build(deps): bump taskcluster from 39.2.0 to 40.0.0 in /tools

[dependabot]

Bumps taskcluster from 39.2.0 to 40.0.0.

Release notes

Sourced from taskcluster's releases.

v40.0.0

DEPLOYERS

▶ [minor] This version removes the unused deployment configuration variable queue.use_cloud_mirror and queue.public_artifact_ec2_proxies. Neither served any useful purpose, and it is unlikely that either value appears in any deployment configuration.

WORKER-DEPLOYERS

▶ [patch] #4125 Workerpools now correctly understand the reregistrationTimeout option.

USERS

▶ [MAJOR] #3773 Support for superseding has been removed. See the linked issue for the detailed reasoning. While workers still allow supersederUrl in payloads, it has no effect. Older workers running with newer services that try to supersede tasks will encounter errors. No known instances of superseding exist.

▶ [MAJOR] #4123 The taskcluster-client-web library no longer implements OIDCCredentialAgent. This agent interfaced with a login.taskclutser.net service that no longer exists.

▶ [MAJOR] #3604 The notify service no longer supports irc notifications. IRC is declining in popularity and no known deployments of Taskcluster support this functionality, but it is nonetheless considered a breaking API change.

▶ [minor] #4050 The queue has a new artifact type, link, allowing links between artifacts on the same task.

▶ [patch] #4057 All clients (JS, Python, Go, Web, Shell) now fail when an API method results in a redirect, rather than following that redirect. The API methods that return redirects are those related to Taskcluster artifacts, and these methods must be accessed by building and fetching a signed URL.

▶ [patch] #2721 Taskcluster-proxy now correctly proxies "non-canonical" URLs, such as those containing // or urlencoded values.

▶ [patch] #3878 The Taskcluster UI now handles artifacts better, avoiding huge URLs that expire quickly.

▶ [patch] #3983 The UI will no longer fail when viewing a task with dependencies that have expired.

▶ [patch] #4199 The sift dependency has been updated again, to a version that does not cause #4061.

▶ [patch] #1064 The taskcluster command now parses errors from the API, and does not show the command usage when an error occurs.

▶ [patch] #3758 The taskcluster command will now display a warning after a short delay if it is expecting a request payload on stdin.

DEVELOPERS

▶ [minor] #3578 The queue service now uses taskQueueId internally instead of the pair provisionerId/workerType for tasks.

... (truncated)

Changelog

Sourced from taskcluster's changelog.

v40.0.0

DEPLOYERS

▶ [minor] This version removes the unused deployment configuration variable queue.use_cloud_mirror and queue.public_artifact_ec2_proxies. Neither served any useful purpose, and it is unlikely that either value appears in any deployment configuration.

WORKER-DEPLOYERS

▶ [patch] #4125 Workerpools now correctly understand the reregistrationTimeout option.

USERS

▶ [MAJOR] #3773 Support for superseding has been removed. See the linked issue for the detailed reasoning. While workers still allow supersederUrl in payloads, it has no effect. Older workers running with newer services that try to supersede tasks will encounter errors. No known instances of superseding exist.

▶ [MAJOR] #4123 The taskcluster-client-web library no longer implements OIDCCredentialAgent. This agent interfaced with a login.taskclutser.net service that no longer exists.

▶ [MAJOR] #3604 The notify service no longer supports irc notifications. IRC is declining in popularity and no known deployments of Taskcluster support this functionality, but it is nonetheless considered a breaking API change.

▶ [minor] #4050 The queue has a new artifact type, link, allowing links between artifacts on the same task.

▶ [patch] #4057 All clients (JS, Python, Go, Web, Shell) now fail when an API method results in a redirect, rather than following that redirect. The API methods that return redirects are those related to Taskcluster artifacts, and these methods must be accessed by building and fetching a signed URL.

▶ [patch] #2721 Taskcluster-proxy now correctly proxies "non-canonical" URLs, such as those containing // or urlencoded values.

▶ [patch] #3878 The Taskcluster UI now handles artifacts better, avoiding huge URLs that expire quickly.

▶ [patch] #3983 The UI will no longer fail when viewing a task with dependencies that have expired.

▶ [patch] #4199 The sift dependency has been updated again, to a version that does not cause #4061.

▶ [patch] #1064 The taskcluster command now parses errors from the API, and does not show the command usage when an error occurs.

▶ [patch] #3758 The taskcluster command will now display a warning after a short delay if it is expecting a request payload on stdin.

DEVELOPERS

▶ [minor] #3578

... (truncated)

Commits

• dff0880 v40.0.0
• 9e16cc2 Merge pull request #4216 from djmitche/issue4050
• af2c696 Fix typos from code review
• c49ff2a add changelog
• 7e2b668 Add a 'link' artifact type
• 9d3a16c allow get(Latest)Artifact to require scopes for multiple names
• f786579 Document that req.authorize can be called repeatedly
• 0efedd2 Refactor artifact tests into more units
• 58a1c47 remove outdated info about blob artifacts
• 6a2c127 update docs for redirect/reference artifact type
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #737.