sillsdev / TheCombine

This is a tool for supporting the rapid word collection workshop and post workshop clean-up
https://sillsdev.github.io/TheCombine/
MIT License
17 stars 13 forks source link

Bump step-security/harden-runner from 2.8.0 to 2.8.1 #3209

Closed dependabot[bot] closed 2 days ago

dependabot[bot] commented 4 days ago

Bumps step-security/harden-runner from 2.8.0 to 2.8.1.

Release notes

Sourced from step-security/harden-runner's releases.

v2.8.1

What's Changed

  • Bug fix: Update isGitHubHosted implementation by @​varunsh-coder in step-security/harden-runner#425 The previous implementation incorrectly identified large GitHub-hosted runners as self-hosted runners. As a result, harden-runner was not executing on these large GitHub-hosted runners.

Full Changelog: https://github.com/step-security/harden-runner/compare/v2...v2.8.1

Commits
  • 17d0e2b Merge pull request #425 from step-security/rc-9
  • bb112d0 Update isGitHubHosted implementation
  • f4f3f44 Merge pull request #407 from step-security/dependabot/github_actions/actions/...
  • 7a946b5 Bump actions/dependency-review-action from 3.1.3 to 4.3.2
  • 75a01c2 Merge pull request #417 from step-security/dependabot/github_actions/step-sec...
  • 53413f1 Bump step-security/harden-runner from 2.7.1 to 2.8.0
  • See full diff in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

This change is Reviewable

github-actions[bot] commented 4 days ago

⚠️ Commit Message Format Issues ⚠️

commit 1ed46218e1: 3: B1 Line exceeds max length (104>80): "Bumps step-security/harden-runner from 2.8.0 to 2.8.1." 5: B1 Line exceeds max length (151>80): "- Commits"

codecov[bot] commented 4 days ago

Codecov Report

All modified and coverable lines are covered by tests :white_check_mark:

Project coverage is 75.12%. Comparing base (565a7f7) to head (1ed4621).

Additional details and impacted files ```diff @@ Coverage Diff @@ ## master #3209 +/- ## ========================================== + Coverage 75.08% 75.12% +0.03% ========================================== Files 275 275 Lines 10431 10431 Branches 1237 1237 ========================================== + Hits 7832 7836 +4 + Misses 2239 2236 -3 + Partials 360 359 -1 ``` | [Flag](https://app.codecov.io/gh/sillsdev/TheCombine/pull/3209/flags?src=pr&el=flags&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=sillsdev) | Coverage Δ | | |---|---|---| | [backend](https://app.codecov.io/gh/sillsdev/TheCombine/pull/3209/flags?src=pr&el=flag&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=sillsdev) | `84.14% <ø> (+0.08%)` | :arrow_up: | | [frontend](https://app.codecov.io/gh/sillsdev/TheCombine/pull/3209/flags?src=pr&el=flag&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=sillsdev) | `67.05% <ø> (ø)` | | Flags with carried forward coverage won't be shown. [Click here](https://docs.codecov.io/docs/carryforward-flags?utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=sillsdev#carryforward-flags-in-the-pull-request-comment) to find out more.

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.

dependabot[bot] commented 2 days ago

Looks like step-security/harden-runner is up-to-date now, so this is no longer needed.