Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 7, 2024

Bumps the actions group with 3 updates: actions/attest-build-provenance, mamba-org/setup-micromamba and codecov/codecov-action.

Updates actions/attest-build-provenance from 1.4.1 to 1.4.3

Release notes

Sourced from actions/attest-build-provenance's releases.

v1.4.3

What's Changed

Full Changelog: actions/attest-build-provenance@v1.4.2...v1.4.3

v1.4.2

What's Changed

Full Changelog: actions/attest-build-provenance@v1.4.1...v1.4.2

Commits
  • 1c608d1 bump predicate from 1.1.2 to 1.1.3 (#226)
  • f1185f1 bump @​actions/attest from 1.4.1 to 1.4.2 (#225)
  • d438876 add sigstore prober (#224)
  • 8f30a5c Bump the npm-development group with 3 updates (#218)
  • 13f0f0d Bump @​actions/attest from 1.3.1 to 1.4.1 (#212)
  • a950611 Bump the npm-development group with 2 updates (#211)
  • 814a778 Bump the npm-development group with 3 updates (#206)
  • 6149ea5 bump actions/attest from 1.4.0 to 1.4.1 (#209)
  • 3eb3242 Bump super-linter/super-linter from 6 to 7 (#205)
  • 399bb17 Bump @​types/node from 22.2.0 to 22.4.0 in the npm-development group (#203)
  • Additional commits viewable in compare view

Updates mamba-org/setup-micromamba from 1 to 2

Release notes

Sourced from mamba-org/setup-micromamba's releases.

v2.0.0

What's Changed

Bug fixes

New Contributors

Full Changelog: mamba-org/setup-micromamba@v1...v2.0.0

v1.11.0

What's Changed

New features

Full Changelog: mamba-org/setup-micromamba@v1.10.0...v1.11.0

v1.10.0

What's Changed

New features

Dependency updates

New Contributors

Full Changelog: mamba-org/setup-micromamba@v1.9.0...v1.10.0

v1.9.0

What's Changed

Bug fixes

Documentation

Dependency updates

... (truncated)

Commits
  • 617811f Copy generated mamba.bat to micromamba.bat to workaround cmd.exe Auto… (#234)
  • See full diff in compare view

Updates codecov/codecov-action from 4.5.0 to 4.6.0

Release notes

Sourced from codecov/codecov-action's releases.

v4.6.0

What's Changed

... (truncated)

Commits
  • b9fd7d1 chore(release):4.6.0 (#1587)
  • 6f7612c fix: bump eslint parser deps (#1586)
  • 26c7e28 build(deps): bump actions/checkout from 4.1.7 to 4.2.0 (#1583)
  • 6f744f7 build(deps): bump github/codeql-action from 3.26.8 to 3.26.9 (#1584)
  • 543c3d4 chore: fix typo of OSS (#1578)
  • e379426 build(deps-dev): bump @​vercel/ncc from 0.38.1 to 0.38.2 (#1577)
  • 42656e4 build(deps): bump github/codeql-action from 3.26.7 to 3.26.8 (#1575)
  • 2296b6b build(deps-dev): bump eslint from 8.57.0 to 8.57.1 (#1571)
  • bd77bc3 build(deps): bump github/codeql-action from 3.26.6 to 3.26.7 (#1569)
  • 180b964 build(deps-dev): bump @​types/jest from 29.5.12 to 29.5.13 (#1567)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Oct 7, 2024
@VeckoTheGecko
Copy link
Collaborator

VeckoTheGecko commented Oct 8, 2024

The dependency on seabird here for that one test is proving to be problematic.

@dependabot dependabot bot force-pushed the dependabot/github_actions/actions-5312e35480 branch from 87f9a67 to 5039318 Compare October 14, 2024 07:33
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Oct 15, 2024

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@VeckoTheGecko VeckoTheGecko reopened this Oct 15, 2024
Bumps the actions group with 3 updates: [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance), [mamba-org/setup-micromamba](https://github.com/mamba-org/setup-micromamba) and [codecov/codecov-action](https://github.com/codecov/codecov-action).


Updates `actions/attest-build-provenance` from 1.4.1 to 1.4.3
- [Release notes](https://github.com/actions/attest-build-provenance/releases)
- [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md)
- [Commits](actions/attest-build-provenance@v1.4.1...v1.4.3)

Updates `mamba-org/setup-micromamba` from 1 to 2
- [Release notes](https://github.com/mamba-org/setup-micromamba/releases)
- [Commits](mamba-org/setup-micromamba@v1...v2)

Updates `codecov/codecov-action` from 4.5.0 to 4.6.0
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](codecov/codecov-action@v4.5.0...v4.6.0)

---
updated-dependencies:
- dependency-name: actions/attest-build-provenance
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: mamba-org/setup-micromamba
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: codecov/codecov-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/github_actions/actions-5312e35480 branch from 5039318 to 54520dd Compare October 28, 2024 07:59
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Nov 11, 2024

Superseded by #81.

@dependabot dependabot bot closed this Nov 11, 2024
@dependabot dependabot bot deleted the dependabot/github_actions/actions-5312e35480 branch November 11, 2024 08:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants