Commit 53a6bc1
authored
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?v=4&size=40){kind=avatar}
build(deps): bump MetaMask/action-npm-publish from 5 to 6 (#954)
Bumps
[MetaMask/action-npm-publish](https://github.com/metamask/action-npm-publish)
from 5 to 6.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/metamask/action-npm-publish/releases">MetaMask/action-npm-publish's
releases</a>.</em></p>
<blockquote>
<h2>6.0.0</h2>
<h3>Added</h3>
<ul>
<li><strong>BREAKING:</strong> Add support for NPM staged publishing (<a
href="https://redirect.github.com/MetaMask/action-npm-publish/pull/112">#112</a>)
<ul>
<li>Publishing now requires OIDC, with the exception of the initial
publish (which still uses an NPM token).</li>
<li>The action now uses staged publishing, meaning packages must be
approved on NPM before they are published.</li>
<li>The minimum Yarn version is now <code>4.16.0</code>, and
<code>npm</code> is no longer supported.</li>
</ul>
</li>
<li><strong>BREAKING:</strong> Bump minimum Node.js version to
<code>22.14.0</code> (<a
href="https://redirect.github.com/MetaMask/action-npm-publish/pull/113">#113</a>)</li>
</ul>
<h2>5.3.1</h2>
<h3>Fixed</h3>
<ul>
<li>Only install <code>pkdiff</code> if no token was specified (<a
href="https://redirect.github.com/MetaMask/action-npm-publish/pull/109">#109</a>)</li>
<li>Specify version for <code>pkdiff</code> (<a
href="https://redirect.github.com/MetaMask/action-npm-publish/pull/111">#111</a>)</li>
</ul>
<h2>5.3.0</h2>
<h3>Changed</h3>
<ul>
<li>Only enable command logging if <code>RUNNER_DEBUG</code> is set (<a
href="https://redirect.github.com/MetaMask/action-npm-publish/pull/94">#94</a>,
<a
href="https://redirect.github.com/MetaMask/action-npm-publish/pull/105">#105</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Fix additions showing up as removals, and vice versa in package diff
(<a
href="https://redirect.github.com/MetaMask/action-npm-publish/pull/98">#98</a>)</li>
</ul>
<h2>5.2.0</h2>
<h3>Added</h3>
<ul>
<li>Handle publishing of packages not on Yarn Berry with NPM (<a
href="https://redirect.github.com/MetaMask/action-npm-publish/pull/87">#87</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>Only show packages in the dry run that need publishing (<a
href="https://redirect.github.com/MetaMask/action-npm-publish/pull/90">#90</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Fix report script for unpublished packages (<a
href="https://redirect.github.com/MetaMask/action-npm-publish/pull/93">#93</a>)</li>
<li>Recognize <code>NPM_TOKEN</code> environment variable (<a
href="https://redirect.github.com/MetaMask/action-npm-publish/pull/87">#87</a>)</li>
</ul>
<h2>5.1.2</h2>
<h3>Fixed</h3>
<ul>
<li>Fix report script when publishing package with dash in organisation
name (<a
href="https://redirect.github.com/MetaMask/action-npm-publish/pull/85">#85</a>)</li>
</ul>
<h2>5.1.1</h2>
<h3>Fixed</h3>
<ul>
<li>Add missing configuration for non-default Slack channel messages (<a
href="https://redirect.github.com/MetaMask/action-npm-publish/pull/81">#81</a>)</li>
</ul>
<h2>5.1.0</h2>
<h3>Added</h3>
<ul>
<li>Improve Dry Run Output (<a
href="https://redirect.github.com/MetaMask/action-npm-publish/pull/64">#64</a>)
<ul>
<li>The dry run step now includes a detailed report about the changes in
each published package. It is stored as an artifact, and a link is
shared in the logs of the "Dry Run Publish" step.</li>
</ul>
</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Fix Slack announcement for public default channel (<a
href="https://redirect.github.com/MetaMask/action-npm-publish/pull/73">#73</a>,
<a
href="https://redirect.github.com/MetaMask/action-npm-publish/pull/77">#77</a>)
<ul>
<li>We have found that the Slack announcement does not work correctly
for public channels when the <code>channel</code> parameter is given.
The action has been updated to omit the default if no channel is
specified, so that announcements to the default channel work correctly
even if it is public.</li>
<li>This was originally published in v4.0.4, but this is the first v5.x
release that includes this change.</li>
</ul>
</li>
</ul>
<h2>5.0.1</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/MetaMask/action-npm-publish/blob/main/CHANGELOG.md">MetaMask/action-npm-publish's
changelog</a>.</em></p>
<blockquote>
<h1>Changelog</h1>
<p>All notable changes to this project will be documented in this
file.</p>
<p>The format is based on <a
href="https://keepachangelog.com/en/1.0.0/">Keep a Changelog</a>,
and this project adheres to <a
href="https://semver.org/spec/v2.0.0.html">Semantic Versioning</a>.</p>
<h2>[Unreleased]</h2>
<h2>[6.2.0]</h2>
<h3>Added</h3>
<ul>
<li>Add option to disable provenance (<a
href="https://redirect.github.com/MetaMask/action-npm-publish/pull/120">#120</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Disable provenance for private repositories (<a
href="https://redirect.github.com/MetaMask/action-npm-publish/pull/120">#120</a>)
<ul>
<li>Provenance is not supported for private repositories.</li>
</ul>
</li>
</ul>
<h2>[6.1.0]</h2>
<h3>Changed</h3>
<ul>
<li>Update the Slack message to include a link to the staged publishing
instructions (<a
href="https://redirect.github.com/MetaMask/action-npm-publish/pull/118">#118</a>)</li>
</ul>
<h2>[6.0.0]</h2>
<h3>Added</h3>
<ul>
<li><strong>BREAKING:</strong> Add support for NPM staged publishing (<a
href="https://redirect.github.com/MetaMask/action-npm-publish/pull/112">#112</a>)
<ul>
<li>Publishing now requires OIDC, with the exception of the initial
publish (which still uses an NPM token).</li>
<li>The action now uses staged publishing, meaning packages must be
approved on NPM before they are published.</li>
<li>The minimum Yarn version is now <code>4.16.0</code>, and
<code>npm</code> is no longer supported.</li>
</ul>
</li>
<li><strong>BREAKING:</strong> Bump minimum Node.js version to
<code>22.14.0</code> (<a
href="https://redirect.github.com/MetaMask/action-npm-publish/pull/113">#113</a>)</li>
</ul>
<h2>[5.3.1]</h2>
<h3>Fixed</h3>
<ul>
<li>Only install <code>pkdiff</code> if no token was specified (<a
href="https://redirect.github.com/MetaMask/action-npm-publish/pull/109">#109</a>)</li>
<li>Specify version for <code>pkdiff</code> (<a
href="https://redirect.github.com/MetaMask/action-npm-publish/pull/111">#111</a>)</li>
</ul>
<h2>[5.3.0]</h2>
<h3>Changed</h3>
<ul>
<li>Only enable command logging if <code>RUNNER_DEBUG</code> is set (<a
href="https://redirect.github.com/MetaMask/action-npm-publish/pull/94">#94</a>,
<a
href="https://redirect.github.com/MetaMask/action-npm-publish/pull/105">#105</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Fix additions showing up as removals, and vice versa in package diff
(<a
href="https://redirect.github.com/MetaMask/action-npm-publish/pull/98">#98</a>)</li>
</ul>
<h2>[5.2.0]</h2>
<h3>Added</h3>
<ul>
<li>Handle publishing of packages not on Yarn Berry with NPM (<a
href="https://redirect.github.com/MetaMask/action-npm-publish/pull/87">#87</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>Only show packages in the dry run that need publishing (<a
href="https://redirect.github.com/MetaMask/action-npm-publish/pull/90">#90</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Fix report script for unpublished packages (<a
href="https://redirect.github.com/MetaMask/action-npm-publish/pull/93">#93</a>)</li>
<li>Recognize <code>NPM_TOKEN</code> environment variable (<a
href="https://redirect.github.com/MetaMask/action-npm-publish/pull/87">#87</a>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/MetaMask/action-npm-publish/commit/0b0528a2365759dda60634f0a26fd247c9076d08"><code>0b0528a</code></a>
6.2.0 (<a
href="https://redirect.github.com/metamask/action-npm-publish/issues/121">#121</a>)</li>
<li><a
href="https://github.com/MetaMask/action-npm-publish/commit/fcf5257d9d91c670c4942793738f38ab774355c6"><code>fcf5257</code></a>
feat: Add option to disable provenance and always disable for private
reposit...</li>
<li><a
href="https://github.com/MetaMask/action-npm-publish/commit/efffc544d4caf5fb9ea6ea5140b738de1d164a2b"><code>efffc54</code></a>
6.1.0 (<a
href="https://redirect.github.com/metamask/action-npm-publish/issues/119">#119</a>)</li>
<li><a
href="https://github.com/MetaMask/action-npm-publish/commit/3e1571014c5809511dad4850161e756258f0edd2"><code>3e15710</code></a>
feat: Update Slack message to link to staged publish instructions (<a
href="https://redirect.github.com/metamask/action-npm-publish/issues/118">#118</a>)</li>
<li><a
href="https://github.com/MetaMask/action-npm-publish/commit/122fc82d6fdc62c647654d7c6726bf1f771c74bf"><code>122fc82</code></a>
Update action version in README (<a
href="https://redirect.github.com/metamask/action-npm-publish/issues/117">#117</a>)</li>
<li><a
href="https://github.com/MetaMask/action-npm-publish/commit/7317b49f71f244fb1d87e4161c543060639c8f1a"><code>7317b49</code></a>
6.0.0 (<a
href="https://redirect.github.com/metamask/action-npm-publish/issues/116">#116</a>)</li>
<li><a
href="https://github.com/MetaMask/action-npm-publish/commit/54e98b024f578dbb3aaec4329d1b307842f39bcb"><code>54e98b0</code></a>
feat!: Add support for NPM staged publishing (<a
href="https://redirect.github.com/metamask/action-npm-publish/issues/112">#112</a>)</li>
<li><a
href="https://github.com/MetaMask/action-npm-publish/commit/cded853582c844899f4d1e867efde94c02a3c488"><code>cded853</code></a>
Bump Yarn to <code>4.16.0</code> (<a
href="https://redirect.github.com/metamask/action-npm-publish/issues/115">#115</a>)</li>
<li><a
href="https://github.com/MetaMask/action-npm-publish/commit/4a910cf4eb8d23243fe3112efd537e6f07f6d585"><code>4a910cf</code></a>
chore: Bump Yarn to v4, align workflows with module template (<a
href="https://redirect.github.com/metamask/action-npm-publish/issues/114">#114</a>)</li>
<li><a
href="https://github.com/MetaMask/action-npm-publish/commit/6364508c410e979b0c6df1f1aa1e3c9b75b017a7"><code>6364508</code></a>
chore!: Drop support for Node.js <22 (<a
href="https://redirect.github.com/metamask/action-npm-publish/issues/113">#113</a>)</li>
<li>See full diff in <a
href="https://github.com/metamask/action-npm-publish/compare/v5...v6">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>1 parent a3eff0e commit 53a6bc1
1 file changed
Lines changed: 2 additions & 2 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
47 | 47 | | |
48 | 48 | | |
49 | 49 | | |
50 | | - | |
| 50 | + | |
51 | 51 | | |
52 | 52 | | |
53 | 53 | | |
| |||
68 | 68 | | |
69 | 69 | | |
70 | 70 | | |
71 | | - | |
| 71 | + | |
72 | 72 | | |
73 | 73 | | |
0 commit comments