Slim(toolkit): Don't change anything in your container image and minify it by up to 30x (and for compiled languages even more) making it secure too! (free and open source)
Apache License 2.0
19.21k
stars
716
forks
source link
Bump actions/setup-python from 2.3.2 to 4.5.0 #468
Fix cache issue for Poetry projects located in subfolders
In scope of this release we fixed cache issue for Poetry projects located in subfolders (actions/setup-python#446). Besides that we updated json5 version from 2.2.0 to 2.2.3 (actions/setup-python#579).
Besides, we changed logic with throwing the error for GHES if cache is unavailable to warn (actions/setup-python#566).
Improve error handling and messages
In scope of this release we added improved error message to put operating system and its version in the logs (actions/setup-python#559). Besides, the release
In scope of this release we add the check-latest input. If check-latest is set to true, the action first checks if the cached version is the latest one. If the locally cached version is not the most up-to-date, the version will then be downloaded from python-versions repository. By default check-latest is set to false. For PyPy it will to try to reach https://downloads.python.org/pypy/versions.json
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Bumps actions/setup-python from 2.3.2 to 4.5.0.
Release notes
Sourced from actions/setup-python's releases.
... (truncated)
Commits
d27e3f3
Fix outdated ref to actions/setup-python@v3 in doc (#581)dec86ec
Bump json5 from 2.2.0 to 2.2.3 (#579)4dcd676
Update CODEOWNERS (#576)8b89ef0
Use correct Poetry config when collecting Poetry projects (#447)5ccb29d
Install multiple python versions (#567)c3e0339
Update action to use reusable workflows (#569)206e984
refactor: Use early return pattern to avoid nested conditions (#566)2c3dd9e
Add OS info to the error message (#559)76bbdfa
Update minimatch (#558)1aafadc
Caching projects that use setup.py (#549)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)