aRustyDev / aRustyDev/pre-commit-hooks-py
deps: ci: bump dependabot/fetch-metadata from 2 to 3
- Ngôn ngữ chính
- Không có dữ liệu ngôn ngữ
- Star
- 0
- Fork
- 0
- Chỉ số merge pull request
- Không có pull request nào được merge trong 30 ngày
Mô tả
## Dependabot Update
Bumps [dependabot/fetch-metadata](https://github.com/dependabot/fetch-metadata) from 2 to 3.
Release notes
Sourced from dependabot/fetch-metadata's releases.
v3.0.0
The breaking change is requiring Node.js version v24 as the Actions runtime.
What's Changed
- feat: Parse versions from metadata links by
@ppkarwaszin dependabot/fetch-metadata#632- Upgrade actions core and actions github packages by
@truggeriin dependabot/fetch-metadata#649- docs: Add notes for using
alert-lookupwith App Token by@sue445in dependabot/fetch-metadata#656- feat!: update Node.js version to v24 by
@sturmanin dependabot/fetch-metadata#671- Switch build tooling from ncc to esbuild by
@truggeriin dependabot/fetch-metadata#676- Add --legal-comments=none to esbuild build commands by
@jeffwidmanin dependabot/fetch-metadata#679- Bump tsconfig target from es2022 to es2024 by
@jeffwidmanin dependabot/fetch-metadata#680- Remove vestigial outDir from tsconfig.json by
@jeffwidmanin dependabot/fetch-metadata#681- Switch tsconfig module resolution to bundler by
@jeffwidmanin dependabot/fetch-metadata#682- Remove skipLibCheck from tsconfig.json by
@jeffwidmanin dependabot/fetch-metadata#683- Add typecheck step to CI by
@jeffwidmanin dependabot/fetch-metadata#685- Enable noImplicitAny in tsconfig.json by
@jeffwidmanin dependabot/fetch-metadata#684- Upgrade
@actions/coreto ^3.0.0 by@truggeriin dependabot/fetch-metadata#677- Upgrade
@actions/githubto ^9.0.0 and@octokit/request-errorto ^7.1.0 by@truggeriin dependabot/fetch-metadata#678- Bump qs from 6.14.0 to 6.14.1 by
@dependabot[bot] in dependabot/fetch-metadata#651- Bump hono from 4.11.1 to 4.11.4 by
@dependabot[bot] in dependabot/fetch-metadata#652- Bump hono from 4.11.4 to 4.11.7 by
@dependabot[bot] in dependabot/fetch-metadata#653- Bump hono from 4.11.7 to 4.12.0 by
@dependabot[bot] in dependabot/fetch-metadata#657- Bump qs from 6.14.1 to 6.14.2 by
@dependabot[bot] in dependabot/fetch-metadata#655- Bump
@modelcontextprotocol/sdkfrom 1.25.1 to 1.26.0 by@dependabot[bot] in dependabot/fetch-metadata#654- Bump
@hono/node-serverfrom 1.19.9 to 1.19.10 by@dependabot[bot] in dependabot/fetch-metadata#665- Bump hono from 4.12.2 to 4.12.5 by
@dependabot[bot] in dependabot/fetch-metadata#664- Bump minimatch from 3.1.2 to 3.1.5 by
@dependabot[bot] in dependabot/fetch-metadata#667- Bump hono from 4.12.5 to 4.12.7 by
@dependabot[bot] in dependabot/fetch-metadata#668- Bump actions/create-github-app-token from 2.2.1 to 3.0.0 by
@dependabot[bot] in dependabot/fetch-metadata#669- Bump flatted from 3.3.3 to 3.4.2 by
@dependabot[bot] in dependabot/fetch-metadata#670- build(deps-dev): bump picomatch from 2.3.1 to 2.3.2 by
@dependabot[bot] in dependabot/fetch-metadata#674New Contributors
@ppkarwaszmade their first contribution in dependabot/fetch-metadata#632@truggerimade their first contribution in dependabot/fetch-metadata#649@sue445made their first contribution in dependabot/fetch-metadata#656@sturmanmade their first contribution in dependabot/fetch-metadata#671Full Changelog: https://github.com/dependabot/fetch-metadata/compare/v2...v3.0.0
v2.5.0
What's Changed
- Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 by
@dependabot[bot] in dependabot/fetch-metadata#628- Bump the dev-dependencies group with 11 updates by
@dependabot[bot] in dependabot/fetch-metadata#629- Bump actions/create-github-app-token from 2.0.6 to 2.1.1 by
@dependabot[bot] in dependabot/fetch-metadata#635- Bump actions/create-github-app-token from 2.1.1 to 2.1.4 by
@dependabot[bot] in dependabot/fetch-metadata#638- Bump actions/checkout from 4 to 5 by
@dependabot[bot] in dependabot/fetch-metadata#636- Bump actions/setup-node from 4 to 5 by
@dependabot[bot] in dependabot/fetch-metadata#637- Bump actions/setup-node from 5 to 6 by
@dependabot[bot] in dependabot/fetch-metadata#639- Bump actions/create-github-app-token from 2.1.4 to 2.2.0 by
@dependabot[bot] in dependabot/fetch-metadata#643
... (truncated)
Commits
ffa630cv3.0.0 (#686)ec8fff2Merge pull request #674 from dependabot/dependabot/npm_and_yarn/picomatch-2.3.2caf48bdbuild(deps-dev): bump picomatch from 2.3.1 to 2.3.213d8274Upgrade@actions/githubto ^9.0.0 and@octokit/request-errorto ^7.1.0 (#678)b603099Upgrade@actions/corefrom ^1.11.1 to ^3.0.0 (#677)c5dc5b1Enable noImplicitAny in tsconfig.json (#684)a183f3cAdd typecheck step to CI (#685)5e17564Remove skipLibCheck from tsconfig.json (#683)bb56eebSwitch tsconfig module resolution to bundler (#682)3632e3dRemove vestigial outDir from tsconfig.json (#681)- Additional commits viewable in compare view
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
## Pull Request
- PR: #7
- Author: @dependabot[bot]
- URL: https://github.com/aRustyDev/pre-commit-hooks-py/pull/7
---
This issue was automatically created to track the Dependabot update.
Hướng dẫn đóng góp
Hướng nghiên cứu
Bắt đầu bằng cách xác định workflow hoặc khai báo dependency cho dependabot/fetch-metadata và xem lại các ghi chú phát hành v3 được trích dẫn trong issue này, đặc biệt là yêu cầu Node.js v24. Cập nhật phiên bản action đã khai báo và xác minh rằng CI hoàn tất thành công; được xem là hoàn tất khi dependency sử dụng v3 và các workflow đều pass.
Do mô hình lập chỉ mục viết ra từ nội dung của issue.
Đánh giá
- Công nghệ
- github-actions, node.js
- Lĩnh vực
- ci-cd
- Loại issue
- Tái cấu trúc
- Độ khó
- 2/5
- Thời gian dự kiến
- 1-3 giờ
- Mức độ hoạt động
- Ít trao đổi
- Độ rõ ràng
- Khá rõ ràng
- Mức phù hợp với người mới
- 55/100