Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

deps: update GitHub action dependencies (major) #3399

Merged
merged 1 commit into from
Oct 9, 2024
Merged

deps: update GitHub action dependencies (major) #3399

merged 1 commit into from
Oct 9, 2024

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Oct 9, 2024

This PR contains the following updates:

Package Type Update Change
cachix/install-nix-action action major v27 -> v30
lycheeverse/lychee-action action major v1.10.0 -> v2.0.0
peter-evans/create-pull-request action major v6.1.0 -> v7.0.5
ubuntu github-runner major 22.04 -> 24.04

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

cachix/install-nix-action (cachix/install-nix-action)

v30

Compare Source

v29

Compare Source

Bumps Nix to 2.24.8 to fix CVE-2024-47174

lycheeverse/lychee-action (lycheeverse/lychee-action)

v2.0.0: Version 2.0.0

Compare Source

Breaking Changes

Note: This release improves the action's robustness by changing default behaviors. Changes are only required if you want to opt out of the new failure conditions. Most users won't need to modify their existing configurations.

Fail pipeline on error by default

We've changed the default behavior: pipelines will now fail on broken links automatically. This addresses user feedback that not failing on broken links was unexpected (see issue #​71).

What you need to do:

  • Update to version 2 of this action to apply this change.
  • Users of the lychee-action@master branch don't need to make any changes, as fail: true has been the default there for a while.
  • If you prefer the old behavior, explicitly set fail to false when updating:
- name: Link Checker
  id: lychee
  uses: lycheeverse/lychee-action@v2
  with:
    fail: false  # Don't fail action on broken links
Fail pipeline if no links were found

Similar to the above change, we now fail the pipeline if no links are found during a run. This helps warn users about potential configuration issues.

What you need to do:

  • If you expect links to be found in your pipeline run, you don't need to do anything.
  • If you expect no links in your pipeline run, you can opt out like this:
- name: Link Checker
  id: lychee
  uses: lycheeverse/lychee-action@v2
  with:
    failIfEmpty: false  # Don't fail action if no links were found

For a more detailed description of the technical aspects behind these changes, please see the full changelog below.

What's Changed
New Contributors

Full Changelog: lycheeverse/lychee-action@v1...v1.11.0

peter-evans/create-pull-request (peter-evans/create-pull-request)

v7.0.5: Create Pull Request v7.0.5

Compare Source

⚙️ Fixes an issue with commit signing to allow it to support symlinks

What's Changed

Full Changelog: peter-evans/create-pull-request@v7.0.4...v7.0.5

v7.0.4: Create Pull Request v7.0.4

Compare Source

⚙️ Fixes an issue with commit signing to allow it to support submodules

What's Changed

New Contributors

Full Changelog: peter-evans/create-pull-request@v7.0.3...v7.0.4

v7.0.3: Create Pull Request v7.0.3

Compare Source

⚙️ Fixes an issue with commit signing where commit SHAs have variable lengths when abbreviated.

What's Changed

Full Changelog: peter-evans/create-pull-request@v7.0.2...v7.0.3

v7.0.2: Create Pull Request v7.0.2

Compare Source

⚙️ Fixes an issue with commit signing when a change was detected as being a rename or copy.

What's Changed

Full Changelog: peter-evans/create-pull-request@v7.0.1...v7.0.2

v7.0.1: Create Pull Request v7.0.1

Compare Source

⚙️ Fixes an issue affecting one particular use case where the action fails on diff --stat with fatal: ambiguous argument.

What's Changed

Full Changelog: peter-evans/create-pull-request@v7.0.0...v7.0.1

v7.0.0: Create Pull Request v7.0.0

Compare Source

✨ Now supports commit signing with bot-generated tokens! See "What's new" below. ✍️🤖

Behaviour changes
  • Action input git-token has been renamed branch-token, to be more clear about its purpose. The branch-token is the token that the action will use to create and update the branch.
  • The action now handles requests that have been rate-limited by GitHub. Requests hitting a primary rate limit will retry twice, for a total of three attempts. Requests hitting a secondary rate limit will not be retried.
  • The pull-request-operation output now returns none when no operation was executed.
  • Removed deprecated output environment variable PULL_REQUEST_NUMBER. Please use the pull-request-number action output instead.
What's new
  • The action can now sign commits as github-actions[bot] when using GITHUB_TOKEN, or your own bot when using GitHub App tokens. See commit signing for details.
  • Action input draft now accepts a new value always-true. This will set the pull request to draft status when the pull request is updated, as well as on creation.
  • A new action input maintainer-can-modify indicates whether maintainers can modify the pull request. The default is true, which retains the existing behaviour of the action.
  • A new output pull-request-commits-verified returns true or false, indicating whether GitHub considers the signature of the branch's commits to be verified.
What's Changed
New Contributors

Full Changelog: peter-evans/create-pull-request@v6.1.0...v7.0.0

Configuration

📅 Schedule: Branch creation - "before 8am on tuesday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added the dependencies Pull requests that update a dependency file label Oct 9, 2024
@netlify Netlify
Copy link

netlify bot commented Oct 9, 2024

✅ Deploy Preview for constellation-docs ready!

Name Link
🔨 Latest commit 4cf0153
🔍 Latest deploy log https://app.netlify.com/sites/constellation-docs/deploys/67064db069b9a70008ac4b6c
😎 Deploy Preview https://deploy-preview-3399--constellation-docs.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify site configuration.

burgerdev
burgerdev approved these changes Oct 9, 2024
View reviewed changes
Copy link
Contributor

@burgerdev burgerdev left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@msanft msanft merged commit ac26c80 into main Oct 9, 2024
9 checks passed
@msanft msanft deleted the renovate/major-github-action-dependencies branch October 9, 2024 10:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@msanft msanft msanft approved these changes

@burgerdev burgerdev burgerdev approved these changes

@daniel-weisse daniel-weisse Awaiting requested review from daniel-weisse

Assignees
No one assigned
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@burgerdev @msanft