Bump r-lib/actions from 2.9.0 to 2.10.0

[dependabot]

Bumps r-lib/actions from 2.9.0 to 2.10.0.

Changelog

Sourced from r-lib/actions's changelog.

Development version (unreleased)

• [setup-r]: on R 3.6.x we now use the P3M snapshot from 2024-06-01 by default. This is because many newer CRAN packages do not work on R 3.6.x any more. The default CRAN mirror is still added, so newer packages may be used if they are required, but setup-r-dependencies@v2 will prefer the binary packages from P3M.

  Note that this only happens if you opt in to use P3M with the use-public-rspm: true input parameter. This is the default in all example workflows.

  If the RSPM environment variable is already set, then it is used unchanged, on all R versions. To avoid using a P3M snapshot on R 3.6.x, set the RSPM_PIN_3_6 environment variable to false.

• [setup-r] now installs the x86_64 build of R on arm64 macOS, if there is no arm64 build available for this R version (#883).

• Example blogdown, bookdown, document, pr-commands and render-markdown workflows now correctly have write permission to repository contents (#874, @​remlapmot).

• [check-r-package]: you can now setupload-snapshots to always, to upload snapshots even after failures (#871).

• [setup-r-dependencies] now always sets the R_LIBS_USER GitHub environment variable, so it can be used without [setup-r] or without setting it manually (#881).

• The example workflows now use their file names as workflow names. This is to make it easier to match worflow runs to workflow files. Most of the the check-* workflows use R-CMD-check.yaml, however, to anticipate the usethis package renaming them by default (#888).

• [setup-renv]: you can now set bypass-cache to never, to save the cache even if the workflow fails (#873, @​jaradkohl-mfj).

• [setup-pandoc]: installing nightly Pandoc works again now (#889).

• [setup-r-dependencies] now automatically installs Quarto if the repo has a qmd file, and it isn't installed. See the install-quarto and quarto-version input parameters (#866).

• [setup-r] now avoids spurious warnings from Homebrew (#864).

• [setup-r-dependencies] now accepts pak-version: none to skip pak installation. pak should be already installed on the system in this case, otherwise the dependencies resolution and installation will fail. You probably also need to set the R_LIB_FOR_PAK env var to the library

... (truncated)

Commits

• d1a6cba [setup-r]: resolve older R to x86_64 on macOS (#893)
• fd93f72 Blogdown and bookdown examples need contents write permission (#874)
• 15dc534 [check-r-package]: add 'upload-snapshots: always' (#890)
• 9677f2e [setup-r-dependencies]: set R_LIBS_USER if unset (#896)
• e0a5ffd Update setup-pandoc deps for GHSA-3g92-w8c5-73pq (#897)
• 65c3db3 Use file names as workflow names (#888)
• cdb0370 Always cache r lib (#873)
• 565e1cf [setup-pandoc]: pass GH token to nightly download (#889)
• f14d6f6 Update OS in check-release action docs (#872)
• 95341c3 check-full example: avoid fixed version number (#892)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[bewuethr]

@dependabot squash and merge