ossf / allstar

GitHub App to set and enforce security policies
Apache License 2.0
1.26k stars 122 forks source link

Bump github.com/rhysd/actionlint from 1.7.1 to 1.7.2 #571

Closed dependabot[bot] closed 1 month ago

dependabot[bot] commented 1 month ago

Bumps github.com/rhysd/actionlint from 1.7.1 to 1.7.2.

Release notes

Sourced from github.com/rhysd/actionlint's releases.

v1.7.2

Changelog

Sourced from github.com/rhysd/actionlint's changelog.

v1.7.2 - 23 Sep 2024

  • Fix child processes to run in parallel.
  • Update popular actions data set to the latest. (#442, #445, #446, #447, # thanks @ maikelvdh)
  • The playground now supports both light and dark modes and automatically applies the system's theme.

[Changes][v1.7.2]

Commits
  • 5e94871 bump up version to v1.7.2
  • 1f5010b Merge pull request #448 from muzimuzhi/merge_group-filters
  • ea4d85d suppress '... is already installed and up-to-date' warnings from brew on CI
  • 5f82ed2 run tests with Go 1.23 on CI
  • e246a56 enable strict rules by typescript-eslint
  • 770c1e8 upgrade eslint to v9 and typescript-eslint to v8
  • 5dc4655 update npm dependencies
  • c29a030 update dependencies includig x/sync and x/sys major bumps
  • ab3f54c fix code generation scripts broken due to the URL changes of GitHub document ...
  • 29372f9 add create-pull-request@v7 to popular actions data set
  • Additional commits viewable in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)