build(deps): bump the actions group with 4 updates #4508
Conversation
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
Bumps the actions group with 4 updates: [actions/setup-python](https://github.com/actions/setup-python), [ansys/actions](https://github.com/ansys/actions), [docker/login-action](https://github.com/docker/login-action) and [actions/labeler](https://github.com/actions/labeler). Updates `actions/setup-python` from 5 to 6 - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](actions/setup-python@v5...v6) Updates `ansys/actions` from 10.0 to 10.1 - [Release notes](https://github.com/ansys/actions/releases) - [Changelog](https://github.com/ansys/actions/blob/main/CHANGELOG.md) - [Commits](ansys/actions@v10.0...v10.1) Updates `docker/login-action` from 3.5.0 to 3.6.0 - [Release notes](https://github.com/docker/login-action/releases) - [Commits](docker/login-action@184bdaa...5e57cd1) Updates `actions/labeler` from 5 to 6 - [Release notes](https://github.com/actions/labeler/releases) - [Commits](actions/labeler@v5...v6) --- updated-dependencies: - dependency-name: actions/setup-python dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: ansys/actions dependency-version: '10.1' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: docker/login-action dependency-version: 3.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: actions/labeler dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
the
maintenance
dependabot
bot
requested review from
mkundu1,
seanpearsonuk,
prmukherj,
hpohekar and
mayankansys
as code owners
dependabot
bot
added
the
maintenance
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
| pull-requests: write | ||
| steps: | ||
| - uses: ansys/actions/doc-deploy-changelog@v10.0 | ||
| - uses: ansys/actions/doc-deploy-changelog@v10.1 |
Check warning
Code scanning / CodeQL
Unpinned tag for a non-immutable Action in workflow Medium
| steps: | ||
| - name: Running Vale | ||
| uses: ansys/actions/doc-style@v10.0 | ||
| uses: ansys/actions/doc-style@v10.1 |
Check warning
Code scanning / CodeQL
Unpinned tag for a non-immutable Action in workflow Medium
| steps: | ||
| - name: "Run PyAnsys code style checks" | ||
| uses: ansys/actions/code-style@v10.0 | ||
| uses: ansys/actions/code-style@v10.1 |
Check warning
Code scanning / CodeQL
Unpinned tag for a non-immutable Action in workflow Medium
| runs-on: ubuntu-latest | ||
| steps: | ||
| - uses: ansys/actions/check-pr-title@v10.0 | ||
| - uses: ansys/actions/check-pr-title@v10.1 |
Check warning
Code scanning / CodeQL
Unpinned tag for a non-immutable Action in workflow Medium
| steps: | ||
| - name: Build wheelhouse and perform smoke test | ||
| uses: ansys/actions/build-wheelhouse@v10.0 | ||
| uses: ansys/actions/build-wheelhouse@v10.1 |
Check warning
Code scanning / CodeQL
Unpinned tag for a non-immutable Action in workflow Medium
| steps: | ||
| - name: "Deploy development documentation" | ||
| uses: ansys/actions/doc-deploy-dev@v10.0 | ||
| uses: ansys/actions/doc-deploy-dev@v10.1 |
Check warning
Code scanning / CodeQL
Unpinned tag for a non-immutable Action in workflow Medium
| steps: | ||
| - name: "Deploy release documentation" | ||
| uses: ansys/actions/doc-deploy-stable@v10.0 | ||
| uses: ansys/actions/doc-deploy-stable@v10.1 |
Check warning
Code scanning / CodeQL
Unpinned tag for a non-immutable Action in workflow Medium
| runs-on: ubuntu-latest | ||
| steps: | ||
| - uses: ansys/actions/doc-changelog@v10.0 | ||
| - uses: ansys/actions/doc-changelog@v10.1 |
Check warning
Code scanning / CodeQL
Unpinned tag for a non-immutable Action in workflow Medium
Bumps the actions group with 4 updates: actions/setup-python, ansys/actions, docker/login-action and actions/labeler.
Updates
actions/setup-pythonfrom 5 to 6Release notes
Sourced from actions/setup-python's releases.
... (truncated)
Commits
e797f83Upgrade to node 24 (#1164)3d1e2d2Revert "Enhance cache-dependency-path handling to support files outside the w...65b0712Clarify pythonLocation behavior for PyPy and GraalPy in environment variables...5b668cfBump actions/checkout from 4 to 5 (#1181)f62a0e2Change missing cache directory error to warning (#1182)9322b3cUpgrade setuptools to 78.1.1 to fix path traversal vulnerability in PackageIn...fbeb884Bump form-data to fix critical vulnerabilities #182 & #183 (#1163)03bb615Bump idna from 2.9 to 3.7 in /tests/data (#843)36da51dAdd version parsing from Pipfile (#1067)3c6f142update documentation (#1156)Updates
ansys/actionsfrom 10.0 to 10.1Release notes
Sourced from ansys/actions's releases.
... (truncated)
Commits
123a1f1chore: updating CHANGELOG for v10.1.380c5a65release: v10.1.3c6838e6fix: GitHub command-line tool command in ansys/release-github (#1012)9de5aa7chore: updating CHANGELOG for v10.1.268a3799release: v10.1.2d34dcaadocs: update check-actions-security action documentation (#1007)e0de7ddchore: updating CHANGELOG for v10.1.197b3ab0release: v10.1.17aeebd6docs: improve migration guide (#1003)ed773abrelease: v10.1.0Updates
docker/login-actionfrom 3.5.0 to 3.6.0Release notes
Sourced from docker/login-action's releases.
Commits
5e57cd1Merge pull request #890 from docker/dependabot/npm_and_yarn/aws-sdk-dependenc...97e3143chore: update generated content3a0796bbuild(deps): bump the aws-sdk-dependencies group with 2 updates5b7b28bMerge pull request #882 from docker/dependabot/npm_and_yarn/aws-sdk-dependenc...abc9fb3chore: update generated contentd468688build(deps): bump the aws-sdk-dependencies group with 2 updatesa99b2f8Merge pull request #883 from docker/dependabot/npm_and_yarn/docker/actions-to...0d7fae8chore: update generated content9832253build(deps): bump@docker/actions-toolkitfrom 0.62.1 to 0.63.009e05bbMerge pull request #881 from docker/dependabot/npm_and_yarn/tmp-0.2.4Updates
actions/labelerfrom 5 to 6Release notes
Sourced from actions/labeler's releases.
... (truncated)
Commits
634933epublish-action upgrade to 0.4.0 from 0.2.2 (#901)f1a63e8Update Node.js version to 24 in action and dependencies (#891)b0a1180Bump@octokit/request-errorfrom 5.0.1 to 5.1.1 (#846)110d441Update README.md (#871)bee50feBump undici from 5.28.4 to 5.28.5 (#842)6463cdbBump eslint-plugin-jest from 28.9.0 to 28.11.0 (#839)c209686Bump typescript from 5.7.2 to 5.7.3 (#835)5184940Bump@vercel/nccfrom 0.38.1 to 0.38.3 (#830)3629d55Document update - permission section (#840)d24f7f3Bump ts-jest from 29.1.2 to 29.2.5 (#831)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions