build(deps): bump the dependencies group with 5 updates

Bumps the dependencies group with 5 updates:

Package	From	To
actions/cache	`3`	`4`
actions/checkout	`3`	`4`
actions/upload-artifact	`3`	`4`
actions/download-artifact	`3`	`4`
docker/build-push-action	`4`	`5`

Updates actions/cache from 3 to 4

Release notes

Sourced from actions/cache's releases.

v4.0.0

What's Changed

Update action to node20 by @takost in actions/cache#1284

feat: save-always flag by @to-s in actions/cache#1242

New Contributors

@takost made their first contribution in actions/cache#1284

@to-s made their first contribution in actions/cache#1242

Full Changelog: https://github.com/actions/cache/compare/v3...v4.0.0

v3.3.3

What's Changed

Cache v3.3.3 by @robherley in actions/cache#1302

New Contributors

@robherley made their first contribution in actions/cache#1302

Full Changelog: https://github.com/actions/cache/compare/v3...v3.3.3

v3.3.2

What's Changed

Fixed readme with new segment timeout values by @kotewar in actions/cache#1133

Readme fixes by @kotewar in actions/cache#1134

Updated description of the lookup-only input for main action by @kotewar in actions/cache#1130

Change two new actions mention as quoted text by @bishal-pdMSFT in actions/cache#1131

Update Cross-OS Caching tips by @pdotl in actions/cache#1122

Bazel example (Take #2️⃣) by @vorburger in actions/cache#1132

Remove actions to add new PRs and issues to a project board by @jorendorff in actions/cache#1187

Consume latest toolkit and fix dangling promise bug by @chkimes in actions/cache#1217

Bump action version to 3.3.2 by @bethanyj28 in actions/cache#1236

New Contributors

@vorburger made their first contribution in actions/cache#1132

@jorendorff made their first contribution in actions/cache#1187

@chkimes made their first contribution in actions/cache#1217

@bethanyj28 made their first contribution in actions/cache#1236

Full Changelog: https://github.com/actions/cache/compare/v3...v3.3.2

v3.3.1

What's Changed

Reduced download segment size to 128 MB and timeout to 10 minutes by @kotewar in actions/cache#1129

Full Changelog: https://github.com/actions/cache/compare/v3...v3.3.1

v3.3.0

What's Changed

Bug: Permission is missing in cache delete example by @kotokaze in actions/cache#1123

... (truncated)

Changelog

Sourced from actions/cache's changelog.

Releases

4.0.2

Fixed restore fail-on-cache-miss not working.

4.0.1

Updated isGhes check

4.0.0

Updated minimum runner version support from node 12 -> node 20

3.3.3

Updates @actions/cache to v3.2.3 to fix accidental mutated path arguments to getCacheVersion actions/toolkit#1378

Additional audit fixes of npm package(s)

3.3.2

Fixes bug with Azure SDK causing blob downloads to get stuck.

3.3.1

Reduced segment size to 128MB and segment timeout to 10 minutes to fail fast in case the cache download is stuck.

3.3.0

Added option to lookup cache without downloading it.

3.2.6

Fix zstd not being used after zstd version upgrade to 1.5.4 on hosted runners.

3.2.5

Added fix to prevent from setting MYSYS environment variable globally.

3.2.4

Added option to fail job on cache miss.

3.2.3

Support cross os caching on Windows as an opt-in feature.

Fix issue with symlink restoration on Windows for cross-os caches.

3.2.2

... (truncated)

Commits

0c45773 Merge pull request #1327 from cdce8p/fix-fail-on-cache-miss
8a55f83 Add test case for process exit
3884cac Bump version
e29dad3 Fix fail-on-cache-miss not working
ab5e6d0 Merge pull request #1341 from bethanyj28/main
89c7d86 licensed cache
d2c84da update @actions/cache
37e7d4e Merge pull request #1340 from actions/bethanyj28/update-publish-flow
a18323f add release action
a2ed59d Merge pull request #1305 from actions/yacaovsnc/update_examples
Additional commits viewable in compare view

Updates actions/checkout from 3 to 4

Release notes

Sourced from actions/checkout's releases.

v4.0.0

What's Changed

Update default runtime to node20 by @takost in actions/checkout#1436

Support fetching without the --progress option by @simonbaird in actions/checkout#1067

Release 4.0.0 by @takost in actions/checkout#1447

New Contributors

@takost made their first contribution in actions/checkout#1436

@simonbaird made their first contribution in actions/checkout#1067

Full Changelog: https://github.com/actions/checkout/compare/v3...v4.0.0

v3.6.0

What's Changed

Mark test scripts with Bash'isms to be run via Bash by @dscho in actions/checkout#1377

Add option to fetch tags even if fetch-depth > 0 by @RobertWieczoreck in actions/checkout#579

Release 3.6.0 by @luketomlinson in actions/checkout#1437

New Contributors

@RobertWieczoreck made their first contribution in actions/checkout#579

@luketomlinson made their first contribution in actions/checkout#1437

Full Changelog: https://github.com/actions/checkout/compare/v3.5.3...v3.6.0

v3.5.3

What's Changed

Fix: Checkout Issue in self hosted runner due to faulty submodule check-ins by @megamanics in actions/checkout#1196

Fix typos found by codespell by @DimitriPapadopoulos in actions/checkout#1287

Add support for sparse checkouts by @dscho and @dfdez in actions/checkout#1369

Release v3.5.3 by @TingluoHuang in actions/checkout#1376

New Contributors

@megamanics made their first contribution in actions/checkout#1196

@DimitriPapadopoulos made their first contribution in actions/checkout#1287

@dfdez made their first contribution in actions/checkout#1369

Full Changelog: https://github.com/actions/checkout/compare/v3...v3.5.3

v3.5.2

What's Changed

Fix: Use correct API url / endpoint in GHES by @fhammerl in actions/checkout#1289 based on #1286 by @1newsr

Full Changelog: https://github.com/actions/checkout/compare/v3.5.1...v3.5.2

v3.5.1

What's Changed

Improve checkout performance on Windows runners by upgrading @actions/github dependency by @BrettDong in actions/checkout#1246

New Contributors

@BrettDong made their first contribution in actions/checkout#1246

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

v4.1.2

Fix: Disable sparse checkout whenever sparse-checkout option is not present @dscho in actions/checkout#1598

v4.1.1

Correct link to GitHub Docs by @peterbe in actions/checkout#1511

Link to release page from what's new section by @cory-miller in actions/checkout#1514

v4.1.0

Add support for partial checkout filters

v4.0.0

Support fetching without the --progress option

Update to node20

v3.6.0

Fix: Mark test scripts with Bash'isms to be run via Bash

Add option to fetch tags even if fetch-depth > 0

v3.5.3

Fix: Checkout fail in self-hosted runners when faulty submodule are checked-in

Fix typos found by codespell

Add support for sparse checkouts

v3.5.2

Fix api endpoint for GHES

v3.5.1

Fix slow checkout on Windows

v3.5.0

Add new public key for known_hosts

v3.4.0

Upgrade codeql actions to v2

Upgrade dependencies

Upgrade @actions/io

v3.3.0

Implement branch list using callbacks from exec function

Add in explicit reference to private checkout options

[Fix comment typos (that got added in #770)](actions/checkout#1057)

v3.2.0

Add GitHub Action to perform release

Fix status badge

Replace datadog/squid with ubuntu/squid Docker image

Wrap pipeline commands for submoduleForeach in quotes

Update @actions/io to 1.1.2

... (truncated)

Commits

b4ffde6 Link to release page from what's new section (#1514)
8530928 Correct link to GitHub Docs (#1511)
7cdaf2f Update CODEOWNERS to Launch team (#1510)
8ade135 Prepare 4.1.0 release (#1496)
c533a0a Add support for partial checkout filters (#1396)
72f2cec Update README.md for V4 (#1452)
3df4ab1 Release 4.0.0 (#1447)
8b5e8b7 Support fetching without the --progress option (#1067)
97a652b Update default runtime to node20 (#1436)
See full diff in compare view

Updates actions/upload-artifact from 3 to 4

Release notes

Sourced from actions/upload-artifact's releases.

v4.0.0

What's Changed

The release of upload-artifact@v4 and download-artifact@v4 are major changes to the backend architecture of Artifacts. They have numerous performance and behavioral improvements.

ℹ️ However, this is a major update that includes breaking changes. Artifacts created with versions v3 and below are not compatible with the v4 actions. Uploads and downloads must use the same major actions versions. There are also key differences from previous versions that may require updates to your workflows.

For more information, please see:

The changelog post.

The README.

The migration documentation.

As well as the underlying npm package, @actions/artifact documentation.

New Contributors

@vmjoseph made their first contribution in actions/upload-artifact#464

Full Changelog: https://github.com/actions/upload-artifact/compare/v3...v4.0.0

v3.1.3

What's Changed

chore(github): remove trailing whitespaces by @ljmf00 in actions/upload-artifact#313

Bump @actions/artifact version to v1.1.2 by @bethanyj28 in actions/upload-artifact#436

Full Changelog: https://github.com/actions/upload-artifact/compare/v3...v3.1.3

v3.1.2

Update all @actions/* NPM packages to their latest versions- #374

Update all dev dependencies to their most recent versions - #375

v3.1.1

Update actions/core package to latest version to remove set-output deprecation warning #351

v3.1.0

What's Changed

Bump @actions/artifact to v1.1.0 (actions/upload-artifact#327)

Adds checksum headers on artifact upload (actions/toolkit#1095) (actions/toolkit#1063)

Commits

5d5d22a Merge pull request #515 from actions/eggyhead/update-artifact-v2.1.1
f1e993d update artifact license
4881bfd updating dist:
a30777e @eggyhead
3a80482 Merge pull request #511 from actions/robherley/migration-docs-typo
9d63e3f Merge branch 'main' into robherley/migration-docs-typo
dfa1ab2 fix typo with v3 artifact downloads in migration guide
d00351b Merge pull request #509 from markmssd/patch-1
707f5a7 Update limitation of 10 artifacts upload to 500
26f96df Merge pull request #505 from actions/robherley/merge-artifacts
Additional commits viewable in compare view

Updates actions/download-artifact from 3 to 4

Release notes

Sourced from actions/download-artifact's releases.

v4.0.0

What's Changed

The release of upload-artifact@v4 and download-artifact@v4 are major changes to the backend architecture of Artifacts. They have numerous performance and behavioral improvements.

ℹ️ However, this is a major update that includes breaking changes. Artifacts created with versions v3 and below are not compatible with the v4 actions. Uploads and downloads must use the same major actions versions. There are also key differences from previous versions that may require updates to your workflows.

For more information, please see:

The changelog post.

The README.

The migration documentation.

As well as the underlying npm package, @actions/artifact documentation.

New Contributors

@bflad made their first contribution in actions/download-artifact#194

Full Changelog: https://github.com/actions/download-artifact/compare/v3...v4.0.0

v3.0.2

Bump @actions/artifact to v1.1.1 - actions/download-artifact#195

Fixed a bug in Node16 where if an HTTP download finished too quickly (<1ms, e.g. when it's mocked) we attempt to delete a temp file that has not been created yet actions/toolkit#1278

v3.0.1

Bump @actions/core to 1.10.0

Commits

c850b93 Merge pull request #307 from bethanyj28/main
6fd111f update @actions/artifact
87c5514 Merge pull request #303 from bethanyj28/main
47f9ce6 update @actions/artifact
127824d Merge pull request #299 from bethanyj28/main
6dd49bf licensed only artifact
f71c0e3 Revert "licensed"
7c63dfd licensed
67d37cd Update toolkit
3487549 Update release-new-action-version.yml (#292)
Additional commits viewable in compare view

Updates docker/build-push-action from 4 to 5

Release notes

Sourced from docker/build-push-action's releases.

v5.0.0

Node 20 as default runtime (requires Actions Runner v2.308.0 or later) by @crazy-max in docker/build-push-action#954

Bump @actions/core from 1.10.0 to 1.10.1 in docker/build-push-action#959

Full Changelog: https://github.com/docker/build-push-action/compare/v4.2.1...v5.0.0

v4.2.1

Note

Buildx v0.10 enables support for a minimal SLSA Provenance attestation, which requires support for OCI-compliant multi-platform images. This may introduce issues with registry and runtime support (e.g. Google Cloud Run and AWS Lambda). You can optionally disable the default provenance attestation functionality using provenance: false.

warn if docker config can't be parsed by @crazy-max in docker/build-push-action#957

Full Changelog: https://github.com/docker/build-push-action/compare/v4.2.0...v4.2.1

v4.2.0

Note

Buildx v0.10 enables support for a minimal SLSA Provenance attestation, which requires support for OCI-compliant multi-platform images. This may introduce issues with registry and runtime support (e.g. Google Cloud Run and AWS Lambda). You can optionally disable the default provenance attestation functionality using provenance: false.

display proxy configuration by @crazy-max in docker/build-push-action#872

chore(deps): Bump @docker/actions-toolkit from 0.6.0 to 0.8.0 in docker/build-push-action#930

chore(deps): Bump word-wrap from 1.2.3 to 1.2.5 in docker/build-push-action#925

chore(deps): Bump semver from 6.3.0 to 6.3.1 in docker/build-push-action#902

Full Changelog: https://github.com/docker/build-push-action/compare/v4.1.1...v4.2.0

v4.1.1

Note

Buildx v0.10 enables support for a minimal SLSA Provenance attestation, which requires support for OCI-compliant multi-platform images. This may introduce issues with registry and runtime support (e.g. Google Cloud Run and AWS Lambda). You can optionally disable the default provenance attestation functionality using provenance: false.

Bump @docker/actions-toolkit from 0.3.0 to 0.5.0 by @crazy-max in docker/build-push-action#880

Full Changelog: https://github.com/docker/build-push-action/compare/v4.1.0...v4.1.1

v4.1.0

Note

Buildx v0.10 enables support for a minimal SLSA Provenance attestation, which requires support for OCI-compliant multi-platform images. This may introduce issues with registry and runtime support (e.g. Google Cloud Run and AWS Lambda). You can optionally disable the default provenance attestation functionality using provenance: false.

Switch to actions-toolkit implementation by @crazy-max in docker/build-push-action#811 docker/build-push-action#838 docker/build-push-action#855 docker/build-push-action#860 docker/build-push-action#875

e2e: quay.io by @crazy-max in docker/build-push-action#799 docker/build-push-action#805

e2e: local harbor and nexus by @crazy-max in docker/build-push-action#800

e2e: add artifactory container registry to test against by @jedevc in docker/build-push-action#804

e2e: add distribution tests by @jedevc in docker/build-push-action#814 docker/build-push-action#815

Full Changelog: https://github.com/docker/build-push-action/compare/v4.0.0...v4.1.0

Commits

2cdde99 Merge pull request #1080 from docker/dependabot/npm_and_yarn/docker/actions-t...
008747a chore: update generated content
1580753 chore(deps): Bump @docker/actions-toolkit from 0.18.0 to 0.19.0
2a7db1d Merge pull request #1075 from crazy-max/ci-multi-output
35e7dd5 ci: test multi output
af5a7ed Merge pull request #1074 from crazy-max/build-cmd-debug
2a85189 chore: update generated content
6c20794 disable quotes detection for "outputs" input
afdf0c0 chore: debug build cmd and args
00ae31a Merge pull request #1070 from docker/dependabot/npm_and_yarn/docker/actions-t...
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions

Ehco1996 / ehco

build(deps): bump the dependencies group with 5 updates #300

v4.0.0

What's Changed

New Contributors

v3.3.3

What's Changed

New Contributors

v3.3.2

What's Changed

New Contributors

v3.3.1

What's Changed

v3.3.0

What's Changed

Releases

4.0.2

4.0.1

4.0.0

3.3.3

3.3.2

3.3.1

3.3.0

3.2.6

3.2.5

3.2.4

3.2.3

3.2.2

v4.0.0

What's Changed

New Contributors

v3.6.0

What's Changed

New Contributors

v3.5.3

What's Changed

New Contributors

v3.5.2

What's Changed

v3.5.1

What's Changed

New Contributors

Changelog

v4.1.2

v4.1.1

v4.1.0

v4.0.0

v3.6.0

v3.5.3

v3.5.2

v3.5.1

v3.5.0

v3.4.0

v3.3.0

v3.2.0

v4.0.0

What's Changed

New Contributors

v3.1.3

What's Changed

v3.1.2

v3.1.1

v3.1.0

What's Changed

v4.0.0

What's Changed

New Contributors

v3.0.2

v3.0.1

v5.0.0

v4.2.1

v4.2.0

v4.1.1

v4.1.0