Bump @actions/core from 1.10.0 to 1.11.0 #54
Conversation
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
Bumps [@actions/core](https://github.com/actions/toolkit/tree/HEAD/packages/core) from 1.10.0 to 1.11.0. - [Changelog](https://github.com/actions/toolkit/blob/main/packages/core/RELEASES.md) - [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/core) --- updated-dependencies: - dependency-name: "@actions/core" dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
dependencies
|
🐶 RedRover WalkthroughThis update primarily focuses on upgrading the dependencies for Changes
|
There was a problem hiding this comment.
🐶 RedRover
Files selected (2)
- package-lock.json (4)
- package.json (1)
Files skipped from review due to trivial changes (1)
- package.json
Review comments generated (4)
- Review: 4
- LGTM: 0
Tips
Chat with RedRover (@redrover)
- Reply on review comments left by this bot to ask follow-up questions. A review comment is a comment on a diff or a file.
- Invite the bot into a review comment chain by tagging
@redroverin a reply.
Code suggestions
- The bot may make code suggestions, but please review them carefully before committing since the line number ranges may be misaligned.
- You can edit the comment made by the bot and manually tweak the suggestion if it is slightly off.
Pausing incremental reviews
- Add
@redrover: ignoreanywhere in the PR description to pause further reviews from the bot.
| @@ -9,7 +9,7 @@ | |||
| "version": "0.0.0", | |||
| "license": "MIT", | |||
| "dependencies": { | |||
| "@actions/core": "^1.10.0", | |||
| "@actions/core": "^1.11.0", | |||
There was a problem hiding this comment.
🐶 RedRover
The version of @actions/core has been updated from 1.10.0 to 1.11.0. This is in line with the PR title and description, which mention this update.
- "@actions/core": "^1.10.0",
+ "@actions/core": "^1.11.0",| "version": "1.11.0", | ||
| "resolved": "https://registry.npmjs.org/@actions/core/-/core-1.11.0.tgz", | ||
| "integrity": "sha512-I21jQUzEjbZolw3jFZ/0iHGCb+rePCww9MaA0SbVFae4FpBTQWP1GIvr/m5Y6GVaxrDz7p3RhBtpBzwkA3rPSA==", | ||
| "dependencies": { | ||
| "@actions/http-client": "^2.0.1", | ||
| "uuid": "^8.3.2" | ||
| "@actions/exec": "^1.1.1", | ||
| "@actions/http-client": "^2.0.1" | ||
| } |
There was a problem hiding this comment.
🐶 RedRover
The @actions/core package details have been updated to reflect the new version 1.11.0. The dependency on uuid has been removed as per the changelog, and a new dependency on @actions/exec has been added.
- "version": "1.10.0",
- "resolved": "https://registry.npmjs.org/@actions/core/-/core-1.10.0.tgz",
- "integrity": "sha512-2aZDDa3zrrZbP5ZYg159sNoLRb61nQ7awl5pSvIq5Qpj81vwDzdMRKzkWJGJuwVvWpvZKx7vspJALyvaaIQyug==",
- "dependencies": {
- "@actions/http-client": "^2.0.1",
- "uuid": "^8.3.2"
- }
+ "version": "1.11.0",
+ "resolved": "https://registry.npmjs.org/@actions/core/-/core-1.11.0.tgz",
+ "integrity": "sha512-I21jQUzEjbZolw3jFZ/0iHGCb+rePCww9MaA0SbVFae4FpBTQWP1GIvr/m5Y6GVaxrDz7p3RhBtpBzwkA3rPSA==",
+ "dependencies": {
+ "@actions/exec": "^1.1.1",
+ "@actions/http-client": "^2.0.1"
+ }| "node_modules/@actions/io": { | ||
| "version": "1.1.3", | ||
| "resolved": "https://registry.npmjs.org/@actions/io/-/io-1.1.3.tgz", | ||
| "integrity": "sha512-wi9JjgKLYS7U/z8PPbco+PvTb/nRWjeoFlJ1Qer83k/3C5PHQi28hiVdeE2kHXmIL99mQFawx8qt/JPjZilJ8Q==" | ||
| }, |
There was a problem hiding this comment.
🐶 RedRover
The new package @actions/io has been added with version 1.1.3. This is a new dependency introduced by the updated @actions/core package.
+ "node_modules/@actions/io": {
+ "version": "1.1.3",
+ "resolved": "https://registry.npmjs.org/@actions/io/-/io-1.1.3.tgz",
+ "integrity": "sha512-wi9JjgKLYS7U/z8PPbco+PvTb/nRWjeoFlJ1Qer83k/3C5PHQi28hiVdeE2kHXmIL99mQFawx8qt/JPjZilJ8Q=="
+ }| "requires-port": "^1.0.0" | ||
| } | ||
| }, | ||
| "node_modules/uuid": { | ||
| "version": "8.3.2", | ||
| "resolved": "https://registry.npmjs.org/uuid/-/uuid-8.3.2.tgz", | ||
| "integrity": "sha512-+NYs2QeMWy+GWFOEm9xnn6HCDp0l7QBD7ml8zLUmJ+93Q5NF0NocErnwkTkXVFNiX3/fpC6afS8Dhb/gz7R7eg==", | ||
| "bin": { | ||
| "uuid": "dist/bin/uuid" | ||
| } | ||
| }, | ||
| "node_modules/v8-to-istanbul": { | ||
| "version": "8.1.1", | ||
| "resolved": "https://registry.npmjs.org/v8-to-istanbul/-/v8-to-istanbul-8.1.1.tgz", |
There was a problem hiding this comment.
🐶 RedRover
The uuid package has been removed, which aligns with the changelog for @actions/core version 1.11.0 that mentions this removal.
- "node_modules/uuid": {
- "version": "8.3.2",
- "resolved": "https://registry.npmjs.org/uuid/-/uuid-8.3.2.tgz",
- "integrity": "sha512-+NYs2QeMWy+GWFOEm9xnn6HCDp0l7QBD7ml8zLUmJ+93Q5NF0NocErnwkTkXVFNiX3/fpC6afS8Dhb/gz7R7eg==",
- "bin": {
- "uuid": "dist/bin/uuid"
- }
- },
|
Superseded by #55. |
Bumps @actions/core from 1.10.0 to 1.11.0.
Changelog
Sourced from
@actions/core's changelog.Commits
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)@actions/coreand related packages to ensure compatibility with the latest versions.@actions/ioto enhance I/O operations, improving overall performance and reliability.@actions/corefrom 1.10.0 to 1.11.0 in the package.json file, incorporating new features and bug fixes from the updated library.