From 536f2aaf001a8086358f5e3f1b36b49580862e21 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 1 Oct 2024 04:57:03 +0000
Subject: [PATCH 1/2] chore(deps): bump the github-actions group across 1
directory with 10 updates
Bumps the github-actions group with 10 updates in the / directory:
| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `3` | `4` |
| [actions/setup-go](https://github.com/actions/setup-go) | `3` | `5` |
| [github/codeql-action](https://github.com/github/codeql-action) | `2` | `3` |
| [labd/changie-release-action](https://github.com/labd/changie-release-action) | `0.3.1` | `0.5.0` |
| [arduino/setup-task](https://github.com/arduino/setup-task) | `1` | `2` |
| [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) | `3` | `6` |
| [codecov/codecov-action](https://github.com/codecov/codecov-action) | `3` | `4` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact) | `2` | `4` |
| [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) | `3` | `6` |
| [actions/add-to-project](https://github.com/actions/add-to-project) | `1.0.1` | `1.0.2` |
Updates `actions/checkout` from 3 to 4
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3...v4)
Updates `actions/setup-go` from 3 to 5
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](https://github.com/actions/setup-go/compare/v3...v5)
Updates `github/codeql-action` from 2 to 3
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/v2...v3)
Updates `labd/changie-release-action` from 0.3.1 to 0.5.0
- [Release notes](https://github.com/labd/changie-release-action/releases)
- [Changelog](https://github.com/labd/changie-release-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/labd/changie-release-action/compare/v0.3.1...v0.5.0)
Updates `arduino/setup-task` from 1 to 2
- [Release notes](https://github.com/arduino/setup-task/releases)
- [Commits](https://github.com/arduino/setup-task/compare/v1...v2)
Updates `golangci/golangci-lint-action` from 3 to 6
- [Release notes](https://github.com/golangci/golangci-lint-action/releases)
- [Commits](https://github.com/golangci/golangci-lint-action/compare/v3...v6)
Updates `codecov/codecov-action` from 3 to 4
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codecov/codecov-action/compare/v3...v4)
Updates `actions/upload-artifact` from 2 to 4
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v2...v4)
Updates `goreleaser/goreleaser-action` from 3 to 6
- [Release notes](https://github.com/goreleaser/goreleaser-action/releases)
- [Commits](https://github.com/goreleaser/goreleaser-action/compare/v3...v6)
Updates `actions/add-to-project` from 1.0.1 to 1.0.2
- [Release notes](https://github.com/actions/add-to-project/releases)
- [Commits](https://github.com/actions/add-to-project/compare/v1.0.1...v1.0.2)
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: github-actions
- dependency-name: actions/setup-go
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: github-actions
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: github-actions
- dependency-name: labd/changie-release-action
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: github-actions
- dependency-name: arduino/setup-task
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: github-actions
- dependency-name: golangci/golangci-lint-action
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: github-actions
- dependency-name: codecov/codecov-action
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: github-actions
- dependency-name: actions/upload-artifact
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: github-actions
- dependency-name: goreleaser/goreleaser-action
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: github-actions
- dependency-name: actions/add-to-project
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions
...
Signed-off-by: dependabot[bot] <support@github.com>
---
.github/workflows/codeql.yaml | 8 ++++----
.github/workflows/prepare-release.yaml | 2 +-
.github/workflows/pull-request.yaml | 14 +++++++-------
.github/workflows/release-beta.yaml | 8 ++++----
.github/workflows/release.yaml | 10 +++++-----
.github/workflows/triage.yaml | 2 +-
6 files changed, 22 insertions(+), 22 deletions(-)
diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml
index 5d7800d..0be2de2 100644
--- a/.github/workflows/codeql.yaml
+++ b/.github/workflows/codeql.yaml
@@ -43,13 +43,13 @@ jobs:
uses: actions/checkout@v4
- name: Set up Go
- uses: actions/setup-go@v4
+ uses: actions/setup-go@v5
with:
go-version-file: go.mod
# Initializes the CodeQL tools for scanning.
- name: Initialize CodeQL
- uses: github/codeql-action/init@v2
+ uses: github/codeql-action/init@v3
with:
languages: ${{ matrix.language }}
# If you wish to specify custom queries, you can do so here or in a config file.
@@ -63,7 +63,7 @@ jobs:
# Autobuild attempts to build any compiled languages (C/C++, C#, Go, or Java).
# If this step fails, then you should remove it and run the build manually (see below)
- name: Autobuild
- uses: github/codeql-action/autobuild@v2
+ uses: github/codeql-action/autobuild@v3
# âšī¸ Command-line programs to run using the OS shell.
# đ See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -76,6 +76,6 @@ jobs:
# ./location_of_script_within_repo/buildscript.sh
- name: Perform CodeQL Analysis
- uses: github/codeql-action/analyze@v2
+ uses: github/codeql-action/analyze@v3
with:
category: "/language:${{matrix.language}}"
diff --git a/.github/workflows/prepare-release.yaml b/.github/workflows/prepare-release.yaml
index 9d2faa2..42ead5b 100644
--- a/.github/workflows/prepare-release.yaml
+++ b/.github/workflows/prepare-release.yaml
@@ -14,7 +14,7 @@ jobs:
fetch-depth: 0
- name: Prepare release
- uses: labd/changie-release-action@v0.3.1
+ uses: labd/changie-release-action@v0.5.0
with:
github-token: ${{ secrets.GITHUB_TOKEN }}
release-workflow: release.yaml
diff --git a/.github/workflows/pull-request.yaml b/.github/workflows/pull-request.yaml
index 8ec10ae..8748107 100644
--- a/.github/workflows/pull-request.yaml
+++ b/.github/workflows/pull-request.yaml
@@ -13,17 +13,17 @@ jobs:
steps:
- name: Check out code
- uses: actions/checkout@v3
+ uses: actions/checkout@v4
with:
fetch-depth: 0
- name: Set up Go
- uses: actions/setup-go@v4
+ uses: actions/setup-go@v5
with:
go-version-file: go.mod
- name: Set up Task
- uses: arduino/setup-task@v1
+ uses: arduino/setup-task@v2
with:
repo-token: ${{ secrets.GITHUB_TOKEN }}
@@ -32,7 +32,7 @@ jobs:
uses: mach-composer/check-changie-changes-action@main
- name: golangci-lint
- uses: golangci/golangci-lint-action@v3
+ uses: golangci/golangci-lint-action@v6
with:
args: --issues-exit-code=0 --timeout=5m
@@ -43,16 +43,16 @@ jobs:
cp coverage.out output/coverage.out
- name: Upload to codecov
- uses: codecov/codecov-action@v3
+ uses: codecov/codecov-action@v4
- name: Upload artifacts
- uses: actions/upload-artifact@v2
+ uses: actions/upload-artifact@v4
with:
name: output
path: output/**/*
- name: build binary
- uses: goreleaser/goreleaser-action@v3
+ uses: goreleaser/goreleaser-action@v6
with:
args: build --snapshot --clean --single-target
env:
diff --git a/.github/workflows/release-beta.yaml b/.github/workflows/release-beta.yaml
index f6dd4f5..a433a91 100644
--- a/.github/workflows/release-beta.yaml
+++ b/.github/workflows/release-beta.yaml
@@ -25,12 +25,12 @@ jobs:
run: git fetch --force --tags
- name: Set up Go
- uses: actions/setup-go@v4
+ uses: actions/setup-go@v5
with:
go-version-file: go.mod
- name: Set up Task
- uses: arduino/setup-task@v1
+ uses: arduino/setup-task@v2
with:
repo-token: ${{ secrets.GITHUB_TOKEN }}
@@ -63,7 +63,7 @@ jobs:
shell: bash
- name: GoReleaser
- uses: goreleaser/goreleaser-action@v5
+ uses: goreleaser/goreleaser-action@v6
with:
args: release --clean --skip=validate --release-notes ${{ steps.save_changes.outputs.changelog_file }}
env:
@@ -74,7 +74,7 @@ jobs:
SKIP_UPLOAD: true
- name: Upload release
- uses: actions/upload-artifact@v3
+ uses: actions/upload-artifact@v4
with:
name: mach-composer-plugin-wundergraph
path: dist/*
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 0d3d59c..fa3c50b 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -8,15 +8,15 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Check out code
- uses: actions/checkout@v3
+ uses: actions/checkout@v4
- name: Set up Go
- uses: actions/setup-go@v3
+ uses: actions/setup-go@v5
with:
go-version-file: go.mod
- name: Set up Task
- uses: arduino/setup-task@v1
+ uses: arduino/setup-task@v2
with:
repo-token: ${{ secrets.GITHUB_TOKEN }}
@@ -33,7 +33,7 @@ jobs:
echo RELEASE_NOTES_PATH=.changes/${{ steps.latest.outputs.output }}.md >> $GITHUB_ENV
- name: Create release
- uses: goreleaser/goreleaser-action@v3
+ uses: goreleaser/goreleaser-action@v6
with:
args: --clean --release-notes=${{ env.RELEASE_NOTES_PATH }} --skip=validate
env:
@@ -42,7 +42,7 @@ jobs:
GOPATH: ${{ env.GOPATH }}
- name: Upload release
- uses: actions/upload-artifact@v3
+ uses: actions/upload-artifact@v4
with:
name: mach-composer-plugin-wundergraph
path: dist/*
diff --git a/.github/workflows/triage.yaml b/.github/workflows/triage.yaml
index 59dd036..1e07ca6 100644
--- a/.github/workflows/triage.yaml
+++ b/.github/workflows/triage.yaml
@@ -18,7 +18,7 @@ jobs:
private-key: ${{ secrets.MCI_APP_PRIVATE_KEY }}
installation-id: ${{ secrets.MCI_APP_INSTALLATION_ID }}
- name: set to project board
- uses: actions/add-to-project@v1.0.1
+ uses: actions/add-to-project@v1.0.2
with:
project-url: https://github.com/orgs/mach-composer/projects/3
github-token: ${{ steps.get-app-token.outputs.app-token }}
From cfdba179f7cabd1e35338c2af58348139f5a9468 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <dependabot[bot]@users.noreply.github.com>
Date: Tue, 1 Oct 2024 04:57:17 +0000
Subject: [PATCH 2/2] chore(deps): add changelog for dependabot updates
---
.changes/unreleased/Dependency-20241001-045716.yaml | 3 +++
1 file changed, 3 insertions(+)
create mode 100644 .changes/unreleased/Dependency-20241001-045716.yaml
diff --git a/.changes/unreleased/Dependency-20241001-045716.yaml b/.changes/unreleased/Dependency-20241001-045716.yaml
new file mode 100644
index 0000000..cdfa9a2
--- /dev/null
+++ b/.changes/unreleased/Dependency-20241001-045716.yaml
@@ -0,0 +1,3 @@
+kind: Dependency
+body: 'chore(deps): bump the github-actions group across 1 directory with 10 updates'
+time: 2024-10-01T04:57:16.945987123Z