Bump the github group with 5 updates #1881

dependabot · 2024-02-01T05:22:35Z

Bumps the github group with 5 updates:

Package	From	To
actions/setup-java	`3`	`4`
gradle/gradle-build-action	`2`	`3`
actions/github-script	`6`	`7`
nais/deploy	`1`	`2`
peter-evans/slash-command-dispatch	`3.0.1`	`4.0.0`

Updates actions/setup-java from 3 to 4

Release notes

Sourced from actions/setup-java's releases.

v4.0.0

What's Changed

In the scope of this release, the version of the Node.js runtime was updated to 20. The majority of dependencies were updated to the latest versions. From now on, the code for the setup-java will run on Node.js 20 instead of Node.js 16.

Breaking changes

Update Node.js runtime to version 20 by @aparnajyothi-y in actions/setup-java#558

Non-breaking changes

Adding support for microsoft openjdk 21.0.0 by @ralfstuckert in actions/setup-java#546

Update @actions/cache dependency and documentation by @IvanZosimov in actions/setup-java#549

Implementation of the cache-dependency-path option to control caching dependency by @itchyny in actions/setup-java#499

New Contributors

@ralfstuckert made their first contribution in actions/setup-java#546

@itchyny made their first contribution in actions/setup-java#499

Full Changelog: actions/setup-java@v3...v4.0.0

v3.13.0

What's changed

In the scope of this release, support for Dragonwell JDK was added by @Accelerator1996 in actions/setup-java#532
steps:
 - name: Checkout
   uses: actions/checkout@v3
 - name: Setup-java
   uses: actions/setup-java@v3
   with:
     distribution: 'dragonwell'
     java-version: '17'
Several inaccuracies were also fixed:

Fix XML namespaces wrongly using https by @gnodet in actions/setup-java#503

Fix typo and remove unintentional(?) word by @CyberFlameGO in actions/setup-java#518

Fix usage link within the README.md file by @dassiorleando in actions/setup-java#525

New Contributors

@CyberFlameGO made their first contribution in actions/setup-java#518

@dassiorleando made their first contribution in actions/setup-java#525

@gnodet made their first contribution in actions/setup-java#503

@Accelerator1996 made their first contribution in actions/setup-java#532

Full Changelog: actions/setup-java@v3...v3.13.0

v3.12.0

... (truncated)

Commits

387ac29 Upgrade Node to v20 (#558)
9eda6b5 feat: implement cache-dependency-path option to control caching dependency (#...
78078da Update @actions/cache dependency and documentation (#549)
5caaba6 add support for microsoft openjdk 21.0.0 (#546)
See full diff in compare view

Updates gradle/gradle-build-action from 2 to 3

Release notes

Sourced from gradle/gradle-build-action's releases.

v3.0.0

This is the first release of gradle/gradle-build-action available with the v3 version tag.
[!IMPORTANT] As of v3 this action has been superceded by gradle/actions/setup-gradle. Any workflow that uses gradle/gradle-build-action@v3 will transparently delegate to gradle/actions/setup-gradle@v3.

Users are encouraged to update their workflows, replacing:
uses: gradle/gradle-build-action@v3
with
uses: gradle/actions/setup-gradle@v3
See the setup-gradle documentation for up-to-date documentation for gradle/actions/setup-gradle.
Changes from gradle-build-action@v2

This release brings some useful and much requested features, including:

save and restore the Gradle configuration-cache data

add the Job summary content as a PR comment

easily publish Build Scans® to the free Gradle Build Scan service

compatibility with Node 20

The only major breaking change from [email protected] is the update to require a Node 20 runtime environment. Aside from that change, this release should generally serve as a drop-in replacement for gradle-build-action@v2.

Changelog

[NEW] - Run with NodeJs 20.x (gradle/gradle-build-action#946)

[NEW] - Support for save & restore of configuration-cache data (gradle/gradle-build-action#966)

[NEW] - Support for automatic adding PR comment with Job Summary content (gradle/gradle-build-action#1020)

[NEW] - Make it easy to publish a Build Scan® to https://scans.gradle.com (gradle/gradle-build-action#1044)

[NEW] - Added dependency-graph-continue-on-failure input, which can be set to false to force the Job to fail when dependency graph submission fails (gradle/gradle-build-action#1036). Failure modes include:

Fail build step if version of Gradle being executed is not supported for dependency-graph generation (gradle/gradle-build-action#1034)

Fail job if permissions are insufficient to submit dependency graph via Dependency Submission API (gradle/gradle-build-action#997)

[NEW] - Add dependency-graph: clear option to clear any dependency-graph previously submitted by the job

[FIX] Allow cache entries to be reused by jobs with the same ID in different workflows (gradle/gradle-build-action#1017)

Workflow name remains part of the cache key, but cache entries generated by the same job id in a different workflow may be restored

[FIX] Register pre-installed JDKs in Maven toolchains.xml file (gradle/gradle-build-action#1024)

This allows pre-installed JDKs to be auto-detected by Gradle Toolchain support on Windows

[FIX] - Update the Gradle Enterprise injection configuration for product rename to Develocity (gradle/gradle-build-action#995)

[FIX] - Avoid submitting an empty dependency graph when state is loaded from configuration-cache

[FIX] - Update to GitHub Dependency Graph Gradle Plugin v1.2.0

[DEPRECATION] - Deprecation of the arguments parameter (gradle/gradle-build-action#996)

[BREAKING CHANGE] - Remove the gradle-executable input parameter. Use a separate workflow Step to execute a Gradle from a custom location.

... (truncated)

Commits

3b1b3b9 Prepare for v3.0.0 release
d4bd442 Delegate to '[email protected]'
4587492 Redirect some README content
ef85c4e Bump DV plugin version to 3.16.2
7e08fe2 Run full-check on change to action.yml
4a8703f Delegate to '[email protected]'
4a39eed Mention setup-gradle in README
272883a Remove all action sources: these have been migrated to 'gradle/actions'
2a8bfcf Delegate action implementation to gradle/actions/setup-gradle
e1ada08 Bump the github-actions group with 1 update (#1047)
Additional commits viewable in compare view

Updates actions/github-script from 6 to 7

Release notes

Sourced from actions/github-script's releases.

v7.0.0

What's Changed

Add base-url option by @robandpdx in actions/github-script#429

Expose async-function argument type by @viktorlott in actions/github-script#402, see for details https://github.com/actions/github-script#use-scripts-with-jsdoc-support

Update dependencies and use Node 20 by @joshmgross in actions/github-script#425

New Contributors

@navarroaxel made their first contribution in actions/github-script#285

@robandpdx made their first contribution in actions/github-script#429

@viktorlott made their first contribution in actions/github-script#402

Full Changelog: actions/github-script@v6.4.1...v7.0.0

v6.4.1

What's Changed

Add @octokit/plugin-request-log, to produce debug output for requests by @mjpieters in actions/github-script#358

fix input handling by @mjpieters in actions/github-script#357

Remove unused dependencies by @mjpieters in actions/github-script#356

Default debug to current runner debug state by @mjpieters in actions/github-script#363

New Contributors

@mjpieters made their first contribution in actions/github-script#358

Full Changelog: actions/github-script@v6.4.0...v6.4.1

v6.4.0

What's Changed

Bump json5 from 2.1.3 to 2.2.3 by @dependabot in actions/github-script#319

Bump minimatch from 3.0.4 to 3.1.2 by @dependabot in actions/github-script#320

Add node-fetch by @danmichaelo in actions/github-script#321

New Contributors

@jongwooo made their first contribution in actions/github-script#313

@austinvazquez made their first contribution in actions/github-script#306

@danmichaelo made their first contribution in actions/github-script#321

Full Changelog: actions/github-script@v6.3.3...v6.4.0

v6.3.3

What's Changed

Update @actions/glob to 0.3.0 by @nineinchnick in actions/github-script#279

New Contributors

@nineinchnick made their first contribution in actions/github-script#279

Full Changelog: actions/github-script@v6.3.2...v6.3.3

v6.3.2

What's Changed

Update @actions/core to 1.10.0 by @rentziass in actions/github-script#295

... (truncated)

Commits

60a0d83 Merge pull request #440 from actions/joshmgross/v7.0.1
b7fb200 Update version to 7.0.1
12e22ed Merge pull request #439 from actions/joshmgross/avoid-setting-base-url
d319f8f Avoid setting baseUrl to undefined when input is not provided
e69ef54 Merge pull request #425 from actions/joshmgross/node-20
ee0914b Update licenses
d6fc56f Use @types/node for Node 20
384d6cf Fix quotations in tests
8472492 Only validate GraphQL previews
84903f5 Remove node-fetch from type
Additional commits viewable in compare view

Updates nais/deploy from 1 to 2

Commits

c73efa8 Merge pull request #186 from nais/dependabot/go_modules/github.com/lestrrat-g...
20b53dd deployd: mention case sensitivity for unknown fields
a077641 Merge pull request #132 from nais/client-go-strict-field-validation
cbc218f build(deps): bump github.com/lestrrat-go/jwx/v2 from 2.0.17 to 2.0.19
2730cc6 ci: don't pollute /usr/local with kubebuilder without versioning
39fa515 deployd: use strict validation for create/update operations
6119304 Merge pull request #184 from nais/dependabot/go_modules/golang.org/x/crypto-0...
59f3081 Merge pull request #185 from nais/action-test
c37fdcc fix(deploy-action): improve masking logic and error message
f2f1e7f build(deps): bump golang.org/x/crypto from 0.15.0 to 0.17.0
Additional commits viewable in compare view

Updates peter-evans/slash-command-dispatch from 3.0.1 to 4.0.0

Release notes

Sourced from peter-evans/slash-command-dispatch's releases.

Slash Command Dispatch v4.0.0

⚙️ Updated runtime to Node.js 20

The action now requires a minimum version of v2.308.0 for the Actions runner. Update self-hosted runners to v2.308.0 or later to ensure compatibility.

What's Changed

build(deps-dev): bump @types/node from 16.18.67 to 16.18.68 by @dependabot in peter-evans/slash-command-dispatch#302

build(deps-dev): bump prettier from 3.1.0 to 3.1.1 by @dependabot in peter-evans/slash-command-dispatch#303

build(deps-dev): bump jest-circus from 27.4.2 to 27.5.1 by @dependabot in peter-evans/slash-command-dispatch#176

build(deps): bump actions/download-artifact from 3 to 4 by @dependabot in peter-evans/slash-command-dispatch#304

build(deps): bump actions/upload-artifact from 3 to 4 by @dependabot in peter-evans/slash-command-dispatch#305

build(deps-dev): bump eslint from 8.55.0 to 8.56.0 by @dependabot in peter-evans/slash-command-dispatch#306

build(deps-dev): bump eslint-plugin-prettier from 5.0.1 to 5.1.2 by @dependabot in peter-evans/slash-command-dispatch#308

build(deps-dev): bump @types/node from 16.18.68 to 16.18.69 by @dependabot in peter-evans/slash-command-dispatch#309

build(deps-dev): bump @types/node from 16.18.69 to 16.18.70 by @dependabot in peter-evans/slash-command-dispatch#310

build(deps-dev): bump eslint-plugin-prettier from 5.1.2 to 5.1.3 by @dependabot in peter-evans/slash-command-dispatch#311

build(deps-dev): bump prettier from 3.1.1 to 3.2.2 by @dependabot in peter-evans/slash-command-dispatch#312

build(deps-dev): bump prettier from 3.2.2 to 3.2.4 by @dependabot in peter-evans/slash-command-dispatch#314

build(deps-dev): bump @types/node from 16.18.70 to 16.18.74 by @dependabot in peter-evans/slash-command-dispatch#315

build(deps): bump peter-evans/create-or-update-comment from 3 to 4 by @dependabot in peter-evans/slash-command-dispatch#317

build(deps-dev): bump @types/node from 16.18.74 to 16.18.76 by @dependabot in peter-evans/slash-command-dispatch#318

feat: update runtime to node 20 by @peter-evans in peter-evans/slash-command-dispatch#316

Full Changelog: peter-evans/slash-command-dispatch@v3.0.2...v4.0.0

Slash Command Dispatch v3.0.2

What's Changed

fix: replace use of any type by @peter-evans in peter-evans/slash-command-dispatch#152

fixing link to Get a pull request by @Borda in peter-evans/slash-command-dispatch#270

Update getting-started.md due to changes in Github UI by @martin-displayr in peter-evans/slash-command-dispatch#289

[Security] Fix GraphQL query to get a collaborator's permission by @0xn3va in peter-evans/slash-command-dispatch#301

129 dependency updates by @dependabot

New Contributors

@Borda made their first contribution in peter-evans/slash-command-dispatch#270

@martin-displayr made their first contribution in peter-evans/slash-command-dispatch#289

@0xn3va made their first contribution in peter-evans/slash-command-dispatch#301

Full Changelog: peter-evans/slash-command-dispatch@v3.0.1...v3.0.2

Commits

13bc097 feat: update runtime to node 20 (#316)
128d8b9 build(deps-dev): bump @types/node from 16.18.74 to 16.18.76 (#318)
df481df build(deps): bump peter-evans/create-or-update-comment from 3 to 4 (#317)
d4579a0 build(deps-dev): bump @types/node from 16.18.70 to 16.18.74 (#315)
8f053ea build(deps-dev): bump prettier from 3.2.2 to 3.2.4 (#314)
b3eb783 build(deps-dev): bump prettier from 3.1.1 to 3.2.2 (#312)
c0334d0 build(deps-dev): bump eslint-plugin-prettier from 5.1.2 to 5.1.3 (#311)
e627c61 build(deps-dev): bump @types/node from 16.18.69 to 16.18.70 (#310)
5c23a33 build(deps-dev): bump @types/node from 16.18.68 to 16.18.69 (#309)
8dd62d5 build(deps-dev): bump eslint-plugin-prettier from 5.0.1 to 5.1.2 (#308)
Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

Bumps the github group with 5 updates: | Package | From | To | | --- | --- | --- | | [actions/setup-java](https://github.com/actions/setup-java) | `3` | `4` | | [gradle/gradle-build-action](https://github.com/gradle/gradle-build-action) | `2` | `3` | | [actions/github-script](https://github.com/actions/github-script) | `6` | `7` | | [nais/deploy](https://github.com/nais/deploy) | `1` | `2` | | [peter-evans/slash-command-dispatch](https://github.com/peter-evans/slash-command-dispatch) | `3.0.1` | `4.0.0` | Updates `actions/setup-java` from 3 to 4 - [Release notes](https://github.com/actions/setup-java/releases) - [Commits](actions/setup-java@v3...v4) Updates `gradle/gradle-build-action` from 2 to 3 - [Release notes](https://github.com/gradle/gradle-build-action/releases) - [Commits](gradle/gradle-build-action@v2...v3) Updates `actions/github-script` from 6 to 7 - [Release notes](https://github.com/actions/github-script/releases) - [Commits](actions/github-script@v6...v7) Updates `nais/deploy` from 1 to 2 - [Release notes](https://github.com/nais/deploy/releases) - [Commits](nais/deploy@v1...v2) Updates `peter-evans/slash-command-dispatch` from 3.0.1 to 4.0.0 - [Release notes](https://github.com/peter-evans/slash-command-dispatch/releases) - [Commits](peter-evans/slash-command-dispatch@v3.0.1...v4.0.0) --- updated-dependencies: - dependency-name: actions/setup-java dependency-type: direct:production update-type: version-update:semver-major dependency-group: github - dependency-name: gradle/gradle-build-action dependency-type: direct:production update-type: version-update:semver-major dependency-group: github - dependency-name: actions/github-script dependency-type: direct:production update-type: version-update:semver-major dependency-group: github - dependency-name: nais/deploy dependency-type: direct:production update-type: version-update:semver-major dependency-group: github - dependency-name: peter-evans/slash-command-dispatch dependency-type: direct:production update-type: version-update:semver-major dependency-group: github ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot bot requested a review from a team as a code owner February 1, 2024 05:22

dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update Github_actions code labels Feb 1, 2024

dependabot bot mentioned this pull request Feb 1, 2024

Bump the github group with 5 updates #1876

Closed

dependabot bot force-pushed the dependabot/github_actions/github-70e73293f4 branch 5 times, most recently from 3e2a2b9 to c029ab8 Compare February 9, 2024 05:02

dependabot bot force-pushed the dependabot/github_actions/github-70e73293f4 branch 2 times, most recently from 3672c2d to 8ef49e3 Compare February 14, 2024 05:30

dependabot bot force-pushed the dependabot/github_actions/github-70e73293f4 branch 5 times, most recently from 8387536 to eb2109f Compare February 27, 2024 05:33

dependabot bot force-pushed the dependabot/github_actions/github-70e73293f4 branch 4 times, most recently from 5fd4e16 to 4035f48 Compare March 5, 2024 05:02

dependabot bot force-pushed the dependabot/github_actions/github-70e73293f4 branch 5 times, most recently from 686ef72 to c367999 Compare March 13, 2024 05:04

dependabot bot force-pushed the dependabot/github_actions/github-70e73293f4 branch 4 times, most recently from 6665fb5 to beadd0b Compare March 20, 2024 05:48

dependabot bot force-pushed the dependabot/github_actions/github-70e73293f4 branch from beadd0b to 5375007 Compare April 3, 2024 05:25

dependabot bot force-pushed the dependabot/github_actions/github-70e73293f4 branch 5 times, most recently from 2946c34 to 25c21d8 Compare August 29, 2024 05:30

dependabot bot force-pushed the dependabot/github_actions/github-70e73293f4 branch 5 times, most recently from 6711600 to 1fed511 Compare September 9, 2024 05:38

dependabot bot force-pushed the dependabot/github_actions/github-70e73293f4 branch 3 times, most recently from 76ada22 to f655282 Compare September 19, 2024 05:04

dependabot bot force-pushed the dependabot/github_actions/github-70e73293f4 branch 3 times, most recently from b943d48 to 553b89f Compare September 26, 2024 05:37

dependabot bot force-pushed the dependabot/github_actions/github-70e73293f4 branch 5 times, most recently from 5d55fae to e0458e1 Compare October 8, 2024 05:57

dependabot bot force-pushed the dependabot/github_actions/github-70e73293f4 branch 4 times, most recently from 60d9a94 to 652fbe0 Compare October 21, 2024 05:10

dependabot bot force-pushed the dependabot/github_actions/github-70e73293f4 branch 3 times, most recently from a76225b to 62b7a1a Compare October 29, 2024 05:30

dependabot bot force-pushed the dependabot/github_actions/github-70e73293f4 branch from 62b7a1a to 9153d1c Compare October 30, 2024 05:58

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the github group with 5 updates #1881

Bump the github group with 5 updates #1881

dependabot bot commented on behalf of github Feb 1, 2024 •

edited

Loading

Bump the github group with 5 updates #1881

Are you sure you want to change the base?

Bump the github group with 5 updates #1881

Conversation

dependabot bot commented on behalf of github Feb 1, 2024 • edited Loading

v4.0.0

What's Changed

Breaking changes

Non-breaking changes

New Contributors

v3.13.0

What's changed

New Contributors

v3.12.0

v3.0.0

Changes from gradle-build-action@v2

Changelog

v7.0.0

What's Changed

New Contributors

v6.4.1

What's Changed

New Contributors

v6.4.0

What's Changed

New Contributors

v6.3.3

What's Changed

New Contributors

v6.3.2

What's Changed

Slash Command Dispatch v4.0.0

What's Changed

Slash Command Dispatch v3.0.2

What's Changed

New Contributors

dependabot bot commented on behalf of github Feb 1, 2024 •

edited

Loading

Changes from `gradle-build-action@v2`