Bump the ci_dependencies group with 5 updates #5146

dependabot · 2024-07-25T15:33:06Z

Bumps the ci_dependencies group with 5 updates:

Package	From	To
actions/checkout	`2`	`4`
actions/cache	`3.3.3`	`4.0.2`
actions/setup-python	`2`	`5`
actions/download-artifact	`4.1.4`	`4.1.8`
docker/setup-buildx-action	`3.0.0`	`3.5.0`

Updates actions/checkout from 2 to 4

Release notes

Sourced from actions/checkout's releases.

v4.0.0

What's Changed

Update default runtime to node20 by @takost in actions/checkout#1436

Support fetching without the --progress option by @simonbaird in actions/checkout#1067

Release 4.0.0 by @takost in actions/checkout#1447

New Contributors

@takost made their first contribution in actions/checkout#1436

@simonbaird made their first contribution in actions/checkout#1067

Full Changelog: actions/checkout@v3...v4.0.0

v3.6.0

What's Changed

Mark test scripts with Bash'isms to be run via Bash by @dscho in actions/checkout#1377

Add option to fetch tags even if fetch-depth > 0 by @RobertWieczoreck in actions/checkout#579

Release 3.6.0 by @luketomlinson in actions/checkout#1437

New Contributors

@RobertWieczoreck made their first contribution in actions/checkout#579

@luketomlinson made their first contribution in actions/checkout#1437

Full Changelog: actions/checkout@v3.5.3...v3.6.0

v3.5.3

What's Changed

Fix: Checkout Issue in self hosted runner due to faulty submodule check-ins by @megamanics in actions/checkout#1196

Fix typos found by codespell by @DimitriPapadopoulos in actions/checkout#1287

Add support for sparse checkouts by @dscho and @dfdez in actions/checkout#1369

Release v3.5.3 by @TingluoHuang in actions/checkout#1376

New Contributors

@megamanics made their first contribution in actions/checkout#1196

@DimitriPapadopoulos made their first contribution in actions/checkout#1287

@dfdez made their first contribution in actions/checkout#1369

Full Changelog: actions/checkout@v3...v3.5.3

v3.5.2

What's Changed

Fix: Use correct API url / endpoint in GHES by @fhammerl in actions/checkout#1289 based on #1286 by @1newsr

Full Changelog: actions/checkout@v3.5.1...v3.5.2

v3.5.1

What's Changed

Improve checkout performance on Windows runners by upgrading @actions/github dependency by @BrettDong in actions/checkout#1246

New Contributors

@BrettDong made their first contribution in actions/checkout#1246

... (truncated)

Commits

692973e Prepare 4.1.7 release (#1775)
6ccd57f Pin actions/checkout's own workflows to a known, good, stable version. (#1776)
b17fe1e Handle hidden refs (#1774)
b80ff79 Bump actions/checkout from 3 to 4 (#1697)
b1ec302 Bump the minor-npm-dependencies group across 1 directory with 4 updates (#1739)
a5ac7e5 Update for 4.1.6 release (#1733)
24ed1a3 Check platform for extension (#1732)
44c2b7a README: Suggest user.email to be `41898282+github-actions[bot]@users.norepl...
8459bc0 Bump actions/upload-artifact from 2 to 4 (#1695)
3f603f6 Bump actions/setup-node from 1 to 4 (#1696)
Additional commits viewable in compare view

Updates actions/cache from 3.3.3 to 4.0.2

Release notes

Sourced from actions/cache's releases.

v4.0.2

What's Changed

Fix fail-on-cache-miss not working by @cdce8p in actions/cache#1327

Full Changelog: actions/cache@v4.0.1...v4.0.2

v4.0.1

What's Changed

Update README.md by @yacaovsnc in actions/cache#1304

Update examples by @yacaovsnc in actions/cache#1305

Update actions/cache publish flow by @bethanyj28 in actions/cache#1340

Update @actions/cache by @bethanyj28 in actions/cache#1341

New Contributors

@yacaovsnc made their first contribution in actions/cache#1304

Full Changelog: actions/cache@v4...v4.0.1

v4.0.0

What's Changed

Update action to node20 by @takost in actions/cache#1284

feat: save-always flag by @to-s in actions/cache#1242

New Contributors

@takost made their first contribution in actions/cache#1284

@to-s made their first contribution in actions/cache#1242

Full Changelog: actions/cache@v3...v4.0.0

Changelog

Sourced from actions/cache's changelog.

Releases

4.0.2

Fixed restore fail-on-cache-miss not working.

4.0.1

Updated isGhes check

4.0.0

Updated minimum runner version support from node 12 -> node 20

3.3.3

Updates @actions/cache to v3.2.3 to fix accidental mutated path arguments to getCacheVersion actions/toolkit#1378

Additional audit fixes of npm package(s)

3.3.2

Fixes bug with Azure SDK causing blob downloads to get stuck.

3.3.1

Reduced segment size to 128MB and segment timeout to 10 minutes to fail fast in case the cache download is stuck.

3.3.0

Added option to lookup cache without downloading it.

3.2.6

Fix zstd not being used after zstd version upgrade to 1.5.4 on hosted runners.

3.2.5

Added fix to prevent from setting MYSYS environment variable globally.

3.2.4

Added option to fail job on cache miss.

3.2.3

Support cross os caching on Windows as an opt-in feature.

Fix issue with symlink restoration on Windows for cross-os caches.

3.2.2

... (truncated)

Commits

0c45773 Merge pull request #1327 from cdce8p/fix-fail-on-cache-miss
8a55f83 Add test case for process exit
3884cac Bump version
e29dad3 Fix fail-on-cache-miss not working
ab5e6d0 Merge pull request #1341 from bethanyj28/main
89c7d86 licensed cache
d2c84da update @actions/cache
37e7d4e Merge pull request #1340 from actions/bethanyj28/update-publish-flow
a18323f add release action
a2ed59d Merge pull request #1305 from actions/yacaovsnc/update_examples
Additional commits viewable in compare view

Updates actions/setup-python from 2 to 5

Release notes

Sourced from actions/setup-python's releases.

v5.0.0

What's Changed

In scope of this release, we update node version runtime from node16 to node20 (actions/setup-python#772). Besides, we update dependencies to the latest versions.

Full Changelog: actions/setup-python@v4.8.0...v5.0.0

v4.8.0

What's Changed

In scope of this release we added support for GraalPy (actions/setup-python#694). You can use this snippet to set up GraalPy:
steps:
- uses: actions/checkout@v4
- uses: actions/setup-python@v4 
  with:
    python-version: 'graalpy-22.3' 
- run: python my_script.py
Besides, the release contains such changes as:

Trim python version when reading from file by @FerranPares in actions/setup-python#628

Use non-deprecated versions in examples by @jeffwidman in actions/setup-python#724

Change deprecation comment to past tense by @jeffwidman in actions/setup-python#723

Bump @babel/traverse from 7.9.0 to 7.23.2 by @dependabot in actions/setup-python#743

advanced-usage.md: Encourage the use actions/checkout@v4 by @cclauss in actions/setup-python#729

Examples now use checkout@v4 by @simonw in actions/setup-python#738

Update actions/checkout to v4 by @dmitry-shibanov in actions/setup-python#761

New Contributors

@FerranPares made their first contribution in actions/setup-python#628

@timfel made their first contribution in actions/setup-python#694

@jeffwidman made their first contribution in actions/setup-python#724

Full Changelog: actions/setup-python@v4...v4.8.0

v4.7.1

What's Changed

Bump word-wrap from 1.2.3 to 1.2.4 by @dependabot in actions/setup-python#702

Add range validation for toml files by @dmitry-shibanov in actions/setup-python#726

Full Changelog: actions/setup-python@v4...v4.7.1

v4.7.0

In scope of this release, the support for reading python version from pyproject.toml was added (actions/setup-python#669).
      - name: Setup Python
        uses: actions/setup-python@v4
</tr></table> 

... (truncated)

Commits

39cd149 Documentation update for cache (#873)
a0d74c0 fix(ci): update all failing workflows (#863)
4eb7dbc Bump braces from 3.0.2 to 3.0.3 (#893)
82c7e63 Documentation changes for avoiding rate limit issues on GHES (#835)
10aa35a feat: fallback to raw endpoint for manifest when rate limit is reached (#766)
9a7ac94 Bump undici from 5.27.2 to 5.28.3 (#817)
871daa9 Fix the "Specifying multiple Python/PyPy versions" link (#782)
2f07895 Fix broken README.md link (#793)
e9d6f99 Replace setup-python@v4 by setup-python@v5 in README (#776)
0a5c615 Update action to node20 (#772)
Additional commits viewable in compare view

Updates actions/download-artifact from 4.1.4 to 4.1.8

Release notes

Sourced from actions/download-artifact's releases.

v4.1.8

What's Changed

Update @actions/artifact version, bump dependencies by @robherley in actions/download-artifact#341

Full Changelog: actions/download-artifact@v4...v4.1.8

v4.1.7

What's Changed

Update @actions/artifact dependency by @bethanyj28 in actions/download-artifact#325

Full Changelog: actions/download-artifact@v4.1.6...v4.1.7

v4.1.6

What's Changed

updating @actions/artifact dependency to v2.1.6 by @eggyhead in actions/download-artifact#324

Full Changelog: actions/download-artifact@v4.1.5...v4.1.6

v4.1.5

What's Changed

Update readme with v3/v2/v1 deprecation notice by @robherley in actions/download-artifact#322

Update dependencies @actions/core to v1.10.1 and @actions/artifact to v2.1.5

Full Changelog: actions/download-artifact@v4.1.4...v4.1.5

Commits

fa0a91b Merge pull request #341 from actions/robherley/bump-pkgs
b54d088 Update @actions/artifact version, bump dependencies
65a9edc Merge pull request #325 from bethanyj28/main
fdd1595 licensed
c13dba1 update @actions/artifact dependency
0daa75e Merge pull request #324 from actions/eggyhead/use-artifact-v2.1.6
9c19ed7 Merge branch 'main' into eggyhead/use-artifact-v2.1.6
3d3ea87 updating license
89af5db updating artifact package v2.1.6
b4aefff Merge pull request #323 from actions/eggyhead/update-artifact-v215
Additional commits viewable in compare view

Updates docker/setup-buildx-action from 3.0.0 to 3.5.0

Release notes

Sourced from docker/setup-buildx-action's releases.

v3.5.0

Bump @docker/actions-toolkit from 0.31.0 to 0.35.0 in docker/setup-buildx-action#340 docker/setup-buildx-action#344 docker/setup-buildx-action#345

Full Changelog: docker/setup-buildx-action@v3.4.0...v3.5.0

v3.4.0

Throw error message instead of exit code by @crazy-max in docker/setup-buildx-action#315

Bump @docker/actions-toolkit from 0.20.0 to 0.31.0 in docker/setup-buildx-action#321 docker/setup-buildx-action#338

Bump braces from 3.0.2 to 3.0.3 in docker/setup-buildx-action#329

Bump undici from 5.28.3 to 5.28.4 in docker/setup-buildx-action#312

Bump uuid from 9.0.1 to 10.0.0 in docker/setup-buildx-action#326

Full Changelog: docker/setup-buildx-action@v3.3.0...v3.4.0

v3.3.0

Bump @docker/actions-toolkit from 0.19.0 to 0.20.0 by @crazy-max in docker/setup-buildx-action#307

Full Changelog: docker/setup-buildx-action@v3.2.0...v3.3.0

v3.2.0

Rename and align config inputs by @crazy-max in docker/setup-buildx-action#303

config to buildkitd-config

config-inline to buildkitd-config-inline

Bump @docker/actions-toolkit from 0.17.0 to 0.19.0 in docker/setup-buildx-action#302 docker/setup-buildx-action#306

[!NOTE] config and config-inline input names are deprecated and will be removed in next major release.

Full Changelog: docker/setup-buildx-action@v3.1.0...v3.2.0

v3.1.0

cache-binary input to enable/disable caching binary to GHA cache backend by @crazy-max in docker/setup-buildx-action#300

build(deps): bump @babel/traverse from 7.17.3 to 7.23.2 in docker/setup-buildx-action#282

build(deps): bump @docker/actions-toolkit from 0.12.0 to 0.17.0 in docker/setup-buildx-action#281 docker/setup-buildx-action#284 docker/setup-buildx-action#299

build(deps): bump uuid from 9.0.0 to 9.0.1 in docker/setup-buildx-action#271

build(deps): bump undici from 5.26.3 to 5.28.3 in docker/setup-buildx-action#297

Full Changelog: docker/setup-buildx-action@v3.0.0...v3.1.0

Commits

aa33708 Merge pull request #345 from docker/dependabot/npm_and_yarn/docker/actions-to...
2d99e34 chore: update generated content
4dab436 build(deps): bump @docker/actions-toolkit from 0.34.0 to 0.35.0
49a04d6 Merge pull request #344 from docker/dependabot/npm_and_yarn/docker/actions-to...
a6ade2e chore: update generated content
2f2694b switch to Docker exec
0a4bab6 build(deps): bump @docker/actions-toolkit from 0.32.0 to 0.34.0
2ad1852 Merge pull request #340 from docker/dependabot/npm_and_yarn/docker/actions-to...
560ac46 chore: update generated content
b3a3417 build(deps): bump @docker/actions-toolkit from 0.31.0 to 0.32.0
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the ci_dependencies group with 5 updates: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `2` | `4` | | [actions/cache](https://github.com/actions/cache) | `3.3.3` | `4.0.2` | | [actions/setup-python](https://github.com/actions/setup-python) | `2` | `5` | | [actions/download-artifact](https://github.com/actions/download-artifact) | `4.1.4` | `4.1.8` | | [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `3.0.0` | `3.5.0` | Updates `actions/checkout` from 2 to 4 - [Release notes](https://github.com/actions/checkout/releases) - [Commits](actions/checkout@v2...v4) Updates `actions/cache` from 3.3.3 to 4.0.2 - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](actions/cache@e12d46a...0c45773) Updates `actions/setup-python` from 2 to 5 - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](actions/setup-python@v2...v5) Updates `actions/download-artifact` from 4.1.4 to 4.1.8 - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](actions/download-artifact@c850b93...fa0a91b) Updates `docker/setup-buildx-action` from 3.0.0 to 3.5.0 - [Release notes](https://github.com/docker/setup-buildx-action/releases) - [Commits](docker/setup-buildx-action@f95db51...aa33708) --- updated-dependencies: - dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-major dependency-group: ci_dependencies - dependency-name: actions/cache dependency-type: direct:production update-type: version-update:semver-major dependency-group: ci_dependencies - dependency-name: actions/setup-python dependency-type: direct:production update-type: version-update:semver-major dependency-group: ci_dependencies - dependency-name: actions/download-artifact dependency-type: direct:production update-type: version-update:semver-patch dependency-group: ci_dependencies - dependency-name: docker/setup-buildx-action dependency-type: direct:production update-type: version-update:semver-minor dependency-group: ci_dependencies ... Signed-off-by: dependabot[bot] <[email protected]>

…dfa0d74c5e

dependabot bot requested review from a team as code owners July 25, 2024 15:33

dependabot bot added A1-insubstantial Pull request requires no code review (e.g., a sub-repository hash update). R0-silent Changes should not be mentioned in any release notes labels Jul 25, 2024

AndWeHaveAPlan approved these changes Jul 25, 2024

View reviewed changes

paritytech-review-bot bot requested a review from a team July 25, 2024 18:41

EgorPopelyaev approved these changes Jul 26, 2024

View reviewed changes

dependabot bot force-pushed the dependabot/github_actions/ci_dependencies-dfa0d74c5e branch from a4c77db to 8c3f78c Compare July 26, 2024 09:42

ggwpez enabled auto-merge July 26, 2024 09:45

Merge branch 'master' into dependabot/github_actions/ci_dependencies-…

ed80a1e

…dfa0d74c5e

bkchr approved these changes Jul 28, 2024

View reviewed changes

ggwpez added this pull request to the merge queue Jul 28, 2024

Merged via the queue into master with commit f5d4e92 Jul 28, 2024
159 of 161 checks passed

ggwpez deleted the dependabot/github_actions/ci_dependencies-dfa0d74c5e branch July 28, 2024 20:04

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the ci_dependencies group with 5 updates #5146

Bump the ci_dependencies group with 5 updates #5146

dependabot bot commented on behalf of github Jul 25, 2024 •

edited

Loading

Bump the ci_dependencies group with 5 updates #5146

Bump the ci_dependencies group with 5 updates #5146

Conversation

dependabot bot commented on behalf of github Jul 25, 2024 • edited Loading

v4.0.0

What's Changed

New Contributors

v3.6.0

What's Changed

New Contributors

v3.5.3

What's Changed

New Contributors

v3.5.2

What's Changed

v3.5.1

What's Changed

New Contributors

v4.0.2

What's Changed

v4.0.1

What's Changed

New Contributors

v4.0.0

What's Changed

New Contributors

Releases

4.0.2

4.0.1

4.0.0

3.3.3

3.3.2

3.3.1

3.3.0

3.2.6

3.2.5

3.2.4

3.2.3

3.2.2

v5.0.0

What's Changed

v4.8.0

What's Changed

New Contributors

v4.7.1

What's Changed

v4.7.0

v4.1.8

What's Changed

v4.1.7

What's Changed

v4.1.6

What's Changed

v4.1.5

What's Changed

v3.5.0

v3.4.0

v3.3.0

v3.2.0

v3.1.0

dependabot bot commented on behalf of github Jul 25, 2024 •

edited

Loading