Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): bump prettier from 2.8.0 to 3.3.3 #480

Merged
merged 2 commits into from
Jul 18, 2024

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jul 15, 2024

Bumps prettier from 2.8.0 to 3.3.3.

Release notes

Sourced from prettier's releases.

3.3.3

🔗 Changelog

3.3.2

🔗 Changelog

3.3.1

🔗 Changelog

3.3.0

diff

🔗 Release note

3.2.5

🔗 Changelog

3.2.4

  • Fix .eslintrc.json format #15947

🔗 Changelog

3.2.3

  • Format tsconfig.json file with jsonc parser #15927

🔗 Changelog

3.2.2

🔗 Changelog

3.2.1

🔗 Changelog

3.2.0

diff

🔗 Release note

3.1.1

🔗 Changelog

3.1.0

diff

🔗 Release note

3.0.3

🔗 Changelog

3.0.2

... (truncated)

Changelog

Sourced from prettier's changelog.

3.3.3

diff

Add parentheses for nullish coalescing in ternary (#16391 by @​cdignam-segment)

This change adds clarity to operator precedence.

// Input
foo ? bar ?? foo : baz;
foo ?? bar ? a : b;
a ? b : foo ?? bar;
// Prettier 3.3.2
foo ? bar ?? foo : baz;
foo ?? bar ? a : b;
a ? b : foo ?? bar;
// Prettier 3.3.3
foo ? (bar ?? foo) : baz;
(foo ?? bar) ? a : b;
a ? b : (foo ?? bar);

Add parentheses for decorator expressions (#16458 by @​y-schneider)

Prevent parentheses around member expressions or tagged template literals from being removed to follow the stricter parsing rules of TypeScript 5.5.

// Input
@(foo`tagged template`)
class X {}
// Prettier 3.3.2
@​footagged template
class X {}
// Prettier 3.3.3
@(footagged template)
class X {}

Support @let declaration syntax (#16474 by @​sosukesuzuki)

Adds support for Angular v18 @let declaration syntax.

Please see the following code example. The @let declaration allows you to define local variables within the template:

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jul 15, 2024
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/prettier-3.3.3 branch 2 times, most recently from 3127a6a to 9a6fbca Compare July 16, 2024 22:09
Bumps [prettier](https://github.com/prettier/prettier) from 2.8.0 to 3.3.3.
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@2.8.0...3.3.3)

---
updated-dependencies:
- dependency-name: prettier
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/prettier-3.3.3 branch from 9a6fbca to 75e098c Compare July 17, 2024 18:15
@chenrui333 chenrui333 added the help wanted Extra attention is needed label Jul 17, 2024
Signed-off-by: Rui Chen <rui@chenrui.dev>
@chenrui333 chenrui333 removed the help wanted Extra attention is needed label Jul 18, 2024
@chenrui333 chenrui333 changed the title Bump prettier from 2.8.0 to 3.3.3 chore: Bump prettier from 2.8.0 to 3.3.3 Jul 18, 2024
@chenrui333 chenrui333 changed the title chore: Bump prettier from 2.8.0 to 3.3.3 chore(deps): bump prettier from 2.8.0 to 3.3.3 Jul 18, 2024
@chenrui333 chenrui333 merged commit 25849b1 into master Jul 18, 2024
2 checks passed
@chenrui333 chenrui333 deleted the dependabot/npm_and_yarn/prettier-3.3.3 branch July 18, 2024 20:05
rpdelaney added a commit to rpdelaney/downforeveryone that referenced this pull request Jul 18, 2024
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[softprops/action-gh-release](https://togithub.com/softprops/action-gh-release)
| action | patch | `v2.0.6` -> `v2.0.8` |

---

### Release Notes

<details>
<summary>softprops/action-gh-release
(softprops/action-gh-release)</summary>

###
[`v2.0.8`](https://togithub.com/softprops/action-gh-release/releases/tag/v2.0.8)

[Compare
Source](https://togithub.com/softprops/action-gh-release/compare/v2.0.7...v2.0.8)

<!-- Release notes generated using configuration in .github/release.yml
at master -->

#### What's Changed

##### Other Changes 🔄

- chore(deps): bump prettier from 2.8.0 to 3.3.3 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[softprops/action-gh-release#480
- chore(deps): bump
[@&#8203;types/node](https://togithub.com/types/node) from 20.14.9 to
20.14.11 by [@&#8203;dependabot](https://togithub.com/dependabot) in
[softprops/action-gh-release#483
- chore(deps): bump
[@&#8203;octokit/plugin-throttling](https://togithub.com/octokit/plugin-throttling)
from 9.3.0 to 9.3.1 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[softprops/action-gh-release#484
- chore(deps): bump glob from 10.4.2 to 11.0.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[softprops/action-gh-release#477
- refactor: write jest config in ts by
[@&#8203;chenrui333](https://togithub.com/chenrui333) in
[softprops/action-gh-release#485
- chore(deps): bump
[@&#8203;actions/github](https://togithub.com/actions/github) from 5.1.1
to 6.0.0 by [@&#8203;dependabot](https://togithub.com/dependabot) in
[softprops/action-gh-release#470

**Full Changelog**:
softprops/action-gh-release@v2...v2.0.8

###
[`v2.0.7`](https://togithub.com/softprops/action-gh-release/releases/tag/v2.0.7)

[Compare
Source](https://togithub.com/softprops/action-gh-release/compare/v2.0.6...v2.0.7)

<!-- Release notes generated using configuration in .github/release.yml
at master -->

#### What's Changed

##### Bug fixes 🐛

- Fix missing update release body by
[@&#8203;FirelightFlagboy](https://togithub.com/FirelightFlagboy) in
[softprops/action-gh-release#365

##### Other Changes 🔄

- Bump
[@&#8203;octokit/plugin-retry](https://togithub.com/octokit/plugin-retry)
from 4.0.3 to 7.1.1 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[softprops/action-gh-release#443
- Bump typescript from 4.9.5 to 5.5.2 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[softprops/action-gh-release#467
- Bump [@&#8203;types/node](https://togithub.com/types/node) from
20.14.6 to 20.14.8 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[softprops/action-gh-release#469
- Bump [@&#8203;types/node](https://togithub.com/types/node) from
20.14.8 to 20.14.9 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[softprops/action-gh-release#473
- Bump typescript from 5.5.2 to 5.5.3 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[softprops/action-gh-release#472
- Bump ts-jest from 29.1.5 to 29.2.2 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[softprops/action-gh-release#479
- docs: document that existing releases are updated by
[@&#8203;jvanbruegge](https://togithub.com/jvanbruegge) in
[softprops/action-gh-release#474

#### New Contributors

- [@&#8203;jvanbruegge](https://togithub.com/jvanbruegge) made their
first contribution in
[softprops/action-gh-release#474
- [@&#8203;FirelightFlagboy](https://togithub.com/FirelightFlagboy) made
their first contribution in
[softprops/action-gh-release#365

**Full Changelog**:
softprops/action-gh-release@v2.0.6...v2.0.7

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/rpdelaney/downforeveryone).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy40MzEuNCIsInVwZGF0ZWRJblZlciI6IjM3LjQzMS40IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiXX0=-->
cgrindel-self-hosted-renovate bot added a commit to cgrindel/renovate-bot that referenced this pull request Jul 19, 2024
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[softprops/action-gh-release](https://togithub.com/softprops/action-gh-release)
| action | patch | `v2.0.7` -> `v2.0.8` |

---

### Release Notes

<details>
<summary>softprops/action-gh-release
(softprops/action-gh-release)</summary>

###
[`v2.0.8`](https://togithub.com/softprops/action-gh-release/releases/tag/v2.0.8)

[Compare
Source](https://togithub.com/softprops/action-gh-release/compare/v2.0.7...v2.0.8)

<!-- Release notes generated using configuration in .github/release.yml
at master -->

#### What's Changed

##### Other Changes 🔄

- chore(deps): bump prettier from 2.8.0 to 3.3.3 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[softprops/action-gh-release#480
- chore(deps): bump
[@&#8203;types/node](https://togithub.com/types/node) from 20.14.9 to
20.14.11 by [@&#8203;dependabot](https://togithub.com/dependabot) in
[softprops/action-gh-release#483
- chore(deps): bump
[@&#8203;octokit/plugin-throttling](https://togithub.com/octokit/plugin-throttling)
from 9.3.0 to 9.3.1 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[softprops/action-gh-release#484
- chore(deps): bump glob from 10.4.2 to 11.0.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[softprops/action-gh-release#477
- refactor: write jest config in ts by
[@&#8203;chenrui333](https://togithub.com/chenrui333) in
[softprops/action-gh-release#485
- chore(deps): bump
[@&#8203;actions/github](https://togithub.com/actions/github) from 5.1.1
to 6.0.0 by [@&#8203;dependabot](https://togithub.com/dependabot) in
[softprops/action-gh-release#470

**Full Changelog**:
softprops/action-gh-release@v2...v2.0.8

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config help](https://togithub.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://togithub.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNi4xMDkuNCIsInVwZGF0ZWRJblZlciI6IjM2LjEwOS40IiwidGFyZ2V0QnJhbmNoIjoibWFpbiJ9-->

Co-authored-by: Self-hosted Renovate Bot <361546+cgrindel-self-hosted-renovate[bot]@users.noreply.github.enterprise.com>
mergify bot pushed a commit to andrzejressel/pulumi-wasm that referenced this pull request Jul 19, 2024
[![Mend Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [softprops/action-gh-release](https://togithub.com/softprops/action-gh-release) | action | patch | `v2.0.7` -> `v2.0.8` |

---

### Release Notes

<details>
<summary>softprops/action-gh-release (softprops/action-gh-release)</summary>

### [`v2.0.8`](https://togithub.com/softprops/action-gh-release/releases/tag/v2.0.8)

[Compare Source](https://togithub.com/softprops/action-gh-release/compare/v2.0.7...v2.0.8)



#### What's Changed

##### Other Changes 🔄

-   chore(deps): bump prettier from 2.8.0 to 3.3.3 by [@&#8203;dependabot](https://togithub.com/dependabot) in [softprops/action-gh-release#480
-   chore(deps): bump [@&#8203;types/node](https://togithub.com/types/node) from 20.14.9 to 20.14.11 by [@&#8203;dependabot](https://togithub.com/dependabot) in [softprops/action-gh-release#483
-   chore(deps): bump [@&#8203;octokit/plugin-throttling](https://togithub.com/octokit/plugin-throttling) from 9.3.0 to 9.3.1 by [@&#8203;dependabot](https://togithub.com/dependabot) in [softprops/action-gh-release#484
-   chore(deps): bump glob from 10.4.2 to 11.0.0 by [@&#8203;dependabot](https://togithub.com/dependabot) in [softprops/action-gh-release#477
-   refactor: write jest config in ts by [@&#8203;chenrui333](https://togithub.com/chenrui333) in [softprops/action-gh-release#485
-   chore(deps): bump [@&#8203;actions/github](https://togithub.com/actions/github) from 5.1.1 to 6.0.0 by [@&#8203;dependabot](https://togithub.com/dependabot) in [softprops/action-gh-release#470

**Full Changelog**: softprops/action-gh-release@v2...v2.0.8

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://developer.mend.io/github/andrzejressel/pulumi-wasm).
ramonpetgrave64 pushed a commit to slsa-framework/slsa-github-generator that referenced this pull request Aug 2, 2024
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| actions/checkout | action | digest | `692973e` -> `9a9194f` |
|
[actions/download-artifact](https://togithub.com/actions/download-artifact)
| action | patch | `v4.1.7` -> `v4.1.8` |
| [actions/setup-go](https://togithub.com/actions/setup-go) | action |
patch | `v5.0.1` -> `v5.0.2` |
| [actions/setup-node](https://togithub.com/actions/setup-node) | action
| patch | `v4.0.2` -> `v4.0.3` |
| [actions/setup-node](https://togithub.com/actions/setup-node) | action
| digest | `60edb5d` -> `1e60f62` |
|
[actions/upload-artifact](https://togithub.com/actions/upload-artifact)
| action | patch | `v4.3.3` -> `v4.3.5` |
| [github/codeql-action](https://togithub.com/github/codeql-action) |
action | patch | `v3.25.11` -> `v3.25.15` |
|
[gradle/gradle-build-action](https://togithub.com/gradle/gradle-build-action)
| action | minor | `v3.4.2` -> `v3.5.0` |
| [ossf/scorecard-action](https://togithub.com/ossf/scorecard-action) |
action | minor | `v2.3.3` -> `v2.4.0` |
|
[softprops/action-gh-release](https://togithub.com/softprops/action-gh-release)
| action | patch | `v2.0.6` -> `v2.0.8` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>actions/download-artifact (actions/download-artifact)</summary>

###
[`v4.1.8`](https://togithub.com/actions/download-artifact/releases/tag/v4.1.8)

[Compare
Source](https://togithub.com/actions/download-artifact/compare/v4.1.7...v4.1.8)

#### What's Changed

- Update
[@&#8203;actions/artifact](https://togithub.com/actions/artifact)
version, bump dependencies by
[@&#8203;robherley](https://togithub.com/robherley) in
[actions/download-artifact#341

**Full Changelog**:
actions/download-artifact@v4...v4.1.8

</details>

<details>
<summary>actions/setup-go (actions/setup-go)</summary>

###
[`v5.0.2`](https://togithub.com/actions/setup-go/compare/v5.0.1...v5.0.2)

[Compare
Source](https://togithub.com/actions/setup-go/compare/v5.0.1...v5.0.2)

</details>

<details>
<summary>actions/setup-node (actions/setup-node)</summary>

###
[`v4.0.3`](https://togithub.com/actions/setup-node/compare/v4.0.2...v4.0.3)

[Compare
Source](https://togithub.com/actions/setup-node/compare/v4.0.2...v4.0.3)

</details>

<details>
<summary>actions/upload-artifact (actions/upload-artifact)</summary>

###
[`v4.3.5`](https://togithub.com/actions/upload-artifact/compare/v4.3.4...v4.3.5)

[Compare
Source](https://togithub.com/actions/upload-artifact/compare/v4.3.4...v4.3.5)

###
[`v4.3.4`](https://togithub.com/actions/upload-artifact/releases/tag/v4.3.4)

[Compare
Source](https://togithub.com/actions/upload-artifact/compare/v4.3.3...v4.3.4)

##### What's Changed

- Update
[@&#8203;actions/artifact](https://togithub.com/actions/artifact)
version, bump dependencies by
[@&#8203;robherley](https://togithub.com/robherley) in
[actions/upload-artifact#584

**Full Changelog**:
actions/upload-artifact@v4.3.3...v4.3.4

</details>

<details>
<summary>github/codeql-action (github/codeql-action)</summary>

###
[`v3.25.15`](https://togithub.com/github/codeql-action/compare/v3.25.14...v3.25.15)

[Compare
Source](https://togithub.com/github/codeql-action/compare/v3.25.14...v3.25.15)

###
[`v3.25.14`](https://togithub.com/github/codeql-action/compare/v3.25.13...v3.25.14)

[Compare
Source](https://togithub.com/github/codeql-action/compare/v3.25.13...v3.25.14)

###
[`v3.25.13`](https://togithub.com/github/codeql-action/compare/v3.25.12...v3.25.13)

[Compare
Source](https://togithub.com/github/codeql-action/compare/v3.25.12...v3.25.13)

###
[`v3.25.12`](https://togithub.com/github/codeql-action/compare/v3.25.11...v3.25.12)

[Compare
Source](https://togithub.com/github/codeql-action/compare/v3.25.11...v3.25.12)

</details>

<details>
<summary>gradle/gradle-build-action
(gradle/gradle-build-action)</summary>

###
[`v3.5.0`](https://togithub.com/gradle/gradle-build-action/releases/tag/v3.5.0)

[Compare
Source](https://togithub.com/gradle/gradle-build-action/compare/v3.4.2...v3.5.0)

> \[!IMPORTANT]
> As of `v3` this action has been superceded by
`gradle/actions/setup-gradle`.
> Any workflow that uses `gradle/gradle-build-action@v3` will
transparently delegate to `gradle/actions/setup-gradle@v3`.
>
> Users are encouraged to update their workflows, replacing:
>
>     uses: gradle/gradle-build-action@v3
>
> with
>
>     uses: gradle/actions/setup-gradle@v3
>
> See the [setup-gradle
documentation](https://togithub.com/gradle/actions/tree/main/setup-gradle)
for up-to-date documentation for `gradle/actions/setup-gradle`.

For release details, see
https://github.com/gradle/actions/releases/tag/v3.5.0

</details>

<details>
<summary>ossf/scorecard-action (ossf/scorecard-action)</summary>

###
[`v2.4.0`](https://togithub.com/ossf/scorecard-action/releases/tag/v2.4.0)

[Compare
Source](https://togithub.com/ossf/scorecard-action/compare/v2.3.3...v2.4.0)

#### What's Changed

This update bumps the Scorecard version to the v5 release. For a
complete list of changes, please refer to the [v5.0.0 release
notes](https://togithub.com/ossf/scorecard/releases/tag/v5.0.0). Of
special note to Scorecard Action is the Maintainer Annotation feature,
which can be used to suppress some Code Scanning false positives. Alerts
will not be generated for any Scorecard Check with an annotation.

- 🌱 Bump github.com/ossf/scorecard/v5 from v5.0.0-rc2 to v5.0.0
by [@&#8203;spencerschrock](https://togithub.com/spencerschrock) in
[ossf/scorecard-action#1410
- 🐛 lower license sarif alert threshold to 9 by
[@&#8203;spencerschrock](https://togithub.com/spencerschrock) in
[ossf/scorecard-action#1411

##### Documentation

- docs: dogfooding badge by
[@&#8203;jkowalleck](https://togithub.com/jkowalleck) in
[ossf/scorecard-action#1399

#### New Contributors

- [@&#8203;jkowalleck](https://togithub.com/jkowalleck) made their first
contribution in
[ossf/scorecard-action#1399

**Full Changelog**:
ossf/scorecard-action@v2.3.3...v2.4.0

</details>

<details>
<summary>softprops/action-gh-release
(softprops/action-gh-release)</summary>

###
[`v2.0.8`](https://togithub.com/softprops/action-gh-release/releases/tag/v2.0.8)

[Compare
Source](https://togithub.com/softprops/action-gh-release/compare/v2.0.7...v2.0.8)

<!-- Release notes generated using configuration in .github/release.yml
at master -->

#### What's Changed

##### Other Changes 🔄

- chore(deps): bump prettier from 2.8.0 to 3.3.3 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[softprops/action-gh-release#480
- chore(deps): bump
[@&#8203;types/node](https://togithub.com/types/node) from 20.14.9 to
20.14.11 by [@&#8203;dependabot](https://togithub.com/dependabot) in
[softprops/action-gh-release#483
- chore(deps): bump
[@&#8203;octokit/plugin-throttling](https://togithub.com/octokit/plugin-throttling)
from 9.3.0 to 9.3.1 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[softprops/action-gh-release#484
- chore(deps): bump glob from 10.4.2 to 11.0.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[softprops/action-gh-release#477
- refactor: write jest config in ts by
[@&#8203;chenrui333](https://togithub.com/chenrui333) in
[softprops/action-gh-release#485
- chore(deps): bump
[@&#8203;actions/github](https://togithub.com/actions/github) from 5.1.1
to 6.0.0 by [@&#8203;dependabot](https://togithub.com/dependabot) in
[softprops/action-gh-release#470

**Full Changelog**:
softprops/action-gh-release@v2...v2.0.8

###
[`v2.0.7`](https://togithub.com/softprops/action-gh-release/releases/tag/v2.0.7)

[Compare
Source](https://togithub.com/softprops/action-gh-release/compare/v2.0.6...v2.0.7)

<!-- Release notes generated using configuration in .github/release.yml
at master -->

#### What's Changed

##### Bug fixes 🐛

- Fix missing update release body by
[@&#8203;FirelightFlagboy](https://togithub.com/FirelightFlagboy) in
[softprops/action-gh-release#365

##### Other Changes 🔄

- Bump
[@&#8203;octokit/plugin-retry](https://togithub.com/octokit/plugin-retry)
from 4.0.3 to 7.1.1 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[softprops/action-gh-release#443
- Bump typescript from 4.9.5 to 5.5.2 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[softprops/action-gh-release#467
- Bump [@&#8203;types/node](https://togithub.com/types/node) from
20.14.6 to 20.14.8 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[softprops/action-gh-release#469
- Bump [@&#8203;types/node](https://togithub.com/types/node) from
20.14.8 to 20.14.9 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[softprops/action-gh-release#473
- Bump typescript from 5.5.2 to 5.5.3 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[softprops/action-gh-release#472
- Bump ts-jest from 29.1.5 to 29.2.2 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[softprops/action-gh-release#479
- docs: document that existing releases are updated by
[@&#8203;jvanbruegge](https://togithub.com/jvanbruegge) in
[softprops/action-gh-release#474

#### New Contributors

- [@&#8203;jvanbruegge](https://togithub.com/jvanbruegge) made their
first contribution in
[softprops/action-gh-release#474
- [@&#8203;FirelightFlagboy](https://togithub.com/FirelightFlagboy) made
their first contribution in
[softprops/action-gh-release#365

**Full Changelog**:
softprops/action-gh-release@v2.0.6...v2.0.7

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "before 4am on the first day of the
month" (UTC), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config help](https://togithub.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View the
[repository job
log](https://developer.mend.io/github/slsa-framework/slsa-github-generator).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy40NDAuNyIsInVwZGF0ZWRJblZlciI6IjM3LjQ0MC43IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Signed-off-by: Mend Renovate <bot@renovateapp.com>
ramonpetgrave64 pushed a commit to slsa-framework/slsa-github-generator that referenced this pull request Aug 16, 2024
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| actions/checkout | action | digest | `692973e` -> `9a9194f` |
|
[actions/download-artifact](https://togithub.com/actions/download-artifact)
| action | patch | `v4.1.7` -> `v4.1.8` |
| [actions/setup-go](https://togithub.com/actions/setup-go) | action |
patch | `v5.0.1` -> `v5.0.2` |
| [actions/setup-node](https://togithub.com/actions/setup-node) | action
| patch | `v4.0.2` -> `v4.0.3` |
| [actions/setup-node](https://togithub.com/actions/setup-node) | action
| digest | `60edb5d` -> `1e60f62` |
|
[actions/upload-artifact](https://togithub.com/actions/upload-artifact)
| action | patch | `v4.3.3` -> `v4.3.5` |
| [github/codeql-action](https://togithub.com/github/codeql-action) |
action | patch | `v3.25.11` -> `v3.25.15` |
|
[gradle/gradle-build-action](https://togithub.com/gradle/gradle-build-action)
| action | minor | `v3.4.2` -> `v3.5.0` |
| [ossf/scorecard-action](https://togithub.com/ossf/scorecard-action) |
action | minor | `v2.3.3` -> `v2.4.0` |
|
[softprops/action-gh-release](https://togithub.com/softprops/action-gh-release)
| action | patch | `v2.0.6` -> `v2.0.8` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>actions/download-artifact (actions/download-artifact)</summary>

###
[`v4.1.8`](https://togithub.com/actions/download-artifact/releases/tag/v4.1.8)

[Compare
Source](https://togithub.com/actions/download-artifact/compare/v4.1.7...v4.1.8)

#### What's Changed

- Update
[@&#8203;actions/artifact](https://togithub.com/actions/artifact)
version, bump dependencies by
[@&#8203;robherley](https://togithub.com/robherley) in
[actions/download-artifact#341

**Full Changelog**:
actions/download-artifact@v4...v4.1.8

</details>

<details>
<summary>actions/setup-go (actions/setup-go)</summary>

###
[`v5.0.2`](https://togithub.com/actions/setup-go/compare/v5.0.1...v5.0.2)

[Compare
Source](https://togithub.com/actions/setup-go/compare/v5.0.1...v5.0.2)

</details>

<details>
<summary>actions/setup-node (actions/setup-node)</summary>

###
[`v4.0.3`](https://togithub.com/actions/setup-node/compare/v4.0.2...v4.0.3)

[Compare
Source](https://togithub.com/actions/setup-node/compare/v4.0.2...v4.0.3)

</details>

<details>
<summary>actions/upload-artifact (actions/upload-artifact)</summary>

###
[`v4.3.5`](https://togithub.com/actions/upload-artifact/compare/v4.3.4...v4.3.5)

[Compare
Source](https://togithub.com/actions/upload-artifact/compare/v4.3.4...v4.3.5)

###
[`v4.3.4`](https://togithub.com/actions/upload-artifact/releases/tag/v4.3.4)

[Compare
Source](https://togithub.com/actions/upload-artifact/compare/v4.3.3...v4.3.4)

##### What's Changed

- Update
[@&#8203;actions/artifact](https://togithub.com/actions/artifact)
version, bump dependencies by
[@&#8203;robherley](https://togithub.com/robherley) in
[actions/upload-artifact#584

**Full Changelog**:
actions/upload-artifact@v4.3.3...v4.3.4

</details>

<details>
<summary>github/codeql-action (github/codeql-action)</summary>

###
[`v3.25.15`](https://togithub.com/github/codeql-action/compare/v3.25.14...v3.25.15)

[Compare
Source](https://togithub.com/github/codeql-action/compare/v3.25.14...v3.25.15)

###
[`v3.25.14`](https://togithub.com/github/codeql-action/compare/v3.25.13...v3.25.14)

[Compare
Source](https://togithub.com/github/codeql-action/compare/v3.25.13...v3.25.14)

###
[`v3.25.13`](https://togithub.com/github/codeql-action/compare/v3.25.12...v3.25.13)

[Compare
Source](https://togithub.com/github/codeql-action/compare/v3.25.12...v3.25.13)

###
[`v3.25.12`](https://togithub.com/github/codeql-action/compare/v3.25.11...v3.25.12)

[Compare
Source](https://togithub.com/github/codeql-action/compare/v3.25.11...v3.25.12)

</details>

<details>
<summary>gradle/gradle-build-action
(gradle/gradle-build-action)</summary>

###
[`v3.5.0`](https://togithub.com/gradle/gradle-build-action/releases/tag/v3.5.0)

[Compare
Source](https://togithub.com/gradle/gradle-build-action/compare/v3.4.2...v3.5.0)

> \[!IMPORTANT]
> As of `v3` this action has been superceded by
`gradle/actions/setup-gradle`.
> Any workflow that uses `gradle/gradle-build-action@v3` will
transparently delegate to `gradle/actions/setup-gradle@v3`.
>
> Users are encouraged to update their workflows, replacing:
>
>     uses: gradle/gradle-build-action@v3
>
> with
>
>     uses: gradle/actions/setup-gradle@v3
>
> See the [setup-gradle
documentation](https://togithub.com/gradle/actions/tree/main/setup-gradle)
for up-to-date documentation for `gradle/actions/setup-gradle`.

For release details, see
https://github.com/gradle/actions/releases/tag/v3.5.0

</details>

<details>
<summary>ossf/scorecard-action (ossf/scorecard-action)</summary>

###
[`v2.4.0`](https://togithub.com/ossf/scorecard-action/releases/tag/v2.4.0)

[Compare
Source](https://togithub.com/ossf/scorecard-action/compare/v2.3.3...v2.4.0)

#### What's Changed

This update bumps the Scorecard version to the v5 release. For a
complete list of changes, please refer to the [v5.0.0 release
notes](https://togithub.com/ossf/scorecard/releases/tag/v5.0.0). Of
special note to Scorecard Action is the Maintainer Annotation feature,
which can be used to suppress some Code Scanning false positives. Alerts
will not be generated for any Scorecard Check with an annotation.

- 🌱 Bump github.com/ossf/scorecard/v5 from v5.0.0-rc2 to v5.0.0
by [@&#8203;spencerschrock](https://togithub.com/spencerschrock) in
[ossf/scorecard-action#1410
- 🐛 lower license sarif alert threshold to 9 by
[@&#8203;spencerschrock](https://togithub.com/spencerschrock) in
[ossf/scorecard-action#1411

##### Documentation

- docs: dogfooding badge by
[@&#8203;jkowalleck](https://togithub.com/jkowalleck) in
[ossf/scorecard-action#1399

#### New Contributors

- [@&#8203;jkowalleck](https://togithub.com/jkowalleck) made their first
contribution in
[ossf/scorecard-action#1399

**Full Changelog**:
ossf/scorecard-action@v2.3.3...v2.4.0

</details>

<details>
<summary>softprops/action-gh-release
(softprops/action-gh-release)</summary>

###
[`v2.0.8`](https://togithub.com/softprops/action-gh-release/releases/tag/v2.0.8)

[Compare
Source](https://togithub.com/softprops/action-gh-release/compare/v2.0.7...v2.0.8)

<!-- Release notes generated using configuration in .github/release.yml
at master -->

#### What's Changed

##### Other Changes 🔄

- chore(deps): bump prettier from 2.8.0 to 3.3.3 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[softprops/action-gh-release#480
- chore(deps): bump
[@&#8203;types/node](https://togithub.com/types/node) from 20.14.9 to
20.14.11 by [@&#8203;dependabot](https://togithub.com/dependabot) in
[softprops/action-gh-release#483
- chore(deps): bump
[@&#8203;octokit/plugin-throttling](https://togithub.com/octokit/plugin-throttling)
from 9.3.0 to 9.3.1 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[softprops/action-gh-release#484
- chore(deps): bump glob from 10.4.2 to 11.0.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[softprops/action-gh-release#477
- refactor: write jest config in ts by
[@&#8203;chenrui333](https://togithub.com/chenrui333) in
[softprops/action-gh-release#485
- chore(deps): bump
[@&#8203;actions/github](https://togithub.com/actions/github) from 5.1.1
to 6.0.0 by [@&#8203;dependabot](https://togithub.com/dependabot) in
[softprops/action-gh-release#470

**Full Changelog**:
softprops/action-gh-release@v2...v2.0.8

###
[`v2.0.7`](https://togithub.com/softprops/action-gh-release/releases/tag/v2.0.7)

[Compare
Source](https://togithub.com/softprops/action-gh-release/compare/v2.0.6...v2.0.7)

<!-- Release notes generated using configuration in .github/release.yml
at master -->

#### What's Changed

##### Bug fixes 🐛

- Fix missing update release body by
[@&#8203;FirelightFlagboy](https://togithub.com/FirelightFlagboy) in
[softprops/action-gh-release#365

##### Other Changes 🔄

- Bump
[@&#8203;octokit/plugin-retry](https://togithub.com/octokit/plugin-retry)
from 4.0.3 to 7.1.1 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[softprops/action-gh-release#443
- Bump typescript from 4.9.5 to 5.5.2 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[softprops/action-gh-release#467
- Bump [@&#8203;types/node](https://togithub.com/types/node) from
20.14.6 to 20.14.8 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[softprops/action-gh-release#469
- Bump [@&#8203;types/node](https://togithub.com/types/node) from
20.14.8 to 20.14.9 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[softprops/action-gh-release#473
- Bump typescript from 5.5.2 to 5.5.3 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[softprops/action-gh-release#472
- Bump ts-jest from 29.1.5 to 29.2.2 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[softprops/action-gh-release#479
- docs: document that existing releases are updated by
[@&#8203;jvanbruegge](https://togithub.com/jvanbruegge) in
[softprops/action-gh-release#474

#### New Contributors

- [@&#8203;jvanbruegge](https://togithub.com/jvanbruegge) made their
first contribution in
[softprops/action-gh-release#474
- [@&#8203;FirelightFlagboy](https://togithub.com/FirelightFlagboy) made
their first contribution in
[softprops/action-gh-release#365

**Full Changelog**:
softprops/action-gh-release@v2.0.6...v2.0.7

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "before 4am on the first day of the
month" (UTC), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config help](https://togithub.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View the
[repository job
log](https://developer.mend.io/github/slsa-framework/slsa-github-generator).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy40NDAuNyIsInVwZGF0ZWRJblZlciI6IjM3LjQ0MC43IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Signed-off-by: Mend Renovate <bot@renovateapp.com>
Signed-off-by: Ramon Petgrave <ramon.petgrave64@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant