Bump the github-actions-updates group with 5 updates #1835

dependabot · 2024-11-08T01:14:54Z

Bumps the github-actions-updates group with 5 updates:

Package	From	To
golangci/golangci-lint-action	`3`	`6`
pnpm/action-setup	`2.4.0`	`4.0.0`
actions/cache	`3`	`4`
andresz1/size-limit-action	`7313b26c76b3666c1dc41e2ca05370e201a9b7de`	`94bc357df29c36c8f8d50ea497c3e225c3c95d1d`
actions/upload-artifact	`2`	`4`

Updates golangci/golangci-lint-action from 3 to 6

Release notes

Sourced from golangci/golangci-lint-action's releases.

v6.0.0

What's Changed

This version removes annotations option (because it was useless), and removes the default output format (github-actions). The annotations are still produced but with another approach.

Changes

feat: rewrite format handling by @ldez in golangci/golangci-lint-action#1038

Dependencies

build(deps-dev): bump @typescript-eslint/eslint-plugin from 7.7.1 to 7.8.0 by @dependabot in golangci/golangci-lint-action#1034

build(deps): bump @types/node from 20.12.7 to 20.12.8 by @dependabot in golangci/golangci-lint-action#1036

build(deps-dev): bump @typescript-eslint/parser from 7.7.1 to 7.8.0 by @dependabot in golangci/golangci-lint-action#1035

Full Changelog: golangci/golangci-lint-action@v5.3.0...v6.0.0

v5.3.0

What's Changed

Changes

feat: uses 2 dots compare syntax for push diff by @ldez in golangci/golangci-lint-action#1030

feat: add option to control cache invalidation interval by @ldez in golangci/golangci-lint-action#1031

feat: use OS and working-directory as cache key by @ldez in golangci/golangci-lint-action#1032

feat: improve log about pwd/cwd by @ldez in golangci/golangci-lint-action#1033

Full Changelog: golangci/golangci-lint-action@v5.2.0...v5.3.0

v5.2.0

What's Changed

Changes

feat: add an option to enable/disable annotations by @ldez

Full Changelog: golangci/golangci-lint-action@v5.1.0...v5.2.0

v5.1.0

What's Changed

Changes

feat: support for pull and merge_group events with the option only-new-issues by @ldez in golangci/golangci-lint-action#1029

Dependencies

build(deps-dev): bump @typescript-eslint/parser from 7.7.0 to 7.7.1 by @dependabot in golangci/golangci-lint-action#1027

build(deps-dev): bump @typescript-eslint/eslint-plugin from 7.7.0 to 7.7.1 by @dependabot in golangci/golangci-lint-action#1028

... (truncated)

Commits

971e284 build(deps-dev): bump the dev-dependencies group with 3 updates (#1108)
bbe7eb5 build(deps): bump @types/node from 22.5.5 to 22.7.4 in the dependencies group...
ebae5ce build(deps-dev): bump the dev-dependencies group with 3 updates (#1105)
06c3f3a build(deps): bump @types/node from 22.5.4 to 22.5.5 in the dependencies group...
56689d8 build(deps-dev): bump the dev-dependencies group with 3 updates (#1103)
c7bab6f fix: clean go install output (#1102)
33f56cc build(deps-dev): bump the dev-dependencies group with 3 updates (#1099)
e954224 build(deps): bump @types/node from 22.5.2 to 22.5.4 in the dependencies group...
68de804 build(deps): bump @types/node from 22.5.1 to 22.5.2 in the dependencies group...
22a3756 build(deps-dev): bump the dev-dependencies group with 2 updates (#1097)
Additional commits viewable in compare view

Updates pnpm/action-setup from 2.4.0 to 4.0.0

Release notes

Sourced from pnpm/action-setup's releases.

v4.0.0

An error is thrown if one version of pnpm is specified in the packageManager field of package.json and a different version is specified in the action's settings #122

v3.0.0

The action is updated to run on Node.js v20

v2.4.1

Updated the bundled pnpm version to v7 to fix the ERR_INVALID_THIS error.

Commits

fe02b34 docs: bump action-setup version in README
bee1f09 feat: throw error when multiple versions specified (#122)
ce859e3 refactor: replace fs-extra with Node.js built-in fs methods (#120)
2ab6dce docs(README): fix link to LICENSE
e280758 docs(README): update dependency versions (#117)
129abb7 Bump undici from 5.28.2 to 5.28.3 (#115)
a3252b7 docs(README): update version
1ee9c9d feat!: node20 upgrade (#110)
ebcfd69 Bump actions/setup-node from 3 to 4 (#103)
d2613e0 docs: update pnpm version in caching example (#94)
Additional commits viewable in compare view

Updates actions/cache from 3 to 4

Release notes

Sourced from actions/cache's releases.

v4.0.0

What's Changed

Update action to node20 by @takost in actions/cache#1284

feat: save-always flag by @to-s in actions/cache#1242

New Contributors

@takost made their first contribution in actions/cache#1284

@to-s made their first contribution in actions/cache#1242

Full Changelog: actions/cache@v3...v4.0.0

v3.3.3

What's Changed

Cache v3.3.3 by @robherley in actions/cache#1302

New Contributors

@robherley made their first contribution in actions/cache#1302

Full Changelog: actions/cache@v3...v3.3.3

v3.3.2

What's Changed

Fixed readme with new segment timeout values by @kotewar in actions/cache#1133

Readme fixes by @kotewar in actions/cache#1134

Updated description of the lookup-only input for main action by @kotewar in actions/cache#1130

Change two new actions mention as quoted text by @bishal-pdMSFT in actions/cache#1131

Update Cross-OS Caching tips by @pdotl in actions/cache#1122

Bazel example (Take #2️⃣) by @vorburger in actions/cache#1132

Remove actions to add new PRs and issues to a project board by @jorendorff in actions/cache#1187

Consume latest toolkit and fix dangling promise bug by @chkimes in actions/cache#1217

Bump action version to 3.3.2 by @bethanyj28 in actions/cache#1236

New Contributors

@vorburger made their first contribution in actions/cache#1132

@jorendorff made their first contribution in actions/cache#1187

@chkimes made their first contribution in actions/cache#1217

@bethanyj28 made their first contribution in actions/cache#1236

Full Changelog: actions/cache@v3...v3.3.2

v3.3.1

What's Changed

Reduced download segment size to 128 MB and timeout to 10 minutes by @kotewar in actions/cache#1129

Full Changelog: actions/cache@v3...v3.3.1

v3.3.0

What's Changed

Bug: Permission is missing in cache delete example by @kotokaze in actions/cache#1123

... (truncated)

Changelog

Sourced from actions/cache's changelog.

Releases

4.1.2

Add GitHub Enterprise Cloud instances hostname filters to inform API endpoint choices - #1474

Security fix: Bump braces from 3.0.2 to 3.0.3 - #1475

4.1.1

Restore original behavior of cache-hit output - #1467

4.1.0

Ensure cache-hit output is set when a cache is missed - #1404

Deprecate save-always input - #1452

4.0.2

Fixed restore fail-on-cache-miss not working.

4.0.1

Updated isGhes check

4.0.0

Updated minimum runner version support from node 12 -> node 20

3.3.3

Updates @actions/cache to v3.2.3 to fix accidental mutated path arguments to getCacheVersion actions/toolkit#1378

Additional audit fixes of npm package(s)

3.3.2

Fixes bug with Azure SDK causing blob downloads to get stuck.

3.3.1

Reduced segment size to 128MB and segment timeout to 10 minutes to fail fast in case the cache download is stuck.

3.3.0

Added option to lookup cache without downloading it.

3.2.6

Fix zstd not being used after zstd version upgrade to 1.5.4 on hosted runners.

3.2.5

... (truncated)

Commits

6849a64 Release 4.1.2 #1477
5a1720c Merge branch 'Link-/prep-4.1.2' of https://github.com/actions/cache into Link...
d9fef48 Merge branch 'main' into Link-/prep-4.1.2
a50e8d0 Merge branch 'main' into Link-/prep-4.1.2
acc9ae5 Merge pull request #1481 from actions/dependabot/github_actions/actions/setup...
1ea5f18 Merge branch 'main' into Link-/prep-4.1.2
cc679ff Merge branch 'main' into dependabot/github_actions/actions/setup-node-4
366d43d Merge pull request #1483 from actions/dependabot/github_actions/github/codeql...
02bf319 Bump github/codeql-action from 2 to 3
6f6220b Merge branch 'main' into dependabot/github_actions/actions/setup-node-4
Additional commits viewable in compare view

Updates andresz1/size-limit-action from 7313b26c76b3666c1dc41e2ca05370e201a9b7de to 94bc357df29c36c8f8d50ea497c3e225c3c95d1d

Commits

94bc357 Release 1.8.0
57590ae Merge pull request #111 from Jasonlgrd/fix-build
47048de Remove node: for node importation
a01ab55 Dependencies : Replace @zeit/ncc with @vercel/ncc
See full diff in compare view

Updates actions/upload-artifact from 2 to 4

Release notes

Sourced from actions/upload-artifact's releases.

v4.0.0

What's Changed

The release of upload-artifact@v4 and download-artifact@v4 are major changes to the backend architecture of Artifacts. They have numerous performance and behavioral improvements.

ℹ️ However, this is a major update that includes breaking changes. Artifacts created with versions v3 and below are not compatible with the v4 actions. Uploads and downloads must use the same major actions versions. There are also key differences from previous versions that may require updates to your workflows.

For more information, please see:

The changelog post.

The README.

The migration documentation.

As well as the underlying npm package, @actions/artifact documentation.

New Contributors

@vmjoseph made their first contribution in actions/upload-artifact#464

Full Changelog: actions/upload-artifact@v3...v4.0.0

v3.2.1

What's Changed

This fixes the include-hidden-files input introduced in https://github.com/actions/upload-artifact/releases/tag/v3.2.0

Ensure hidden files input is used by @joshmgross in actions/upload-artifact#609

Full Changelog: actions/upload-artifact@v3.2.0...v3.2.1

v3.2.1-node20

What's Changed

This fixes the include-hidden-files input introduced in https://github.com/actions/upload-artifact/releases/tag/v3.2.0-node20

Ensure hidden files input is used by @joshmgross in actions/upload-artifact#608

Full Changelog: actions/upload-artifact@v3.2.0-node20...v3.2.1-node20

v3.2.0

Notice: Breaking Changes ⚠️

We will no longer include hidden files and folders by default in the upload-artifact action of this version. This reduces the risk that credentials are accidentally uploaded into artifacts. Customers who need to continue to upload these files can use a new option, include-hidden-files, to continue to do so.

See "Notice of upcoming deprecations and breaking changes in GitHub Actions runners" changelog and this issue for more details.

What's Changed

V3 backport: Exclude hidden files by default by @SrRyan in actions/upload-artifact#604

... (truncated)

Commits

b4b15b8 Merge pull request #632 from actions/joshmgross/undo-dependency-changes
92b01eb Undo indirect dependency updates from #627
8448086 Merge pull request #627 from actions/robherley/v4.4.2
b1d4642 add explicit relative and absolute symlinks to workflow
d50e660 bump version
aabe6f8 build with @actions/artifact v2.1.11
604373d Merge pull request #625 from actions/robherley/artifact-2.1.10
0150148 paste right core version
a009b25 update licenses
9f6f6f4 update @actions/core and @actions/artifact to latest versions
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the github-actions-updates group with 5 updates: | Package | From | To | | --- | --- | --- | | [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) | `3` | `6` | | [pnpm/action-setup](https://github.com/pnpm/action-setup) | `2.4.0` | `4.0.0` | | [actions/cache](https://github.com/actions/cache) | `3` | `4` | | [andresz1/size-limit-action](https://github.com/andresz1/size-limit-action) | `7313b26c76b3666c1dc41e2ca05370e201a9b7de` | `94bc357df29c36c8f8d50ea497c3e225c3c95d1d` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `2` | `4` | Updates `golangci/golangci-lint-action` from 3 to 6 - [Release notes](https://github.com/golangci/golangci-lint-action/releases) - [Commits](golangci/golangci-lint-action@v3...v6) Updates `pnpm/action-setup` from 2.4.0 to 4.0.0 - [Release notes](https://github.com/pnpm/action-setup/releases) - [Commits](pnpm/action-setup@v2.4.0...v4.0.0) Updates `actions/cache` from 3 to 4 - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](actions/cache@v3...v4) Updates `andresz1/size-limit-action` from 7313b26c76b3666c1dc41e2ca05370e201a9b7de to 94bc357df29c36c8f8d50ea497c3e225c3c95d1d - [Release notes](https://github.com/andresz1/size-limit-action/releases) - [Commits](andresz1/size-limit-action@7313b26...94bc357) Updates `actions/upload-artifact` from 2 to 4 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@v2...v4) --- updated-dependencies: - dependency-name: golangci/golangci-lint-action dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions-updates - dependency-name: pnpm/action-setup dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions-updates - dependency-name: actions/cache dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions-updates - dependency-name: andresz1/size-limit-action dependency-type: direct:production dependency-group: github-actions-updates - dependency-name: actions/upload-artifact dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions-updates ... Signed-off-by: dependabot[bot] <support@github.com>

codecov · 2024-11-08T20:44:43Z

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 65.16%. Comparing base (4428f79) to head (aebe99e).
Report is 34 commits behind head on master.

Additional details and impacted files

@@            Coverage Diff             @@
##           master    #1835      +/-   ##
==========================================
+ Coverage   61.47%   65.16%   +3.69%     
==========================================
  Files         132      140       +8     
  Lines        2998     3508     +510     
  Branches      715      782      +67     
==========================================
+ Hits         1843     2286     +443     
  Misses       1151     1151              
- Partials        4       71      +67

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

github-actions · 2024-11-08T20:45:32Z

size-limit report 📦

Path	Size
public/embed.mjs	2.03 KB (0%)
public/remark.mjs	73.48 KB (+0.01% 🔺)
public/remark.css	8.26 KB (0%)
public/last-comments.mjs	35.74 KB (0%)
public/last-comments.css	3.75 KB (+0.03% 🔺)
public/deleteme.mjs	12.07 KB (0%)
public/counter.mjs	751 B (0%)

dependabot bot requested a review from umputun as a code owner November 8, 2024 01:14

dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Nov 8, 2024

paskal previously approved these changes Nov 8, 2024

View reviewed changes

unpin bugfix js version, use codecov github action

aebe99e

paskal dismissed their stale review via aebe99e November 8, 2024 20:43

paskal requested review from akellbl4 and Mavrin as code owners November 8, 2024 20:43

umputun merged commit c1a447b into master Nov 8, 2024
13 checks passed

umputun deleted the dependabot/github_actions/github-actions-updates-38566790c8 branch November 8, 2024 21:57

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the github-actions-updates group with 5 updates #1835

Bump the github-actions-updates group with 5 updates #1835

dependabot bot commented on behalf of github Nov 8, 2024

codecov bot commented Nov 8, 2024 •

edited

Loading

github-actions bot commented Nov 8, 2024

Bump the github-actions-updates group with 5 updates #1835

Bump the github-actions-updates group with 5 updates #1835

Conversation

dependabot bot commented on behalf of github Nov 8, 2024

v6.0.0

What's Changed

Changes

Dependencies

v5.3.0

What's Changed

Changes

v5.2.0

What's Changed

Changes

v5.1.0

What's Changed

Changes

Dependencies

v4.0.0

v3.0.0

v2.4.1

v4.0.0

What's Changed

New Contributors

v3.3.3

What's Changed

New Contributors

v3.3.2

What's Changed

New Contributors

v3.3.1

What's Changed

v3.3.0

What's Changed

Releases

4.1.2

4.1.1

4.1.0

4.0.2

4.0.1

4.0.0

3.3.3

3.3.2

3.3.1

3.3.0

3.2.6

3.2.5

v4.0.0

What's Changed

New Contributors

v3.2.1

What's Changed

v3.2.1-node20

What's Changed

v3.2.0

Notice: Breaking Changes ⚠️

What's Changed

codecov bot commented Nov 8, 2024 • edited Loading

Codecov Report

github-actions bot commented Nov 8, 2024

size-limit report 📦

codecov bot commented Nov 8, 2024 •

edited

Loading