build(deps): bump the github-action-updates group across 1 directory with 5 updates #129

dependabot · 2025-01-24T14:59:20Z

Bumps the github-action-updates group with 5 updates in the / directory:

Package	From	To
hendrikmuhs/ccache-action	`1.2.14`	`1.2.16`
Namchee/conventional-pr	`0.15.5`	`0.15.6`
github/codeql-action	`3.28.0`	`3.28.4`
reviewdog/action-suggester	`1.18.0`	`1.19.0`
sonarsource/sonarqube-github-c-cpp	`2.0.0`	`2.1.0`

Updates hendrikmuhs/ccache-action from 1.2.14 to 1.2.16

Release notes

Sourced from hendrikmuhs/ccache-action's releases.

v1.2.16

What's Changed

Change Bash to Shell everywhere by @hansfn in hendrikmuhs/ccache-action#223

Add option to add stats to Job Summary page by @planetmarshall in hendrikmuhs/ccache-action#263

Evict old files from the cache prior to saving by @planetmarshall in hendrikmuhs/ccache-action#270

New Contributors

@planetmarshall made their first contribution in hendrikmuhs/ccache-action#263

Full Changelog: hendrikmuhs/ccache-action@v1...v1.2.16

Commits

5391144 Revert #273 (#276)
1083213 update code
f2e06a0 Bump @actions/cache from 3.3.0 to 4.0.0 (#268)
d104052 Bump typescript from 5.7.2 to 5.7.3 (#275)
f5df292 Use sudo (if available) when installing sccache (#273)
d535f91 Bump @types/node from 22.10.2 to 22.10.5 (#272)
e7a0524 Evict old files from the cache prior to saving (#270)
c7704b4 Bump @types/node from 22.10.1 to 22.10.2 (#269)
6f38785 Add option to add stats to Job Summary page (#263)
5f65b4d Bump @types/node from 22.10.0 to 22.10.1 (#267)
Additional commits viewable in compare view

Updates Namchee/conventional-pr from 0.15.5 to 0.15.6

Release notes

Sourced from Namchee/conventional-pr's releases.

Version 0.15.6

What's Changed

This release introduces a bug fix:

Allow issue-validator to accept valid issue references from external repositories. Previously, it was intended for the validator to not accept any references outside the current repository as I don't find an use-case for it. However #126 presented a use-case for it. Thanks for the heads-up @Th3S4mur41!

Full Changelog: Namchee/conventional-pr@v0.15.5...v0.15.6

Commits

a6f50a1 fix(validator): allow issue validator to accept external issues (#127)
061fefa chore(ci): remove stable cpr (#125)
fffd92b docs: add Lapotor as a contributor for ideas (#123)
See full diff in compare view

Updates github/codeql-action from 3.28.0 to 3.28.4

Release notes

Sourced from github/codeql-action's releases.

v3.28.4

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.4 - 23 Jan 2025

No user facing changes.

See the full CHANGELOG.md for more information.

v3.28.3

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.3 - 22 Jan 2025

Update default CodeQL bundle version to 2.20.2. #2707

Fix an issue downloading the CodeQL Bundle from a GitHub Enterprise Server instance which occurred when the CodeQL Bundle had been synced to the instance using the CodeQL Action sync tool and the Actions runner did not have Zstandard installed. #2710

Uploading debug artifacts for CodeQL analysis is temporarily disabled. #2712

See the full CHANGELOG.md for more information.

v3.28.2

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.2 - 21 Jan 2025

No user facing changes.

See the full CHANGELOG.md for more information.

v3.28.1

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.1 - 10 Jan 2025

CodeQL Action v2 is now deprecated, and is no longer updated or supported. For better performance, improved security, and new features, upgrade to v3. For more information, see this changelog post. #2677

Update default CodeQL bundle version to 2.20.1. #2678

See the full CHANGELOG.md for more information.

Changelog

Sourced from github/codeql-action's changelog.

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

[UNRELEASED]

Update default CodeQL bundle version to 2.20.3. #2717

3.28.4 - 23 Jan 2025

No user facing changes.

3.28.3 - 22 Jan 2025

Update default CodeQL bundle version to 2.20.2. #2707

Fix an issue downloading the CodeQL Bundle from a GitHub Enterprise Server instance which occurred when the CodeQL Bundle had been synced to the instance using the CodeQL Action sync tool and the Actions runner did not have Zstandard installed. #2710

Uploading debug artifacts for CodeQL analysis is temporarily disabled. #2712

3.28.2 - 21 Jan 2025

No user facing changes.

3.28.1 - 10 Jan 2025

CodeQL Action v2 is now deprecated, and is no longer updated or supported. For better performance, improved security, and new features, upgrade to v3. For more information, see this changelog post. #2677

Update default CodeQL bundle version to 2.20.1. #2678

3.28.0 - 20 Dec 2024

Bump the minimum CodeQL bundle version to 2.15.5. #2655

Don't fail in the unusual case that a file is on the search path. #2660.

3.27.9 - 12 Dec 2024

No user facing changes.

3.27.8 - 12 Dec 2024

Fixed an issue where streaming the download and extraction of the CodeQL bundle did not respect proxy settings. #2624

3.27.7 - 10 Dec 2024

We are rolling out a change in December 2024 that will extract the CodeQL bundle directly to the toolcache to improve performance. #2631

Update default CodeQL bundle version to 2.20.0. #2636

3.27.6 - 03 Dec 2024

Update default CodeQL bundle version to 2.19.4. #2626

3.27.5 - 19 Nov 2024

... (truncated)

Commits

ee117c9 Merge pull request #2715 from github/update-v3.28.4-b44b19fe8
377913f Update changelog for v3.28.4
b44b19f Merge pull request #2714 from github/mergeback/v3.28.3-to-main-dd196fa9
d7366a1 Update checked-in dependencies
4872b26 Update changelog and version after v3.28.3
dd196fa Merge pull request #2713 from github/update-v3.28.3-23ec3afaf
23d07bb Update changelog for v3.28.3
23ec3af Merge pull request #2712 from github/angelapwen/stop-debug-artifacts
519de26 Temporarily disable uploading debug artifacts
7e4b683 Merge pull request #2710 from github/henrymercer/fix-extension-assumption
Additional commits viewable in compare view

Updates reviewdog/action-suggester from 1.18.0 to 1.19.0

Release notes

Sourced from reviewdog/action-suggester's releases.

Release v1.19.0

What's Changed

Add -fail-level support and deprecate -fail-on-error by @mongolyy in reviewdog/action-suggester#67

New Contributors

@mongolyy made their first contribution in reviewdog/action-suggester#67

Full Changelog: reviewdog/action-suggester@v1.18.0...v1.19.0

Commits

a3026c6 Merge pull request #67 from mongolyy/add-fail-level-support
c17dcbb Update action.yml
36a546f shfmt needs 1.22 or later.
7ae5ec5 add deprecation message
f5f36f2 add -fail-level support
See full diff in compare view

Updates sonarsource/sonarqube-github-c-cpp from 2.0.0 to 2.1.0

Release notes

Sourced from sonarsource/sonarqube-github-c-cpp's releases.

v2.1.0

[!WARNING] This new version of the GitHub action for C, C++, and Objective-C with SonarQube Server (sonarqube-github-c-cpp) is going to be the last one specifically designed for these languages.

This action is deprecated and will be removed in a future release.

Please use the sonarqube-scan-action and its install-build-wrapper sub-action instead.

More specifically, if the action is used to install both the SonarScanner CLI and the Build Wrapper:

replace sonarqube-github-c-cpp with the latest version of SonarSource/sonarqube-scan-action/install-build-wrapper

if the step calling the action is named Install sonar-scanner and build-wrapper, or something similar, rename it to Install Build Wrapper

replace the step calling sonar-scanner with a step using SonarSource/sonarqube-scan-action

the arguments passed to sonar-scanner should be passed to the action via the args input parameter

If the action is used to install the SonarScanner CLI, and the Build Wrapper is not required:

remove the sonarqube-github-c-cpp step altogether

replace the step calling sonar-scanner with a step using SonarSource/sonarqube-scan-action

the arguments passed to sonar-scanner should be passed to the action via the args input parameter

Check the C++ section in the README of the sonarqube-scan-action for complete examples.

What's Changed

Fix build-wrapper download URL by @7PH in SonarSource/sonarqube-github-c-cpp#18

BUILD-6088 Create SECURITY.md by @SamirM-BE in SonarSource/sonarqube-github-c-cpp#16

SQCPPGHA-8 Upgrade all recommended GitHub Action versions by @7PH in SonarSource/sonarqube-github-c-cpp#17

SQCPPGHA-12 Add Jira integration by @pavel-mikula-sonarsource in SonarSource/sonarqube-github-c-cpp#19

SQCPPGHA-9 Rebrand and forward to sonarqube-scan-action/deprecated-c-cpp-action by @antonioaversa in SonarSource/sonarqube-github-c-cpp#21

SQCPPGHA-14 Deprecate in favor of sonarqube-scan-action by @antonioaversa in SonarSource/sonarqube-github-c-cpp#23

New Contributors

@7PH made their first contribution in SonarSource/sonarqube-github-c-cpp#18

@SamirM-BE made their first contribution in SonarSource/sonarqube-github-c-cpp#16

@pavel-mikula-sonarsource made their first contribution in SonarSource/sonarqube-github-c-cpp#19

@antonioaversa made their first contribution in SonarSource/sonarqube-github-c-cpp#21

Full Changelog: SonarSource/sonarqube-github-c-cpp@v2.0.0...v2.1.0

Commits

e51317d SQCPPGHA-14 Deprecate in favor of sonarqube-scan-action (#23)
f415b51 SQCPPGHA-9 Rebrand and forward to sonarqube-scan-action/deprecated-c-cpp-acti...
25a2efe Add Jira integration
5fdf7f7 SQCPPGHA-8 Upgrade all recommended GitHub Action versions
6a732c9 BUILD-6088 Create SECURITY.md
8f97678 NO-JIRA Fix build-wrapper download URL
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…with 5 updates Bumps the github-action-updates group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [hendrikmuhs/ccache-action](https://github.com/hendrikmuhs/ccache-action) | `1.2.14` | `1.2.16` | | [Namchee/conventional-pr](https://github.com/namchee/conventional-pr) | `0.15.5` | `0.15.6` | | [github/codeql-action](https://github.com/github/codeql-action) | `3.28.0` | `3.28.4` | | [reviewdog/action-suggester](https://github.com/reviewdog/action-suggester) | `1.18.0` | `1.19.0` | | [sonarsource/sonarqube-github-c-cpp](https://github.com/sonarsource/sonarqube-github-c-cpp) | `2.0.0` | `2.1.0` | Updates `hendrikmuhs/ccache-action` from 1.2.14 to 1.2.16 - [Release notes](https://github.com/hendrikmuhs/ccache-action/releases) - [Commits](hendrikmuhs/ccache-action@ed74d11...5391144) Updates `Namchee/conventional-pr` from 0.15.5 to 0.15.6 - [Release notes](https://github.com/namchee/conventional-pr/releases) - [Commits](Namchee/conventional-pr@497c801...a6f50a1) Updates `github/codeql-action` from 3.28.0 to 3.28.4 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@48ab28a...ee117c9) Updates `reviewdog/action-suggester` from 1.18.0 to 1.19.0 - [Release notes](https://github.com/reviewdog/action-suggester/releases) - [Commits](reviewdog/action-suggester@db4abb1...a3026c6) Updates `sonarsource/sonarqube-github-c-cpp` from 2.0.0 to 2.1.0 - [Release notes](https://github.com/sonarsource/sonarqube-github-c-cpp/releases) - [Commits](SonarSource/sonarqube-github-c-cpp@4aebde3...e51317d) --- updated-dependencies: - dependency-name: hendrikmuhs/ccache-action dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-action-updates - dependency-name: Namchee/conventional-pr dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-action-updates - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-action-updates - dependency-name: reviewdog/action-suggester dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-action-updates - dependency-name: sonarsource/sonarqube-github-c-cpp dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-action-updates ... Signed-off-by: dependabot[bot] <[email protected]>

github-actions · 2025-01-24T15:00:32Z

Test Results

0 tests ±0 0 ✅ ±0 0s ⏱️ ±0s
0 suites ±0 0 💤 ±0
0 files ±0 0 ❌ ±0

Results for commit 6902d2d. ± Comparison against base commit 8c92ba2.

github-actions · 2025-01-24T15:01:03Z

🦙 MegaLinter status: ⚠️ WARNING

Descriptor	Linter	Files	Fixed	Errors	Elapsed time
✅ ACTION	actionlint	6		0	0.03s
✅ CPP	clang-format	81	0	0	0.53s
✅ DOCKERFILE	hadolint	1		0	0.12s
✅ JSON	jsonlint	8		0	0.17s
✅ JSON	prettier	8	6	0	0.44s
✅ MARKDOWN	markdownlint	4	1	0	0.61s
⚠️ MARKDOWN	markdown-link-check	4		2	21.83s
✅ MARKDOWN	markdown-table-formatter	4	1	0	0.16s
✅ REPOSITORY	checkov	yes		no	13.26s
✅ REPOSITORY	git_diff	yes		no	0.01s
✅ REPOSITORY	grype	yes		no	9.52s
✅ REPOSITORY	ls-lint	yes		no	0.06s
✅ REPOSITORY	secretlint	yes		no	0.99s
✅ REPOSITORY	trivy	yes		no	5.09s
✅ REPOSITORY	trivy-sbom	yes		no	0.07s
✅ REPOSITORY	trufflehog	yes		no	1.83s
⚠️ SPELL	lychee	49		1	2.06s
✅ YAML	prettier	10	0	0	0.53s
✅ YAML	v8r	10		0	5.73s
✅ YAML	yamllint	10		0	0.35s

See detailed report in MegaLinter reports

MegaLinter is graciously provided by

sonarqubecloud · 2025-01-24T15:02:43Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

dependabot · 2025-01-27T15:20:58Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot bot requested a review from a team as a code owner January 24, 2025 14:59

dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jan 24, 2025

dependabot bot mentioned this pull request Jan 24, 2025

build(deps): bump the github-action-updates group across 1 directory with 5 updates #128

Closed

dependabot bot closed this Jan 27, 2025

dependabot bot deleted the dependabot/github_actions/github-action-updates-a1d5ec8563 branch January 27, 2025 15:21

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

build(deps): bump the github-action-updates group across 1 directory with 5 updates #129

build(deps): bump the github-action-updates group across 1 directory with 5 updates #129

Uh oh!

dependabot bot commented on behalf of github Jan 24, 2025 •

edited

Loading

Uh oh!

github-actions bot commented Jan 24, 2025

Uh oh!

github-actions bot commented Jan 24, 2025

Uh oh!

sonarqubecloud bot commented Jan 24, 2025

Uh oh!

dependabot bot commented on behalf of github Jan 27, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

build(deps): bump the github-action-updates group across 1 directory with 5 updates #129

build(deps): bump the github-action-updates group across 1 directory with 5 updates #129

Uh oh!

Conversation

dependabot bot commented on behalf of github Jan 24, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v1.2.16

What's Changed

New Contributors

Version 0.15.6

What's Changed

v3.28.4

CodeQL Action Changelog

3.28.4 - 23 Jan 2025

v3.28.3

CodeQL Action Changelog

3.28.3 - 22 Jan 2025

v3.28.2

CodeQL Action Changelog

3.28.2 - 21 Jan 2025

v3.28.1

CodeQL Action Changelog

3.28.1 - 10 Jan 2025

CodeQL Action Changelog

[UNRELEASED]

3.28.4 - 23 Jan 2025

3.28.3 - 22 Jan 2025

3.28.2 - 21 Jan 2025

3.28.1 - 10 Jan 2025

3.28.0 - 20 Dec 2024

3.27.9 - 12 Dec 2024

3.27.8 - 12 Dec 2024

3.27.7 - 10 Dec 2024

3.27.6 - 03 Dec 2024

3.27.5 - 19 Nov 2024

Release v1.19.0

What's Changed

New Contributors

v2.1.0

What's Changed

New Contributors

Uh oh!

github-actions bot commented Jan 24, 2025

Test Results

Uh oh!

github-actions bot commented Jan 24, 2025

🦙 MegaLinter status: ⚠️ WARNING

Uh oh!

sonarqubecloud bot commented Jan 24, 2025

Quality Gate passed

Uh oh!

dependabot bot commented on behalf of github Jan 27, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot bot commented on behalf of github Jan 24, 2025 •

edited

Loading