Skip to content

chore(deps): bump the github-actions-dependencies group across 1 directory with 3 updates#145

Merged
neilime merged 1 commit intomainfrom
dependabot/github_actions/github-actions-dependencies-f90b9c66d8
May 2, 2025
Merged

chore(deps): bump the github-actions-dependencies group across 1 directory with 3 updates#145
neilime merged 1 commit intomainfrom
dependabot/github_actions/github-actions-dependencies-f90b9c66d8

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github May 2, 2025

Bumps the github-actions-dependencies group with 3 updates in the / directory: hoverkraft-tech/ci-github-nodejs, hoverkraft-tech/ci-github-common and actions/create-github-app-token.

Updates hoverkraft-tech/ci-github-nodejs from 0.10.0 to 0.11.0

Release notes

Sourced from hoverkraft-tech/ci-github-nodejs's releases.

0.11.0

Release Summary

This release introduces support for pnpm, enhancing compatibility and flexibility in project dependency management. Documentation related to actions and workflows has been refreshed for clarity and accuracy. Several dependency upgrades have been applied across both npm and GitHub Actions ecosystems, ensuring better performance, reliability, and security. These updates include improvements to Storybook, CodeQL, and other core GitHub Actions.

No breaking changes were introduced in this release.

What's Changed

Full Changelog: hoverkraft-tech/ci-github-nodejs@0.10.0...0.11.0

Commits
  • 5c1010a chore(deps): bump the github-actions-dependencies group across 2 directories ...
  • 5f0ea21 docs: update actions and workflows documentation
  • a180b74 feat: add support for pnpm
  • 8181eca chore(deps): bump github/codeql-action
  • 4cee370 chore(deps): bump the npm-dependencies group with 2 updates
  • 78c6178 chore(deps): bump actions/dependency-review-action
  • fced66a chore(deps): bump the npm-dependencies group with 2 updates
  • 1a9c073 chore(deps): bump hoverkraft-tech/ci-github-common
  • 740d2f8 chore(deps): bump storybook in the npm-dependencies group
  • f8554ff docs: update actions and workflows documentation
  • See full diff in compare view

Updates hoverkraft-tech/ci-github-common from 0.22.2 to 0.22.3

Release notes

Sourced from hoverkraft-tech/ci-github-common's releases.

0.22.3

Release Summary

This release includes a documentation update for GitHub Actions workflows and improvements to CI job configurations. A bug fix was applied to correct CodeQL job permissions under the linter scope. Additionally, dependency versions were updated for hoverkraft-tech/ci-github-publish and github/codeql-action to ensure better compatibility and security.

No breaking changes were introduced in this release.

What's Changed

Full Changelog: hoverkraft-tech/ci-github-common@0.22.2...0.22.3

Commits
  • 95664be chore(deps): bump github/codeql-action
  • 70e1a1b fix(linter): set proper permissions for CodeQL job
  • 5748b3d chore(deps): bump hoverkraft-tech/ci-github-publish
  • 6dc532c docs: update actions and workflows documentation
  • See full diff in compare view

Updates actions/create-github-app-token from 2.0.2 to 2.0.3

Release notes

Sourced from actions/create-github-app-token's releases.

v2.0.3

2.0.3 (2025-05-01)

Bug Fixes

  • README: use v2 in examples (#234) (9ba274d), closes #232
  • use core.getBooleanInput() to retrieve boolean input values (#223) (c3c17c7)
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels May 2, 2025
…ctory with 3 updates

Bumps the github-actions-dependencies group with 3 updates in the / directory: [hoverkraft-tech/ci-github-nodejs](https://github.com/hoverkraft-tech/ci-github-nodejs), [hoverkraft-tech/ci-github-common](https://github.com/hoverkraft-tech/ci-github-common) and [actions/create-github-app-token](https://github.com/actions/create-github-app-token).


Updates `hoverkraft-tech/ci-github-nodejs` from 0.10.0 to 0.11.0
- [Release notes](https://github.com/hoverkraft-tech/ci-github-nodejs/releases)
- [Commits](hoverkraft-tech/ci-github-nodejs@0c281f4...5c1010a)

Updates `hoverkraft-tech/ci-github-common` from 0.22.2 to 0.22.3
- [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases)
- [Commits](hoverkraft-tech/ci-github-common@abd5469...95664be)

Updates `actions/create-github-app-token` from 2.0.2 to 2.0.3
- [Release notes](https://github.com/actions/create-github-app-token/releases)
- [Commits](actions/create-github-app-token@3ff1caa...30bf625)

---
updated-dependencies:
- dependency-name: hoverkraft-tech/ci-github-nodejs
  dependency-version: 0.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-dependencies
- dependency-name: hoverkraft-tech/ci-github-common
  dependency-version: 0.22.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions-dependencies
- dependency-name: actions/create-github-app-token
  dependency-version: 2.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/github_actions/github-actions-dependencies-f90b9c66d8 branch from 2afe08f to 01c1c71 Compare May 2, 2025 05:36
@codecov
Copy link
Copy Markdown

codecov bot commented May 2, 2025

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 96.12%. Comparing base (2c587ab) to head (01c1c71).
Report is 18 commits behind head on main.

Additional details and impacted files
@@           Coverage Diff           @@
##             main     #145   +/-   ##
=======================================
  Coverage   96.12%   96.12%           
=======================================
  Files           9        9           
  Lines         155      155           
  Branches       19       19           
=======================================
  Hits          149      149           
  Misses          6        6           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@neilime neilime merged commit c4d1d8e into main May 2, 2025
35 checks passed
@neilime neilime deleted the dependabot/github_actions/github-actions-dependencies-f90b9c66d8 branch May 2, 2025 05:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant