Conversation
|
Renovate Jira issue ID: BUILD-9291 |
|
julien-carsique-sonarsource
force-pushed
the
renovate/major-github-actions
branch
from
dd02d66 to
ebdfd1c
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/major-github-actions
branch
from
ebdfd1c to
37ce227
Compare
renovate
bot
force-pushed
the
renovate/major-github-actions
branch
from
37ce227 to
011e206
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/major-github-actions
branch
from
011e206 to
1b71b99
Compare
renovate
bot
force-pushed
the
renovate/major-github-actions
branch
from
1b71b99 to
407cea1
Compare
renovate
bot
force-pushed
the
renovate/major-github-actions
branch
2 times, most recently
from
8c490f9 to
4b1d33e
Compare
SonarQube reviewer guide
|
julien-carsique-sonarsource
force-pushed
the
renovate/major-github-actions
branch
from
4b1d33e to
40b1344
Compare
renovate
bot
force-pushed
the
renovate/major-github-actions
branch
from
40b1344 to
e7ebce6
Compare
renovate
bot
force-pushed
the
renovate/major-github-actions
branch
from
e7ebce6 to
f5c9473
Compare
|
![sonar-review-alpha[bot]](https://avatars.githubusercontent.com/in/3025063?s=60&v=4){kind=small}
There was a problem hiding this comment.
LGTM! ✅
Routine Renovate major-version bump PR. All actions remain SHA-pinned (good), versions are consistent across every file that uses each action, and there are no logic changes. The largest jumps — actions/upload-artifact v4→v7 and gradle/actions/setup-gradle v4→v6 — skip multiple major versions, so it's worth a quick scan of their changelogs for breaking input/output changes before merging, but the inputs used here (name, path, subject-path, cache-disabled, etc.) are stable across those versions.
2 participants
This PR contains the following updates:
v3.2.0→v4.1.0v4.3.0→v5.0.4v5.0.1→v6.0.2v4.6.2→v7.0.0v4.4.4→v6.0.1v3.6.3→v4.0.1Release Notes
actions/attest-build-provenance (actions/attest-build-provenance)
v4.1.0Compare Source
What's Changed
actions/attestfrom 4.0.0 to 4.1.0 by @bdehamer in #838@actions/attestfrom 3.0.0 to 3.1.0 by @bdehamer in actions/attest#362@actions/attestfrom 3.1.0 to 3.2.0 by @bdehamer in actions/attest#365subject-versioninput for inclusion in storage record by @bdehamer in actions/attest#364Full Changelog: actions/attest-build-provenance@v4.0.0...v4.1.0
v4.0.0Compare Source
What's Changed
Full Changelog: actions/attest-build-provenance@v3.2.0...v4.0.0
actions/cache (actions/cache)
v5.0.4Compare Source
v5.0.3Compare Source
What's Changed
@actions/cacheto v5.0.5 (Resolves: https://github.com/actions/cache/security/dependabot/33)@actions/coreto v2.0.3Full Changelog: actions/cache@v5...v5.0.3
v5.0.2Compare Source
v5.0.1Compare Source
v5.0.0Compare Source
actions/checkout (actions/checkout)
v6.0.2Compare Source
v6.0.1Compare Source
v6.0.0Compare Source
actions/upload-artifact (actions/upload-artifact)
v7.0.0Compare Source
v7 What's new
Direct Uploads
Adds support for uploading single files directly (unzipped). Callers can set the new
archiveparameter tofalseto skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. Thenameparameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.ESM
To support new versions of the
@actions/*packages, we've upgraded the package to ESM.What's Changed
New Contributors
Full Changelog: actions/upload-artifact@v6...v7.0.0
v6.0.0Compare Source
v5.0.0Compare Source
gradle/actions (gradle/actions)
v6.0.1Compare Source
Summary
The license changes in v6 introduced a
gradle-actions-cachinglicense notice that is printed in logs and in each job summary.With this release, the license notice will be muted if build-scan terms have been accepted, or if a Develocity access key is provided.
What's Changed
Full Changelog: gradle/actions@v6.0.0...v6.0.1
v6.0.0Compare Source
Summary
gradle-actions-cachinglibrary, and is no longer open-source. See this blog post for more context.gradle-actions-caching.What's Changed
gradle-actions-cachingcomponent by @bigdaz in #885Full Changelog: gradle/actions@v5.0.2...v6.0.0
v5.0.2Compare Source
Summary
This release contains no functional changes. It updates dependencies and known Gradle wrapper checksums.
What's Changed
Full Changelog: gradle/actions@v5.0.1...v5.0.2
v5.0.1Compare Source
What's Changed
npmcode dependency versionsFull Changelog: gradle/actions@v5.0.0...v5.0.1
v5.0.0Compare Source
What's Changed
Breaking Changes
Make sure your runner is updated to this version or newer to use this release. v2.327.1 Release Notes
Dependency upgrades
Full Changelog: gradle/actions@v4...v5.0.0
jdx/mise-action (jdx/mise-action)
v4.0.1: : Documentation and Internal CleanupCompare Source
A small maintenance release that updates the README documentation to reflect v4 and cleans up internal code. There are no functional changes to the action itself.
Changed
jdx/mise-action@v4,actions/checkout@v6, and current tool versions by @deining in #407 and #408getCwd()helper to deduplicate working directory resolution logic (internal refactor, no behavior change) by @altendky in #403New Contributors
Full Changelog: jdx/mise-action@v4.0.0...v4.0.1
v4.0.0Compare Source
What's Changed
53b8394by @renovate[bot] in #396820e316by @renovate[bot] in #397New Contributors
Full Changelog: jdx/mise-action@v3...v4.0.0
Configuration
📅 Schedule: Branch creation - "after 7am every weekday,before 8pm every weekday" in timezone Europe/Paris, Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Never, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.