build(deps): Bump the ci-dependencies group with 10 updates

[dependabot[bot]]

Bumps the ci-dependencies group with 10 updates:

Package	From	To
actions/checkout	4.1.1	4.1.4
sigstore/cosign-installer	3.4.0	3.5.0
docker/setup-buildx-action	3.0.0	3.3.0
docker/login-action	3.0.0	3.1.0
docker/build-push-action	5.1.0	5.3.0
actions/upload-artifact	4.3.0	4.3.3
actions/download-artifact	4.1.1	4.1.7
actions/upload-pages-artifact	3.0.0	3.0.1
actions/deploy-pages	4.0.3	4.0.5
actions/cache	4.0.0	4.0.2

Updates actions/checkout from 4.1.1 to 4.1.4

Release notes

Sourced from actions/checkout's releases.

v4.1.4

What's Changed

• Disable extensions.worktreeConfig when disabling sparse-checkout by @​jww3 in actions/checkout#1692
• Add dependabot config by @​cory-miller in actions/checkout#1688
• Bump word-wrap from 1.2.3 to 1.2.5 by @​dependabot in actions/checkout#1643
• Bump the minor-actions-dependencies group with 2 updates by @​dependabot in actions/checkout#1693

Full Changelog: https://github.com/actions/checkout/compare/v4.1.3...v4.1.4

v4.1.3

What's Changed

• Update actions/checkout version in update-main-version.yml by @​jww3 in actions/checkout#1650
• Check git version before attempting to disable sparse-checkout by @​jww3 in actions/checkout#1656
• Add SSH user parameter by @​cory-miller in actions/checkout#1685

Full Changelog: https://github.com/actions/checkout/compare/v4.1.2...v4.1.3

v4.1.2

We are investigating the following issue with this release and have rolled-back the v4 tag to point to v4.1.1

• sparse-checkout is not available on git versions prior to 2.27.0 (see actions/checkout#1651)

What's Changed

• Fix: Disable sparse checkout whenever sparse-checkout option is not present @​dscho in actions/checkout#1598
• Bump tough-cookie from 4.0.0 to 4.1.3 by @​dependabot in actions/checkout#1406
• Bump @​babel/traverse from 7.20.5 to 7.24.0 by @​dependabot in actions/checkout#1642

New Contributors

• @​jww3 made their first contribution in actions/checkout#1616

Full Changelog: https://github.com/actions/checkout/compare/v4.1.1...v4.1.2

Changelog

Sourced from actions/checkout's changelog.

Changelog

v4.1.4

• Disable extensions.worktreeConfig when disabling sparse-checkout by @​jww3 in actions/checkout#1692
• Add dependabot config by @​cory-miller in actions/checkout#1688
• Bump the minor-actions-dependencies group with 2 updates by @​dependabot in actions/checkout#1693
• Bump word-wrap from 1.2.3 to 1.2.5 by @​dependabot in actions/checkout#1643

v4.1.3

• Check git version before attempting to disable sparse-checkout by @​jww3 in actions/checkout#1656
• Add SSH user parameter by @​cory-miller in actions/checkout#1685
• Update actions/checkout version in update-main-version.yml by @​jww3 in actions/checkout#1650

v4.1.2

• Fix: Disable sparse checkout whenever sparse-checkout option is not present @​dscho in actions/checkout#1598

v4.1.1

• Correct link to GitHub Docs by @​peterbe in actions/checkout#1511
• Link to release page from what's new section by @​cory-miller in actions/checkout#1514

v4.1.0

• Add support for partial checkout filters

v4.0.0

• Support fetching without the --progress option
• Update to node20

v3.6.0

• Fix: Mark test scripts with Bash'isms to be run via Bash
• Add option to fetch tags even if fetch-depth > 0

v3.5.3

• Fix: Checkout fail in self-hosted runners when faulty submodule are checked-in
• Fix typos found by codespell
• Add support for sparse checkouts

v3.5.2

• Fix api endpoint for GHES

v3.5.1

• Fix slow checkout on Windows

v3.5.0

• Add new public key for known_hosts

v3.4.0

• Upgrade codeql actions to v2
• Upgrade dependencies
• Upgrade @​actions/io

... (truncated)

Commits

• 0ad4b8f Prep Release v4.1.4 (#1704)
• 43045ae Disable extensions.worktreeConfig when disabling sparse-checkout (#1692)
• 37b0821 Bump the minor-actions-dependencies group with 2 updates (#1693)
• 9839dc1 Add dependabot config (#1688)
• 9b4c13b Bump word-wrap from 1.2.3 to 1.2.5 (#1643)
• 1d96c77 Add SSH user parameter (#1685)
• cd7d8d6 Check git version before attempting to disable sparse-checkout (#1656)
• 8410ad0 Update actions/checkout version in update-main-version.yml (#1650)
• 9bb5618 Prep for release of v4.1.2 (#1649)
• 8eb1f6a Bump @​babel/traverse from 7.20.5 to 7.24.0 (#1642)
• Additional commits viewable in compare view

Updates sigstore/cosign-installer from 3.4.0 to 3.5.0

Release notes

Sourced from sigstore/cosign-installer's releases.

v3.5.0

What's Changed

• Bump actions/checkout from 4.1.1 to 4.1.2 by @​dependabot in sigstore/cosign-installer#157
• use go 1.22 now by @​bobcallaway in sigstore/cosign-installer#160
• bump default version to v2.2.4, prep for v3.5.0 release by @​bobcallaway in sigstore/cosign-installer#159

Full Changelog: https://github.com/sigstore/cosign-installer/compare/v3.4.0...v3.5.0

Commits

• 59acb62 bump default version to v2.2.4, prep for v3.5.0 release (#159)
• 22be4ce use go 1.22 now (#160)
• 162dfdf Bump actions/checkout from 4.1.1 to 4.1.2 (#157)
• See full diff in compare view

Updates docker/setup-buildx-action from 3.0.0 to 3.3.0

Release notes

Sourced from docker/setup-buildx-action's releases.

v3.3.0

• Bump @​docker/actions-toolkit from 0.19.0 to 0.20.0 by @​crazy-max in docker/setup-buildx-action#307

Full Changelog: https://github.com/docker/setup-buildx-action/compare/v3.2.0...v3.3.0

v3.2.0

• Rename and align config inputs by @​crazy-max in docker/setup-buildx-action#303
  • config to buildkitd-config
  • config-inline to buildkitd-config-inline
• Bump @​docker/actions-toolkit from 0.17.0 to 0.19.0 in docker/setup-buildx-action#302 docker/setup-buildx-action#306

[!NOTE] config and config-inline input names are deprecated and will be removed in next major release.

Full Changelog: https://github.com/docker/setup-buildx-action/compare/v3.1.0...v3.2.0

v3.1.0

• cache-binary input to enable/disable caching binary to GHA cache backend by @​crazy-max in docker/setup-buildx-action#300
• build(deps): bump @​babel/traverse from 7.17.3 to 7.23.2 in docker/setup-buildx-action#282
• build(deps): bump @​docker/actions-toolkit from 0.12.0 to 0.17.0 in docker/setup-buildx-action#281 docker/setup-buildx-action#284 docker/setup-buildx-action#299
• build(deps): bump uuid from 9.0.0 to 9.0.1 in docker/setup-buildx-action#271
• build(deps): bump undici from 5.26.3 to 5.28.3 in docker/setup-buildx-action#297

Full Changelog: https://github.com/docker/setup-buildx-action/compare/v3.0.0...v3.1.0

Commits

• d70bba7 Merge pull request #307 from crazy-max/bump-toolkit
• 7638634 chore: update generated content
• c68420f bump @​docker/actions-toolkit from 0.19.0 to 0.20.0
• 2b51285 Merge pull request #306 from docker/dependabot/npm_and_yarn/docker/actions-to...
• 0f00370 chore: update generated content
• 11c9683 build(deps): bump @​docker/actions-toolkit from 0.18.0 to 0.19.0
• 56a16b8 Merge pull request #303 from crazy-max/fix-inputs
• c23f46e chore: update generated content
• f876da6 rename and align config inputs
• b7cf918 Merge pull request #304 from crazy-max/rm-docs-dir
• Additional commits viewable in compare view

Updates docker/login-action from 3.0.0 to 3.1.0

Release notes

Sourced from docker/login-action's releases.

v3.1.0

• build(deps): bump @​babel/traverse from 7.17.3 to 7.23.2 in docker/login-action#618
• build(deps): bump @​docker/actions-toolkit from 0.12.0 to 0.18.0 in docker/login-action#616 docker/login-action#636 docker/login-action#682
• build(deps): bump aws-sdk dependencies to 3.529.1 in docker/login-action#624 docker/login-action#685
• build(deps): bump http-proxy-agent to 7.0.2 in docker/login-action#676
• build(deps): bump https-proxy-agent to 7.0.4 in docker/login-action#676
• build(deps): bump undici from 5.26.5 to 5.28.3 in docker/login-action#677

Full Changelog: https://github.com/docker/login-action/compare/v3.0.0...v3.1.0

Commits

• e92390c Merge pull request #685 from docker/dependabot/npm_and_yarn/aws-sdk-dependenc...
• 1e752e2 chore: update generated content
• 51c6097 build(deps): bump the aws-sdk-dependencies group with 2 updates
• 8f079fb Merge pull request #676 from docker/dependabot/npm_and_yarn/proxy-agent-depen...
• 16fa768 chore: update generated content
• 46d1619 build(deps): bump the proxy-agent-dependencies group with 2 updates
• 8c291c5 Merge pull request #682 from docker/dependabot/npm_and_yarn/docker/actions-to...
• ec726f4 build(deps): bump @​docker/actions-toolkit from 0.14.0 to 0.18.0
• 5139682 Merge pull request #677 from docker/dependabot/npm_and_yarn/undici-5.28.3
• 6d4e2ba chore: update generated content
• Additional commits viewable in compare view

Updates docker/build-push-action from 5.1.0 to 5.3.0

Release notes

Sourced from docker/build-push-action's releases.

v5.3.0

• Bump @​docker/actions-toolkit from 0.18.0 to 0.19.0 in docker/build-push-action#1080

Full Changelog: https://github.com/docker/build-push-action/compare/v5.2.0...v5.3.0

v5.2.0

• Disable quotes detection for outputs input by @​crazy-max in docker/build-push-action#1074
• Warn about ignored inputs by @​favonia in docker/build-push-action#1019
• Bump @​docker/actions-toolkit from 0.14.0 to 0.18.0 in docker/build-push-action#1070
• Bump undici from 5.26.3 to 5.28.3 in docker/build-push-action#1057

Full Changelog: https://github.com/docker/build-push-action/compare/v5.1.0...v5.2.0

Commits

• 2cdde99 Merge pull request #1080 from docker/dependabot/npm_and_yarn/docker/actions-t...
• 008747a chore: update generated content
• 1580753 chore(deps): Bump @​docker/actions-toolkit from 0.18.0 to 0.19.0
• 2a7db1d Merge pull request #1075 from crazy-max/ci-multi-output
• 35e7dd5 ci: test multi output
• af5a7ed Merge pull request #1074 from crazy-max/build-cmd-debug
• 2a85189 chore: update generated content
• 6c20794 disable quotes detection for "outputs" input
• afdf0c0 chore: debug build cmd and args
• 00ae31a Merge pull request #1070 from docker/dependabot/npm_and_yarn/docker/actions-t...
• Additional commits viewable in compare view

Updates actions/upload-artifact from 4.3.0 to 4.3.3

Release notes

Sourced from actions/upload-artifact's releases.

v4.3.3

What's Changed

• updating @actions/artifact dependency to v2.1.6 by @​eggyhead in actions/upload-artifact#565

Full Changelog: https://github.com/actions/upload-artifact/compare/v4.3.2...v4.3.3

v4.3.2

What's Changed

• Update release-new-action-version.yml by @​konradpabjan in actions/upload-artifact#516
• Minor fix to the migration readme by @​andrewakim in actions/upload-artifact#523
• Update readme with v3/v2/v1 deprecation notice by @​robherley in actions/upload-artifact#561
• updating @actions/artifact dependency to v2.1.5 and @actions/core to v1.0.1 by @​eggyhead in actions/upload-artifact#562

New Contributors

• @​andrewakim made their first contribution in actions/upload-artifact#523

Full Changelog: https://github.com/actions/upload-artifact/compare/v4.3.1...v4.3.2

v4.3.1

• Bump @​actions/artifacts to latest version to include updated GHES host check

Commits

• 6546280 updating package version
• c004fb4 Merge branch 'main' into eggyhead/use-artifact-v2.1.6
• 90aba49 updating toolkit artifact dependency to 2.1.6
• b06cde3 Merge pull request #563 from actions/eggyhead/release-4.3.2
• 1746f4a Revert "updating to release 4.3.2"
• 31685d0 updating to release 4.3.2
• 18bf333 Merge pull request #562 from actions/eggyhead/update-artifact-v215
• dac413b update package lock version
• bb3b4a3 updating package version
• 3e3da83 updating artifact and core dependencies
• Additional commits viewable in compare view

Updates actions/download-artifact from 4.1.1 to 4.1.7

Release notes

Sourced from actions/download-artifact's releases.

v4.1.7

What's Changed

• Update @​actions/artifact dependency by @​bethanyj28 in actions/download-artifact#325

Full Changelog: https://github.com/actions/download-artifact/compare/v4.1.6...v4.1.7

v4.1.6

What's Changed

• updating @actions/artifact dependency to v2.1.6 by @​eggyhead in actions/download-artifact#324

Full Changelog: https://github.com/actions/download-artifact/compare/v4.1.5...v4.1.6

v4.1.5

What's Changed

• Update readme with v3/v2/v1 deprecation notice by @​robherley in actions/download-artifact#322
• Update dependencies @actions/core to v1.10.1 and @actions/artifact to v2.1.5

Full Changelog: https://github.com/actions/download-artifact/compare/v4.1.4...v4.1.5

v4.1.4

What's Changed

• Update @​actions/artifact by @​bethanyj28 in actions/download-artifact#307

Full Changelog: https://github.com/actions/download-artifact/compare/v4...v4.1.4

v4.1.3

What's Changed

• Update release-new-action-version.yml by @​konradpabjan in actions/download-artifact#292
• Update toolkit dependency with updated unzip logic by @​bethanyj28 in actions/download-artifact#299
• Update @​actions/artifact by @​bethanyj28 in actions/download-artifact#303

New Contributors

• @​bethanyj28 made their first contribution in actions/download-artifact#299

Full Changelog: https://github.com/actions/download-artifact/compare/v4...v4.1.3

v4.1.2

• Bump @​actions/artifacts to latest version to include updated GHES host check

Commits

• 65a9edc Merge pull request #325 from bethanyj28/main
• fdd1595 licensed
• c13dba1 update @​actions/artifact dependency
• 0daa75e Merge pull request #324 from actions/eggyhead/use-artifact-v2.1.6
• 9c19ed7 Merge branch 'main' into eggyhead/use-artifact-v2.1.6
• 3d3ea87 updating license
• 89af5db updating artifact package v2.1.6
• b4aefff Merge pull request #323 from actions/eggyhead/update-artifact-v215
• 8caf195 package lock update
• d7a2ec4 updating package version
• Additional commits viewable in compare view

Updates actions/upload-pages-artifact from 3.0.0 to 3.0.1

Release notes

Sourced from actions/upload-pages-artifact's releases.

v3.0.1

Changelog

• Group tar's output to prevent it from messing up action logs @​SilverRainZ (#94)
• Update README.md @​uiolee (#88)
• Bump the non-breaking-changes group with 1 update @​dependabot (#92)
• Update Dependabot config to group non-breaking changes @​JamesMGreene (#91)
• Bump actions/checkout from 3 to 4 @​dependabot (#76)

See details of all code changes since previous release.

Commits

• 56afc60 Merge pull request #94 from SilverRainZ/main
• d12fdfb Merge branch 'main' into main
• aef5542 Merge pull request #88 from uiolee/patch-1
• 29cedd7 Merge branch 'main' into patch-1
• a69c22e Merge pull request #92 from actions/dependabot/github_actions/non-breaking-ch...
• 794e304 Group tar's output to prevent it from messing up logs
• 14007f6 Bump the non-breaking-changes group with 1 update
• 0191170 Merge pull request #91 from actions/dependabot-grouping
• 0e7832d Update Dependabot config to group non-breaking changes
• 1a6d9fa Update README.md
• Additional commits viewable in compare view

Updates actions/deploy-pages from 4.0.3 to 4.0.5

Release notes

Sourced from actions/deploy-pages's releases.

v4.0.5

Changelog

• On API error, the error message will surface the API request ID @​TooManyBees (#324)
• Bump the non-breaking-changes group with 2 updates @​dependabot (#318)
• Bump the non-breaking-changes group with 1 update @​dependabot (#316)
• Bump the non-breaking-changes group with 3 updates @​dependabot (#314)
• Bump release-drafter/release-drafter from 5.25.0 to 6.0.0 @​dependabot (#311)

---

See details of all code changes since previous release.

:warning: For use with products other than GitHub.com, such as GitHub Enterprise Server, please consult the compatibility table.

v4.0.4

Changelog

• Update api-client.js @​lmammino (#295)
• fix typo: compatibilty -> compatibility @​SimonSiefke (#298)
• Bump @​actions/artifact from 2.0.1 to 2.1.1 @​dependabot (#310)
• Update Dependabot config to group non-breaking changes @​JamesMGreene (#307)

---

See details of all code changes since previous release.

:warning: For use with products other than GitHub.com, such as GitHub Enterprise Server, please consult the compatibility table.

Commits

• d6db901 Merge pull request #324 from actions/error-message-request-id
• 055f425 compile changes
• 5ab929b Include request id in the error message of an error response
• 3ff795b Merge pull request #318 from actions/dependabot/npm_and_yarn/non-breaking-cha...
• f5a2f0d Update distributables after Dependabot 🤖
• 1364cde Bump the non-breaking-changes group with 2 updates
• 2ed07f7 Merge pull request #316 from actions/dependabot/npm_and_yarn/non-breaking-cha...
• d5a892b Bump the non-breaking-changes group with 1 update
• 05977f5 Merge pull request #314 from actions/dependabot/npm_and_yarn/non-breaking-cha...
• 9414024 Update distributables after Dependabot 🤖
• Additional commits viewable in compare view

Updates actions/cache from 4.0.0 to 4.0.2

Release notes

Sourced from actions/cache's releases.

v4.0.2

What's Changed

• Fix fail-on-cache-miss not working by @​cdce8p in actions/cache#1327

Full Changelog: https://github.com/actions/cache/compare/v4.0.1...v4.0.2

v4.0.1

What's Changed

• Update README.md by @​yacaovsnc in actions/cache#1304
• Update examples by @​yacaovsnc in actions/cache#1305
• Update actions/cache publish flow by @​bethanyj28 in actions/cache#1340
• Update @​actions/cache by @​bethanyj28 in actions/cache#1341

New Contributors

• @​yacaovsnc made their first contribution in actions/cache#1304

Full Changelog: https://github.com/actions/cache/compare/v4...v4.0.1

Changelog

Sourced from actions/cache's changelog.

Releases

4.0.2

• Fixed restore fail-on-cache-miss not working.

4.0.1

• Updated isGhes check

4.0.0

• Updated minimum runner version support from node 12 -> node 20

3.3.3

• Updates @​actions/cache to v3.2.3 to fix accidental mutated path arguments to getCacheVersion actions/toolkit#1378
• Additional audit fixes of npm package(s)

3.3.2

• Fixes bug with Azure SDK causing blob downloads to get stuck.

3.3.1

• Reduced segment size to 128MB and segment timeout to 10 minutes to fail fast in case the cache download is stuck.

3.3.0

• Added option to lookup cache without downloading it.

3.2.6

• Fix zstd not being used after zstd version upgrade to 1.5.4 on hosted runners.

3.2.5

• Added fix to prevent from setting MYSYS environment variable globally.

3.2.4

• Added option to fail job on cache miss.

3.2.3

• Support cross os caching on Windows as an opt-in feature.
• Fix issue with symlink restoration on Windows for cross-os caches.

3.2.2

... (truncated)

Commits

• 0c45773 Merge pull request #1327 from cdce8p/fix-fail-on-cache-miss
• 8a55f83 Add test case for process exit
• 3884cac Bump version
• e29dad3 Fix fail-on-cache-miss not working
• ab5e6d0 Merge pull request #1341 from bethanyj28/main
• 89c7d86 licensed cache
• d2c84da update @​actions/cache
• 37e7d4e Merge pull request #1340 from actions/bethanyj28/update-publish-flow
• a18323f add release action
• a2ed59d Merge pull request #1305 from actions/yacaovsnc/update_examples
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions

[dependabot[bot]]

Superseded by #118.