Add workflow to update a main version #942
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
JoannaaKL
reviewed
Oct 4, 2022
JoannaaKL
approved these changes
Oct 4, 2022
bors bot
referenced
this pull request
in OpenPoolProject/stratum
Dec 12, 2022
354: chore(deps): update actions/checkout digest to 755da8c r=renovate[bot] a=renovate[bot] [](https://renovatebot.com) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | actions/checkout | action | digest | `bf08527` -> `755da8c` | --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://app.renovatebot.com/dashboard#github/OpenPoolProject/stratum). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNC41NC4yIiwidXBkYXRlZEluVmVyIjoiMzQuNTQuMiJ9--> 355: chore(deps): update actions/checkout action to v3.2.0 r=renovate[bot] a=renovate[bot] [](https://renovatebot.com) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/checkout](https://togithub.com/actions/checkout) | action | minor | `v3.1.0` -> `v3.2.0` | --- ### Release Notes <details> <summary>actions/checkout</summary> ### [`v3.2.0`](https://togithub.com/actions/checkout/releases/tag/v3.2.0) [Compare Source](https://togithub.com/actions/checkout/compare/v3.1.0...v3.2.0) ##### What's Changed - Add GitHub Action to perform release by [`@​rentziass](https://togithub.com/rentziass)` in [https://github.com/actions/checkout/pull/942](https://togithub.com/actions/checkout/pull/942) - Fix status badge by [`@​ScottBrenner](https://togithub.com/ScottBrenner)` in [https://github.com/actions/checkout/pull/967](https://togithub.com/actions/checkout/pull/967) - Replace datadog/squid with ubuntu/squid Docker image by [`@​cory-miller](https://togithub.com/cory-miller)` in [https://github.com/actions/checkout/pull/1002](https://togithub.com/actions/checkout/pull/1002) - Wrap pipeline commands for submoduleForeach in quotes by [`@​jokreliable](https://togithub.com/jokreliable)` in [https://github.com/actions/checkout/pull/964](https://togithub.com/actions/checkout/pull/964) - Update [`@​actions/io](https://togithub.com/actions/io)` to 1.1.2 by [`@​cory-miller](https://togithub.com/cory-miller)` in [https://github.com/actions/checkout/pull/1029](https://togithub.com/actions/checkout/pull/1029) - Upgrading version to 3.2.0 by [`@​vmjoseph](https://togithub.com/vmjoseph)` in [https://github.com/actions/checkout/pull/1039](https://togithub.com/actions/checkout/pull/1039) ##### New Contributors - [`@​ScottBrenner](https://togithub.com/ScottBrenner)` made their first contribution in [https://github.com/actions/checkout/pull/967](https://togithub.com/actions/checkout/pull/967) - [`@​cory-miller](https://togithub.com/cory-miller)` made their first contribution in [https://github.com/actions/checkout/pull/1002](https://togithub.com/actions/checkout/pull/1002) - [`@​jokreliable](https://togithub.com/jokreliable)` made their first contribution in [https://github.com/actions/checkout/pull/964](https://togithub.com/actions/checkout/pull/964) - [`@​vmjoseph](https://togithub.com/vmjoseph)` made their first contribution in [https://github.com/actions/checkout/pull/1039](https://togithub.com/actions/checkout/pull/1039) **Full Changelog**: actions/checkout@v3...v3.2.0 </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://app.renovatebot.com/dashboard#github/OpenPoolProject/stratum). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNC41NC4yIiwidXBkYXRlZEluVmVyIjoiMzQuNTQuMiJ9--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Yash-Garg
referenced
this pull request
in Yash-Garg/qBittorrent-Manager
Dec 12, 2022
[](https://renovatebot.com) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/checkout](https://togithub.com/actions/checkout) | action | minor | `v3.1.0` -> `v3.2.0` | --- ### Release Notes <details> <summary>actions/checkout</summary> ### [`v3.2.0`](https://togithub.com/actions/checkout/releases/tag/v3.2.0) [Compare Source](https://togithub.com/actions/checkout/compare/v3.1.0...v3.2.0) ##### What's Changed - Add GitHub Action to perform release by [@​rentziass](https://togithub.com/rentziass) in [https://github.com/actions/checkout/pull/942](https://togithub.com/actions/checkout/pull/942) - Fix status badge by [@​ScottBrenner](https://togithub.com/ScottBrenner) in [https://github.com/actions/checkout/pull/967](https://togithub.com/actions/checkout/pull/967) - Replace datadog/squid with ubuntu/squid Docker image by [@​cory-miller](https://togithub.com/cory-miller) in [https://github.com/actions/checkout/pull/1002](https://togithub.com/actions/checkout/pull/1002) - Wrap pipeline commands for submoduleForeach in quotes by [@​jokreliable](https://togithub.com/jokreliable) in [https://github.com/actions/checkout/pull/964](https://togithub.com/actions/checkout/pull/964) - Update [@​actions/io](https://togithub.com/actions/io) to 1.1.2 by [@​cory-miller](https://togithub.com/cory-miller) in [https://github.com/actions/checkout/pull/1029](https://togithub.com/actions/checkout/pull/1029) - Upgrading version to 3.2.0 by [@​vmjoseph](https://togithub.com/vmjoseph) in [https://github.com/actions/checkout/pull/1039](https://togithub.com/actions/checkout/pull/1039) ##### New Contributors - [@​ScottBrenner](https://togithub.com/ScottBrenner) made their first contribution in [https://github.com/actions/checkout/pull/967](https://togithub.com/actions/checkout/pull/967) - [@​cory-miller](https://togithub.com/cory-miller) made their first contribution in [https://github.com/actions/checkout/pull/1002](https://togithub.com/actions/checkout/pull/1002) - [@​jokreliable](https://togithub.com/jokreliable) made their first contribution in [https://github.com/actions/checkout/pull/964](https://togithub.com/actions/checkout/pull/964) - [@​vmjoseph](https://togithub.com/vmjoseph) made their first contribution in [https://github.com/actions/checkout/pull/1039](https://togithub.com/actions/checkout/pull/1039) **Full Changelog**: actions/checkout@v3...v3.2.0 </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://app.renovatebot.com/dashboard#github/Yash-Garg/qBittorrent-Manager). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNC41NC4yIiwidXBkYXRlZEluVmVyIjoiMzQuNTQuMiJ9--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
fuxingloh
referenced
this pull request
in BirthdayResearch/jellyfishsdk
Dec 13, 2022
[](https://renovatebot.com) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/checkout](https://togithub.com/actions/checkout) | action | minor | `v3.1.0` -> `v3.2.0` | --- ### Release Notes <details> <summary>actions/checkout</summary> ### [`v3.2.0`](https://togithub.com/actions/checkout/releases/tag/v3.2.0) [Compare Source](https://togithub.com/actions/checkout/compare/v3.1.0...v3.2.0) #### What's Changed - Add GitHub Action to perform release by [@​rentziass](https://togithub.com/rentziass) in [https://github.com/actions/checkout/pull/942](https://togithub.com/actions/checkout/pull/942) - Fix status badge by [@​ScottBrenner](https://togithub.com/ScottBrenner) in [https://github.com/actions/checkout/pull/967](https://togithub.com/actions/checkout/pull/967) - Replace datadog/squid with ubuntu/squid Docker image by [@​cory-miller](https://togithub.com/cory-miller) in [https://github.com/actions/checkout/pull/1002](https://togithub.com/actions/checkout/pull/1002) - Wrap pipeline commands for submoduleForeach in quotes by [@​jokreliable](https://togithub.com/jokreliable) in [https://github.com/actions/checkout/pull/964](https://togithub.com/actions/checkout/pull/964) - Update [@​actions/io](https://togithub.com/actions/io) to 1.1.2 by [@​cory-miller](https://togithub.com/cory-miller) in [https://github.com/actions/checkout/pull/1029](https://togithub.com/actions/checkout/pull/1029) - Upgrading version to 3.2.0 by [@​vmjoseph](https://togithub.com/vmjoseph) in [https://github.com/actions/checkout/pull/1039](https://togithub.com/actions/checkout/pull/1039) #### New Contributors - [@​ScottBrenner](https://togithub.com/ScottBrenner) made their first contribution in [https://github.com/actions/checkout/pull/967](https://togithub.com/actions/checkout/pull/967) - [@​cory-miller](https://togithub.com/cory-miller) made their first contribution in [https://github.com/actions/checkout/pull/1002](https://togithub.com/actions/checkout/pull/1002) - [@​jokreliable](https://togithub.com/jokreliable) made their first contribution in [https://github.com/actions/checkout/pull/964](https://togithub.com/actions/checkout/pull/964) - [@​vmjoseph](https://togithub.com/vmjoseph) made their first contribution in [https://github.com/actions/checkout/pull/1039](https://togithub.com/actions/checkout/pull/1039) **Full Changelog**: actions/checkout@v3...v3.2.0 </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://app.renovatebot.com/dashboard#github/JellyfishSDK/jellyfish). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNC41NC4yIiwidXBkYXRlZEluVmVyIjoiMzQuNTQuMiJ9--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
bors bot
referenced
this pull request
in stackabletech/druid-opa-authorizer
Dec 13, 2022
[](https://renovatebot.com) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/checkout](https://togithub.com/actions/checkout) | action | minor | `v3.0.2` -> `v3.2.0` | --- ### Release Notes <details> <summary>actions/checkout</summary> ### [`v3.2.0`](https://togithub.com/actions/checkout/releases/tag/v3.2.0) [Compare Source](https://togithub.com/actions/checkout/compare/v3.1.0...v3.2.0) #### What's Changed - Add GitHub Action to perform release by [@​rentziass](https://togithub.com/rentziass) in [https://github.com/actions/checkout/pull/942](https://togithub.com/actions/checkout/pull/942) - Fix status badge by [@​ScottBrenner](https://togithub.com/ScottBrenner) in [https://github.com/actions/checkout/pull/967](https://togithub.com/actions/checkout/pull/967) - Replace datadog/squid with ubuntu/squid Docker image by [@​cory-miller](https://togithub.com/cory-miller) in [https://github.com/actions/checkout/pull/1002](https://togithub.com/actions/checkout/pull/1002) - Wrap pipeline commands for submoduleForeach in quotes by [@​jokreliable](https://togithub.com/jokreliable) in [https://github.com/actions/checkout/pull/964](https://togithub.com/actions/checkout/pull/964) - Update [@​actions/io](https://togithub.com/actions/io) to 1.1.2 by [@​cory-miller](https://togithub.com/cory-miller) in [https://github.com/actions/checkout/pull/1029](https://togithub.com/actions/checkout/pull/1029) - Upgrading version to 3.2.0 by [@​vmjoseph](https://togithub.com/vmjoseph) in [https://github.com/actions/checkout/pull/1039](https://togithub.com/actions/checkout/pull/1039) #### New Contributors - [@​ScottBrenner](https://togithub.com/ScottBrenner) made their first contribution in [https://github.com/actions/checkout/pull/967](https://togithub.com/actions/checkout/pull/967) - [@​cory-miller](https://togithub.com/cory-miller) made their first contribution in [https://github.com/actions/checkout/pull/1002](https://togithub.com/actions/checkout/pull/1002) - [@​jokreliable](https://togithub.com/jokreliable) made their first contribution in [https://github.com/actions/checkout/pull/964](https://togithub.com/actions/checkout/pull/964) - [@​vmjoseph](https://togithub.com/vmjoseph) made their first contribution in [https://github.com/actions/checkout/pull/1039](https://togithub.com/actions/checkout/pull/1039) **Full Changelog**: actions/checkout@v3...v3.2.0 ### [`v3.1.0`](https://togithub.com/actions/checkout/blob/HEAD/CHANGELOG.md#v310) [Compare Source](https://togithub.com/actions/checkout/compare/v3.0.2...v3.1.0) - [Use @​actions/core `saveState` and `getState`](https://togithub.com/actions/checkout/pull/939) - [Add `github-server-url` input](https://togithub.com/actions/checkout/pull/922) </details> --- ### Configuration 📅 **Schedule**: Branch creation - "after 5:00 and before 6:00 every weekday" in timezone Europe/Berlin, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://app.renovatebot.com/dashboard#github/stackabletech/druid-opa-authorizer). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzMi4yNDEuMTEiLCJ1cGRhdGVkSW5WZXIiOiIzNC41NC4yIn0=-->
fuxingloh
referenced
this pull request
in levaintech/sticky
Dec 15, 2022
[](https://renovatebot.com) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/checkout](https://togithub.com/actions/checkout) | action | minor | `v3.1.0` -> `v3.2.0` | --- ### Release Notes <details> <summary>actions/checkout</summary> ### [`v3.2.0`](https://togithub.com/actions/checkout/releases/tag/v3.2.0) [Compare Source](https://togithub.com/actions/checkout/compare/v3.1.0...v3.2.0) ##### What's Changed - Add GitHub Action to perform release by [@​rentziass](https://togithub.com/rentziass) in [https://github.com/actions/checkout/pull/942](https://togithub.com/actions/checkout/pull/942) - Fix status badge by [@​ScottBrenner](https://togithub.com/ScottBrenner) in [https://github.com/actions/checkout/pull/967](https://togithub.com/actions/checkout/pull/967) - Replace datadog/squid with ubuntu/squid Docker image by [@​cory-miller](https://togithub.com/cory-miller) in [https://github.com/actions/checkout/pull/1002](https://togithub.com/actions/checkout/pull/1002) - Wrap pipeline commands for submoduleForeach in quotes by [@​jokreliable](https://togithub.com/jokreliable) in [https://github.com/actions/checkout/pull/964](https://togithub.com/actions/checkout/pull/964) - Update [@​actions/io](https://togithub.com/actions/io) to 1.1.2 by [@​cory-miller](https://togithub.com/cory-miller) in [https://github.com/actions/checkout/pull/1029](https://togithub.com/actions/checkout/pull/1029) - Upgrading version to 3.2.0 by [@​vmjoseph](https://togithub.com/vmjoseph) in [https://github.com/actions/checkout/pull/1039](https://togithub.com/actions/checkout/pull/1039) ##### New Contributors - [@​ScottBrenner](https://togithub.com/ScottBrenner) made their first contribution in [https://github.com/actions/checkout/pull/967](https://togithub.com/actions/checkout/pull/967) - [@​cory-miller](https://togithub.com/cory-miller) made their first contribution in [https://github.com/actions/checkout/pull/1002](https://togithub.com/actions/checkout/pull/1002) - [@​jokreliable](https://togithub.com/jokreliable) made their first contribution in [https://github.com/actions/checkout/pull/964](https://togithub.com/actions/checkout/pull/964) - [@​vmjoseph](https://togithub.com/vmjoseph) made their first contribution in [https://github.com/actions/checkout/pull/1039](https://togithub.com/actions/checkout/pull/1039) **Full Changelog**: actions/checkout@v3...v3.2.0 </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://app.renovatebot.com/dashboard#github/BirthdayResearch/sticky). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNC41NC4yIiwidXBkYXRlZEluVmVyIjoiMzQuNTQuMiJ9--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
andrewpollock
referenced
this pull request
in google/osv.dev
Jan 5, 2023
[](https://renovatebot.com) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/checkout](https://togithub.com/actions/checkout) | action | minor | `v3.1.0` -> `v3.2.0` | | [ossf/scorecard-action](https://togithub.com/ossf/scorecard-action) | action | minor | `v2.0.6` -> `v2.1.2` | | [pypa/gh-action-pypi-publish](https://togithub.com/pypa/gh-action-pypi-publish) | action | patch | `v1.6.1` -> `v1.6.4` | --- ### Release Notes <details> <summary>actions/checkout</summary> ### [`v3.2.0`](https://togithub.com/actions/checkout/releases/tag/v3.2.0) [Compare Source](https://togithub.com/actions/checkout/compare/v3.1.0...v3.2.0) #### What's Changed - Add GitHub Action to perform release by [@​rentziass](https://togithub.com/rentziass) in [https://github.com/actions/checkout/pull/942](https://togithub.com/actions/checkout/pull/942) - Fix status badge by [@​ScottBrenner](https://togithub.com/ScottBrenner) in [https://github.com/actions/checkout/pull/967](https://togithub.com/actions/checkout/pull/967) - Replace datadog/squid with ubuntu/squid Docker image by [@​cory-miller](https://togithub.com/cory-miller) in [https://github.com/actions/checkout/pull/1002](https://togithub.com/actions/checkout/pull/1002) - Wrap pipeline commands for submoduleForeach in quotes by [@​jokreliable](https://togithub.com/jokreliable) in [https://github.com/actions/checkout/pull/964](https://togithub.com/actions/checkout/pull/964) - Update [@​actions/io](https://togithub.com/actions/io) to 1.1.2 by [@​cory-miller](https://togithub.com/cory-miller) in [https://github.com/actions/checkout/pull/1029](https://togithub.com/actions/checkout/pull/1029) - Upgrading version to 3.2.0 by [@​vmjoseph](https://togithub.com/vmjoseph) in [https://github.com/actions/checkout/pull/1039](https://togithub.com/actions/checkout/pull/1039) #### New Contributors - [@​ScottBrenner](https://togithub.com/ScottBrenner) made their first contribution in [https://github.com/actions/checkout/pull/967](https://togithub.com/actions/checkout/pull/967) - [@​cory-miller](https://togithub.com/cory-miller) made their first contribution in [https://github.com/actions/checkout/pull/1002](https://togithub.com/actions/checkout/pull/1002) - [@​jokreliable](https://togithub.com/jokreliable) made their first contribution in [https://github.com/actions/checkout/pull/964](https://togithub.com/actions/checkout/pull/964) - [@​vmjoseph](https://togithub.com/vmjoseph) made their first contribution in [https://github.com/actions/checkout/pull/1039](https://togithub.com/actions/checkout/pull/1039) **Full Changelog**: actions/checkout@v3...v3.2.0 </details> <details> <summary>ossf/scorecard-action</summary> ### [`v2.1.2`](https://togithub.com/ossf/scorecard-action/releases/tag/v2.1.2) [Compare Source](https://togithub.com/ossf/scorecard-action/compare/v2.1.1...v2.1.2) #### What's Changed ##### Fixes - 🌱 Bump scorecard dependency to v4.10.2 to remove a CODEOWNERS printf statement. by [@​spencerschrock](https://togithub.com/spencerschrock) in [https://github.com/ossf/scorecard-action/pull/1054](https://togithub.com/ossf/scorecard-action/pull/1054) **Full Changelog**: ossf/scorecard-action@v2.1.1...v2.1.2 ### [`v2.1.1`](https://togithub.com/ossf/scorecard-action/releases/tag/v2.1.1) [Compare Source](https://togithub.com/ossf/scorecard-action/compare/v2.1.0...v2.1.1) #### Scorecard version This release use [Scorecard's v4.10.1](https://togithub.com/ossf/scorecard/releases/tag/v4.10.1) **Full Changelog**: ossf/scorecard-action@v2.1.0...v2.1.1 ### [`v2.1.0`](https://togithub.com/ossf/scorecard-action/releases/tag/v2.1.0) [Compare Source](https://togithub.com/ossf/scorecard-action/compare/v2.0.6...v2.1.0) #### What's Changed ##### Scorecard version This release uses [scorecard v4.10.0](https://togithub.com/ossf/scorecard/releases/tag/v4.10.0). ##### Improvements - Docker build workflow by [@​naveensrinivasan](https://togithub.com/naveensrinivasan) in [https://github.com/ossf/scorecard-action/pull/981](https://togithub.com/ossf/scorecard-action/pull/981) - Use root user in distroless to support GitHub Actions by [@​spencerschrock](https://togithub.com/spencerschrock) in [https://github.com/ossf/scorecard-action/pull/994](https://togithub.com/ossf/scorecard-action/pull/994) - Disable pull_request_target by [@​laurentsimon](https://togithub.com/laurentsimon) in [https://github.com/ossf/scorecard-action/pull/1031](https://togithub.com/ossf/scorecard-action/pull/1031) ##### Documentation - Add PAT section explaining risks by [@​olivekl](https://togithub.com/olivekl) in [https://github.com/ossf/scorecard-action/pull/1024](https://togithub.com/ossf/scorecard-action/pull/1024) - Make the badge text easier to copy by [@​rajbos](https://togithub.com/rajbos) in [https://github.com/ossf/scorecard-action/pull/1026](https://togithub.com/ossf/scorecard-action/pull/1026) #### New Contributors - [@​joycebrum](https://togithub.com/joycebrum) made their first contribution in [https://github.com/ossf/scorecard-action/pull/984](https://togithub.com/ossf/scorecard-action/pull/984) - [@​rajbos](https://togithub.com/rajbos) made their first contribution in [https://github.com/ossf/scorecard-action/pull/1026](https://togithub.com/ossf/scorecard-action/pull/1026) **Full Changelog**: ossf/scorecard-action@v2.0.6...v2.1.0 </details> <details> <summary>pypa/gh-action-pypi-publish</summary> ### [`v1.6.4`](https://togithub.com/pypa/gh-action-pypi-publish/releases/tag/v1.6.4) [Compare Source](https://togithub.com/pypa/gh-action-pypi-publish/compare/v1.6.3...v1.6.4) #### oh, boi! again? This is the last one tonight, promise! It fixes this embarrassing bug that was actually caught by the CI but got overlooked due to the lack of sleep. TL;DR GH passed `$HOME` from the external env into the container and that tricked the Python's `site` module to think that the home directory is elsewhere, adding non-existent paths to the env vars. See [#​115](https://togithub.com/pypa/gh-action-pypi-publish/issues/115). **Full Diff**: pypa/gh-action-pypi-publish@v1.6.3...v1.6.4 ### [`v1.6.3`](https://togithub.com/pypa/gh-action-pypi-publish/releases/tag/v1.6.3) [Compare Source](https://togithub.com/pypa/gh-action-pypi-publish/compare/v1.6.2...v1.6.3) ### Another Release!? Why? In [https://github.com/pypa/gh-action-pypi-publish/issues/112#issuecomment-1340133013](https://togithub.com/pypa/gh-action-pypi-publish/issues/112#issuecomment-1340133013), it was discovered that passing a `$PATH` variable even breaks the shebang. So this version adds more safeguards to make sure it keeps working with a fully broken `$PATH`. **Full Diff**: pypa/gh-action-pypi-publish@v1.6.2...v1.6.3 ### [`v1.6.2`](https://togithub.com/pypa/gh-action-pypi-publish/releases/tag/v1.6.2) [Compare Source](https://togithub.com/pypa/gh-action-pypi-publish/compare/v1.6.1...v1.6.2) #### What's Fixed - Made the `$PATH` and `$PYTHONPATH` environment variables resilient to broken values passed from the host runner environment, which previously allowed the users to accidentally break the container's internal runtime as reported in [https://github.com/pypa/gh-action-pypi-publish/issues/112](https://togithub.com/pypa/gh-action-pypi-publish/issues/112) #### Internal Maintenance Improvements - Added a devpi-based smoke-test GitHub Actions CI/CD workflow by [@​sesdaile-varmour](https://togithub.com/sesdaile-varmour) in [https://github.com/pypa/gh-action-pypi-publish/pull/111](https://togithub.com/pypa/gh-action-pypi-publish/pull/111) #### New Contributors - [@​sesdaile-varmour](https://togithub.com/sesdaile-varmour) made their first contribution in [https://github.com/pypa/gh-action-pypi-publish/pull/111](https://togithub.com/pypa/gh-action-pypi-publish/pull/111) **Full Diff**: pypa/gh-action-pypi-publish@v1.6.1...v1.6.2 </details> --- ### Configuration 📅 **Schedule**: Branch creation - "before 6am on monday" in timezone Australia/Sydney, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://togithub.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://app.renovatebot.com/dashboard#github/google/osv.dev). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNC4yNC4wIiwidXBkYXRlZEluVmVyIjoiMzQuNzMuMyJ9-->
bors bot
referenced
this pull request
in stackabletech/druid-opa-authorizer
Jan 9, 2023
[](https://renovatebot.com) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/checkout](https://togithub.com/actions/checkout) | action | minor | `v3.0.2` -> `v3.3.0` | --- ### Release Notes <details> <summary>actions/checkout</summary> ### [`v3.3.0`](https://togithub.com/actions/checkout/releases/tag/v3.3.0) [Compare Source](https://togithub.com/actions/checkout/compare/v3.2.0...v3.3.0) ##### What's Changed - Implement branch list using callbacks from exec function by [@​cory-miller](https://togithub.com/cory-miller) in [https://github.com/actions/checkout/pull/1045](https://togithub.com/actions/checkout/pull/1045) - Add in explicit reference to private checkout options by [@​vanZeben](https://togithub.com/vanZeben) in [https://github.com/actions/checkout/pull/1050](https://togithub.com/actions/checkout/pull/1050) - Fix comment typos (that got added in [#​770](https://togithub.com/actions/checkout/issues/770)) by [@​lurch](https://togithub.com/lurch) in [https://github.com/actions/checkout/pull/1057](https://togithub.com/actions/checkout/pull/1057) ##### New Contributors - [@​vanZeben](https://togithub.com/vanZeben) made their first contribution in [https://github.com/actions/checkout/pull/1050](https://togithub.com/actions/checkout/pull/1050) - [@​lurch](https://togithub.com/lurch) made their first contribution in [https://github.com/actions/checkout/pull/1057](https://togithub.com/actions/checkout/pull/1057) **Full Changelog**: actions/checkout@v3.2.0...v3.3.0 ### [`v3.2.0`](https://togithub.com/actions/checkout/releases/tag/v3.2.0) [Compare Source](https://togithub.com/actions/checkout/compare/v3.1.0...v3.2.0) ##### What's Changed - Add GitHub Action to perform release by [@​rentziass](https://togithub.com/rentziass) in [https://github.com/actions/checkout/pull/942](https://togithub.com/actions/checkout/pull/942) - Fix status badge by [@​ScottBrenner](https://togithub.com/ScottBrenner) in [https://github.com/actions/checkout/pull/967](https://togithub.com/actions/checkout/pull/967) - Replace datadog/squid with ubuntu/squid Docker image by [@​cory-miller](https://togithub.com/cory-miller) in [https://github.com/actions/checkout/pull/1002](https://togithub.com/actions/checkout/pull/1002) - Wrap pipeline commands for submoduleForeach in quotes by [@​jokreliable](https://togithub.com/jokreliable) in [https://github.com/actions/checkout/pull/964](https://togithub.com/actions/checkout/pull/964) - Update [@​actions/io](https://togithub.com/actions/io) to 1.1.2 by [@​cory-miller](https://togithub.com/cory-miller) in [https://github.com/actions/checkout/pull/1029](https://togithub.com/actions/checkout/pull/1029) - Upgrading version to 3.2.0 by [@​vmjoseph](https://togithub.com/vmjoseph) in [https://github.com/actions/checkout/pull/1039](https://togithub.com/actions/checkout/pull/1039) ##### New Contributors - [@​ScottBrenner](https://togithub.com/ScottBrenner) made their first contribution in [https://github.com/actions/checkout/pull/967](https://togithub.com/actions/checkout/pull/967) - [@​cory-miller](https://togithub.com/cory-miller) made their first contribution in [https://github.com/actions/checkout/pull/1002](https://togithub.com/actions/checkout/pull/1002) - [@​jokreliable](https://togithub.com/jokreliable) made their first contribution in [https://github.com/actions/checkout/pull/964](https://togithub.com/actions/checkout/pull/964) - [@​vmjoseph](https://togithub.com/vmjoseph) made their first contribution in [https://github.com/actions/checkout/pull/1039](https://togithub.com/actions/checkout/pull/1039) **Full Changelog**: actions/checkout@v3.1.0...v3.2.0 ### [`v3.1.0`](https://togithub.com/actions/checkout/blob/HEAD/CHANGELOG.md#v310) [Compare Source](https://togithub.com/actions/checkout/compare/v3.0.2...v3.1.0) - [Use @​actions/core `saveState` and `getState`](https://togithub.com/actions/checkout/pull/939) - [Add `github-server-url` input](https://togithub.com/actions/checkout/pull/922) </details> --- ### Configuration 📅 **Schedule**: Branch creation - "after 5:00 and before 6:00 every weekday" in timezone Europe/Berlin, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://app.renovatebot.com/dashboard#github/stackabletech/druid-opa-authorizer). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzMi4yNDEuMTEiLCJ1cGRhdGVkSW5WZXIiOiIzNC44MS4wIn0=-->
bors bot
referenced
this pull request
in stackabletech/operator-rs
Jan 16, 2023
[](https://renovatebot.com) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/checkout](https://togithub.com/actions/checkout) | action | minor | `v3.1.0` -> `v3.3.0` | --- ### Release Notes <details> <summary>actions/checkout</summary> ### [`v3.3.0`](https://togithub.com/actions/checkout/releases/tag/v3.3.0) [Compare Source](https://togithub.com/actions/checkout/compare/v3.2.0...v3.3.0) ##### What's Changed - Implement branch list using callbacks from exec function by [@​cory-miller](https://togithub.com/cory-miller) in [https://github.com/actions/checkout/pull/1045](https://togithub.com/actions/checkout/pull/1045) - Add in explicit reference to private checkout options by [@​vanZeben](https://togithub.com/vanZeben) in [https://github.com/actions/checkout/pull/1050](https://togithub.com/actions/checkout/pull/1050) - Fix comment typos (that got added in [#​770](https://togithub.com/actions/checkout/issues/770)) by [@​lurch](https://togithub.com/lurch) in [https://github.com/actions/checkout/pull/1057](https://togithub.com/actions/checkout/pull/1057) ##### New Contributors - [@​vanZeben](https://togithub.com/vanZeben) made their first contribution in [https://github.com/actions/checkout/pull/1050](https://togithub.com/actions/checkout/pull/1050) - [@​lurch](https://togithub.com/lurch) made their first contribution in [https://github.com/actions/checkout/pull/1057](https://togithub.com/actions/checkout/pull/1057) **Full Changelog**: actions/checkout@v3.2.0...v3.3.0 ### [`v3.2.0`](https://togithub.com/actions/checkout/releases/tag/v3.2.0) [Compare Source](https://togithub.com/actions/checkout/compare/v3.1.0...v3.2.0) ##### What's Changed - Add GitHub Action to perform release by [@​rentziass](https://togithub.com/rentziass) in [https://github.com/actions/checkout/pull/942](https://togithub.com/actions/checkout/pull/942) - Fix status badge by [@​ScottBrenner](https://togithub.com/ScottBrenner) in [https://github.com/actions/checkout/pull/967](https://togithub.com/actions/checkout/pull/967) - Replace datadog/squid with ubuntu/squid Docker image by [@​cory-miller](https://togithub.com/cory-miller) in [https://github.com/actions/checkout/pull/1002](https://togithub.com/actions/checkout/pull/1002) - Wrap pipeline commands for submoduleForeach in quotes by [@​jokreliable](https://togithub.com/jokreliable) in [https://github.com/actions/checkout/pull/964](https://togithub.com/actions/checkout/pull/964) - Update [@​actions/io](https://togithub.com/actions/io) to 1.1.2 by [@​cory-miller](https://togithub.com/cory-miller) in [https://github.com/actions/checkout/pull/1029](https://togithub.com/actions/checkout/pull/1029) - Upgrading version to 3.2.0 by [@​vmjoseph](https://togithub.com/vmjoseph) in [https://github.com/actions/checkout/pull/1039](https://togithub.com/actions/checkout/pull/1039) ##### New Contributors - [@​ScottBrenner](https://togithub.com/ScottBrenner) made their first contribution in [https://github.com/actions/checkout/pull/967](https://togithub.com/actions/checkout/pull/967) - [@​cory-miller](https://togithub.com/cory-miller) made their first contribution in [https://github.com/actions/checkout/pull/1002](https://togithub.com/actions/checkout/pull/1002) - [@​jokreliable](https://togithub.com/jokreliable) made their first contribution in [https://github.com/actions/checkout/pull/964](https://togithub.com/actions/checkout/pull/964) - [@​vmjoseph](https://togithub.com/vmjoseph) made their first contribution in [https://github.com/actions/checkout/pull/1039](https://togithub.com/actions/checkout/pull/1039) **Full Changelog**: actions/checkout@v3.1.0...v3.2.0 </details> --- ### Configuration 📅 **Schedule**: Branch creation - "after 5:00 and before 6:00 every weekday" in timezone Europe/Berlin, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://app.renovatebot.com/dashboard#github/stackabletech/operator-rs). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNC42My4yIiwidXBkYXRlZEluVmVyIjoiMzQuODEuMCJ9-->
EliSchleifer
referenced
this pull request
in trunk-io/plugins
Feb 4, 2023
](https://renovatebot.com){kind=link}
[](https://renovatebot.com)
This PR contains the following updates:
| Package | Type | Update | Change | Age | Adoption | Passing |
Confidence |
|---|---|---|---|---|---|---|---|
| actionpack-page_caching | | patch | `'1.2.0'` -> `'1.2.4'` |
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
| [actions/checkout](https://togithub.com/actions/checkout) | action |
minor | `v3.1.0` -> `v3.3.0` |
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
|
[actions/upload-artifact](https://togithub.com/actions/upload-artifact)
| action | patch | `v3.1.0` -> `v3.1.2` |
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
| coffee-rails | | minor | `'~> 4.1.0'` -> `'~> 4.2.0'` |
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
|
[eslint-plugin-import](https://togithub.com/import-js/eslint-plugin-import)
| devDependencies | minor | [`2.26.0` ->
`2.27.5`](https://renovatebot.com/diffs/npm/eslint-plugin-import/2.26.0/2.27.5)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
| [github/codeql-action](https://togithub.com/github/codeql-action) |
action | minor | `v2.1.27` -> `v2.2.1` |
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
| [gradle](https://gradle.org)
([source](https://togithub.com/gradle/gradle)) | | minor | `7.4.1` ->
`7.6` |
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
| [ossf/scorecard-action](https://togithub.com/ossf/scorecard-action) |
action | minor | `v2.0.6` -> `v2.1.2` |
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
| rails | | minor | `'>= 5.0.0.beta1', '< 5.1'` -> `'>= 5.0.0.beta1', '<
5.2.9'` |
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
|
[terraform-linters/tflint-ruleset-aws](https://togithub.com/terraform-linters/tflint-ruleset-aws)
| plugin | minor | `0.13.2` -> `0.21.2` |
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
| [typescript](https://www.typescriptlang.org/)
([source](https://togithub.com/Microsoft/TypeScript)) | devDependencies
| patch | [`4.9.3` ->
`4.9.5`](https://renovatebot.com/diffs/npm/typescript/4.9.3/4.9.5) |
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
| io.gitlab.arturbosch.detekt | plugin | minor | `1.20.0-RC1` ->
`1.22.0` |
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
| org.jetbrains.kotlin.jvm | plugin | minor | `1.5.31` -> `1.8.10` |
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
---
### Release Notes
<details>
<summary>actions/checkout</summary>
###
[`v3.3.0`](https://togithub.com/actions/checkout/releases/tag/v3.3.0)
[Compare
Source](https://togithub.com/actions/checkout/compare/v3.2.0...v3.3.0)
##### What's Changed
- Implement branch list using callbacks from exec function by
[@​cory-miller](https://togithub.com/cory-miller) in
[https://github.com/actions/checkout/pull/1045](https://togithub.com/actions/checkout/pull/1045)
- Add in explicit reference to private checkout options by
[@​vanZeben](https://togithub.com/vanZeben) in
[https://github.com/actions/checkout/pull/1050](https://togithub.com/actions/checkout/pull/1050)
- Fix comment typos (that got added in
[#​770](https://togithub.com/actions/checkout/issues/770)) by
[@​lurch](https://togithub.com/lurch) in
[https://github.com/actions/checkout/pull/1057](https://togithub.com/actions/checkout/pull/1057)
##### New Contributors
- [@​vanZeben](https://togithub.com/vanZeben) made their first
contribution in
[https://github.com/actions/checkout/pull/1050](https://togithub.com/actions/checkout/pull/1050)
- [@​lurch](https://togithub.com/lurch) made their first
contribution in
[https://github.com/actions/checkout/pull/1057](https://togithub.com/actions/checkout/pull/1057)
**Full Changelog**:
https://github.com/actions/checkout/compare/v3.2.0...v3.3.0
###
[`v3.2.0`](https://togithub.com/actions/checkout/releases/tag/v3.2.0)
[Compare
Source](https://togithub.com/actions/checkout/compare/v3.1.0...v3.2.0)
#### What's Changed
- Add GitHub Action to perform release by
[@​rentziass](https://togithub.com/rentziass) in
[https://github.com/actions/checkout/pull/942](https://togithub.com/actions/checkout/pull/942)
- Fix status badge by
[@​ScottBrenner](https://togithub.com/ScottBrenner) in
[https://github.com/actions/checkout/pull/967](https://togithub.com/actions/checkout/pull/967)
- Replace datadog/squid with ubuntu/squid Docker image by
[@​cory-miller](https://togithub.com/cory-miller) in
[https://github.com/actions/checkout/pull/1002](https://togithub.com/actions/checkout/pull/1002)
- Wrap pipeline commands for submoduleForeach in quotes by
[@​jokreliable](https://togithub.com/jokreliable) in
[https://github.com/actions/checkout/pull/964](https://togithub.com/actions/checkout/pull/964)
- Update [@​actions/io](https://togithub.com/actions/io) to 1.1.2
by [@​cory-miller](https://togithub.com/cory-miller) in
[https://github.com/actions/checkout/pull/1029](https://togithub.com/actions/checkout/pull/1029)
- Upgrading version to 3.2.0 by
[@​vmjoseph](https://togithub.com/vmjoseph) in
[https://github.com/actions/checkout/pull/1039](https://togithub.com/actions/checkout/pull/1039)
#### New Contributors
- [@​ScottBrenner](https://togithub.com/ScottBrenner) made their
first contribution in
[https://github.com/actions/checkout/pull/967](https://togithub.com/actions/checkout/pull/967)
- [@​cory-miller](https://togithub.com/cory-miller) made their
first contribution in
[https://github.com/actions/checkout/pull/1002](https://togithub.com/actions/checkout/pull/1002)
- [@​jokreliable](https://togithub.com/jokreliable) made their
first contribution in
[https://github.com/actions/checkout/pull/964](https://togithub.com/actions/checkout/pull/964)
- [@​vmjoseph](https://togithub.com/vmjoseph) made their first
contribution in
[https://github.com/actions/checkout/pull/1039](https://togithub.com/actions/checkout/pull/1039)
**Full Changelog**:
https://github.com/actions/checkout/compare/v3.1.0...v3.2.0
</details>
<details>
<summary>actions/upload-artifact</summary>
###
[`v3.1.2`](https://togithub.com/actions/upload-artifact/releases/tag/v3.1.2)
[Compare
Source](https://togithub.com/actions/upload-artifact/compare/v3.1.1...v3.1.2)
- Update all `@actions/*` NPM packages to their latest versions-
[#​374](https://togithub.com/actions/upload-artifact/issues/374)
- Update all dev dependencies to their most recent versions -
[#​375](https://togithub.com/actions/upload-artifact/issues/375)
###
[`v3.1.1`](https://togithub.com/actions/upload-artifact/releases/tag/v3.1.1)
[Compare
Source](https://togithub.com/actions/upload-artifact/compare/v3.1.0...v3.1.1)
- Update actions/core package to latest version to remove `set-output`
deprecation warning
[#​351](https://togithub.com/actions/upload-artifact/issues/351)
</details>
<details>
<summary>import-js/eslint-plugin-import</summary>
###
[`v2.27.5`](https://togithub.com/import-js/eslint-plugin-import/blob/HEAD/CHANGELOG.md#​2275---2023-01-16)
[Compare
Source](https://togithub.com/import-js/eslint-plugin-import/compare/v2.27.4...v2.27.5)
##### Fixed
- \[`order]`: Fix group ranks order when alphabetizing
(\[[#​2674](https://togithub.com/import-js/eslint-plugin-import/issues/2674)],
thanks \[[@​Pearce-Ropion](https://togithub.com/Pearce-Ropion)])
###
[`v2.27.4`](https://togithub.com/import-js/eslint-plugin-import/blob/HEAD/CHANGELOG.md#​2274---2023-01-11)
[Compare
Source](https://togithub.com/import-js/eslint-plugin-import/compare/v2.27.3...v2.27.4)
##### Fixed
- `semver` should be a prod dep
(\[[#​2668](https://togithub.com/import-js/eslint-plugin-import/issues/2668)])
###
[`v2.27.3`](https://togithub.com/import-js/eslint-plugin-import/blob/HEAD/CHANGELOG.md#​2273---2023-01-11)
[Compare
Source](https://togithub.com/import-js/eslint-plugin-import/compare/v2.27.2...v2.27.3)
##### Fixed
- \[`no-empty-named-blocks`]: rewrite rule to only check import
declarations
(\[[#​2666](https://togithub.com/import-js/eslint-plugin-import/issues/2666)])
###
[`v2.27.2`](https://togithub.com/import-js/eslint-plugin-import/blob/HEAD/CHANGELOG.md#​2272---2023-01-11)
[Compare
Source](https://togithub.com/import-js/eslint-plugin-import/compare/v2.27.1...v2.27.2)
##### Fixed
- \[`no-duplicates`]: do not unconditionally require `typescript`
(\[[#​2665](https://togithub.com/import-js/eslint-plugin-import/issues/2665)])
###
[`v2.27.1`](https://togithub.com/import-js/eslint-plugin-import/blob/HEAD/CHANGELOG.md#​2271---2023-01-11)
[Compare
Source](https://togithub.com/import-js/eslint-plugin-import/compare/v2.27.0...v2.27.1)
##### Fixed
- `array.prototype.flatmap` should be a prod dep
(\[[#​2664](https://togithub.com/import-js/eslint-plugin-import/issues/2664)],
thanks \[[@​cristobal](https://togithub.com/cristobal)])
###
[`v2.27.0`](https://togithub.com/import-js/eslint-plugin-import/blob/HEAD/CHANGELOG.md#​2270---2023-01-11)
[Compare
Source](https://togithub.com/import-js/eslint-plugin-import/compare/v2.26.0...v2.27.0)
##### Added
- \[`newline-after-import`]: add `considerComments` option
(\[[#​2399](https://togithub.com/import-js/eslint-plugin-import/issues/2399)],
thanks \[[@​pri1311](https://togithub.com/pri1311)])
- \[`no-cycle`]: add `allowUnsafeDynamicCyclicDependency` option
(\[[#​2387](https://togithub.com/import-js/eslint-plugin-import/issues/2387)],
thanks \[[@​GerkinDev](https://togithub.com/GerkinDev)])
- \[`no-restricted-paths`]: support arrays for `from` and `target`
options
(\[[#​2466](https://togithub.com/import-js/eslint-plugin-import/issues/2466)],
thanks \[[@​AdriAt360](https://togithub.com/AdriAt360)])
- \[`no-anonymous-default-export`]: add `allowNew` option
(\[[#​2505](https://togithub.com/import-js/eslint-plugin-import/issues/2505)],
thanks \[[@​DamienCassou](https://togithub.com/DamienCassou)])
- \[`order`]: Add `distinctGroup` option
(\[[#​2395](https://togithub.com/import-js/eslint-plugin-import/issues/2395)],
thanks \[[@​hyperupcall](https://togithub.com/hyperupcall)])
- \[`no-extraneous-dependencies`]: Add `includeInternal` option
(\[[#​2541](https://togithub.com/import-js/eslint-plugin-import/issues/2541)],
thanks \[[@​bdwain](https://togithub.com/bdwain)])
- \[`no-extraneous-dependencies`]: Add `includeTypes` option
(\[[#​2543](https://togithub.com/import-js/eslint-plugin-import/issues/2543)],
thanks \[[@​bdwain](https://togithub.com/bdwain)])
- \[`order`]: new `alphabetize.orderImportKind` option to sort imports
with same path based on their kind (`type`, `typeof`)
(\[[#​2544](https://togithub.com/import-js/eslint-plugin-import/issues/2544)],
thanks \[[@​stropho](https://togithub.com/stropho)])
- \[`consistent-type-specifier-style`]: add rule
(\[[#​2473](https://togithub.com/import-js/eslint-plugin-import/issues/2473)],
thanks \[[@​bradzacher](https://togithub.com/bradzacher)])
- Add \[`no-empty-named-blocks`] rule
(\[[#​2568](https://togithub.com/import-js/eslint-plugin-import/issues/2568)],
thanks \[[@​guilhermelimak](https://togithub.com/guilhermelimak)])
- \[`prefer-default-export`]: add "target" option
(\[[#​2602](https://togithub.com/import-js/eslint-plugin-import/issues/2602)],
thanks \[[@​azyzz228](https://togithub.com/azyzz228)])
- \[`no-absolute-path`]: add fixer
(\[[#​2613](https://togithub.com/import-js/eslint-plugin-import/issues/2613)],
thanks \[[@​adipascu](https://togithub.com/adipascu)])
- \[`no-duplicates`]: support inline type import with `inlineTypeImport`
option
(\[[#​2475](https://togithub.com/import-js/eslint-plugin-import/issues/2475)],
thanks \[[@​snewcomer](https://togithub.com/snewcomer)])
##### Fixed
- \[`order`]: move nested imports closer to main import entry
(\[[#​2396](https://togithub.com/import-js/eslint-plugin-import/issues/2396)],
thanks \[[@​pri1311](https://togithub.com/pri1311)])
- \[`no-restricted-paths`]: fix an error message
(\[[#​2466](https://togithub.com/import-js/eslint-plugin-import/issues/2466)],
thanks \[[@​AdriAt360](https://togithub.com/AdriAt360)])
- \[`no-restricted-paths`]: use `Minimatch.match` instead of `minimatch`
to comply with Windows Native paths
(\[[#​2466](https://togithub.com/import-js/eslint-plugin-import/issues/2466)],
thanks \[[@​AdriAt360](https://togithub.com/AdriAt360)])
- \[`order`]: require with member expression could not be fixed if
alphabetize.order was used
(\[[#​2490](https://togithub.com/import-js/eslint-plugin-import/issues/2490)],
thanks \[[@​msvab](https://togithub.com/msvab)])
- \[`order`]: leave more space in rankings for consecutive path groups
(\[[#​2506](https://togithub.com/import-js/eslint-plugin-import/issues/2506)],
thanks \[[@​Pearce-Ropion](https://togithub.com/Pearce-Ropion)])
- \[`no-cycle`]: add ExportNamedDeclaration statements to dependencies
(\[[#​2511](https://togithub.com/import-js/eslint-plugin-import/issues/2511)],
thanks \[[@​BenoitZugmeyer](https://togithub.com/BenoitZugmeyer)])
- \[`dynamic-import-chunkname`]: prevent false report on a valid webpack
magic comment
(\[[#​2330](https://togithub.com/import-js/eslint-plugin-import/issues/2330)],
thanks \[[@​mhmadhamster](https://togithub.com/mhmadhamster)])
- \[`export`]: do not error on TS export overloads
(\[[#​1590](https://togithub.com/import-js/eslint-plugin-import/issues/1590)],
thanks \[[@​ljharb](https://togithub.com/ljharb)])
- \[`no-unresolved`], \[`extensions`]: ignore type only exports
(\[[#​2436](https://togithub.com/import-js/eslint-plugin-import/issues/2436)],
thanks \[[@​Lukas-Kullmann](https://togithub.com/Lukas-Kullmann)])
- `ExportMap`: add missing param to function
(\[[#​2589](https://togithub.com/import-js/eslint-plugin-import/issues/2589)],
thanks \[[@​Fdawgs](https://togithub.com/Fdawgs)])
- \[`no-unused-modules`]: `checkPkgFieldObject` filters boolean fields
from checks
(\[[#​2598](https://togithub.com/import-js/eslint-plugin-import/issues/2598)],
thanks \[[@​mpint](https://togithub.com/mpint)])
- \[`no-cycle`]: accept Flow `typeof` imports, just like `type`
(\[[#​2608](https://togithub.com/import-js/eslint-plugin-import/issues/2608)],
thanks \[[@​gnprice](https://togithub.com/gnprice)])
- \[`no-import-module-exports`]: avoid a false positive for import
variables
(\[[#​2315](https://togithub.com/import-js/eslint-plugin-import/issues/2315)],
thanks
\[[@​BarryThePenguin](https://togithub.com/BarryThePenguin)])
##### Changed
- \[Tests] \[`named`]: Run all TypeScript test
(\[[#​2427](https://togithub.com/import-js/eslint-plugin-import/issues/2427)],
thanks \[[@​ProdigySim](https://togithub.com/ProdigySim)])
- \[readme] note use of typescript in readme `import/extensions` section
(\[[#​2440](https://togithub.com/import-js/eslint-plugin-import/issues/2440)],
thanks
\[[@​OutdatedVersion](https://togithub.com/OutdatedVersion)])
- \[Docs] \[`order`]: use correct default value
(\[[#​2392](https://togithub.com/import-js/eslint-plugin-import/issues/2392)],
thanks \[[@​hyperupcall](https://togithub.com/hyperupcall)])
- \[meta] replace git.io link in comments with the original URL
(\[[#​2444](https://togithub.com/import-js/eslint-plugin-import/issues/2444)],
thanks \[[@​liby](https://togithub.com/liby)])
- \[Docs] remove global install in readme
(\[[#​2412](https://togithub.com/import-js/eslint-plugin-import/issues/2412)],
thanks \[[@​aladdin-add](https://togithub.com/aladdin-add)])
- \[readme] clarify `eslint-import-resolver-typescript` usage
(\[[#​2503](https://togithub.com/import-js/eslint-plugin-import/issues/2503)],
thanks \[[@​JounQin](https://togithub.com/JounQin)])
- \[Refactor] \[`no-cycle`]: Add per-run caching of traversed paths
(\[[#​2419](https://togithub.com/import-js/eslint-plugin-import/issues/2419)],
thanks \[[@​nokel81](https://togithub.com/nokel81)])
- \[Performance] `ExportMap`: add caching after parsing for an ambiguous
module
(\[[#​2531](https://togithub.com/import-js/eslint-plugin-import/issues/2531)],
thanks \[[@​stenin-nikita](https://togithub.com/stenin-nikita)])
- \[Docs] \[`no-useless-path-segments`]: fix paths
(\[[#​2424](https://togithub.com/import-js/eslint-plugin-import/issues/2424)],
thanks \[[@​s-h-a-d-o-w](https://togithub.com/s-h-a-d-o-w)])
- \[Tests] \[`no-cycle`]: add passing test cases
(\[[#​2438](https://togithub.com/import-js/eslint-plugin-import/issues/2438)],
thanks \[[@​georeith](https://togithub.com/georeith)])
- \[Refactor] \[`no-extraneous-dependencies`] improve performance using
cache
(\[[#​2374](https://togithub.com/import-js/eslint-plugin-import/issues/2374)],
thanks \[[@​meowtec](https://togithub.com/meowtec)])
- \[meta] `CONTRIBUTING.md`: mention inactive PRs
(\[[#​2546](https://togithub.com/import-js/eslint-plugin-import/issues/2546)],
thanks \[[@​stropho](https://togithub.com/stropho)])
- \[readme] make json for setting groups multiline
(\[[#​2570](https://togithub.com/import-js/eslint-plugin-import/issues/2570)],
thanks \[[@​bertyhell](https://togithub.com/bertyhell)])
- \[Tests] \[`no-restricted-paths`]: Tests for `import type` statements
(\[[#​2459](https://togithub.com/import-js/eslint-plugin-import/issues/2459)],
thanks \[[@​golergka](https://togithub.com/golergka)])
- \[Tests] \[`no-restricted-paths`]: fix one failing `import type` test
case, submitted by \[[@​golergka](https://togithub.com/golergka)],
thanks \[[@​azyzz228](https://togithub.com/azyzz228)]
- \[Docs] automate docs with eslint-doc-generator
(\[[#​2582](https://togithub.com/import-js/eslint-plugin-import/issues/2582)],
thanks \[[@​bmish](https://togithub.com/bmish)])
- \[readme] Increase clarity around typescript configuration
(\[[#​2588](https://togithub.com/import-js/eslint-plugin-import/issues/2588)],
thanks \[[@​Nfinished](https://togithub.com/Nfinished)])
- \[Docs] update `eslint-doc-generator` to v1.0.0
(\[[#​2605](https://togithub.com/import-js/eslint-plugin-import/issues/2605)],
thanks \[[@​bmish](https://togithub.com/bmish)])
- \[Perf] \[`no-cycle`], \[`no-internal-modules`],
\[`no-restricted-paths`]: use `anyOf` instead of `oneOf` (thanks
\[[@​ljharb](https://togithub.com/ljharb)],
\[[@​remcohaszing](https://togithub.com/remcohaszing)])
</details>
<details>
<summary>github/codeql-action</summary>
###
[`v2.2.1`](https://togithub.com/github/codeql-action/compare/v2.2.0...v2.2.1)
[Compare
Source](https://togithub.com/github/codeql-action/compare/v2.2.0...v2.2.1)
###
[`v2.2.0`](https://togithub.com/github/codeql-action/compare/v2.1.39...v2.2.0)
[Compare
Source](https://togithub.com/github/codeql-action/compare/v2.1.39...v2.2.0)
###
[`v2.1.39`](https://togithub.com/github/codeql-action/compare/v2.1.38...v2.1.39)
[Compare
Source](https://togithub.com/github/codeql-action/compare/v2.1.38...v2.1.39)
###
[`v2.1.38`](https://togithub.com/github/codeql-action/compare/v2.1.37...v2.1.38)
[Compare
Source](https://togithub.com/github/codeql-action/compare/v2.1.37...v2.1.38)
###
[`v2.1.37`](https://togithub.com/github/codeql-action/compare/v2.1.36...v2.1.37)
[Compare
Source](https://togithub.com/github/codeql-action/compare/v2.1.36...v2.1.37)
###
[`v2.1.36`](https://togithub.com/github/codeql-action/compare/v2.1.35...v2.1.36)
[Compare
Source](https://togithub.com/github/codeql-action/compare/v2.1.35...v2.1.36)
###
[`v2.1.35`](https://togithub.com/github/codeql-action/compare/v2.1.34...v2.1.35)
[Compare
Source](https://togithub.com/github/codeql-action/compare/v2.1.34...v2.1.35)
###
[`v2.1.34`](https://togithub.com/github/codeql-action/compare/v2.1.33...v2.1.34)
[Compare
Source](https://togithub.com/github/codeql-action/compare/v2.1.33...v2.1.34)
###
[`v2.1.33`](https://togithub.com/github/codeql-action/compare/v2.1.32...v2.1.33)
[Compare
Source](https://togithub.com/github/codeql-action/compare/v2.1.32...v2.1.33)
###
[`v2.1.32`](https://togithub.com/github/codeql-action/compare/v2.1.31...v2.1.32)
[Compare
Source](https://togithub.com/github/codeql-action/compare/v2.1.31...v2.1.32)
###
[`v2.1.31`](https://togithub.com/github/codeql-action/compare/v2.1.30...v2.1.31)
[Compare
Source](https://togithub.com/github/codeql-action/compare/v2.1.30...v2.1.31)
###
[`v2.1.30`](https://togithub.com/github/codeql-action/compare/v2.1.29...v2.1.30)
[Compare
Source](https://togithub.com/github/codeql-action/compare/v2.1.29...v2.1.30)
###
[`v2.1.29`](https://togithub.com/github/codeql-action/compare/v2.1.28...v2.1.29)
[Compare
Source](https://togithub.com/github/codeql-action/compare/v2.1.28...v2.1.29)
###
[`v2.1.28`](https://togithub.com/github/codeql-action/compare/v2.1.27...v2.1.28)
[Compare
Source](https://togithub.com/github/codeql-action/compare/v2.1.27...v2.1.28)
</details>
<details>
<summary>gradle/gradle</summary>
### [`v7.5.1`](https://togithub.com/gradle/gradle/releases/tag/v7.5.1):
7.5.1
This is a patch release for 7.5. We recommend using 7.5.1 instead of 7.5
[Read the Release
Notes](https://docs.gradle.org/7.5.1/release-notes.html)
We would like to thank the following community members for their
contributions to this release of Gradle:
[Michael Bailey](https://togithub.com/yogurtearl),
[Josh Kasten](https://togithub.com/jkasten2),
[Marcono1234](https://togithub.com/Marcono1234),
[mataha](https://togithub.com/mataha),
[Lieven Vaneeckhaute](https://togithub.com/denshade),
[kiwi-oss](https://togithub.com/kiwi-oss),
[Stefan Neuhaus](https://togithub.com/stefanneuhaus),
[George Thomas](https://togithub.com/smoothreggae),
[Anja Papatola](https://togithub.com/apalopta),
[Björn Kautler](https://togithub.com/Vampire),
[David Burström](https://togithub.com/davidburstrom),
[Vladimir Sitnikov](https://togithub.com/vlsi),
[Roland Weisleder](https://togithub.com/rweisleder),
[Konstantin Gribov](https://togithub.com/grossws),
[David Op de Beeck](https://togithub.com/DavidOpDeBeeck),
[aSemy](https://togithub.com/aSemy),
[Rene Groeschke](https://togithub.com/breskeby),
[Jonathan Leitschuh](https://togithub.com/JLLeitschuh),
[Aurimas Liutikas](https://togithub.com/liutikas),
[Jamie Tanna](https://togithub.com/jamietanna),
[Xin Wang](https://togithub.com/scaventz),
[Atsuto Yamashita](https://togithub.com/att55),
[Taeik Lim](https://togithub.com/acktsap),
[Peter Gafert](https://togithub.com/codecholeric),
[Alex Landau](https://togithub.com/AlexLandau),
[Jerry Wiltse](https://togithub.com/solvingj),
[Tyler Burke](https://togithub.com/T-A-B),
[Matthew Haughton](https://togithub.com/3flex),
[Filip Daca](https://togithub.com/filip-daca),
[Simão Gomes Viana](https://togithub.com/xdevs23),
[Vaidotas Valuckas](https://togithub.com/rieske),
[Edgars Jasmans](https://togithub.com/yasmans),
[Tomasz Godzik](https://togithub.com/tgodzik),
[Jeff](https://togithub.com/mathjeff),
[Lajos Veres](https://togithub.com/vlajos)
#### Upgrade instructions
Switch your build to use Gradle 7.5.1 by updating your wrapper:
`./gradlew wrapper --gradle-version=7.5.1`
See the [Gradle 7.x upgrade
guide](https://docs.gradle.org/7.5.1/userguide/upgrading_version\_7.html#changes\_7.5)
to learn about deprecations, breaking changes and other considerations
when upgrading.
#### Reporting Problems
If you find a problem with this release, please file a bug on [GitHub
Issues](https://togithub.com/gradle/gradle/issues) adhering to our issue
guidelines.
If you're not sure you're encountering a bug, please use the
[forum](https://discuss.gradle.org/c/help-discuss).
### [`v7.4.2`](https://togithub.com/gradle/gradle/releases/tag/v7.4.2):
7.4.2
This is a patch release for Gradle 7.4.
See the list of fixed issues:
https://docs.gradle.org/7.4.2/release-notes.html
We recommend users upgrade to 7.4.2 instead of 7.4 or another patch
release.
#### Upgrade Instructions
Switch your build to use Gradle 7.4.2 by updating your wrapper:
./gradlew wrapper --gradle-version=7.4.2
See the [Gradle 7.x upgrade
guide](https://docs.gradle.org/7.4.2/userguide/upgrading_version\_7.html#changes\_7.4)
to learn about deprecations, breaking changes and other considerations
when upgrading to Gradle 7.4.2.
#### Reporting Problems
If you find a problem with this release, please file a bug on [GitHub
Issues](https://togithub.com/gradle/gradle/issues) adhering to our issue
guidelines.
If you're not sure you're encountering a bug, please use the
[forum](https://discuss.gradle.org/c/help-discuss).
</details>
<details>
<summary>ossf/scorecard-action</summary>
###
[`v2.1.2`](https://togithub.com/ossf/scorecard-action/releases/tag/v2.1.2)
[Compare
Source](https://togithub.com/ossf/scorecard-action/compare/v2.1.1...v2.1.2)
#### What's Changed
##### Fixes
- 🌱 Bump scorecard dependency to v4.10.2 to remove a CODEOWNERS printf
statement. by
[@​spencerschrock](https://togithub.com/spencerschrock) in
[https://github.com/ossf/scorecard-action/pull/1054](https://togithub.com/ossf/scorecard-action/pull/1054)
**Full Changelog**:
https://github.com/ossf/scorecard-action/compare/v2.1.1...v2.1.2
###
[`v2.1.1`](https://togithub.com/ossf/scorecard-action/releases/tag/v2.1.1)
[Compare
Source](https://togithub.com/ossf/scorecard-action/compare/v2.1.0...v2.1.1)
#### Scorecard version
This release use [Scorecard's
v4.10.1](https://togithub.com/ossf/scorecard/releases/tag/v4.10.1)
**Full Changelog**:
https://github.com/ossf/scorecard-action/compare/v2.1.0...v2.1.1
###
[`v2.1.0`](https://togithub.com/ossf/scorecard-action/releases/tag/v2.1.0)
[Compare
Source](https://togithub.com/ossf/scorecard-action/compare/v2.0.6...v2.1.0)
#### What's Changed
##### Scorecard version
This release uses [scorecard
v4.10.0](https://togithub.com/ossf/scorecard/releases/tag/v4.10.0).
##### Improvements
- Docker build workflow by
[@​naveensrinivasan](https://togithub.com/naveensrinivasan) in
[https://github.com/ossf/scorecard-action/pull/981](https://togithub.com/ossf/scorecard-action/pull/981)
- Use root user in distroless to support GitHub Actions by
[@​spencerschrock](https://togithub.com/spencerschrock) in
[https://github.com/ossf/scorecard-action/pull/994](https://togithub.com/ossf/scorecard-action/pull/994)
- Disable pull_request_target by
[@​laurentsimon](https://togithub.com/laurentsimon) in
[https://github.com/ossf/scorecard-action/pull/1031](https://togithub.com/ossf/scorecard-action/pull/1031)
##### Documentation
- Add PAT section explaining risks by
[@​olivekl](https://togithub.com/olivekl) in
[https://github.com/ossf/scorecard-action/pull/1024](https://togithub.com/ossf/scorecard-action/pull/1024)
- Make the badge text easier to copy by
[@​rajbos](https://togithub.com/rajbos) in
[https://github.com/ossf/scorecard-action/pull/1026](https://togithub.com/ossf/scorecard-action/pull/1026)
#### New Contributors
- [@​joycebrum](https://togithub.com/joycebrum) made their first
contribution in
[https://github.com/ossf/scorecard-action/pull/984](https://togithub.com/ossf/scorecard-action/pull/984)
- [@​rajbos](https://togithub.com/rajbos) made their first
contribution in
[https://github.com/ossf/scorecard-action/pull/1026](https://togithub.com/ossf/scorecard-action/pull/1026)
**Full Changelog**:
https://github.com/ossf/scorecard-action/compare/v2.0.6...v2.1.0
</details>
<details>
<summary>terraform-linters/tflint-ruleset-aws</summary>
###
[`v0.21.2`](https://togithub.com/terraform-linters/tflint-ruleset-aws/blob/HEAD/CHANGELOG.md#​0212-2023-02-03)
[Compare
Source](https://togithub.com/terraform-linters/tflint-ruleset-aws/compare/v0.21.1...v0.21.2)
##### Enhancements
-
[#​431](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/431)
[#​442](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/442):
Update AWS provider/module and generated content
##### Chores
-
[#​433](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/433)
[#​441](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/441):
Bump golang.org/x/net from 0.2.0 to 0.5.0
-
[#​434](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/434):
Bump goreleaser/goreleaser-action from 3 to 4
-
[#​435](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/435):
Pass `GITHUB_TOKEN` to e2e test workflow
([@​wata727](https://togithub.com/wata727))
-
[#​437](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/437):
Bump github.com/terraform-linters/tflint-plugin-sdk from 0.14.0 to
0.15.0
###
[`v0.21.1`](https://togithub.com/terraform-linters/tflint-ruleset-aws/blob/HEAD/CHANGELOG.md#​0211-2022-12-12)
[Compare
Source](https://togithub.com/terraform-linters/tflint-ruleset-aws/compare/v0.21.0...v0.21.1)
##### BugFixes
-
[#​430](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/430):
`elasticache_cluster_previous_type`: fix panic on empty string
([@​bendrucker](https://togithub.com/bendrucker))
##### Chores
-
[#​407](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/407):
autogenerated maintenance
###
[`v0.21.0`](https://togithub.com/terraform-linters/tflint-ruleset-aws/blob/HEAD/CHANGELOG.md#​0210-2022-12-05)
[Compare
Source](https://togithub.com/terraform-linters/tflint-ruleset-aws/compare/v0.20.0...v0.21.0)
##### Enhancements
-
[#​403](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/403):
autogenerated maintenance
-
[#​405](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/405)
[#​406](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/406):
Add assume role configuration to plugin config
([@​kaito3desuyo](https://togithub.com/kaito3desuyo))
###
[`v0.20.0`](https://togithub.com/terraform-linters/tflint-ruleset-aws/blob/HEAD/CHANGELOG.md#​0200-2022-11-27)
[Compare
Source](https://togithub.com/terraform-linters/tflint-ruleset-aws/compare/v0.19.0...v0.20.0)
##### Enhancements
-
[#​400](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/400):
autogenerated maintenance
##### Chores
-
[#​399](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/399):
Bump up GoReleaser version in release.yml
([@​wata727](https://togithub.com/wata727))
-
[#​401](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/401):
Bump golang.org/x/net from 0.1.0 to 0.2.0
###
[`v0.19.0`](https://togithub.com/terraform-linters/tflint-ruleset-aws/blob/HEAD/CHANGELOG.md#​0190-2022-11-14)
[Compare
Source](https://togithub.com/terraform-linters/tflint-ruleset-aws/compare/v0.18.0...v0.19.0)
##### Enhancements
-
[#​390](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/390):
autogenerated maintenance
##### BugFixes
-
[#​397](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/397):
Prefer credentials in "plugin" blocks over "provider" blocks
([@​wata727](https://togithub.com/wata727))
##### Chores
-
[#​394](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/394):
Add signatures for keyless signing
([@​wata727](https://togithub.com/wata727))
-
[#​395](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/395):
Bump github.com/hashicorp/hcl/v2 from 2.14.1 to 2.15.0
-
[#​398](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/398):
Bump up GoReleaser version
([@​wata727](https://togithub.com/wata727))
###
[`v0.18.0`](https://togithub.com/terraform-linters/tflint-ruleset-aws/blob/HEAD/CHANGELOG.md#​0180-2022-10-24)
[Compare
Source](https://togithub.com/terraform-linters/tflint-ruleset-aws/compare/v0.17.1...v0.18.0)
##### Breaking Changes
-
[#​367](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/367):
remove hardcoded S3 region rule
([@​PatMyron](https://togithub.com/PatMyron))
##### Enhancements
-
[#​382](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/382):
autogenerated maintenance
-
[#​388](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/388):
Bump tflint-plugin-sdk to v0.14.0
([@​wata727](https://togithub.com/wata727))
##### Chores
-
[#​387](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/387):
Bump github.com/dave/dst from 0.27.0 to 0.27.2
###
[`v0.17.1`](https://togithub.com/terraform-linters/tflint-ruleset-aws/blob/HEAD/CHANGELOG.md#​0171-2022-09-29)
[Compare
Source](https://togithub.com/terraform-linters/tflint-ruleset-aws/compare/v0.17.0...v0.17.1)
##### Enhancements
-
[#​373](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/373):
autogenerated maintenance
-
[#​380](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/380):
Update db instance type list with m6i and r6i
([@​milestruecar](https://togithub.com/milestruecar))
##### Chores
-
[#​374](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/374):
Bump github.com/google/go-cmp from 0.5.8 to 0.5.9
-
[#​377](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/377):
Bump github.com/terraform-linters/tflint-plugin-sdk from 0.12.0 to
0.13.0
-
[#​378](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/378):
Bump github.com/hashicorp/hcl/v2 from 2.14.0 to 2.14.1
###
[`v0.17.0`](https://togithub.com/terraform-linters/tflint-ruleset-aws/blob/HEAD/CHANGELOG.md#​0170-2022-09-08)
[Compare
Source](https://togithub.com/terraform-linters/tflint-ruleset-aws/compare/v0.16.1...v0.17.0)
The minimum supported version of TFLint has changed in this version.
TFLint v0.40.0+ is required for this plugin to work.
##### Breaking Changes
-
[#​369](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/369):
Bump tflint-plugin-sdk to v0.12.0
([@​wata727](https://togithub.com/wata727))
##### Enhancements
-
[#​366](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/366):
autogenerated maintenance
##### Chores
-
[#​365](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/365):
Bump github.com/zclconf/go-cty from 1.10.0 to 1.11.0
-
[#​368](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/368):
Bump github.com/hashicorp/hcl/v2 from 2.13.0 to 2.14.0
-
[#​371](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/371):
build: Improve Go workflows
([@​wata727](https://togithub.com/wata727))
###
[`v0.16.1`](https://togithub.com/terraform-linters/tflint-ruleset-aws/blob/HEAD/CHANGELOG.md#​0161-2022-08-27)
[Compare
Source](https://togithub.com/terraform-linters/tflint-ruleset-aws/compare/v0.16.0...v0.16.1)
##### Enhancements
-
[363](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/363):
autogenerated maintenance
###
[`v0.16.0`](https://togithub.com/terraform-linters/tflint-ruleset-aws/blob/HEAD/CHANGELOG.md#​0160-2022-08-14)
[Compare
Source](https://togithub.com/terraform-linters/tflint-ruleset-aws/compare/v0.15.0...v0.16.0)
##### Enhancements
-
[#​358](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/358):
autogenerated maintenance
- Removed `aws_cloudwatch_metric_alarm_invalid_extended_statistic` rule
-
[#​362](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/362):
Lambda runtime deprecation updates
([@​PatMyron](https://togithub.com/PatMyron))
##### Chores
-
[#​359](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/359):
go 1.19 ([@​PatMyron](https://togithub.com/PatMyron))
###
[`v0.15.0`](https://togithub.com/terraform-linters/tflint-ruleset-aws/blob/HEAD/CHANGELOG.md#​0150-2022-07-15)
[Compare
Source](https://togithub.com/terraform-linters/tflint-ruleset-aws/compare/v0.14.0...v0.15.0)
##### Enhancements
-
[#​352](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/352):
autogenerated maintenance
-
[#​355](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/355):
Add `aws_security_group_rule_invalid_protocol` rule
([@​x-color](https://togithub.com/x-color))
-
[#​356](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/356):
Add `aws_security_group_invalid_protocol` rule
([@​x-color](https://togithub.com/x-color))
##### Chores
-
[#​354](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/354):
Bump github.com/hashicorp/hcl/v2 from 2.12.0 to 2.13.0
###
[`v0.14.0`](https://togithub.com/terraform-linters/tflint-ruleset-aws/blob/HEAD/CHANGELOG.md#​0140-2022-05-31)
[Compare
Source](https://togithub.com/terraform-linters/tflint-ruleset-aws/compare/v0.13.4...v0.14.0)
##### Enhancements
-
[#​342](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/342):
feat: support provider aliases in deep checking
([@​suzuki-shunsuke](https://togithub.com/suzuki-shunsuke))
-
[#​343](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/343):
autogenerated maintenance
##### Chores
-
[#​344](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/344):
Bump github.com/terraform-linters/tflint-plugin-sdk from 0.10.1 to
0.11.0
-
[#​347](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/347):
Bump goreleaser/goreleaser-action from 2 to 3
-
[#​351](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/351):
Bump github.com/dave/dst from 0.26.2 to 0.27.0
###
[`v0.13.4`](https://togithub.com/terraform-linters/tflint-ruleset-aws/blob/HEAD/CHANGELOG.md#​0134-2022-05-05)
[Compare
Source](https://togithub.com/terraform-linters/tflint-ruleset-aws/compare/v0.13.3...v0.13.4)
##### Enhancements
-
[#​336](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/336):
autogenerated maintenance
##### Chores
-
[#​338](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/338):
Bump github.com/hashicorp/hcl/v2 from 2.11.1 to 2.12.0
-
[#​339](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/339):
Bump github.com/google/go-cmp from 0.5.7 to 0.5.8
-
[#​340](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/340):
Replace logger from the standard logger
([@​wata727](https://togithub.com/wata727))
-
[#​341](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/341):
Add E2E tests ([@​wata727](https://togithub.com/wata727))
###
[`v0.13.3`](https://togithub.com/terraform-linters/tflint-ruleset-aws/blob/HEAD/CHANGELOG.md#​0133-2022-04-17)
[Compare
Source](https://togithub.com/terraform-linters/tflint-ruleset-aws/compare/v0.13.2...v0.13.3)
##### Enhancements
-
[#​324](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/324):
autogenerated maintenance
-
[#​335](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/335):
Lambda runtime deprecation updates (python3.6)
([@​PatMyron](https://togithub.com/PatMyron))
##### Chores
-
[#​328](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/328):
chores: Remove snaker ([@​wata727](https://togithub.com/wata727))
-
[#​329](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/329):
Fix rule template for rule generator
([@​wata727](https://togithub.com/wata727))
-
[#​330](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/330):
Bump github.com/terraform-linters/tflint-plugin-sdk from 0.10.0 to
0.10.1
-
[#​333](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/333):
style: format rules/api/rule.go.tmpl and run `go generate ./...`
([@​suzuki-shunsuke](https://togithub.com/suzuki-shunsuke))
-
[#​334](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/334):
Bump actions/setup-go from 2 to 3
</details>
<details>
<summary>Microsoft/TypeScript</summary>
###
[`v4.9.5`](https://togithub.com/microsoft/TypeScript/releases/tag/v4.9.5):
TypeScript 4.9.5
[Compare
Source](https://togithub.com/Microsoft/TypeScript/compare/v4.9.4...v4.9.5)
For release notes, check out the [release
announcement](https://devblogs.microsoft.com/typescript/announcing-typescript-4-9/).
Downloads are available on:
- [npm](https://www.npmjs.com/package/typescript)
- [NuGet
package](https://www.nuget.org/packages/Microsoft.TypeScript.MSBuild)
#### Changes:
-
[`69e88ef`](https://togithub.com/Microsoft/TypeScript/commit/69e88ef5513a81acf69ec78f4af1f927da0d0584)
Port ignore deprecations to 4.9
([#​52419](https://togithub.com/Microsoft/TypeScript/issues/52419))
-
[`daf4e81`](https://togithub.com/Microsoft/TypeScript/commit/daf4e817a18def96b70ac34703b158ff0e6d58df)
Port timestamp fix to 4.9
([#​52426](https://togithub.com/Microsoft/TypeScript/issues/52426))
###
[`v4.9.4`](https://togithub.com/microsoft/TypeScript/releases/tag/v4.9.4):
TypeScript 4.9.4
[Compare
Source](https://togithub.com/Microsoft/TypeScript/compare/v4.9.3...v4.9.4)
For release notes, check out the [release
announcement](https://devblogs.microsoft.com/typescript/announcing-typescript-4-9).
For the complete list of fixed issues, check out the
- [fixed issues query for Typescript
v4.9.4](https://togithub.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\&q=is%3Aissue+milestone%3A%22TypeScript+4.9.4%22+is%3Aclosed+).
Downloads are available on:
- [npm](https://www.npmjs.com/package/typescript)
- [NuGet
package](https://www.nuget.org/packages/Microsoft.TypeScript.MSBuild)
##### Changes:
-
[`e286821`](https://togithub.com/Microsoft/TypeScript/commit/e2868216f637e875a74c675845625eb15dcfe9a2)
Bump version to 4.9.4 and LKG.
-
[`eb5419f`](https://togithub.com/Microsoft/TypeScript/commit/eb5419fc8d980859b98553586dfb5f40d811a745)
Cherry-pick
[#​51704](https://togithub.com/Microsoft/TypeScript/issues/51704)
to release 4.9
([#​51712](https://togithub.com/Microsoft/TypeScript/issues/51712))
-
[`b4d382b`](https://togithub.com/Microsoft/TypeScript/commit/b4d382b9b12460adf2da4cc0d1429cf19f8dc8be)
Cherry-pick changes for narrowing to tagged literal types.
-
[`e7a02f4`](https://togithub.com/Microsoft/TypeScript/commit/e7a02f43fce47e1a39259ada5460bcc33c8e98b5)
Port of
[#​51626](https://togithub.com/Microsoft/TypeScript/issues/51626)
and
[#​51689](https://togithub.com/Microsoft/TypeScript/issues/51689)
to release-4.9
([#​51627](https://togithub.com/Microsoft/TypeScript/issues/51627))
-
[`1727912`](https://togithub.com/Microsoft/TypeScript/commit/1727912f0437a7f367d90040fc4b0b4f3efd017a)
Cherry-pick fix around `visitEachChild` to release-4.9.
([#​51544](https://togithub.com/Microsoft/TypeScript/issues/51544))
This list of changes was [auto
generated](https://typescript.visualstudio.com/cf7ac146-d525-443c-b23c-0d58337efebc/\_release?releaseId=117&\_a=release-summary).
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config help](https://togithub.com/renovatebot/renovate/discussions) if
that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://app.renovatebot.com/dashboard#github/trunk-io/plugins).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNC4xMjIuMSIsInVwZGF0ZWRJblZlciI6IjM0LjEyMi4xIn0=-->
---------
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Eli Schleifer <eli@trunk.io>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This adds a new workflow to help moving a main version tag (e.g. `v3) to a new reference
