ci: bump the github-actions group with 4 updates #10649
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Bumps the github-actions group with 4 updates: [crate-ci/typos](https://github.com/crate-ci/typos), [actions/github-script](https://github.com/actions/github-script), [DeterminateSystems/nix-installer-action](https://github.com/determinatesystems/nix-installer-action) and [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action). Updates `crate-ci/typos` from 1.16.22 to 1.16.23 - [Release notes](https://github.com/crate-ci/typos/releases) - [Changelog](https://github.com/crate-ci/typos/blob/master/CHANGELOG.md) - [Commits](crate-ci/typos@v1.16.22...v1.16.23) Updates `actions/github-script` from 5 to 6 - [Release notes](https://github.com/actions/github-script/releases) - [Commits](actions/github-script@v5...v6) Updates `DeterminateSystems/nix-installer-action` from 6 to 7 - [Release notes](https://github.com/determinatesystems/nix-installer-action/releases) - [Commits](DeterminateSystems/nix-installer-action@v6...v7) Updates `aquasecurity/trivy-action` from 0.13.1 to 0.14.0 - [Release notes](https://github.com/aquasecurity/trivy-action/releases) - [Commits](aquasecurity/trivy-action@f78e9ec...2b6a709) --- updated-dependencies: - dependency-name: crate-ci/typos dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: actions/github-script dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: DeterminateSystems/nix-installer-action dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: aquasecurity/trivy-action dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com>
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the github-actions group with 4 updates: crate-ci/typos, actions/github-script, DeterminateSystems/nix-installer-action and aquasecurity/trivy-action.
Updates
crate-ci/typosfrom 1.16.22 to 1.16.23Release notes
Sourced from crate-ci/typos's releases.
Changelog
Sourced from crate-ci/typos's changelog.
Commits
c97d621chore: Release8e40c7edocs: Update changelogf01cfa5Merge pull request #869 from epage/excludee24c694fix(cli): Respect force-exclude for simple exclude pattersnedfb79ftest(cli): Reproduce force-exclude bugUpdates
actions/github-scriptfrom 5 to 6Release notes
Sourced from actions/github-script's releases.
Commits
d7906e4Merge pull request #363 from mjpieters/auto_debugea954ffDefault debug to current runner debug state57c10d4Merge pull request #356 from mjpieters/clean_depseae7dc1Merge branch 'main' into clean_depsf1ab577Merge pull request #357 from mjpieters/fix_input_handling8d9f8fcFix null handling, covered by integration testsa4f398eRemove unused dependencies806be26Clean and spruce up the integration tests a bit8d76c9aMerge pull request #358 from mjpieters/request-log-plugin78f623bAdd@octokit/plugin-request-log, to produce debug output for requestsUpdates
DeterminateSystems/nix-installer-actionfrom 6 to 7Release notes
Sourced from DeterminateSystems/nix-installer-action's releases.
Commits
5620eb4Merge pull request #53 from DeterminateSystems/use-github-tool-cache-and-exec8b5f066Use Github Actions provided tool cache and exec7fa8f59Detected whether we're running in a Namespace runner, and if so, set `init: n...721f94fMerge pull request #47 from DeterminateSystems/colemickens/fix-stream-closebb22c86retries: autoClose, but open file with O_SYNCd46d5b1retries: switch back to piping with non-web node streams663467bmain.ts: installer use filehandle, make sure we fsync it before close4e0fccbeslint/tsconfig: validate no floating Promises, adjust tsconfig806550dpackage-lock.json: include node-fetch removala5a150bMerge pull request #48 from DeterminateSystems/add-dist-folder-checklUpdates
aquasecurity/trivy-actionfrom 0.13.1 to 0.14.0Release notes
Sourced from aquasecurity/trivy-action's releases.
Commits
2b6a709Add filesystem alias (#269)47e481aUpdate totrivyversion0.47.0in Dockerfile (#280)7b07fa7fix: set return code after each Trivy call (#247)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions