dependabot[bot]
b5ac65c3d0
⬆️ Bump peter-evans/slash-command-dispatch from 3 to 4 ( #5178 )
...
Bumps [peter-evans/slash-command-dispatch](https://github.com/peter-evans/slash-command-dispatch ) from 3 to 4.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/peter-evans/slash-command-dispatch/releases ">peter-evans/slash-command-dispatch's releases</a>.</em></p>
<blockquote>
<h2>Slash Command Dispatch v4.0.0</h2>
<p>⚙️ Updated runtime to Node.js 20</p>
<ul>
<li>The action now requires a minimum version of <a href="https://github.com/actions/runner/releases/tag/v2.308.0 ">v2.308.0</a> for the Actions runner. Update self-hosted runners to v2.308.0 or later to ensure compatibility.</li>
</ul>
<h2>What's Changed</h2>
<ul>
<li>build(deps-dev): bump <code>@types/node</code> from 16.18.67 to 16.18.68 by <a href="https://github.com/dependabot "><code>@dependabot</code></a> in <a href="https://redirect.github.com/peter-evans/slash-command-dispatch/pull/302 ">peter-evans/slash-command-dispatch#302</a></li>
<li>build(deps-dev): bump prettier from 3.1.0 to 3.1.1 by <a href="https://github.com/dependabot "><code>@dependabot</code></a> in <a href="https://redirect.github.com/peter-evans/slash-command-dispatch/pull/303 ">peter-evans/slash-command-dispatch#303</a></li>
<li>build(deps-dev): bump jest-circus from 27.4.2 to 27.5.1 by <a href="https://github.com/dependabot "><code>@dependabot</code></a> in <a href="https://redirect.github.com/peter-evans/slash-command-dispatch/pull/176 ">peter-evans/slash-command-dispatch#176</a></li>
<li>build(deps): bump actions/download-artifact from 3 to 4 by <a href="https://github.com/dependabot "><code>@dependabot</code></a> in <a href="https://redirect.github.com/peter-evans/slash-command-dispatch/pull/304 ">peter-evans/slash-command-dispatch#304</a></li>
<li>build(deps): bump actions/upload-artifact from 3 to 4 by <a href="https://github.com/dependabot "><code>@dependabot</code></a> in <a href="https://redirect.github.com/peter-evans/slash-command-dispatch/pull/305 ">peter-evans/slash-command-dispatch#305</a></li>
<li>build(deps-dev): bump eslint from 8.55.0 to 8.56.0 by <a href="https://github.com/dependabot "><code>@dependabot</code></a> in <a href="https://redirect.github.com/peter-evans/slash-command-dispatch/pull/306 ">peter-evans/slash-command-dispatch#306</a></li>
<li>build(deps-dev): bump eslint-plugin-prettier from 5.0.1 to 5.1.2 by <a href="https://github.com/dependabot "><code>@dependabot</code></a> in <a href="https://redirect.github.com/peter-evans/slash-command-dispatch/pull/308 ">peter-evans/slash-command-dispatch#308</a></li>
<li>build(deps-dev): bump <code>@types/node</code> from 16.18.68 to 16.18.69 by <a href="https://github.com/dependabot "><code>@dependabot</code></a> in <a href="https://redirect.github.com/peter-evans/slash-command-dispatch/pull/309 ">peter-evans/slash-command-dispatch#309</a></li>
<li>build(deps-dev): bump <code>@types/node</code> from 16.18.69 to 16.18.70 by <a href="https://github.com/dependabot "><code>@dependabot</code></a> in <a href="https://redirect.github.com/peter-evans/slash-command-dispatch/pull/310 ">peter-evans/slash-command-dispatch#310</a></li>
<li>build(deps-dev): bump eslint-plugin-prettier from 5.1.2 to 5.1.3 by <a href="https://github.com/dependabot "><code>@dependabot</code></a> in <a href="https://redirect.github.com/peter-evans/slash-command-dispatch/pull/311 ">peter-evans/slash-command-dispatch#311</a></li>
<li>build(deps-dev): bump prettier from 3.1.1 to 3.2.2 by <a href="https://github.com/dependabot "><code>@dependabot</code></a> in <a href="https://redirect.github.com/peter-evans/slash-command-dispatch/pull/312 ">peter-evans/slash-command-dispatch#312</a></li>
<li>build(deps-dev): bump prettier from 3.2.2 to 3.2.4 by <a href="https://github.com/dependabot "><code>@dependabot</code></a> in <a href="https://redirect.github.com/peter-evans/slash-command-dispatch/pull/314 ">peter-evans/slash-command-dispatch#314</a></li>
<li>build(deps-dev): bump <code>@types/node</code> from 16.18.70 to 16.18.74 by <a href="https://github.com/dependabot "><code>@dependabot</code></a> in <a href="https://redirect.github.com/peter-evans/slash-command-dispatch/pull/315 ">peter-evans/slash-command-dispatch#315</a></li>
<li>build(deps): bump peter-evans/create-or-update-comment from 3 to 4 by <a href="https://github.com/dependabot "><code>@dependabot</code></a> in <a href="https://redirect.github.com/peter-evans/slash-command-dispatch/pull/317 ">peter-evans/slash-command-dispatch#317</a></li>
<li>build(deps-dev): bump <code>@types/node</code> from 16.18.74 to 16.18.76 by <a href="https://github.com/dependabot "><code>@dependabot</code></a> in <a href="https://redirect.github.com/peter-evans/slash-command-dispatch/pull/318 ">peter-evans/slash-command-dispatch#318</a></li>
<li>feat: update runtime to node 20 by <a href="https://github.com/peter-evans "><code>@peter-evans</code></a> in <a href="https://redirect.github.com/peter-evans/slash-command-dispatch/pull/316 ">peter-evans/slash-command-dispatch#316</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/peter-evans/slash-command-dispatch/compare/v3.0.2...v4.0.0 ">https://github.com/peter-evans/slash-command-dispatch/compare/v3.0.2...v4.0.0 </a></p>
<h2>Slash Command Dispatch v3.0.2</h2>
<h2>What's Changed</h2>
<ul>
<li>fix: replace use of any type by <a href="https://github.com/peter-evans "><code>@peter-evans</code></a> in <a href="https://redirect.github.com/peter-evans/slash-command-dispatch/pull/152 ">peter-evans/slash-command-dispatch#152</a></li>
<li>fixing link to <code>Get a pull request</code> by <a href="https://github.com/Borda "><code>@Borda</code></a> in <a href="https://redirect.github.com/peter-evans/slash-command-dispatch/pull/270 ">peter-evans/slash-command-dispatch#270</a></li>
<li>Update getting-started.md due to changes in Github UI by <a href="https://github.com/martin-displayr "><code>@martin-displayr</code></a> in <a href="https://redirect.github.com/peter-evans/slash-command-dispatch/pull/289 ">peter-evans/slash-command-dispatch#289</a></li>
<li>[Security] Fix GraphQL query to get a collaborator's permission by <a href="https://github.com/0xn3va "><code>@0xn3va</code></a> in <a href="https://redirect.github.com/peter-evans/slash-command-dispatch/pull/301 ">peter-evans/slash-command-dispatch#301</a></li>
<li>129 dependency updates by <a href="https://github.com/dependabot "><code>@dependabot</code></a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/Borda "><code>@Borda</code></a> made their first contribution in <a href="https://redirect.github.com/peter-evans/slash-command-dispatch/pull/270 ">peter-evans/slash-command-dispatch#270</a></li>
<li><a href="https://github.com/martin-displayr "><code>@martin-displayr</code></a> made their first contribution in <a href="https://redirect.github.com/peter-evans/slash-command-dispatch/pull/289 ">peter-evans/slash-command-dispatch#289</a></li>
<li><a href="https://github.com/0xn3va "><code>@0xn3va</code></a> made their first contribution in <a href="https://redirect.github.com/peter-evans/slash-command-dispatch/pull/301 ">peter-evans/slash-command-dispatch#301</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/peter-evans/slash-command-dispatch/compare/v3.0.1...v3.0.2 ">https://github.com/peter-evans/slash-command-dispatch/compare/v3.0.1...v3.0.2 </a></p>
<h2>Slash Command Dispatch v3.0.1</h2>
<p>⚙️ Bumps <code>@actions/core</code> to transition away from <a href="https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/ ">deprecated runner commands</a>.</p>
<h2>What's Changed</h2>
<ul>
<li>build(deps): bump peter-evans/create-pull-request from 3 to 4 by <a href="https://github.com/dependabot "><code>@dependabot</code></a> in <a href="https://redirect.github.com/peter-evans/slash-command-dispatch/pull/142 ">peter-evans/slash-command-dispatch#142</a></li>
<li>build(deps): bump <code>@actions/core</code> from 1.6.0 to 1.9.1 by <a href="https://github.com/dependabot "><code>@dependabot</code></a> in <a href="https://redirect.github.com/peter-evans/slash-command-dispatch/pull/144 ">peter-evans/slash-command-dispatch#144</a></li>
<li>Update distribution by <a href="https://github.com/github-actions "><code>@github-actions</code></a> in <a href="https://redirect.github.com/peter-evans/slash-command-dispatch/pull/145 ">peter-evans/slash-command-dispatch#145</a></li>
<li>build(deps): bump <code>@actions/core</code> from 1.9.1 to 1.10.0 by <a href="https://github.com/dependabot "><code>@dependabot</code></a> in <a href="https://redirect.github.com/peter-evans/slash-command-dispatch/pull/149 ">peter-evans/slash-command-dispatch#149</a></li>
<li>Update distribution by <a href="https://github.com/github-actions "><code>@github-actions</code></a> in <a href="https://redirect.github.com/peter-evans/slash-command-dispatch/pull/150 ">peter-evans/slash-command-dispatch#150</a></li>
<li>build(deps): bump <code>@actions/github</code> from 5.0.0 to 5.1.1 by <a href="https://github.com/dependabot "><code>@dependabot</code></a> in <a href="https://redirect.github.com/peter-evans/slash-command-dispatch/pull/148 ">peter-evans/slash-command-dispatch#148</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="13bc09769dhttps://redirect.github.com/peter-evans/slash-command-dispatch/issues/316 ">#316</a>)</li>
<li><a href="128d8b9272https://redirect.github.com/peter-evans/slash-command-dispatch/issues/318 ">#318</a>)</li>
<li><a href="df481df93dhttps://redirect.github.com/peter-evans/slash-command-dispatch/issues/317 ">#317</a>)</li>
<li><a href="d4579a0d22https://redirect.github.com/peter-evans/slash-command-dispatch/issues/315 ">#315</a>)</li>
<li><a href="8f053eaa2ehttps://redirect.github.com/peter-evans/slash-command-dispatch/issues/314 ">#314</a>)</li>
<li><a href="b3eb783760https://redirect.github.com/peter-evans/slash-command-dispatch/issues/312 ">#312</a>)</li>
<li><a href="c0334d0fedhttps://redirect.github.com/peter-evans/slash-command-dispatch/issues/311 ">#311</a>)</li>
<li><a href="e627c61300https://redirect.github.com/peter-evans/slash-command-dispatch/issues/310 ">#310</a>)</li>
<li><a href="5c23a33777https://redirect.github.com/peter-evans/slash-command-dispatch/issues/309 ">#309</a>)</li>
<li><a href="8dd62d5c45https://redirect.github.com/peter-evans/slash-command-dispatch/issues/308 ">#308</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/peter-evans/slash-command-dispatch/compare/v3...v4 ">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
You can trigger a rebase of this PR by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
2024-02-05 21:05:21 +00:00
dependabot[bot]
039c2463fc
⬆️ Bump tibdex/github-app-token from 1 to 2 ( #4212 )
...
Bumps [tibdex/github-app-token](https://github.com/tibdex/github-app-token ) from 1 to 2.
<details>
<summary>Commits</summary>
<ul>
<li><a href="0914d50df795717386c6https://github.com/tibdex/github-app-token/compare/v1...v2 ">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
You can trigger a rebase of this PR by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
2023-09-12 20:47:47 +00:00
Abin Simon
da0fac20bf
Bump slash-command-dispatch and avoid running unverified commit in ok-to-test ( #1756 )
...
## Description
Bumps ok-to-test to v3. Plus fix the issue where someone might have been able to run unverified code if they push between commenting `/ok-to-test` and the job starting.
## Type of change
<!--- Please check the type of change your PR introduces: --->
- [ ] 🌻 Feature
- [ ] 🐛 Bugfix
- [ ] 🗺️ Documentation
- [ ] 🤖 Test
- [x] 💻 CI/Deployment
- [ ] 🐹 Trivial/Minor
## Issue(s)
<!-- Can reference multiple issues. Use one of the following "magic words" - "closes, fixes" to auto-close the Github issue. -->
* https://github.com/alcionai/corso/pull/1651
## Test Plan
<!-- How will this be tested prior to merging.-->
- [x] 💪 Manual
- [ ] ⚡ Unit test
- [ ] 💚 E2E
2023-01-31 01:42:04 +00:00
Dhruv Patel
f05d6dec43
fix: integration tests running on PRs from forks ( #1504 )
...
## Description
* Allows integration tests to run via `repository_dispatch` events when
PRs are opened from forks
Credit: https://github.com/imjohnbo/ok-to-test
## Type of change
<!--- Please check the type of change your PR introduces: --->
- [ ] 🌻 Feature
- [ ] 🐛 Bugfix
- [ ] 🗺️ Documentation
- [ ] 🤖 Test
- [X] 💻 CI/Deployment
- [ ] 🐹 Trivial/Minor
## Issue(s)
<!-- Can reference multiple issues. Use one of the following "magic
words" - "closes, fixes" to auto-close the Github issue. -->
* ALC-635
## Test Plan
<!-- How will this be tested prior to merging.-->
- [X] 💪 Manual
- [ ] ⚡ Unit test
- [ ] 💚 E2E
2022-11-28 14:42:48 -05:00
dependabot[bot]