Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): Bump the gha-deps group with 4 updates #63

Merged
merged 1 commit into from
Dec 3, 2023

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 1, 2023

Bumps the gha-deps group with 4 updates: actions/checkout, ruby/setup-ruby, artichoke/setup-rust and aws-actions/configure-aws-credentials.

Updates actions/checkout from 4.1.0 to 4.1.1

Release notes

Sourced from actions/checkout's releases.

v4.1.1

What's Changed

New Contributors

Full Changelog: actions/checkout@v4.1.0...v4.1.1

Changelog

Sourced from actions/checkout's changelog.

Changelog

Commits

Updates ruby/setup-ruby from 1.154.0 to 1.161.0

Release notes

Sourced from ruby/setup-ruby's releases.

Add ruby-3.3.0-preview3

No release notes provided.

Update from Node 16 to Node 20 since 16 is deprecated

What's Changed

New Contributors

Full Changelog: ruby/setup-ruby@v1.158.0...v1.159.0

Add support for macos-13-arm64 GitHub runners

Full Changelog: ruby/setup-ruby@v1.155.0...v1.156.0

Consider BUNDLE_ONLY in cache key

What's Changed

New Contributors

Full Changelog: ruby/setup-ruby@v1.154.0...v1.155.0

Commits
  • 8575951 Add ruby-3.3.0-preview3
  • 036ef45 Explicitly exit after this action runs to not wait for hanging promises
  • 552f83f Add jruby-9.3.13.0,jruby-9.4.5.0
  • 54a18e2 Update deprecated Node 16 to 20
  • cd48c8e Add truffleruby-23.1.1,truffleruby+graalvm-23.1.1
  • a05e473 Java is now available on macos-arm-oss
  • eba3a0f Add jruby-9.4.4.0
  • 679e23d Improve documentation about the self-hosted input
  • 9f4cc09 3.1 is now available on macos-arm64
  • 4d74528 Cleanup
  • Additional commits viewable in compare view

Updates artichoke/setup-rust from 1.10.0 to 1.11.0

Release notes

Sourced from artichoke/setup-rust's releases.

v1.11.0

What's Changed

Full Changelog: artichoke/setup-rust@v1.10.0...v1.11.0

Commits
  • d5a6244 Merge pull request #67 from artichoke/dependabot/bundler/bundler-deps-40bc1f9de8
  • 50a71a2 Merge pull request #69 from artichoke/dependabot/github_actions/build-and-tes...
  • e082af7 Merge pull request #66 from artichoke/dependabot/github_actions/lint-and-form...
  • de63fbf Merge pull request #65 from artichoke/dependabot/github_actions/check-minimal...
  • 801fecf Merge pull request #68 from artichoke/dependabot/github_actions/gha-deps-bc90...
  • 8b1ede8 Bump the gha-deps group in /build-and-test with 1 update
  • dbe8956 Bump the gha-deps group with 3 updates
  • 8d7b93c Bump the bundler-deps group with 1 update
  • fac2e18 Bump the gha-deps group in /lint-and-format with 1 update
  • 5bdc495 Bump the gha-deps group in /check-minimal-versions with 1 update
  • Additional commits viewable in compare view

Updates aws-actions/configure-aws-credentials from 4.0.0 to 4.0.1

Release notes

Sourced from aws-actions/configure-aws-credentials's releases.

v4.0.1

See the changelog for details about the changes included in this release.

Changelog

Sourced from aws-actions/configure-aws-credentials's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

4.0.1 (2023-10-03)

Documentation

  • Throw a warning when customers use long-term credentials.

4.0.0 (2023-09-11)

  • Upgraded runtime to node20 from node16

3.0.2 (2023-09-07)

Bug Fixes

3.0.1 (2023-08-24)

Features

  • Can configure special-characters-workaround to keep retrying credentials if the returned credentials have special characters (Fixes #599)

Bug Fixes

Changes to existing functionality

  • Special characters are now allowed in returned credential variables unless you configure the special-characters-workaround option

3.0.0 (2023-08-21)

Features

  • Can configure max-retries and disable-retry to modify retry functionality when the assume role call fails
  • Set returned credentials as step outputs with output-credentials
  • Clear AWS related environment variables at the start of the action with unset-current-credentials
  • Unique role identifier is now printed in the workflow logs

Bug Fixes

  • Can't use credentials if they contain a special character
  • Retry functionality added when generating the JWT fails
  • Can now use webIdentityTokenFile option
  • Branch name validation too strict
  • JS SDK v2 deprecation warning in workflow logs

Changes to existing functionality

  • Default session duration is now 1 hour in all cases (from 6 hours in some cases)
  • Account ID will not be masked by default in logs

... (truncated)

Commits
  • 010d0da chore: release v4.0.1 (#876)
  • b48e2ee chore: Bump @​types/node from 20.7.0 to 20.8.2 (#875)
  • 183b94a chore: Update dist
  • 1d4ae37 chore: Bump @​aws-sdk/client-sts from 3.418.0 to 3.423.0 (#873)
  • 6a430ce chore: Bump @​smithy/node-http-handler from 2.1.5 to 2.1.6 (#872)
  • 8402193 chore: Bump @​smithy/property-provider from 2.0.10 to 2.0.11 (#874)
  • f31c158 feat: Recommending using OIDC (#871)
  • 164817a chore: Update dist
  • e2c335e chore: Bump @​aws-sdk/client-sts from 3.414.0 to 3.418.0 (#870)
  • a1a09b7 chore: Bump eslint from 8.49.0 to 8.50.0 (#867)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the gha-deps group with 4 updates: [actions/checkout](https://github.com/actions/checkout), [ruby/setup-ruby](https://github.com/ruby/setup-ruby), [artichoke/setup-rust](https://github.com/artichoke/setup-rust) and [aws-actions/configure-aws-credentials](https://github.com/aws-actions/configure-aws-credentials).


Updates `actions/checkout` from 4.1.0 to 4.1.1
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v4.1.0...v4.1.1)

Updates `ruby/setup-ruby` from 1.154.0 to 1.161.0
- [Release notes](https://github.com/ruby/setup-ruby/releases)
- [Commits](ruby/setup-ruby@52b8784...8575951)

Updates `artichoke/setup-rust` from 1.10.0 to 1.11.0
- [Release notes](https://github.com/artichoke/setup-rust/releases)
- [Commits](artichoke/setup-rust@v1.10.0...v1.11.0)

Updates `aws-actions/configure-aws-credentials` from 4.0.0 to 4.0.1
- [Release notes](https://github.com/aws-actions/configure-aws-credentials/releases)
- [Changelog](https://github.com/aws-actions/configure-aws-credentials/blob/main/CHANGELOG.md)
- [Commits](aws-actions/configure-aws-credentials@8c3f20d...010d0da)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gha-deps
- dependency-name: ruby/setup-ruby
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gha-deps
- dependency-name: artichoke/setup-rust
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gha-deps
- dependency-name: aws-actions/configure-aws-credentials
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gha-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the A-deps Area: Source and library dependencies. label Dec 1, 2023
@lopopolo lopopolo merged commit 5345798 into trunk Dec 3, 2023
16 checks passed
@lopopolo lopopolo deleted the dependabot/github_actions/gha-deps-c75017b325 branch December 3, 2023 01:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
A-deps Area: Source and library dependencies.
Development

Successfully merging this pull request may close these issues.

1 participant