Skip to content

build(deps): bump taskcluster from 42.1.1 to 43.1.0 in /tools #900

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Apr 19, 2021

Bumps taskcluster from 42.1.1 to 43.1.0.

Release notes

Sourced from taskcluster's releases.

v43.1.0

GENERAL

▶ [patch] #4696 The github.com/taskcluster/taskcluster/vNN/workers/generic-worker/mocktc library is no longer publicly exposed.

▶ [patch] Upgrade from node 14.16.0 to 14.16.1 across services and docker-worker.

DEPLOYERS

▶ [patch] bug 1442024 The object service now serves text/html content with Content-Disposition: attachment to avoid security issues inherent in serving arbitrary HTML documents.

WORKER-DEPLOYERS

▶ [patch] Go major version upgrade for generic-worker and worker-runner (go 1.15.6 -> go 1.16.3). Prerequisite step for providing native darwin/arm64 binaries for both (native Apple Silicon builds).

USERS

▶ [minor] #4548 The queue now additionally supports artifacts with the storageType object, stored via the object service.

▶ [patch] #4576 The shell client now has two new commands to download data from Taskcluster:

  • taskcluster download object <name> <filename> -- download directly from the object service
  • taskcluster download artifact <taskId> [<runId>] <name> <filename> -- download the content of an artifact These commands follow current best practices, including retries with backoff. When supported by the object service, they will also verify download integrity.

▶ [patch] #4698 Uploading functions in the Python client have been renamed to use camel-case instead of underscores.

OTHER

▶ Additional changes not described here: #4623, #4631, #4739, #4741, #4744.

Automated Package Updates

  • Update dependency js-yaml to v4.1.0 (bc2dda559)
  • Update dependency apollo-server-express to v2.23.0 (66941613e)
  • Update dependency newrelic to v7.3.1 (bd6a791e4)
  • Update dependency date-fns to v2.21.0 (64f8cc301)
  • Update module github.com/Microsoft/go-winio to v0.4.17 (426fca502)
  • Update dependency @​azure/arm-network to v24 (f825d482d)
  • Update dependency pg to v8.6.0 (30f5a5e10)
  • Update dependency pg-connection-string to v2.5.0 (2242418b5)

... (truncated)

Changelog

Sourced from taskcluster's changelog.

v43.1.0

GENERAL

▶ [patch] #4696 The github.com/taskcluster/taskcluster/vNN/workers/generic-worker/mocktc library is no longer publicly exposed.

▶ [patch] Upgrade from node 14.16.0 to 14.16.1 across services and docker-worker.

DEPLOYERS

▶ [patch] bug 1442024 The object service now serves text/html content with Content-Disposition: attachment to avoid security issues inherent in serving arbitrary HTML documents.

WORKER-DEPLOYERS

▶ [patch] Go major version upgrade for generic-worker and worker-runner (go 1.15.6 -> go 1.16.3). Prerequisite step for providing native darwin/arm64 binaries for both (native Apple Silicon builds).

USERS

▶ [minor] #4548 The queue now additionally supports artifacts with the storageType object, stored via the object service.

▶ [patch] #4576 The shell client now has two new commands to download data from Taskcluster:

  • taskcluster download object <name> <filename> -- download directly from the object service
  • taskcluster download artifact <taskId> [<runId>] <name> <filename> -- download the content of an artifact These commands follow current best practices, including retries with backoff. When supported by the object service, they will also verify download integrity.

▶ [patch] #4698 Uploading functions in the Python client have been renamed to use camel-case instead of underscores.

OTHER

▶ Additional changes not described here: #4623, #4631, #4739, #4741, #4744.

Automated Package Updates

  • Update dependency js-yaml to v4.1.0 (bc2dda559)
  • Update dependency apollo-server-express to v2.23.0 (66941613e)
  • Update dependency newrelic to v7.3.1 (bd6a791e4)
  • Update dependency date-fns to v2.21.0 (64f8cc301)
  • Update module github.com/Microsoft/go-winio to v0.4.17 (426fca502)
  • Update dependency @​azure/arm-network to v24 (f825d482d)
  • Update dependency pg to v8.6.0 (30f5a5e10)

... (truncated)

Commits
  • 65f54a3 v43.1.0
  • 3aeef76 changelog level for node upgrade = patch
  • 11aca1d Merge pull request #4775 from taskcluster/renovate/js-yaml-4.x-lockfile
  • dc3defb Merge pull request #4759 from djmitche/issue4576
  • bc2dda5 Update dependency js-yaml to v4.1.0
  • 6694161 Update dependency apollo-server-express to v2.23.0
  • bd6a791 Update dependency newrelic to v7.3.1
  • 5f80a73 Merge pull request #4773 from taskcluster/renovate/date-fns-2.x-lockfile
  • 64f8cc3 Update dependency date-fns to v2.21.0
  • 2ceec67 Merge pull request #4771 from taskcluster/renovate/github.com-microsoft-go-wi...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github May 3, 2021

Superseded by #918.

@dependabot dependabot bot closed this May 3, 2021
@dependabot dependabot bot deleted the dependabot/pip/tools/taskcluster-43.1.0 branch May 3, 2021 05:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
tools Common Python tools
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants