-
Notifications
You must be signed in to change notification settings - Fork 2.4k
Implement branch list using callbacks from exec function#1045
Implement branch list using callbacks from exec function#1045cory-miller merged 3 commits intomainfrom
Conversation
When trying to list local branches to figure out what needs cleaned up during runs on non-ephemeral Actions Runners, we use git rev-parse --symbolic-full-name to get a list of branches. This can lead to ambiguous ref name errors when there are branches and tags with similar names.
Part of the reason we use rev-parse --symbolic-full-name vs git branch --list or git rev-parse --symbolic seems to related to a bug in Git 2.18. Until we can deprecate our usage of Git 2.18, I think we need to keep --symbolic-full-name. Since part of the problem is that these ambiguous ref name errors clog the Actions annotation limits, this is a mitigation to suppress those messages until we can get rid of the workaround.
See #786
| branch = branch.substr('refs/remotes/'.length); | ||
| } | ||
| result.push(branch); | ||
| if (!branch) { |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
nice!
JoannaaKL
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
lgtm
vanZeben
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This reads a lot cleaner! Nice job!
|
Looks great to me @cory-miller ! One thing i noticed when pulling this locally was a high vuln on a package named $ npm audit
# npm audit report qs 6.10.0 - 6.10.2 Severity: high qs vulnerable to Prototype Pollution - https://github.com/advisories/GHSA-hrpp-h998-j3pp fix available via `npm audit fix` node_modules/qs 1 high severity vulnerability which resulted in an additional package-lock.json change: "node_modules/qs": {
- "version": "6.10.1", - "resolved": "https://registry.npmjs.org/qs/-/qs-6.10.1.tgz", - "integrity": "sha512-M528Hph6wsSVOBiYUnGf+K/7w0hNshs/duGsNXPUCLH5XAqjEtiPGwNONLV0tBH8NoGb0mvD5JubnUTrujKDTg==", + "version": "6.11.0", + "resolved": "https://registry.npmjs.org/qs/-/qs-6.11.0.tgz", + "integrity": "sha512-MvjoMCJwEarSbUYk5O+nmoSzSutSsTwF85zcHPQ9OrlFoZOYIjaqBAJIqIXjptyD5vThxGq52Xu/MaJzRkIk4Q==", "dependencies": { "side-channel": "^1.0.4" }, but let me know if you're not seeing the same thing. |
|
@vmjoseph I've updated |
[](https://renovatebot.com)
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [actions/checkout](https://togithub.com/actions/checkout) | action | minor | `v3.2.0` -> `v3.3.0` |
---
### Release Notes
actions/checkout
### [`v3.3.0`](https://togithub.com/actions/checkout/releases/tag/v3.3.0)
[Compare Source](https://togithub.com/actions/checkout/compare/v3.2.0...v3.3.0)
##### What's Changed
- Implement branch list using callbacks from exec function by [`@cory-miller](https://togithub.com/cory-miller)` in [https://github.com/actions/checkout/pull/1045](https://togithub.com/actions/checkout/pull/1045)
- Add in explicit reference to private checkout options by [`@vanZeben](https://togithub.com/vanZeben)` in [https://github.com/actions/checkout/pull/1050](https://togithub.com/actions/checkout/pull/1050)
- Fix comment typos (that got added in [#770](https://togithub.com/actions/checkout/issues/770)) by [`@lurch](https://togithub.com/lurch)` in [https://github.com/actions/checkout/pull/1057](https://togithub.com/actions/checkout/pull/1057)
##### New Contributors
- [`@vanZeben](https://togithub.com/vanZeben)` made their first contribution in [https://github.com/actions/checkout/pull/1050](https://togithub.com/actions/checkout/pull/1050)
- [`@lurch](https://togithub.com/lurch)` made their first contribution in [https://github.com/actions/checkout/pull/1057](https://togithub.com/actions/checkout/pull/1057)
**Full Changelog**: actions/checkout@v3.2.0...v3.3.0
---
### Configuration
**Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
**Automerge**: Enabled.
**Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
**Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://app.renovatebot.com/dashboard#github/OpenPoolProject/stratum).
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [actions/checkout](https://togithub.com/actions/checkout) | action |
minor | `v3.2.0` -> `v3.3.0` |
---
### Release Notes
actions/checkout
###
[`v3.3.0`](https://togithub.com/actions/checkout/releases/tag/v3.3.0)
[Compare
Source](https://togithub.com/actions/checkout/compare/v3.2.0...v3.3.0)
##### What's Changed
- Implement branch list using callbacks from exec function by
[@cory-miller](https://togithub.com/cory-miller) in
[https://github.com/actions/checkout/pull/1045](https://togithub.com/actions/checkout/pull/1045)
- Add in explicit reference to private checkout options by
[@vanZeben](https://togithub.com/vanZeben) in
[https://github.com/actions/checkout/pull/1050](https://togithub.com/actions/checkout/pull/1050)
- Fix comment typos (that got added in
[#770](https://togithub.com/actions/checkout/issues/770)) by
[@lurch](https://togithub.com/lurch) in
[https://github.com/actions/checkout/pull/1057](https://togithub.com/actions/checkout/pull/1057)
##### New Contributors
- [@vanZeben](https://togithub.com/vanZeben) made their first
contribution in
[https://github.com/actions/checkout/pull/1050](https://togithub.com/actions/checkout/pull/1050)
- [@lurch](https://togithub.com/lurch) made their first
contribution in
[https://github.com/actions/checkout/pull/1057](https://togithub.com/actions/checkout/pull/1057)
**Full Changelog**:
actions/checkout@v3.2.0...v3.3.0
---
### Configuration
**Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).
**Automerge**: Disabled by config. Please merge this manually once you
are satisfied.
**Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
**Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://app.renovatebot.com/dashboard#github/JellyfishSDK/jellyfish).
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [actions/checkout](https://togithub.com/actions/checkout) | action |
minor | `v3.2.0` -> `v3.3.0` |
|
[actions/upload-artifact](https://togithub.com/actions/upload-artifact)
| action | patch | `v3.1.1` -> `v3.1.2` |
---
### Release Notes
actions/checkout
###
[`v3.3.0`](https://togithub.com/actions/checkout/releases/tag/v3.3.0)
[Compare
Source](https://togithub.com/actions/checkout/compare/v3.2.0...v3.3.0)
##### What's Changed
- Implement branch list using callbacks from exec function by
[@cory-miller](https://togithub.com/cory-miller) in
[https://github.com/actions/checkout/pull/1045](https://togithub.com/actions/checkout/pull/1045)
- Add in explicit reference to private checkout options by
[@vanZeben](https://togithub.com/vanZeben) in
[https://github.com/actions/checkout/pull/1050](https://togithub.com/actions/checkout/pull/1050)
- Fix comment typos (that got added in
[#770](https://togithub.com/actions/checkout/issues/770)) by
[@lurch](https://togithub.com/lurch) in
[https://github.com/actions/checkout/pull/1057](https://togithub.com/actions/checkout/pull/1057)
##### New Contributors
- [@vanZeben](https://togithub.com/vanZeben) made their first
contribution in
[https://github.com/actions/checkout/pull/1050](https://togithub.com/actions/checkout/pull/1050)
- [@lurch](https://togithub.com/lurch) made their first
contribution in
[https://github.com/actions/checkout/pull/1057](https://togithub.com/actions/checkout/pull/1057)
**Full Changelog**:
actions/checkout@v3.2.0...v3.3.0
actions/upload-artifact
###
[`v3.1.2`](https://togithub.com/actions/upload-artifact/releases/tag/v3.1.2)
[Compare
Source](https://togithub.com/actions/upload-artifact/compare/v3.1.1...v3.1.2)
- Update all `@actions/*` NPM packages to their latest versions-
[#374](https://togithub.com/actions/upload-artifact/issues/374)
- Update all dev dependencies to their most recent versions -
[#375](https://togithub.com/actions/upload-artifact/issues/375)
---
### Configuration
**Schedule**: Branch creation - "before 6am on monday" in timezone
Australia/Sydney, Automerge - At any time (no schedule defined).
**Automerge**: Disabled by config. Please merge this manually once you
are satisfied.
**Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
**Immortal**: This PR will be recreated if closed unmerged. Get
[config help](https://togithub.com/renovatebot/renovate/discussions) if
that's undesired.
---
- [ ] If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://app.renovatebot.com/dashboard#github/google/osv.dev).
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [actions/checkout](https://togithub.com/actions/checkout) | action | minor | `v3.0.2` -> `v3.3.0` |
---
### Release Notes
actions/checkout
### [`v3.3.0`](https://togithub.com/actions/checkout/releases/tag/v3.3.0)
[Compare Source](https://togithub.com/actions/checkout/compare/v3.2.0...v3.3.0)
##### What's Changed
- Implement branch list using callbacks from exec function by [@cory-miller](https://togithub.com/cory-miller) in [https://github.com/actions/checkout/pull/1045](https://togithub.com/actions/checkout/pull/1045)
- Add in explicit reference to private checkout options by [@vanZeben](https://togithub.com/vanZeben) in [https://github.com/actions/checkout/pull/1050](https://togithub.com/actions/checkout/pull/1050)
- Fix comment typos (that got added in [#770](https://togithub.com/actions/checkout/issues/770)) by [@lurch](https://togithub.com/lurch) in [https://github.com/actions/checkout/pull/1057](https://togithub.com/actions/checkout/pull/1057)
##### New Contributors
- [@vanZeben](https://togithub.com/vanZeben) made their first contribution in [https://github.com/actions/checkout/pull/1050](https://togithub.com/actions/checkout/pull/1050)
- [@lurch](https://togithub.com/lurch) made their first contribution in [https://github.com/actions/checkout/pull/1057](https://togithub.com/actions/checkout/pull/1057)
**Full Changelog**: actions/checkout@v3.2.0...v3.3.0
### [`v3.2.0`](https://togithub.com/actions/checkout/releases/tag/v3.2.0)
[Compare Source](https://togithub.com/actions/checkout/compare/v3.1.0...v3.2.0)
##### What's Changed
- Add GitHub Action to perform release by [@rentziass](https://togithub.com/rentziass) in [https://github.com/actions/checkout/pull/942](https://togithub.com/actions/checkout/pull/942)
- Fix status badge by [@ScottBrenner](https://togithub.com/ScottBrenner) in [https://github.com/actions/checkout/pull/967](https://togithub.com/actions/checkout/pull/967)
- Replace datadog/squid with ubuntu/squid Docker image by [@cory-miller](https://togithub.com/cory-miller) in [https://github.com/actions/checkout/pull/1002](https://togithub.com/actions/checkout/pull/1002)
- Wrap pipeline commands for submoduleForeach in quotes by [@jokreliable](https://togithub.com/jokreliable) in [https://github.com/actions/checkout/pull/964](https://togithub.com/actions/checkout/pull/964)
- Update [@actions/io](https://togithub.com/actions/io) to 1.1.2 by [@cory-miller](https://togithub.com/cory-miller) in [https://github.com/actions/checkout/pull/1029](https://togithub.com/actions/checkout/pull/1029)
- Upgrading version to 3.2.0 by [@vmjoseph](https://togithub.com/vmjoseph) in [https://github.com/actions/checkout/pull/1039](https://togithub.com/actions/checkout/pull/1039)
##### New Contributors
- [@ScottBrenner](https://togithub.com/ScottBrenner) made their first contribution in [https://github.com/actions/checkout/pull/967](https://togithub.com/actions/checkout/pull/967)
- [@cory-miller](https://togithub.com/cory-miller) made their first contribution in [https://github.com/actions/checkout/pull/1002](https://togithub.com/actions/checkout/pull/1002)
- [@jokreliable](https://togithub.com/jokreliable) made their first contribution in [https://github.com/actions/checkout/pull/964](https://togithub.com/actions/checkout/pull/964)
- [@vmjoseph](https://togithub.com/vmjoseph) made their first contribution in [https://github.com/actions/checkout/pull/1039](https://togithub.com/actions/checkout/pull/1039)
**Full Changelog**: actions/checkout@v3.1.0...v3.2.0
### [`v3.1.0`](https://togithub.com/actions/checkout/blob/HEAD/CHANGELOG.md#v310)
[Compare Source](https://togithub.com/actions/checkout/compare/v3.0.2...v3.1.0)
- [Use @actions/core `saveState` and `getState`](https://togithub.com/actions/checkout/pull/939)
- [Add `github-server-url` input](https://togithub.com/actions/checkout/pull/922)
---
### Configuration
**Schedule**: Branch creation - "after 5:00 and before 6:00 every weekday" in timezone Europe/Berlin, Automerge - At any time (no schedule defined).
**Automerge**: Disabled by config. Please merge this manually once you are satisfied.
**Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
**Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://app.renovatebot.com/dashboard#github/stackabletech/druid-opa-authorizer).
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [actions/checkout](https://togithub.com/actions/checkout) | action | minor | `v3.1.0` -> `v3.3.0` |
---
### Release Notes
actions/checkout
### [`v3.3.0`](https://togithub.com/actions/checkout/releases/tag/v3.3.0)
[Compare Source](https://togithub.com/actions/checkout/compare/v3.2.0...v3.3.0)
##### What's Changed
- Implement branch list using callbacks from exec function by [@cory-miller](https://togithub.com/cory-miller) in [https://github.com/actions/checkout/pull/1045](https://togithub.com/actions/checkout/pull/1045)
- Add in explicit reference to private checkout options by [@vanZeben](https://togithub.com/vanZeben) in [https://github.com/actions/checkout/pull/1050](https://togithub.com/actions/checkout/pull/1050)
- Fix comment typos (that got added in [#770](https://togithub.com/actions/checkout/issues/770)) by [@lurch](https://togithub.com/lurch) in [https://github.com/actions/checkout/pull/1057](https://togithub.com/actions/checkout/pull/1057)
##### New Contributors
- [@vanZeben](https://togithub.com/vanZeben) made their first contribution in [https://github.com/actions/checkout/pull/1050](https://togithub.com/actions/checkout/pull/1050)
- [@lurch](https://togithub.com/lurch) made their first contribution in [https://github.com/actions/checkout/pull/1057](https://togithub.com/actions/checkout/pull/1057)
**Full Changelog**: actions/checkout@v3.2.0...v3.3.0
### [`v3.2.0`](https://togithub.com/actions/checkout/releases/tag/v3.2.0)
[Compare Source](https://togithub.com/actions/checkout/compare/v3.1.0...v3.2.0)
##### What's Changed
- Add GitHub Action to perform release by [@rentziass](https://togithub.com/rentziass) in [https://github.com/actions/checkout/pull/942](https://togithub.com/actions/checkout/pull/942)
- Fix status badge by [@ScottBrenner](https://togithub.com/ScottBrenner) in [https://github.com/actions/checkout/pull/967](https://togithub.com/actions/checkout/pull/967)
- Replace datadog/squid with ubuntu/squid Docker image by [@cory-miller](https://togithub.com/cory-miller) in [https://github.com/actions/checkout/pull/1002](https://togithub.com/actions/checkout/pull/1002)
- Wrap pipeline commands for submoduleForeach in quotes by [@jokreliable](https://togithub.com/jokreliable) in [https://github.com/actions/checkout/pull/964](https://togithub.com/actions/checkout/pull/964)
- Update [@actions/io](https://togithub.com/actions/io) to 1.1.2 by [@cory-miller](https://togithub.com/cory-miller) in [https://github.com/actions/checkout/pull/1029](https://togithub.com/actions/checkout/pull/1029)
- Upgrading version to 3.2.0 by [@vmjoseph](https://togithub.com/vmjoseph) in [https://github.com/actions/checkout/pull/1039](https://togithub.com/actions/checkout/pull/1039)
##### New Contributors
- [@ScottBrenner](https://togithub.com/ScottBrenner) made their first contribution in [https://github.com/actions/checkout/pull/967](https://togithub.com/actions/checkout/pull/967)
- [@cory-miller](https://togithub.com/cory-miller) made their first contribution in [https://github.com/actions/checkout/pull/1002](https://togithub.com/actions/checkout/pull/1002)
- [@jokreliable](https://togithub.com/jokreliable) made their first contribution in [https://github.com/actions/checkout/pull/964](https://togithub.com/actions/checkout/pull/964)
- [@vmjoseph](https://togithub.com/vmjoseph) made their first contribution in [https://github.com/actions/checkout/pull/1039](https://togithub.com/actions/checkout/pull/1039)
**Full Changelog**: actions/checkout@v3.1.0...v3.2.0
---
### Configuration
**Schedule**: Branch creation - "after 5:00 and before 6:00 every weekday" in timezone Europe/Berlin, Automerge - At any time (no schedule defined).
**Automerge**: Disabled by config. Please merge this manually once you are satisfied.
**Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
**Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://app.renovatebot.com/dashboard#github/stackabletech/operator-rs).
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)
This PR contains the following updates:
| Package | Type | Update | Change | Age | Adoption | Passing |
Confidence |
|---|---|---|---|---|---|---|---|
| actionpack-page_caching | | patch | `'1.2.0'` -> `'1.2.4'` |
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
| [actions/checkout](https://togithub.com/actions/checkout) | action |
minor | `v3.1.0` -> `v3.3.0` |
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
|
[actions/upload-artifact](https://togithub.com/actions/upload-artifact)
| action | patch | `v3.1.0` -> `v3.1.2` |
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
| coffee-rails | | minor | `'~> 4.1.0'` -> `'~> 4.2.0'` |
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
|
[eslint-plugin-import](https://togithub.com/import-js/eslint-plugin-import)
| devDependencies | minor | [`2.26.0` ->
`2.27.5`](https://renovatebot.com/diffs/npm/eslint-plugin-import/2.26.0/2.27.5)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
| [github/codeql-action](https://togithub.com/github/codeql-ac tion) |
action | minor | `v2.1.27` -> `v2.2.1` |
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
| [gradle](https://gradle.org)
([source](https://togithub.com/gradle/gradle)) | | minor | `7.4.1` ->
`7.6` |
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
| [ossf/scorecard-action](https://togithub.com/ossf/scorecard- action) |
action | minor | `v2.0.6` -> `v2.1.2` |
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
| rails | | minor | `'>= 5.0.0.beta1', '< 5.1'` -> `'>= 5.0.0.beta1', '<
5.2.9'` |
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
|
[terraform-linters/tflint-ruleset-aws](https://togithub.com/terraform-linters/tflint-ruleset-aws)
| plugin | minor | `0.13.2` -> `0.21.2` |
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
| [typescript](https://www.typescriptlang.org/)
([source](https://togithub.com/Microsoft/TypeScript)) | devDependencies
| patch | [`4.9.3` ->
`4.9.5`](https://renovatebot.com/diffs/npm/typescript/4.9.3/4.9.5) |
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
| io.gitlab.arturbosch.detekt | plugin | minor | `1.20.0-RC1` ->
`1.22.0` |
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
| org.jetbrains.kotlin.jvm | plugin | minor | `1.5.31` -> `1.8.10` |
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
---
### Release Notes
actions/checkout
###
[`v3.3.0`](https://togithub.com/actions/checkout/releases/tag/v3.3.0)
[Compare
Source](https://togithub.com/actions/checkout/compare/v3.2.0...v3.3.0)
##### What's Changed
- Implement branch list using callbacks from exec function by
[@cory-miller](https://togithub.com/cory-miller) in
[https://github.com/actions/checkout/pull/1045](https://togithub.com/actions/checkout/pull/1045)
- Add in explicit reference to private checkout options by
[@vanZeben](https://togithub.com/vanZeben) in
[https://github.com/actions/checkout/pull/1050](https://togithub.com/actions/checkout/pull/1050)
- Fix comment typos (that got added in
[#770](https://togithub.com/actions/checkout/issues/770)) by
[@lurch](https://togithub.com/lurch) in
[https://github.com/actions/checkout/pull/1057](https://togithub.com/actions/checkout/pull/1057)
##### New Contributors
- [@vanZeben](https://togithub.com/vanZeben) made their first
contribution in
[https://github.com/actions/checkout/pull/1050](https://togithub.com/actions/checkout/pull/1050)
- [@lurch](https://togithub.com/lurch) made their first
contribution in
[https://github.com/actions/checkout/pull/1057](https://togithub.com/actions/checkout/pull/1057)
**Full Changelog**:
https://github.com/actions/checkout/compare/v3.2.0...v3.3.0
###
[`v3.2.0`](https://togithub.com/actions/checkout/releases/tag/v3.2.0)
[Compare
Source](https://togithub.com/actions/checkout/compare/v3.1.0...v3.2.0)
#### What's Changed
- Add GitHub Action to perform release by
[@rentziass](https://togithub.com/rentziass) in
[https://github.com/actions/checkout/pull/942](https://togithub.com/actions/checkout/pull/942)
- Fix status badge by
[@ScottBrenner](https://togithub.com/ScottBrenner) in
[https://github.com/actions/checkout/pull/967](https://togithub.com/actions/checkout/pull/967)
- Replace datadog/squid with ubuntu/squid Docker image by
[@cory-miller](https://togithub.com/cory-miller) in
[https://github.com/actions/checkout/pull/1002](https://togithub.com/actions/checkout/pull/1002)
- Wrap pipeline commands for submoduleForeach in quotes by
[@jokreliable](https://togithub.com/jokreliable) in
[https://github.com/actions/checkout/pull/964](https://togithub.com/actions/checkout/pull/964)
- Update [@actions/io](https://togithub.com/actions/io) to 1.1.2
by [@cory-miller](https://togithub.com/cory-miller) in
[https://github.com/actions/checkout/pull/1029](https://togithub.com/actions/checkout/pull/1029)
- Upgrading version to 3.2.0 by
[@vmjoseph](https://togithub.com/vmjoseph) in
[https://github.com/actions/checkout/pull/1039](https://togithub.com/actions/checkout/pull/1039)
#### New Contributors
- [@ScottBrenner](https://togithub.com/ScottBrenner) made their
first contribution in
[https://github.com/actions/checkout/pull/967](https://togithub.com/actions/checkout/pull/967)
- [@cory-miller](https://togithub.com/cory-miller) made their
first contribution in
[https://github.com/actions/checkout/pull/1002](https://togithub.com/actions/checkout/pull/1002)
- [@jokreliable](https://togithub.com/jokreliable) made their
first contribution in
[https://github.com/actions/checkout/pull/964](https://togithub.com/actions/checkout/pull/964)
- [@vmjoseph](https://togithub.com/vmjoseph) made their first
contribution in
[https://github.com/actions/checkout/pull/1039](https://togithub.com/actions/checkout/pull/1039)
**Full Changelog**:
https://github.com/actions/checkout/compare/v3.1.0...v3.2.0
actions/upload-artifact
###
[`v3.1.2`](https://togithub.com/actions/upload-artifact/releases/tag/v3.1.2)
[Compare
Source](https://togithub.com/actions/upload-artifact/compare/v3.1.1...v3.1.2)
- Update all `@actions/*` NPM packages to their latest versions-
[#374](https://togithub.com/actions/upload-artifact/issues/374)
- Update all dev dependencies to their most recent versions -
[#375](https://togithub.com/actions/upload-artifact/issues/375)
###
[`v3.1.1`](https://togithub.com/actions/upload-artifact/releases/tag/v3.1.1)
[Compare
Source](https://togithub.com/actions/upload-artifact/compare/v3.1.0...v3.1.1)
- Update actions/core package to latest version to remove `set-output`
deprecation warning
[#351](https://togithub.com/actions/upload-artifact/issues/351)
import-js/eslint-plugin-import
###
[`v2.27.5`](https://togithub.com/import-js/eslint-plugin-import/blob/HEAD/CHANGELOG.md#2275---2023-01-16)
[Compare
Source](https://togithub.com/import-js/eslint-plugin-import/compare/v2.27.4...v2.27.5)
##### Fixed
- \[`order]`: Fix group ranks order when alphabetizing
(\[[#2674](https://togithub.com/import-js/eslint-plugin-import/issues/2674)],
thanks \[[@Pearce-Ropion](https://togithub.com/Pearce-Ropion)])
###
[`v2.27.4`](https://togithub.com/import-js/eslint-plugin-import/blob/HEAD/CHANGELOG.md#2274---2023-01-11)
[Compare
Source](https://togithub.com/import-js/eslint-plugin-import/compare/v2.27.3...v2.27.4)
##### Fixed
- `semver` should be a prod dep
(\[[#2668](https://togithub.com/import-js/eslint-plugin-import/issues/2668)])
###
[`v2.27.3`](https://togithub.com/import-js/eslint-plugin-import/blob/HEAD/CHANGELOG.md#2273---2023-01-11)
[Compare
Source](https://togithub.com/import-js/eslint-plugin-import/compare/v2.27.2...v2.27.3)
##### Fixed
- \[`no-empty-named-blocks`]: rewrite rule to only check import
declarations
(\[[#2666](https://togithub.com/import-js/eslint-plugin-import/issues/2666)])
###
[`v2.27.2`](https://togithub.com/import-js/eslint-plugin-import/blob/HEAD/CHANGELOG.md#2272---2023-01-11)
[Compare
Source](https://togithub.com/import-js/eslint-plugin-import/compare/v2.27.1...v2.27.2)
##### Fixed
- \[`no-duplicates`]: do not unconditionally require `typescript`
(\[[#2665](https://togithub.com/import-js/eslint-plugin-import/issues/2665)])
###
[`v2.27.1`](https://togithub.com/import-js/eslint-plugin-import/blob/HEAD/CHANGELOG.md#2271---2023-01-11)
[Compare
Source](https://togithub.com/import-js/eslint-plugin-import/compare/v2.27.0...v2.27.1)
##### Fixed
- `array.prototype.flatmap` should be a prod dep
(\[[#2664](https://togithub.com/import-js/eslint-plugin-import/issues/2664)],
thanks \[[@cristobal](https://togithub.com/cristobal)])
###
[`v2.27.0`](https://togithub.com/import-js/eslint-plugin-import/blob/HEAD/CHANGELOG.md#2270---2023-01-11)
[Compare
Source](https://togithub.com/import-js/eslint-plugin-import/compare/v2.26.0...v2.27.0)
##### Added
- \[`newline-after-import`]: add `considerComments` option
(\[[#2399](https://togithub.com/import-js/eslint-plugin-import/issues/2399)],
thanks \[[@pri1311](https://togithub.com/pri1311)])
- \[`no-cycle`]: add `allowUnsafeDynamicCyclicDependency` option
(\[[#2387](https://togithub.com/import-js/eslint-plugin-import/issues/2387)],
thanks \[[@GerkinDev](https://togithub.com/GerkinDev)])
- \[`no-restricted-paths`]: support arrays for `from` and `target`
options
(\[[#2466](https://togithub.com/import-js/eslint-plugin-import/issues/2466)],
thanks \[[@AdriAt360](https://togithub.com/AdriAt360)])
- \[`no-anonymous-default-export`]: add `allowNew` option
(\[[#2505](https://togithub.com/import-js/eslint-plugin-import/issues/2505)],
thanks \[[@DamienCassou](https://togithub.com/DamienCassou)])
- \[`order`]: Add `distinctGroup` option
(\[[#2395](https://togithub.com/import-js/eslint-plugin-import/issues/2395)],
thanks \[[@hyperupcall](https://togithub.com/hyperupcall)])
- \[`no-extraneous-dependencies`]: Add `includeInternal` option
(\[[#2541](https://togithub.com/import-js/eslint-plugin-import/issues/2541)],
thanks \[[@bdwain](https://togithub.com/bdwain)])
- \[`no-extraneous-dependencies`]: Add `includeTypes` option
(\[[#2543](https://togithub.com/import-js/eslint-plugin-import/issues/2543)],
thanks \[[@bdwain](https://togithub.com/bdwain)])
- \[`order`]: new `alphabetize.orderImportKind` option to sort imports
with same path based on their kind (`type`, `typeof`)
(\[[#2544](https://togithub.com/import-js/eslint-plugin-import/issues/2544)],
thanks \[[@stropho](https://togithub.com/stropho)])
- \[`consistent-type-specifier-style`]: add rule
(\[[#2473](https://togithub.com/import-js/eslint-plugin-import/issues/2473)],
thanks \[[@bradzacher](https://togithub.com/bradzacher)])
- Add \[`no-empty-named-blocks`] rule
(\[[#2568](https://togithub.com/import-js/eslint-plugin-import/issues/2568)],
thanks \[[@guilhermelimak](https://togithub.com/guilhermelimak)])
- \[`prefer-default-export`]: add "target" option
(\[[#2602](https://togithub.com/import-js/eslint-plugin-import/issues/2602)],
thanks \[[@azyzz228](https://togithub.com/azyzz228)])
- \[`no-absolute-path`]: add fixer
(\[[#2613](https://togithub.com/import-js/eslint-plugin-import/issues/2613)],
thanks \[[@adipascu](https://togithub.com/adipascu)])
- \[`no-duplicates`]: support inline type import with `inlineTypeImport`
option
(\[[#2475](https://togithub.com/import-js/eslint-plugin-import/issues/2475)],
thanks \[[@snewcomer](https://togithub.com/snewcomer)])
##### Fixed
- \[`order`]: move nested imports closer to main import entry
(\[[#2396](https://togithub.com/import-js/eslint-plugin-import/issues/2396)],
thanks \[[@pri1311](https://togithub.com/pri1311)])
- \[`no-restricted-paths`]: fix an error message
(\[[#2466](https://togithub.com/import-js/eslint-plugin-import/issues/2466)],
thanks \[[@AdriAt360](https://togithub.com/AdriAt360)])
- \[`no-restricted-paths`]: use `Minimatch.match` instead of `minimatch`
to comply with Windows Native paths
(\[[#2466](https://togithub.com/import-js/eslint-plugin-import/issues/2466)],
thanks \[[@AdriAt360](https://togithub.com/AdriAt360)])
- \[`order`]: require with member expression could not be fixed if
alphabetize.order was used
(\[[#2490](https://togithub.com/import-js/eslint-plugin-import/issues/2490)],
thanks \[[@msvab](https://togithub.com/msvab)])
- \[`order`]: leave more space in rankings for consecutive path groups
(\[[#2506](https://togithub.com/import-js/eslint-plugin-import/issues/2506)],
thanks \[[@Pearce-Ropion](https://togithub.com/Pearce-Ropion)])
- \[`no-cycle`]: add ExportNamedDeclaration statements to dependencies
(\[[#2511](https://togithub.com/import-js/eslint-plugin-import/issues/2511)],
thanks \[[@BenoitZugmeyer](https://togithub.com/BenoitZugmeyer)])
- \[`dynamic-import-chunkname`]: prevent false report on a valid webpack
magic comment
(\[[#2330](https://togithub.com/import-js/eslint-plugin-import/issues/2330)],
thanks \[[@mhmadhamster](https://togithub.com/mhmadhamster)])
- \[`export`]: do not error on TS export overloads
(\[[#1590](https://togithub.com/import-js/eslint-plugin-import/issues/1590)],
thanks \[[@ljharb](https://togithub.com/ljharb)])
- \[`no-unresolved`], \[`extensions`]: ignore type only exports
(\[[#2436](https://togithub.com/import-js/eslint-plugin-import/issues/2436)],
thanks \[[@Lukas-Kullmann](https://togithub.com/Lukas-Kullmann)])
- `ExportMap`: add missing param to function
(\[[#2589](https://togithub.com/import-js/eslint-plugin-import/issues/2589)],
thanks \[[@Fdawgs](https://togithub.com/Fdawgs)])
- \[`no-unused-modules`]: `checkPkgFieldObject` filters boolean fields
from checks
(\[[#2598](https://togithub.com/import-js/eslint-plugin-import/issues/2598)],
thanks \[[@mpint](https://togithub.com/mpint)])
- \[`no-cycle`]: accept Flow `typeof` imports, just like `type`
(\[[#2608](https://togithub.com/import-js/eslint-plugin-import/issues/2608)],
thanks \[[@gnprice](https://togithub.com/gnprice)])
- \[`no-import-module-exports`]: avoid a false positive for import
variables
(\[[#2315](https://togithub.com/import-js/eslint-plugin-import/issues/2315)],
thanks
\[[@BarryThePenguin](https://togithub.com/BarryThePenguin)])
##### Changed
- \[Tests] \[`named`]: Run all TypeScript test
(\[[#2427](https://togithub.com/import-js/eslint-plugin-import/issues/2427)],
thanks \[[@ProdigySim](https://togithub.com/ProdigySim)])
- \[readme] note use of typescript in readme `import/extensions` section
(\[[#2440](https://togithub.com/import-js/eslint-plugin-import/issues/2440)],
thanks
\[[@OutdatedVersion](https://togithub.com/OutdatedVersion)])
- \[Docs] \[`order`]: use correct default value
(\[[#2392](https://togithub.com/import-js/eslint-plugin-import/issues/2392)],
thanks \[[@hyperupcall](https://togithub.com/hyperupcall)])
- \[meta] replace git.io link in comments with the original URL
(\[[#2444](https://togithub.com/import-js/eslint-plugin-import/issues/2444)],
thanks \[[@liby](https://togithub.com/liby)])
- \[Docs] remove global install in readme
(\[[#2412](https://togithub.com/import-js/eslint-plugin-import/issues/2412)],
thanks \[[@aladdin-add](https://togithub.com/aladdin-add)])
- \[readme] clarify `eslint-import-resolver-typescript` usage
(\[[#2503](https://togithub.com/import-js/eslint-plugin-import/issues/2503)],
thanks \[[@JounQin](https://togithub.com/JounQin)])
- \[Refactor] \[`no-cycle`]: Add per-run caching of traversed paths
(\[[#2419](https://togithub.com/import-js/eslint-plugin-import/issues/2419)],
thanks \[[@nokel81](https://togithub.com/nokel81)])
- \[Performance] `ExportMap`: add caching after parsing for an ambiguous
module
(\[[#2531](https://togithub.com/import-js/eslint-plugin-import/issues/2531)],
thanks \[[@stenin-nikita](https://togithub.com/stenin-nikita)])
- \[Docs] \[`no-useless-path-segments`]: fix paths
(\[[#2424](https://togithub.com/import-js/eslint-plugin-import/issues/2424)],
thanks \[[@s-h-a-d-o-w](https://togithub.com/s-h-a-d-o-w)])
- \[Tests] \[`no-cycle`]: add passing test cases
(\[[#2438](https://togithub.com/import-js/eslint-plugin-import/issues/2438)],
thanks \[[@georeith](https://togithub.com/georeith)])
- \[Refactor] \[`no-extraneous-dependencies`] improve performance using
cache
(\[[#2374](https://togithub.com/import-js/eslint-plugin-import/issues/2374)],
thanks \[[@meowtec](https://togithub.com/meowtec)])
- \[meta] `CONTRIBUTING.md`: mention inactive PRs
(\[[#2546](https://togithub.com/import-js/eslint-plugin-import/issues/2546)],
thanks \[[@stropho](https://togithub.com/stropho)])
- \[readme] make json for setting groups multiline
(\[[#2570](https://togithub.com/import-js/eslint-plugin-import/issues/2570)],
thanks \[[@bertyhell](https://togithub.com/bertyhell)])
- \[Tests] \[`no-restricted-paths`]: Tests for `import type` statements
(\[[#2459](https://togithub.com/import-js/eslint-plugin-import/issues/2459)],
thanks \[[@golergka](https://togithub.com/golergka)])
- \[Tests] \[`no-restricted-paths`]: fix one failing `import type` test
case, submitted by \[[@golergka](https://togithub.com/golergka)],
thanks \[[@azyzz228](https://togithub.com/azyzz228)]
- \[Docs] automate docs with eslint-doc-generator
(\[[#2582](https://togithub.com/import-js/eslint-plugin-import/issues/2582)],
thanks \[[@bmish](https://togithub.com/bmish)])
- \[readme] Increase clarity around typescript configuration
(\[[#2588](https://togithub.com/import-js/eslint-plugin-import/issues/2588)],
thanks \[[@Nfinished](https://togithub.com/Nfinished)])
- \[Docs] update `eslint-doc-generator` to v1.0.0
(\[[#2605](https://togithub.com/import-js/eslint-plugin-import/issues/2605)],
thanks \[[@bmish](https://togithub.com/bmish)])
- \[Perf] \[`no-cycle`], \[`no-internal-modules`],
\[`no-restricted-paths`]: use `anyOf` instead of `oneOf` (thanks
\[[@ljharb](https://togithub.com/ljharb)],
\[[@remcohaszing](https://togithub.com/remcohaszing)])
github/codeql-action
###
[`v2.2.1`](https://togithub.com/github/codeql-action/compare/v2.2.0...v2.2.1)
[Compare
Source](https://togithub.com/github/codeql-action/compare/v2.2.0...v2.2.1)
###
[`v2.2.0`](https://togithub.com/github/codeql-action/compare/v2.1.39...v2.2.0)
[Compare
Source](https://togithub.com/github/codeql-action/compare/v2.1.39...v2.2.0)
###
[`v2.1.39`](https://togithub.com/github/codeql-action/compare/v2.1.38...v2.1.39)
[Compare
Source](https://togithub.com/github/codeql-action/compare/v2.1.38...v2.1.39)
###
[`v2.1.38`](https://togithub.com/github/codeql-action/compare/v2.1.37...v2.1.38)
[Compare
Source](https://togithub.com/github/codeql-action/compare/v2.1.37...v2.1.38)
###
[`v2.1.37`](https://togithub.com/github/codeql-action/compare/v2.1.36...v2.1.37)
[Compare
Source](https://togithub.com/github/codeql-action/compare/v2.1.36...v2.1.37)
###
[`v2.1.36`](https://togithub.com/github/codeql-action/compare/v2.1.35...v2.1.36)
[Compare
Source](https://togithub.com/github/codeql-action/compare/v2.1.35...v2.1.36)
###
[`v2.1.35`](https://togithub.com/github/codeql-action/compare/v2.1.34...v2.1.35)
[Compare
Source](https://togithub.com/github/codeql-action/compare/v2.1.34...v2.1.35)
###
[`v2.1.34`](https://togithub.com/github/codeql-action/compare/v2.1.33...v2.1.34)
[Compare
Source](https://togithub.com/github/codeql-action/compare/v2.1.33...v2.1.34)
###
[`v2.1.33`](https://togithub.com/github/codeql-action/compare/v2.1.32...v2.1.33)
[Compare
Source](https://togithub.com/github/codeql-action/compare/v2.1.32...v2.1.33)
###
[`v2.1.32`](https://togithub.com/github/codeql-action/compare/v2.1.31...v2.1.32)
[Compare
Source](https://togithub.com/github/codeql-action/compare/v2.1.31...v2.1.32)
###
[`v2.1.31`](https://togithub.com/github/codeql-action/compare/v2.1.30...v2.1.31)
[Compare
Source](https://togithub.com/github/codeql-action/compare/v2.1.30...v2.1.31)
###
[`v2.1.30`](https://togithub.com/github/codeql-action/compare/v2.1.29...v2.1.30)
[Compare
Source](https://togithub.com/github/codeql-action/compare/v2.1.29...v2.1.30)
###
[`v2.1.29`](https://togithub.com/github/codeql-action/compare/v2.1.28...v2.1.29)
[Compare
Source](https://togithub.com/github/codeql-action/compare/v2.1.28...v2.1.29)
###
[`v2.1.28`](https://togithub.com/github/codeql-action/compare/v2.1.27...v2.1.28)
[Compare
Source](https://togithub.com/github/codeql-action/compare/v2.1.27...v2.1.28)
gradle/gradle
### [`v7.5.1`](https://togithub.com/gradle/gradle/releases/tag/v7.5.1):
7.5.1
This is a patch release for 7.5. We recommend using 7.5.1 instead of 7.5
[Read the Release
Notes](https://docs.gradle.org/7.5.1/release-notes.html)
We would like to thank the following community members for their
contributions to this release of Gradle:
[Michael Bailey](https://togithub.com/yogurtearl),
[Josh Kasten](https://togithub.com/jkasten2),
[Marcono1234](https://togithub.com/Marcono1234),
[mataha](https://togithub.com/mataha),
[Lieven Vaneeckhaute](https://togithub.com/denshade),
[kiwi-oss](https://togithub.com/kiwi-oss),
[Stefan Neuhaus](https://togithub.com/stefanneuhaus),
[George Thomas](https://togithub.com/smoothreggae),
[Anja Papatola](https://togithub.com/apalopta),
[Bjorn Kautler](https://togithub.com/Vampire),
[David Burstrom](https://togithub.com/davidburstrom),
[Vladimir Sitnikov](https://togithub.com/vlsi),
[Roland Weisleder](https://togithub.com/rweisleder),
[Konstantin Gribov](https://togithub.com/grossws),
[David Op de Beeck](https://togithub.com/DavidOpDeBeeck),
[aSemy](https://togithub.com/aSemy),
[Rene Groeschke](https://togithub.com/breskeby),
[Jonathan Leitschuh](https://togithub.com/JLLeitschuh),
[Aurimas Liutikas](https://togithub.com/liutikas),
[Jamie Tanna](https://togithub.com/jamietanna),
[Xin Wang](https://togithub.com/scaventz),
[Atsuto Yamashita](https://togithub.com/att55),
[Taeik Lim](https://togithub.com/acktsap),
[Peter Gafert](https://togithub.com/codecholeric),
[Alex Landau](https://togithub.com/AlexLandau),
[Jerry Wiltse](https://togithub.com/solvingj),
[Tyler Burke](https://togithub.com/T-A-B),
[Matthew Haughton](https://togithub.com/3flex),
[Filip Daca](https://togithub.com/filip-daca),
[Simao Gomes Viana](https://togithub.com/xdevs23),
[Vaidotas Valuckas](https://togithub.com/rieske),
[Edgars Jasmans](https://togithub.com/yasmans),
[Tomasz Godzik](https://togithub.com/tgodzik),
[Jeff](https://togithub.com/mathjeff),
[Lajos Veres](https://togithub.com/vlajos)
#### Upgrade instructions
Switch your build to use Gradle 7.5.1 by updating your wrapper:
`./gradlew wrapper --gradle-version=7.5.1`
See the [Gradle 7.x upgrade
guide](https://docs.gradle.org/7.5.1/userguide/upgrading_version\_7.html#changes\_7.5)
to learn about deprecations, breaking changes and other considerations
when upgrading.
#### Reporting Problems
If you find a problem with this release, please file a bug on [GitHub
Issues](https://togithub.com/gradle/gradle/issues) adhering to our issue
guidelines.
If you're not sure you're encountering a bug, please use the
[forum](https://discuss.gradle.org/c/help-discuss).
### [`v7.4.2`](https://togithub.com/gradle/gradle/releases/tag/v7.4.2):
7.4.2
This is a patch release for Gradle 7.4.
See the list of fixed issues:
https://docs.gradle.org/7.4.2/release-notes.html
We recommend users upgrade to 7.4.2 instead of 7.4 or another patch
release.
#### Upgrade Instructions
Switch your build to use Gradle 7.4.2 by updating your wrapper:
./gradlew wrapper --gradle-version=7.4.2
See the [Gradle 7.x upgrade
guide](https://docs.gradle.org/7.4.2/userguide/upgrading_version\_7.html#changes\_7.4)
to learn about deprecations, breaking changes and other considerations
when upgrading to Gradle 7.4.2.
#### Reporting Problems
If you find a problem with this release, please file a bug on [GitHub
Issues](https://togithub.com/gradle/gradle/issues) adhering to our issue
guidelines.
If you're not sure you're encountering a bug, please use the
[forum](https://discuss.gradle.org/c/help-discuss).
ossf/scorecard-action
###
[`v2.1.2`](https://togithub.com/ossf/scorecard-action/releases/tag/v2.1.2)
[Compare
Source](https://togithub.com/ossf/scorecard-action/compare/v2.1.1...v2.1.2)
#### What's Changed
##### Fixes
- Bump scorecard dependency to v4.10.2 to remove a CODEOWNERS printf
statement. by
[@spencerschrock](https://togithub.com/spencerschrock) in
[https://github.com/ossf/scorecard-action/pull/1054](https://togithub.com/ossf/scorecard-action/pull/1054)
**Full Changelog**:
https://github.com/ossf/scorecard-action/compare/v2.1.1...v2.1.2
###
[`v2.1.1`](https://togithub.com/ossf/scorecard-action/releases/tag/v2.1.1)
[Compare
Source](https://togithub.com/ossf/scorecard-action/compare/v2.1.0...v2.1.1)
#### Scorecard version
This release use [Scorecard's
v4.10.1](https://togithub.com/ossf/scorecard/releases/tag/v4.10.1)
**Full Changelog**:
https://github.com/ossf/scorecard-action/compare/v2.1.0...v2.1.1
###
[`v2.1.0`](https://togithub.com/ossf/scorecard-action/releases/tag/v2.1.0)
[Compare
Source](https://togithub.com/ossf/scorecard-action/compare/v2.0.6...v2.1.0)
#### What's Changed
##### Scorecard version
This release uses [scorecard
v4.10.0](https://togithub.com/ossf/scorecard/releases/tag/v4.10.0).
##### Improvements
- Docker build workflow by
[@naveensrinivasan](https://togithub.com/naveensrinivasan) in
[https://github.com/ossf/scorecard-action/pull/981](https://togithub.com/ossf/scorecard-action/pull/981)
- Use root user in distroless to support GitHub Actions by
[@spencerschrock](https://togithub.com/spencerschrock) in
[https://github.com/ossf/scorecard-action/pull/994](https://togithub.com/ossf/scorecard-action/pull/994)
- Disable pull_request_target by
[@laurentsimon](https://togithub.com/laurentsimon) in
[https://github.com/ossf/scorecard-action/pull/1031](https://togithub.com/ossf/scorecard-action/pull/1031)
##### Documentation
- Add PAT section explaining risks by
[@olivekl](https://togithub.com/olivekl) in
[https://github.com/ossf/scorecard-action/pull/1024](https://togithub.com/ossf/scorecard-action/pull/1024)
- Make the badge text easier to copy by
[@rajbos](https://togithub.com/rajbos) in
[https://github.com/ossf/scorecard-action/pull/1026](https://togithub.com/ossf/scorecard-action/pull/1026)
#### New Contributors
- [@joycebrum](https://togithub.com/joycebrum) made their first
contribution in
[https://github.com/ossf/scorecard-action/pull/984](https://togithub.com/ossf/scorecard-action/pull/984)
- [@rajbos](https://togithub.com/rajbos) made their first
contribution in
[https://github.com/ossf/scorecard-action/pull/1026](https://togithub.com/ossf/scorecard-action/pull/1026)
**Full Changelog**:
https://github.com/ossf/scorecard-action/compare/v2.0.6...v2.1.0
terraform-linters/tflint-ruleset-aws
###
[`v0.21.2`](https://togithub.com/terraform-linters/tflint-ruleset-aws/blob/HEAD/CHANGELOG.md#0212-2023-02-03)
[Compare
Source](https://togithub.com/terraform-linters/tflint-ruleset-aws/compare/v0.21.1...v0.21.2)
##### Enhancements
-
[#431](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/431)
[#442](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/442):
Update AWS provider/module and generated content
##### Chores
-
[#433](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/433)
[#441](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/441):
Bump golang.org/x/net from 0.2.0 to 0.5.0
-
[#434](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/434):
Bump goreleaser/goreleaser-action from 3 to 4
-
[#435](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/435):
Pass `GITHUB_TOKEN` to e2e test workflow
([@wata727](https://togithub.com/wata727))
-
[#437](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/437):
Bump github.com/terraform-linters/tflint-plugin-sdk from 0.14.0 to
0.15.0
###
[`v0.21.1`](https://togithub.com/terraform-linters/tflint-ruleset-aws/blob/HEAD/CHANGELOG.md#0211-2022-12-12)
[Compare
Source](https://togithub.com/terraform-linters/tflint-ruleset-aws/compare/v0.21.0...v0.21.1)
##### BugFixes
-
[#430](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/430):
`elasticache_cluster_previous_type`: fix panic on empty string
([@bendrucker](https://togithub.com/bendrucker))
##### Chores
-
[#407](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/407):
autogenerated maintenance
###
[`v0.21.0`](https://togithub.com/terraform-linters/tflint-ruleset-aws/blob/HEAD/CHANGELOG.md#0210-2022-12-05)
[Compare
Source](https://togithub.com/terraform-linters/tflint-ruleset-aws/compare/v0.20.0...v0.21.0)
##### Enhancements
-
[#403](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/403):
autogenerated maintenance
-
[#405](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/405)
[#406](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/406):
Add assume role configuration to plugin config
([@kaito3desuyo](https://togithub.com/kaito3desuyo))
###
[`v0.20.0`](https://togithub.com/terraform-linters/tflint-ruleset-aws/blob/HEAD/CHANGELOG.md#0200-2022-11-27)
[Compare
Source](https://togithub.com/terraform-linters/tflint-ruleset-aws/compare/v0.19.0...v0.20.0)
##### Enhancements
-
[#400](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/400):
autogenerated maintenance
##### Chores
-
[#399](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/399):
Bump up GoReleaser version in release.yml
([@wata727](https://togithub.com/wata727))
-
[#401](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/401):
Bump golang.org/x/net from 0.1.0 to 0.2.0
###
[`v0.19.0`](https://togithub.com/terraform-linters/tflint-ruleset-aws/blob/HEAD/CHANGELOG.md#0190-2022-11-14)
[Compare
Source](https://togithub.com/terraform-linters/tflint-ruleset-aws/compare/v0.18.0...v0.19.0)
##### Enhancements
-
[#390](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/390):
autogenerated maintenance
##### BugFixes
-
[#397](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/397):
Prefer credentials in "plugin" blocks over "provider" blocks
([@wata727](https://togithub.com/wata727))
##### Chores
-
[#394](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/394):
Add signatures for keyless signing
([@wata727](https://togithub.com/wata727))
-
[#395](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/395):
Bump github.com/hashicorp/hcl/v2 from 2.14.1 to 2.15.0
-
[#398](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/398):
Bump up GoReleaser version
([@wata727](https://togithub.com/wata727))
###
[`v0.18.0`](https://togithub.com/terraform-linters/tflint-ruleset-aws/blob/HEAD/CHANGELOG.md#0180-2022-10-24)
[Compare
Source](https://togithub.com/terraform-linters/tflint-ruleset-aws/compare/v0.17.1...v0.18.0)
##### Breaking Changes
-
[#367](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/367):
remove hardcoded S3 region rule
([@PatMyron](https://togithub.com/PatMyron))
##### Enhancements
-
[#382](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/382):
autogenerated maintenance
-
[#388](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/388):
Bump tflint-plugin-sdk to v0.14.0
([@wata727](https://togithub.com/wata727))
##### Chores
-
[#387](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/387):
Bump github.com/dave/dst from 0.27.0 to 0.27.2
###
[`v0.17.1`](https://togithub.com/terraform-linters/tflint-ruleset-aws/blob/HEAD/CHANGELOG.md#0171-2022-09-29)
[Compare
Source](https://togithub.com/terraform-linters/tflint-ruleset-aws/compare/v0.17.0...v0.17.1)
##### Enhancements
-
[#373](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/373):
autogenerated maintenance
-
[#380](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/380):
Update db instance type list with m6i and r6i
([@milestruecar](https://togithub.com/milestruecar))
##### Chores
-
[#374](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/374):
Bump github.com/google/go-cmp from 0.5.8 to 0.5.9
-
[#377](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/377):
Bump github.com/terraform-linters/tflint-plugin-sdk from 0.12.0 to
0.13.0
-
[#378](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/378):
Bump github.com/hashicorp/hcl/v2 from 2.14.0 to 2.14.1
###
[`v0.17.0`](https://togithub.com/terraform-linters/tflint-ruleset-aws/blob/HEAD/CHANGELOG.md#0170-2022-09-08)
[Compare
Source](https://togithub.com/terraform-linters/tflint-ruleset-aws/compare/v0.16.1...v0.17.0)
The minimum supported version of TFLint has changed in this version.
TFLint v0.40.0+ is required for this plugin to work.
##### Breaking Changes
-
[#369](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/369):
Bump tflint-plugin-sdk to v0.12.0
([@wata727](https://togithub.com/wata727))
##### Enhancements
-
[#366](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/366):
autogenerated maintenance
##### Chores
-
[#365](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/365):
Bump github.com/zclconf/go-cty from 1.10.0 to 1.11.0
-
[#368](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/368):
Bump github.com/hashicorp/hcl/v2 from 2.13.0 to 2.14.0
-
[#371](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/371):
build: Improve Go workflows
([@wata727](https://togithub.com/wata727))
###
[`v0.16.1`](https://togithub.com/terraform-linters/tflint-ruleset-aws/blob/HEAD/CHANGELOG.md#0161-2022-08-27)
[Compare
Source](https://togithub.com/terraform-linters/tflint-ruleset-aws/compare/v0.16.0...v0.16.1)
##### Enhancements
-
[363](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/363):
autogenerated maintenance
###
[`v0.16.0`](https://togithub.com/terraform-linters/tflint-ruleset-aws/blob/HEAD/CHANGELOG.md#0160-2022-08-14)
[Compare
Source](https://togithub.com/terraform-linters/tflint-ruleset-aws/compare/v0.15.0...v0.16.0)
##### Enhancements
-
[#358](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/358):
autogenerated maintenance
- Removed `aws_cloudwatch_metric_alarm_invalid_extended_statistic` rule
-
[#362](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/362):
Lambda runtime deprecation updates
([@PatMyron](https://togithub.com/PatMyron))
##### Chores
-
[#359](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/359):
go 1.19 ([@PatMyron](https://togithub.com/PatMyron))
###
[`v0.15.0`](https://togithub.com/terraform-linters/tflint-ruleset-aws/blob/HEAD/CHANGELOG.md#0150-2022-07-15)
[Compare
Source](https://togithub.com/terraform-linters/tflint-ruleset-aws/compare/v0.14.0...v0.15.0)
##### Enhancements
-
[#352](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/352):
autogenerated maintenance
-
[#355](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/355):
Add `aws_security_group_rule_invalid_protocol` rule
([@x-color](https://togithub.com/x-color))
-
[#356](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/356):
Add `aws_security_group_invalid_protocol` rule
([@x-color](https://togithub.com/x-color))
##### Chores
-
[#354](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/354):
Bump github.com/hashicorp/hcl/v2 from 2.12.0 to 2.13.0
###
[`v0.14.0`](https://togithub.com/terraform-linters/tflint-ruleset-aws/blob/HEAD/CHANGELOG.md#0140-2022-05-31)
[Compare
Source](https://togithub.com/terraform-linters/tflint-ruleset-aws/compare/v0.13.4...v0.14.0)
##### Enhancements
-
[#342](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/342):
feat: support provider aliases in deep checking
([@suzuki-shunsuke](https://togithub.com/suzuki-shunsuke))
-
[#343](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/343):
autogenerated maintenance
##### Chores
-
[#344](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/344):
Bump github.com/terraform-linters/tflint-plugin-sdk from 0.10.1 to
0.11.0
-
[#347](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/347):
Bump goreleaser/goreleaser-action from 2 to 3
-
[#351](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/351):
Bump github.com/dave/dst from 0.26.2 to 0.27.0
###
[`v0.13.4`](https://togithub.com/terraform-linters/tflint-ruleset-aws/blob/HEAD/CHANGELOG.md#0134-2022-05-05)
[Compare
Source](https://togithub.com/terraform-linters/tflint-ruleset-aws/compare/v0.13.3...v0.13.4)
##### Enhancements
-
[#336](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/336):
autogenerated maintenance
##### Chores
-
[#338](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/338):
Bump github.com/hashicorp/hcl/v2 from 2.11.1 to 2.12.0
-
[#339](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/339):
Bump github.com/google/go-cmp from 0.5.7 to 0.5.8
-
[#340](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/340):
Replace logger from the standard logger
([@wata727](https://togithub.com/wata727))
-
[#341](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/341):
Add E2E tests ([@wata727](https://togithub.com/wata727))
###
[`v0.13.3`](https://togithub.com/terraform-linters/tflint-ruleset-aws/blob/HEAD/CHANGELOG.md#0133-2022-04-17)
[Compare
Source](https://togithub.com/terraform-linters/tflint-ruleset-aws/compare/v0.13.2...v0.13.3)
##### Enhancements
-
[#324](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/324):
autogenerated maintenance
-
[#335](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/335):
Lambda runtime deprecation updates (python3.6)
([@PatMyron](https://togithub.com/PatMyron))
##### Chores
-
[#328](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/328):
chores: Remove snaker ([@wata727](https://togithub.com/wata727))
-
[#329](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/329):
Fix rule template for rule generator
([@wata727](https://togithub.com/wata727))
-
[#330](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/330):
Bump github.com/terraform-linters/tflint-plugin-sdk from 0.10.0 to
0.10.1
-
[#333](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/333):
style: format rules/api/rule.go.tmpl and run `go generate ./...`
([@suzuki-shunsuke](https://togithub.com/suzuki-shunsuke))
-
[#334](https://togithub.com/terraform-linters/tflint-ruleset-aws/pull/334):
Bump actions/setup-go from 2 to 3
Microsoft/TypeScript
###
[`v4.9.5`](https://togithub.com/microsoft/TypeScript/releases/tag/v4.9.5):
TypeScript 4.9.5
[Compare
Source](https://togithub.com/Microsoft/TypeScript/compare/v4.9.4...v4.9.5)
For release notes, check out the [release
announcement](https://devblogs.microsoft.com/typescript/announcing-typescript-4-9/).
Downloads are available on:
- [npm](https://www.npmjs.com/package/typescript)
- [NuGet
package](https://www.nuget.org/packages/Microsoft.TypeScript.MSBuild)
#### Changes:
-
[`69e88ef`](https://togithub.com/Microsoft/TypeScript/commit/69e88ef5513a81acf69ec78f4af1f927da0d0584)
Port ignore deprecations to 4.9
([#52419](https://togithub.com/Microsoft/TypeScript/issues/52419))
-
[`daf4e81`](https://togithub.com/Microsoft/TypeScript/commit/daf4e817a18def96b70ac34703b158ff0e6d58df)
Port timestamp fix to 4.9
([#52426](https://togithub.com/Microsoft/TypeScript/issues/52426))
###
[`v4.9.4`](https://togithub.com/microsoft/TypeScript/releases/tag/v4.9.4):
TypeScript 4.9.4
[Compare
Source](https://togithub.com/Microsoft/TypeScript/compare/v4.9.3...v4.9.4)
For release notes, check out the [release
announcement](https://devblogs.microsoft.com/typescript/announcing-typescript-4-9).
For the complete list of fixed issues, check out the
- [fixed issues query for Typescript
v4.9.4](https://togithub.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93\&q=is%3Aissue+milestone%3A%22TypeScript+4.9.4%22+is%3Aclosed+).
Downloads are available on:
- [npm](https://www.npmjs.com/package/typescript)
- [NuGet
package](https://www.nuget.org/packages/Microsoft.TypeScript.MSBuild)
##### Changes:
-
[`e286821`](https://togithub.com/Microsoft/TypeScript/commit/e2868216f637e875a74c675845625eb15dcfe9a2)
Bump version to 4.9.4 and LKG.
-
[`eb5419f`](https://togithub.com/Microsoft/TypeScript/commit/eb5419fc8d980859b98553586dfb5f40d811a745)
Cherry-pick
[#51704](https://togithub.com/Microsoft/TypeScript/issues/51704)
to release 4.9
([#51712](https://togithub.com/Microsoft/TypeScript/issues/51712))
-
[`b4d382b`](https://togithub.com/Microsoft/TypeScript/commit/b4d382b9b12460adf2da4cc0d1429cf19f8dc8be)
Cherry-pick changes for narrowing to tagged literal types.
-
[`e7a02f4`](https://togithub.com/Microsoft/TypeScript/commit/e7a02f43fce47e1a39259ada5460bcc33c8e98b5)
Port of
[#51626](https://togithub.com/Microsoft/TypeScript/issues/51626)
and
[#51689](https://togithub.com/Microsoft/TypeScript/issues/51689)
to release-4.9
([#51627](https://togithub.com/Microsoft/TypeScript/issues/51627))
-
[`1727912`](https://togithub.com/Microsoft/TypeScript/commit/1727912f0437a7f367d90040fc4b0b4f3efd017a)
Cherry-pick fix around `visitEachChild` to release-4.9.
([#51544](https://togithub.com/Microsoft/TypeScript/issues/51544))
This list of changes was [auto
generated](https://typescript.visualstudio.com/cf7ac146-d525-443c-b23c-0d58337efebc/\_release?releaseId=117&\_a=release-summary).
---
### Configuration
**Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).
**Automerge**: Disabled by config. Please merge this manually once you
are satisfied.
**Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
**Immortal**: This PR will be recreated if closed unmerged. Get
[config help](https://togithub.com/renovatebot/renovate/discussions) if
that's undesired.
---
- [ ] If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://app.renovatebot.com/dashboard#github/trunk-io/plugins).
---------
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Eli Schleifer