wayfair-incubator / postmessage-communicator

MIT License
2 stars 0 forks source link

Update GitHub Actions (major) #21

Open renovate[bot] opened 1 year ago

renovate[bot] commented 1 year ago

This PR contains the following updates:

Package Type Update Change
JS-DevTools/npm-publish action major v1 -> v3
actions/checkout action major v3 -> v4
actions/setup-node action major v3 -> v4
actions/stale action major v7 -> v9
suzuki-shunsuke/github-action-renovate-config-validator action major v0.1.2 -> v1.1.0

Release Notes

JS-DevTools/npm-publish (JS-DevTools/npm-publish) ### [`v3`](https://redirect.github.com/JS-DevTools/npm-publish/compare/v2...v3) [Compare Source](https://redirect.github.com/JS-DevTools/npm-publish/compare/v2...v3) ### [`v2`](https://redirect.github.com/JS-DevTools/npm-publish/compare/v1...v2) [Compare Source](https://redirect.github.com/JS-DevTools/npm-publish/compare/v1...v2)
actions/checkout (actions/checkout) ### [`v4`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v421) [Compare Source](https://redirect.github.com/actions/checkout/compare/v3...v4) - Check out other refs/\* by commit if provided, fall back to ref by [@​orhantoy](https://redirect.github.com/orhantoy) in [https://github.com/actions/checkout/pull/1924](https://redirect.github.com/actions/checkout/pull/1924)
actions/setup-node (actions/setup-node) ### [`v4`](https://redirect.github.com/actions/setup-node/compare/v3...v4) [Compare Source](https://redirect.github.com/actions/setup-node/compare/v3...v4)
actions/stale (actions/stale) ### [`v9`](https://redirect.github.com/actions/stale/compare/v8...v9) [Compare Source](https://redirect.github.com/actions/stale/compare/v8...v9) ### [`v8`](https://redirect.github.com/actions/stale/compare/v7...v8) [Compare Source](https://redirect.github.com/actions/stale/compare/v7...v8)
suzuki-shunsuke/github-action-renovate-config-validator (suzuki-shunsuke/github-action-renovate-config-validator) ### [`v1.1.0`](https://redirect.github.com/suzuki-shunsuke/github-action-renovate-config-validator/releases/tag/v1.1.0) [Compare Source](https://redirect.github.com/suzuki-shunsuke/github-action-renovate-config-validator/compare/v1.0.1...v1.1.0) #### Features [#​699](https://redirect.github.com/suzuki-shunsuke/github-action-renovate-config-validator/issues/699) [#​701](https://redirect.github.com/suzuki-shunsuke/github-action-renovate-config-validator/issues/701) Support validating multiple files You can validate multiple files by setting multiple lines to `config_file_path`. Leading spaces on each line are removed. e.g. ```yaml with: config_file_path: | default.json foo.json ``` You can pass `config_file_path` through output command. e.g. ```yaml - id: files run: | set -euo pipefail files=$(git ls-files | grep renovate.json) ### https://stackoverflow.com/a/74232400 EOF=$(dd if=/dev/urandom bs=15 count=1 status=none | base64) { echo "files<<$EOF" echo "$files" echo "$EOF" } >> "$GITHUB_OUTPUT" - name: Pass files through output uses: suzuki-shunsuke/github-action-renovate-config-validator@v1.1.0 with: config_file_path: ${{ steps.files.outputs.files }} ``` ### [`v1.0.1`](https://redirect.github.com/suzuki-shunsuke/github-action-renovate-config-validator/releases/tag/v1.0.1) [Compare Source](https://redirect.github.com/suzuki-shunsuke/github-action-renovate-config-validator/compare/v1.0.0...v1.0.1) #### Fixes [#​551](https://redirect.github.com/suzuki-shunsuke/github-action-renovate-config-validator/issues/551) Suppress `npx` warnings using `--yes` option [@​TWiStErRob](https://redirect.github.com/TWiStErRob) This action executes renovate-config-validator via npx, then the following warning was outputted. npm WARN exec The following package was not found and will be installed: renovate@37.130.0 To suppress the warning, we set `npx`'s `--yes` option. https://docs.npmjs.com/cli/v8/commands/npx > If any requested packages are not present in the local project dependencies, then they are installed to a folder in the npm cache, which is added to the PATH environment variable in the executed process. > A prompt is printed (which can be suppressed by providing either --yes or --no). > To prevent security and user-experience problems from mistyping package names, npx prompts before installing anything. > Suppress this prompt with the -y or --yes option. > The --no-install option is deprecated, and will be converted to --no. #### 🎉 New contributors Thank you for your contribution! [@​TWiStErRob](https://redirect.github.com/TWiStErRob) [#​551](https://redirect.github.com/suzuki-shunsuke/github-action-renovate-config-validator/issues/551) ### [`v1.0.0`](https://redirect.github.com/suzuki-shunsuke/github-action-renovate-config-validator/releases/tag/v1.0.0) [Compare Source](https://redirect.github.com/suzuki-shunsuke/github-action-renovate-config-validator/compare/v0.1.3...v1.0.0) #### ⚠️ Breaking Changes [#​531](https://redirect.github.com/suzuki-shunsuke/github-action-renovate-config-validator/issues/531) [renovate-config-validator's --strict option](https://docs.renovatebot.com/config-validation/#strict-mode) is enabled by default. ##### How to migrate There are several options. 1. Recommended: Fix Renovate configuration according to the error message 2. Unrecommended: Set `false` to the input `strict` to disable `--strict` option #### ⚠️ Security Improvement [#​530](https://redirect.github.com/suzuki-shunsuke/github-action-renovate-config-validator/issues/530) Pass inputs via environment variables to prevent malicious injection #### Features [#​531](https://redirect.github.com/suzuki-shunsuke/github-action-renovate-config-validator/issues/531) Add the input `strict`. You can enable [renovate-config-validator's `--strict` option](https://docs.renovatebot.com/config-validation/#strict-mode). ### [`v0.1.3`](https://redirect.github.com/suzuki-shunsuke/github-action-renovate-config-validator/releases/tag/v0.1.3) [Compare Source](https://redirect.github.com/suzuki-shunsuke/github-action-renovate-config-validator/compare/v0.1.2...v0.1.3) [#​316](https://redirect.github.com/suzuki-shunsuke/github-action-renovate-config-validator/issues/316) Support .renovaterc.json5 by default https://docs.renovatebot.com/configuration-options/#configuration-options

Configuration

📅 Schedule: Branch creation - "before 3am every weekday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.



This PR was generated by Mend Renovate. View the repository job log.