search

di / pip-api

An unofficial, importable pip API
https://pypi.org/p/pip-api
Apache License 2.0
110 stars 16 forks source link

Bump the actions group with 5 updates #205

Closed dependabot[bot] closed 8 months ago

dependabot[bot] commented 8 months ago

Bumps the actions group with 5 updates:

Package From To
guilhem/rss-issues-action 0.4.0 0.5.2
actions/checkout 3 4
actions/setup-python 4 5
sigstore/gh-action-sigstore-python 0.0.9 2.1.1
actions/upload-artifact 3 4

Updates guilhem/rss-issues-action from 0.4.0 to 0.5.2

Release notes

Sourced from guilhem/rss-issues-action's releases.

Fix panic

What's Changed

Full Changelog: https://github.com/guilhem/rss-issues-action/compare/0.5.1...0.5.2

0.5.1

What's Changed

Full Changelog: https://github.com/guilhem/rss-issues-action/compare/0.5.0...0.5.1

0.5.0

What's Changed

Full Changelog: https://github.com/guilhem/rss-issues-action/compare/0.4.1...0.5.0

0.4.1

What's Changed

Full Changelog: https://github.com/guilhem/rss-issues-action/compare/0.4.0...0.4.1

Commits


Updates actions/checkout from 3 to 4

Release notes

Sourced from actions/checkout's releases.

v4.0.0

What's Changed

New Contributors

Full Changelog: https://github.com/actions/checkout/compare/v3...v4.0.0

v3.6.0

What's Changed

New Contributors

Full Changelog: https://github.com/actions/checkout/compare/v3.5.3...v3.6.0

v3.5.3

What's Changed

New Contributors

Full Changelog: https://github.com/actions/checkout/compare/v3...v3.5.3

v3.5.2

What's Changed

Full Changelog: https://github.com/actions/checkout/compare/v3.5.1...v3.5.2

v3.5.1

What's Changed

New Contributors

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

v4.1.0

v4.0.0

v3.6.0

v3.5.3

v3.5.2

v3.5.1

v3.5.0

v3.4.0

v3.3.0

v3.2.0

v3.1.0

v3.0.2

... (truncated)

Commits


Updates actions/setup-python from 4 to 5

Release notes

Sourced from actions/setup-python's releases.

v5.0.0

What's Changed

In scope of this release, we update node version runtime from node16 to node20 (actions/setup-python#772). Besides, we update dependencies to the latest versions.

Full Changelog: https://github.com/actions/setup-python/compare/v4.8.0...v5.0.0

v4.8.0

What's Changed

In scope of this release we added support for GraalPy (actions/setup-python#694). You can use this snippet to set up GraalPy:

steps:
- uses: actions/checkout@v4
- uses: actions/setup-python@v4 
  with:
    python-version: 'graalpy-22.3' 
- run: python my_script.py

Besides, the release contains such changes as:

New Contributors

Full Changelog: https://github.com/actions/setup-python/compare/v4...v4.8.0

v4.7.1

What's Changed

Full Changelog: https://github.com/actions/setup-python/compare/v4...v4.7.1

v4.7.0

In scope of this release, the support for reading python version from pyproject.toml was added (actions/setup-python#669).

      - name: Setup Python
        uses: actions/setup-python@v4
</tr></table>

... (truncated)

Commits


Updates sigstore/gh-action-sigstore-python from 0.0.9 to 2.1.1

Release notes

Sourced from sigstore/gh-action-sigstore-python's releases.

v2.1.1

What's Changed

Full Changelog: https://github.com/sigstore/gh-action-sigstore-python/compare/v2.1.0...v2.1.1

v2.1.0

What's Changed

Full Changelog: https://github.com/sigstore/gh-action-sigstore-python/compare/v2.0.1...v2.1.0

v2.0.1

What's Changed

Full Changelog: https://github.com/sigstore/gh-action-sigstore-python/compare/v2.0.0...v2.0.1

v2.0.0

What's Changed

Full Changelog: https://github.com/sigstore/gh-action-sigstore-python/compare/v1.2.3...v2.0.0

Release 1.2.3

What's Changed

Full Changelog: https://github.com/sigstore/gh-action-sigstore-python/compare/v1.2.2...v1.2.3

Release 1.2.2

What's Changed

... (truncated)

Commits


Updates actions/upload-artifact from 3 to 4

Release notes

Sourced from actions/upload-artifact's releases.

v4.0.0

What's Changed

The release of upload-artifact@v4 and download-artifact@v4 are major changes to the backend architecture of Artifacts. They have numerous performance and behavioral improvements.

ℹ️ However, this is a major update that includes breaking changes. Artifacts created with versions v3 and below are not compatible with the v4 actions. Uploads and downloads must use the same major actions versions. There are also key differences from previous versions that may require updates to your workflows.

For more information, please see:

  1. The changelog post.
  2. The README.
  3. The migration documentation.
  4. As well as the underlying npm package, @​actions/artifact documentation.

New Contributors

Full Changelog: https://github.com/actions/upload-artifact/compare/v3...v4.0.0

v3.1.3

What's Changed

Full Changelog: https://github.com/actions/upload-artifact/compare/v3...v3.1.3

v3.1.2

  • Update all @actions/* NPM packages to their latest versions- #374
  • Update all dev dependencies to their most recent versions - #375

v3.1.1

  • Update actions/core package to latest version to remove set-output deprecation warning #351

v3.1.0

What's Changed

Commits


You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
woodruffw commented 8 months ago

@dependabot recreate

woodruffw commented 8 months ago

Blocked on https://github.com/re-actors/checkout-python-sdist/pull/3, unless we drop the upload-artifact bump.