Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): bump coursier/cache-action from 6.4.0 to 6.4.4 #1353

Merged
merged 1 commit into from
Dec 6, 2023

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 10, 2023

Bumps coursier/cache-action from 6.4.0 to 6.4.4.

Release notes

Sourced from coursier/cache-action's releases.

v6.4.4

What's Changed

Updates / maintenance

New Contributors

Full Changelog: coursier/cache-action@v6...v6.4.4

v6.4.3

What's Changed

Full Changelog: coursier/cache-action@v6.4.2...v6.4.3

v6.4.2

What's Changed

Full Changelog: coursier/cache-action@v6...v6.4.2

v6.4.1

What's Changed

Updates / maintainance

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [coursier/cache-action](https://github.com/coursier/cache-action) from 6.4.0 to 6.4.4.
- [Release notes](https://github.com/coursier/cache-action/releases)
- [Commits](coursier/cache-action@v6.4.0...v6.4.4)

---
updated-dependencies:
- dependency-name: coursier/cache-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Copy link
Contributor Author

dependabot bot commented on behalf of github Nov 10, 2023

The following labels could not be found: github_actions.

@dependabot dependabot bot requested a review from a team as a code owner November 10, 2023 02:20
Copy link

netlify bot commented Nov 10, 2023

Deploy Preview for gno-docs2 canceled.

Name Link
🔨 Latest commit 61efd9f
🔍 Latest deploy log https://app.netlify.com/sites/gno-docs2/deploys/654d93864be99900089ffae4

Copy link

codecov bot commented Nov 10, 2023

Codecov Report

All modified and coverable lines are covered by tests ✅

Comparison is base (bc5af65) 55.59% compared to head (61efd9f) 55.95%.

Additional details and impacted files
@@            Coverage Diff             @@
##           master    #1353      +/-   ##
==========================================
+ Coverage   55.59%   55.95%   +0.35%     
==========================================
  Files         420      420              
  Lines       65413    65415       +2     
==========================================
+ Hits        36369    36601     +232     
+ Misses      26197    25957     -240     
- Partials     2847     2857      +10     

see 33 files with indirect coverage changes

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@zivkovicmilos
Copy link
Member

@moul

This is the first time I've seen Dependency License Scanning run, even though we've changed dependencies in the past.
Are we sure we want it running for these paths only, and not on every PR?

workflow_dispatch:
pull_request:
paths:
- ".github/.fossa.yml"
- ".github/workflows/fossa.yml"
schedule:
- cron: '0 0 * * 6' # At 00:00 on saturdays

The CI seems to be failing because the GH secret is not set up

@moul
Copy link
Member

moul commented Dec 6, 2023

Yes, a cronjob should suffice. Relying on it avoids the administrative hassle of reviewing everything manually. I prefer we use our judgement for reviewing dependency updates and reserve this tool for occasional, targeted checks.

@moul moul merged commit a4c7b86 into master Dec 6, 2023
182 of 183 checks passed
@moul moul deleted the dependabot/github_actions/coursier/cache-action-6.4.4 branch December 6, 2023 21:36
gfanton pushed a commit to moul/gno that referenced this pull request Jan 18, 2024
…1353)

Bumps [coursier/cache-action](https://github.com/coursier/cache-action)
from 6.4.0 to 6.4.4.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/coursier/cache-action/releases">coursier/cache-action's
releases</a>.</em></p>
<blockquote>
<h2>v6.4.4</h2>
<h2>What's Changed</h2>
<ul>
<li>Support ignoring job and matrix jobs as part of cache key by <a
href="https://github.com/ihostage"><code>@​ihostage</code></a> in <a
href="https://redirect.github.com/coursier/cache-action/pull/512">coursier/cache-action#512</a></li>
</ul>
<h2>Updates / maintenance</h2>
<ul>
<li>Fix CI by <a
href="https://github.com/alexarchambault"><code>@​alexarchambault</code></a>
in <a
href="https://redirect.github.com/coursier/cache-action/pull/514">coursier/cache-action#514</a></li>
<li>Bump <code>@​types/node</code> from 18.11.18 to 20.8.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/coursier/cache-action/pull/513">coursier/cache-action#513</a></li>
<li>Bump eslint from 8.31.0 to 8.50.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/coursier/cache-action/pull/518">coursier/cache-action#518</a></li>
<li>Bump <code>@​actions/cache</code> from 3.1.2 to 3.2.2 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/coursier/cache-action/pull/521">coursier/cache-action#521</a></li>
<li>Bump actions/checkout from 3 to 4 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/coursier/cache-action/pull/522">coursier/cache-action#522</a></li>
<li>Bump peter-evans/create-pull-request from 4 to 5 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/coursier/cache-action/pull/523">coursier/cache-action#523</a></li>
<li>Update dist by <a
href="https://github.com/github-actions"><code>@​github-actions</code></a>
in <a
href="https://redirect.github.com/coursier/cache-action/pull/538">coursier/cache-action#538</a></li>
<li>Bump <code>@​types/node</code> from 20.8.0 to 20.9.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/coursier/cache-action/pull/537">coursier/cache-action#537</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/ihostage"><code>@​ihostage</code></a>
made their first contribution in <a
href="https://redirect.github.com/coursier/cache-action/pull/512">coursier/cache-action#512</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/coursier/cache-action/compare/v6...v6.4.4">https://github.com/coursier/cache-action/compare/v6...v6.4.4</a></p>
<h2>v6.4.3</h2>
<h2>What's Changed</h2>
<ul>
<li>Bump <code>@​actions/cache</code> from 3.1.0 to 3.1.2 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/coursier/cache-action/pull/466">coursier/cache-action#466</a></li>
<li>Bump prettier from 2.8.1 to 2.8.2 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/coursier/cache-action/pull/467">coursier/cache-action#467</a></li>
<li>Bump <code>@​typescript-eslint/parser</code> from 5.47.0 to 5.48.0
by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>
in <a
href="https://redirect.github.com/coursier/cache-action/pull/465">coursier/cache-action#465</a></li>
<li>Bump eslint from 8.30.0 to 8.31.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/coursier/cache-action/pull/464">coursier/cache-action#464</a></li>
<li>Update dist by <a
href="https://github.com/github-actions"><code>@​github-actions</code></a>
in <a
href="https://redirect.github.com/coursier/cache-action/pull/468">coursier/cache-action#468</a></li>
<li>Bump <code>@​types/node</code> from 18.11.17 to 18.11.18 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/coursier/cache-action/pull/461">coursier/cache-action#461</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/coursier/cache-action/compare/v6.4.2...v6.4.3">https://github.com/coursier/cache-action/compare/v6.4.2...v6.4.3</a></p>
<h2>v6.4.2</h2>
<h2>What's Changed</h2>
<ul>
<li>Bump <code>@​actions/cache</code> from 3.0.6 to 3.1.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/coursier/cache-action/pull/459">coursier/cache-action#459</a></li>
<li>Bump <code>@​typescript-eslint/parser</code> from 5.46.1 to 5.47.0
by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>
in <a
href="https://redirect.github.com/coursier/cache-action/pull/458">coursier/cache-action#458</a></li>
<li>Bump eslint from 8.29.0 to 8.30.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/coursier/cache-action/pull/456">coursier/cache-action#456</a></li>
<li>Bump prettier from 2.7.1 to 2.8.1 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/coursier/cache-action/pull/455">coursier/cache-action#455</a></li>
<li>Bump <code>@​types/node</code> from 18.11.15 to 18.11.17 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/coursier/cache-action/pull/457">coursier/cache-action#457</a></li>
<li>Update dist by <a
href="https://github.com/github-actions"><code>@​github-actions</code></a>
in <a
href="https://redirect.github.com/coursier/cache-action/pull/460">coursier/cache-action#460</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/coursier/cache-action/compare/v6...v6.4.2">https://github.com/coursier/cache-action/compare/v6...v6.4.2</a></p>
<h2>v6.4.1</h2>
<h2>What's Changed</h2>
<ul>
<li>Update mill cache directory to <code>~/.cache/mill</code> by <a
href="https://github.com/lolgab"><code>@​lolgab</code></a> in <a
href="https://redirect.github.com/coursier/cache-action/pull/445">coursier/cache-action#445</a></li>
</ul>
<h2>Updates / maintainance</h2>
<ul>
<li>Bump <code>@​types/node</code> from 18.11.2 to 18.11.15 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/coursier/cache-action/pull/453">coursier/cache-action#453</a></li>
<li>Bump typescript from 4.8.4 to 4.9.4 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/coursier/cache-action/pull/448">coursier/cache-action#448</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/coursier/cache-action/commit/a0e7cd24be81bc84f0d7461e02bd1a96980553d7"><code>a0e7cd2</code></a>
Bump <code>@​types/node</code> from 20.8.0 to 20.9.0 (<a
href="https://redirect.github.com/coursier/cache-action/issues/537">#537</a>)</li>
<li><a
href="https://github.com/coursier/cache-action/commit/5fe9efed9b0117f3d903fd556e9d2c2ddbddd227"><code>5fe9efe</code></a>
Update dist (<a
href="https://redirect.github.com/coursier/cache-action/issues/538">#538</a>)</li>
<li><a
href="https://github.com/coursier/cache-action/commit/aad5fb0f2df851e72b6761fabf7bb26825af2514"><code>aad5fb0</code></a>
Bump peter-evans/create-pull-request from 4 to 5 (<a
href="https://redirect.github.com/coursier/cache-action/issues/523">#523</a>)</li>
<li><a
href="https://github.com/coursier/cache-action/commit/138f7f53e12b106eae670b849db3c0b331231f9f"><code>138f7f5</code></a>
Bump actions/checkout from 3 to 4 (<a
href="https://redirect.github.com/coursier/cache-action/issues/522">#522</a>)</li>
<li><a
href="https://github.com/coursier/cache-action/commit/067b4266edcdf3678a2084e71be5545d11116e10"><code>067b426</code></a>
Bump <code>@​actions/cache</code> from 3.1.2 to 3.2.2 (<a
href="https://redirect.github.com/coursier/cache-action/issues/521">#521</a>)</li>
<li><a
href="https://github.com/coursier/cache-action/commit/c98bc3abe722fecde7042e79913dedf788d8a414"><code>c98bc3a</code></a>
Support ignoring job and matrix jobs as part of cache key (<a
href="https://redirect.github.com/coursier/cache-action/issues/512">#512</a>)</li>
<li><a
href="https://github.com/coursier/cache-action/commit/c5dea7046dbb07999b357dedf1f204c694d86cc7"><code>c5dea70</code></a>
Bump eslint from 8.31.0 to 8.50.0 (<a
href="https://redirect.github.com/coursier/cache-action/issues/518">#518</a>)</li>
<li><a
href="https://github.com/coursier/cache-action/commit/a1b9996c53f605128b57585ec1a9f6f747736e96"><code>a1b9996</code></a>
Bump <code>@​types/node</code> from 18.11.18 to 20.8.0 (<a
href="https://redirect.github.com/coursier/cache-action/issues/513">#513</a>)</li>
<li><a
href="https://github.com/coursier/cache-action/commit/714e6a243f34bbc82944614711d84844fd614e6f"><code>714e6a2</code></a>
Merge pull request <a
href="https://redirect.github.com/coursier/cache-action/issues/514">#514</a>
from alexarchambault/fix-ci</li>
<li><a
href="https://github.com/coursier/cache-action/commit/18f5fa91a312d4fc72f919a341bd3272734a7887"><code>18f5fa9</code></a>
Update node</li>
<li>Additional commits viewable in <a
href="https://github.com/coursier/cache-action/compare/v6.4.0...v6.4.4">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=coursier/cache-action&package-manager=github_actions&previous-version=6.4.0&new-version=6.4.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
Status: ✅ Done
Archived in project
Development

Successfully merging this pull request may close these issues.

2 participants