dependabot[bot]
880ca6af7f
Bump actions/create-github-app-token from 1.11.3 to 1.11.5 ( #3008 )
...
Bumps
[actions/create-github-app-token](https://github.com/actions/create-github-app-token )
from 1.11.3 to 1.11.5.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/create-github-app-token/releases ">actions/create-github-app-token's
releases</a>.</em></p>
<blockquote>
<h2>v1.11.5</h2>
<h2><a
href="https://github.com/actions/create-github-app-token/compare/v1.11.4...v1.11.5 ">1.11.5</a>
(2025-02-15)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>deps:</strong> bump <code>@octokit/request</code> from
9.2.0 to 9.2.2 (<a
href="https://redirect.github.com/actions/create-github-app-token/issues/209 ">#209</a>)
(<a
href="8cedd97af1
">8cedd97</a>),
closes <a
href="https://redirect.github.com/actions/create-github-app-token/issues/740 ">#740</a>
<a
href="https://redirect.github.com/actions/create-github-app-token/issues/738 ">#738</a>
<a
href="https://redirect.github.com/actions/create-github-app-token/issues/740 ">#740</a>
<a
href="https://redirect.github.com/actions/create-github-app-token/issues/737 ">#737</a>
<a
href="https://redirect.github.com/actions/create-github-app-token/issues/738 ">#738</a>
<a
href="https://redirect.github.com/actions/create-github-app-token/issues/736 ">#736</a>
<a
href="https://redirect.github.com/actions/create-github-app-token/issues/735 ">#735</a>
<a
href="https://redirect.github.com/actions/create-github-app-token/issues/734 ">#734</a>
<a
href="https://redirect.github.com/actions/create-github-app-token/issues/733 ">#733</a>
<a
href="https://redirect.github.com/actions/create-github-app-token/issues/732 ">#732</a></li>
<li><strong>deps:</strong> bump <code>@octokit/request-error</code>
from 6.1.6 to 6.1.7 (<a
href="https://redirect.github.com/actions/create-github-app-token/issues/208 ">#208</a>)
(<a
href="415f6a523d
">415f6a5</a>),
closes <a
href="https://redirect.github.com/actions/create-github-app-token/issues/494 ">#494</a>
<a
href="https://redirect.github.com/actions/create-github-app-token/issues/491 ">#491</a>
<a
href="https://redirect.github.com/actions/create-github-app-token/issues/490 ">#490</a>
<a
href="https://redirect.github.com/actions/create-github-app-token/issues/488 ">#488</a>
<a
href="https://redirect.github.com/actions/create-github-app-token/issues/486 ">#486</a>
<a
href="https://redirect.github.com/actions/create-github-app-token/issues/487 ">#487</a>
<a
href="https://redirect.github.com/actions/create-github-app-token/issues/485 ">#485</a>
<a
href="https://redirect.github.com/actions/create-github-app-token/issues/484 ">#484</a></li>
</ul>
<h2>v1.11.4</h2>
<h2><a
href="https://github.com/actions/create-github-app-token/compare/v1.11.3...v1.11.4 ">1.11.4</a>
(2025-02-15)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>deps:</strong> bump <code>@octokit/endpoint</code> from
10.1.1 to 10.1.3 (<a
href="https://redirect.github.com/actions/create-github-app-token/issues/207 ">#207</a>)
(<a
href="d30def842e
">d30def8</a>),
closes <a
href="https://redirect.github.com/actions/create-github-app-token/issues/507 ">#507</a>
<a
href="https://redirect.github.com/actions/create-github-app-token/issues/514 ">#514</a>
<a
href="https://redirect.github.com/actions/create-github-app-token/issues/512 ">#512</a>
<a
href="https://redirect.github.com/actions/create-github-app-token/issues/511 ">#511</a>
<a
href="https://redirect.github.com/actions/create-github-app-token/issues/509 ">#509</a>
<a
href="https://redirect.github.com/actions/create-github-app-token/issues/508 ">#508</a>
<a
href="https://redirect.github.com/actions/create-github-app-token/issues/507 ">#507</a>
<a
href="https://redirect.github.com/actions/create-github-app-token/issues/506 ">#506</a>
<a
href="https://redirect.github.com/actions/create-github-app-token/issues/505 ">#505</a>
<a
href="https://redirect.github.com/actions/create-github-app-token/issues/504 ">#504</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="0d564482f0
"><code>0d56448</code></a>
build(release): 1.11.5 [skip ci]</li>
<li><a
href="8cedd97af1
"><code>8cedd97</code></a>
fix(deps): bump <code>@octokit/request</code> from 9.2.0 to 9.2.2 (<a
href="https://redirect.github.com/actions/create-github-app-token/issues/209 ">#209</a>)</li>
<li><a
href="415f6a523d
"><code>415f6a5</code></a>
fix(deps): bump <code>@octokit/request-error</code> from 6.1.6 to 6.1.7
(<a
href="https://redirect.github.com/actions/create-github-app-token/issues/208 ">#208</a>)</li>
<li><a
href="c14f92a8f9
"><code>c14f92a</code></a>
build(release): 1.11.4 [skip ci]</li>
<li><a
href="d30def842e
"><code>d30def8</code></a>
fix(deps): bump <code>@octokit/endpoint</code> from 10.1.1 to 10.1.3
(<a
href="https://redirect.github.com/actions/create-github-app-token/issues/207 ">#207</a>)</li>
<li><a
href="a5be4722a6
"><code>a5be472</code></a>
build(deps-dev): bump esbuild from 0.24.2 to 0.25.0 (<a
href="https://redirect.github.com/actions/create-github-app-token/issues/206 ">#206</a>)</li>
<li>See full diff in <a
href="67e27a7eb7...0d564482f0
">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Ludy <Ludy87@users.noreply.github.com>
2025-02-22 22:55:09 +00:00
dependabot[bot]
11a5b2e79f
Bump actions/create-github-app-token from 1.11.2 to 1.11.3 ( #2878 )
...
Bumps
[actions/create-github-app-token](https://github.com/actions/create-github-app-token )
from 1.11.2 to 1.11.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/create-github-app-token/releases ">actions/create-github-app-token's
releases</a>.</em></p>
<blockquote>
<h2>v1.11.3</h2>
<h2><a
href="https://github.com/actions/create-github-app-token/compare/v1.11.2...v1.11.3 ">1.11.3</a>
(2025-02-04)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>deps:</strong> bump the production-dependencies group with 3
updates (<a
href="https://redirect.github.com/actions/create-github-app-token/issues/203 ">#203</a>)
(<a
href="8e85a3cf14
">8e85a3c</a>),
closes <a
href="https://redirect.github.com/actions/create-github-app-token/issues/665 ">#665</a>
<a
href="https://redirect.github.com/actions/create-github-app-token/issues/665 ">#665</a>
<a
href="https://redirect.github.com/actions/create-github-app-token/issues/663 ">#663</a>
<a
href="https://redirect.github.com/actions/create-github-app-token/issues/662 ">#662</a>
<a
href="https://redirect.github.com/actions/create-github-app-token/issues/661 ">#661</a>
<a
href="https://redirect.github.com/actions/create-github-app-token/issues/659 ">#659</a>
<a
href="https://redirect.github.com/actions/create-github-app-token/issues/660 ">#660</a>
<a
href="https://redirect.github.com/actions/create-github-app-token/issues/658 ">#658</a>
<a
href="https://redirect.github.com/actions/create-github-app-token/issues/656 ">#656</a>
<a
href="https://redirect.github.com/actions/create-github-app-token/issues/657 ">#657</a>
<a
href="https://redirect.github.com/actions/create-github-app-token/issues/655 ">#655</a>
<a
href="https://redirect.github.com/actions/create-github-app-token/issues/731 ">#731</a>
<a
href="https://redirect.github.com/nodejs/undici/issues/4016 ">nodejs/undici#4016</a>
<a
href="https://redirect.github.com/nodejs/undici/issues/4017 ">nodejs/undici#4017</a>
<a
href="https://redirect.github.com/nodejs/undici/issues/4018 ">nodejs/undici#4018</a>
<a
href="https://redirect.github.com/nodejs/undici/issues/4008 ">nodejs/undici#4008</a>
<a
href="https://redirect.github.com/nodejs/undici/issues/3991 ">nodejs/undici#3991</a>
<a
href="https://redirect.github.com/nodejs/undici/issues/4001 ">nodejs/undici#4001</a>
<a
href="https://redirect.github.com/nodejs/undici/issues/3980 ">nodejs/undici#3980</a>
<a
href="https://redirect.github.com/nodejs/undici/issues/4003 ">nodejs/undici#4003</a>
<a
href="https://redirect.github.com/nodejs/undici/issues/3965 ">nodejs/undici#3965</a>
<a
href="https://redirect.github.com/nodejs/undici/issues/4002 ">nodejs/undici#4002</a>
<a
href="https://redirect.github.com/nodejs/undici/issues/4006 ">nodejs/undici#4006</a>
<a
href="https://redirect.github.com/nodejs/undici/issues/3956 ">nodejs/undici#3956</a>
<a
href="https://redirect.github.com/nodejs/undici/issues/3964 ">nodejs/undici#3964</a>
<a
href="https://redirect.github.com/nodejs/undici/issues/3447 ">nodejs/undici#3447</a>
<a
href="https://redirect.github.com/actions/create-github-app-token/issues/3966 ">#3966</a>
<a
href="https://redirect.github.com/nodejs/undici/issues/3967 ">nodejs/undici#3967</a>
<a
href="https://redirect.github.com/nodejs/undici/issues/3971 ">nodejs/undici#3971</a>
<a
href="https://redirect.github.com/nodejs/undici/issues/3954 ">nodejs/undici#3954</a>
<a
href="https://redirect.github.com/nodejs/undici/issues/3972 ">nodejs/undici#3972</a>
<a
href="https://redirect.github.com/nodejs/undici/issues/3974 ">nodejs/undici#3974</a>
<a
href="https://redirect.github.com/nodejs/undici/issues/3976 ">nodejs/undici#3976</a>
<a
href="https://redirect.github.com/actions/create-github-app-token/issues/3975 ">#3975</a>
<a
href="https://redirect.github.com/nodejs/undici/issues/3977 ">nodejs/undici#3977</a>
<a
href="https://redirect.github.com/nodejs/undici/issues/3978 ">nodejs/undici#3978</a>
<a
href="https://redirect.github.com/nodejs/undici/issues/3981 ">nodejs/undici#3981</a>
<a
href="https://redirect.github.com/nodejs/undici/issues/3983 ">nodejs/undici#3983</a>
<a
href="https://redirect.github.com/nodejs/undici/issues/3986 ">nodejs/undici#3986</a>
<a
href="https://redirect.github.com/actions/create-github-app-token/issues/4021 ">#4021</a>
<a
href="https://redirect.github.com/actions/create-github-app-token/issues/4018 ">#4018</a>
<a
href="https://redirect.github.com/actions/create-github-app-token/issues/4017 ">#4017</a>
<a
href="https://redirect.github.com/actions/create-github-app-token/issues/4016 ">#4016</a>
<a
href="https://redirect.github.com/actions/create-github-app-token/issues/4008 ">#4008</a>
<a
href="https://redirect.github.com/actions/create-github-app-token/issues/4007 ">#4007</a>
<a
href="https://redirect.github.com/actions/create-github-app-token/issues/4006 ">#4006</a>
<a
href="https://redirect.github.com/actions/create-github-app-token/issues/3965 ">#3965</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="67e27a7eb7
"><code>67e27a7</code></a>
build(release): 1.11.3 [skip ci]</li>
<li><a
href="8e85a3cf14
"><code>8e85a3c</code></a>
fix(deps): bump the production-dependencies group with 3 updates (<a
href="https://redirect.github.com/actions/create-github-app-token/issues/203 ">#203</a>)</li>
<li>See full diff in <a
href="136412a57a...67e27a7eb7
">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Anthony Stirling <77850077+Frooodle@users.noreply.github.com>
Co-authored-by: Ludy <Ludy87@users.noreply.github.com>
2025-02-19 22:17:42 +00:00
dependabot[bot]
554c112a94
Bump step-security/harden-runner from 2.10.4 to 2.11.0 ( #2980 )
...
Bumps
[step-security/harden-runner](https://github.com/step-security/harden-runner )
from 2.10.4 to 2.11.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/step-security/harden-runner/releases ">step-security/harden-runner's
releases</a>.</em></p>
<blockquote>
<h2>v2.11.0</h2>
<h2>What's Changed</h2>
<p>Release v2.11.0 in <a
href="https://redirect.github.com/step-security/harden-runner/issues/498 ">#498</a>
Harden-Runner Enterprise tier now supports the use of eBPF for DNS
resolution and network call monitoring</p>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/step-security/harden-runner/compare/v2...v2.11.0 ">https://github.com/step-security/harden-runner/compare/v2...v2.11.0 </a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="4d991eb9b9
"><code>4d991eb</code></a>
Merge pull request <a
href="https://redirect.github.com/step-security/harden-runner/issues/498 ">#498</a>
from step-security/rc-18</li>
<li><a
href="4ea872f897
"><code>4ea872f</code></a>
Update README.md</li>
<li><a
href="65d6f6e4ee
"><code>65d6f6e</code></a>
Add workflows</li>
<li><a
href="1034c9a805
"><code>1034c9a</code></a>
Update package-lock.json</li>
<li><a
href="ab221e2d7a
"><code>ab221e2</code></a>
Update agent</li>
<li><a
href="7cb6c2fb52
"><code>7cb6c2f</code></a>
Update agent</li>
<li>See full diff in <a
href="cb605e52c2...4d991eb9b9
">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-02-18 12:07:08 +00:00
dependabot[bot]
9d2c23f612
Bump actions/setup-python from 5.3.0 to 5.4.0 ( #2856 )
...
[//]: # (dependabot-start)
⚠️ **Dependabot is rebasing this PR** ⚠️
Rebasing might not happen immediately, so don't worry if this takes some
time.
Note: if you make any changes to this PR yourself, they will take
precedence over the rebase.
---
[//]: # (dependabot-end)
Bumps [actions/setup-python](https://github.com/actions/setup-python )
from 5.3.0 to 5.4.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/setup-python/releases ">actions/setup-python's
releases</a>.</em></p>
<blockquote>
<h2>v5.4.0</h2>
<h2>What's Changed</h2>
<h3>Enhancements:</h3>
<ul>
<li>Update cache error message by <a
href="https://github.com/aparnajyothi-y "><code>@aparnajyothi-y</code></a>
in <a
href="https://redirect.github.com/actions/setup-python/pull/968 ">actions/setup-python#968</a></li>
<li>Enhance Workflows: Add Ubuntu-24, Remove Python 3.8 by <a
href="https://github.com/priya-kinthali "><code>@priya-kinthali</code></a>
in <a
href="https://redirect.github.com/actions/setup-python/pull/985 ">actions/setup-python#985</a></li>
<li>Configure Dependabot settings by <a
href="https://github.com/HarithaVattikuti "><code>@HarithaVattikuti</code></a>
in <a
href="https://redirect.github.com/actions/setup-python/pull/1008 ">actions/setup-python#1008</a></li>
</ul>
<h3>Documentation changes:</h3>
<ul>
<li>Readme update - recommended permissions by <a
href="https://github.com/benwells "><code>@benwells</code></a> in <a
href="https://redirect.github.com/actions/setup-python/pull/1009 ">actions/setup-python#1009</a></li>
<li>Improve Advanced Usage examples by <a
href="https://github.com/lrq3000 "><code>@lrq3000</code></a> in <a
href="https://redirect.github.com/actions/setup-python/pull/645 ">actions/setup-python#645</a></li>
</ul>
<h3>Dependency updates:</h3>
<ul>
<li>Upgrade <code>undici</code> from 5.28.4 to 5.28.5 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a> in <a
href="https://redirect.github.com/actions/setup-python/pull/1012 ">actions/setup-python#1012</a></li>
<li>Upgrade <code>urllib3</code> from 1.25.9 to 1.26.19 in
/<strong>tests</strong>/data by <a
href="https://github.com/dependabot "><code>@dependabot</code></a> in <a
href="https://redirect.github.com/actions/setup-python/pull/895 ">actions/setup-python#895</a></li>
<li>Upgrade <code>actions/publish-immutable-action</code> from 0.0.3 to
0.0.4 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a> in <a
href="https://redirect.github.com/actions/setup-python/pull/1014 ">actions/setup-python#1014</a></li>
<li>Upgrade <code>@actions/http-client</code> from 2.2.1 to 2.2.3 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a> in <a
href="https://redirect.github.com/actions/setup-python/pull/1020 ">actions/setup-python#1020</a></li>
<li>Upgrade <code>requests</code> from 2.24.0 to 2.32.2 in
/<strong>tests</strong>/data by <a
href="https://github.com/dependabot "><code>@dependabot</code></a> in <a
href="https://redirect.github.com/actions/setup-python/pull/1019 ">actions/setup-python#1019</a></li>
<li>Upgrade <code>@actions/cache</code> to <code>^4.0.0</code> by <a
href="https://github.com/priyagupta108 "><code>@priyagupta108</code></a>
in <a
href="https://redirect.github.com/actions/setup-python/pull/1007 ">actions/setup-python#1007</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/benwells "><code>@benwells</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/setup-python/pull/1009 ">actions/setup-python#1009</a></li>
<li><a
href="https://github.com/HarithaVattikuti "><code>@HarithaVattikuti</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/setup-python/pull/1008 ">actions/setup-python#1008</a></li>
<li><a href="https://github.com/lrq3000 "><code>@lrq3000</code></a> made
their first contribution in <a
href="https://redirect.github.com/actions/setup-python/pull/645 ">actions/setup-python#645</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/setup-python/compare/v5...v5.4.0 ">https://github.com/actions/setup-python/compare/v5...v5.4.0 </a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="42375524e2
"><code>4237552</code></a>
Improve Advanced Usage examples (<a
href="https://redirect.github.com/actions/setup-python/issues/645 ">#645</a>)</li>
<li><a
href="709bfa58ba
"><code>709bfa5</code></a>
Bump requests from 2.24.0 to 2.32.2 in /<strong>tests</strong>/data (<a
href="https://redirect.github.com/actions/setup-python/issues/1019 ">#1019</a>)</li>
<li><a
href="ceb20b242d
"><code>ceb20b2</code></a>
Bump <code>@actions/http-client</code> from 2.2.1 to 2.2.3 (<a
href="https://redirect.github.com/actions/setup-python/issues/1020 ">#1020</a>)</li>
<li><a
href="0dc2d2cf0c
"><code>0dc2d2c</code></a>
Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 (<a
href="https://redirect.github.com/actions/setup-python/issues/1014 ">#1014</a>)</li>
<li><a
href="feb9c6e7c6
"><code>feb9c6e</code></a>
Bump urllib3 from 1.25.9 to 1.26.19 in /<strong>tests</strong>/data (<a
href="https://redirect.github.com/actions/setup-python/issues/895 ">#895</a>)</li>
<li><a
href="d0b4fc497a
"><code>d0b4fc4</code></a>
Bump undici from 5.28.4 to 5.28.5 (<a
href="https://redirect.github.com/actions/setup-python/issues/1012 ">#1012</a>)</li>
<li><a
href="e3dfaac0fd
"><code>e3dfaac</code></a>
Configure Dependabot settings (<a
href="https://redirect.github.com/actions/setup-python/issues/1008 ">#1008</a>)</li>
<li><a
href="b8cf3eb1eb
"><code>b8cf3eb</code></a>
Use the new cache service: upgrade <code>@actions/cache</code> to
<code>^4.0.0</code> (<a
href="https://redirect.github.com/actions/setup-python/issues/1007 ">#1007</a>)</li>
<li><a
href="1928ae624d
"><code>1928ae6</code></a>
Update README.md (<a
href="https://redirect.github.com/actions/setup-python/issues/1009 ">#1009</a>)</li>
<li><a
href="3fddbee787
"><code>3fddbee</code></a>
Enhance Workflows: Add Ubuntu-24, Remove Python 3.8 (<a
href="https://redirect.github.com/actions/setup-python/issues/985 ">#985</a>)</li>
<li>Additional commits viewable in <a
href="0b93645e9f...42375524e2
">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-02-03 10:09:15 +00:00
dependabot[bot]
f9b92eec71
Bump actions/create-github-app-token from 1.11.1 to 1.11.2 ( #2853 )
...
Bumps
[actions/create-github-app-token](https://github.com/actions/create-github-app-token )
from 1.11.1 to 1.11.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/create-github-app-token/releases ">actions/create-github-app-token's
releases</a>.</em></p>
<blockquote>
<h2>v1.11.2</h2>
<h2><a
href="https://github.com/actions/create-github-app-token/compare/v1.11.1...v1.11.2 ">1.11.2</a>
(2025-01-30)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>deps:</strong> bump <code>@octokit/request</code> from
9.1.3 to 9.1.4 in the production-dependencies group (<a
href="https://redirect.github.com/actions/create-github-app-token/issues/196 ">#196</a>)
(<a
href="b4192a5b36
">b4192a5</a>),
closes <a
href="https://redirect.github.com/actions/create-github-app-token/issues/730 ">#730</a>
<a
href="https://redirect.github.com/actions/create-github-app-token/issues/730 ">#730</a>
<a
href="https://redirect.github.com/actions/create-github-app-token/issues/729 ">#729</a>
<a
href="https://redirect.github.com/actions/create-github-app-token/issues/727 ">#727</a>
<a
href="https://redirect.github.com/actions/create-github-app-token/issues/726 ">#726</a>
<a
href="https://redirect.github.com/actions/create-github-app-token/issues/723 ">#723</a>
<a
href="https://redirect.github.com/actions/create-github-app-token/issues/724 ">#724</a>
<a
href="https://redirect.github.com/actions/create-github-app-token/issues/722 ">#722</a>
<a
href="https://redirect.github.com/actions/create-github-app-token/issues/721 ">#721</a>
<a
href="https://redirect.github.com/actions/create-github-app-token/issues/720 ">#720</a>
<a
href="https://redirect.github.com/actions/create-github-app-token/issues/719 ">#719</a></li>
<li><strong>deps:</strong> bump undici from 6.19.8 to 7.2.0 (<a
href="https://redirect.github.com/actions/create-github-app-token/issues/198 ">#198</a>)
(<a
href="29aa0514a7
">29aa051</a>),
closes <a
href="https://redirect.github.com/nodejs/undici/issues/3958 ">nodejs/undici#3958</a>
<a
href="https://redirect.github.com/nodejs/undici/issues/3955 ">nodejs/undici#3955</a>
<a
href="https://redirect.github.com/nodejs/undici/issues/3962 ">nodejs/undici#3962</a>
<a
href="https://redirect.github.com/nodejs/undici/issues/3921 ">nodejs/undici#3921</a>
<a
href="https://redirect.github.com/nodejs/undici/issues/3923 ">nodejs/undici#3923</a>
<a
href="https://redirect.github.com/nodejs/undici/issues/3925 ">nodejs/undici#3925</a>
<a
href="https://redirect.github.com/nodejs/undici/issues/3926 ">nodejs/undici#3926</a>
<a
href="https://redirect.github.com/nodejs/undici/issues/3924 ">nodejs/undici#3924</a>
<a
href="https://redirect.github.com/nodejs/undici/issues/3933 ">nodejs/undici#3933</a>
<a
href="https://redirect.github.com/nodejs/undici/issues/3916 ">nodejs/undici#3916</a>
<a
href="https://redirect.github.com/nodejs/undici/issues/3930 ">nodejs/undici#3930</a>
<a
href="https://redirect.github.com/nodejs/undici/issues/3938 ">nodejs/undici#3938</a>
<a
href="https://redirect.github.com/actions/create-github-app-token/issues/3937 ">#3937</a>
<a
href="https://redirect.github.com/nodejs/undici/issues/3940 ">nodejs/undici#3940</a>
<a
href="https://redirect.github.com/nodejs/undici/issues/3931 ">nodejs/undici#3931</a>
<a
href="https://redirect.github.com/nodejs/undici/issues/3941 ">nodejs/undici#3941</a>
<a
href="https://redirect.github.com/nodejs/undici/issues/3911 ">nodejs/undici#3911</a>
<a
href="https://redirect.github.com/nodejs/undici/issues/3888 ">nodejs/undici#3888</a>
<a
href="https://redirect.github.com/nodejs/undici/issues/3939 ">nodejs/undici#3939</a>
<a
href="https://redirect.github.com/nodejs/undici/issues/3947 ">nodejs/undici#3947</a>
<a
href="https://redirect.github.com/nodejs/undici/issues/3945 ">nodejs/undici#3945</a>
<a
href="https://redirect.github.com/nodejs/undici/issues/3916 ">nodejs/undici#3916</a>
<a
href="https://redirect.github.com/nodejs/undici/issues/3893 ">nodejs/undici#3893</a>
<a
href="https://redirect.github.com/nodejs/undici/issues/3902 ">nodejs/undici#3902</a>
<a
href="https://redirect.github.com/actions/create-github-app-token/issues/3901 ">#3901</a>
<a
href="https://redirect.github.com/nodejs/undici/issues/3903 ">nodejs/undici#3903</a>
<a
href="https://redirect.github.com/nodejs/undici/issues/3905 ">nodejs/undici#3905</a>
<a
href="https://redirect.github.com/nodejs/undici/issues/3900 ">nodejs/undici#3900</a>
<a
href="https://redirect.github.com/nodejs/undici/issues/3913 ">nodejs/undici#3913</a>
<a
href="https://redirect.github.com/nodejs/undici/issues/3910 ">nodejs/undici#3910</a>
<a
href="https://redirect.github.com/nodejs/undici/issues/3909 ">nodejs/undici#3909</a>
<a
href="https://redirect.github.com/nodejs/undici/issues/3906 ">nodejs/undici#3906</a>
<a
href="https://redirect.github.com/nodejs/undici/issues/3922 ">nodejs/undici#3922</a>
<a
href="https://redirect.github.com/actions/create-github-app-token/issues/3962 ">#3962</a>
<a
href="https://redirect.github.com/actions/create-github-app-token/issues/3955 ">#3955</a>
<a
href="https://redirect.github.com/actions/create-github-app-token/issues/3958 ">#3958</a>
<a
href="https://redirect.github.com/actions/create-github-app-token/issues/3945 ">#3945</a>
<a
href="https://redirect.github.com/actions/create-github-app-token/issues/3947 ">#3947</a>
<a
href="https://redirect.github.com/actions/create-github-app-token/issues/3939 ">#3939</a>
<a
href="https://redirect.github.com/actions/create-github-app-token/issues/3888 ">#3888</a>
<a
href="https://redirect.github.com/actions/create-github-app-token/issues/3911 ">#3911</a>
<a
href="https://redirect.github.com/actions/create-github-app-token/issues/3941 ">#3941</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="136412a57a
"><code>136412a</code></a>
build(release): 1.11.2 [skip ci]</li>
<li><a
href="b4192a5b36
"><code>b4192a5</code></a>
fix(deps): bump <code>@octokit/request</code> from 9.1.3 to 9.1.4 in
the production-depend...</li>
<li><a
href="29aa0514a7
"><code>29aa051</code></a>
fix(deps): bump undici from 6.19.8 to 7.2.0 (<a
href="https://redirect.github.com/actions/create-github-app-token/issues/198 ">#198</a>)</li>
<li><a
href="a5f8600f58
"><code>a5f8600</code></a>
build(deps-dev): bump <code>@sinonjs/fake-timers</code> from 13.0.2 to
14.0.0 (<a
href="https://redirect.github.com/actions/create-github-app-token/issues/199 ">#199</a>)</li>
<li><a
href="0edddd70c8
"><code>0edddd7</code></a>
build(deps-dev): bump the development-dependencies group with 2 updates
(<a
href="https://redirect.github.com/actions/create-github-app-token/issues/197 ">#197</a>)</li>
<li><a
href="bb3ca765af
"><code>bb3ca76</code></a>
docs(README): remove extra space in variable syntax in README example
(<a
href="https://redirect.github.com/actions/create-github-app-token/issues/201 ">#201</a>)</li>
<li>See full diff in <a
href="c1a285145b...136412a57a
">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-02-03 10:07:37 +00:00
dependabot[bot]
c5ae576541
Bump step-security/harden-runner from 2.10.3 to 2.10.4 ( #2761 )
...
[//]: # (dependabot-start)
⚠️ **Dependabot is rebasing this PR** ⚠️
Rebasing might not happen immediately, so don't worry if this takes some
time.
Note: if you make any changes to this PR yourself, they will take
precedence over the rebase.
---
[//]: # (dependabot-end)
Bumps
[step-security/harden-runner](https://github.com/step-security/harden-runner )
from 2.10.3 to 2.10.4.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/step-security/harden-runner/releases ">step-security/harden-runner's
releases</a>.</em></p>
<blockquote>
<h2>v2.10.4</h2>
<h2>What's Changed</h2>
<p>Fixed a potential Harden-Runner post step failure that could occur
when printing agent service logs. The fix gracefully handles failures
without failing the post step.</p>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/step-security/harden-runner/compare/v2...v2.10.4 ">https://github.com/step-security/harden-runner/compare/v2...v2.10.4 </a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="cb605e52c2
"><code>cb605e5</code></a>
Merge pull request <a
href="https://redirect.github.com/step-security/harden-runner/issues/496 ">#496</a>
from step-security/fix-enobufs</li>
<li><a
href="61144dda3b
"><code>61144dd</code></a>
Update log statement</li>
<li><a
href="b8be370ff4
"><code>b8be370</code></a>
Add try catch block</li>
<li><a
href="6f6fa07e47
"><code>6f6fa07</code></a>
Fix ENOBUFS issue</li>
<li><a
href="18f6947f13
"><code>18f6947</code></a>
Merge pull request <a
href="https://redirect.github.com/step-security/harden-runner/issues/495 ">#495</a>
from AkhigbeEromo/Update-README</li>
<li><a
href="81f844e743
"><code>81f844e</code></a>
Edit docs</li>
<li><a
href="4c766de2db
"><code>4c766de</code></a>
Merge branch 'Update-README' of <a
href="https://github.com/AkhigbeEromo/harden-runner ">https://github.com/AkhigbeEromo/harden-runner </a>...</li>
<li><a
href="c9c5f3273c
"><code>c9c5f32</code></a>
Handle Ashish reviews</li>
<li><a
href="2877824267
"><code>2877824</code></a>
Merge branch 'main' into Update-README</li>
<li><a
href="be87de076d
"><code>be87de0</code></a>
Clean up</li>
<li>Additional commits viewable in <a
href="c95a14d0e5...cb605e52c2
">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-01-21 11:11:01 +00:00
Ludy
05add001fb
clean up and more ( #2756 )
...
# Description of Changes
This PR introduces multiple updates across various files and workflows:
### **What was changed:**
1. **Deleted Scripts:**
- `check_duplicates.py`: Removed script that checked for duplicate keys
in properties files.
- `check_tabulator.py`: Removed script that ensured no tabulators
existed in HTML, CSS, or JS files.
2. **Updated GitHub Actions Workflow (`pre_commit.yml`):**
- Added a weekly schedule trigger (`cron`) for the pre-commit workflow.
- Updated the `create-pull-request` action to exclude certain files
(`.github/workflows/.*`) from formatting.
- Improved detection and handling of staged changes during commit
creation.
3. **`.pre-commit-config.yaml`:**
- Adjusted regex for file matching in `ruff` and `codespell` hooks to
ensure better file filtering.
- Removed local hooks that relied on deleted scripts.
4. **Scripts (`counter_translation.py`):**
- Updated file writing methods to enforce consistent newline characters
(`newline="\n"`).
### **Why the change was made:**
- To simplify the repository by removing unnecessary or outdated scripts
(`check_duplicates.py` and `check_tabulator.py`).
- To enhance the workflow automation by introducing a scheduled run for
pre-commit checks.
- To improve code formatting and file consistency by addressing newline
character issues and refining file exclusions in `pre-commit`.
### **Challenges encountered:**
- Ensuring that all references to deleted scripts were properly removed
from configuration files.
- Verifying that workflow and pre-commit changes do not introduce
regressions in existing automation.
Closes # (issue_number)
---
## Checklist
### General
- [x] I have read the [Contribution
Guidelines](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/CONTRIBUTING.md )
- [x] I have read the [Stirling-PDF Developer
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md )
(if applicable)
- [x] I have read the [How to add new languages to
Stirling-PDF](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/HowToAddNewLanguage.md )
(if applicable)
- [x] I have performed a self-review of my own code
- [x] My changes generate no new warnings
### Documentation
- [ ] I have updated relevant docs on [Stirling-PDF's doc
repo](https://github.com/Stirling-Tools/Stirling-Tools.github.io/blob/main/docs/ )
(if functionality has heavily changed)
- [ ] I have read the section [Add New Translation
Tags](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/HowToAddNewLanguage.md#add-new-translation-tags )
(for new translation tags only)
### UI Changes (if applicable)
- [ ] Screenshots or videos demonstrating the UI changes are attached
(e.g., as comments or direct attachments in the PR)
### Testing (if applicable)
- [x] I have tested my changes locally. Refer to the [Testing
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md#6-testing )
for more details.
2025-01-21 11:09:01 +00:00
Ludy
abc3ff3529
changes the bot from github-action to stirlingbot ( #2755 )
...
# Description of Changes
This PR introduces updates to the GitHub Actions workflow for
`pre_commit.yml`. The main changes are:
- **What was changed:**
- Removed the conditional check to exclude `dependabot[bot]` from
triggering the workflow.
- Added a step to generate a GitHub App token using
`actions/create-github-app-token`.
- Added a step to retrieve the user ID for the GitHub App bot.
- Updated the git configuration to use the GitHub App credentials for
commits.
- Improved commit logic to check for changes before attempting a pull
request.
- Updated the pull request creation step to use the dynamically
generated GitHub App credentials.
- **Why the change was made:**
- To enhance security and ensure that commits and pull requests are made
using GitHub App credentials instead of the default
`github-actions[bot]`.
- To provide better traceability and reduce reliance on static tokens.
- **Challenges encountered:**
- Adjusting the logic to dynamically generate tokens and handle changes
without disrupting existing workflows.
- Ensuring compatibility with the `peter-evans/create-pull-request`
action.
Closes # (issue_number)
---
## Checklist
### General
- [x] I have read the [Contribution
Guidelines](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/CONTRIBUTING.md )
- [x] I have read the [Stirling-PDF Developer
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md )
(if applicable)
- [x] I have read the [How to add new languages to
Stirling-PDF](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/HowToAddNewLanguage.md )
(if applicable)
- [x] I have performed a self-review of my own code
- [x] My changes generate no new warnings
### Documentation
- [ ] I have updated relevant docs on [Stirling-PDF's doc
repo](https://github.com/Stirling-Tools/Stirling-Tools.github.io/blob/main/docs/ )
(if functionality has heavily changed)
- [ ] I have read the section [Add New Translation
Tags](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/HowToAddNewLanguage.md#add-new-translation-tags )
(for new translation tags only)
### UI Changes (if applicable)
- [ ] Screenshots or videos demonstrating the UI changes are attached
(e.g., as comments or direct attachments in the PR)
### Testing (if applicable)
- [x] I have tested my changes locally. Refer to the [Testing
Guide](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/DeveloperGuide.md#6-testing )
for more details.
2025-01-20 19:59:17 +00:00
Ludy
e6874cb219
Add: pip caching ( #2723 )
...
# Description
Please provide a summary of the changes, including relevant motivation
and context.
Closes #(issue_number)
## Checklist
- [x] I have read the [Contribution
Guidelines](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/CONTRIBUTING.md )
- [x] I have performed a self-review of my own code
- [ ] I have attached images of the change if it is UI based
- [ ] I have commented my code, particularly in hard-to-understand areas
- [ ] If my code has heavily changed functionality I have updated
relevant docs on [Stirling-PDFs doc
repo](https://github.com/Stirling-Tools/Stirling-Tools.github.io/blob/main/docs/ )
- [x] My changes generate no new warnings
- [ ] I have read the section [Add New Translation
Tags](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/HowToAddNewLanguage.md#add-new-translation-tags )
(for new translation tags only)
2025-01-16 22:04:38 +00:00
Ludy
89d319332a
Add: require-hashes pre-commit ( #2684 )
...
# Description
Please provide a summary of the changes, including relevant motivation
and context.
Closes #(issue_number)
## Checklist
- [x] I have read the [Contribution
Guidelines](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/CONTRIBUTING.md )
- [x] I have performed a self-review of my own code
- [ ] I have attached images of the change if it is UI based
- [ ] I have commented my code, particularly in hard-to-understand areas
- [ ] If my code has heavily changed functionality I have updated
relevant docs on [Stirling-PDFs doc
repo](https://github.com/Stirling-Tools/Stirling-Tools.github.io/blob/main/docs/ )
- [x] My changes generate no new warnings
- [ ] I have read the section [Add New Translation
Tags](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/HowToAddNewLanguage.md#add-new-translation-tags )
(for new translation tags only)
2025-01-13 18:27:27 +00:00
Ludy
875f5a85ef
Token-Permissions & Pinned-Dependencies ( #2586 )
...
# Description
Please provide a summary of the changes, including relevant motivation
and context.
Closes #(issue_number)
## Checklist
- [ ] I have read the [Contribution
Guidelines](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/CONTRIBUTING.md )
- [ ] I have performed a self-review of my own code
- [ ] I have attached images of the change if it is UI based
- [ ] I have commented my code, particularly in hard-to-understand areas
- [ ] If my code has heavily changed functionality I have updated
relevant docs on [Stirling-PDFs doc
repo](https://github.com/Stirling-Tools/Stirling-Tools.github.io/blob/main/docs/ )
- [ ] My changes generate no new warnings
- [ ] I have read the section [Add New Translation
Tags](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/HowToAddNewLanguage.md#add-new-translation-tags )
(for new translation tags only)
2025-01-02 18:22:14 +00:00
dependabot[bot]
5e173b92d4
Bump peter-evans/create-pull-request from 7.0.5 to 7.0.6 ( #2574 )
...
Bumps
[peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request )
from 7.0.5 to 7.0.6.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/peter-evans/create-pull-request/releases ">peter-evans/create-pull-request's
releases</a>.</em></p>
<blockquote>
<h2>Create Pull Request v7.0.6</h2>
<p>⚙️ Fixes an issue with commit signing where unicode characters in
file paths were not preserved.</p>
<h2>What's Changed</h2>
<ul>
<li>build(deps-dev): bump <code>@vercel/ncc</code> from 0.38.1 to
0.38.2 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a> in <a
href="https://redirect.github.com/peter-evans/create-pull-request/pull/3365 ">peter-evans/create-pull-request#3365</a></li>
<li>Update distribution by <a
href="https://github.com/actions-bot "><code>@actions-bot</code></a> in
<a
href="https://redirect.github.com/peter-evans/create-pull-request/pull/3370 ">peter-evans/create-pull-request#3370</a></li>
<li>build(deps): bump
<code>@octokit/plugin-rest-endpoint-methods</code> from 13.2.4 to
13.2.5 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a> in <a
href="https://redirect.github.com/peter-evans/create-pull-request/pull/3375 ">peter-evans/create-pull-request#3375</a></li>
<li>build(deps-dev): bump <code>@types/node</code> from 18.19.50 to
18.19.54 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a> in <a
href="https://redirect.github.com/peter-evans/create-pull-request/pull/3376 ">peter-evans/create-pull-request#3376</a></li>
<li>build(deps): bump <code>@octokit/plugin-paginate-rest</code> from
11.3.3 to 11.3.5 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a> in <a
href="https://redirect.github.com/peter-evans/create-pull-request/pull/3377 ">peter-evans/create-pull-request#3377</a></li>
<li>Update distribution by <a
href="https://github.com/actions-bot "><code>@actions-bot</code></a> in
<a
href="https://redirect.github.com/peter-evans/create-pull-request/pull/3388 ">peter-evans/create-pull-request#3388</a></li>
<li>build(deps-dev): bump <code>@types/node</code> from 18.19.54 to
18.19.55 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a> in <a
href="https://redirect.github.com/peter-evans/create-pull-request/pull/3400 ">peter-evans/create-pull-request#3400</a></li>
<li>build(deps): bump <code>@actions/core</code> from 1.10.1 to 1.11.1
by <a href="https://github.com/dependabot "><code>@dependabot</code></a>
in <a
href="https://redirect.github.com/peter-evans/create-pull-request/pull/3401 ">peter-evans/create-pull-request#3401</a></li>
<li>build(deps): bump
<code>@octokit/plugin-rest-endpoint-methods</code> from 13.2.5 to
13.2.6 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a> in <a
href="https://redirect.github.com/peter-evans/create-pull-request/pull/3403 ">peter-evans/create-pull-request#3403</a></li>
<li>build(deps-dev): bump eslint-plugin-import from 2.30.0 to 2.31.0 by
<a href="https://github.com/dependabot "><code>@dependabot</code></a> in
<a
href="https://redirect.github.com/peter-evans/create-pull-request/pull/3402 ">peter-evans/create-pull-request#3402</a></li>
<li>build(deps): bump <code>@octokit/plugin-throttling</code> from
9.3.1 to 9.3.2 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a> in <a
href="https://redirect.github.com/peter-evans/create-pull-request/pull/3404 ">peter-evans/create-pull-request#3404</a></li>
<li>Update distribution by <a
href="https://github.com/actions-bot "><code>@actions-bot</code></a> in
<a
href="https://redirect.github.com/peter-evans/create-pull-request/pull/3423 ">peter-evans/create-pull-request#3423</a></li>
<li>build(deps-dev): bump typescript from 5.6.2 to 5.6.3 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a> in <a
href="https://redirect.github.com/peter-evans/create-pull-request/pull/3441 ">peter-evans/create-pull-request#3441</a></li>
<li>build(deps): bump undici from 6.19.8 to 6.20.1 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a> in <a
href="https://redirect.github.com/peter-evans/create-pull-request/pull/3442 ">peter-evans/create-pull-request#3442</a></li>
<li>Update distribution by <a
href="https://github.com/actions-bot "><code>@actions-bot</code></a> in
<a
href="https://redirect.github.com/peter-evans/create-pull-request/pull/3451 ">peter-evans/create-pull-request#3451</a></li>
<li>build(deps-dev): bump <code>@types/node</code> from 18.19.55 to
18.19.58 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a> in <a
href="https://redirect.github.com/peter-evans/create-pull-request/pull/3457 ">peter-evans/create-pull-request#3457</a></li>
<li>build(deps-dev): bump <code>@types/jest</code> from 29.5.13 to
29.5.14 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a> in <a
href="https://redirect.github.com/peter-evans/create-pull-request/pull/3462 ">peter-evans/create-pull-request#3462</a></li>
<li>build(deps-dev): bump <code>@types/node</code> from 18.19.58 to
18.19.60 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a> in <a
href="https://redirect.github.com/peter-evans/create-pull-request/pull/3463 ">peter-evans/create-pull-request#3463</a></li>
<li>chore: don't bundle undici by <a
href="https://github.com/benmccann "><code>@benmccann</code></a> in <a
href="https://redirect.github.com/peter-evans/create-pull-request/pull/3475 ">peter-evans/create-pull-request#3475</a></li>
<li>Update distribution by <a
href="https://github.com/actions-bot "><code>@actions-bot</code></a> in
<a
href="https://redirect.github.com/peter-evans/create-pull-request/pull/3478 ">peter-evans/create-pull-request#3478</a></li>
<li>chore: use node-fetch-native support for proxy env vars by <a
href="https://github.com/peter-evans "><code>@peter-evans</code></a> in
<a
href="https://redirect.github.com/peter-evans/create-pull-request/pull/3483 ">peter-evans/create-pull-request#3483</a></li>
<li>build(deps-dev): bump <code>@types/node</code> from 18.19.60 to
18.19.64 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a> in <a
href="https://redirect.github.com/peter-evans/create-pull-request/pull/3488 ">peter-evans/create-pull-request#3488</a></li>
<li>build(deps-dev): bump undici from 6.20.1 to 6.21.0 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a> in <a
href="https://redirect.github.com/peter-evans/create-pull-request/pull/3499 ">peter-evans/create-pull-request#3499</a></li>
<li>build(deps-dev): bump <code>@vercel/ncc</code> from 0.38.2 to
0.38.3 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a> in <a
href="https://redirect.github.com/peter-evans/create-pull-request/pull/3500 ">peter-evans/create-pull-request#3500</a></li>
<li>docs: note <code>push-to-repo</code> classic PAT
<code>workflow</code> scope requirement by <a
href="https://github.com/scop "><code>@scop</code></a> in <a
href="https://redirect.github.com/peter-evans/create-pull-request/pull/3511 ">peter-evans/create-pull-request#3511</a></li>
<li>docs: spelling fixes by <a
href="https://github.com/scop "><code>@scop</code></a> in <a
href="https://redirect.github.com/peter-evans/create-pull-request/pull/3512 ">peter-evans/create-pull-request#3512</a></li>
<li>build(deps-dev): bump typescript from 5.6.3 to 5.7.2 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a> in <a
href="https://redirect.github.com/peter-evans/create-pull-request/pull/3516 ">peter-evans/create-pull-request#3516</a></li>
<li>build(deps-dev): bump prettier from 3.3.3 to 3.4.0 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a> in <a
href="https://redirect.github.com/peter-evans/create-pull-request/pull/3517 ">peter-evans/create-pull-request#3517</a></li>
<li>build(deps-dev): bump <code>@types/node</code> from 18.19.64 to
18.19.66 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a> in <a
href="https://redirect.github.com/peter-evans/create-pull-request/pull/3518 ">peter-evans/create-pull-request#3518</a></li>
<li>docs(README): clarify that an existing open PR is managed by <a
href="https://github.com/caugner "><code>@caugner</code></a> in <a
href="https://redirect.github.com/peter-evans/create-pull-request/pull/3498 ">peter-evans/create-pull-request#3498</a></li>
<li>Update distribution by <a
href="https://github.com/actions-bot "><code>@actions-bot</code></a> in
<a
href="https://redirect.github.com/peter-evans/create-pull-request/pull/3529 ">peter-evans/create-pull-request#3529</a></li>
<li>build(deps): bump <code>@octokit/plugin-paginate-rest</code> from
11.3.5 to 11.3.6 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a> in <a
href="https://redirect.github.com/peter-evans/create-pull-request/pull/3542 ">peter-evans/create-pull-request#3542</a></li>
<li>build(deps-dev): bump <code>@types/node</code> from 18.19.66 to
18.19.67 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a> in <a
href="https://redirect.github.com/peter-evans/create-pull-request/pull/3543 ">peter-evans/create-pull-request#3543</a></li>
<li>build(deps-dev): bump prettier from 3.4.0 to 3.4.1 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a> in <a
href="https://redirect.github.com/peter-evans/create-pull-request/pull/3544 ">peter-evans/create-pull-request#3544</a></li>
<li>build(deps-dev): bump eslint-import-resolver-typescript from 3.6.3
to 3.7.0 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a> in <a
href="https://redirect.github.com/peter-evans/create-pull-request/pull/3559 ">peter-evans/create-pull-request#3559</a></li>
<li>build(deps-dev): bump prettier from 3.4.1 to 3.4.2 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a> in <a
href="https://redirect.github.com/peter-evans/create-pull-request/pull/3560 ">peter-evans/create-pull-request#3560</a></li>
<li>build(deps-dev): bump <code>@types/node</code> from 18.19.67 to
18.19.68 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a> in <a
href="https://redirect.github.com/peter-evans/create-pull-request/pull/3570 ">peter-evans/create-pull-request#3570</a></li>
<li>build(deps): bump p-limit from 6.1.0 to 6.2.0 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a> in <a
href="https://redirect.github.com/peter-evans/create-pull-request/pull/3578 ">peter-evans/create-pull-request#3578</a></li>
<li>Update distribution by <a
href="https://github.com/actions-bot "><code>@actions-bot</code></a> in
<a
href="https://redirect.github.com/peter-evans/create-pull-request/pull/3583 ">peter-evans/create-pull-request#3583</a></li>
<li>fix: preserve unicode in filepaths when commit signing by <a
href="https://github.com/peter-evans "><code>@peter-evans</code></a> in
<a
href="https://redirect.github.com/peter-evans/create-pull-request/pull/3588 ">peter-evans/create-pull-request#3588</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/benmccann "><code>@benmccann</code></a>
made their first contribution in <a
href="https://redirect.github.com/peter-evans/create-pull-request/pull/3475 ">peter-evans/create-pull-request#3475</a></li>
<li><a href="https://github.com/scop "><code>@scop</code></a> made their
first contribution in <a
href="https://redirect.github.com/peter-evans/create-pull-request/pull/3511 ">peter-evans/create-pull-request#3511</a></li>
<li><a href="https://github.com/caugner "><code>@caugner</code></a> made
their first contribution in <a
href="https://redirect.github.com/peter-evans/create-pull-request/pull/3498 ">peter-evans/create-pull-request#3498</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="67ccf781d6
"><code>67ccf78</code></a>
fix: preserve unicode in filepaths when commit signing (<a
href="https://redirect.github.com/peter-evans/create-pull-request/issues/3588 ">#3588</a>)</li>
<li><a
href="bb88e27d3f
"><code>bb88e27</code></a>
build: update distribution (<a
href="https://redirect.github.com/peter-evans/create-pull-request/issues/3583 ">#3583</a>)</li>
<li><a
href="b378ed537a
"><code>b378ed5</code></a>
build(deps): bump p-limit from 6.1.0 to 6.2.0 (<a
href="https://redirect.github.com/peter-evans/create-pull-request/issues/3578 ">#3578</a>)</li>
<li><a
href="fa9200e5b4
"><code>fa9200e</code></a>
build(deps-dev): bump <code>@types/node</code> from 18.19.67 to
18.19.68 (<a
href="https://redirect.github.com/peter-evans/create-pull-request/issues/3570 ">#3570</a>)</li>
<li><a
href="16e0059bfd
"><code>16e0059</code></a>
build(deps-dev): bump prettier from 3.4.1 to 3.4.2 (<a
href="https://redirect.github.com/peter-evans/create-pull-request/issues/3560 ">#3560</a>)</li>
<li><a
href="5bffd5ae80
"><code>5bffd5a</code></a>
build(deps-dev): bump eslint-import-resolver-typescript (<a
href="https://redirect.github.com/peter-evans/create-pull-request/issues/3559 ">#3559</a>)</li>
<li><a
href="a22a0ddc21
"><code>a22a0dd</code></a>
build(deps-dev): bump prettier from 3.4.0 to 3.4.1 (<a
href="https://redirect.github.com/peter-evans/create-pull-request/issues/3544 ">#3544</a>)</li>
<li><a
href="b27ce378c8
"><code>b27ce37</code></a>
build(deps-dev): bump <code>@types/node</code> from 18.19.66 to
18.19.67 (<a
href="https://redirect.github.com/peter-evans/create-pull-request/issues/3543 ">#3543</a>)</li>
<li><a
href="4e0cc19e22
"><code>4e0cc19</code></a>
build(deps): bump <code>@octokit/plugin-paginate-rest</code> from
11.3.5 to 11.3.6 (<a
href="https://redirect.github.com/peter-evans/create-pull-request/issues/3542 ">#3542</a>)</li>
<li><a
href="25b6871a4e
"><code>25b6871</code></a>
docs: update scopes for push-to-fork</li>
<li>Additional commits viewable in <a
href="5e914681df...67ccf781d6
">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-01-02 14:24:04 +00:00
Ludy
d4f25db647
used pre-commit/action ( #2548 )
...
# Description
Please provide a summary of the changes, including relevant motivation
and context.
Closes #(issue_number)
## Checklist
- [x] I have read the [Contribution
Guidelines](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/CONTRIBUTING.md )
- [ ] I have performed a self-review of my own code
- [ ] I have attached images of the change if it is UI based
- [ ] I have commented my code, particularly in hard-to-understand areas
- [ ] If my code has heavily changed functionality I have updated
relevant docs on [Stirling-PDFs doc
repo](https://github.com/Stirling-Tools/Stirling-Tools.github.io/blob/main/docs/ )
- [ ] My changes generate no new warnings
- [ ] I have read the section [Add New Translation
Tags](https://github.com/Stirling-Tools/Stirling-PDF/blob/main/HowToAddNewLanguage.md#add-new-translation-tags )
(for new translation tags only)
2024-12-22 16:36:46 +00:00
Ludy
4dfdf2d8ec
Update pre_commit.yml ( #2546 )
2024-12-22 15:02:23 +00:00
Ludy87
7223b379e7
Introduces pre-commit github-action
...
https://github.com/Stirling-Tools/Stirling-PDF/blob/main/.pre-commit-config.yaml
2024-12-22 13:36:26 +01:00