actions/checkout (actions/checkout)
### [`v4`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v417)
[Compare Source](https://redirect.github.com/actions/checkout/compare/v3...v4)
- Bump the minor-npm-dependencies group across 1 directory with 4 updates by [@dependabot](https://redirect.github.com/dependabot) in [https://github.com/actions/checkout/pull/1739](https://redirect.github.com/actions/checkout/pull/1739)
- Bump actions/checkout from 3 to 4 by [@dependabot](https://redirect.github.com/dependabot) in [https://github.com/actions/checkout/pull/1697](https://redirect.github.com/actions/checkout/pull/1697)
- Check out other refs/\* by commit by [@orhantoy](https://redirect.github.com/orhantoy) in [https://github.com/actions/checkout/pull/1774](https://redirect.github.com/actions/checkout/pull/1774)
- Pin actions/checkout's own workflows to a known, good, stable version. by [@jww3](https://redirect.github.com/jww3) in [https://github.com/actions/checkout/pull/1776](https://redirect.github.com/actions/checkout/pull/1776)
suzuki-shunsuke/github-action-renovate-config-validator (suzuki-shunsuke/github-action-renovate-config-validator)
### [`v1.1.0`](https://redirect.github.com/suzuki-shunsuke/github-action-renovate-config-validator/releases/tag/v1.1.0)
[Compare Source](https://redirect.github.com/suzuki-shunsuke/github-action-renovate-config-validator/compare/v1.0.1...v1.1.0)
#### Features
[#699](https://redirect.github.com/suzuki-shunsuke/github-action-renovate-config-validator/issues/699) [#701](https://redirect.github.com/suzuki-shunsuke/github-action-renovate-config-validator/issues/701) Support validating multiple files
You can validate multiple files by setting multiple lines to `config_file_path`.
Leading spaces on each line are removed.
e.g.
```yaml
with:
config_file_path: |
default.json
foo.json
```
You can pass `config_file_path` through output command.
e.g.
```yaml
- id: files
run: |
set -euo pipefail
files=$(git ls-files | grep renovate.json)
### https://stackoverflow.com/a/74232400
EOF=$(dd if=/dev/urandom bs=15 count=1 status=none | base64)
{
echo "files<<$EOF"
echo "$files"
echo "$EOF"
} >> "$GITHUB_OUTPUT"
- name: Pass files through output
uses: suzuki-shunsuke/github-action-renovate-config-validator@v1.1.0
with:
config_file_path: ${{ steps.files.outputs.files }}
```
### [`v1.0.1`](https://redirect.github.com/suzuki-shunsuke/github-action-renovate-config-validator/releases/tag/v1.0.1)
[Compare Source](https://redirect.github.com/suzuki-shunsuke/github-action-renovate-config-validator/compare/v1.0.0...v1.0.1)
#### Fixes
[#551](https://redirect.github.com/suzuki-shunsuke/github-action-renovate-config-validator/issues/551) Suppress `npx` warnings using `--yes` option [@TWiStErRob](https://redirect.github.com/TWiStErRob)
This action executes renovate-config-validator via npx, then the following warning was outputted.
npm WARN exec The following package was not found and will be installed: renovate@37.130.0
To suppress the warning, we set `npx`'s `--yes` option.
https://docs.npmjs.com/cli/v8/commands/npx
> If any requested packages are not present in the local project dependencies, then they are installed to a folder in the npm cache, which is added to the PATH environment variable in the executed process.
> A prompt is printed (which can be suppressed by providing either --yes or --no).
> To prevent security and user-experience problems from mistyping package names, npx prompts before installing anything.
> Suppress this prompt with the -y or --yes option.
> The --no-install option is deprecated, and will be converted to --no.
#### 🎉 New contributors
Thank you for your contribution!
[@TWiStErRob](https://redirect.github.com/TWiStErRob) [#551](https://redirect.github.com/suzuki-shunsuke/github-action-renovate-config-validator/issues/551)
### [`v1.0.0`](https://redirect.github.com/suzuki-shunsuke/github-action-renovate-config-validator/releases/tag/v1.0.0)
[Compare Source](https://redirect.github.com/suzuki-shunsuke/github-action-renovate-config-validator/compare/v0.1.3...v1.0.0)
#### ⚠️ Breaking Changes
[#531](https://redirect.github.com/suzuki-shunsuke/github-action-renovate-config-validator/issues/531) [renovate-config-validator's --strict option](https://docs.renovatebot.com/config-validation/#strict-mode) is enabled by default.
##### How to migrate
There are several options.
1. Recommended: Fix Renovate configuration according to the error message
2. Unrecommended: Set `false` to the input `strict` to disable `--strict` option
#### ⚠️ Security Improvement
[#530](https://redirect.github.com/suzuki-shunsuke/github-action-renovate-config-validator/issues/530) Pass inputs via environment variables to prevent malicious injection
#### Features
[#531](https://redirect.github.com/suzuki-shunsuke/github-action-renovate-config-validator/issues/531) Add the input `strict`.
You can enable [renovate-config-validator's `--strict` option](https://docs.renovatebot.com/config-validation/#strict-mode).
Configuration
📅 Schedule: Branch creation - "before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
[ ] If you want to rebase/retry this PR, check this box
This PR contains the following updates:
v3->v4v0.1.3->v1.1.020.04->24.04Release Notes
actions/checkout (actions/checkout)
### [`v4`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v417) [Compare Source](https://redirect.github.com/actions/checkout/compare/v3...v4) - Bump the minor-npm-dependencies group across 1 directory with 4 updates by [@dependabot](https://redirect.github.com/dependabot) in [https://github.com/actions/checkout/pull/1739](https://redirect.github.com/actions/checkout/pull/1739) - Bump actions/checkout from 3 to 4 by [@dependabot](https://redirect.github.com/dependabot) in [https://github.com/actions/checkout/pull/1697](https://redirect.github.com/actions/checkout/pull/1697) - Check out other refs/\* by commit by [@orhantoy](https://redirect.github.com/orhantoy) in [https://github.com/actions/checkout/pull/1774](https://redirect.github.com/actions/checkout/pull/1774) - Pin actions/checkout's own workflows to a known, good, stable version. by [@jww3](https://redirect.github.com/jww3) in [https://github.com/actions/checkout/pull/1776](https://redirect.github.com/actions/checkout/pull/1776)suzuki-shunsuke/github-action-renovate-config-validator (suzuki-shunsuke/github-action-renovate-config-validator)
### [`v1.1.0`](https://redirect.github.com/suzuki-shunsuke/github-action-renovate-config-validator/releases/tag/v1.1.0) [Compare Source](https://redirect.github.com/suzuki-shunsuke/github-action-renovate-config-validator/compare/v1.0.1...v1.1.0) #### Features [#699](https://redirect.github.com/suzuki-shunsuke/github-action-renovate-config-validator/issues/699) [#701](https://redirect.github.com/suzuki-shunsuke/github-action-renovate-config-validator/issues/701) Support validating multiple files You can validate multiple files by setting multiple lines to `config_file_path`. Leading spaces on each line are removed. e.g. ```yaml with: config_file_path: | default.json foo.json ``` You can pass `config_file_path` through output command. e.g. ```yaml - id: files run: | set -euo pipefail files=$(git ls-files | grep renovate.json) ### https://stackoverflow.com/a/74232400 EOF=$(dd if=/dev/urandom bs=15 count=1 status=none | base64) { echo "files<<$EOF" echo "$files" echo "$EOF" } >> "$GITHUB_OUTPUT" - name: Pass files through output uses: suzuki-shunsuke/github-action-renovate-config-validator@v1.1.0 with: config_file_path: ${{ steps.files.outputs.files }} ``` ### [`v1.0.1`](https://redirect.github.com/suzuki-shunsuke/github-action-renovate-config-validator/releases/tag/v1.0.1) [Compare Source](https://redirect.github.com/suzuki-shunsuke/github-action-renovate-config-validator/compare/v1.0.0...v1.0.1) #### Fixes [#551](https://redirect.github.com/suzuki-shunsuke/github-action-renovate-config-validator/issues/551) Suppress `npx` warnings using `--yes` option [@TWiStErRob](https://redirect.github.com/TWiStErRob) This action executes renovate-config-validator via npx, then the following warning was outputted. npm WARN exec The following package was not found and will be installed: renovate@37.130.0 To suppress the warning, we set `npx`'s `--yes` option. https://docs.npmjs.com/cli/v8/commands/npx > If any requested packages are not present in the local project dependencies, then they are installed to a folder in the npm cache, which is added to the PATH environment variable in the executed process. > A prompt is printed (which can be suppressed by providing either --yes or --no). > To prevent security and user-experience problems from mistyping package names, npx prompts before installing anything. > Suppress this prompt with the -y or --yes option. > The --no-install option is deprecated, and will be converted to --no. #### 🎉 New contributors Thank you for your contribution! [@TWiStErRob](https://redirect.github.com/TWiStErRob) [#551](https://redirect.github.com/suzuki-shunsuke/github-action-renovate-config-validator/issues/551) ### [`v1.0.0`](https://redirect.github.com/suzuki-shunsuke/github-action-renovate-config-validator/releases/tag/v1.0.0) [Compare Source](https://redirect.github.com/suzuki-shunsuke/github-action-renovate-config-validator/compare/v0.1.3...v1.0.0) #### ⚠️ Breaking Changes [#531](https://redirect.github.com/suzuki-shunsuke/github-action-renovate-config-validator/issues/531) [renovate-config-validator's --strict option](https://docs.renovatebot.com/config-validation/#strict-mode) is enabled by default. ##### How to migrate There are several options. 1. Recommended: Fix Renovate configuration according to the error message 2. Unrecommended: Set `false` to the input `strict` to disable `--strict` option #### ⚠️ Security Improvement [#530](https://redirect.github.com/suzuki-shunsuke/github-action-renovate-config-validator/issues/530) Pass inputs via environment variables to prevent malicious injection #### Features [#531](https://redirect.github.com/suzuki-shunsuke/github-action-renovate-config-validator/issues/531) Add the input `strict`. You can enable [renovate-config-validator's `--strict` option](https://docs.renovatebot.com/config-validation/#strict-mode).Configuration
📅 Schedule: Branch creation - "before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.