search

tweag / rules_sh

Shell rules for Bazel
Apache License 2.0
42 stars 3 forks source link

Bump bazelbuild/setup-bazelisk from 1 to 2 #28

Closed dependabot[bot] closed 2 years ago

dependabot[bot] commented 2 years ago

Bumps bazelbuild/setup-bazelisk from 1 to 2.

Release notes

Sourced from bazelbuild/setup-bazelisk's releases.

v2.0.0

This change adds a minimum runner version(node12 -> node16), which can break users using an out-of-date/fork of the runner. This would be most commonly affecting users on GHES 3.3 or before, as those runners do not support node16 actions and they can use actions from github.com via github connect or manually copying the repo to their GHES instance.

Commits
  • 95c9bf4 Merge pull request #13 from bazelbuild/dependabot/npm_and_yarn/actions/github...
  • d02c494 Bump @​actions/github from 4.0.0 to 5.0.0
  • c505a68 Merge pull request #15 from bazelbuild/dependabot/npm_and_yarn/actions/cache-...
  • 699098e Bump @​actions/cache from 1.0.6 to 2.0.0
  • e254f26 Merge pull request #18 from bazelbuild/dependabot/npm_and_yarn/semver-7.3.5
  • 92afea0 Bump semver from 7.3.4 to 7.3.5
  • c1d59ef Merge pull request #19 from bazelbuild/dependabot/npm_and_yarn/types/semver-7...
  • 27525e2 Bump @​types/semver from 7.3.4 to 7.3.9
  • 64a8e07 Merge pull request #17 from bazelbuild/dependabot/npm_and_yarn/prettier-2.6.1
  • 50bb08e Bump prettier from 2.2.1 to 2.6.1
  • Additional commits viewable in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
aherrmann commented 2 years ago

All these dependabot updates seem to be failing with BES/remote cache credentials errors

bryanhonof commented 2 years ago

I just pushed a new workflow to rules_nixpkgs to handle pull requests, if it works there I could also implement the changes here, see https://github.com/tweag/rules_nixpkgs/pull/248 .