodeQL version 2.14.5 and earlier. These versions of CodeQL were discontinued on 24 September 2024 alongside GitHub Enterprise Server 3.10, and will be unsupported by CodeQL Action versions 3.27.0 and later and versions 2.27.0 and later. #2520
If you are using one of these versions, please update to CodeQL CLI version 2.14.6 or later. For instance, if you have specified a custom version of the CLI using the 'tools' input to the 'init' Action, you can remove this input to use the default version.
Alternatively, if you want to continue using a version of the CodeQL CLI between 2.13.5 and 2.14.5, you can replace
github/codeql-action/*@v3
bygithub/codeql-action/*@v3.26.11
andgithub/codeql-action/*@v2
bygithub/codeql-action/*@v2.26.11
in your code scanning workflow to ensure you continue using this version of the CodeQL Action.3.26.11 - 03 Oct 2024
Upcoming breaking change: Add support for using
actions/download-artifact@v4
to programmatically consume CodeQL Action debug artifacts.Starting November 30, 2024, GitHub.com customers will no longer be able to use
actions/download-artifact@v3
. Therefore, to avoid breakage, customers who programmatically download the CodeQL Action debug artifacts should set theCODEQL_ACTION_ARTIFACT_V4_UPGRADE
environment variable totrue
and bumpactions/download-artifact@v3
toactions/download-artifact@v4
in their workflows. The CodeQL Action will enable this behavior by default in early November and workflows that have not yet bumped toactions/download-artifact@v3
toactions/download-artifact@v4
will begin failing then.This change is currently unavailable for GitHub Enterprise Server customers, as
actions/upload-artifact@v4
andactions/download-artifact@v4
are not yet compatible with GHES.Update default CodeQL bundle version to 2.19.1. #2519
3.26.10 - 30 Sep 2024
- We are rolling out a feature in September/October 2024 that sets up CodeQL using a bundle compressed with Zstandard. Our aim is to improve the performance of setting up CodeQL. #2502
3.26.9 - 24 Sep 2024
No user facing changes.
3.26.8 - 19 Sep 2024
- Update default CodeQL bundle version to 2.19.0. #2483
3.26.7 - 13 Sep 2024
... (truncated)
6624720
Merge pull request #2561
from github/update-v3.27.0-b35b023d9ce7c2b5
Update changelog for v3.27.0b35b023
Merge pull request #2552
from github/update-bundle/codeql-bundle-v2.19.2dafc762
Merge pull request #2560
from github/aeisenberg/fix-required-checks0d1eb88
Remove ESLint from required checks0a30541
Merge pull request #2558
from github/dependabot/npm_and_yarn/npm-6515e6e3282a6a6ad
Update checked-in dependencies26c18c2
Bump the npm group with 3 updates7080a68
Merge branch 'main' into update-bundle/codeql-bundle-v2.19.263eb7bb
Merge pull request #2551
from github/cklin/diff-informed-queries-featureb8a7edd
6.6.034c8534
fix: signature verification due to leading zerosSourced from @microsoft/teams-js
's
releases.
v2.30.0
Minor changes
- Updated
copilot.eligibility.getEligibilityInfo
to be async and get the eligibility info from the host if it is not already available.Patches
- Updated edgeapi.freya.svc.cloud.microsoft to chatuxmanager.svc.cloud.microsoft.
- Updated edgeapi endpoint from
edgeapi.svc.cloud.microsoft
toedgeapi.freya.svc.cloud.microsoft
in valid domains list. Addedwork.bing.com
to valid domains list.- Clarified usage for
validMessageOrigins
parameter onapp.initialize
in documentation.
Sourced from @microsoft/teams-js
's
changelog.
2.30.0
Mon, 21 Oct 2024 18:11:30 GMT
Minor changes
- Updated
copilot.eligibility.getEligibilityInfo
to be async and get the eligibility info from the host if it is not already available.Patches
- Updated edgeapi.freya.svc.cloud.microsoft to chatuxmanager.svc.cloud.microsoft.
- Updated edgeapi endpoint from
edgeapi.svc.cloud.microsoft
toedgeapi.freya.svc.cloud.microsoft
in valid domains list. Addedwork.bing.com
to valid domains list.- Clarified usage for
validMessageOrigins
parameter onapp.initialize
in documentation.
25d648c
Prep release 2.30.0 (#2564)c349846
Updating edgeapi endpoint to chatuxmanager (#2561)4e7dee4
Update copilot.eligibility.getEligibilityInfo
to retrieve
info from host (#...8969fc2
Updating edge api valid domain endpoint (#2517)a5b975c
Update docs to clarify usage of validOrigins parameter on initialize
call (#2...5292f4c
2.29.0 post release cleanup (#2542)