Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump the github-actions group with 5 updates #415

Closed

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 19, 2024

Bumps the github-actions group with 5 updates:

Package From To
dessant/lock-threads 7de207be1d3ce97a9abe6ff1306222982d1ca9f9 1bf7ec25051fe7c00bdd17e6a7cf3d7bfb7dc771
actions/upload-artifact 3.1.3 4.2.0
joerick/cibuildwheel 1e5c26b5b10baa3fb2659be31c51e8bab6f7c4e9 fff9ec32ed25a9c576750c91e06b410ed0c15db7
actions/download-artifact 3.0.2 4.1.1
pypa/gh-action-pypi-publish f946db0f765b9ae754e44bfd5ae5b8b91cfb37ef 2f6f737ca5f74c637829c0f5c3acd0e29ea5e8bf

Updates dessant/lock-threads from 7de207be1d3ce97a9abe6ff1306222982d1ca9f9 to 1bf7ec25051fe7c00bdd17e6a7cf3d7bfb7dc771

Changelog

Sourced from dessant/lock-threads's changelog.

Changelog

All notable changes to this project will be documented in this file. See commit-and-tag-version for commit guidelines.

5.0.1 (2023-11-22)

Bug Fixes

  • support filtering threads by labels with spaces (0a63678), closes #40

5.0.0 (2023-11-14)

⚠ BREAKING CHANGES

  • Discussions are also processed by default, set the process-only input parameter to preserve the old behavior
    steps:
      - uses: dessant/lock-threads@v5
        with:
          process-only: 'issues, prs'
  • the action now requires Node.js 20

Features

Bug Fixes

4.0.1 (2023-06-12)

Bug Fixes

  • retry and throttle GitHub API requests (1618e91), closes #35

4.0.0 (2022-12-04)

⚠ BREAKING CHANGES

  • the action now requires Node.js 16

... (truncated)

Commits

Updates actions/upload-artifact from 3.1.3 to 4.2.0

Release notes

Sourced from actions/upload-artifact's releases.

v4.2.0

What's Changed

Full Changelog: actions/upload-artifact@v4...v4.2.0

v4.1.0

What's Changed

New Contributors

Full Changelog: actions/upload-artifact@v4...v4.1.0

v4.0.0

What's Changed

The release of upload-artifact@v4 and download-artifact@v4 are major changes to the backend architecture of Artifacts. They have numerous performance and behavioral improvements.

ℹ️ However, this is a major update that includes breaking changes. Artifacts created with versions v3 and below are not compatible with the v4 actions. Uploads and downloads must use the same major actions versions. There are also key differences from previous versions that may require updates to your workflows.

For more information, please see:

  1. The changelog post.
  2. The README.
  3. The migration documentation.
  4. As well as the underlying npm package, @​actions/artifact documentation.

New Contributors

Full Changelog: actions/upload-artifact@v3...v4.0.0

Commits
  • 694cdab Merge pull request #501 from actions/robherley/overwrite-artifact
  • 05d4fe6 run licensed against version that matches ci
  • 40b3052 update readme
  • 49552fc add overwrite tests to workflow
  • 7961590 licensed cache
  • 11ff42c add new overwrite input & docs
  • 1eb3cb2 Merge pull request #497 from actions/robherley/update-readme-limit
  • 8688a86 Update readme to reflect new artifact/job limit
  • 73d8b66 Support artifact-url output (#496)
  • c320f57 Update README.md (#492)
  • Additional commits viewable in compare view

Updates joerick/cibuildwheel from 1e5c26b5b10baa3fb2659be31c51e8bab6f7c4e9 to fff9ec32ed25a9c576750c91e06b410ed0c15db7

Changelog

Sourced from joerick/cibuildwheel's changelog.


title: Changelog

Changelog

v2.16.2

3 October 2023

  • 🛠 Updates CPython 3.12 version to 3.12.0, final release (#1635)
  • ✨ Adds a debug option CIBW_DEBUG_KEEP_CONTAINER to stop cibuildwheel deleting build containers after the build finishes. (#1620)
  • 📚 Adds support for [tool.cibuildwheel] checking by adding a schema compatible with the validate-pyproject tool (#1622, #1628, #1629)
  • 🐛 Fix parsing of CIBW_CONTAINER_ENGINE and CIBW_BUILD_FRONTEND options to not break arguments on : characters (#1621)
  • 🐛 Fix the evaluation order of CIBW_ENVIRONMENT and CIBW_ENVIRONMENT_PASS so that CIBW_ENVIRONMENT assignments can reference environment variables passed through from the host machine. (#1617)
  • 🛠 Supports manylinux images' deferred installation of interpreters through the manylinux-interpreters tool (#1630)

v2.16.1

26 September 2023

  • 🛠 Updates the prerelease CPython 3.12 version to 3.12.0rc3 (#1625)
  • 🛠 Only calls linux32 in containers when necessary (#1599)

v2.16.0

18 September 2023

  • ✨ Add the ability to pass additional flags to a build frontend through the CIBW_BUILD_FRONTEND option (#1588).
  • ✨ The environment variable SOURCE_DATE_EPOCH is now automatically passed through to container Linux builds (useful for reproducible builds!) (#1589)
  • 🛠 Updates the prerelease CPython 3.12 version to 3.12.0rc2 (#1604)
  • 🐛 Fix requires_python auto-detection from setup.py when the call to setup() is within an if __name__ == "__main__" block (#1613)
  • 🐛 Fix a bug that prevented building Linux wheels in Docker on a Windows host (#1573)
  • 🐛 --only can now select prerelease-pythons (#1564)
  • 📚 Docs & examples updates (#1582, #1593, #1598, #1615)

v2.15.0

8 August 2023

  • 🌟 CPython 3.12 wheels are now built by default - without the CIBW_PRERELEASE_PYTHONS flag. It's time to build and upload these wheels to PyPI! This release includes CPython 3.12.0rc1, which is guaranteed to be ABI compatible with the final release. (#1565)
  • ✨ Adds musllinux_1_2 support - this allows packagers to build for musl-based Linux distributions on a more recent Alpine image, and a newer musl libc. (#1561)

v2.14.1

15 July 2023

  • 🛠 Updates the prerelease CPython 3.12 version to 3.12.0b4 (#1550)

v2.14.0

... (truncated)

Commits

Updates actions/download-artifact from 3.0.2 to 4.1.1

Release notes

Sourced from actions/download-artifact's releases.

v4.1.1

v4.1.0

What's Changed

New Contributors

Full Changelog: actions/download-artifact@v4...v4.1.0

v4.0.0

What's Changed

The release of upload-artifact@v4 and download-artifact@v4 are major changes to the backend architecture of Artifacts. They have numerous performance and behavioral improvements.

ℹ️ However, this is a major update that includes breaking changes. Artifacts created with versions v3 and below are not compatible with the v4 actions. Uploads and downloads must use the same major actions versions. There are also key differences from previous versions that may require updates to your workflows.

For more information, please see:

  1. The changelog post.
  2. The README.
  3. The migration documentation.
  4. As well as the underlying npm package, @​actions/artifact documentation.

New Contributors

Full Changelog: actions/download-artifact@v3...v4.0.0

Commits

Updates pypa/gh-action-pypi-publish from f946db0f765b9ae754e44bfd5ae5b8b91cfb37ef to 2f6f737ca5f74c637829c0f5c3acd0e29ea5e8bf

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Jan 19, 2024
@davidism
Copy link
Member

@dependabot ignore actions/upload-artifact major version

Copy link
Contributor Author

dependabot bot commented on behalf of github Jan 19, 2024

This option isn't available on git dependencies, as Dependabot currently stores their SHA rather than their version.

If you'd like to ignore all updates for this dependency just reply @dependabot ignore this dependency.

@davidism
Copy link
Member

@dependabot ignore actions/upload-artifact

Copy link
Contributor Author

dependabot bot commented on behalf of github Jan 19, 2024

OK, I won't notify you about actions/upload-artifact again, unless you unignore it.

Copy link
Contributor Author

dependabot bot commented on behalf of github Jan 19, 2024

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Jan 19, 2024
@dependabot dependabot bot deleted the dependabot/github_actions/github-actions-374da9f9ec branch January 19, 2024 23:42
@davidism
Copy link
Member

@dependabot ignore actions/download-artifact

Copy link
Contributor Author

dependabot bot commented on behalf of github Jan 19, 2024

OK, I won't notify you about actions/download-artifact again, unless you unignore it.

Copy link
Contributor Author

dependabot bot commented on behalf of github Jan 19, 2024

Looks like this PR is closed. If you re-open it I'll rebase it as long as no-one else has edited it (you can use @dependabot reopen if the branch has been deleted).

@davidism
Copy link
Member

@dependabot reopen

@dependabot dependabot bot reopened this Jan 19, 2024
@dependabot dependabot bot restored the dependabot/github_actions/github-actions-374da9f9ec branch January 19, 2024 23:46
@davidism
Copy link
Member

@dependabot recreate

Bumps the github-actions group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [dessant/lock-threads](https://github.com/dessant/lock-threads) | `7de207be1d3ce97a9abe6ff1306222982d1ca9f9` | `1bf7ec25051fe7c00bdd17e6a7cf3d7bfb7dc771` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact) | `3.1.3` | `4.2.0` |
| [joerick/cibuildwheel](https://github.com/joerick/cibuildwheel) | `1e5c26b5b10baa3fb2659be31c51e8bab6f7c4e9` | `fff9ec32ed25a9c576750c91e06b410ed0c15db7` |
| [actions/download-artifact](https://github.com/actions/download-artifact) | `3.0.2` | `4.1.1` |
| [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish) | `f946db0f765b9ae754e44bfd5ae5b8b91cfb37ef` | `2f6f737ca5f74c637829c0f5c3acd0e29ea5e8bf` |


Updates `dessant/lock-threads` from 7de207be1d3ce97a9abe6ff1306222982d1ca9f9 to 1bf7ec25051fe7c00bdd17e6a7cf3d7bfb7dc771
- [Release notes](https://github.com/dessant/lock-threads/releases)
- [Changelog](https://github.com/dessant/lock-threads/blob/main/CHANGELOG.md)
- [Commits](dessant/lock-threads@7de207b...1bf7ec2)

Updates `actions/upload-artifact` from 3.1.3 to 4.2.0
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@a8a3f3a...694cdab)

Updates `joerick/cibuildwheel` from 1e5c26b5b10baa3fb2659be31c51e8bab6f7c4e9 to fff9ec32ed25a9c576750c91e06b410ed0c15db7
- [Release notes](https://github.com/joerick/cibuildwheel/releases)
- [Changelog](https://github.com/pypa/cibuildwheel/blob/main/docs/changelog.md)
- [Commits](pypa/cibuildwheel@1e5c26b...fff9ec3)

Updates `actions/download-artifact` from 3.0.2 to 4.1.1
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](actions/download-artifact@9bc31d5...6b208ae)

Updates `pypa/gh-action-pypi-publish` from f946db0f765b9ae754e44bfd5ae5b8b91cfb37ef to 2f6f737ca5f74c637829c0f5c3acd0e29ea5e8bf
- [Release notes](https://github.com/pypa/gh-action-pypi-publish/releases)
- [Commits](pypa/gh-action-pypi-publish@f946db0...2f6f737)

---
updated-dependencies:
- dependency-name: dessant/lock-threads
  dependency-type: direct:production
  dependency-group: github-actions
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: joerick/cibuildwheel
  dependency-type: direct:production
  dependency-group: github-actions
- dependency-name: actions/download-artifact
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: pypa/gh-action-pypi-publish
  dependency-type: direct:production
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/github_actions/github-actions-374da9f9ec branch from dee623c to dd8070a Compare January 19, 2024 23:48
@davidism davidism closed this Jan 19, 2024
Copy link
Contributor Author

dependabot bot commented on behalf of github Jan 19, 2024

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

@davidism davidism deleted the dependabot/github_actions/github-actions-374da9f9ec branch January 19, 2024 23:49
@github-actions github-actions bot locked as resolved and limited conversation to collaborators Feb 3, 2024
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant