Closed dependabot[bot] closed 11 months ago
@dependabot merge
Sent from Outlookhttp://aka.ms/weboutlook
From: dependabot[bot] @.> Sent: Monday, December 11, 2023 10:14 AM To: microsoftgraph/msgraph-sample-blazor-clientside @.> Cc: Subscribed @.***> Subject: [microsoftgraph/msgraph-sample-blazor-clientside] Bump actions/setup-dotnet from 3 to 4 (PR #134)
Bumps actions/setup-dotnethttps://github.com/actions/setup-dotnet from 3 to 4.
Release notes
Sourced from actions/setup-dotnet's releaseshttps://github.com/actions/setup-dotnet/releases.
v4.0.0 What's Changed
In the scope of this release, the version of the Node.js runtime was updated to 20. The majority of dependencies were updated to the latest versions. From now on, the code for the setup-dotnet will run on Node.js 20 instead of Node.js 16.
Breaking changes
Update Node.js runtime to version 20 by @harithavattikutihttps://github.com/harithavattikuti in #484https://redirect.github.com/actions/setup-dotnet/issues/484
Non-breaking changes
Refactor installer by @nikolai-laevskiihttps://github.com/nikolai-laevskii in actions/setup-dotnet#432https://redirect.github.com/actions/setup-dotnet/pull/432
Allow json comments by @nikolai-laevskiihttps://github.com/nikolai-laevskii in actions/setup-dotnet#431https://redirect.github.com/actions/setup-dotnet/pull/431
Sequential version install fix by @nikolai-laevskiihttps://github.com/nikolai-laevskii in actions/setup-dotnet#433https://redirect.github.com/actions/setup-dotnet/pull/433 @. used to overwrite dotnet executable on each action run, which was causing action to fail on some occasions due to executable being still in use. In @. we solved this issue by adding another install-script run that installs LTS version of dotnet executable and uses it for all subsequent dotnet installations. The first install-script run conducts the actual download only once per workflow.
Update fast-xml-parser and dotnet installer scripts by @IvanZosimovhttps://github.com/IvanZosimov in actions/setup-dotnet#437https://redirect.github.com/actions/setup-dotnet/pull/437
Update dependencies by @IvanZosimovhttps://github.com/IvanZosimov in actions/setup-dotnet#440https://redirect.github.com/actions/setup-dotnet/pull/440
Bump word-wrap from 1.2.3 to 1.2.4 by @dependabothttps://github.com/dependabot in actions/setup-dotnet#444https://redirect.github.com/actions/setup-dotnet/pull/444
Update installers by @nikolai-laevskiihttps://github.com/nikolai-laevskii in actions/setup-dotnet#462https://redirect.github.com/actions/setup-dotnet/pull/462
Update semver by @dmitry-shibanovhttps://github.com/dmitry-shibanov in actions/setup-dotnet#468https://redirect.github.com/actions/setup-dotnet/pull/468
New Contributors
Full Changelog: @.***https://github.com/actions/setup-dotnet/compare/v3...v4.0.0
v3.2.0 What's Changed
In scope of this minor release, the ability to cache the NuGet global-packages folder was added in actions/setup-dotnet#303https://redirect.github.com/actions/setup-dotnet/pull/303 by @nogic1008https://github.com/nogic1008
For caching, the action uses the @toolkit/cachehttps://github.com/actions/toolkit/tree/main/packages/cache library under the hood, which in turn allows getting rid of configuring the @actions/cachehttps://github.com/actions/cache action separately.
Such input parameters as cache and cache-dependency-path were added. The cache input is optional, and caching is turned off by default, cache-dependency-path is used to specify the path to a dependency file - packages.lock.json.
Example of use-case:
More details can be found in the action's documentationhttps://github.com/actions/setup-dotnet#caching-nuget-packages.
Full Changelog: @.***https://github.com/actions/setup-dotnet/compare/v3...v3.2.0
... (truncated)
Commits
[Dependabot compatibility score]https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
You can view, comment on, or merge this pull request online at:
https://github.com/microsoftgraph/msgraph-sample-blazor-clientside/pull/134
Commit Summary
File Changes
(1 filehttps://github.com/microsoftgraph/msgraph-sample-blazor-clientside/pull/134/files)
Patch Links:
— Reply to this email directly, view it on GitHubhttps://github.com/microsoftgraph/msgraph-sample-blazor-clientside/pull/134, or unsubscribehttps://github.com/notifications/unsubscribe-auth/ACENBRQ6YG6CQGCXAZ6ZFYLYI4PNTAVCNFSM6AAAAABAP5Y5XSVHI2DSMVQWIX3LMV43ASLTON2WKOZSGAZTKOJQGQ4TSOI. You are receiving this because you are subscribed to this thread.Message ID: @.***>
Bumps actions/setup-dotnet from 3 to 4.
Release notes
Sourced from actions/setup-dotnet's releases.
... (truncated)
Commits
4d6c8fc
Upgrade Node to v20 (#484)2216f56
Update semver (#468)736bc6d
Merge pull request #462 from akv-platform/update-installersf5526c2
Update installers4dba25f
Bump word-wrap from 1.2.3 to 1.2.4 (#444)ada8800
Bump semver from 6.3.0 to 6.3.1 (#443)e174912
Update dependencies (#440)a6be55a
Update fast-xml-parser and dotnet installer scripts (#437)9b40770
Merge pull request #433 from akv-platform/sequential-version-install-fix4827734
Reduce number of e2e testsDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show