sigstore / protobuf-specs

Protocol Buffer specifications
Apache License 2.0
23 stars 29 forks source link

build(deps): bump gradle/actions from 3.3.2 to 3.4.0 #346

Closed dependabot[bot] closed 5 months ago

dependabot[bot] commented 5 months ago

Bumps gradle/actions from 3.3.2 to 3.4.0.

Release notes

Sourced from gradle/actions's releases.

v3.4.0

This release improves the integration with Gradle Develocity®, as well as updating a number of key dependencies.

  • The new develocity-access-key input parameter allows the action to generate a short-lived access token for subsequent communication with Develocity. This reduces the risk of the full (long-lived) access key being compromised, either accidentally or by a malicious action.
  • New input parameters are available to configure Develocity injection. Previously Develocity injection could only be enabled by setting environment variables.
  • Checksums for Gradle 8.8 are now included, so that no network request is required for wrapper-validation with Gradle 8.8 wrappers.

What's Changed

New Contributors

Full Changelog: https://github.com/gradle/actions/compare/v3.3.2...v3.4.0

Commits
  • d9336da [bot] Update dist directory
  • 8dbe9a3 Update DV access key regex to be more selective
  • 9c34307 [bot] Update dist directory
  • 30c82f0 Fail on invalid boolean for Develocity inputs
  • e3bc05f Run CodeQL on PRs
  • 485ea10 Run CodeQL on dev/* branches
  • c1091c9 [bot] Update dist directory
  • d0a116f Adding Develocity input actions (#244)
  • e238a7a [bot] Update dist directory
  • 1d2ea6e Bump references to Develocity Gradle plugin from 3.17.4 to 3.17.5
  • Additional commits viewable in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
dependabot[bot] commented 5 months ago

Superseded by #349.