Skip to content

Pin GH actions versions with ratchet#408

Merged
Nmishin merged 1 commit intotofuutils:mainfrom
Nmishin:feat/ratchet
May 10, 2025
Merged

Pin GH actions versions with ratchet#408
Nmishin merged 1 commit intotofuutils:mainfrom
Nmishin:feat/ratchet

Conversation

@Nmishin
Copy link
Copy Markdown
Collaborator

@Nmishin Nmishin commented May 10, 2025

Switched from a non-absolute reference to a floating tag or label, such as actions/checkout@v4 to the absolute hashed reference.

Signed-off-by: Nikolai Mishin <sanduku.default@gmail.com>
@Nmishin Nmishin merged commit 4e6bc50 into tofuutils:main May 10, 2025
4 checks passed
tmeijn pushed a commit to tmeijn/dotfiles that referenced this pull request May 15, 2025
This MR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [tofuutils/tenv](https://github.com/tofuutils/tenv) | minor | `v4.4.0` -> `v4.6.2` |

MR created with the help of [el-capitano/tools/renovate-bot](https://gitlab.com/el-capitano/tools/renovate-bot).

**Proposed changes to behavior should be submitted there as MRs.**

---

### Release Notes

<details>
<summary>tofuutils/tenv (tofuutils/tenv)</summary>

### [`v4.6.2`](https://github.com/tofuutils/tenv/releases/tag/v4.6.2)

[Compare Source](tofuutils/tenv@v4.4.0...v4.6.2)

#### What's Changed

-   go: bump github.com/charmbracelet/bubbles from 0.20.0 to 0.21.0 by [@&#8203;dependabot](https://github.com/dependabot) in tofuutils/tenv#387
-   fix(tests): add codecov integration by [@&#8203;kvendingoldo](https://github.com/kvendingoldo) in tofuutils/tenv#391
-   Add MacPorts installation instructions to README by [@&#8203;suhailskhan](https://github.com/suhailskhan) in tofuutils/tenv#393
-   go: bump github.com/PuerkitoBio/goquery from 1.10.2 to 1.10.3 by [@&#8203;dependabot](https://github.com/dependabot) in tofuutils/tenv#394
-   gh-actions: bump golangci/golangci-lint-action from 6 to 7 by [@&#8203;dependabot](https://github.com/dependabot) in tofuutils/tenv#384
-   Simplify goreleaser config for cloudsmith repos by [@&#8203;Nmishin](https://github.com/Nmishin) in tofuutils/tenv#395
-   Add cloudsmith installation option to the readme by [@&#8203;Nmishin](https://github.com/Nmishin) in tofuutils/tenv#396
-   gh-actions: bump sigstore/cosign-installer from 3.8.1 to 3.8.2 by [@&#8203;dependabot](https://github.com/dependabot) in tofuutils/tenv#398
-   go: bump github.com/charmbracelet/bubbletea from 1.3.4 to 1.3.5 by [@&#8203;dependabot](https://github.com/dependabot) in tofuutils/tenv#399
-   add terramate support by [@&#8203;dvaumoron](https://github.com/dvaumoron) in tofuutils/tenv#397
-   \-k flag default come from env var by [@&#8203;dvaumoron](https://github.com/dvaumoron) in tofuutils/tenv#402
-   Fix : handle terragrunt alpha version format by [@&#8203;dvaumoron](https://github.com/dvaumoron) in tofuutils/tenv#403
-   Revert "Simplify goreleaser config for cloudsmith repos" by [@&#8203;Nmishin](https://github.com/Nmishin) in tofuutils/tenv#407
-   Pin GH actions versions with ratchet by [@&#8203;Nmishin](https://github.com/Nmishin) in tofuutils/tenv#408

#### New Contributors

-   [@&#8203;suhailskhan](https://github.com/suhailskhan) made their first contribution in tofuutils/tenv#393

**Full Changelog**: tofuutils/tenv@v4.4.0...v4.6.2

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this MR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this MR, check this box

---

This MR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MC4xMS4yIiwidXBkYXRlZEluVmVyIjoiNDAuMTEuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiUmVub3ZhdGUgQm90Il19-->
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant