Skip to content
This repository has been archived by the owner on Feb 14, 2025. It is now read-only.

Commit

Permalink
chore(deps): bump the ci group with 10 updates (#185)
Browse files Browse the repository at this point in the history
Bumps the ci group with 10 updates:

| Package | From | To |
| --- | --- | --- |
|
[mercedesbenzio/detect-action](https://github.com/mercedesbenzio/detect-action)
| `1` | `2` |
| [actions/cache](https://github.com/actions/cache) | `3` | `4` |
|
[peter-evans/repository-dispatch](https://github.com/peter-evans/repository-dispatch)
| `2` | `3` |
|
[dcarbone/install-jq-action](https://github.com/dcarbone/install-jq-action)
| `2.1.0` | `3.0.1` |
|
[8BitJonny/gh-get-current-pr](https://github.com/8bitjonny/gh-get-current-pr)
| `2.2.0` | `3.0.0` |
|
[thollander/actions-comment-pull-request](https://github.com/thollander/actions-comment-pull-request)
| `2.4.3` | `3.0.1` |
|
[release-drafter/release-drafter](https://github.com/release-drafter/release-drafter)
| `5` | `6` |
| [anchore/sbom-action](https://github.com/anchore/sbom-action) |
`0.15.11` | `0.18.0` |
|
[sigstore/cosign-installer](https://github.com/sigstore/cosign-installer)
| `3.5.0` | `3.7.0` |
|
[goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action)
| `5` | `6` |

Updates `mercedesbenzio/detect-action` from 1 to 2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/mercedesbenzio/detect-action/releases">mercedesbenzio/detect-action's
releases</a>.</em></p>
<blockquote>
<h2>v2.0.0</h2>
<h2>What's Changed</h2>
<ul>
<li>feat!: update to node 20 by <a
href="https://github.com/tvcsantos"><code>@​tvcsantos</code></a> in <a
href="https://redirect.github.com/tvcsantos/detect-action/pull/17">tvcsantos/detect-action#17</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/tvcsantos/detect-action/compare/v1.5.0...v2.0.0">https://github.com/tvcsantos/detect-action/compare/v1.5.0...v2.0.0</a></p>
<h2>v1.5.0</h2>
<h2>What's Changed</h2>
<ul>
<li>feat: add support for custom PR comments by <a
href="https://github.com/tvcsantos"><code>@​tvcsantos</code></a> in <a
href="https://redirect.github.com/tvcsantos/detect-action/pull/16">tvcsantos/detect-action#16</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/tvcsantos/detect-action/compare/v1.4.1...v1.5.0">https://github.com/tvcsantos/detect-action/compare/v1.4.1...v1.5.0</a></p>
<h2>v1.4.1</h2>
<h2>What's Changed</h2>
<ul>
<li>feat: improve tool name on PR comment header by <a
href="https://github.com/tvcsantos"><code>@​tvcsantos</code></a> in <a
href="https://redirect.github.com/mercedesbenzio/detect-action/pull/13">mercedesbenzio/detect-action#13</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/mercedesbenzio/detect-action/compare/v1.4.0...v1.4.1">https://github.com/mercedesbenzio/detect-action/compare/v1.4.0...v1.4.1</a></p>
<h2>v1.4.0</h2>
<h2>What's Changed</h2>
<ul>
<li>feat: add tool name to PR comment header by <a
href="https://github.com/tvcsantos"><code>@​tvcsantos</code></a> in <a
href="https://redirect.github.com/mercedesbenzio/detect-action/pull/12">mercedesbenzio/detect-action#12</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/mercedesbenzio/detect-action/compare/v1.3.0...v1.4.0">https://github.com/mercedesbenzio/detect-action/compare/v1.3.0...v1.4.0</a></p>
<h2>v1.3.0</h2>
<h2>What's Changed</h2>
<ul>
<li>feat: add input to control PR comments on success by <a
href="https://github.com/tvcsantos"><code>@​tvcsantos</code></a> in <a
href="https://redirect.github.com/mercedesbenzio/detect-action/pull/11">mercedesbenzio/detect-action#11</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/mercedesbenzio/detect-action/compare/v1.2.0...v1.3.0">https://github.com/mercedesbenzio/detect-action/compare/v1.2.0...v1.3.0</a></p>
<h2>v1.2.0</h2>
<h2>What's Changed</h2>
<ul>
<li>build: update package version by <a
href="https://github.com/tvcsantos"><code>@​tvcsantos</code></a> in <a
href="https://redirect.github.com/mercedesbenzio/detect-action/pull/10">mercedesbenzio/detect-action#10</a></li>
<li>feat: improve debug log level and add fail-if-detect-fails by <a
href="https://github.com/tvcsantos"><code>@​tvcsantos</code></a> in <a
href="https://redirect.github.com/mercedesbenzio/detect-action/pull/9">mercedesbenzio/detect-action#9</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/mercedesbenzio/detect-action/compare/v1.1.0...v1.2.0">https://github.com/mercedesbenzio/detect-action/compare/v1.1.0...v1.2.0</a></p>
<h2>v1.1.0</h2>
<h2>What's Changed</h2>
<ul>
<li>feat: make detect-version optional by downloading latest by <a
href="https://github.com/tvcsantos"><code>@​tvcsantos</code></a> in <a
href="https://redirect.github.com/mercedesbenzio/detect-action/pull/8">mercedesbenzio/detect-action#8</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/mercedesbenzio/detect-action/compare/v1.0.0...v1.1.0">https://github.com/mercedesbenzio/detect-action/compare/v1.0.0...v1.1.0</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/tvcsantos/detect-action/blob/main/CHANGELOG.md">mercedesbenzio/detect-action's
changelog</a>.</em></p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/tvcsantos/detect-action/commit/c55c1119714aaebe245f46d809d8eda753e9cf8c"><code>c55c111</code></a>
build: update for release 2.0.2</li>
<li><a
href="https://github.com/tvcsantos/detect-action/commit/b25b75f216ad2e74eac74c8c9b551bfe82683fd5"><code>b25b75f</code></a>
fix: relocate where diagnostics are uploaded (<a
href="https://redirect.github.com/mercedesbenzio/detect-action/issues/19">#19</a>)</li>
<li><a
href="https://github.com/tvcsantos/detect-action/commit/2476d7cd798af116a5711098b07ad1e3b049a0d4"><code>2476d7c</code></a>
docs: update license to markdown version</li>
<li><a
href="https://github.com/tvcsantos/detect-action/commit/290ca631c9ea9607936e504fc65774b5b5572c9a"><code>290ca63</code></a>
fix: fix incompatible package <code>@​actions/artifact</code> (<a
href="https://redirect.github.com/mercedesbenzio/detect-action/issues/18">#18</a>)</li>
<li><a
href="https://github.com/tvcsantos/detect-action/commit/c5123b0dab544b59dec5231f1ec2bfefb8f1ec8a"><code>c5123b0</code></a>
feat!: update to node 20 (<a
href="https://redirect.github.com/mercedesbenzio/detect-action/issues/17">#17</a>)</li>
<li>See full diff in <a
href="https://github.com/mercedesbenzio/detect-action/compare/v1...v2">compare
view</a></li>
</ul>
</details>
<br />

Updates `actions/cache` from 3 to 4
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/cache/releases">actions/cache's
releases</a>.</em></p>
<blockquote>
<h2>v4.0.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Update action to node20 by <a
href="https://github.com/takost"><code>@​takost</code></a> in <a
href="https://redirect.github.com/actions/cache/pull/1284">actions/cache#1284</a></li>
<li>feat: save-always flag by <a
href="https://github.com/to-s"><code>@​to-s</code></a> in <a
href="https://redirect.github.com/actions/cache/pull/1242">actions/cache#1242</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/takost"><code>@​takost</code></a> made
their first contribution in <a
href="https://redirect.github.com/actions/cache/pull/1284">actions/cache#1284</a></li>
<li><a href="https://github.com/to-s"><code>@​to-s</code></a> made their
first contribution in <a
href="https://redirect.github.com/actions/cache/pull/1242">actions/cache#1242</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/cache/compare/v3...v4.0.0">https://github.com/actions/cache/compare/v3...v4.0.0</a></p>
<h2>v3.4.0</h2>
<h2>⚠️ Important Changes</h2>
<p>The cache backend service has been rewritten from the ground up for
improved performance and reliability. <a
href="https://github.com/actions/cache">actions/cache</a> now integrates
with the new cache service (v2) APIs.</p>
<p>The new service will gradually roll out as of <strong>February 1st,
2025</strong>. The legacy service will also be sunset on the same date.
Changes in these release are <strong>fully backward
compatible</strong>.</p>
<p><strong>We are deprecating some versions of this action</strong>. We
recommend upgrading to version <code>v4</code> or <code>v3</code> as
soon as possible before <strong>February 1st, 2025.</strong> (Upgrade
instructions below).</p>
<p>If you are using pinned SHAs, please use the SHAs of versions
<code>v4.2.0</code> or <code>v3.4.0</code></p>
<p>If you do not upgrade, all workflow runs using any of the deprecated
<a href="https://github.com/actions/cache">actions/cache</a> will
fail.</p>
<p>Upgrading to the recommended versions will not break your
workflows.</p>
<p>Read more about the change &amp; access the migration guide: <a
href="https://github.com/actions/cache/discussions/1510">reference to
the announcement</a>.</p>
<h3>Minor changes</h3>
<p>Minor and patch version updates for these dependencies:</p>
<ul>
<li><code>@​actions/core</code>: <code>1.11.1</code></li>
<li><code>@​actions/io</code>: <code>1.1.3</code></li>
<li><code>@​vercel/ncc</code>: <code>0.38.3</code></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/cache/compare/v3...v3.4.0">https://github.com/actions/cache/compare/v3...v3.4.0</a></p>
<h2>v3.3.3</h2>
<h2>What's Changed</h2>
<ul>
<li>Cache v3.3.3 by <a
href="https://github.com/robherley"><code>@​robherley</code></a> in <a
href="https://redirect.github.com/actions/cache/pull/1302">actions/cache#1302</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/robherley"><code>@​robherley</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/cache/pull/1302">actions/cache#1302</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/cache/compare/v3...v3.3.3">https://github.com/actions/cache/compare/v3...v3.3.3</a></p>
<h2>v3.3.2</h2>
<h2>What's Changed</h2>
<ul>
<li>Fixed readme with new segment timeout values by <a
href="https://github.com/kotewar"><code>@​kotewar</code></a> in <a
href="https://redirect.github.com/actions/cache/pull/1133">actions/cache#1133</a></li>
<li>Readme fixes by <a
href="https://github.com/kotewar"><code>@​kotewar</code></a> in <a
href="https://redirect.github.com/actions/cache/pull/1134">actions/cache#1134</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/actions/cache/blob/main/RELEASES.md">actions/cache's
changelog</a>.</em></p>
<blockquote>
<h1>Releases</h1>
<h3>4.2.0</h3>
<p>TLDR; The cache backend service has been rewritten from the ground up
for improved performance and reliability. <a
href="https://github.com/actions/cache">actions/cache</a> now integrates
with the new cache service (v2) APIs.</p>
<p>The new service will gradually roll out as of <strong>February 1st,
2025</strong>. The legacy service will also be sunset on the same date.
Changes in these release are <strong>fully backward
compatible</strong>.</p>
<p><strong>We are deprecating some versions of this action</strong>. We
recommend upgrading to version <code>v4</code> or <code>v3</code> as
soon as possible before <strong>February 1st, 2025.</strong> (Upgrade
instructions below).</p>
<p>If you are using pinned SHAs, please use the SHAs of versions
<code>v4.2.0</code> or <code>v3.4.0</code></p>
<p>If you do not upgrade, all workflow runs using any of the deprecated
<a href="https://github.com/actions/cache">actions/cache</a> will
fail.</p>
<p>Upgrading to the recommended versions will not break your
workflows.</p>
<h3>4.1.2</h3>
<ul>
<li>Add GitHub Enterprise Cloud instances hostname filters to inform API
endpoint choices - <a
href="https://redirect.github.com/actions/cache/pull/1474">#1474</a></li>
<li>Security fix: Bump braces from 3.0.2 to 3.0.3 - <a
href="https://redirect.github.com/actions/cache/pull/1475">#1475</a></li>
</ul>
<h3>4.1.1</h3>
<ul>
<li>Restore original behavior of <code>cache-hit</code> output - <a
href="https://redirect.github.com/actions/cache/pull/1467">#1467</a></li>
</ul>
<h3>4.1.0</h3>
<ul>
<li>Ensure <code>cache-hit</code> output is set when a cache is missed -
<a
href="https://redirect.github.com/actions/cache/pull/1404">#1404</a></li>
<li>Deprecate <code>save-always</code> input - <a
href="https://redirect.github.com/actions/cache/pull/1452">#1452</a></li>
</ul>
<h3>4.0.2</h3>
<ul>
<li>Fixed restore <code>fail-on-cache-miss</code> not working.</li>
</ul>
<h3>4.0.1</h3>
<ul>
<li>Updated <code>isGhes</code> check</li>
</ul>
<h3>4.0.0</h3>
<ul>
<li>Updated minimum runner version support from node 12 -&gt; node
20</li>
</ul>
<h3>3.4.0</h3>
<ul>
<li>Integrated with the new cache service (v2) APIs</li>
</ul>
<h3>3.3.3</h3>
<ul>
<li>Updates <code>@​actions/cache</code> to v3.2.3 to fix accidental
mutated path arguments to <code>getCacheVersion</code> <a
href="https://redirect.github.com/actions/toolkit/pull/1378">actions/toolkit#1378</a></li>
<li>Additional audit fixes of npm package(s)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/actions/cache/commit/1bd1e32a3bdc45362d1e726936510720a7c30a57"><code>1bd1e32</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/cache/issues/1509">#1509</a>
from actions/Link-/cache-4.2.0</li>
<li><a
href="https://github.com/actions/cache/commit/882d7ced4c9b8af53ed67bfa36ee600195e62940"><code>882d7ce</code></a>
Add 3.4.0 release notes</li>
<li><a
href="https://github.com/actions/cache/commit/f2695d7a42dd0d7ad21976ed7ab91dbdbc3c2216"><code>f2695d7</code></a>
Rerun CI</li>
<li><a
href="https://github.com/actions/cache/commit/f46ceeb60d3da27b7cbac269520a4b1bfb15f199"><code>f46ceeb</code></a>
Add licensed output</li>
<li><a
href="https://github.com/actions/cache/commit/e6f5858749f178cf4a01b0d777917ba913710560"><code>e6f5858</code></a>
Add lodash to list of reviewed licenses</li>
<li><a
href="https://github.com/actions/cache/commit/4ae6f21c0d820c73db2589af6983e001d8c19c1d"><code>4ae6f21</code></a>
Add reviewed licensed packages</li>
<li><a
href="https://github.com/actions/cache/commit/c16df86586baf94b0deaa873e22eb739c59e5b15"><code>c16df86</code></a>
Add licensed output</li>
<li><a
href="https://github.com/actions/cache/commit/b109c12f3bdd6fb6a7dd42b202df645243efbd2f"><code>b109c12</code></a>
Upgrade <code>@​actions/core</code> to 1.11.1 and other deps</li>
<li><a
href="https://github.com/actions/cache/commit/b7d227d702af06e6be1fa308c014252c10bbc267"><code>b7d227d</code></a>
Upgrade <code>@​vercel/ncc</code> to 0.38.3</li>
<li><a
href="https://github.com/actions/cache/commit/faf639248d95d2a6c5884b8e6588e233eb3b10a0"><code>faf6392</code></a>
Update RELEASES.md</li>
<li>Additional commits viewable in <a
href="https://github.com/actions/cache/compare/v3...v4">compare
view</a></li>
</ul>
</details>
<br />

Updates `peter-evans/repository-dispatch` from 2 to 3
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/peter-evans/repository-dispatch/releases">peter-evans/repository-dispatch's
releases</a>.</em></p>
<blockquote>
<h2>Repository Dispatch v3.0.0</h2>
<p>⚙️  Updated runtime to Node.js 20</p>
<ul>
<li>The action now requires a minimum version of <a
href="https://github.com/actions/runner/releases/tag/v2.308.0">v2.308.0</a>
for the Actions runner. Update self-hosted runners to v2.308.0 or later
to ensure compatibility.</li>
</ul>
<h2>What's Changed</h2>
<ul>
<li>Bump prettier to fix deps by <a
href="https://github.com/peter-evans"><code>@​peter-evans</code></a> in
<a
href="https://redirect.github.com/peter-evans/repository-dispatch/pull/255">peter-evans/repository-dispatch#255</a></li>
<li>build(deps-dev): bump <code>@​types/node</code> from 18.17.12 to
18.17.14 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/peter-evans/repository-dispatch/pull/257">peter-evans/repository-dispatch#257</a></li>
<li>build(deps-dev): bump <code>@​vercel/ncc</code> from 0.36.1 to
0.38.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/peter-evans/repository-dispatch/pull/258">peter-evans/repository-dispatch#258</a></li>
<li>build(deps): bump actions/checkout from 3 to 4 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/peter-evans/repository-dispatch/pull/259">peter-evans/repository-dispatch#259</a></li>
<li>build(deps-dev): bump <code>@​types/node</code> from 18.17.14 to
18.17.16 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/peter-evans/repository-dispatch/pull/261">peter-evans/repository-dispatch#261</a></li>
<li>build(deps): bump <code>@​actions/core</code> from 1.10.0 to 1.10.1
by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>
in <a
href="https://redirect.github.com/peter-evans/repository-dispatch/pull/262">peter-evans/repository-dispatch#262</a></li>
<li>build(deps-dev): bump jest-circus from 29.6.4 to 29.7.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/peter-evans/repository-dispatch/pull/263">peter-evans/repository-dispatch#263</a></li>
<li>build(deps-dev): bump eslint from 8.48.0 to 8.49.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/peter-evans/repository-dispatch/pull/264">peter-evans/repository-dispatch#264</a></li>
<li>Update distribution by <a
href="https://github.com/actions-bot"><code>@​actions-bot</code></a> in
<a
href="https://redirect.github.com/peter-evans/repository-dispatch/pull/265">peter-evans/repository-dispatch#265</a></li>
<li>build(deps-dev): bump <code>@​types/node</code> from 18.17.16 to
18.17.18 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/peter-evans/repository-dispatch/pull/266">peter-evans/repository-dispatch#266</a></li>
<li>build(deps-dev): bump eslint-plugin-github from 4.10.0 to 4.10.1 by
<a href="https://github.com/dependabot"><code>@​dependabot</code></a> in
<a
href="https://redirect.github.com/peter-evans/repository-dispatch/pull/267">peter-evans/repository-dispatch#267</a></li>
<li>build(deps-dev): bump <code>@​types/node</code> from 18.17.18 to
18.18.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/peter-evans/repository-dispatch/pull/268">peter-evans/repository-dispatch#268</a></li>
<li>build(deps-dev): bump eslint from 8.49.0 to 8.50.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/peter-evans/repository-dispatch/pull/269">peter-evans/repository-dispatch#269</a></li>
<li>build(deps-dev): bump <code>@​types/node</code> from 18.18.0 to
18.18.3 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/peter-evans/repository-dispatch/pull/271">peter-evans/repository-dispatch#271</a></li>
<li>build(deps-dev): bump eslint-plugin-prettier from 5.0.0 to 5.0.1 by
<a href="https://github.com/dependabot"><code>@​dependabot</code></a> in
<a
href="https://redirect.github.com/peter-evans/repository-dispatch/pull/275">peter-evans/repository-dispatch#275</a></li>
<li>build(deps-dev): bump <code>@​types/node</code> from 18.18.3 to
18.18.5 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/peter-evans/repository-dispatch/pull/274">peter-evans/repository-dispatch#274</a></li>
<li>build(deps-dev): bump eslint from 8.50.0 to 8.51.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/peter-evans/repository-dispatch/pull/276">peter-evans/repository-dispatch#276</a></li>
<li>build(deps-dev): bump <code>@​babel/traverse</code> from 7.16.3 to
7.23.2 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/peter-evans/repository-dispatch/pull/278">peter-evans/repository-dispatch#278</a></li>
<li>build(deps-dev): bump <code>@​types/node</code> from 18.18.5 to
18.18.6 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/peter-evans/repository-dispatch/pull/279">peter-evans/repository-dispatch#279</a></li>
<li>build(deps-dev): bump <code>@​vercel/ncc</code> from 0.38.0 to
0.38.1 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/peter-evans/repository-dispatch/pull/280">peter-evans/repository-dispatch#280</a></li>
<li>build(deps-dev): bump eslint from 8.51.0 to 8.52.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/peter-evans/repository-dispatch/pull/281">peter-evans/repository-dispatch#281</a></li>
<li>build(deps-dev): bump <code>@​types/node</code> from 18.18.6 to
18.18.7 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/peter-evans/repository-dispatch/pull/282">peter-evans/repository-dispatch#282</a></li>
<li>build(deps): bump actions/setup-node from 3 to 4 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/peter-evans/repository-dispatch/pull/283">peter-evans/repository-dispatch#283</a></li>
<li>build(deps-dev): bump <code>@​types/node</code> from 18.18.7 to
18.18.8 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/peter-evans/repository-dispatch/pull/284">peter-evans/repository-dispatch#284</a></li>
<li>build(deps-dev): bump <code>@​types/node</code> from 18.18.8 to
18.18.9 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/peter-evans/repository-dispatch/pull/285">peter-evans/repository-dispatch#285</a></li>
<li>build(deps-dev): bump eslint from 8.52.0 to 8.53.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/peter-evans/repository-dispatch/pull/286">peter-evans/repository-dispatch#286</a></li>
<li>build(deps-dev): bump prettier from 3.0.3 to 3.1.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/peter-evans/repository-dispatch/pull/287">peter-evans/repository-dispatch#287</a></li>
<li>build(deps-dev): bump eslint from 8.53.0 to 8.54.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/peter-evans/repository-dispatch/pull/289">peter-evans/repository-dispatch#289</a></li>
<li>build(deps-dev): bump <code>@​types/node</code> from 18.18.9 to
18.18.13 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/peter-evans/repository-dispatch/pull/290">peter-evans/repository-dispatch#290</a></li>
<li>build(deps-dev): bump <code>@​types/node</code> from 18.18.13 to
18.19.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/peter-evans/repository-dispatch/pull/291">peter-evans/repository-dispatch#291</a></li>
<li>build(deps-dev): bump <code>@​types/node</code> from 18.19.0 to
18.19.3 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/peter-evans/repository-dispatch/pull/292">peter-evans/repository-dispatch#292</a></li>
<li>build(deps-dev): bump eslint from 8.54.0 to 8.55.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/peter-evans/repository-dispatch/pull/293">peter-evans/repository-dispatch#293</a></li>
<li>build(deps-dev): bump prettier from 3.1.0 to 3.1.1 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/peter-evans/repository-dispatch/pull/296">peter-evans/repository-dispatch#296</a></li>
<li>build(deps): bump actions/upload-artifact from 3 to 4 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/peter-evans/repository-dispatch/pull/295">peter-evans/repository-dispatch#295</a></li>
<li>build(deps-dev): bump eslint from 8.55.0 to 8.56.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/peter-evans/repository-dispatch/pull/297">peter-evans/repository-dispatch#297</a></li>
<li>build(deps-dev): bump eslint-plugin-prettier from 5.0.1 to 5.1.1 by
<a href="https://github.com/dependabot"><code>@​dependabot</code></a> in
<a
href="https://redirect.github.com/peter-evans/repository-dispatch/pull/298">peter-evans/repository-dispatch#298</a></li>
<li>build(deps-dev): bump eslint-plugin-prettier from 5.1.1 to 5.1.2 by
<a href="https://github.com/dependabot"><code>@​dependabot</code></a> in
<a
href="https://redirect.github.com/peter-evans/repository-dispatch/pull/299">peter-evans/repository-dispatch#299</a></li>
<li>build(deps-dev): bump <code>@​types/node</code> from 18.19.3 to
18.19.4 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/peter-evans/repository-dispatch/pull/300">peter-evans/repository-dispatch#300</a></li>
<li>build(deps-dev): bump eslint-plugin-prettier from 5.1.2 to 5.1.3 by
<a href="https://github.com/dependabot"><code>@​dependabot</code></a> in
<a
href="https://redirect.github.com/peter-evans/repository-dispatch/pull/301">peter-evans/repository-dispatch#301</a></li>
<li>build(deps-dev): bump <code>@​types/node</code> from 18.19.4 to
18.19.6 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/peter-evans/repository-dispatch/pull/302">peter-evans/repository-dispatch#302</a></li>
<li>build(deps-dev): bump prettier from 3.1.1 to 3.2.4 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/peter-evans/repository-dispatch/pull/303">peter-evans/repository-dispatch#303</a></li>
<li>build(deps-dev): bump <code>@​types/node</code> from 18.19.6 to
18.19.8 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/peter-evans/repository-dispatch/pull/304">peter-evans/repository-dispatch#304</a></li>
<li>feat: update runtime to node 20 by <a
href="https://github.com/peter-evans"><code>@​peter-evans</code></a> in
<a
href="https://redirect.github.com/peter-evans/repository-dispatch/pull/305">peter-evans/repository-dispatch#305</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/peter-evans/repository-dispatch/commit/ff45666b9427631e3450c54a1bcbee4d9ff4d7c0"><code>ff45666</code></a>
feat: update runtime to node 20 (<a
href="https://redirect.github.com/peter-evans/repository-dispatch/issues/305">#305</a>)</li>
<li><a
href="https://github.com/peter-evans/repository-dispatch/commit/a4a90276d01e3a2ae44fa10a0247287f045afd59"><code>a4a9027</code></a>
build(deps-dev): bump <code>@​types/node</code> from 18.19.6 to 18.19.8
(<a
href="https://redirect.github.com/peter-evans/repository-dispatch/issues/304">#304</a>)</li>
<li><a
href="https://github.com/peter-evans/repository-dispatch/commit/26052532834cf5d789f5606e8b98cd0bfab56380"><code>2605253</code></a>
build(deps-dev): bump prettier from 3.1.1 to 3.2.4 (<a
href="https://redirect.github.com/peter-evans/repository-dispatch/issues/303">#303</a>)</li>
<li><a
href="https://github.com/peter-evans/repository-dispatch/commit/ab3258eeeffae29c708cb86edfc514542da16621"><code>ab3258e</code></a>
build(deps-dev): bump <code>@​types/node</code> from 18.19.4 to 18.19.6
(<a
href="https://redirect.github.com/peter-evans/repository-dispatch/issues/302">#302</a>)</li>
<li><a
href="https://github.com/peter-evans/repository-dispatch/commit/240bc731931727c20e5294c098f79936917bb2ab"><code>240bc73</code></a>
build(deps-dev): bump eslint-plugin-prettier from 5.1.2 to 5.1.3 (<a
href="https://redirect.github.com/peter-evans/repository-dispatch/issues/301">#301</a>)</li>
<li><a
href="https://github.com/peter-evans/repository-dispatch/commit/8aa15c54a0775550e589f6e5a1c10d5a7944fa61"><code>8aa15c5</code></a>
build(deps-dev): bump <code>@​types/node</code> from 18.19.3 to 18.19.4
(<a
href="https://redirect.github.com/peter-evans/repository-dispatch/issues/300">#300</a>)</li>
<li><a
href="https://github.com/peter-evans/repository-dispatch/commit/22aa07cf23211217f2f281db8f96d64aaf773db3"><code>22aa07c</code></a>
build(deps-dev): bump eslint-plugin-prettier from 5.1.1 to 5.1.2 (<a
href="https://redirect.github.com/peter-evans/repository-dispatch/issues/299">#299</a>)</li>
<li><a
href="https://github.com/peter-evans/repository-dispatch/commit/ba0298574b6decfde4790aeded048a3b996a9ba0"><code>ba02985</code></a>
build(deps-dev): bump eslint-plugin-prettier from 5.0.1 to 5.1.1 (<a
href="https://redirect.github.com/peter-evans/repository-dispatch/issues/298">#298</a>)</li>
<li><a
href="https://github.com/peter-evans/repository-dispatch/commit/accfd7b5bfd02b2977592bd723e73cab236409e4"><code>accfd7b</code></a>
build(deps-dev): bump eslint from 8.55.0 to 8.56.0 (<a
href="https://redirect.github.com/peter-evans/repository-dispatch/issues/297">#297</a>)</li>
<li><a
href="https://github.com/peter-evans/repository-dispatch/commit/3c7d964ae9f0b74896fbe6e607a12437ba01ca21"><code>3c7d964</code></a>
build(deps): bump actions/upload-artifact from 3 to 4 (<a
href="https://redirect.github.com/peter-evans/repository-dispatch/issues/295">#295</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/peter-evans/repository-dispatch/compare/v2...v3">compare
view</a></li>
</ul>
</details>
<br />

Updates `dcarbone/install-jq-action` from 2.1.0 to 3.0.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/dcarbone/install-jq-action/releases">dcarbone/install-jq-action's
releases</a>.</em></p>
<blockquote>
<h2>v3.0.1</h2>
<h2>What's Changed</h2>
<ul>
<li>Use sh in action by <a
href="https://github.com/dcarbone"><code>@​dcarbone</code></a> in <a
href="https://redirect.github.com/dcarbone/install-jq-action/pull/15">dcarbone/install-jq-action#15</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/dcarbone/install-jq-action/compare/v3.0.0...v3.0.1">https://github.com/dcarbone/install-jq-action/compare/v3.0.0...v3.0.1</a></p>
<h2>v3.0.0</h2>
<h2>What's Changed</h2>
<ul>
<li>updating matrix versions by <a
href="https://github.com/dcarbone"><code>@​dcarbone</code></a> in <a
href="https://redirect.github.com/dcarbone/install-jq-action/pull/12">dcarbone/install-jq-action#12</a></li>
<li>trying out posix sh by <a
href="https://github.com/dcarbone"><code>@​dcarbone</code></a> in <a
href="https://redirect.github.com/dcarbone/install-jq-action/pull/14">dcarbone/install-jq-action#14</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/dcarbone/install-jq-action/compare/v2...v3.0.0">https://github.com/dcarbone/install-jq-action/compare/v2...v3.0.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/dcarbone/install-jq-action/commit/e397bd87438d72198f81efd21f876461183d383a"><code>e397bd8</code></a>
Use sh in action (<a
href="https://redirect.github.com/dcarbone/install-jq-action/issues/15">#15</a>)</li>
<li><a
href="https://github.com/dcarbone/install-jq-action/commit/36b228ee6879b890e4bc77cc0ea54088123cbeae"><code>36b228e</code></a>
Add dependabot for github-actions</li>
<li><a
href="https://github.com/dcarbone/install-jq-action/commit/d5935278d56788e7396d2d27839c694a40a7c3fe"><code>d593527</code></a>
updating examples</li>
<li><a
href="https://github.com/dcarbone/install-jq-action/commit/ca8101273e9ffb8cb037cc65ce892866697a9927"><code>ca81012</code></a>
trying out posix sh (<a
href="https://redirect.github.com/dcarbone/install-jq-action/issues/14">#14</a>)</li>
<li><a
href="https://github.com/dcarbone/install-jq-action/commit/de7c0d1fb1eceb8465fec70cf4c5c72ef43055f9"><code>de7c0d1</code></a>
updating matrix versions (<a
href="https://redirect.github.com/dcarbone/install-jq-action/issues/12">#12</a>)</li>
<li>See full diff in <a
href="https://github.com/dcarbone/install-jq-action/compare/v2.1.0...v3.0.1">compare
view</a></li>
</ul>
</details>
<br />

Updates `8BitJonny/gh-get-current-pr` from 2.2.0 to 3.0.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/8bitjonny/gh-get-current-pr/releases">8BitJonny/gh-get-current-pr's
releases</a>.</em></p>
<blockquote>
<h2>v3.0.0</h2>
<ul>
<li>Update to using Node20 (<a
href="https://redirect.github.com/8bitjonny/gh-get-current-pr/issues/295">#295</a>)</li>
<li>docs(readme): correct step id (<a
href="https://redirect.github.com/8bitjonny/gh-get-current-pr/issues/261">#261</a>)</li>
</ul>
<h2>🤖 Dependency Updates</h2>
<!-- raw HTML omitted -->
<ul>
<li>build(deps-dev): bump word-wrap from 1.2.3 to 1.2.4 (<a
href="https://redirect.github.com/8bitjonny/gh-get-current-pr/issues/289">#289</a>)</li>
<li>build(deps-dev): bump eslint from 8.34.0 to 8.45.0 (<a
href="https://redirect.github.com/8bitjonny/gh-get-current-pr/issues/288">#288</a>)</li>
<li>build(deps-dev): bump eslint-plugin-jest from 27.2.1 to 27.2.3 (<a
href="https://redirect.github.com/8bitjonny/gh-get-current-pr/issues/286">#286</a>)</li>
<li>build(deps-dev): bump <code>@​types/node</code> from 18.16.0 to
20.4.4 (<a
href="https://redirect.github.com/8bitjonny/gh-get-current-pr/issues/290">#290</a>)</li>
<li>build(deps-dev): bump <code>@​babel/traverse</code> from 7.17.3 to
7.23.9 (<a
href="https://redirect.github.com/8bitjonny/gh-get-current-pr/issues/296">#296</a>)</li>
<li>build(deps): bump tough-cookie from 4.0.0 to 4.1.3 (<a
href="https://redirect.github.com/8bitjonny/gh-get-current-pr/issues/282">#282</a>)</li>
<li>build(deps-dev): bump prettier from 2.8.1 to 2.8.8 (<a
href="https://redirect.github.com/8bitjonny/gh-get-current-pr/issues/251">#251</a>)</li>
<li>build(deps-dev): bump <code>@​vercel/ncc</code> from 0.36.0 to
0.36.1 (<a
href="https://redirect.github.com/8bitjonny/gh-get-current-pr/issues/228">#228</a>)</li>
<li>build(deps-dev): bump <code>@​types/node</code> from 18.13.0 to
18.16.0 (<a
href="https://redirect.github.com/8bitjonny/gh-get-current-pr/issues/252">#252</a>)</li>
<li>build(deps-dev): bump eslint-plugin-github from 4.6.0 to 4.7.0 (<a
href="https://redirect.github.com/8bitjonny/gh-get-current-pr/issues/244">#244</a>)</li>
<li>build(deps-dev): bump typescript from 4.9.3 to 4.9.5 (<a
href="https://redirect.github.com/8bitjonny/gh-get-current-pr/issues/222">#222</a>)</li>
<li>build(deps-dev): bump <code>@​types/node</code> from 18.11.13 to
18.13.0 (<a
href="https://redirect.github.com/8bitjonny/gh-get-current-pr/issues/225">#225</a>)</li>
<li>build(deps): bump json5 from 1.0.1 to 1.0.2 (<a
href="https://redirect.github.com/8bitjonny/gh-get-current-pr/issues/215">#215</a>)</li>
<li>build(deps-dev): bump eslint-plugin-jest from 27.1.6 to 27.2.1 (<a
href="https://redirect.github.com/8bitjonny/gh-get-current-pr/issues/217">#217</a>)</li>
<li>build(deps-dev): bump eslint from 8.29.0 to 8.34.0 (<a
href="https://redirect.github.com/8bitjonny/gh-get-current-pr/issues/226">#226</a>)</li>
<li>build(deps-dev): bump <code>@​typescript-eslint/parser</code> from
5.46.1 to 5.52.0 (<a
href="https://redirect.github.com/8bitjonny/gh-get-current-pr/issues/227">#227</a>)</li>
<li>build(deps-dev): bump <code>@​typescript-eslint/parser</code> from
5.45.1 to 5.46.1 (<a
href="https://redirect.github.com/8bitjonny/gh-get-current-pr/issues/200">#200</a>)</li>
<li>build(deps-dev): bump eslint-plugin-github from 4.4.1 to 4.6.0 (<a
href="https://redirect.github.com/8bitjonny/gh-get-current-pr/issues/201">#201</a>)</li>
<li>build(deps-dev): bump <code>@​vercel/ncc</code> from 0.34.0 to
0.36.0 (<a
href="https://redirect.github.com/8bitjonny/gh-get-current-pr/issues/199">#199</a>)</li>
<li>build(deps-dev): bump prettier from 2.8.0 to 2.8.1 (<a
href="https://redirect.github.com/8bitjonny/gh-get-current-pr/issues/202">#202</a>)</li>
<li>build(deps-dev): bump <code>@​types/node</code> from 18.11.11 to
18.11.13 (<a
href="https://redirect.github.com/8bitjonny/gh-get-current-pr/issues/203">#203</a>)</li>
</ul>
<!-- raw HTML omitted -->
<p><strong>Full Changelog</strong>: <a
href="https://github.com/8BitJonny/gh-get-current-pr/compare/2.2.0...v3.0.0">https://github.com/8BitJonny/gh-get-current-pr/compare/2.2.0...v3.0.0</a></p>
<p><strong>Contributors</strong>: <a
href="https://github.com/8BitJonny"><code>@​8BitJonny</code></a>, <a
href="https://github.com/dargmuesli"><code>@​dargmuesli</code></a>, <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> and
<a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/8BitJonny/gh-get-current-pr/commit/08e737c57a3a4eb24cec6487664b243b77eb5e36"><code>08e737c</code></a>
Merge pull request <a
href="https://redirect.github.com/8bitjonny/gh-get-current-pr/issues/295">#295</a>
from 8BitJonny/upgrade-to-node20</li>
<li><a
href="https://github.com/8BitJonny/gh-get-current-pr/commit/f21b71ee63087f43615f645384aaaf7da2c97217"><code>f21b71e</code></a>
(dep): run <code>npm audit fix</code></li>
<li><a
href="https://github.com/8BitJonny/gh-get-current-pr/commit/2fe5f3395f2cdbf533253e6f6ea0c3620e0558b8"><code>2fe5f33</code></a>
(chore): update to node v20 in nvmrc</li>
<li><a
href="https://github.com/8BitJonny/gh-get-current-pr/commit/20119599decd8768e213a3efb6a7a7f6fa5accb8"><code>2011959</code></a>
Merge branch 'master' into upgrade-to-node20</li>
<li><a
href="https://github.com/8BitJonny/gh-get-current-pr/commit/fda1672e600f2cb90e303a24708daaba42fdb569"><code>fda1672</code></a>
Merge pull request <a
href="https://redirect.github.com/8bitjonny/gh-get-current-pr/issues/289">#289</a>
from 8BitJonny/dependabot/npm_and_yarn/word-wrap-1.2.4</li>
<li><a
href="https://github.com/8BitJonny/gh-get-current-pr/commit/f4fb4f82e5c59df969ca73917254dada7872e1e1"><code>f4fb4f8</code></a>
Merge pull request <a
href="https://redirect.github.com/8bitjonny/gh-get-current-pr/issues/288">#288</a>
from 8BitJonny/dependabot/npm_and_yarn/eslint-8.45.0</li>
<li><a
href="https://github.com/8BitJonny/gh-get-current-pr/commit/a293d8bb05b24f1c53fc361526416faefdbb875c"><code>a293d8b</code></a>
Merge pull request <a
href="https://redirect.github.com/8bitjonny/gh-get-current-pr/issues/286">#286</a>
from 8BitJonny/dependabot/npm_and_yarn/eslint-plugin-...</li>
<li><a
href="https://github.com/8BitJonny/gh-get-current-pr/commit/f24508c55daa4ed85dcbce1997fbe939b28d8591"><code>f24508c</code></a>
Merge pull request <a
href="https://redirect.github.com/8bitjonny/gh-get-current-pr/issues/290">#290</a>
from 8BitJonny/dependabot/npm_and_yarn/types/node-20.4.4</li>
<li><a
href="https://github.com/8BitJonny/gh-get-current-pr/commit/f65b5c714af122111fb5bfb31a33eb8c52a1d042"><code>f65b5c7</code></a>
Merge pull request <a
href="https://redirect.github.com/8bitjonny/gh-get-current-pr/issues/296">#296</a>
from 8BitJonny/dependabot/npm_and_yarn/babel/traverse...</li>
<li><a
href="https://github.com/8BitJonny/gh-get-current-pr/commit/1b34411216a9034d69653f3cce4fc8dd1bb3c1ae"><code>1b34411</code></a>
build(deps-dev): bump <code>@​babel/traverse</code> from 7.17.3 to
7.23.9</li>
<li>Additional commits viewable in <a
href="https://github.com/8bitjonny/gh-get-current-pr/compare/2.2.0...3.0.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `thollander/actions-comment-pull-request` from 2.4.3 to 3.0.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/thollander/actions-comment-pull-request/releases">thollander/actions-comment-pull-request's
releases</a>.</em></p>
<blockquote>
<h2>v3.0.1</h2>
<h2>What's Changed</h2>
<ul>
<li>chore(deps-dev): bump <code>@​vercel/ncc</code> from 0.38.1 to
0.38.2 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/thollander/actions-comment-pull-request/pull/392">thollander/actions-comment-pull-request#392</a></li>
<li>chore(deps): bump <code>@​actions/core</code> from 1.10.1 to 1.11.1
by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>
in <a
href="https://redirect.github.com/thollander/actions-comment-pull-request/pull/394">thollander/actions-comment-pull-request#394</a></li>
<li>chore(deps-dev): bump prettier from 3.2.5 to 3.3.3 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/thollander/actions-comment-pull-request/pull/393">thollander/actions-comment-pull-request#393</a></li>
<li>chore(deps): bump <code>@​actions/github</code> from 5.1.1 to 6.0.0
by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>
in <a
href="https://redirect.github.com/thollander/actions-comment-pull-request/pull/300">thollander/actions-comment-pull-request#300</a></li>
<li>fix: some wrong variables renaming by <a
href="https://github.com/thollander"><code>@​thollander</code></a> in <a
href="https://redirect.github.com/thollander/actions-comment-pull-request/pull/409">thollander/actions-comment-pull-request#409</a></li>
<li>chore: release 3.0.1 by <a
href="https://github.com/thollander"><code>@​thollander</code></a> in <a
href="https://redirect.github.com/thollander/actions-comment-pull-request/pull/410">thollander/actions-comment-pull-request#410</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/thollander/actions-comment-pull-request/compare/v3.0.0...v3.0.1">https://github.com/thollander/actions-comment-pull-request/compare/v3.0.0...v3.0.1</a></p>
<h2>v3.0.0</h2>
<h2>What's Changed</h2>
<ul>
<li>chore(deps-dev): bump typescript from 5.2.2 to 5.3.3 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/thollander/actions-comment-pull-request/pull/326">thollander/actions-comment-pull-request#326</a></li>
<li>chore(deps-dev): bump prettier from 3.0.3 to 3.2.5 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/thollander/actions-comment-pull-request/pull/350">thollander/actions-comment-pull-request#350</a></li>
<li>chore(deps-dev): bump <code>@​tsconfig/node20</code> from 20.1.2 to
20.1.4 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/thollander/actions-comment-pull-request/pull/367">thollander/actions-comment-pull-request#367</a></li>
<li>chore(deps-dev): bump typescript from 5.3.3 to 5.6.3 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/thollander/actions-comment-pull-request/pull/390">thollander/actions-comment-pull-request#390</a></li>
<li>chore(deps-dev): bump <code>@​types/node</code> from 20.8.7 to
22.7.5 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/thollander/actions-comment-pull-request/pull/389">thollander/actions-comment-pull-request#389</a></li>
<li>feat: manage delete modes in a better way + consistent input naming
by <a href="https://github.com/thollander"><code>@​thollander</code></a>
in <a
href="https://redirect.github.com/thollander/actions-comment-pull-request/pull/391">thollander/actions-comment-pull-request#391</a></li>
</ul>
<h2>Breaking changes</h2>
<h3>Parameters</h3>
<ul>
<li>From <code>filePath</code> to <code>file-path</code></li>
<li>From <code>GITHUB_TOKEN</code> to <code>github-token</code></li>
<li>From <code>pr_number</code> to <code>pr-number</code></li>
<li>From <code>comment_tag</code> to <code>comment-tag</code></li>
<li>From <code>create_if_not_exists</code> to
<code>create-if-not-exists</code></li>
</ul>
<h3>Mode</h3>
<p><code>delete</code> now deletes a comment immediately. To delete the
comment at the end of the job, use <code>delete-on-completion</code>
mode.</p>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/thollander/actions-comment-pull-request/compare/v2...v3.0.0">https://github.com/thollander/actions-comment-pull-request/compare/v2...v3.0.0</a></p>
<h2>v2.5.0 : Node 20 version support</h2>
<h2>What's Changed</h2>
<ul>
<li>chore(deps-dev): bump <code>@​vercel/ncc</code> from 0.38.0 to
0.38.1 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/thollander/actions-comment-pull-request/pull/304">thollander/actions-comment-pull-request#304</a></li>
<li>feat: node 20 version support by <a
href="https://github.com/thollander"><code>@​thollander</code></a> in <a
href="https://redirect.github.com/thollander/actions-comment-pull-request/pull/307">thollander/actions-comment-pull-request#307</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/thollander/actions-comment-pull-request/compare/v2.4.3...v2.5.0">https://github.com/thollander/actions-comment-pull-request/compare/v2.4.3...v2.5.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/thollander/actions-comment-pull-request/commit/24bffb9b452ba05a4f3f77933840a6a841d1b32b"><code>24bffb9</code></a>
Merge pull request <a
href="https://redirect.github.com/thollander/actions-comment-pull-request/issues/410">#410</a>
from thollander/chore/release-3.0.1</li>
<li><a
href="https://github.com/thollander/actions-comment-pull-request/commit/5fd7012952da104579abe39cd42e00b6c20d7d3b"><code>5fd7012</code></a>
chore: release 3.0.1</li>
<li><a
href="https://github.com/thollander/actions-comment-pull-request/commit/a38b001579b2bd89ff01c9927793b8a8196f9ab9"><code>a38b001</code></a>
Merge pull request <a
href="https://redirect.github.com/thollander/actions-comment-pull-request/issues/409">#409</a>
from thollander/fix/wrong-var-renaming</li>
<li><a
href="https://github.com/thollander/actions-comment-pull-request/commit/a11fbfe707d47a1bcbee412b88496301f7837330"><code>a11fbfe</code></a>
fix: some wrong variables renaming</li>
<li><a
href="https://github.com/thollander/actions-comment-pull-request/commit/cb135190947de59b3e3a861db25ab140810b8699"><code>cb13519</code></a>
Merge pull request <a
href="https://redirect.github.com/thollander/actions-comment-pull-request/issues/300">#300</a>
from thollander/dependabot/npm_and_yarn/actions/githu...</li>
<li><a
href="https://github.com/thollander/actions-comment-pull-request/commit/38af97b455a6a00de2272df200ed101b2a787df9"><code>38af97b</code></a>
chore(deps): bump <code>@​actions/github</code> from 5.1.1 to 6.0.0</li>
<li><a
href="https://github.com/thollander/actions-comment-pull-request/commit/301a80eb13307b4e21ba654dd8eaf36598076566"><code>301a80e</code></a>
Merge pull request <a
href="https://redirect.github.com/thollander/actions-comment-pull-request/issues/393">#393</a>
from thollander/dependabot/npm_and_yarn/prettier-3.3.3</li>
<li><a
href="https://github.com/thollander/actions-comment-pull-request/commit/64dcac73643bc871b4b765d2d661096107a9e134"><code>64dcac7</code></a>
chore(deps-dev): bump prettier from 3.2.5 to 3.3.3</li>
<li><a
href="https://github.com/thollander/actions-comment-pull-request/commit/0a327d55ba7f1ca53cc16321616b224f89d63f05"><code>0a327d5</code></a>
Merge pull request <a
href="https://redirect.github.com/thollander/actions-comment-pull-request/issues/394">#394</a>
from thollander/dependabot/npm_and_yarn/actions/core-...</li>
<li><a
href="https://github.com/thollander/actions-comment-pull-request/commit/ece12bad81130dfb55ace22819e69921d4557c42"><code>ece12ba</code></a>
Merge pull request <a
href="https://redirect.github.com/thollander/actions-comment-pull-request/issues/392">#392</a>
from thollander/dependabot/npm_and_yarn/vercel/ncc-0....</li>
<li>Additional commits viewable in <a
href="https://github.com/thollander/actions-comment-pull-request/compare/v2.4.3...v3.0.1">compare
view</a></li>
</ul>
</details>
<br />

Updates `release-drafter/release-drafter` from 5 to 6
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/release-drafter/release-drafter/releases">release-drafter/release-drafter's
releases</a>.</em></p>
<blockquote>
<h2>v6.0.0</h2>
<h1>What's Changed</h1>
<ul>
<li>Update Node.js to 20 (<a
href="https://redirect.github.com/release-drafter/release-drafter/issues/1379">#1379</a>)
<a href="https://github.com/massongit"><code>@​massongit</code></a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/release-drafter/release-drafter/compare/v5.25.0...v6.0.0">https://github.com/release-drafter/release-drafter/compare/v5.25.0...v6.0.0</a></p>
<h2>v6.0.0-beta.1</h2>
<p>Prerelease of v6, first release of the CLI, feel free to provide
feedback in the pull request: <a
href="https://redirect.github.com/release-drafter/release-drafter/pull/1204">release-drafter/release-drafter#1204</a></p>
<h2>v5.25.0</h2>
<h1>What's Changed</h1>
<h2>New</h2>
<ul>
<li>add prerelease increment behavior (<a
href="https://redirect.github.com/release-drafter/release-drafter/issues/1303">#1303</a>)
<a href="https://github.com/neilime"><code>@​neilime</code></a></li>
<li>add latest input (<a
href="https://redirect.github.com/release-drafter/release-drafter/issues/1348">#1348</a>)
<a href="https://github.com/o-mago"><code>@​o-mago</code></a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/release-drafter/release-drafter/compare/v5.24.0...v5.25.0">https://github.com/release-drafter/release-drafter/compare/v5.24.0...v5.25.0</a></p>
<h2>v5.24.0</h2>
<h1>What's Changed</h1>
<h2>New</h2>
<ul>
<li>Add release version to github action output (<a
href="https://redirect.github.com/release-drafter/release-drafter/issues/1300">#1300</a>)
<a
href="https://github.com/mehdihadeli"><code>@​mehdihadeli</code></a></li>
</ul>
<h2>Bug Fixes</h2>
<ul>
<li>fix(release): strip prefix before comparing version (<a
href="https://redirect.github.com/release-drafter/release-drafter/issues/1255">#1255</a>)
<a href="https://github.com/neilime"><code>@​neilime</code></a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/release-drafter/release-drafter/compare/v5.23.0...v5.24.0">https://github.com/release-drafter/release-drafter/compare/v5.23.0...v5.24.0</a></p>
<h2>v5.23.0</h2>
<h1>What's Changed</h1>
<h2>New</h2>
<ul>
<li>Add <code>include-pre-releases</code> configuration option (<a
href="https://redirect.github.com/release-drafter/release-drafter/issues/1302">#1302</a>)
<a
href="https://github.com/robbinjanssen"><code>@​robbinjanssen</code></a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/release-drafter/release-drafter/compare/v5.22.0...v5.23.0">https://github.com/release-drafter/release-drafter/compare/v5.22.0...v5.23.0</a></p>
<h2>v5.22.0</h2>
<h1>What's Changed</h1>
<h2>New</h2>
<ul>
<li>Only use last full release when drafting (<a
href="https://redirect.github.com/release-drafter/release-drafter/issues/1240">#1240</a>)
<a href="https://github.com/ssbarnea"><code>@​ssbarnea</code></a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/release-drafter/release-drafter/commit/b1476f6e6eb133afa41ed8589daba6dc69b4d3f5"><code>b1476f6</code></a>
v6.1.0</li>
<li><a
href="https://github.com/release-drafter/release-drafter/commit/d7328d2775832b09044d0b284b6b0401f13d8398"><code>d7328d2</code></a>
Add config option for pull-request-limit (<a
href="https://redirect.github.com/release-drafter/release-drafter/issues/1362">#1362</a>)</li>
<li><a
href="https://github.com/release-drafter/release-drafter/commit/5faffa923861a9ba5120eeff448aef938dd32a94"><code>5faffa9</code></a>
docs: Fix Fork Link (<a
href="https://redirect.github.com/release-drafter/release-drafter/issues/1412">#1412</a>)</li>
<li><a
href="https://github.com/release-drafter/release-drafter/commit/a9142316e133c47d927357c8f0d81daf37976af1"><code>a914231</code></a>
Ensure support new main branch name (<a
href="https://redirect.github.com/release-drafter/release-drafter/issues/1079">#1079</a>)</li>
<li><a
href="https://github.com/release-drafter/release-drafter/commit/d6eceacd0b89adcdaf3347b9af627f93602a9167"><code>d6eceac</code></a>
Fix: Correctly mention bot accounts in release notes (<a
href="https://redirect.github.com/release-drafter/release-drafter/issues/1376">#1376</a>)</li>
<li><a
href="https://github.com/release-drafter/release-drafter/commit/41c11a26b9adf33cb319e7d5a3b80af918197a61"><code>41c11a2</code></a>
update schema generation and update schema to draft 07 (<a
href="https://redirect.github.com/release-drafter/release-drafter/issues/1422">#1422</a>)</li>
<li><a
href="https://github.com/release-drafter/release-drafter/commit/8296e405c27476d8fb1d99f33814c717a660c3cc"><code>8296e40</code></a>
fix typo: therelease (<a
href="https://redirect.github.com/release-drafter/release-drafter/issues/1407">#1407</a>)</li>
<li><a
href="https://github.com/release-drafter/release-drafter/commit/0ad4f70155c06dbb90d5b886bd7a825868fd7e9c"><code>0ad4f70</code></a>
Document action outputs introduced in <a
href="https://redirect.github.com/release-drafter/release-drafter/issues/1300">#1300</a>
(<a
href="https://redirect.github.com/release-drafter/release-drafter/issues/1406">#1406</a>)</li>
<li><a
href="https://github.com/release-drafter/release-drafter/commit/378bacb0750ec1b7c685940769620f72406e9a12"><code>378bacb</code></a>
Update README.md (<a
href="https://redirect.github.com/release-drafter/release-drafter/issues/1421">#1421</a>)</li>
<li><a
href="https://github.com/release-drafter/release-drafter/commit/c1394110532f155de154a66a873251a21af85e40"><code>c139411</code></a>
Update only drafts with the same prerelease status (<a
href="https://redirect.github.com/release-drafter/release-drafter/issues/1385">#1385</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/release-drafter/release-drafter/compare/v5...v6">compare
view</a></li>
</ul>
</details>
<br />

Updates `anchore/sbom-action` from 0.15.11 to 0.18.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/anchore/sbom-action/releases">anchore/sbom-action's
releases</a>.</em></p>
<blockquote>
<h2>v0.18.0</h2>
<h2>Changes in v0.18.0</h2>
<ul>
<li>chore(deps): update Syft to v1.19.0 (<a
href="https://redirect.github.com/anchore/sbom-action/issues/513">#513</a>)
<ul>
<li><a href="https://github.com/anchore/syft/releases/tag/v1.19.0">See
Syft changelog for latest changes</a></li>
</ul>
</li>
</ul>
<h2>v0.17.9</h2>
<h2>Changes in v0.17.9</h2>
<ul>
<li>chore(deps): update Syft to v1.18.1 (<a
href="https://redirect.github.com/anchore/sbom-action/issues/510">#510</a>)
[<a
href="https://github.com/anchore-actions-token-generator">anchore-actions-token-generator</a>]</li>
<li>chore(deps): update Syft to v1.18.0 (<a
href="https://redirect.github.com/anchore/sbom-action/issues/509">#509</a>)
[<a
href="https://github.com/anchore-actions-token-generator">anchore-actions-token-generator</a>]</li>
</ul>
<h2>v0.17.8</h2>
<h2>Changes in v0.17.8</h2>
<ul>
<li>chore(deps): update Syft to v1.17.0 (<a
href="https://redirect.github.com/anchore/sbom-action/issues/507">#507</a>)
[<a
href="https://github.com/anchore-actions-token-generator">anchore-actions-token-generator</a>]</li>
</ul>
<h2>v0.17.7</h2>
<h2>Changes in v0.17.7</h2>
<ul>
<li>chore(deps): update Syft to v1.16.0 (<a
href="https://redirect.github.com/anchore/sbom-action/issues/506">#506</a>)
[<a
href="https://github.com/anchore-actions-token-generator">anchore-actions-token-generator</a>]</li>
</ul>
<h2>v0.17.6</h2>
<h2>Changes in v0.17.6</h2>
<ul>
<li>chore(deps): update Syft to v1.15.0 (<a
href="https://redirect.github.com/anchore/sbom-action/issues/505">#505</a>)
[<a
href="https://github.com/anchore-actions-token-generator">anchore-actions-token-generator</a>]</li>
<li>chore(deps): bump actions/checkout from 4.2.1 to 4.2.2 (<a
href="https://redirect.github.com/anchore/sbom-action/issues/504">#504</a>)
[<a href="https://github.com/dependabot">dependabot</a>]</li>
</ul>
<h2>v0.17.5</h2>
<h2>Changes in v0.17.5</h2>
<ul>
<li>chore(deps): update Syft to v1.14.2 (<a
href="https://redirect.github.com/anchore/sbom-action/issues/503">#503</a>)
[<a
href="https://github.com/anchore-actions-token-generator">anchore-actions-token-generator</a>]</li>
</ul>
<h2>v0.17.4</h2>
<h2>Changes in v0.17.4</h2>
<ul>
<li>chore(deps): update Syft to v1.14.1 (<a
href="https://redirect.github.com/anchore/sbom-action/issues/502">#502</a>)
[<a
href="https://github.com/anchore-actions-token-generator">anchore-actions-token-generator</a>]</li>
</ul>
<h2>v0.17.3</h2>
<h2>Changes in v0.17.3</h2>
<ul>
<li>chore(deps): update Syft to v1.14.0 (<a
href="https://redirect.github.com/anchore/sbom-action/issues/498">#498</a>)
[<a
href="https://github.com/anchore-actions-token-generator">anchore-actions-token-generator</a>]</li>
</ul>
<h2>v0.17.2</h2>
<h2>Changes in v0.17.2</h2>
<ul>
<li>Update Syft to v1.11.1 (<a
href="https://redirect.github.com/anchore/sbom-action/issues/485">#485</a>)
[<a
href="https://github.com/anchore-actions-token-generator">anchore-actions-token-generator</a>]</li>
</ul>
<h2>v0.17.1</h2>
<h2>Changes in v0.17.1</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/anchore/sbom-action/commit/f325610c9f50a54015d37c8d16cb3b0e2c8f4de0"><code>f325610</code></a>
chore(deps): bump peter-evans/create-pull-request from 7.0.5 to 7.0.6
(<a
href="https://redirect.github.com/anchore/sbom-action/issues/511">#511</a>)</li>
<li><a
href="https://github.com/anchore/sbom-action/commit/83a99f5c7fb04d8e26fec4bde0bc8ed8624981c4"><code>83a99f5</code></a>
chore(deps): bump release-drafter/release-drafter from 6.0.0 to 6.1.0
(<a
href="https://redirect.github.com/anchore/sbom-action/issues/512">#512</a>)</li>
<li><a
href="https://github.com/anchore/sbom-action/commit/9af714fd4cde0bc9ad822624184e9efe6c3cd065"><code>9af714f</code></a>
chore(deps): update Syft to v1.19.0 (<a
href="https://redirect.github.com/anchore/sbom-action/issues/513">#513</a>)</li>
<li><a
href="https://github.com/anchore/sbom-action/commit/df80a981bc6edbc4e220a492d3cbe9f5547a6e75"><code>df80a98</code></a>
chore(deps): update Syft to v1.18.1 (<a
href="https://redirect.github.com/anchore/sbom-action/issues/510">#510</a>)</li>
<li><a
href="https://github.com/anchore/sbom-action/commit/33651ab40b3db0580a965d98214c067a2daa842c"><code>33651ab</code></a>
chore(deps): update Syft to v1.18.0 (<a
href="https://redirect.github.com/anchore/sbom-action/issues/509">#509</a>)</li>
<li><a
href="https://github.com/anchore/sbom-action/commit/a5bbe18b4dff7eb7cfcb7e761dab91654437ba13"><code>a5bbe18</code></a>
fix: github correlator name when run in matrix build (<a
href="https://redirect.github.com/anchore/sbom-action/issues/482">#482</a>)</li>
<li><a
href="https://github.com/anchore/sbom-action/commit/55dc4ee22412511ee8c3142cbea40418e6cec693"><code>55dc4ee</code></a>
chore(deps): update Syft to v1.17.0 (<a
href="https://redirect.github.com/anchore/sbom-action/issues/507">#507</a>)</li>
<li><a
href="https://github.com/anchore/sbom-action/commit/fc46e51fd3cb168ffb36c6d1915723c47db58abb"><code>fc46e51</code></a>
chore(deps): update Syft to v1.16.0 (<a
href="https://redirect.github.com/anchore/sbom-action/issues/506">#506</a>)</li>
<li><a
href="https://github.com/anchore/sbom-action/commit/251a468eed47e5082b105c3ba6ee500c0e65a764"><code>251a468</code></a>
chore(deps): update Syft to v1.15.0 (<a
href="https://redirect.github.com/anchore/sbom-action/issues/505">#505</a>)</li>
<li><a
href="https://github.com/anchore/sbom-action/commit/6bb446c6c5646f03d9d673ff1ce55918bff19aa6"><code>6bb446c</code></a>
chore(deps): bump actions/checkout from 4.2.1 to 4.2.2 (<a
href="https://redirect.github.com/anchore/sbom-action/issues/504">#504</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/anchore/sbom-action/compare/7ccf588e3cf3cc2611714c2eeae48550fbc17552...f325610c9f50a54015d37c8d16cb3b0e2c8f4de0">compare
view</a></li>
</ul>
</details>
<br />

Updates `sigstore/cosign-installer` from 3.5.0 to 3.7.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/sigstore/cosign-installer/releases">sigstore/cosign-installer's
releases</a>.</em></p>
<blockquote>
<h2>v3.7.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Bump actions/checkout from 4.1.7 to 4.2.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/sigstore/cosign-installer/pull/172">sigstore/cosign-installer#172</a></li>
<li>bump for latest cosign v2.4.1 release by <a
href="https://github.com/bobcallaway"><code>@​bobcallaway</code></a> in
<a
href="https://redirect.github.com/sigstore/cosign-installer/pull/173">sigstore/cosign-installer#173</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/sigstore/cosign-installer/compare/v3.6.0...v3.7.0">https://github.com/sigstore/cosign-installer/compare/v3.6.0...v3.7.0</a></p>
<h2>v3.6.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Bump actions/checkout from 4.1.2 to 4.1.3 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/sigstore/cosign-installer/pull/161">sigstore/cosign-installer#161</a></li>
<li>Bump actions/checkout from 4.1.3 to 4.1.4 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/sigstore/cosign-installer/pull/162">sigstore/cosign-installer#162</a></li>
<li>Bump actions/setup-go from 5.0.0 to 5.0.1 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/sigstore/cosign-installer/pull/163">sigstore/cosign-installer#163</a></li>
<li>Bump actions/checkout from 4.1.4 to 4.1.5 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/sigstore/cosign-installer/pull/164">sigstore/cosign-installer#164</a></li>
<li>Bump actions/checkout from 4.1.5 to 4.1.6 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/sigstore/cosign-installer/pull/165">sigstore/cosign-installer#165</a></li>
<li>Bump actions/checkout from 4.1.6 to 4.1.7 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/sigstore/cosign-installer/pull/166">sigstore/cosign-installer#166</a></li>
<li>Bump actions/setup-go from 5.0.1 to 5.0.2 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/sigstore/cosign-installer/pull/167">sigstore/cosign-installer#167</a></li>
<li>pin public key used for verification by <a
href="https://github.com/bobcallaway"><code>@​bobcallaway</code></a> in
<a
href="https://redirect.github.com/sigstore/cosign-installer/pull/169">sigstore/cosign-installer#169</a></li>
<li>bump default version to v2.4.0 release by <a
href="https://github.com/bobcallaway"><code>@​bobcallaway</code></a> in
<a
href="https://redirect.github.com/sigstore/cosign-installer/pull/168">sigstore/cosign-installer#168</a></li>
<li>update readme for new release by <a
href="https://github.com/bobcallaway"><code>@​bobcallaway</code></a> in
<a
href="https://redirect.github.com/sigstore/cosign-installer/pull/170">sigstore/cosign-installer#170</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/sigstore/cosign-installer/compare/v3...v3.6.0">https://github.com/sigstore/cosign-installer/compare/v3...v3.6.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/sigstore/cosign-installer/commit/dc72c7d5c4d10cd6bcb8cf6e3fd625a9e5e537da"><code>dc72c7d</code></a>
bump for latest cosign v2.4.1 release (<a
href="https://redirect.github.com/sigstore/cosign-installer/issues/173">#173</a>)</li>
<li><a
href="https://github.com/sigstore/cosign-installer/commit/08bb361e01a71697a353a4d79b633cccf31f5530"><code>08bb361</code></a>
Bump actions/checkout from 4.1.7 to 4.2.0 (<a
href="https://redirect.github.com/sigstore/cosign-installer/issues/172">#172</a>)</li>
<li><a
href="https://github.com/sigstore/cosign-installer/commit/4959ce089c160fddf62f7b42464195ba1a56d382"><code>4959ce0</code></a>
update readme for new release (<a
href="https://redirect.github.com/sigstore/cosign-installer/issues/170">#170</a>)</li>
<li><a
href="https://github.com/sigstore/cosign-installer/commit/45ffe83c0bb0b269973afccc717a6a81ee8e78c8"><code>45ffe83</code></a>
bump default version to v2.4.0 release (<a
href="https://redirect.github.com/sigstore/cosign-installer/issues/168">#…
  • Loading branch information
dependabot[bot] and hilmarf authored Feb 6, 2025
1 parent 3c7afe5 commit 27603b2
Show file tree
Hide file tree
Showing 7 changed files with 18 additions and 24 deletions.
20 changes: 7 additions & 13 deletions .github/workflows/blackduck_scan_scheduled.yaml
Original file line number Diff line number Diff line change
@@ -1,7 +1,8 @@
name: Blackduck Scan Cronjob
on:
schedule:
- cron: '30 1 * * 0'
- cron: '0 4 * * 1'
workflow_dispatch:

permissions:
checks: write
Expand All @@ -13,22 +14,15 @@ jobs:
- name: Checkout code
uses: actions/checkout@v4

- name: Set up Java 17
uses: actions/setup-java@v4
with:
java-version: '17'
distribution: 'temurin'

- name: Blackduck Full Scan
uses: mercedesbenzio/detect-action@v1
uses: blackduck-inc/black-duck-security-scan@805cbd09e806b01907bbea0f990723c2bb85abe9
env:
DETECT_PROJECT_USER_GROUPS: opencomponentmodel
DETECT_PROJECT_VERSION_DISTRIBUTION: SAAS
DETECT_SOURCE_PATH: ./
NODE_TLS_REJECT_UNAUTHORIZED: true
with:
scan-mode: INTELLIGENT
github-token: ${{ secrets.GITHUB_TOKEN }}
blackduck-url: ${{ secrets.BLACKDUCK_URL }}
blackduck-api-token: ${{ secrets.BLACKDUCK_API_TOKEN }}
detect-version: 8.8.0
github_token: ${{ secrets.GITHUB_TOKEN }}
blackducksca_url: ${{ secrets.BLACKDUCK_URL }}
blackducksca_token: ${{ secrets.BLACKDUCK_API_TOKEN }}
blackducksca_scan_full: true
2 changes: 1 addition & 1 deletion .github/workflows/check-manifest-generation-diff.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -20,7 +20,7 @@ jobs:
with:
go-version-file: '${{ github.workspace }}/go.mod'
- name: Restore Go cache
uses: actions/cache@v3
uses: actions/cache@v4
with:
path: /home/runner/work/_temp/_github_home/go/pkg/mod
key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }}
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/dispatch-e2e.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -16,7 +16,7 @@ jobs:
app_id: ${{ secrets.OCMBOT_APP_ID }}
private_key: ${{ secrets.OCMBOT_PRIV_KEY }}
- name: Dispatch e2e test trigger
uses: peter-evans/repository-dispatch@v2
uses: peter-evans/repository-dispatch@ff45666b9427631e3450c54a1bcbee4d9ff4d7c0
with:
token: ${{ steps.generate_token.outputs.token }}
repository: open-component-model/MPAS
Expand Down
6 changes: 3 additions & 3 deletions .github/workflows/mend_scan.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -41,7 +41,7 @@ jobs:
go-version-file: '${{ github.workspace }}/go.mod'

- name: 'Setup jq'
uses: dcarbone/install-jq-action@v2.1.0
uses: dcarbone/install-jq-action@e397bd87438d72198f81efd21f876461183d383a
with:
version: '1.7'

Expand Down Expand Up @@ -171,15 +171,15 @@ jobs:
fi
- name: Check if PR exists
uses: 8BitJonny/gh-get-current-pr@2.2.0
uses: 8BitJonny/gh-get-current-pr@08e737c57a3a4eb24cec6487664b243b77eb5e36
id: pr_exists
with:
filterOutClosed: true
sha: ${{ github.event.pull_request.head.sha }}

- name: Comment Mend Status on PR
if: ${{ github.event_name != 'schedule' && steps.pr_exists.outputs.pr_found == 'true' }}
uses: thollander/actions-comment-pull-request@v2.4.3
uses: thollander/actions-comment-pull-request@24bffb9b452ba05a4f3f77933840a6a841d1b32b
with:
message: |
## Mend Scan Summary: :${{ steps.report.outputs.status }}:
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/release-drafter.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -15,6 +15,6 @@ jobs:
update_release_draft:
runs-on: ubuntu-latest
steps:
- uses: release-drafter/release-drafter@v5
- uses: release-drafter/release-drafter@b1476f6e6eb133afa41ed8589daba6dc69b4d3f5
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
8 changes: 4 additions & 4 deletions .github/workflows/release.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -42,7 +42,7 @@ jobs:
with:
go-version-file: '${{ github.workspace }}/go.mod'
- name: Cache go-build and mod
uses: actions/cache@v3
uses: actions/cache@v4
with:
path: |
~/.cache/go-build/
Expand Down Expand Up @@ -98,11 +98,11 @@ jobs:
mkdir -p output
kustomize build ./config/default > ./output/install.yaml
- name: Setup Syft
uses: anchore/sbom-action/download-syft@7ccf588e3cf3cc2611714c2eeae48550fbc17552 # v0.15.11
uses: anchore/sbom-action/download-syft@f325610c9f50a54015d37c8d16cb3b0e2c8f4de0 # v0.18.0
- name: Setup Cosign
uses: sigstore/cosign-installer@v3.5.0
uses: sigstore/cosign-installer@c56c2d3e59e4281cc41dea2217323ba5694b171e
- name: Run goreleaser
uses: goreleaser/goreleaser-action@v5
uses: goreleaser/goreleaser-action@9ed2f89a662bf1735a48bc8557fd212fa902bebf
with:
distribution: goreleaser
version: latest
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/tests.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -26,7 +26,7 @@ jobs:
with:
go-version-file: '${{ github.workspace }}/go.mod'
- name: Restore Go cache
uses: actions/cache@v3
uses: actions/cache@v4
with:
path: /home/runner/work/_temp/_github_home/go/pkg/mod
key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }}
Expand Down

0 comments on commit 27603b2

Please sign in to comment.