New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
chore(deps): update workflows (major) #897
base: main
Are you sure you want to change the base?
Conversation
Codecov ReportAll modified and coverable lines are covered by tests ✅
Additional details and impacted files@@ Coverage Diff @@
## main #897 +/- ##
==========================================
- Coverage 64.27% 63.72% -0.56%
==========================================
Files 146 146
Lines 9294 11958 +2664
==========================================
+ Hits 5974 7620 +1646
- Misses 2853 3874 +1021
+ Partials 467 464 -3 ☔ View full report in Codecov by Sentry. |
2b8e19f
to
83c4a21
Compare
83c4a21
to
02cde87
Compare
Note that Codecov requires some other changes before it can be landed, and it sounds like |
6e565bd
to
1cf52cc
Compare
0677dcc
to
fb8fbaa
Compare
Cherry-picked from #897 --- We can drop the `skip-pkg-cache` option now as caching has been removed in favor of `actions/setup-go`s caching
fb8fbaa
to
26e0844
Compare
26e0844
to
efcfabc
Compare
This PR contains the following updates:
v5.3.0
->v6.0.1
v1.10.0
->v2.0.0
Release Notes
golangci/golangci-lint-action (golangci/golangci-lint-action)
v6.0.1
Compare Source
v6.0.0
Compare Source
What's Changed
This version removes
annotations
option (because it was useless), and removes the default output format (github-actions
).The annotations are still produced but with another approach.
Changes
Dependencies
Full Changelog: golangci/golangci-lint-action@v5.3.0...v6.0.0
slsa-framework/slsa-github-generator (slsa-framework/slsa-github-generator)
v2.0.0
Compare Source
v2.0.0: Breaking Change: upload-artifact and download-artifact
@v4
s ofactions/upload-artifact
andactions/download-artifact
, which are incompatiblle with the prior@v3
. See Our docs on the generic generator for more information and how to upgrade.v2.0.0: Breaking Change: attestation-name Workflow Input and Output
attestation-name
as a workflow input to.github/workflows/generator_generic_slsa3.yml
is now removed. Useprovenance-name
instead.v2.0.0: DSSE Rekor Type
a DSSE Rekor type. This fixes a bug where the current intoto type does not
persist provenance signatures. The attestation will no longer be persisted
in Rekor (#3299)
Configuration
📅 Schedule: Branch creation - "before 6am on monday" in timezone Australia/Sydney, Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR has been generated by Mend Renovate. View repository job log here.