Skip to content

Commit 9ccb9a1

Browse files
dependabot[bot]dependabot[bot]
authored
chore(deps): bump the actions group with 16 updates (#20)
Bumps the actions group with 16 updates: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `4.1.1` | `6.0.2` | | [haskell-actions/setup](https://github.com/haskell-actions/setup) | `2.7.5` | `2.11.0` | | [actions/cache](https://github.com/actions/cache) | `4.3.0` | `5.0.5` | | [actions/configure-pages](https://github.com/actions/configure-pages) | `5.0.0` | `6.0.0` | | [actions/upload-pages-artifact](https://github.com/actions/upload-pages-artifact) | `3.0.1` | `5.0.0` | | [actions/deploy-pages](https://github.com/actions/deploy-pages) | `4.0.5` | `5.0.0` | | [denoland/setup-deno](https://github.com/denoland/setup-deno) | `1.0.0` | `2.0.4` | | [cachix/install-nix-action](https://github.com/cachix/install-nix-action) | `24` | `31` | | [peaceiris/actions-gh-pages](https://github.com/peaceiris/actions-gh-pages) | `3.9.3` | `4.1.0` | | [slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml](https://github.com/slsa-framework/slsa-github-generator) | `1.9.0` | `2.1.0` | | [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) | `0.35.0` | `0.36.0` | | [codecov/codecov-action](https://github.com/codecov/codecov-action) | `3.1.6` | `6.0.1` | | [actions/github-script](https://github.com/actions/github-script) | `8.0.0` | `9.0.0` | | [peter-evans/repository-dispatch](https://github.com/peter-evans/repository-dispatch) | `3.0.0` | `4.0.1` | | [webfactory/ssh-agent](https://github.com/webfactory/ssh-agent) | `0.9.0` | `0.10.0` | | [trufflesecurity/trufflehog](https://github.com/trufflesecurity/trufflehog) | `3.93.8` | `3.95.3` | Updates `actions/checkout` from 4.1.1 to 6.0.2 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/checkout/releases">actions/checkout's releases</a>.</em></p> <blockquote> <h2>v6.0.2</h2> <h2>What's Changed</h2> <ul> <li>Add orchestration_id to git user-agent when ACTIONS_ORCHESTRATION_ID is set by <a href="https://github.com/TingluoHuang"><code>@​TingluoHuang</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2355">actions/checkout#2355</a></li> <li>Fix tag handling: preserve annotations and explicit fetch-tags by <a href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2356">actions/checkout#2356</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/checkout/compare/v6.0.1...v6.0.2">https://github.com/actions/checkout/compare/v6.0.1...v6.0.2</a></p> <h2>v6.0.1</h2> <h2>What's Changed</h2> <ul> <li>Update all references from v5 and v4 to v6 by <a href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2314">actions/checkout#2314</a></li> <li>Add worktree support for persist-credentials includeIf by <a href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2327">actions/checkout#2327</a></li> <li>Clarify v6 README by <a href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2328">actions/checkout#2328</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/checkout/compare/v6...v6.0.1">https://github.com/actions/checkout/compare/v6...v6.0.1</a></p> <h2>v6.0.0</h2> <h2>What's Changed</h2> <ul> <li>Update README to include Node.js 24 support details and requirements by <a href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2248">actions/checkout#2248</a></li> <li>Persist creds to a separate file by <a href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2286">actions/checkout#2286</a></li> <li>v6-beta by <a href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2298">actions/checkout#2298</a></li> <li>update readme/changelog for v6 by <a href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2311">actions/checkout#2311</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/checkout/compare/v5.0.0...v6.0.0">https://github.com/actions/checkout/compare/v5.0.0...v6.0.0</a></p> <h2>v6-beta</h2> <h2>What's Changed</h2> <p>Updated persist-credentials to store the credentials under <code>$RUNNER_TEMP</code> instead of directly in the local git config.</p> <p>This requires a minimum Actions Runner version of <a href="https://github.com/actions/runner/releases/tag/v2.329.0">v2.329.0</a> to access the persisted credentials for <a href="https://docs.github.com/en/actions/tutorials/use-containerized-services/create-a-docker-container-action">Docker container action</a> scenarios.</p> <h2>v5.0.1</h2> <h2>What's Changed</h2> <ul> <li>Port v6 cleanup to v5 by <a href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2301">actions/checkout#2301</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/checkout/compare/v5...v5.0.1">https://github.com/actions/checkout/compare/v5...v5.0.1</a></p> <h2>v5.0.0</h2> <h2>What's Changed</h2> <ul> <li>Update actions checkout to use node 24 by <a href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2226">actions/checkout#2226</a></li> <li>Prepare v5.0.0 release by <a href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2238">actions/checkout#2238</a></li> </ul> <h2>⚠️ Minimum Compatible Runner Version</h2> <p><strong>v2.327.1</strong><br /> <a href="https://github.com/actions/runner/releases/tag/v2.327.1">Release Notes</a></p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/actions/checkout/blob/main/CHANGELOG.md">actions/checkout's changelog</a>.</em></p> <blockquote> <h1>Changelog</h1> <h2>v6.0.2</h2> <ul> <li>Fix tag handling: preserve annotations and explicit fetch-tags by <a href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2356">actions/checkout#2356</a></li> </ul> <h2>v6.0.1</h2> <ul> <li>Add worktree support for persist-credentials includeIf by <a href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2327">actions/checkout#2327</a></li> </ul> <h2>v6.0.0</h2> <ul> <li>Persist creds to a separate file by <a href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2286">actions/checkout#2286</a></li> <li>Update README to include Node.js 24 support details and requirements by <a href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2248">actions/checkout#2248</a></li> </ul> <h2>v5.0.1</h2> <ul> <li>Port v6 cleanup to v5 by <a href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2301">actions/checkout#2301</a></li> </ul> <h2>v5.0.0</h2> <ul> <li>Update actions checkout to use node 24 by <a href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2226">actions/checkout#2226</a></li> </ul> <h2>v4.3.1</h2> <ul> <li>Port v6 cleanup to v4 by <a href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2305">actions/checkout#2305</a></li> </ul> <h2>v4.3.0</h2> <ul> <li>docs: update README.md by <a href="https://github.com/motss"><code>@​motss</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1971">actions/checkout#1971</a></li> <li>Add internal repos for checking out multiple repositories by <a href="https://github.com/mouismail"><code>@​mouismail</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1977">actions/checkout#1977</a></li> <li>Documentation update - add recommended permissions to Readme by <a href="https://github.com/benwells"><code>@​benwells</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2043">actions/checkout#2043</a></li> <li>Adjust positioning of user email note and permissions heading by <a href="https://github.com/joshmgross"><code>@​joshmgross</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2044">actions/checkout#2044</a></li> <li>Update README.md by <a href="https://github.com/nebuk89"><code>@​nebuk89</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2194">actions/checkout#2194</a></li> <li>Update CODEOWNERS for actions by <a href="https://github.com/TingluoHuang"><code>@​TingluoHuang</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2224">actions/checkout#2224</a></li> <li>Update package dependencies by <a href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2236">actions/checkout#2236</a></li> </ul> <h2>v4.2.2</h2> <ul> <li><code>url-helper.ts</code> now leverages well-known environment variables by <a href="https://github.com/jww3"><code>@​jww3</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1941">actions/checkout#1941</a></li> <li>Expand unit test coverage for <code>isGhes</code> by <a href="https://github.com/jww3"><code>@​jww3</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1946">actions/checkout#1946</a></li> </ul> <h2>v4.2.1</h2> <ul> <li>Check out other refs/* by commit if provided, fall back to ref by <a href="https://github.com/orhantoy"><code>@​orhantoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1924">actions/checkout#1924</a></li> </ul> <h2>v4.2.0</h2> <ul> <li>Add Ref and Commit outputs by <a href="https://github.com/lucacome"><code>@​lucacome</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1180">actions/checkout#1180</a></li> <li>Dependency updates by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>- <a href="https://redirect.github.com/actions/checkout/pull/1777">actions/checkout#1777</a>, <a href="https://redirect.github.com/actions/checkout/pull/1872">actions/checkout#1872</a></li> </ul> <h2>v4.1.7</h2> <ul> <li>Bump the minor-npm-dependencies group across 1 directory with 4 updates by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1739">actions/checkout#1739</a></li> <li>Bump actions/checkout from 3 to 4 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1697">actions/checkout#1697</a></li> <li>Check out other refs/* by commit by <a href="https://github.com/orhantoy"><code>@​orhantoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1774">actions/checkout#1774</a></li> <li>Pin actions/checkout's own workflows to a known, good, stable version. by <a href="https://github.com/jww3"><code>@​jww3</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1776">actions/checkout#1776</a></li> </ul> <h2>v4.1.6</h2> <ul> <li>Check platform to set archive extension appropriately by <a href="https://github.com/cory-miller"><code>@​cory-miller</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1732">actions/checkout#1732</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/actions/checkout/commit/de0fac2e4500dabe0009e67214ff5f5447ce83dd"><code>de0fac2</code></a> Fix tag handling: preserve annotations and explicit fetch-tags (<a href="https://redirect.github.com/actions/checkout/issues/2356">#2356</a>)</li> <li><a href="https://github.com/actions/checkout/commit/064fe7f3312418007dea2b49a19844a9ee378f49"><code>064fe7f</code></a> Add orchestration_id to git user-agent when ACTIONS_ORCHESTRATION_ID is set (...</li> <li><a href="https://github.com/actions/checkout/commit/8e8c483db84b4bee98b60c0593521ed34d9990e8"><code>8e8c483</code></a> Clarify v6 README (<a href="https://redirect.github.com/actions/checkout/issues/2328">#2328</a>)</li> <li><a href="https://github.com/actions/checkout/commit/033fa0dc0b82693d8986f1016a0ec2c5e7d9cbb1"><code>033fa0d</code></a> Add worktree support for persist-credentials includeIf (<a href="https://redirect.github.com/actions/checkout/issues/2327">#2327</a>)</li> <li><a href="https://github.com/actions/checkout/commit/c2d88d3ecc89a9ef08eebf45d9637801dcee7eb5"><code>c2d88d3</code></a> Update all references from v5 and v4 to v6 (<a href="https://redirect.github.com/actions/checkout/issues/2314">#2314</a>)</li> <li><a href="https://github.com/actions/checkout/commit/1af3b93b6815bc44a9784bd300feb67ff0d1eeb3"><code>1af3b93</code></a> update readme/changelog for v6 (<a href="https://redirect.github.com/actions/checkout/issues/2311">#2311</a>)</li> <li><a href="https://github.com/actions/checkout/commit/71cf2267d89c5cb81562390fa70a37fa40b1305e"><code>71cf226</code></a> v6-beta (<a href="https://redirect.github.com/actions/checkout/issues/2298">#2298</a>)</li> <li><a href="https://github.com/actions/checkout/commit/069c6959146423d11cd0184e6accf28f9d45f06e"><code>069c695</code></a> Persist creds to a separate file (<a href="https://redirect.github.com/actions/checkout/issues/2286">#2286</a>)</li> <li><a href="https://github.com/actions/checkout/commit/ff7abcd0c3c05ccf6adc123a8cd1fd4fb30fb493"><code>ff7abcd</code></a> Update README to include Node.js 24 support details and requirements (<a href="https://redirect.github.com/actions/checkout/issues/2248">#2248</a>)</li> <li><a href="https://github.com/actions/checkout/commit/08c6903cd8c0fde910a37f88322edcfb5dd907a8"><code>08c6903</code></a> Prepare v5.0.0 release (<a href="https://redirect.github.com/actions/checkout/issues/2238">#2238</a>)</li> <li>Additional commits viewable in <a href="https://github.com/actions/checkout/compare/v4.1.1...de0fac2e4500dabe0009e67214ff5f5447ce83dd">compare view</a></li> </ul> </details> <br /> Updates `haskell-actions/setup` from 2.7.5 to 2.11.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/haskell-actions/setup/releases">haskell-actions/setup's releases</a>.</em></p> <blockquote> <h2>v2.11.0</h2> <p>GHC: try ghcup first, choco only as fallback</p> <h2>What's Changed</h2> <ul> <li>Add GHC 9.12.4 and Stack 3.9.3 by <a href="https://github.com/andreasabel"><code>@​andreasabel</code></a> in <a href="https://redirect.github.com/haskell-actions/setup/pull/142">haskell-actions/setup#142</a></li> <li>Bump softprops/action-gh-release from 2 to 3 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/haskell-actions/setup/pull/143">haskell-actions/setup#143</a></li> <li>GHC: try ghcup first, choco only as fallback by <a href="https://github.com/andreasabel"><code>@​andreasabel</code></a> in <a href="https://redirect.github.com/haskell-actions/setup/pull/144">haskell-actions/setup#144</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/haskell-actions/setup/compare/v2.10.3...v2.11.0">https://github.com/haskell-actions/setup/compare/v2.10.3...v2.11.0</a></p> <h2>v2.10.4</h2> <p>Add GHC 9.12.4 and Stack 3.9.3</p> <h2>What's Changed</h2> <ul> <li>Add GHC 9.12.4 and Stack 3.9.3 by <a href="https://github.com/andreasabel"><code>@​andreasabel</code></a> in <a href="https://redirect.github.com/haskell-actions/setup/pull/142">haskell-actions/setup#142</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/haskell-actions/setup/compare/v2.10.3...v2.10.4">https://github.com/haskell-actions/setup/compare/v2.10.3...v2.10.4</a></p> <h2>v2.10.3</h2> <p>Add Stack 3.9.1</p> <h2>What's Changed</h2> <ul> <li>Add Stack 3.9.1 by <a href="https://github.com/andreasabel"><code>@​andreasabel</code></a> in <a href="https://redirect.github.com/haskell-actions/setup/pull/138">haskell-actions/setup#138</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/haskell-actions/setup/compare/v2.10.2...v2.10.3">https://github.com/haskell-actions/setup/compare/v2.10.2...v2.10.3</a></p> <h2>v2.10.2</h2> <p>Remove GHCup vanilla channel from defaults</p> <h2>What's Changed</h2> <ul> <li>Remove GHCup vanilla channel from defaults by <a href="https://github.com/andreasabel"><code>@​andreasabel</code></a> in <a href="https://redirect.github.com/haskell-actions/setup/pull/137">haskell-actions/setup#137</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/haskell-actions/setup/compare/v2.10.1...v2.10.2">https://github.com/haskell-actions/setup/compare/v2.10.1...v2.10.2</a></p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/haskell-actions/setup/commit/cd0d9bdd65b20557f41bea4dbe43d0b5fbbfe553"><code>cd0d9bd</code></a> GHC: try ghcup first, choco only as fallback</li> <li><a href="https://github.com/haskell-actions/setup/commit/4568e6457136c6847fb753cd5ae28b2ba3b42798"><code>4568e64</code></a> Bump softprops/action-gh-release from 2 to 3</li> <li><a href="https://github.com/haskell-actions/setup/commit/de26526e12bc780fb9d384c1fb61c0bf02e3a40d"><code>de26526</code></a> Add GHC 9.12.4 and Stack 3.9.3</li> <li><a href="https://github.com/haskell-actions/setup/commit/f9150cb1d140e9a9271700670baa38991e6fa25c"><code>f9150cb</code></a> Add Stack 3.9.1</li> <li><a href="https://github.com/haskell-actions/setup/commit/dc63c94789664bb2910876ec3dfeeaa24d23b96b"><code>dc63c94</code></a> Remove GHCup vanilla channel from defaults</li> <li><a href="https://github.com/haskell-actions/setup/commit/7786314267139caaaf743fbdb70341b116a8d25d"><code>7786314</code></a> await addGhcupReleaseChannel</li> <li><a href="https://github.com/haskell-actions/setup/commit/57571745c639e06be44b0a6a5874b874eb8ba392"><code>5757174</code></a> Move all ghcup-add-channel commands into same group</li> <li><a href="https://github.com/haskell-actions/setup/commit/ca45ec3f5855d88df81d141f6bbe87cf96aa7ede"><code>ca45ec3</code></a> Remove broken GHC 9.12.3</li> <li><a href="https://github.com/haskell-actions/setup/commit/eb29c237a18b47554a426cb75d69844f689dc049"><code>eb29c23</code></a> Use GHCup vanilla and prereleases channels by default</li> <li><a href="https://github.com/haskell-actions/setup/commit/243ff44acce6b550747dcb4b9fa8a960b76e3fb0"><code>243ff44</code></a> Add GHCs 9.14.1 and 9.12.3 and Cabal 3.16.1.0</li> <li>Additional commits viewable in <a href="https://github.com/haskell-actions/setup/compare/ec49483bfc012387b227434aba94f59a6ecd0900...cd0d9bdd65b20557f41bea4dbe43d0b5fbbfe553">compare view</a></li> </ul> </details> <br /> Updates `actions/cache` from 4.3.0 to 5.0.5 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/cache/releases">actions/cache's releases</a>.</em></p> <blockquote> <h2>v5.0.5</h2> <h2>What's Changed</h2> <ul> <li>Update ts-http-runtime dependency by <a href="https://github.com/yacaovsnc"><code>@​yacaovsnc</code></a> in <a href="https://redirect.github.com/actions/cache/pull/1747">actions/cache#1747</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/cache/compare/v5...v5.0.5">https://github.com/actions/cache/compare/v5...v5.0.5</a></p> <h2>v5.0.4</h2> <h2>What's Changed</h2> <ul> <li>Add release instructions and update maintainer docs by <a href="https://github.com/Link"><code>@​Link</code></a>- in <a href="https://redirect.github.com/actions/cache/pull/1696">actions/cache#1696</a></li> <li>Potential fix for code scanning alert no. 52: Workflow does not contain permissions by <a href="https://github.com/Link"><code>@​Link</code></a>- in <a href="https://redirect.github.com/actions/cache/pull/1697">actions/cache#1697</a></li> <li>Fix workflow permissions and cleanup workflow names / formatting by <a href="https://github.com/Link"><code>@​Link</code></a>- in <a href="https://redirect.github.com/actions/cache/pull/1699">actions/cache#1699</a></li> <li>docs: Update examples to use the latest version by <a href="https://github.com/XZTDean"><code>@​XZTDean</code></a> in <a href="https://redirect.github.com/actions/cache/pull/1690">actions/cache#1690</a></li> <li>Fix proxy integration tests by <a href="https://github.com/Link"><code>@​Link</code></a>- in <a href="https://redirect.github.com/actions/cache/pull/1701">actions/cache#1701</a></li> <li>Fix cache key in examples.md for bun.lock by <a href="https://github.com/RyPeck"><code>@​RyPeck</code></a> in <a href="https://redirect.github.com/actions/cache/pull/1722">actions/cache#1722</a></li> <li>Update dependencies &amp; patch security vulnerabilities by <a href="https://github.com/Link"><code>@​Link</code></a>- in <a href="https://redirect.github.com/actions/cache/pull/1738">actions/cache#1738</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/XZTDean"><code>@​XZTDean</code></a> made their first contribution in <a href="https://redirect.github.com/actions/cache/pull/1690">actions/cache#1690</a></li> <li><a href="https://github.com/RyPeck"><code>@​RyPeck</code></a> made their first contribution in <a href="https://redirect.github.com/actions/cache/pull/1722">actions/cache#1722</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/cache/compare/v5...v5.0.4">https://github.com/actions/cache/compare/v5...v5.0.4</a></p> <h2>v5.0.3</h2> <h2>What's Changed</h2> <ul> <li>Bump <code>@actions/cache</code> to v5.0.5 (Resolves: <a href="https://github.com/actions/cache/security/dependabot/33">https://github.com/actions/cache/security/dependabot/33</a>)</li> <li>Bump <code>@actions/core</code> to v2.0.3</li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/cache/compare/v5...v5.0.3">https://github.com/actions/cache/compare/v5...v5.0.3</a></p> <h2>v.5.0.2</h2> <h1>v5.0.2</h1> <h2>What's Changed</h2> <p>When creating cache entries, 429s returned from the cache service will not be retried.</p> <h2>v5.0.1</h2> <blockquote> <p>[!IMPORTANT] <strong><code>actions/cache@v5</code> runs on the Node.js 24 runtime and requires a minimum Actions Runner version of <code>2.327.1</code>.</strong></p> <p>If you are using self-hosted runners, ensure they are updated before upgrading.</p> </blockquote> <hr /> <h1>v5.0.1</h1> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/actions/cache/blob/main/RELEASES.md">actions/cache's changelog</a>.</em></p> <blockquote> <h1>Releases</h1> <h2>How to prepare a release</h2> <blockquote> <p>[!NOTE]<br /> Relevant for maintainers with write access only.</p> </blockquote> <ol> <li>Switch to a new branch from <code>main</code>.</li> <li>Run <code>npm test</code> to ensure all tests are passing.</li> <li>Update the version in <a href="https://github.com/actions/cache/blob/main/package.json"><code>https://github.com/actions/cache/blob/main/package.json</code></a>.</li> <li>Run <code>npm run build</code> to update the compiled files.</li> <li>Update this <a href="https://github.com/actions/cache/blob/main/RELEASES.md"><code>https://github.com/actions/cache/blob/main/RELEASES.md</code></a> with the new version and changes in the <code>## Changelog</code> section.</li> <li>Run <code>licensed cache</code> to update the license report.</li> <li>Run <code>licensed status</code> and resolve any warnings by updating the <a href="https://github.com/actions/cache/blob/main/.licensed.yml"><code>https://github.com/actions/cache/blob/main/.licensed.yml</code></a> file with the exceptions.</li> <li>Commit your changes and push your branch upstream.</li> <li>Open a pull request against <code>main</code> and get it reviewed and merged.</li> <li>Draft a new release <a href="https://github.com/actions/cache/releases">https://github.com/actions/cache/releases</a> use the same version number used in <code>package.json</code> <ol> <li>Create a new tag with the version number.</li> <li>Auto generate release notes and update them to match the changes you made in <code>RELEASES.md</code>.</li> <li>Toggle the set as the latest release option.</li> <li>Publish the release.</li> </ol> </li> <li>Navigate to <a href="https://github.com/actions/cache/actions/workflows/release-new-action-version.yml">https://github.com/actions/cache/actions/workflows/release-new-action-version.yml</a> <ol> <li>There should be a workflow run queued with the same version number.</li> <li>Approve the run to publish the new version and update the major tags for this action.</li> </ol> </li> </ol> <h2>Changelog</h2> <h3>5.0.4</h3> <ul> <li>Bump <code>minimatch</code> to v3.1.5 (fixes ReDoS via globstar patterns)</li> <li>Bump <code>undici</code> to v6.24.1 (WebSocket decompression bomb protection, header validation fixes)</li> <li>Bump <code>fast-xml-parser</code> to v5.5.6</li> </ul> <h3>5.0.3</h3> <ul> <li>Bump <code>@actions/cache</code> to v5.0.5 (Resolves: <a href="https://github.com/actions/cache/security/dependabot/33">https://github.com/actions/cache/security/dependabot/33</a>)</li> <li>Bump <code>@actions/core</code> to v2.0.3</li> </ul> <h3>5.0.2</h3> <ul> <li>Bump <code>@actions/cache</code> to v5.0.3 <a href="https://redirect.github.com/actions/cache/pull/1692">#1692</a></li> </ul> <h3>5.0.1</h3> <ul> <li>Update <code>@azure/storage-blob</code> to <code>^12.29.1</code> via <code>@actions/cache@5.0.1</code> <a href="https://redirect.github.com/actions/cache/pull/1685">#1685</a></li> </ul> <h3>5.0.0</h3> <blockquote> <p>[!IMPORTANT] <code>actions/cache@v5</code> runs on the Node.js 24 runtime and requires a minimum Actions Runner version of <code>2.327.1</code>.</p> </blockquote> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/actions/cache/commit/27d5ce7f107fe9357f9df03efb73ab90386fccae"><code>27d5ce7</code></a> Merge pull request <a href="https://redirect.github.com/actions/cache/issues/1747">#1747</a> from actions/yacaovsnc/update-dependency</li> <li><a href="https://github.com/actions/cache/commit/f280785d7b6e1884c7d12b9136eb0f4a1574fcfd"><code>f280785</code></a> licensed changes</li> <li><a href="https://github.com/actions/cache/commit/619aeb1606e195be0b36fd0ff68dcf1aff6b65a7"><code>619aeb1</code></a> npm run build generated dist files</li> <li><a href="https://github.com/actions/cache/commit/bcf16c2893940a4899761e55c7ac3c1cf88a04f6"><code>bcf16c2</code></a> Update ts-http-runtime to 0.3.5</li> <li><a href="https://github.com/actions/cache/commit/668228422ae6a00e4ad889ee87cd7109ec5666a7"><code>6682284</code></a> Merge pull request <a href="https://redirect.github.com/actions/cache/issues/1738">#1738</a> from actions/prepare-v5.0.4</li> <li><a href="https://github.com/actions/cache/commit/e34039626f957d3e3e50843d15c1b20547fc90e2"><code>e340396</code></a> Update RELEASES</li> <li><a href="https://github.com/actions/cache/commit/8a671105293e81530f1af99863cdf94550aba1a6"><code>8a67110</code></a> Add licenses</li> <li><a href="https://github.com/actions/cache/commit/1865903e1b0cb750dda9bc5c58be03424cc62830"><code>1865903</code></a> Update dependencies &amp; patch security vulnerabilities</li> <li><a href="https://github.com/actions/cache/commit/565629816435f6c0b50676926c9b05c254113c0c"><code>5656298</code></a> Merge pull request <a href="https://redirect.github.com/actions/cache/issues/1722">#1722</a> from RyPeck/patch-1</li> <li><a href="https://github.com/actions/cache/commit/4e380d19e192ace8e86f23f32ca6fdec98a673c6"><code>4e380d1</code></a> Fix cache key in examples.md for bun.lock</li> <li>Additional commits viewable in <a href="https://github.com/actions/cache/compare/0057852bfaa89a56745cba8c7296529d2fc39830...27d5ce7f107fe9357f9df03efb73ab90386fccae">compare view</a></li> </ul> </details> <br /> Updates `actions/configure-pages` from 5.0.0 to 6.0.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/configure-pages/releases">actions/configure-pages's releases</a>.</em></p> <blockquote> <h2>v6.0.0</h2> <h1>Changelog</h1> <ul> <li>upgrade to node 24 <a href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> (<a href="https://redirect.github.com/actions/configure-pages/issues/186">#186</a>)</li> <li>Upgrade IA Publish <a href="https://github.com/Jcambass"><code>@​Jcambass</code></a> (<a href="https://redirect.github.com/actions/configure-pages/issues/165">#165</a>)</li> <li>Add workflow file for publishing releases to immutable action package <a href="https://github.com/Jcambass"><code>@​Jcambass</code></a> (<a href="https://redirect.github.com/actions/configure-pages/issues/163">#163</a>)</li> <li>pin draft release version <a href="https://github.com/YiMysty"><code>@​YiMysty</code></a> (<a href="https://redirect.github.com/actions/configure-pages/issues/162">#162</a>)</li> <li>Bump espree from 9.6.1 to 10.1.0 <a href="https://github.com/dependabot"><code>@​dependabot</code></a> (<a href="https://redirect.github.com/actions/configure-pages/issues/160">#160</a>)</li> <li>Bump eslint-config-prettier from 8.8.0 to 9.1.0 <a href="https://github.com/dependabot"><code>@​dependabot</code></a> (<a href="https://redirect.github.com/actions/configure-pages/issues/143">#143</a>)</li> <li>Be more friendly to Dependabot <a href="https://github.com/yoannchaudet"><code>@​yoannchaudet</code></a> (<a href="https://redirect.github.com/actions/configure-pages/issues/158">#158</a>)</li> <li>Bump eslint-plugin-github from 4.10.2 to 5.0.1 <a href="https://github.com/dependabot"><code>@​dependabot</code></a> (<a href="https://redirect.github.com/actions/configure-pages/issues/154">#154</a>)</li> <li>Bump braces from 3.0.2 to 3.0.3 in the npm_and_yarn group <a href="https://github.com/dependabot"><code>@​dependabot</code></a> (<a href="https://redirect.github.com/actions/configure-pages/issues/156">#156</a>)</li> <li>Bump undici from 5.28.3 to 5.28.4 <a href="https://github.com/dependabot"><code>@​dependabot</code></a> (<a href="https://redirect.github.com/actions/configure-pages/issues/145">#145</a>)</li> </ul> <p>See details of <a href="https://github.com/actions/configure-pages/compare/v5.0.0...v5.0.1">all code changes</a> since previous release.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/actions/configure-pages/commit/45bfe0192ca1faeb007ade9deae92b16b8254a0d"><code>45bfe01</code></a> Merge pull request <a href="https://redirect.github.com/actions/configure-pages/issues/186">#186</a> from salmanmkc/node24</li> <li><a href="https://github.com/actions/configure-pages/commit/d8770c2b3b71963902cec525cf516368b4411a78"><code>d8770c2</code></a> Update Node version from 20 to 24 in action.yml</li> <li><a href="https://github.com/actions/configure-pages/commit/cb8a1a32801e6cdb7b111ce13761226bba88f67d"><code>cb8a1a3</code></a> upgrade to node 24</li> <li><a href="https://github.com/actions/configure-pages/commit/d5606572c479bee637007364c6b4800ac4fc8573"><code>d560657</code></a> Merge pull request <a href="https://redirect.github.com/actions/configure-pages/issues/165">#165</a> from actions/Jcambass-patch-1</li> <li><a href="https://github.com/actions/configure-pages/commit/35e0ac4e4038e070ce9da26f41143bc3cf3c7e1d"><code>35e0ac4</code></a> Upgrade IA Publish</li> <li><a href="https://github.com/actions/configure-pages/commit/1dfbcbff6519463927204dc279c2e0d307824ee2"><code>1dfbcbf</code></a> Merge pull request <a href="https://redirect.github.com/actions/configure-pages/issues/163">#163</a> from actions/Jcambass-patch-1</li> <li><a href="https://github.com/actions/configure-pages/commit/2f4f988792f75a5edcc39df0e1661f78999e0348"><code>2f4f988</code></a> Add workflow file for publishing releases to immutable action package</li> <li><a href="https://github.com/actions/configure-pages/commit/0d7570ca8762e8c951911e8c9655d8973cc93174"><code>0d7570c</code></a> Merge pull request <a href="https://redirect.github.com/actions/configure-pages/issues/162">#162</a> from actions/pin-draft-release-verssion</li> <li><a href="https://github.com/actions/configure-pages/commit/3ea19669a5cd11c46d23d6578d088b81fe8527e5"><code>3ea1966</code></a> pin draft release version</li> <li><a href="https://github.com/actions/configure-pages/commit/aabcbc432d6b06d1fd5e8bf3cf756880c35e014d"><code>aabcbc4</code></a> Merge pull request <a href="https://redirect.github.com/actions/configure-pages/issues/160">#160</a> from actions/dependabot/npm_and_yarn/espree-10.1.0</li> <li>Additional commits viewable in <a href="https://github.com/actions/configure-pages/compare/983d7736d9b0ae728b81ab479565c72886d7745b...45bfe0192ca1faeb007ade9deae92b16b8254a0d">compare view</a></li> </ul> </details> <br /> Updates `actions/upload-pages-artifact` from 3.0.1 to 5.0.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/upload-pages-artifact/releases">actions/upload-pages-artifact's releases</a>.</em></p> <blockquote> <h2>v5.0.0</h2> <h1>Changelog</h1> <ul> <li>Update upload-artifact action to version 7 <a href="https://github.com/Tom-van-Woudenberg"><code>@​Tom-van-Woudenberg</code></a> (<a href="https://redirect.github.com/actions/upload-pages-artifact/issues/139">#139</a>)</li> <li>feat: add <code>include-hidden-files</code> input <a href="https://github.com/jonchurch"><code>@​jonchurch</code></a> (<a href="https://redirect.github.com/actions/upload-pages-artifact/issues/137">#137</a>)</li> </ul> <p>See details of <a href="https://github.com/actions/upload-pages-artifact/compare/v4.0.0...v4.0.1">all code changes</a> since previous release.</p> <h2>v4.0.0</h2> <h2>What's Changed</h2> <ul> <li>Potentially breaking change: hidden files (specifically dotfiles) will not be included in the artifact by <a href="https://github.com/tsusdere"><code>@​tsusdere</code></a> in <a href="https://redirect.github.com/actions/upload-pages-artifact/pull/102">actions/upload-pages-artifact#102</a> If you need to include dotfiles in your artifact: instead of using this action, create your own artifact according to these requirements <a href="https://github.com/actions/upload-pages-artifact?tab=readme-ov-file#artifact-validation">https://github.com/actions/upload-pages-artifact?tab=readme-ov-file#artifact-validation</a></li> <li>Pin <code>actions/upload-artifact</code> to SHA by <a href="https://github.com/heavymachinery"><code>@​heavymachinery</code></a> in <a href="https://redirect.github.com/actions/upload-pages-artifact/pull/127">actions/upload-pages-artifact#127</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/upload-pages-artifact/compare/v3.0.1...v4.0.0">https://github.com/actions/upload-pages-artifact/compare/v3.0.1...v4.0.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/actions/upload-pages-artifact/commit/fc324d3547104276b827a68afc52ff2a11cc49c9"><code>fc324d3</code></a> Merge pull request <a href="https://redirect.github.com/actions/upload-pages-artifact/issues/139">#139</a> from Tom-van-Woudenberg/patch-1</li> <li><a href="https://github.com/actions/upload-pages-artifact/commit/fe9d4b7d84090e1d8d9c53a0236f810d4e00d2c3"><code>fe9d4b7</code></a> Merge branch 'main' into patch-1</li> <li><a href="https://github.com/actions/upload-pages-artifact/commit/0ca16172ca884f0a37117fed41734f29784cc980"><code>0ca1617</code></a> Merge pull request <a href="https://redirect.github.com/actions/upload-pages-artifact/issues/137">#137</a> from jonchurch/include-hidden-files</li> <li><a href="https://github.com/actions/upload-pages-artifact/commit/57f0e8492b437b7818227931fef2faa1a379839b"><code>57f0e84</code></a> Update action.yml</li> <li><a href="https://github.com/actions/upload-pages-artifact/commit/4a90348b2933470dc78cec55534259872a6d3c0d"><code>4a90348</code></a> v7 --&gt; hash</li> <li><a href="https://github.com/actions/upload-pages-artifact/commit/56f665a6f297fa95f8d735b314187fb2d7764569"><code>56f665a</code></a> Update upload-artifact action to version 7</li> <li><a href="https://github.com/actions/upload-pages-artifact/commit/f7615f5917213b24245d49ba96693d0f5375a414"><code>f7615f5</code></a> Add <code>include-hidden-files</code> input</li> <li><a href="https://github.com/actions/upload-pages-artifact/commit/7b1f4a764d45c48632c6b24a0339c27f5614fb0b"><code>7b1f4a7</code></a> Merge pull request <a href="https://redirect.github.com/actions/upload-pages-artifact/issues/127">#127</a> from heavymachinery/pin-sha</li> <li><a href="https://github.com/actions/upload-pages-artifact/commit/4cc19c7d3f3e6c87c68366501382a03c8b1ba6db"><code>4cc19c7</code></a> Pin <code>actions/upload-artifact</code> to SHA</li> <li><a href="https://github.com/actions/upload-pages-artifact/commit/2d163be3ddce01512f3eea7ac5b7023b5d643ce1"><code>2d163be</code></a> Merge pull request <a href="https://redirect.github.com/actions/upload-pages-artifact/issues/107">#107</a> from KittyChiu/main</li> <li>Additional commits viewable in <a href="https://github.com/actions/upload-pages-artifact/compare/56afc609e74202658d3ffba0e8f6dda462b719fa...fc324d3547104276b827a68afc52ff2a11cc49c9">compare view</a></li> </ul> </details> <br /> Updates `actions/deploy-pages` from 4.0.5 to 5.0.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/deploy-pages/releases">actions/deploy-pages's releases</a>.</em></p> <blockquote> <h2>v5.0.0</h2> <h1>Changelog</h1> <ul> <li>Update Node.js version to 24.x <a href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> (<a href="https://redirect.github.com/actions/deploy-pages/issues/404">#404</a>)</li> <li>Add workflow file for publishing releases to immutable action package <a href="https://github.com/Jcambass"><code>@​Jcambass</code></a> (<a href="https://redirect.github.com/actions/deploy-pages/issues/374">#374</a>)</li> <li>Bump braces from 3.0.2 to 3.0.3 in the npm_and_yarn group across 1 directory <a href="https://github.com/dependabot"><code>@​dependabot</code></a> (<a href="https://redirect.github.com/actions/deploy-pages/issues/360">#360</a>)</li> <li>Make the rebuild dist workflow work nicer with Dependabot <a href="https://github.com/yoannchaudet"><code>@​yoannchaudet</code></a> (<a href="https://redirect.github.com/actions/deploy-pages/issues/361">#361</a>)</li> <li>Bump the non-breaking-changes group across 1 directory with 3 updates <a href="https://github.com/dependabot"><code>@​dependabot</code></a> (<a href="https://redirect.github.com/actions/deploy-pages/issues/358">#358</a>)</li> <li>Delete repeated sentence <a href="https://github.com/garethsb"><code>@​garethsb</code></a> (<a href="https://redirect.github.com/actions/deploy-pages/issues/359">#359</a>)</li> <li>Update README.md <a href="https://github.com/tsusdere"><code>@​tsusdere</code></a> (<a href="https://redirect.github.com/actions/deploy-pages/issues/348">#348</a>)</li> <li>Bump the non-breaking-changes group with 4 updates <a href="https://github.com/dependabot"><code>@​dependabot</code></a> (<a href="https://redirect.github.com/actions/deploy-pages/issues/341">#341</a>)</li> <li>Remove error message for file permissions <a href="https://github.com/TooManyBees"><code>@​TooManyBees</code></a> (<a href="https://redirect.github.com/actions/deploy-pages/issues/340">#340</a>)</li> </ul> <hr /> <p>See details of <a href="https://github.com/actions/deploy-pages/compare/v4.0.5...v4.0.6">all code changes</a> since previous release.</p> <p>:warning: For use with products other than GitHub.com, such as GitHub Enterprise Server, please consult the <a href="https://github.com/actions/deploy-pages/#compatibility">compatibility table</a>.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/actions/deploy-pages/commit/cd2ce8fcbc39b97be8ca5fce6e763baed58fa128"><code>cd2ce8f</code></a> Merge pull request <a href="https://redirect.github.com/actions/deploy-pages/issues/404">#404</a> from salmanmkc/node24</li> <li><a href="https://github.com/actions/deploy-pages/commit/bbe2a950ee52d4f5cbe74e6d9d6a8803676e91d5"><code>bbe2a95</code></a> Update Node.js version to 24.x</li> <li><a href="https://github.com/actions/deploy-pages/commit/854d7aa1b99e4509c4d1b53d69b7ba4eaf39215a"><code>854d7aa</code></a> Merge pull request <a href="https://redirect.github.com/actions/deploy-pages/issues/374">#374</a> from actions/Jcambass-patch-1</li> <li><a href="https://github.com/actions/deploy-pages/commit/306bb814f29679fd12f0e4b0014bc1f3a7e7f4bc"><code>306bb81</code></a> Add workflow file for publishing releases to immutable action package</li> <li><a href="https://github.com/actions/deploy-pages/commit/b74272834adc04f971da4b0b055c49fa8d7f90c9"><code>b742728</code></a> Merge pull request <a href="https://redirect.github.com/actions/deploy-pages/issues/360">#360</a> from actions/dependabot/npm_and_yarn/npm_and_yarn-513...</li> <li><a href="https://github.com/actions/deploy-pages/commit/72732942c639e67ea3f70165fd2e012dd6d95027"><code>7273294</code></a> Bump braces in the npm_and_yarn group across 1 directory</li> <li><a href="https://github.com/actions/deploy-pages/commit/963791f01c40ef3eff219c255dbfb97a6f2c9f87"><code>963791f</code></a> Merge pull request <a href="https://redirect.github.com/actions/deploy-pages/issues/361">#361</a> from actions/dependabot-friendly</li> <li><a href="https://github.com/actions/deploy-pages/commit/51bb29d9d7bfe15d731c4957ce1887b5ae8c6727"><code>51bb29d</code></a> Make the rebuild dist workflow safer for Dependabot</li> <li><a href="https://github.com/actions/deploy-pages/commit/89f3d10406f57ee86e6517a982b3fb0438bd6dc5"><code>89f3d10</code></a> Merge pull request <a href="https://redirect.github.com/actions/deploy-pages/issues/358">#358</a> from actions/dependabot/npm_and_yarn/non-breaking-cha...</li> <li><a href="https://github.com/actions/deploy-pages/commit/bce735589bbbfa569f1d2ac003277b590d743e4c"><code>bce7355</code></a> Merge branch 'main' into dependabot/npm_and_yarn/non-breaking-changes-99c12deb21</li> <li>Additional commits viewable in <a href="https://github.com/actions/deploy-pages/compare/d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e...cd2ce8fcbc39b97be8ca5fce6e763baed58fa128">compare view</a></li> </ul> </details> <br /> Updates `denoland/setup-deno` from 1.0.0 to 2.0.4 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/denoland/setup-deno/releases">denoland/setup-deno's releases</a>.</em></p> <blockquote> <h2>v2.0.4</h2> <p><strong>Full Changelog</strong>: <a href="https://github.com/denoland/setup-deno/compare/v2.0.3...v2.0.4">https://github.com/denoland/setup-deno/compare/v2.0.3...v2.0.4</a></p> <h2>v2.0.3</h2> <p><strong>Full Changelog</strong>: <a href="https://github.com/denoland/setup-deno/compare/v2.0.2...v2.0.3">https://github.com/denoland/setup-deno/compare/v2.0.2...v2.0.3</a></p> <h2>v2.0.2</h2> <h2>What's Changed</h2> <ul> <li>feat: add problem matchers for <code>deno lint</code> by <a href="https://github.com/r7kamura"><code>@​r7kamura</code></a> in <a href="https://redirect.github.com/denoland/setup-deno/pull/62">denoland/setup-deno#62</a></li> <li>refactor: use GitHub downloads for stable version download by <a href="https://github.com/crowlKats"><code>@​crowlKats</code></a> in <a href="https://redirect.github.com/denoland/setup-deno/pull/91">denoland/setup-deno#91</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/denoland/setup-deno/compare/v2.0.1...v2.0.2">https://github.com/denoland/setup-deno/compare/v2.0.1...v2.0.2</a></p> <h2>v2.0.1</h2> <h2>What's Changed</h2> <ul> <li>fix: update README and tests by <a href="https://github.com/crowlKats"><code>@​crowlKats</code></a> in <a href="https://redirect.github.com/denoland/setup-deno/pull/85">denoland/setup-deno#85</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/denoland/setup-deno/compare/v2.0.0...v2.0.1">https://github.com/denoland/setup-deno/compare/v2.0.0...v2.0.1</a></p> <h2>v2.0.0</h2> <h2>What's Changed</h2> <ul> <li>feat: v2 by <a href="https://github.com/lucacasonato"><code>@​lucacasonato</code></a> in <a href="https://redirect.github.com/denoland/setup-deno/pull/82">denoland/setup-deno#82</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/denoland/setup-deno/compare/v1.5.1...v2.0.0">https://github.com/denoland/setup-deno/compare/v1.5.1...v2.0.0</a></p> <h2>v1.5.2</h2> <h2>What's Changed</h2> <ul> <li>refactor: use GitHub downloads for stable version download by <a href="https://github.com/crowlKats"><code>@​crowlKats</code></a> in <a href="https://redirect.github.com/denoland/setup-deno/pull/91">denoland/setup-deno#91</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/denoland/setup-deno/compare/v1.5.1...v1.5.2">https://github.com/denoland/setup-deno/compare/v1.5.1...v1.5.2</a></p> <h2>v1.5.1</h2> <h2>What's Changed</h2> <ul> <li>fix: use npm install by <a href="https://github.com/lucacasonato"><code>@​lucacasonato</code></a> in <a href="https://redirect.github.com/denoland/setup-deno/pull/77">denoland/setup-deno#77</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/denoland/setup-deno/compare/v1.5.0...v1.5.1">https://github.com/denoland/setup-deno/compare/v1.5.0...v1.5.1</a></p> <h2>v1.5.0</h2> <h2>What's Changed</h2> <ul> <li>feat: allow specifying binary name by <a href="https://github.com/crowlKats"><code>@​crowlKats</code></a> in <a href="https://redirect.github.com/denoland/setup-deno/pull/71">denoland/setup-deno#71</a></li> <li>feat: support installing rc versions by <a href="https://github.com/crowlKats"><code>@​crowlKats</code></a> in <a href="https://redirect.github.com/denoland/setup-deno/pull/72">denoland/setup-deno#72</a></li> <li>chore: migrate code to ESM by <a href="https://github.com/lucacasonato"><code>@​lucacasonato</code></a> in <a href="https://redirect.github.com/denoland/setup-deno/pull/73">denoland/setup-deno#73</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/denoland/setup-deno/compare/v1.4.1...v1.5.0">https://github.com/denoland/setup-deno/compare/v1.4.1...v1.5.0</a></p> <h2>1.4.1</h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/denoland/setup-deno/commit/667a34cdef165d8d2b2e98dde39547c9daac7282"><code>667a34c</code></a> 2.0.3</li> <li><a href="https://github.com/denoland/setup-deno/commit/3f17b4e9156a7762ddcff9c97f41217f12ed5047"><code>3f17b4e</code></a> feat: upgrade Node.js runtime from node20 to node24 (<a href="https://redirect.github.com/denoland/setup-deno/issues/123">#123</a>)</li> <li><a href="https://github.com/denoland/setup-deno/commit/06fd750fca5cde5a8d8ae60d85614e2840305115"><code>06fd750</code></a> docs: fix identifier for latest stable release (<a href="https://redirect.github.com/denoland/setup-deno/issues/115">#115</a>)</li> <li><a href="https://github.com/denoland/setup-deno/commit/587bed9d927e7d0f1e0f2035d2373e5380c12745"><code>587bed9</code></a> docs: condense Deno version information in one section (<a href="https://redirect.github.com/denoland/setup-deno/issues/100">#100</a>)</li> <li><a href="https://github.com/denoland/setup-deno/commit/2af9d572ecb33c0f706444d1fd39c4755620bbc0"><code>2af9d57</code></a> docs: add lts as possible release-channel output (<a href="https://redirect.github.com/denoland/setup-deno/issues/99">#99</a>)</li> <li><a href="https://github.com/denoland/setup-deno/commit/0c3e771df3d4a9d8f267ad527ae73a67e27c42e4"><code>0c3e771</code></a> Update actions/checkout (<a href="https://redirect.github.com/denoland/setup-deno/issues/106">#106</a>)</li> <li><a href="https://github.com/denoland/setup-deno/commit/e95548e56dfa95d4e1a28d6f422fafe75c4c26fb"><code>e95548e</code></a> 2.0.3 (<a href="https://redirect.github.com/denoland/setup-deno/issues/102">#102</a>)</li> <li><a href="https://github.com/denoland/setup-deno/commit/8273ddd773c0c6d98f36a2090d9a7ee53dbf3fab"><code>8273ddd</code></a> fix: switch back to package.json as it's necessary for GH actions (<a href="https://redirect.github.com/denoland/setup-deno/issues/101">#101</a>)</li> <li><a href="https://github.com/denoland/setup-deno/commit/609c0055983975d562c8554cc38ee754969f9287"><code>609c005</code></a> feat: include a hash of deno.lock files in the cache key automatically (<a href="https://redirect.github.com/denoland/setup-deno/issues/98">#98</a>)</li> <li><a href="https://github.com/denoland/setup-deno/commit/aa0fea114b8b900f9aee1f5c4558935c601c17ee"><code>aa0fea1</code></a> feat: add built-in caching via inputs (<a href="https://redirect.github.com/denoland/setup-deno/issues/89">#89</a>)</li> <li>Additional commits viewable in <a href="https://github.com/denoland/setup-deno/compare/4a4e59637fa62bd6c086a216c7e4c5b457ea9e79...667a34cdef165d8d2b2e98dde39547c9daac7282">compare view</a></li> </ul> </details> <br /> Updates `cachix/install-nix-action` from 24 to 31 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/cachix/install-nix-action/releases">cachix/install-nix-action's releases</a>.</em></p> <blockquote> <h2>v31</h2> <p>Starting with v31, this action will use semantic versioning for releases. Major tags, like v31, will be bumped to point to the latest minor/patch release. This is in line with how most GitHub actions manage releases.</p> <h2>What's Changed</h2> <ul> <li> <p>nix: 2.26.3 -&gt; 2.28.2 by <a href="https://github.com/Mic92"><code>@​Mic92</code></a> in <a href="https://redirect.github.com/cachix/install-nix-action/pull/232">cachix/install-nix-action#232</a></p> </li> <li> <p>nix: 2.24.9 -&gt; 2.25.2 by <a href="https://github.com/Mic92"><code>@​Mic92</code></a> in <a href="https://redirect.github.com/cachix/install-nix-action/pull/218">cachix/install-nix-action#218</a></p> </li> <li> <p>ci: fix latest installer tests by <a href="https://github.com/sandydoo"><code>@​sandydoo</code></a> in <a href="https://redirect.github.com/cachix/install-nix-action/pull/220">cachix/install-nix-action#220</a></p> </li> <li> <p>ci: add ubuntu-24.04-arm to matrix by <a href="https://github.com/msgilligan"><code>@​msgilligan</code></a> in <a href="https://redirect.github.com/cachix/install-nix-action/pull/221">cachix/install-nix-action#221</a></p> </li> <li> <p>nix: 2.25.2 -&gt; 2.26.2 by <a href="https://github.com/Mic92"><code>@​Mic92</code></a> in <a href="https://redirect.github.com/cachix/install-nix-action/pull/226">cachix/install-nix-action#226</a></p> </li> <li> <p>nix: 2.26.2 -&gt; 2.26.3 by <a href="https://github.com/sandydoo"><code>@​sandydoo</code></a> in <a href="https://redirect.github.com/cachix/install-nix-action/pull/228">cachix/install-nix-action#228</a></p> </li> <li> <p>feat: Pin actions to hashes by <a href="https://github.com/l0b0"><code>@​l0b0</code></a> in <a href="https://redirect.github.com/cachix/install-nix-action/pull/201">cachix/install-nix-action#201</a></p> </li> <li> <p>chore(deps): bump actions/checkout from 4.1.1 to 4.2.2 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/cachix/install-nix-action/pull/234">cachix/install-nix-action#234</a></p> </li> <li> <p>docs: document how to provide AWS credentials to the nix-daemon by <a href="https://github.com/sandydoo"><code>@​sandydoo</code></a> in <a href="https://redirect.github.com/cachix/install-nix-action/pull/235">cachix/install-nix-action#235</a></p> </li> <li> <p>nix: 2.28.2 -&gt; 2.28.3 by <a href="https://github.com/Mic92"><code>@​Mic92</code></a> in <a href="https://redirect.github.com/cachix/install-nix-action/pull/236">cachix/install-nix-action#236</a></p> </li> <li> <p>nix: 2.28.3 -&gt; 2.29.0 by <a href="https://github.com/Mic92"><code>@​Mic92</code></a> in <a href="https://redirect.github.com/cachix/install-nix-action/pull/239">cachix/install-nix-action#239</a> Release notes: <a href="https://nix.dev/manual/nix/latest/release-notes/rl-2.29">https://nix.dev/manual/nix/latest/release-notes/rl-2.29</a></p> </li> <li> <p>Automate nix updates in CI by <a href="https://github.com/Mic92"><code>@​Mic92</code></a> in <a href="https://redirect.github.com/cachix/install-nix-action/pull/241">cachix/install-nix-action#241</a></p> </li> <li> <p>nix: 2.29.0 -&gt; 2.29.1 by <a href="https://github.com/github-actions"><code>@​github-actions</code></a> in <a href="https://redirect.github.com/cachix/install-nix-action/pull/243">cachix/install-nix-action#243</a> <strong>[SECURITY]</strong> <a href="https://discourse.nixos.org/t/security-advisory-privilege-escalations-in-nix-lix-and-guix/66017">https://discourse.nixos.org/t/security-advisory-privilege-escalations-in-nix-lix-and-guix/66017</a></p> </li> <li> <p>nix: 2.29.1 -&gt; 2.30.0 by <a href="https://github.com/github-actions"><code>@​github-actions</code></a> in <a href="https://redirect.github.com/cachix/install-nix-action/pull/244">cachix/install-nix-action#244</a> Release notes: <a href="https://nix.dev/manual/nix/2.30/release-notes/rl-2.30.html">https://nix.dev/manual/nix/2.30/release-notes/rl-2.30.html</a></p> </li> <li> <p>nix: 2.30.0 -&gt; 2.30.1 by <a href="https://github.com/xokdvium"><code>@​xokdvium</code></a> in <a href="https://redirect.github.com/cachix/install-nix-action/pull/245">cachix/install-nix-action#245</a> <strong>[SECURITY]</strong> Builds with Nix 2.30.0 on macOS were executed with elevated privileges (root), instead of the build users. <a href="https://github.com/NixOS/nix/security/advisories/GHSA-qc7j-jgf3-qmhg">https://github.com/NixOS/nix/security/advisories/GHSA-qc7j-jgf3-qmhg</a></p> </li> <li> <p>docs: add example for <code>nix develop</code> by <a href="https://github.com/jennydaman"><code>@​jennydaman</code></a> in <a href="https://redirect.github.com/cachix/install-nix-action/pull/248">cachix/install-nix-action#248</a></p> </li> <li> <p>nix: 2.30.2 -&gt; 2.31.0 by <a href="https://github.com/github-actions"><code>@​github-actions</code></a>[bot] in <a href="https://redirect.github.com/cachix/install-nix-action/pull/250">cachix/install-nix-action#250</a> Release notes: <a href="https://discourse.nixos.org/t/nix-2-31-0-released/68465">https://discourse.nixos.org/t/nix-2-31-0-released/68465</a></p> </li> <li> <p>nix: 2.31.0 -&gt; 2.31.1 by <a href="https://github.com/github-actions"><code>@​github-actions</code></a>[bot] in <a href="https://redirect.github.com/cachix/install-nix-action/pull/253">cachix/install-nix-action#253</a></p> </li> <li> <p>nix: 2.31.1 -&gt; 2.31.2 by <a href="https://github.com/github-actions"><code>@​github-actions</code></a>[bot] in <a href="https://redirect.github.com/cachix/install-nix-action/pull/256">cachix/install-nix-action#256</a></p> </li> <li> <p>feat: set up the environment based on the installer shell scripts by <a href="https://github.com/sandydoo"><code>@​sandydoo</code></a> in <a href="https://redirect.github.com/cachix/install-nix-action/pull/251">cachix/install-nix-action#251</a> Adds the bin directory from the user's profile to <code>$PATH</code>. Configures the following environment variables:</p> <ul> <li><code>NIX_PROFILES</code></li> <li><code>NIX_SSL_CERT_FILE</code> (if not set)</li> </ul> </li> <li> <p>nix: 2.31.2 -&gt; 2.32.0 by <a href="https://github.com/github-actions"><code>@​github-actions</code></a>[bot] in <a href="https://redirect.github.com/cachix/install-nix-action/pull/257">cachix/install-nix-action#257</a> Release notes: <a href="https://discourse.nixos.org/t/nix-2-32-0-released/70528">https://discourse.nixos.org/t/nix-2-32-0-released/70528</a></p> </li> <li> <p>nix: 2.32.0 -&gt; 2.32.1 by <a href="https://github.com/github-actions"><code>@​github-actions</code></a>[bot] in <a href="https://redirect.github.com/cachix/install-nix-action/pull/258">cachix/install-nix-action#258</a></p> </li> <li> <p>nix: 2.32.1 -&gt; 2.32.2 by <a href="https://github.com/github-actions"><code>@​github-actions</code></a>[bot] in <a href="https://redirect.github.com/cachix/install-nix-action/pull/259">cachix/install-nix-action#259</a></p> </li> <li> <p>nix: 2.32.2 -&gt; 2.32.3 by <a href="https://github.com/github-actions"><code>@​github-actions</code></a>[bot] in <a href="https://redirect.github.com/cachix/install-nix-action/pull/260">cachix/install-nix-action#260</a></p> </li> <li> <p>nix: 2.32.3 -&gt; 2.32.4 by <a href="https://github.com/github-actions"><code>@​github-actions</code></a>[bot] in <a href="https://redirect.github.com/cachix/install-nix-action/pull/261">cachix/install-nix-action#261</a></p> </li> <li> <p>nix: 2.32.4 -&gt; 2.33.0 by <a href="https://github.com/github-actions"><code>@​github-actions</code></a>[bot] in <a href="https://redirect.github.com/cachix/install-nix-action/pull/264">cachix/install-nix-action#264</a></p> </li> <li> <p>nix: 2.33.0 -&gt; 2.33.3 by <a href="https://github.com/github-actions"><code>@​github-actions</code></a>[bot] in <a href="https://redirect.github.com/cachix/install-nix-action/pull/266">cachix/install-nix-action#266</a></p> </li> <li> <p><del>nix: 2.33.3 -&gt; 2.34.0 by <a href="https://github.com/github-actions"><code>@​github-actions</code></a>[bot] in <a href="https://redirect.github.com/cachix/install-nix-action/pull/267">cachix/install-nix-action#267</a> Release notes: <a href="https://discourse.nixos.org/t/nix-2-34-0-released/75818">https://discourse.nixos.org/t/nix-2-34-0-released/75818</a></del> <strong>Rolled back due to reports of issues with cachix-action</strong></p> </li> <li> <p>nix: 2.34.0 -&gt; 2.34.1 by <a href="https://github.com/github-actions"><code>@​github-actions</code></a>[bot] in <a href="https://redirect.github.com/cachix/install-nix-action/pull/269">cachix/install-nix-action#269</a> Fixes a bug introduced in 2.34.0 that made the Nix daemon fail to load authentication keys configured by <code>cachix-action</code>.</p> </li> <li> <p>nix: 2.34.1 -&gt; 2.34.2 by <a href="https://github.com/github-actions"><code>@​github-actions</code></a>[bot] in <a href="https://redirect.github.com/cachix/install-nix-action/pull/270">cachix/install-nix-action#270</a></p> </li> <li> <p>nix: 2.34.2 -&gt; 2.34.4 by <a href="https://github.com/github-actions"><code>@​github-actions</code></a>[bot] in <a href="https://redirect.github.com/cachix/install-nix-action/pull/271">cachix/install-nix-action#271</a></p> </li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/cachix/install-nix-action/blob/master/RELEASE.md">cachix/install-nix-action's changelog</a>.</em></p> <blockquote> <h1>Release</h1> <p>As of v31, releases of this action follow Semantic Versioning.</p> <h3>Publishing a new release</h3> <h4>Publish the release</h4> <p>Draft <a href="https://github.com/cachix/install-nix-action/releases">a new release on GitHub</a>:</p> <ul> <li>In <code>Choose a tag</code>, create a new tag, like <code>v31.2.1</code>, following semver.</li> <li>Click <code>Generate release notes</code>.</li> <li><code>Set as the latest release</code> should be selected automatically.</li> <li>Publish release</li> </ul> <h4>Update the major tag</h4> <p>The major tag, like <code>v31</code>, allows downstream users to opt-in to automatic non-breaking updates.</p> <p>This process follows GitHub's own guidelines: <a href="https://github.com/actions/toolkit/blob/main/docs/action-versioning.md">https://github.com/actions/toolkit/blob/main/docs/action-versioning.md</a></p> <h5>Fetch the latest tags</h5> <pre><code>git pull --tags --force </code></pre> <h5>Move the tag</h5> <pre><code>git tag -fa v31 </code></pre> <pre><code>git push origin v31 --force </code></pre> <h4>Update the release notes for the major tag</h4> <p>Find the release on GitHub: <a href="https://github.com/cachix/install-nix-action/releases">https://github.com/cachix/install-nix-action/releases</a></p> <p>Edit the release and click <code>Generate release notes</code>. Edit the formatting and publish.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/cachix/install-nix-action/commit/8aa03977d8d733052d78f4e008a241fd1dbf36b3"><code>8aa0397</code></a> Merge pull request <a href="https://redirect.github.com/cachix/install-nix-action/issues/275">#275</a> from cachix/create-pull-request/patch</li> <li><a href="https://github.com/cachix/install-nix-action/commit/21d0b780f08a47ae2baf9814c722ef3884db92aa"><code>21d0b78</code></a> nix: 2.34.6 -&gt; 2.34.7</li> <li><a href="https://github.com/cachix/install-nix-action/commit/ab739621df7a23f52766f9ccc97f38da6b7af14f"><code>ab73962</code></a> Merge pull request <a href="https://redirect.github.com/cachix/install-nix-action/issues/274">#274</a> from cachix/create-pull-request/patch</li> <li><a href="https://github.com/cachix/install-nix-action/commit/41e4d4a5ae81b05c01f2e2e77bfbf2fe219b53c1"><code>41e4d4a</code></a> nix: 2.34.5 -&gt; 2.34.6</li> <li><a href="https://github.com/cachix/install-nix-action/commit/616559265b40713947b9c190a8ff4b507b5df49b"><code>6165592</code></a> Merge pull request <a href="https://redirect.github.com/cachix/install-nix-action/issues/273">#273</a> from cachix/create-pull-request/patch</li> <li><a href="https://github.com/cachix/install-nix-action/commit/b9f700df68e7810cde515c356dcf7787c9c7737d"><code>b9f700d</code></a> nix: 2.34.4 -&gt; 2.34.5</li> <li><a href="https://github.com/cachix/install-nix-action/commit/96951a368ba55167b55f1c916f7d416bac6505fe"><code>96951a3</code></a> Merge pull request <a href="https://redirect.github.com/cachix/install-nix-action/issues/271">#271</a> from cachix/create-pull-request/patch</li> <li><a href="https://github.com/cachix/install-nix-action/commit/62811694457f97eeef0c40b184d0a791495b3825"><code>6281169</code></a> nix: 2.34.2 -&gt; 2.34.4</li> <li><a href="https://github.com/cachix/install-nix-action/commit/51f3067b56fe8ae331890c77d4e454f6d60615ff"><code>51f3067</code></a> Revert &quot;ci: use 25.11 for channel tests&quot;</li> <li><a href="https://github.com/cachix/install-nix-action/commit/15118c17f94ae94b32a2a51839986d18c508f12f"><code>15118c1</code></a> ci: use 25.11 for channel tests</li> <li>Additional commits viewable in <a href="https://github.com/cachix/install-nix-action/compare/7ac1ec25491415c381d9b62f0657c7a028df52a7...8aa03977d8d733052d78f4e008a241fd1dbf36b3">compare view</a></li> </ul> </details> <br /> Updates `peaceiris/actions-gh-pages` from 3.9.3 to 4.1.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/peaceiris/actions-gh-pages/releases">peaceiris/actions-gh-pages's releases</a>.</em></p> <blockquote> <h2>actions-github-pages v4.1.0</h2> <p>See <a href="https://github.com/peaceiris/actions-gh-pages/blob/v4.1.0/CHANGELOG.md">CHANGELOG.md</a> for more details.</p> <h2>What's Changed</h2> <ul> <li>Actions examples: update to modern versions of actions by <a href="https://github.com/clintonsteiner"><code>@​clintonsteiner</code></a> in <a href="https://redirect.github.com/peaceiris/actions-gh-pages/pull/1117">peaceiris/actions-gh-pages#1117</a></li> <li>chore: update Node runtime and dependencies by <a href="https://github.com/peaceiris"><code>@​peaceiris</code></a> in <a href="https://redirect.github.com/peaceiris/actions-gh-pages/pull/1147">peaceiris/actions-gh-pages#1147</a></li> <li>ci: harden GitHub Actions workflows by <a href="https://github.com/peaceiris"><code>@​peaceiris</code></a> in <a href="https://redirect.github.com/peaceiris/actions-gh-pages/pull/1156">peaceiris/actions-gh-pages#1156</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/clintonsteiner"><code>@​clintonsteiner</code></a> made their first contribution in <a href="https://redirect.github.com/peaceiris/actions-gh-pages/pull/1117">peaceiris/actions-gh-pages#1117</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/peaceiris/actions-gh-pages/compare/v4.0.0...v4.1.0">https://github.com/peaceiris/actions-gh-pages/compare/v4.0.0...v4.1.0</a></p> <h2>actions-github-pages v4.0.0</h2> <p>See <a href="https://github.com/peaceiris/actions-gh-pages/blob/v4.0…
1 parent f6f9fba commit 9ccb9a1

11 files changed

Lines changed: 56 additions & 56 deletions

‎.github/workflows/boj-build.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -9,7 +9,7 @@ jobs:
99
runs-on: ubuntu-latest
1010
steps:
1111
- name: Checkout
12-
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
12+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
1313
- name: Trigger BoJ Server (Casket/ssg-mcp)
1414
run: |
1515
# Send a secure trigger to boj-server to build this repository

‎.github/workflows/casket-pages.yml‎

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -20,22 +20,22 @@ jobs:
2020
runs-on: ubuntu-latest
2121
steps:
2222
- name: Checkout
23-
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
23+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
2424

2525
- name: Checkout casket-ssg
26-
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
26+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
2727
with:
2828
repository: hyperpolymath/casket-ssg
2929
path: .casket-ssg
3030

3131
- name: Setup GHCup
32-
uses: haskell-actions/setup@ec49483bfc012387b227434aba94f59a6ecd0900 # v2
32+
uses: haskell-actions/setup@cd0d9bdd65b20557f41bea4dbe43d0b5fbbfe553 # v2
3333
with:
3434
ghc-version: '9.8.2'
3535
cabal-version: '3.10'
3636

3737
- name: Cache Cabal
38-
uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
38+
uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
3939
with:
4040
path: |
4141
~/.cabal/packages
@@ -97,10 +97,10 @@ jobs:
9797
touch ../_site/.nojekyll
9898
9999
- name: Setup Pages
100-
uses: actions/configure-pages@983d7736d9b0ae728b81ab479565c72886d7745b # v5
100+
uses: actions/configure-pages@45bfe0192ca1faeb007ade9deae92b16b8254a0d # v6.0.0
101101

102102
- name: Upload artifact
103-
uses: actions/upload-pages-artifact@56afc609e74202658d3ffba0e8f6dda462b719fa # v3
103+
uses: actions/upload-pages-artifact@fc324d3547104276b827a68afc52ff2a11cc49c9 # v5.0.0
104104
with:
105105
path: '_site'
106106

@@ -113,4 +113,4 @@ jobs:
113113
steps:
114114
- name: Deploy to GitHub Pages
115115
id: deployment
116-
uses: actions/deploy-pages@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e # v4
116+
uses: actions/deploy-pages@cd2ce8fcbc39b97be8ca5fce6e763baed58fa128 # v5.0.0

‎.github/workflows/ci-extended.yml‎

Lines changed: 19 additions & 19 deletions
Original file line numberDiff line numberDiff line change
@@ -17,10 +17,10 @@ jobs:
1717
name: RSR Framework Verification
1818
runs-on: ubuntu-latest
1919
steps:
20-
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
20+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
2121

2222
- name: Setup Deno
23-
uses: denoland/setup-deno@4a4e59637fa62bd6c086a216c7e4c5b457ea9e79 # v1
23+
uses: denoland/setup-deno@667a34cdef165d8d2b2e98dde39547c9daac7282 # v1
2424
with:
2525
deno-version: v1.x
2626

@@ -56,10 +56,10 @@ jobs:
5656
os: [ubuntu-latest, macos-latest, windows-latest]
5757
deno: ['1.x', 'canary']
5858
steps:
59-
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
59+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
6060

6161
- name: Setup Deno
62-
uses: denoland/setup-deno@4a4e59637fa62bd6c086a216c7e4c5b457ea9e79 # v1
62+
uses: denoland/setup-deno@667a34cdef165d8d2b2e98dde39547c9daac7282 # v1
6363
with:
6464
deno-version: ${{ matrix.deno }}
6565

@@ -73,10 +73,10 @@ jobs:
7373
name: Security Audit
7474
runs-on: ubuntu-latest
7575
steps:
76-
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
76+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
7777

7878
- name: Setup Deno
79-
uses: denoland/setup-deno@4a4e59637fa62bd6c086a216c7e4c5b457ea9e79 # v1
79+
uses: denoland/setup-deno@667a34cdef165d8d2b2e98dde39547c9daac7282 # v1
8080

8181
- name: Generate SBOM
8282
run: |
@@ -98,10 +98,10 @@ jobs:
9898
name: Offline-First Verification
9999
runs-on: ubuntu-latest
100100
steps:
101-
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
101+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
102102

103103
- name: Setup Deno
104-
uses: denoland/setup-deno@4a4e59637fa62bd6c086a216c7e4c5b457ea9e79 # v1
104+
uses: denoland/setup-deno@667a34cdef165d8d2b2e98dde39547c9daac7282 # v1
105105

106106
- name: Test Offline Mode
107107
run: |
@@ -119,10 +119,10 @@ jobs:
119119
name: Nix Reproducible Build
120120
runs-on: ubuntu-latest
121121
steps:
122-
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
122+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
123123

124124
- name: Install Nix
125-
uses: cachix/install-nix-action@7ac1ec25491415c381d9b62f0657c7a028df52a7 # v24
125+
uses: cachix/install-nix-action@8aa03977d8d733052d78f4e008a241fd1dbf36b3 # v31.10.6
126126
with:
127127
nix_path: nixpkgs=channel:nixos-unstable
128128

@@ -136,7 +136,7 @@ jobs:
136136
name: Build Documentation
137137
runs-on: ubuntu-latest
138138
steps:
139-
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
139+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
140140

141141
- name: Setup Node
142142
uses: actions/setup-node@49933ea5288caeca8642195f2b846b8bbe245a93 # v4
@@ -151,7 +151,7 @@ jobs:
151151

152152
- name: Deploy to GitHub Pages
153153
if: github.ref == 'refs/heads/main'
154-
uses: peaceiris/actions-gh-pages@373f7f263a76c20808c831209c920827a82a2847 # v3
154+
uses: peaceiris/actions-gh-pages@84c30a85c19949d7eee79c4ff27748b70285e453 # v4.1.0
155155
with:
156156
github_token: ${{ secrets.GITHUB_TOKEN }}
157157
publish_dir: ./docs/api
@@ -160,10 +160,10 @@ jobs:
160160
name: Performance Benchmarks
161161
runs-on: ubuntu-latest
162162
steps:
163-
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
163+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
164164

165165
- name: Setup Deno
166-
uses: denoland/setup-deno@4a4e59637fa62bd6c086a216c7e4c5b457ea9e79 # v1
166+
uses: denoland/setup-deno@667a34cdef165d8d2b2e98dde39547c9daac7282 # v1
167167

168168
- name: Run Benchmarks
169169
run: deno bench --allow-all benches/
@@ -175,30 +175,30 @@ jobs:
175175
id-token: write
176176
contents: read
177177
steps:
178-
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
178+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
179179

180180
- name: Setup Deno
181-
uses: denoland/setup-deno@4a4e59637fa62bd6c086a216c7e4c5b457ea9e79 # v1
181+
uses: denoland/setup-deno@667a34cdef165d8d2b2e98dde39547c9daac7282 # v1
182182

183183
- name: Build
184184
run: deno run --allow-all build.ts
185185

186186
- name: Generate Provenance
187-
uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@07e64b653f10a80b6510f4568f685f8b7b9ea830 # v1.9.0
187+
uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@f7dd8c54c2067bafc12ca7a55595d5ee9b75204a # v2.1.0
188188
with:
189189
artifacts: dist/
190190

191191
container-scan:
192192
name: Container Security Scan
193193
runs-on: ubuntu-latest
194194
steps:
195-
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
195+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
196196

197197
- name: Build Docker Image
198198
run: docker build -t preference-injector:${{ github.sha }} .
199199

200200
- name: Run Trivy Scanner
201-
uses: aquasecurity/trivy-action@57a97c7e7821a5776cebc9bb87c984fa69cba8f1 # master
201+
uses: aquasecurity/trivy-action@ed142fd0673e97e23eac54620cfb913e5ce36c25 # master
202202
with:
203203
image-ref: preference-injector:${{ github.sha }}
204204
format: 'sarif'

‎.github/workflows/ci.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -19,7 +19,7 @@ jobs:
1919
node-version: [16.x, 18.x, 20.x]
2020

2121
steps:
22-
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
22+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
2323

2424
- name: Use Node.js ${{ matrix.node-version }}
2525
uses: actions/setup-node@49933ea5288caeca8642195f2b846b8bbe245a93 # v4
@@ -46,7 +46,7 @@ jobs:
4646
runs-on: ubuntu-latest
4747

4848
steps:
49-
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
49+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
5050

5151
- name: Use Node.js
5252
uses: actions/setup-node@49933ea5288caeca8642195f2b846b8bbe245a93 # v4
@@ -61,7 +61,7 @@ jobs:
6161
run: npm run test:coverage
6262

6363
- name: Upload coverage to Codecov
64-
uses: codecov/codecov-action@ab904c41d6ece82784817410c45d8b8c02684457 # v3
64+
uses: codecov/codecov-action@e79a6962e0d4c0c17b229090214935d2e33f8354 # v6.0.1
6565
with:
6666
files: ./coverage/lcov.info
6767
flags: unittests

‎.github/workflows/dogfood-gate.yml‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -25,7 +25,7 @@ jobs:
2525

2626
steps:
2727
- name: Checkout repository
28-
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
28+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
2929

3030
- name: Check for A2ML files
3131
id: detect
@@ -69,7 +69,7 @@ jobs:
6969

7070
steps:
7171
- name: Checkout repository
72-
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
72+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
7373

7474
- name: Check for K9 files
7575
id: detect
@@ -118,7 +118,7 @@ jobs:
118118

119119
steps:
120120
- name: Checkout repository
121-
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
121+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
122122

123123
- name: Scan for invisible characters
124124
id: lint
@@ -182,7 +182,7 @@ jobs:
182182

183183
steps:
184184
- name: Checkout repository
185-
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
185+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
186186

187187
- name: Check for Groove manifest
188188
id: groove
@@ -242,7 +242,7 @@ jobs:
242242

243243
steps:
244244
- name: Checkout repository
245-
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
245+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
246246

247247
- name: Generate dogfooding scorecard
248248
run: |

‎.github/workflows/hypatia-scan.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -381,7 +381,7 @@ jobs:
381381
# the pull-requests: write permission above: a token/API hiccup or
382382
# a fork PR (read-only token) skips the comment, not the check.
383383
continue-on-error: true
384-
uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v7
384+
uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v7
385385
with:
386386
script: |
387387
const fs = require('fs');

‎.github/workflows/instant-sync.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -16,7 +16,7 @@ jobs:
1616
runs-on: ubuntu-latest
1717
steps:
1818
- name: Trigger Propagation
19-
uses: peter-evans/repository-dispatch@ff45666b9427631e3450c54a1bcbee4d9ff4d7c0 # v3
19+
uses: peter-evans/repository-dispatch@28959ce8df70de7be546dd1250a005dd32156697 # v4.0.1
2020
with:
2121
token: ${{ secrets.FARM_DISPATCH_TOKEN }}
2222
repository: hyperpolymath/.git-private-farm

‎.github/workflows/mirror.yml‎

Lines changed: 13 additions & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -15,11 +15,11 @@ jobs:
1515
runs-on: ubuntu-latest
1616
if: vars.GITLAB_MIRROR_ENABLED == 'true'
1717
steps:
18-
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
18+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
1919
with:
2020
fetch-depth: 0
2121

22-
- uses: webfactory/ssh-agent@dc588b651fe13675774614f8e6a936a468676387 # v0.9.0
22+
- uses: webfactory/ssh-agent@e83874834305fe9a4a2997156cb26c5de65a8555 # v0.10.0
2323
with:
2424
ssh-private-key: ${{ secrets.GITLAB_SSH_KEY }}
2525

@@ -33,11 +33,11 @@ jobs:
3333
runs-on: ubuntu-latest
3434
if: vars.BITBUCKET_MIRROR_ENABLED == 'true'
3535
steps:
36-
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
36+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
3737
with:
3838
fetch-depth: 0
3939

40-
- uses: webfactory/ssh-agent@dc588b651fe13675774614f8e6a936a468676387 # v0.9.0
40+
- uses: webfactory/ssh-agent@e83874834305fe9a4a2997156cb26c5de65a8555 # v0.10.0
4141
with:
4242
ssh-private-key: ${{ secrets.BITBUCKET_SSH_KEY }}
4343

@@ -51,11 +51,11 @@ jobs:
5151
runs-on: ubuntu-latest
5252
if: vars.CODEBERG_MIRROR_ENABLED == 'true'
5353
steps:
54-
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
54+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
5555
with:
5656
fetch-depth: 0
5757

58-
- uses: webfactory/ssh-agent@dc588b651fe13675774614f8e6a936a468676387 # v0.9.0
58+
- uses: webfactory/ssh-agent@e83874834305fe9a4a2997156cb26c5de65a8555 # v0.10.0
5959
with:
6060
ssh-private-key: ${{ secrets.CODEBERG_SSH_KEY }}
6161

@@ -69,11 +69,11 @@ jobs:
6969
runs-on: ubuntu-latest
7070
if: vars.SOURCEHUT_MIRROR_ENABLED == 'true'
7171
steps:
72-
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
72+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
7373
with:
7474
fetch-depth: 0
7575

76-
- uses: webfactory/ssh-agent@dc588b651fe13675774614f8e6a936a468676387 # v0.9.0
76+
- uses: webfactory/ssh-agent@e83874834305fe9a4a2997156cb26c5de65a8555 # v0.10.0
7777
with:
7878
ssh-private-key: ${{ secrets.SOURCEHUT_SSH_KEY }}
7979

@@ -87,11 +87,11 @@ jobs:
8787
runs-on: ubuntu-latest
8888
if: vars.DISROOT_MIRROR_ENABLED == 'true'
8989
steps:
90-
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
90+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
9191
with:
9292
fetch-depth: 0
9393

94-
- uses: webfactory/ssh-agent@dc588b651fe13675774614f8e6a936a468676387 # v0.9.0
94+
- uses: webfactory/ssh-agent@e83874834305fe9a4a2997156cb26c5de65a8555 # v0.10.0
9595
with:
9696
ssh-private-key: ${{ secrets.DISROOT_SSH_KEY }}
9797

@@ -105,11 +105,11 @@ jobs:
105105
runs-on: ubuntu-latest
106106
if: vars.GITEA_MIRROR_ENABLED == 'true'
107107
steps:
108-
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
108+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
109109
with:
110110
fetch-depth: 0
111111

112-
- uses: webfactory/ssh-agent@dc588b651fe13675774614f8e6a936a468676387 # v0.9.0
112+
- uses: webfactory/ssh-agent@e83874834305fe9a4a2997156cb26c5de65a8555 # v0.10.0
113113
with:
114114
ssh-private-key: ${{ secrets.GITEA_SSH_KEY }}
115115

@@ -123,7 +123,7 @@ jobs:
123123
runs-on: ubuntu-latest
124124
if: vars.RADICLE_MIRROR_ENABLED == 'true'
125125
steps:
126-
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
126+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
127127
with:
128128
fetch-depth: 0
129129

‎.github/workflows/publish.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@ jobs:
1313
runs-on: ubuntu-latest
1414

1515
steps:
16-
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
16+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
1717

1818
- name: Setup Node.js
1919
uses: actions/setup-node@49933ea5288caeca8642195f2b846b8bbe245a93 # v4

0 commit comments

Comments
 (0)