Skip to content

Bump the github-actions group across 1 directory with 9 updates#8

Open
dependabot[bot] wants to merge 1 commit intotorchsimfrom
dependabot/github_actions/github-actions-b5b08763eb
Open

Bump the github-actions group across 1 directory with 9 updates#8
dependabot[bot] wants to merge 1 commit intotorchsimfrom
dependabot/github_actions/github-actions-b5b08763eb

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Nov 1, 2024

Bumps the github-actions group with 9 updates in the / directory:

Package From To
actions/checkout 3.1.0 4.2.2
actions/upload-artifact 3 4
actions/download-artifact 3 4
tj-actions/changed-files 39 45
actions/github-script 3 7
actions/labeler 4 5
actions/attest-build-provenance 1.0.0 1.4.3
ossf/scorecard-action 2.3.1 2.4.0
github/codeql-action 2.2.4 3.27.0

Updates actions/checkout from 3.1.0 to 4.2.2

Release notes

Sourced from actions/checkout's releases.

v4.2.2

What's Changed

Full Changelog: actions/checkout@v4.2.1...v4.2.2

v4.2.1

What's Changed

New Contributors

Full Changelog: actions/checkout@v4.2.0...v4.2.1

v4.2.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v4.1.7...v4.2.0

v4.1.7

What's Changed

New Contributors

Full Changelog: actions/checkout@v4.1.6...v4.1.7

v4.1.6

What's Changed

Full Changelog: actions/checkout@v4.1.5...v4.1.6

v4.1.5

What's Changed

... (truncated)

Commits

Updates actions/upload-artifact from 3 to 4

Release notes

Sourced from actions/upload-artifact's releases.

v4.0.0

What's Changed

The release of upload-artifact@v4 and download-artifact@v4 are major changes to the backend architecture of Artifacts. They have numerous performance and behavioral improvements.

ℹ️ However, this is a major update that includes breaking changes. Artifacts created with versions v3 and below are not compatible with the v4 actions. Uploads and downloads must use the same major actions versions. There are also key differences from previous versions that may require updates to your workflows.

For more information, please see:

  1. The changelog post.
  2. The README.
  3. The migration documentation.
  4. As well as the underlying npm package, @​actions/artifact documentation.

New Contributors

Full Changelog: actions/upload-artifact@v3...v4.0.0

v3.2.1

What's Changed

This fixes the include-hidden-files input introduced in https://github.com/actions/upload-artifact/releases/tag/v3.2.0

Full Changelog: actions/upload-artifact@v3.2.0...v3.2.1

v3.2.1-node20

What's Changed

This fixes the include-hidden-files input introduced in https://github.com/actions/upload-artifact/releases/tag/v3.2.0-node20

Full Changelog: actions/upload-artifact@v3.2.0-node20...v3.2.1-node20

v3.2.0

Notice: Breaking Changes ⚠️

We will no longer include hidden files and folders by default in the upload-artifact action of this version. This reduces the risk that credentials are accidentally uploaded into artifacts. Customers who need to continue to upload these files can use a new option, include-hidden-files, to continue to do so.

See "Notice of upcoming deprecations and breaking changes in GitHub Actions runners" changelog and this issue for more details.

What's Changed

... (truncated)

Commits
  • b4b15b8 Merge pull request #632 from actions/joshmgross/undo-dependency-changes
  • 92b01eb Undo indirect dependency updates from #627
  • 8448086 Merge pull request #627 from actions/robherley/v4.4.2
  • b1d4642 add explicit relative and absolute symlinks to workflow
  • d50e660 bump version
  • aabe6f8 build with @​actions/artifact v2.1.11
  • 604373d Merge pull request #625 from actions/robherley/artifact-2.1.10
  • 0150148 paste right core version
  • a009b25 update licenses
  • 9f6f6f4 update @​actions/core and @​actions/artifact to latest versions
  • Additional commits viewable in compare view

Updates actions/download-artifact from 3 to 4

Release notes

Sourced from actions/download-artifact's releases.

v4.0.0

What's Changed

The release of upload-artifact@v4 and download-artifact@v4 are major changes to the backend architecture of Artifacts. They have numerous performance and behavioral improvements.

ℹ️ However, this is a major update that includes breaking changes. Artifacts created with versions v3 and below are not compatible with the v4 actions. Uploads and downloads must use the same major actions versions. There are also key differences from previous versions that may require updates to your workflows.

For more information, please see:

  1. The changelog post.
  2. The README.
  3. The migration documentation.
  4. As well as the underlying npm package, @​actions/artifact documentation.

New Contributors

Full Changelog: actions/download-artifact@v3...v4.0.0

v3.0.2

v3.0.1

Commits
  • fa0a91b Merge pull request #341 from actions/robherley/bump-pkgs
  • b54d088 Update @​actions/artifact version, bump dependencies
  • 65a9edc Merge pull request #325 from bethanyj28/main
  • fdd1595 licensed
  • c13dba1 update @​actions/artifact dependency
  • 0daa75e Merge pull request #324 from actions/eggyhead/use-artifact-v2.1.6
  • 9c19ed7 Merge branch 'main' into eggyhead/use-artifact-v2.1.6
  • 3d3ea87 updating license
  • 89af5db updating artifact package v2.1.6
  • b4aefff Merge pull request #323 from actions/eggyhead/update-artifact-v215
  • Additional commits viewable in compare view

Updates tj-actions/changed-files from 39 to 45

Release notes

Sourced from tj-actions/changed-files's releases.

v45

Changes in v45.0.3

What's Changed

Full Changelog: tj-actions/changed-files@v45...v45.0.3

Changes in v45.0.2

What's Changed

... (truncated)

Changelog

Sourced from tj-actions/changed-files's changelog.

Changelog

45.0.3 - (2024-10-03)

🐛 Bug Fixes

  • Overwriting yaml filter patterns (#2307) (c3a1bb2) - (Tonye Jack)
  • deps: Update dependency @​actions/core to v1.11.0 (9d4f8fe) - (renovate[bot])
  • Bug with files ignore yaml patterns not filtering the list of files (#2304) (d0cf164) - (Tonye Jack)
  • Test for since last remote commit check on pull_request closed (#2295) (e753fb0) - (Tonye Jack)

➕ Add

  • Added missing changes and modified dist assets. (36d5b9d) - (GitHub Action)
  • Added missing changes and modified dist assets. (4dbe54f) - (GitHub Action)

📚 Documentation

⚙️ Miscellaneous Tasks

  • deps: Update dependency @​types/lodash to v4.17.10 (27843f1) - (renovate[bot])
  • deps: Lock file maintenance (8a4a975) - (renovate[bot])
  • deps: Update dependency @​types/node to v22.7.4 (6bfa9e7) - (renovate[bot])
  • deps: Update dependency @​types/node to v22.7.3 (625dbd6) - (renovate[bot])
  • deps: Update dependency @​types/node to v22.7.2 (c29c1d3) - (renovate[bot])
  • deps: Update dependency @​types/node to v22.7.0 (e21f1a3) - (renovate[bot])
  • deps: Update dependency @​types/node to v22.6.1 (792230f) - (renovate[bot])
  • deps: Update dependency @​vercel/ncc to v0.38.2 (537f1c6) - (renovate[bot])
  • deps: Update dependency @​types/lodash to v4.17.9 (82587d8) - (renovate[bot])
  • deps: Lock file maintenance (eda64a6) - (renovate[bot])
  • deps: Update actions/setup-node action to v4.0.4 (4d5444c) - (renovate[bot])
  • deps: Update peter-evans/create-pull-request action to v7.0.5 (c2e104b) - (renovate[bot])
  • deps: Update dependency eslint to v8.57.1 (eed685a) - (renovate[bot])

⬆️ Upgrades

  • Upgraded to v45.0.2 (#2282)

Co-authored-by: jackton1 17484350+jackton1@users.noreply.github.com (6f538bb) - (tj-actions[bot])

45.0.2 - (2024-09-16)

🐛 Bug Fixes

  • deps: Update dependency yaml to v2.5.1 (c7114f6) - (renovate[bot])

... (truncated)

Commits
  • c3a1bb2 fix: overwriting yaml filter patterns (#2307)
  • 27843f1 chore(deps): update dependency @​types/lodash to v4.17.10
  • 36d5b9d Added missing changes and modified dist assets.
  • 9d4f8fe fix(deps): update dependency @​actions/core to v1.11.0
  • d0cf164 fix: bug with files ignore yaml patterns not filtering the list of files (#2304)
  • 641e22a docs: Update README.md (#2300)
  • 8a4a975 chore(deps): lock file maintenance
  • 6bfa9e7 chore(deps): update dependency @​types/node to v22.7.4
  • 625dbd6 chore(deps): update dependency @​types/node to v22.7.3
  • 1a71128 docs: Update README.md (#2296)
  • Additional commits viewable in compare view

Updates actions/github-script from 3 to 7

Release notes

Sourced from actions/github-script's releases.

v7.0.0

What's Changed

New Contributors

Full Changelog: actions/github-script@v6.4.1...v7.0.0

v6.4.1

What's Changed

New Contributors

Full Changelog: actions/github-script@v6.4.0...v6.4.1

v6.4.0

What's Changed

New Contributors

Full Changelog: actions/github-script@v6.3.3...v6.4.0

v6.3.3

What's Changed

New Contributors

Full Changelog: actions/github-script@v6.3.2...v6.3.3

v6.3.2

What's Changed

... (truncated)

Commits
  • 60a0d83 Merge pull request #440 from actions/joshmgross/v7.0.1
  • b7fb200 Update version to 7.0.1
  • 12e22ed Merge pull request #439 from actions/joshmgross/avoid-setting-base-url
  • d319f8f Avoid setting baseUrl to undefined when input is not provided
  • e69ef54 Merge pull request #425 from actions/joshmgross/node-20
  • ee0914b Update licenses
  • d6fc56f Use @types/node for Node 20
  • 384d6cf Fix quotations in tests
  • 8472492 Only validate GraphQL previews
  • 84903f5 Remove node-fetch from type
  • Additional commits viewable in compare view

Updates actions/labeler from 4 to 5

Release notes

Sourced from actions/labeler's releases.

v5.0.0

What's Changed

This release contains the following breaking changes:

  1. The ability to apply labels based on the names of base and/or head branches was added (#186 and #54). The match object for changed files was expanded with new combinations in order to make it more intuitive and flexible (#423 and #101). As a result, the configuration file structure was significantly redesigned and is not compatible with the structure of the previous version. Please read the action documentation to find out how to adapt your configuration files for use with the new action version.

  2. The bug related to the sync-labels input was fixed (#112). Now the input value is read correctly.

  3. By default, dot input is set to true. Now, paths starting with a dot (e.g. .github) are matched by default.

  4. Version 5 of this action updated the runtime to Node.js 20. All scripts are now run with Node.js 20 instead of Node.js 16 and are affected by any breaking changes between Node.js 16 and 20.

For more information, please read the action documentation.

New Contributors

Full Changelog: actions/labeler@v4...v5.0.0

v5.0.0-beta.1

What's Changed

In scope of this beta release, the structure of the configuration file (.github/labeler.yml) was changed from

LabelName:
- any:
  - changed-files: ['list', 'of', 'globs']
  - base-branch: ['list', 'of', 'regexps']
  - head-branch: ['list', 'of', 'regexps']
- all:
  - changed-files: ['list', 'of', 'globs']
  - base-branch: ['list', 'of', 'regexps']
  - head-branch: ['list', 'of', 'regexps']

to

LabelName:
- any:
  - changed-files: 
    - AnyGlobToAnyFile: ['list', 'of', 'globs']
    - AnyGlobToAllFiles: ['list', 'of', 'globs']
    - AllGlobsToAnyFile: ['list', 'of', 'globs']
    - AllGlobsToAllFiles: ['list', 'of', 'globs']
  - base-branch: ['list', 'of', 'regexps']
  - head-branch: ['list', 'of', 'regexps']
- all:
  - changed-files:
    - AnyGlobToAnyFile: ['list', 'of', 'globs']
    - AnyGlobToAllFiles: ['list', 'of', 'globs']
    - AllGlobsToAnyFile: ['list', 'of', 'globs']
</tr></table>

... (truncated)

Commits
  • 8558fd7 Merge pull request #709 from actions/v5.0.0-beta
  • 000ca75 Merge pull request #700 from MaksimZhukov/apply-suggestions-and-update-docume...
  • cb66c2f Update dist
  • 9181355 Apply suggestions for the beta vesrion and update the documentation
  • efe4c1c Merge pull request #699 from MaksimZhukov/update-node-runtime-and-dependencies
  • c0957ad Run Prettier
  • 8dc8d18 Update Node.js version in reusable workflows
  • d0d0bbe Update documentation
  • 1375c42 5.0.0
  • ab7411e Change version of Node.js runtime to node20
  • Additional commits viewable in compare view

Updates actions/attest-build-provenance from 1.0.0 to 1.4.3

Release notes

Sourced from actions/attest-build-provenance's releases.

v1.4.3

What's Changed

Full Changelog: actions/attest-build-provenance@v1.4.2...v1.4.3

v1.4.2

What's Changed

Full Changelog: actions/attest-build-provenance@v1.4.1...v1.4.2

v1.4.1

What's Changed

Full Changelog: actions/attest-build-provenance@v1.4.0...v1.4.1

v1.4.0

What's Changed

Full Changelog: actions/attest-build-provenance@v1.3.3...v1.4.0

v1.3.3

What's Changed

Full Changelog: actions/attest-build-provenance@v1.3.2...v1.3.3

v1.3.2

What's Changed

Full Changelog: actions/attest-build-provenance@v1.3.1...v1.3.2

... (truncated)

Commits
  • 1c608d1 bump predicate from 1.1.2 to 1.1.3 (#226)
  • f1185f1 bump @​actions/attest from 1.4.1 to 1.4.2 (#225)
  • d438876 add sigstore prober (#224)
  • 8f30a5c Bump the npm-development group with 3 updates (#218)
  • 13f0f0d Bump @​actions/attest from 1.3.1 to 1.4.1 (#212)
  • a950611 Bump the npm-development group with 2 updates (#211)
  • 814a778 Bump the npm-development group with 3 updates (#206)
  • 6149ea5 bump actions/attest from 1.4.0 to 1.4.1 (#209)
  • 3eb3242 Bump super-linter/super-linter from 6 to 7 (#205)
  • 399bb17 Bump @​types/node from 22.2.0 to 22.4.0 in the npm-development group (#203)
  • Additional commits viewable in compare view

Updates ossf/scorecard-action from 2.3.1 to 2.4.0

Release notes

Sourced from ossf/scorecard-action's releases.

v2.4.0

What's Changed

This update bumps the Scorecard version to the v5 release. For a complete list of changes, please refer to the v5.0.0 release notes. Of special note to Scorecard Action is the Maintainer Annotation feature, which can be used to suppress some Code Scanning false positives. Alerts will not be generated for any Scorecard Check with an annotation.

Documentation

New Contributors

Full Changelog: ossf/scorecard-action@v2.3.3...v2.4.0

v2.3.3

[!NOTE]
There is no v2.3.2 release as a step was skipped in the release process. This was fixed and re-released under the v2.3.3 tag

What's Changed

For a full changelist of what these include, see the v5.0.0-rc1 and v5.0.0-rc2 release notes.

Documentation

Full Changelog: ossf/scorecard-action@v2.3.1...v2.3.3

Commits
  • 62b2cac bump docker tag to v2.4.0 for release (#1414)
  • c09630c lower license score alert threshold to 9 (

@dependabot
Bump the github-actions group across 1 directory with 9 updates
648f46a 
Bumps the github-actions group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `3.1.0` | `4.2.2` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact) | `3` | `4` |
| [actions/download-artifact](https://github.com/actions/download-artifact) | `3` | `4` |
| [tj-actions/changed-files](https://github.com/tj-actions/changed-files) | `39` | `45` |
| [actions/github-script](https://github.com/actions/github-script) | `3` | `7` |
| [actions/labeler](https://github.com/actions/labeler) | `4` | `5` |
| [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance) | `1.0.0` | `1.4.3` |
| [ossf/scorecard-action](https://github.com/ossf/scorecard-action) | `2.3.1` | `2.4.0` |
| [github/codeql-action](https://github.com/github/codeql-action) | `2.2.4` | `3.27.0` |



Updates `actions/checkout` from 3.1.0 to 4.2.2
- [Release notes](https://github.com/actions/checkout/releases)
- [Commits](actions/checkout@v3.1.0...v4.2.2)

Updates `actions/upload-artifact` from 3 to 4
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@v3...v4)

Updates `actions/download-artifact` from 3 to 4
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](actions/download-artifact@v3...v4)

Updates `tj-actions/changed-files` from 39 to 45
- [Release notes](https://github.com/tj-actions/changed-files/releases)
- [Changelog](https://github.com/tj-actions/changed-files/blob/main/HISTORY.md)
- [Commits](tj-actions/changed-files@v39...v45)

Updates `actions/github-script` from 3 to 7
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](actions/github-script@v3...v7)

Updates `actions/labeler` from 4 to 5
- [Release notes](https://github.com/actions/labeler/releases)
- [Commits](actions/labeler@v4...v5)

Updates `actions/attest-build-provenance` from 1.0.0 to 1.4.3
- [Release notes](https://github.com/actions/attest-build-provenance/releases)
- [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md)
- [Commits](actions/attest-build-provenance@897ed5e...1c608d1)

Updates `ossf/scorecard-action` from 2.3.1 to 2.4.0
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](ossf/scorecard-action@0864cf1...62b2cac)

Updates `github/codeql-action` from 2.2.4 to 3.27.0
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@17573ee...6624720)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/download-artifact
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: tj-actions/changed-files
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/github-script
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/labeler
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/attest-build-provenance
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: ossf/scorecard-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Nov 1, 2024
@dependabot dependabot bot mentioned this pull request Nov 1, 2024
Closed
@YWHyuk YWHyuk force-pushed the torchsim branch 8 times, most recently from 458b742 to 42090cb Compare December 18, 2024 07:20
@YWHyuk YWHyuk force-pushed the torchsim branch 9 times, most recently from 3229728 to f73b02b Compare August 6, 2025 06:38
@YWHyuk YWHyuk force-pushed the torchsim branch 2 times, most recently from 630b106 to b0ce680 Compare August 13, 2025 05:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants