Skip to content

ci: bump the github-actions group across 1 directory with 2 updates #1220

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 23, 2025

Bumps the github-actions group with 2 updates in the / directory: tj-actions/changed-files and mikepenz/action-junit-report.

Updates tj-actions/changed-files from 45.0.9 to 46.0.2

Release notes

Sourced from tj-actions/changed-files's releases.

v46.0.2

What's Changed

New Contributors

Full Changelog: tj-actions/changed-files@v46...v46.0.2

v46.0.1

[!WARNING]
Security Alert: A critical security issue was identified in this action due to a compromised commit.

This commit has been removed from all tags and branches, and necessary measures have been implemented to prevent similar issues in the future.

Action Required:

  • Review your workflows executed between March 14 and March 15. If you notice unexpected output under the changed-files section, decode it using the following command: echo 'xxx' | base64 -d | base64 -d
    If the output contains sensitive information (e.g., tokens or secrets), revoke and rotate those secrets immediately.
  • If your workflows reference this commit directly by its SHA, you must update them immediately to avoid using the compromised version.
  • If you are using tagged versions (e.g., v35, v44.5.1), no action is required as these tags have been updated and are now safe to use.

Additionally, as a precaution, we recommend rotating any secrets that may have been exposed during this timeframe to ensure the continued security of your workflows.

What's Changed

Full Changelog: tj-actions/changed-files@v46...v46.0.1

v46.0.0

[!WARNING]
Security Alert: A critical security issue was identified in this action due to a compromised commit.

This commit has been removed from all tags and branches, and necessary measures have been implemented to prevent similar issues in the future.

... (truncated)

Changelog

Sourced from tj-actions/changed-files's changelog.

Changelog

46.0.2 - (2025-03-22)

🐛 Bug Fixes

  • Update log message when attempting to locate merge base (#2493) (a5cad85) - (Tonye Jack)

➕ Add

  • Add hint to revoke leaked token (#2475)

(d52b942) - (undefined)

🔄 Update

  • Updated README.md (#2496)

Co-authored-by: github-actions[bot] (9cc867c) - (github-actions[bot])

  • Updated README.md (#2492)

Co-authored-by: github-actions[bot] (f2f439b) - (github-actions[bot])

  • Updated README.md (#2479)

Co-authored-by: github-actions[bot] (531f5f7) - (github-actions[bot])

  • Updated README.md (#2476)

Co-authored-by: github-actions[bot] (9237eb7) - (github-actions[bot])

📚 Documentation

  • Add undefined-moe as a contributor for doc (#2498) (26a3863) - (allcontributors[bot])
  • Update update-readme.yml to use commit hashes in the docs (#2495) (3a33fa9) - (Tonye Jack)
  • Add RajendraP as a contributor for doc (#2491) (678ecec) - (allcontributors[bot])
  • Update versions (#2488) (6482371) - (Tonye Jack)
  • Remove link to commit (#2481) (0fee5fb) - (Tonye Jack)
  • Update README.md (#2478) (dccd194) - (Tonye Jack)

⚙️ Miscellaneous Tasks

  • Update sync-release-version.yml to use commit hash for tags in docs (#2497) (a530a27) - (Tonye Jack)
  • deps: Bump actions/setup-node from 4.2.0 to 4.3.0 (#2484) (0b975f6) - (dependabot[bot])

⬆️ Upgrades

  • Upgraded to v46.0.1 (#2474)

Co-authored-by: github-actions[bot] (45fb12d) - (github-actions[bot])

46.0.1 - (2025-03-16)

... (truncated)

Commits
  • 26a3863 docs: add undefined-moe as a contributor for doc (#2498)
  • a530a27 chore: update sync-release-version.yml to use commit hash for tags in docs (#...
  • 9cc867c Updated README.md (#2496)
  • 3a33fa9 docs: Update update-readme.yml to use commit hashes in the docs (#2495)
  • a5cad85 fix: update log message when attempting to locate merge base (#2493)
  • f2f439b Updated README.md (#2492)
  • 678ecec docs: add RajendraP as a contributor for doc (#2491)
  • 6482371 docs: update versions (#2488)
  • 0b975f6 chore(deps): bump actions/setup-node from 4.2.0 to 4.3.0 (#2484)
  • 0fee5fb docs: remove link to commit (#2481)
  • Additional commits viewable in compare view

Updates mikepenz/action-junit-report from 5.4.0 to 5.5.0

Release notes

Sourced from mikepenz/action-junit-report's releases.

v5.5.0

🚀 Features

  • Include time in summary tables

📦 Dependencies

  • Dependency upgrades

Contributors:

Commits
  • 97744ec Merge pull request #1318 from mikepenz/fix/1316
  • 1f0645c - disable time by default again
  • acee33b - some additional formatting
  • 6660b3d - test with time once more
  • 872af4e - update tests for adjusted format
  • 559fc44 - format time in human readable form
  • db7ef43 - fix tests with time being included
  • da282a2 - include time in the summary table
  • 9ddb3ab Merge pull request #1317 from mikepenz/feature/dependency_upgrades_20250309
  • 7734196 - recompile dist
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot added dependabot created by dependabot dependencies labels Mar 23, 2025
@codejedi365 codejedi365 force-pushed the dependabot/github_actions/github-actions-3846de8dbb branch from aad8d88 to 01160fa Compare April 17, 2025 01:45
@codejedi365 codejedi365 merged commit d274f0c into master Apr 17, 2025
12 checks passed
@codejedi365 codejedi365 deleted the dependabot/github_actions/github-actions-3846de8dbb branch April 17, 2025 01:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependabot created by dependabot dependencies
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant