Skip to content

Commit a64ad4d

Browse files
build: bump crazy-max/ghaction-import-gpg from 6.3.0 to 7.0.0 (#363)
Bumps [crazy-max/ghaction-import-gpg](https://github.com/crazy-max/ghaction-import-gpg) from 6.3.0 to 7.0.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/crazy-max/ghaction-import-gpg/releases">crazy-max/ghaction-import-gpg's releases</a>.</em></p> <blockquote> <h2>v7.0.0</h2> <ul> <li>Node 24 as default runtime (requires <a href="https://github.com/actions/runner/releases/tag/v2.327.1">Actions Runner v2.327.1</a> or later) by <a href="https://github.com/crazy-max"><code>@​crazy-max</code></a> in <a href="https://redirect.github.com/crazy-max/ghaction-import-gpg/pull/241">crazy-max/ghaction-import-gpg#241</a></li> <li>Switch to ESM and update config/test wiring by <a href="https://github.com/crazy-max"><code>@​crazy-max</code></a> in <a href="https://redirect.github.com/crazy-max/ghaction-import-gpg/pull/239">crazy-max/ghaction-import-gpg#239</a></li> <li>Bump <code>@​actions/core</code> from 1.11.1 to 3.0.0 in <a href="https://redirect.github.com/crazy-max/ghaction-import-gpg/pull/232">crazy-max/ghaction-import-gpg#232</a></li> <li>Bump <code>@​actions/exec</code> from 1.1.1 to 3.0.0 in <a href="https://redirect.github.com/crazy-max/ghaction-import-gpg/pull/242">crazy-max/ghaction-import-gpg#242</a></li> <li>Bump brace-expansion from 1.1.11 to 1.1.12 in <a href="https://redirect.github.com/crazy-max/ghaction-import-gpg/pull/221">crazy-max/ghaction-import-gpg#221</a></li> <li>Bump minimatch from 3.1.2 to 3.1.5 in <a href="https://redirect.github.com/crazy-max/ghaction-import-gpg/pull/240">crazy-max/ghaction-import-gpg#240</a></li> <li>Bump openpgp from 6.1.0 to 6.3.0 in <a href="https://redirect.github.com/crazy-max/ghaction-import-gpg/pull/233">crazy-max/ghaction-import-gpg#233</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/crazy-max/ghaction-import-gpg/compare/v6.3.0...v7.0.0">https://github.com/crazy-max/ghaction-import-gpg/compare/v6.3.0...v7.0.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/crazy-max/ghaction-import-gpg/commit/2dc316deee8e90f13e1a351ab510b4d5bc0c82cd"><code>2dc316d</code></a> Merge pull request <a href="https://redirect.github.com/crazy-max/ghaction-import-gpg/issues/242">#242</a> from crazy-max/dependabot/npm_and_yarn/actions/exec-3...</li> <li><a href="https://github.com/crazy-max/ghaction-import-gpg/commit/5812792d2b1cde341f2ea75ce7ca7ba2d2f9d140"><code>5812792</code></a> chore: update generated content</li> <li><a href="https://github.com/crazy-max/ghaction-import-gpg/commit/ceb906ede8cacd6fd63677a4c35d8df2c42b6906"><code>ceb906e</code></a> build(deps): bump <code>@​actions/exec</code> from 1.1.1 to 3.0.0</li> <li><a href="https://github.com/crazy-max/ghaction-import-gpg/commit/a9dffd930715a967060b1945ffb5a4ccd847e482"><code>a9dffd9</code></a> Merge pull request <a href="https://redirect.github.com/crazy-max/ghaction-import-gpg/issues/241">#241</a> from crazy-max/node24</li> <li><a href="https://github.com/crazy-max/ghaction-import-gpg/commit/36d49fcb3ce6996de4ea7013ab71d6bc03a00b04"><code>36d49fc</code></a> node 24 as default runtime</li> <li><a href="https://github.com/crazy-max/ghaction-import-gpg/commit/50c4e4f047b7ceb0acad3118559179fb10009d01"><code>50c4e4f</code></a> Merge pull request <a href="https://redirect.github.com/crazy-max/ghaction-import-gpg/issues/233">#233</a> from crazy-max/dependabot/npm_and_yarn/openpgp-6.3.0</li> <li><a href="https://github.com/crazy-max/ghaction-import-gpg/commit/c78fe49862245dc2ce48649309af68f2bdaa5758"><code>c78fe49</code></a> chore: update generated content</li> <li><a href="https://github.com/crazy-max/ghaction-import-gpg/commit/8dbbb1e8e50d7676574ffd644d8f1ea7a32fd0ea"><code>8dbbb1e</code></a> Merge pull request <a href="https://redirect.github.com/crazy-max/ghaction-import-gpg/issues/221">#221</a> from crazy-max/dependabot/npm_and_yarn/brace-expansio...</li> <li><a href="https://github.com/crazy-max/ghaction-import-gpg/commit/fc715b05fd639536a0a18c77c724056e4ffa9397"><code>fc715b0</code></a> build(deps): bump openpgp from 6.1.0 to 6.3.0</li> <li><a href="https://github.com/crazy-max/ghaction-import-gpg/commit/99469162d0438cc32ec0ca8bc23d6a405bd28577"><code>9946916</code></a> build(deps): bump brace-expansion from 1.1.11 to 1.1.12</li> <li>Additional commits viewable in <a href="https://github.com/crazy-max/ghaction-import-gpg/compare/e89d40939c28e39f97cf32126055eeae86ba74ec...2dc316deee8e90f13e1a351ab510b4d5bc0c82cd">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=crazy-max/ghaction-import-gpg&package-manager=github_actions&previous-version=6.3.0&new-version=7.0.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1 parent 350d3dd commit a64ad4d

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

.github/workflows/auto_updates.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -21,7 +21,7 @@ jobs:
2121

2222
# This GPG key is for the `phylum-bot` account and used in order to ensure commits are signed/verified
2323
- name: Import GPG key for bot account
24-
uses: crazy-max/ghaction-import-gpg@e89d40939c28e39f97cf32126055eeae86ba74ec # v6.3.0
24+
uses: crazy-max/ghaction-import-gpg@2dc316deee8e90f13e1a351ab510b4d5bc0c82cd # v7.0.0
2525
with:
2626
gpg_private_key: ${{ secrets.PHYLUM_BOT_GPG_PRIVATE_KEY }}
2727
passphrase: ${{ secrets.PHYLUM_BOT_GPG_PASSPHRASE }}

0 commit comments

Comments
 (0)