Bump the actions group with 1 update by dependabot[bot] · Pull Request #1865 · github/codeql-action · GitHub

Bumps the actions group with 1 update: actions/checkout.

Release notes

Sourced from actions/checkout's releases.

v4.0.0

What's Changed

Update default runtime to node20 by @takost in actions/checkout#1436

Support fetching without the --progress option by @simonbaird in actions/checkout#1067

Release 4.0.0 by @takost in actions/checkout#1447

New Contributors

@takost made their first contribution in actions/checkout#1436

@simonbaird made their first contribution in actions/checkout#1067

Full Changelog: actions/checkout@v3...v4.0.0

v3.6.0

What's Changed

Mark test scripts with Bash'isms to be run via Bash by @dscho in actions/checkout#1377

Add option to fetch tags even if fetch-depth > 0 by @RobertWieczoreck in actions/checkout#579

Release 3.6.0 by @luketomlinson in actions/checkout#1437

New Contributors

@RobertWieczoreck made their first contribution in actions/checkout#579

@luketomlinson made their first contribution in actions/checkout#1437

Full Changelog: actions/checkout@v3.5.3...v3.6.0

v3.5.3

What's Changed

Fix: Checkout Issue in self hosted runner due to faulty submodule check-ins by @megamanics in actions/checkout#1196

Fix typos found by codespell by @DimitriPapadopoulos in actions/checkout#1287

Add support for sparse checkouts by @dscho and @dfdez in actions/checkout#1369

Release v3.5.3 by @TingluoHuang in actions/checkout#1376

New Contributors

@megamanics made their first contribution in actions/checkout#1196

@DimitriPapadopoulos made their first contribution in actions/checkout#1287

@dfdez made their first contribution in actions/checkout#1369

Full Changelog: actions/checkout@v3...v3.5.3

v3.5.2

What's Changed

Fix: Use correct API url / endpoint in GHES by @fhammerl in actions/checkout#1289 based on #1286 by @1newsr

Full Changelog: actions/checkout@v3.5.1...v3.5.2

v3.5.1

What's Changed

Improve checkout performance on Windows runners by upgrading @actions/github dependency by @BrettDong in actions/checkout#1246

New Contributors

@BrettDong made their first contribution in actions/checkout#1246

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

v4.0.0

Support fetching without the --progress option

Update to node20

v3.6.0

Fix: Mark test scripts with Bash'isms to be run via Bash

Add option to fetch tags even if fetch-depth > 0

v3.5.3

Fix: Checkout fail in self-hosted runners when faulty submodule are checked-in

Fix typos found by codespell

Add support for sparse checkouts

v3.5.2

Fix api endpoint for GHES

v3.5.1

Fix slow checkout on Windows

v3.5.0

Add new public key for known_hosts

v3.4.0

Upgrade codeql actions to v2

Upgrade dependencies

Upgrade @actions/io

v3.3.0

Implement branch list using callbacks from exec function

Add in explicit reference to private checkout options

[Fix comment typos (that got added in #770)](actions/checkout#1057)

v3.2.0

Add GitHub Action to perform release

Fix status badge

Replace datadog/squid with ubuntu/squid Docker image

Wrap pipeline commands for submoduleForeach in quotes

Update @actions/io to 1.1.2

Upgrading version to 3.2.0

v3.1.0

Use @actions/core saveState and getState

Add github-server-url input

v3.0.2

Add input set-safe-directory

v3.0.1

... (truncated)

Commits

3df4ab1 Release 4.0.0 (#1447)
8b5e8b7 Support fetching without the --progress option (#1067)
97a652b Update default runtime to node20 (#1436)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the actions group with 1 update: [actions/checkout](https://github.com/actions/checkout). - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@v3...v4) --- updated-dependencies: - dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions ... Signed-off-by: dependabot[bot] <support@github.com>

cc @TomBolton as 🛡️ — let me know if you need any help here!

The one check that is failing involves the pr-checks/sync.py script which, when generating .yml workflows, still uses actions/checkout@v3.

I'll push a commit to modify this line and we'll see what happens.

Some generated workflows will probably contain references to @v3 in their specifications, which live in pr-checks/checks. These will probably need updating manually, though it should be possible with a find-replace across this directory.

I think we're close to merging @henrymercer - is there anything else I need to do?

I think your last commit downgraded a couple of versions from 4 back to 3. If we could update the sources of those workflows in pr-checks/checks to reference v4 again, we should be able to regenerate those checks back to v4 and I think we'll be good to go.

Oh wow, good catch. My brain assumed that commit was bumping from 3 to 4, and not the other way around...

I'll get that sorted.

Great! Note that your last commit is now empty, showing that there were no changes from sync.py to apply.

dependabot Bot requested a review from a team as a code owner September 4, 2023 18:00

dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Sep 4, 2023

bump checkout to v4 in sync.py

d5d81f4

update checkout version in pr-checks/checks

85cd5ad

TomBolton force-pushed the dependabot/github_actions/actions-8a9da2b879 branch from 751fc58 to cda3218 Compare September 5, 2023 14:19

henrymercer approved these changes Sep 5, 2023

View reviewed changes

TomBolton force-pushed the dependabot/github_actions/actions-8a9da2b879 branch from cda3218 to 85cd5ad Compare September 5, 2023 14:28

TomBolton merged commit 9429343 into main Sep 5, 2023

TomBolton deleted the dependabot/github_actions/actions-8a9da2b879 branch September 5, 2023 15:04

github-actions Bot mentioned this pull request Sep 13, 2023

Merge main into releases/v2 #1875

Merged

6 tasks

angelapwen mentioned this pull request Sep 25, 2023

Use actions/checkout@v4 in test helper #1898

Merged

3 tasks

Bump the actions group with 1 update by dependabot[bot] · Pull Request #1865 · github/codeql-action · GitHub

Bump the actions group with 1 update - #1865

Bump the actions group with 1 update#1865
TomBolton merged 3 commits into
mainfrom
dependabot/github_actions/actions-8a9da2b879

dependabot Bot commented on behalf of github Sep 4, 2023

Uh oh!

henrymercer commented Sep 5, 2023

Uh oh!

TomBolton commented Sep 5, 2023

Uh oh!

henrymercer commented Sep 5, 2023

Uh oh!

TomBolton commented Sep 5, 2023

Uh oh!

henrymercer commented Sep 5, 2023

Uh oh!

TomBolton commented Sep 5, 2023

Uh oh!

henrymercer left a comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Bump the actions group with 1 update by dependabot[bot] · Pull Request #1865 · github/codeql-action · GitHub

Bump the actions group with 1 update - #1865

Bump the actions group with 1 update#1865TomBolton merged 3 commits intomaingithub/codeql-action:mainfrom dependabot/github_actions/actions-8a9da2b879github/codeql-action:dependabot/github_actions/actions-8a9da2b879Copy head branch name to clipboard

Conversation

dependabot Bot commented on behalf of github Sep 4, 2023

v4.0.0

What's Changed

New Contributors

v3.6.0

What's Changed

New Contributors

v3.5.3

What's Changed

New Contributors

v3.5.2

What's Changed

v3.5.1

What's Changed

New Contributors

Changelog

v4.0.0

v3.6.0

v3.5.3

v3.5.2

v3.5.1

v3.5.0

v3.4.0

v3.3.0

v3.2.0

v3.1.0

v3.0.2

v3.0.1

Uh oh!

henrymercer commented Sep 5, 2023

Uh oh!

TomBolton commented Sep 5, 2023

Uh oh!

henrymercer commented Sep 5, 2023

Uh oh!

TomBolton commented Sep 5, 2023

Uh oh!

henrymercer commented Sep 5, 2023

Uh oh!

TomBolton commented Sep 5, 2023

Uh oh!

henrymercer left a comment

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Bump the actions group with 1 update#1865
TomBolton merged 3 commits into
mainfrom
dependabot/github_actions/actions-8a9da2b879