search

elastic / apm-agent-rum-js

https://www.elastic.co/guide/en/apm/agent/rum-js/current/index.html
MIT License
278 stars 133 forks source link

chore: bump the github-actions group in /.github/workflows/run-test with 3 updates #1478

Closed dependabot[bot] closed 7 months ago

dependabot[bot] commented 8 months ago

Bumps the github-actions group in /.github/workflows/run-test with 3 updates: actions/setup-node, hashicorp/vault-action and actions/upload-artifact.

Updates actions/setup-node from 3 to 4

Release notes

Sourced from actions/setup-node's releases.

v4.0.0

What's Changed

In scope of this release we changed version of node runtime for action from node16 to node20 and updated dependencies in actions/setup-node#866

Besides, release contains such changes as:

New Contributors

Full Changelog: https://github.com/actions/setup-node/compare/v3...v4.0.0

v3.8.2

What's Changed

Full Changelog: https://github.com/actions/setup-node/compare/v3...v3.8.2

v3.8.1

What's Changed

In scope of this release, the filter was removed within the cache-save step by @​dmitry-shibanov in actions/setup-node#831. It is filtered and checked in the toolkit/cache library.

Full Changelog: https://github.com/actions/setup-node/compare/v3...v3.8.1

v3.8.0

What's Changed

Bug fixes:

Feature implementations:

Documentation changes:

Update dependencies:

... (truncated)

Commits


Updates hashicorp/vault-action from 2.5.0 to 2.8.0

Release notes

Sourced from hashicorp/vault-action's releases.

v2.8.0

2.8.0 (February 1, 2024)

Features:

  • Add ignoreNotFound input (default: false) to prevent the action from failing when a secret does not exist GH-518

Improvements:

  • bump jsrsasign from 10.8.6 to 11.0.0 GH-513
  • bump @​actions/core from 1.10.0 to 1.10.1 GH-489
  • bump jest-when from 3.5.2 to 3.6.0 GH-484
  • bump jest from 29.5.0 to 29.7.0 GH-490
  • bump @​vercel/ncc from 0.36.1 to 0.38.1 GH-503

v2.7.5

2.7.5 (January 30, 2024)

Improvements:

  • Bump node runtime from node16 to node20 GH-509
  • Bump got from 11.8.5 to 11.8.6 GH-492

v2.7.4

2.7.4 (October 26, 2023)

Features:

  • Add ability to specify a wildcard for the key name to get all keys in the path GH-488

v2.7.3

2.7.3 (July 13, 2023)

Bugs:

  • Revert to the handling of secrets in JSON format since v2.1.2 GH-478

v2.7.2

2.7.2 (July 6, 2023)

Bugs:

  • Fix a regression that broke support for secrets in JSON format GH-473

v2.7.1

2.7.1 (July 3, 2023)

Bugs:

... (truncated)

Changelog

Sourced from hashicorp/vault-action's changelog.

2.8.0 (February 1, 2024)

Features:

  • Add ignoreNotFound input (default: false) to prevent the action from failing when a secret does not exist GH-518

Improvements:

  • bump jsrsasign from 10.8.6 to 11.0.0 GH-513
  • bump @​actions/core from 1.10.0 to 1.10.1 GH-489
  • bump jest-when from 3.5.2 to 3.6.0 GH-484
  • bump jest from 29.5.0 to 29.7.0 GH-490
  • bump @​vercel/ncc from 0.36.1 to 0.38.1 GH-503

2.7.5 (January 30, 2024)

Improvements:

  • Bump node runtime from node16 to node20 GH-509
  • Bump got from 11.8.5 to 11.8.6 GH-492

2.7.4 (October 26, 2023)

Features:

  • Add ability to specify a wildcard for the key name to get all keys in the path GH-488

2.7.3 (July 13, 2023)

Bugs:

  • Revert to the handling of secrets in JSON format since v2.1.2 GH-478

2.7.2 (July 6, 2023)

Bugs:

  • Fix a regression that broke support for secrets in JSON format GH-473

2.7.1 (July 3, 2023)

Bugs:

  • Revert GH-466 which caused a regression in secrets stored as JSON strings GH-471

2.7.0 (June 21, 2023)

Bugs:

  • Fix a regression that broke support for secrets in JSON format GH-466

... (truncated)

Commits


Updates actions/upload-artifact from 3 to 4

Release notes

Sourced from actions/upload-artifact's releases.

v4.0.0

What's Changed

The release of upload-artifact@v4 and download-artifact@v4 are major changes to the backend architecture of Artifacts. They have numerous performance and behavioral improvements.

ℹ️ However, this is a major update that includes breaking changes. Artifacts created with versions v3 and below are not compatible with the v4 actions. Uploads and downloads must use the same major actions versions. There are also key differences from previous versions that may require updates to your workflows.

For more information, please see:

  1. The changelog post.
  2. The README.
  3. The migration documentation.
  4. As well as the underlying npm package, @​actions/artifact documentation.

New Contributors

Full Changelog: https://github.com/actions/upload-artifact/compare/v3...v4.0.0

v3.1.3

What's Changed

Full Changelog: https://github.com/actions/upload-artifact/compare/v3...v3.1.3

v3.1.2

  • Update all @actions/* NPM packages to their latest versions- #374
  • Update all dev dependencies to their most recent versions - #375

v3.1.1

  • Update actions/core package to latest version to remove set-output deprecation warning #351

v3.1.0

What's Changed

Commits


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
dependabot[bot] commented 7 months ago

Superseded by #1483.