chore(deps): update dependabot/fetch-metadata action to v1.7.0 #82
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![mend-for-github-com[bot]](https://avatars.githubusercontent.com/in/30796?s=60&v=4){kind=small}
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v1.1.1->v1.7.0Release Notes
dependabot/fetch-metadata (dependabot/fetch-metadata)
v1.7.0Compare Source
What's Changed
diffdirectory by @jeffwidman in https://github.com/dependabot/fetch-metadata/pull/278New Contributors
Full Changelog: dependabot/fetch-metadata@v1.6.0...v1.7.0
v1.6.0Compare Source
What's Changed
.vscodefolder to.gitignoreby @timothy-humphrey in https://github.com/dependabot/fetch-metadata/pull/385New Contributors
Full Changelog: dependabot/fetch-metadata@v1...v1.6.0
v1.5.1Compare Source
What's Changed
Bugfix:
Dep bumps that are trivial so decided to keep this a patch release:
Internal-facing infra changes:
eslint-related deps by @jeffwidman in https://github.com/dependabot/fetch-metadata/pull/374Full Changelog: dependabot/fetch-metadata@v1...v1.5.1
v1.5.0Compare Source
What's Changed
New Features:
Bumped Deps:
Docs:
Code cleanup:
GITHUB_TOKENby @jeffwidman in https://github.com/dependabot/fetch-metadata/pull/357bin/bump-versionby @jeffwidman in https://github.com/dependabot/fetch-metadata/pull/368set-outputby @jeffwidman in https://github.com/dependabot/fetch-metadata/pull/370v1tag to the latest release by @jeffwidman in https://github.com/dependabot/fetch-metadata/pull/361Full Changelog: dependabot/fetch-metadata@v1...v1.5.0
v1.4.0Compare Source
New Features
Bugfix
von commit message versions by @jonmcquillan in https://github.com/dependabot/fetch-metadata/pull/338Dep Bumps
Other
New Contributors
Full Changelog: dependabot/fetch-metadata@v1...v1.4.0
v1.3.6Compare Source
What's Changed
git pullfetches all branches/tags by @jeffwidman in https://github.com/dependabot/fetch-metadata/pull/284New Contributors
Full Changelog: dependabot/fetch-metadata@v1...v1.3.6
v1.3.5Compare Source
What's Changed
README.mdby @jeffwidman in https://github.com/dependabot/fetch-metadata/pull/280New Contributors
Full Changelog: dependabot/fetch-metadata@v1...v1.3.5
v1.3.4Compare Source
What's Changed
New Contributors
Full Changelog: dependabot/fetch-metadata@v1.3.3...v1.3.4
v1.3.3Compare Source
What's Changed
New Contributors
Full Changelog: dependabot/fetch-metadata@v1.3.2...v1.3.3
v1.3.2Compare Source
What's Changed
New Contributors
Full Changelog: dependabot/fetch-metadata@v1.3.1...v1.3.2
v1.3.1Compare Source
Highlights
This release is primarily catching up on our dependencies, but it also includes a few bug fixes:
update-typeto be blank occasionally, thanks @mwaddellWhat's Changed
update-typeis missing for some reason, calculate it by @mwaddell in https://github.com/dependabot/fetch-metadata/pull/173New Contributors
Full Changelog: dependabot/fetch-metadata@v1.3.0...v1.3.1
v1.3.0: - Fetch additional metadata via the GitHub APICompare Source
Highlights
🆕 Fetch additional metadata about Dependabot commits
You can now optionally enable API lookups within the Action to retrieve extra information about Dependabot PRs.
Example:
The flags enable the following new outputs:
steps.dependabot-metadata.outputs.alert-statealert-lookupistrue, this contains the current state of that alert (OPEN, FIXED or DISMISSED).steps.dependabot-metadata.outputs.ghsa-idalert-lookupistrue, this contains the GHSA-ID of that alert.steps.dependabot-metadata.outputs.cvssalert-lookupistrue, this contains the CVSS value of that alert (otherwise it contains 0).steps.dependabot-metadata.outputs.compatibility-scorecompat-lookupistrue, this contains the compatibility score (otherwise it contains 0).Many thanks to @mwaddell for contributing these additional flags 🥇
The Action no longer fails if other commits are present
We received feedback at this change was highly obtrusive and blocking common workflows that merging in the target branch. Following on from changes in 1.2.1 to make it easier for a user to re-run failed workflows this friction was much more obvious.
Thanks for the feedback, and thanks @mwaddell for contributing the change.
The Action defaults to using the GITHUB_TOKEN
This makes us consistent with other GitHub Actions such as
actions/checkoutin using the baseline token provided to the workflow. Since the Action doesn't have any features which require write scopes this defaulting is adequate for all use cases.Thanks @jablko for contributing this change 🏆
What's Changed
bump-versionto update README.md as well by @mwaddell in https://github.com/dependabot/fetch-metadata/pull/163New Contributors
Full Changelog: dependabot/fetch-metadata@v1.2.1...v1.3.0
v1.2.1: - Workflows may be re-ran by someone other than DependabotCompare Source
Highlights:
fetch-metadataworkflows can be retried, thanks @mwaddell!What's Changed
dependency-typevalues by @mwaddell in https://github.com/dependabot/fetch-metadata/pull/145Full Changelog: dependabot/fetch-metadata@v1.2.0...v1.2.1
v1.2.0: - Updated outputsCompare Source
What's Changed
directory,package-ecosystem, andtarget-branchas outputs by @mwaddell in https://github.com/dependabot/fetch-metadata/pull/139All other changes are dev or build related.
Full Changelog: dependabot/fetch-metadata@v1.1.1...v1.2.0
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
disabled