Bump the github-actions group across 1 directory with 8 updates #3615
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the github-actions group with 8 updates in the / directory:
2.5.1
2.9.1
2.7.0
4.1.7
1
3
2.21.3
3.26.6
3.0.7
4.3.4
2.0.6
2.4.0
3.1.2
4.4.0
3.12.0
4.2.2
Updates
step-security/harden-runner
from 2.5.1 to 2.9.1Release notes
Sourced from step-security/harden-runner's releases.
... (truncated)
Commits
5c7944e
Merge pull request #440 from step-security/rc-11c79be45
Merge branch 'main' into rc-11deb3383
Merge pull request #446 from h0x0er/log-step23c8215
update dist727d06a
logging stepf0db2aa
Merge pull request #441 from step-security/dependabot/github_actions/github/c...1938ffc
Merge branch 'main' into dependabot/github_actions/github/codeql-action-3.25.138e7dd2c
Merge pull request #442 from step-security/dependabot/github_actions/step-sec...f2823ee
Bump step-security/publish-unit-test-result-action from 1 to 25f95e05
Bump github/codeql-action from 2.13.4 to 3.25.13Updates
actions/checkout
from 2.7.0 to 4.1.7Release notes
Sourced from actions/checkout's releases.
... (truncated)
Changelog
Sourced from actions/checkout's changelog.
... (truncated)
Commits
692973e
Prepare 4.1.7 release (#1775)6ccd57f
Pin actions/checkout's own workflows to a known, good, stable version. (#1776)b17fe1e
Handle hidden refs (#1774)b80ff79
Bump actions/checkout from 3 to 4 (#1697)b1ec302
Bump the minor-npm-dependencies group across 1 directory with 4 updates (#1739)a5ac7e5
Update for 4.1.6 release (#1733)24ed1a3
Check platform for extension (#1732)44c2b7a
README: Suggestuser.email
to be `41898282+github-actions[bot]@users
.norepl...8459bc0
Bump actions/upload-artifact from 2 to 4 (#1695)3f603f6
Bump actions/setup-node from 1 to 4 (#1696)Updates
arduino/setup-protoc
from 1 to 3Release notes
Sourced from arduino/setup-protoc's releases.
... (truncated)
Commits
c65c819
Upgrade to node 20 (#95)52a53b4
Merge pull request #93 from arduino/dependabot/npm_and_yarn/babel/traverse-7....cf7ab7f
Bump@babel/traverse
from 7.22.1 to 7.23.2e2995ba
Correctconvetion
typo in README (#91)a8b67ba
bump semver to 7.5.3 (#90)1530d62
Bump semver from 7.5.1 to 7.5.2 (#87)0fbeb49
Exposepath
andversion
inoutputs
(#89)9b1ee5b
v2 release note (#82)28fd3e5
Support only the new protobuf versioning scheme (#78)Updates
github/codeql-action
from 2.21.3 to 3.26.6Changelog
Sourced from github/codeql-action's changelog.
... (truncated)
Commits
4dd1613
Merge pull request #2452 from github/update-v3.26.6-7233ec5e6dd9dd2d
Update changelog for v3.26.67233ec5
Merge pull request #2449 from github/update-bundle/codeql-bundle-v2.18.3a32c44d
Add changelog note2966897
Update default bundle to codeql-bundle-v2.18.3b8efe4d
Merge pull request #2435 from github/update-supported-enterprise-server-versionsab408a8
Merge branch 'main' into update-supported-enterprise-server-versions864b979
Merge pull request #2443 from github/dbartol/config-file-telemetryd36c7aa
Merge pull request #2448 from github/dependabot/npm_and_yarn/npm-09b7c43f6bb3bf514
Update checked-in dependenciesUpdates
actions/dependency-review-action
from 3.0.7 to 4.3.4Release notes
Sourced from actions/dependency-review-action's releases.
... (truncated)
Commits
5a2ce3f
Merge pull request #791 from actions/juxtin/update-versionac6a6ad
Prepare even more for v4.3.43e2b917
Merge pull request #790 from actions/juxtin/update-versiond9ab9c8
Update version in package.json8c152c7
Merge pull request #769 from actions/dependabot/npm_and_yarn/zod-3.23.80085d30
Update dist08b5bf2
Bump zod from 3.22.4 to 3.23.8986fce9
Merge pull request #784 from actions/dependabot/npm_and_yarn/got-14.4.128743f8
Merge pull request #719 from actions/change-spdx-parserd6f34c3
Merge pull request #789 from actions/dependabot/npm_and_yarn/braces-3.0.3Updates
ossf/scorecard-action
from 2.0.6 to 2.4.0Release notes
Sourced from ossf/scorecard-action's releases.
... (truncated)
Commits
62b2cac
bump docker tag to v2.4.0 for release (#1414)c09630c
lower license score alert threshold to 9 (#1411)cf8594c
🌱 Bump github.com/sigstore/cosign/v2 from 2.2.4 to 2.3.0 (#1413)de5fcb9
🌱 Bump the github-actions group with 2 updates (#1412)a46b90b
bump scorecard to v5.0.0 release (#1410)9fc518d
🌱 Bump golang in the docker-images group (#1407)a8eaa1b
🌱 Bump the github-actions group with 2 updates (#1408)873d5fd
🌱 Bump the github-actions group across 1 directory with 2 updates (#...54cc1fe
🌱 Bump the docker-images group with 2 updates (#1401)82bcb91
🌱 Bump golang.org/x/net from 0.26.0 to 0.27.0 (#1400)Updates
actions/upload-artifact
from 3.1.2 to 4.4.0Release notes
Sourced from actions/upload-artifact's releases.
... (truncated)
Commits
5076954
Merge pull request #598 from actions/joshmgross/exclude-hidden-filesd52396a
Add a warning about enablinginclude-hidden-files
710f362
Remove "merged" frominclude-hidden-files
input description3b315f2
npm run release
again 🙂3be2180
Remove another trailing comma453e8d0
Update glob license0a398c1
npm run release
a0c40cf
Update to latest@actions/glob
and fix testsacb59e4
lint
cb6558b
Exclude hidden files by defaultUpdates
actions/setup-java
from 3.12.0 to 4.2.2Release notes
Sourced from actions/setup-java's releases.