Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update GitHub Actions (major) #184

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Apr 15, 2024

Mend Renovate

This PR contains the following updates:

Package Type Update Change
actions/checkout action major v3 -> v4
actions/setup-dotnet action major v3 -> v4
actions/setup-node action major v3 -> v4
actions/stale action major v8 -> v9
codecov/codecov-action action major v3 -> v4
suzuki-shunsuke/github-action-renovate-config-validator action major v0.1.3 -> v1.0.1

Release Notes

actions/checkout (actions/checkout)

v4

Compare Source

actions/setup-dotnet (actions/setup-dotnet)

v4

Compare Source

actions/setup-node (actions/setup-node)

v4

Compare Source

actions/stale (actions/stale)

v9

Compare Source

codecov/codecov-action (codecov/codecov-action)

v4

Compare Source

suzuki-shunsuke/github-action-renovate-config-validator (suzuki-shunsuke/github-action-renovate-config-validator)

v1.0.1

Compare Source

Fixes

#​551 Suppress npx warnings using --yes option @​TWiStErRob

This action executes renovate-config-validator via npx, then the following warning was outputted.

npm WARN exec The following package was not found and will be installed: renovate@37.130.0

To suppress the warning, we set npx's --yes option.

https://docs.npmjs.com/cli/v8/commands/npx

If any requested packages are not present in the local project dependencies, then they are installed to a folder in the npm cache, which is added to the PATH environment variable in the executed process.
A prompt is printed (which can be suppressed by providing either --yes or --no).

To prevent security and user-experience problems from mistyping package names, npx prompts before installing anything.
Suppress this prompt with the -y or --yes option.
The --no-install option is deprecated, and will be converted to --no.

🎉 New contributors

Thank you for your contribution!

@​TWiStErRob #​551

v1.0.0

Compare Source

⚠️ Breaking Changes

#​531 renovate-config-validator's --strict option is enabled by default.

How to migrate

There are several options.

  1. Recommended: Fix Renovate configuration according to the error message
  2. Unrecommended: Set false to the input strict to disable --strict option

⚠️ Security Improvement

#​530 Pass inputs via environment variables to prevent malicious injection

Features

#​531 Add the input strict.

You can enable renovate-config-validator's --strict option.


Configuration

📅 Schedule: Branch creation - "before 9am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

@renovate renovate bot added actions dependencies Pull requests that update a dependency file renovate labels Apr 15, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
actions dependencies Pull requests that update a dependency file renovate
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

0 participants