1
0
mirror of https://github.com/goreleaser/goreleaser.git synced 2025-02-03 13:11:48 +02:00

6 Commits

Author SHA1 Message Date
dependabot[bot]
c812210167
chore(deps): bump actions/github-script from 6.1.1 to 6.2.0 (#3346)
Bumps [actions/github-script](https://github.com/actions/github-script)
from 6.1.1 to 6.2.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/github-script/releases">actions/github-script's
releases</a>.</em></p>
<blockquote>
<h2>v6.2.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Update <code>@octokit/plugin-rest-endpoint-methods</code> to version
6.x by <a href="https://github.com/desrosj"><code>@​desrosj</code></a>
in <a
href="https://github-redirect.dependabot.com/actions/github-script/pull/283">actions/github-script#283</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/desrosj"><code>@​desrosj</code></a> made
their first contribution in <a
href="https://github-redirect.dependabot.com/actions/github-script/pull/283">actions/github-script#283</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/github-script/compare/v6.1.1...v6.2.0">https://github.com/actions/github-script/compare/v6.1.1...v6.2.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="c713e510db"><code>c713e51</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/actions/github-script/issues/283">#283</a>
from desrosj/update/plugin-rest-endpoint-methods</li>
<li><a
href="fc8cad1c91"><code>fc8cad1</code></a>
Update licenses</li>
<li><a
href="4d94eeabef"><code>4d94eea</code></a>
Update version in <code>package*.json</code> files.</li>
<li><a
href="b9c21f17c0"><code>b9c21f1</code></a>
Update <code>@octokit/plugin-rest-endpoint-methods</code> to
v6.3.0.</li>
<li><a
href="6e70142499"><code>6e70142</code></a>
Update <code>@octokit/plugin-rest-endpoint-methods</code>.</li>
<li>See full diff in <a
href="d50f485531...c713e510db">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/github-script&package-manager=github_actions&previous-version=6.1.1&new-version=6.2.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-08-29 10:25:05 -03:00
dependabot[bot]
4b33f9a850
chore(deps): bump actions/github-script from 7f4e771d2b3022fa3b8bac499d4a547619f3ab10 to 6.1.1 (#3322)
Bumps actions/github-script from 7f4e771d2b3022fa3b8bac499d4a547619f3ab10 to 6.1.1. This release includes the previously tagged commit.

Release notes
Sourced from actions/github-script's releases.

v6.1.1
What's Changed

Bump shell-quote from 1.7.2 to 1.7.3 by @​dependabot in actions/github-script#270
Bump @​actions/core to 1.9.1 by @​cory-miller in actions/github-script#280

Non-code changes

Create codeql-analysis.yml by @​joshmgross in actions/github-script#267
Improve grammar by @​kevgo in actions/github-script#269

New Contributors

@​kevgo made their first contribution in actions/github-script#269
@​cory-miller made their first contribution in actions/github-script#280

Full Changelog: actions/github-script@v6.1.0...v6.1.1



Commits

d50f485 Merge pull request #280 from cory-miller/main
1bdf7b2 Bump @​actions/core to 1.9.1
46a476b Merge pull request #269 from kevgo/patch-1
b682e42 Merge pull request #270 from actions/dependabot/npm_and_yarn/shell-quote-1.7.3
0cc15d0 Bump shell-quote from 1.7.2 to 1.7.3
ebee604 Improve grammar
377d38f Merge pull request #267 from actions/joshmgross/add-codeql
174e812 Create codeql-analysis.yml
7a5c598 Merge pull request #263 from smaeda-ks/update-actions-core
cb1c1eb Classify http-client licenses
Additional commits viewable in compare view



Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-08-19 09:08:49 -03:00
Naveen
1be9ede767
fix(ci): pinned workflow by hash (#2977)
* Pinned workflow by hash

- Pinned actions by SHA https://github.com/ossf/scorecard/blob/main/docs/checks.md#pinned-dependencies
- Included permissions for some of the actions. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions

* Fixed conflicts
2022-03-17 01:29:18 +00:00
dependabot[bot]
0b3106b9f0
chore(deps): bump actions/github-script from 5 to 6 (#2907)
Bumps [actions/github-script](https://github.com/actions/github-script) from 5 to 6.
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](https://github.com/actions/github-script/compare/v5...v6)

---
updated-dependencies:
- dependency-name: actions/github-script
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-02-14 08:45:48 -03:00
Carlos Alexandro Becker
0e0c558bc8
chore(deps): update milestone and dependabot config (#2739)
Signed-off-by: Carlos A Becker <caarlos0@gmail.com>
2021-12-06 09:24:11 -03:00
Carlos Alexandro Becker
55cd895698
chore(ci): auto-assign milestone (#2729)
Signed-off-by: Carlos A Becker <caarlos0@gmail.com>
2021-12-04 14:04:10 -03:00