Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Bump dependabot/fetch-metadata from 1.1.1 to 2.2.0 (#192)
Bumps [dependabot/fetch-metadata](https://github.com/dependabot/fetch-metadata) from 1.1.1 to 2.2.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/dependabot/fetch-metadata/releases">dependabot/fetch-metadata's releases</a>.</em></p> <blockquote> <h2>v2.2.0</h2> <h2>What's Changed</h2> <ul> <li>Bump actions/create-github-app-token from 1.9.0 to 1.10.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/dependabot/fetch-metadata/pull/523">dependabot/fetch-metadata#523</a></li> <li>Bump actions/create-github-app-token from 1.10.0 to 1.10.2 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/dependabot/fetch-metadata/pull/534">dependabot/fetch-metadata#534</a></li> <li>Bump braces from 3.0.2 to 3.0.3 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/dependabot/fetch-metadata/pull/532">dependabot/fetch-metadata#532</a></li> <li>v2.2.0 by <a href="https://github.com/fetch-metadata-action-automation"><code>@fetch-metadata-action-automation</code></a> in <a href="https://redirect.github.com/dependabot/fetch-metadata/pull/520">dependabot/fetch-metadata#520</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/dependabot/fetch-metadata/compare/v2...v2.2.0">https://github.com/dependabot/fetch-metadata/compare/v2...v2.2.0</a></p> <h2>v2.1.0</h2> <h2>What's Changed</h2> <ul> <li>Relax <code>engine-strict=true</code> by <a href="https://github.com/jeffwidman"><code>@jeffwidman</code></a> in <a href="https://redirect.github.com/dependabot/fetch-metadata/pull/510">dependabot/fetch-metadata#510</a></li> <li>Handle branch names containing hyphen separators by <a href="https://github.com/tspencer244"><code>@tspencer244</code></a> in <a href="https://redirect.github.com/dependabot/fetch-metadata/pull/450">dependabot/fetch-metadata#450</a></li> <li>Switch to monthly release cadence by <a href="https://github.com/jeffwidman"><code>@jeffwidman</code></a> in <a href="https://redirect.github.com/dependabot/fetch-metadata/pull/509">dependabot/fetch-metadata#509</a></li> <li>v2.1.0 by <a href="https://github.com/fetch-metadata-action-automation"><code>@fetch-metadata-action-automation</code></a> in <a href="https://redirect.github.com/dependabot/fetch-metadata/pull/518">dependabot/fetch-metadata#518</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/tspencer244"><code>@tspencer244</code></a> made their first contribution in <a href="https://redirect.github.com/dependabot/fetch-metadata/pull/450">dependabot/fetch-metadata#450</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/dependabot/fetch-metadata/compare/v2.0.0...v2.1.0">https://github.com/dependabot/fetch-metadata/compare/v2.0.0...v2.1.0</a></p> <h2>v2.0.0 - Switch to <code>node20</code></h2> <h2>What's Changed</h2> <ul> <li>Upgrade from node16 to node20 by <a href="https://github.com/Nishnha"><code>@Nishnha</code></a> in <a href="https://redirect.github.com/dependabot/fetch-metadata/pull/443">dependabot/fetch-metadata#443</a> 👈 this is a potentially breaking change for some workflows</li> <li><code>v2</code> is the new tracking tag by <a href="https://github.com/jeffwidman"><code>@jeffwidman</code></a> in <a href="https://redirect.github.com/dependabot/fetch-metadata/pull/506">dependabot/fetch-metadata#506</a></li> <li>v2.0.0 by <a href="https://github.com/fetch-metadata-action-automation"><code>@fetch-metadata-action-automation</code></a> in <a href="https://redirect.github.com/dependabot/fetch-metadata/pull/508">dependabot/fetch-metadata#508</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/dependabot/fetch-metadata/compare/v1.7.0...v2.0.0">https://github.com/dependabot/fetch-metadata/compare/v1.7.0...v2.0.0</a></p> <h2>v1.7.0</h2> <h2>What's Changed</h2> <ul> <li>Bump dotenv from 16.0.3 to 16.3.1 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/dependabot/fetch-metadata/pull/404">dependabot/fetch-metadata#404</a></li> <li>Bump <code>@types/node</code> from 20.2.3 to 20.3.3 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/dependabot/fetch-metadata/pull/407">dependabot/fetch-metadata#407</a></li> <li>Bump the eslint-dependencies group with 4 updates by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/dependabot/fetch-metadata/pull/409">dependabot/fetch-metadata#409</a></li> <li>Update dependabot.yml by <a href="https://github.com/bdragon"><code>@bdragon</code></a> in <a href="https://redirect.github.com/dependabot/fetch-metadata/pull/410">dependabot/fetch-metadata#410</a></li> <li>Bump <code>@types/node</code> from 20.3.3 to 20.4.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/dependabot/fetch-metadata/pull/411">dependabot/fetch-metadata#411</a></li> <li>Bump yaml from 2.2.1 to 2.3.1 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/dependabot/fetch-metadata/pull/390">dependabot/fetch-metadata#390</a></li> <li>Bump tough-cookie from 4.0.0 to 4.1.3 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/dependabot/fetch-metadata/pull/412">dependabot/fetch-metadata#412</a></li> <li>Bump <code>@types/node</code> from 20.4.0 to 20.4.1 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/dependabot/fetch-metadata/pull/413">dependabot/fetch-metadata#413</a></li> <li>Generate Dependabot PRs on Sundays weekly by <a href="https://github.com/abdulapopoola"><code>@abdulapopoola</code></a> in <a href="https://redirect.github.com/dependabot/fetch-metadata/pull/417">dependabot/fetch-metadata#417</a></li> <li>Aggressively group prod and dev dependencies for NPM by <a href="https://github.com/abdulapopoola"><code>@abdulapopoola</code></a> in <a href="https://redirect.github.com/dependabot/fetch-metadata/pull/420">dependabot/fetch-metadata#420</a></li> <li>Update .nvmrc to latest node 16 LTS version by <a href="https://github.com/abdulapopoola"><code>@abdulapopoola</code></a> in <a href="https://redirect.github.com/dependabot/fetch-metadata/pull/422">dependabot/fetch-metadata#422</a></li> <li>Bump the dev-dependencies group with 9 updates by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/dependabot/fetch-metadata/pull/421">dependabot/fetch-metadata#421</a></li> <li>Bump the dev-dependencies group with 1 update by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/dependabot/fetch-metadata/pull/423">dependabot/fetch-metadata#423</a></li> <li>Check for uncommitted files beyond the <code>diff</code> directory by <a href="https://github.com/jeffwidman"><code>@jeffwidman</code></a> in <a href="https://redirect.github.com/dependabot/fetch-metadata/pull/278">dependabot/fetch-metadata#278</a></li> <li>Bump the dev-dependencies group with 6 updates by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/dependabot/fetch-metadata/pull/424">dependabot/fetch-metadata#424</a></li> <li>Bump the dev-dependencies group with 3 updates by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/dependabot/fetch-metadata/pull/425">dependabot/fetch-metadata#425</a></li> <li>Bump the dev-dependencies group with 6 updates by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/dependabot/fetch-metadata/pull/428">dependabot/fetch-metadata#428</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/dependabot/fetch-metadata/commit/dbb049abf0d677abbd7f7eee0375145b417fdd34"><code>dbb049a</code></a> v2.2.0 (<a href="https://redirect.github.com/dependabot/fetch-metadata/issues/520">#520</a>)</li> <li><a href="https://github.com/dependabot/fetch-metadata/commit/36bf1f955e6ca1b125f734a093d453a10bf77434"><code>36bf1f9</code></a> Merge pull request <a href="https://redirect.github.com/dependabot/fetch-metadata/issues/532">#532</a> from dependabot/dependabot/npm_and_yarn/braces-3.0.3</li> <li><a href="https://github.com/dependabot/fetch-metadata/commit/a3420b5aac6fe1398d8bf065c2416c1007d5b667"><code>a3420b5</code></a> Bump braces from 3.0.2 to 3.0.3</li> <li><a href="https://github.com/dependabot/fetch-metadata/commit/006e43f8a3b59da50984cd5692bef3e63db55ccf"><code>006e43f</code></a> Merge pull request <a href="https://redirect.github.com/dependabot/fetch-metadata/issues/534">#534</a> from dependabot/dependabot/github_actions/actions/cre...</li> <li><a href="https://github.com/dependabot/fetch-metadata/commit/9c55ebe61886a60890ad325cf03a66d98d1388e8"><code>9c55ebe</code></a> Bump actions/create-github-app-token from 1.10.0 to 1.10.2</li> <li><a href="https://github.com/dependabot/fetch-metadata/commit/325b863556700e5e4d4ec23381993ef460dd8379"><code>325b863</code></a> Merge pull request <a href="https://redirect.github.com/dependabot/fetch-metadata/issues/523">#523</a> from dependabot/dependabot/github_actions/actions/cre...</li> <li><a href="https://github.com/dependabot/fetch-metadata/commit/aec2f3e196ff263f661851160fef094015755e03"><code>aec2f3e</code></a> Bump actions/create-github-app-token from 1.9.0 to 1.10.0</li> <li><a href="https://github.com/dependabot/fetch-metadata/commit/5e5f99653a5b510e8555840e80cbf1514ad4af38"><code>5e5f996</code></a> Merge pull request <a href="https://redirect.github.com/dependabot/fetch-metadata/issues/518">#518</a> from dependabot/bump-to-v2.1.0</li> <li><a href="https://github.com/dependabot/fetch-metadata/commit/63415e50379a1f6549f3ed36df132607433891fd"><code>63415e5</code></a> v2.1.0</li> <li><a href="https://github.com/dependabot/fetch-metadata/commit/76b7fe974e2cb9e48ad921f8cddbdbcbea9a6bc1"><code>76b7fe9</code></a> Merge pull request <a href="https://redirect.github.com/dependabot/fetch-metadata/issues/509">#509</a> from dependabot/switch-to-monthly-release-cadence</li> <li>Additional commits viewable in <a href="https://github.com/dependabot/fetch-metadata/compare/v1.1.1...v2.2.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=dependabot/fetch-metadata&package-manager=github_actions&previous-version=1.1.1&new-version=2.2.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) Dependabot will merge this PR once CI passes on it, as requested by @rjmurillo. [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> <!-- This is an auto-generated comment: release notes by coderabbit.ai --> ## Summary by CodeRabbit - **Chores** - Updated the Dependabot fetch metadata action in GitHub Actions workflow to the latest version, which may improve performance and include new features. <!-- end of auto-generated comment: release notes by coderabbit.ai --> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
- Loading branch information