Skip to content

Commit 363e4d6

Browse files
chore(deps): bump the gha group in /.github/workflows with 2 updates (#32)
Bumps the gha group in /.github/workflows with 2 updates: [actions/setup-node](https://github.com/actions/setup-node) and [marocchino/sticky-pull-request-comment](https://github.com/marocchino/sticky-pull-request-comment). Updates `actions/setup-node` from 6.2.0 to 6.3.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/setup-node/releases">actions/setup-node's releases</a>.</em></p> <blockquote> <h2>v6.3.0</h2> <h2>What's Changed</h2> <h3>Enhancements:</h3> <ul> <li>Support parsing <code>devEngines</code> field by <a href="https://github.com/susnux"><code>@​susnux</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1283">actions/setup-node#1283</a></li> </ul> <blockquote> <p>When using node-version-file: package.json, setup-node now prefers devEngines.runtime over engines.node.</p> </blockquote> <h3>Dependency updates:</h3> <ul> <li>Fix npm audit issues by <a href="https://github.com/gowridurgad"><code>@​gowridurgad</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1491">actions/setup-node#1491</a></li> <li>Replace uuid with crypto.randomUUID() by <a href="https://github.com/trivikr"><code>@​trivikr</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1378">actions/setup-node#1378</a></li> <li>Upgrade minimatch from 3.1.2 to 3.1.5 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1498">actions/setup-node#1498</a></li> </ul> <h3>Bug fixes:</h3> <ul> <li>Remove hardcoded bearer for mirror-url <a href="https://github.com/marco-ippolito"><code>@​marco-ippolito</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1467">actions/setup-node#1467</a></li> <li>Scope test lockfiles by package manager and update cache tests by <a href="https://github.com/gowridurgad"><code>@​gowridurgad</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1495">actions/setup-node#1495</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/susnux"><code>@​susnux</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-node/pull/1283">actions/setup-node#1283</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/setup-node/compare/v6...v6.3.0">https://github.com/actions/setup-node/compare/v6...v6.3.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/actions/setup-node/commit/53b83947a5a98c8d113130e565377fae1a50d02f"><code>53b8394</code></a> Bump minimatch from 3.1.2 to 3.1.5 (<a href="https://redirect.github.com/actions/setup-node/issues/1498">#1498</a>)</li> <li><a href="https://github.com/actions/setup-node/commit/54045abd5dcd3b0fee9ca02fa24c57545834c9cc"><code>54045ab</code></a> Scope test lockfiles by package manager and update cache tests (<a href="https://redirect.github.com/actions/setup-node/issues/1495">#1495</a>)</li> <li><a href="https://github.com/actions/setup-node/commit/c882bffdbd4df51ace6b940023952e8669c9932a"><code>c882bff</code></a> Replace uuid with crypto.randomUUID() (<a href="https://redirect.github.com/actions/setup-node/issues/1378">#1378</a>)</li> <li><a href="https://github.com/actions/setup-node/commit/774c1d62961e73038a114d59c8847023c003194d"><code>774c1d6</code></a> feat(node-version-file): support parsing <code>devEngines</code> field (<a href="https://redirect.github.com/actions/setup-node/issues/1283">#1283</a>)</li> <li><a href="https://github.com/actions/setup-node/commit/efcb663fc60e97218a2b2d6d827f7830f164739e"><code>efcb663</code></a> fix: remove hardcoded bearer (<a href="https://redirect.github.com/actions/setup-node/issues/1467">#1467</a>)</li> <li><a href="https://github.com/actions/setup-node/commit/d02c89dce7e1ba9ef629ce0680989b3a1cc72edb"><code>d02c89d</code></a> Fix npm audit issues (<a href="https://redirect.github.com/actions/setup-node/issues/1491">#1491</a>)</li> <li>See full diff in <a href="https://github.com/actions/setup-node/compare/v6.2.0...v6.3.0">compare view</a></li> </ul> </details> <br /> Updates `marocchino/sticky-pull-request-comment` from 2 to 3 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/marocchino/sticky-pull-request-comment/releases">marocchino/sticky-pull-request-comment's releases</a>.</em></p> <blockquote> <h2>v3.0.0</h2> <h2>What's Changed</h2> <ul> <li>Update node to 24</li> <li>Update deps</li> </ul> <h2>New Contributors</h2> <p><strong>Full Changelog</strong>: <a href="https://github.com/marocchino/sticky-pull-request-comment/compare/v2.9.4...v3.0.0">https://github.com/marocchino/sticky-pull-request-comment/compare/v2.9.4...v3.0.0</a></p> <h2>v2.9.4</h2> <h2>What's Changed</h2> <ul> <li>build(deps-dev): Bump <code>@​biomejs/biome</code> from 2.0.0 to 2.0.2 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/marocchino/sticky-pull-request-comment/pull/1554">marocchino/sticky-pull-request-comment#1554</a></li> <li>build(deps-dev): Bump <code>@​types/node</code> from 24.0.3 to 24.0.11 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/marocchino/sticky-pull-request-comment/pull/1561">marocchino/sticky-pull-request-comment#1561</a></li> <li>build(deps-dev): Bump <code>@​biomejs/biome</code> from 2.0.4 to 2.1.1 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/marocchino/sticky-pull-request-comment/pull/1562">marocchino/sticky-pull-request-comment#1562</a></li> <li>build(deps-dev): Bump <code>@​types/node</code> from 24.0.11 to 24.0.12 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/marocchino/sticky-pull-request-comment/pull/1563">marocchino/sticky-pull-request-comment#1563</a></li> <li>build(deps-dev): Bump <code>@​types/node</code> from 24.0.12 to 24.0.13 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/marocchino/sticky-pull-request-comment/pull/1564">marocchino/sticky-pull-request-comment#1564</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/marocchino/sticky-pull-request-comment/compare/v2.9.3...v2.9.4">https://github.com/marocchino/sticky-pull-request-comment/compare/v2.9.3...v2.9.4</a></p> <h2>v2.9.3</h2> <h2>What's Changed</h2> <ul> <li>Update deps (including security issues)</li> <li>Test with vitest instead of jest</li> <li>Use biome</li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/marocchino/sticky-pull-request-comment/compare/v2.9.2...v2.9.3">https://github.com/marocchino/sticky-pull-request-comment/compare/v2.9.2...v2.9.3</a></p> <h2>v2.9.2</h2> <h2>What's Changed</h2> <ul> <li>Update <code>@​octokit/graphql-schema</code> &amp; use biome by <a href="https://github.com/marocchino"><code>@​marocchino</code></a> in <a href="https://redirect.github.com/marocchino/sticky-pull-request-comment/pull/1517">marocchino/sticky-pull-request-comment#1517</a></li> <li>build(deps): Bump undici from 5.28.4 to 5.28.5 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/marocchino/sticky-pull-request-comment/pull/1476">marocchino/sticky-pull-request-comment#1476</a></li> <li>build(deps-dev): Bump <code>@​types/node</code> from 22.10.7 to 22.14.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/marocchino/sticky-pull-request-comment/pull/1515">marocchino/sticky-pull-request-comment#1515</a></li> <li>build(deps): Bump <code>@​octokit/request-error</code> from 5.0.1 to 5.1.1 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/marocchino/sticky-pull-request-comment/pull/1490">marocchino/sticky-pull-request-comment#1490</a></li> <li>build(deps): Bump <code>@​octokit/request</code> from 8.1.4 to 8.4.1 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/marocchino/sticky-pull-request-comment/pull/1494">marocchino/sticky-pull-request-comment#1494</a></li> <li>build(deps): Bump <code>@​octokit/plugin-paginate-rest</code> from 9.1.2 to 9.2.2 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/marocchino/sticky-pull-request-comment/pull/1493">marocchino/sticky-pull-request-comment#1493</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/marocchino/sticky-pull-request-comment/compare/v2.9.1...v2.9.2">https://github.com/marocchino/sticky-pull-request-comment/compare/v2.9.1...v2.9.2</a></p> <h2>v2.9.1</h2> <h2>What's Changed</h2> <ul> <li>Fix test action by <a href="https://github.com/NoRePercussions"><code>@​NoRePercussions</code></a> in <a href="https://redirect.github.com/marocchino/sticky-pull-request-comment/pull/1364">marocchino/sticky-pull-request-comment#1364</a></li> <li>PR Test Autocomment: Include Errors by <a href="https://github.com/NoRePercussions"><code>@​NoRePercussions</code></a> in <a href="https://redirect.github.com/marocchino/sticky-pull-request-comment/pull/1365">marocchino/sticky-pull-request-comment#1365</a></li> <li>Always move ID comment to end of message by <a href="https://github.com/NoRePercussions"><code>@​NoRePercussions</code></a> in <a href="https://redirect.github.com/marocchino/sticky-pull-request-comment/pull/1373">marocchino/sticky-pull-request-comment#1373</a></li> <li>Update deps</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/marocchino/sticky-pull-request-comment/commit/70d2764d1a7d5d9560b100cbea0077fc8f633987"><code>70d2764</code></a> 📦️ Build</li> <li><a href="https://github.com/marocchino/sticky-pull-request-comment/commit/308b2fd250369ac423ef99b3d71bbd77dadb0a4e"><code>308b2fd</code></a> Don't create a comment with hide: true (<a href="https://redirect.github.com/marocchino/sticky-pull-request-comment/issues/1661">#1661</a>)</li> <li><a href="https://github.com/marocchino/sticky-pull-request-comment/commit/3bbec31446e921b166b86b26b3de70573b18d456"><code>3bbec31</code></a> Add comprehensive tests for main.ts covering all branches (<a href="https://redirect.github.com/marocchino/sticky-pull-request-comment/issues/1660">#1660</a>)</li> <li><a href="https://github.com/marocchino/sticky-pull-request-comment/commit/aaf617804e8ce598ae82d38f1b107e812ab81ba0"><code>aaf6178</code></a> 🔖 Version bump (<a href="https://redirect.github.com/marocchino/sticky-pull-request-comment/issues/1658">#1658</a>)</li> <li><a href="https://github.com/marocchino/sticky-pull-request-comment/commit/7d67ef645057529215538176696ecfa0770305cb"><code>7d67ef6</code></a> 👷 Use pull_request</li> <li><a href="https://github.com/marocchino/sticky-pull-request-comment/commit/1ed3d7b4f6bb5e8e06bf880952613fc89343dcde"><code>1ed3d7b</code></a> ⬆️ Update deps</li> <li><a href="https://github.com/marocchino/sticky-pull-request-comment/commit/46a16ecf776d86c5b2d7ecdfb6917e8b16fe9852"><code>46a16ec</code></a> build(deps-dev): Bump <code>@​types/node</code> from 24.5.2 to 25.0.3 (<a href="https://redirect.github.com/marocchino/sticky-pull-request-comment/issues/1646">#1646</a>)</li> <li><a href="https://github.com/marocchino/sticky-pull-request-comment/commit/0a36b9e3ab53cba97c591327cd1fb0b6943a00fa"><code>0a36b9e</code></a> build(deps): Bump <code>@​actions/core</code> from 1.11.1 to 2.0.2 (<a href="https://redirect.github.com/marocchino/sticky-pull-request-comment/issues/1649">#1649</a>)</li> <li><a href="https://github.com/marocchino/sticky-pull-request-comment/commit/74297c9ad0d491986494d08469274844dc6c59bf"><code>74297c9</code></a> build(deps-dev): Bump <code>@​vercel/ncc</code> from 0.38.3 to 0.38.4 (<a href="https://redirect.github.com/marocchino/sticky-pull-request-comment/issues/1592">#1592</a>)</li> <li><a href="https://github.com/marocchino/sticky-pull-request-comment/commit/e736d73b55f6dac9028822391a74a6ee3da05f5b"><code>e736d73</code></a> 📦️ Build</li> <li>Additional commits viewable in <a href="https://github.com/marocchino/sticky-pull-request-comment/compare/v2...v3">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1 parent 319661b commit 363e4d6

2 files changed

Lines changed: 2 additions & 2 deletions

File tree

.github/workflows/cd.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -25,7 +25,7 @@ jobs:
2525
config-file: .github/release-please/config.json
2626
manifest-file: .github/release-please/manifest.json
2727

28-
- uses: actions/setup-node@v6.2.0
28+
- uses: actions/setup-node@v6.3.0
2929
if: ${{ steps.release.outputs.release_created }}
3030
with:
3131
node-version: '24'

.github/workflows/ci.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -83,7 +83,7 @@ jobs:
8383
echo "EOF" >> $GITHUB_OUTPUT
8484
8585
- name: Comment on PR
86-
uses: marocchino/sticky-pull-request-comment@v2
86+
uses: marocchino/sticky-pull-request-comment@v3
8787
with:
8888
key: coverage-${{ matrix.os }}
8989
header: "Coverage Report – ${{ matrix.os }}"

0 commit comments

Comments
 (0)