0a2acd92f7
group nextjs dependencies
2024-10-29 15:00:02 -05:00
25ccf4c61d
Merge pull request #5135 from mozilla/dependabot/github_actions/actions/setup-node-4.1.0
...
Bump actions/setup-node from 4.0.4 to 4.1.0
2024-10-28 13:47:26 +00:00
fea82da0f6
Bump actions/setup-node from 4.0.4 to 4.1.0
...
Bumps [actions/setup-node](https://github.com/actions/setup-node ) from 4.0.4 to 4.1.0.
- [Release notes](https://github.com/actions/setup-node/releases )
- [Commits](https://github.com/actions/setup-node/compare/v4.0.4...v4.1.0 )
---
updated-dependencies:
- dependency-name: actions/setup-node
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-10-28 01:25:23 +00:00
6851864d29
Bump actions/setup-python from 5.2.0 to 5.3.0
...
Bumps [actions/setup-python](https://github.com/actions/setup-python ) from 5.2.0 to 5.3.0.
- [Release notes](https://github.com/actions/setup-python/releases )
- [Commits](https://github.com/actions/setup-python/compare/v5.2.0...v5.3.0 )
---
updated-dependencies:
- dependency-name: actions/setup-python
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-10-28 01:25:21 +00:00
f3cd834ba5
Bump actions/setup-node from 4.0.3 to 4.0.4
...
Bumps [actions/setup-node](https://github.com/actions/setup-node ) from 4.0.3 to 4.0.4.
- [Release notes](https://github.com/actions/setup-node/releases )
- [Commits](https://github.com/actions/setup-node/compare/v4.0.3...v4.0.4 )
---
updated-dependencies:
- dependency-name: actions/setup-node
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-09-23 01:24:47 +00:00
af90668951
Merge pull request #4982 from mozilla/dependabot/github_actions/slackapi/slack-github-action-1.27.0
...
Bump slackapi/slack-github-action from 1.26.0 to 1.27.0
2024-09-04 18:49:07 +00:00
7e11de48ee
Merge pull request #4981 from mozilla/dependabot/github_actions/actions/setup-python-5.2.0
...
Bump actions/setup-python from 5.1.1 to 5.2.0
2024-09-04 18:41:59 +00:00
633e086a5b
Remove jwhitlock from user list
...
This was for debugging the action while it was being developed.
2024-09-04 13:21:52 -05:00
6319fe719f
Use PR user login to detect dependabot[bot]
...
According to a recent article by synacktiv, the Dependabot credentials
can be hijacked and used to create new jobs with:
`github.actor == 'dependabot[bot]'`
A way to check if dependabot is the real origin is to instead check:
`github.event.pull_request.user.login == 'dependabot[bot]'`
This check is repeated by the "dependabot/fetch-metadata@v2" code, so
Relay has a partial mitigation. This change will more completely
mitigate the issue.
2024-09-04 13:11:12 -05:00
3bce4e2a7b
Bump slackapi/slack-github-action from 1.26.0 to 1.27.0
...
Bumps [slackapi/slack-github-action](https://github.com/slackapi/slack-github-action ) from 1.26.0 to 1.27.0.
- [Release notes](https://github.com/slackapi/slack-github-action/releases )
- [Commits](https://github.com/slackapi/slack-github-action/compare/v1.26.0...v1.27.0 )
---
updated-dependencies:
- dependency-name: slackapi/slack-github-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-09-02 01:18:19 +00:00
697a363315
Bump actions/setup-python from 5.1.1 to 5.2.0
...
Bumps [actions/setup-python](https://github.com/actions/setup-python ) from 5.1.1 to 5.2.0.
- [Release notes](https://github.com/actions/setup-python/releases )
- [Commits](https://github.com/actions/setup-python/compare/v5.1.1...v5.2.0 )
---
updated-dependencies:
- dependency-name: actions/setup-python
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-09-02 01:18:18 +00:00
4d2511ccb1
Fix dependabot-glean-parser workflow
...
* Need contents:write permission to add a commit
* Need to use `gh pr` to checkout the branch to use the token
* Add me to author list to allow debugging
* Fix dependabot metadata step ID
* Do not push if no changes
2024-07-16 13:24:02 -05:00
84d9b1e86c
Merge pull request #4862 from mozilla/dependabot/github_actions/actions/setup-python-5.1.1
...
Bump actions/setup-python from 5.1.0 to 5.1.1
2024-07-15 14:32:05 +00:00
5053e031d7
Bump actions/setup-python from 5.1.0 to 5.1.1
...
Bumps [actions/setup-python](https://github.com/actions/setup-python ) from 5.1.0 to 5.1.1.
- [Release notes](https://github.com/actions/setup-python/releases )
- [Commits](https://github.com/actions/setup-python/compare/v5.1.0...v5.1.1 )
---
updated-dependencies:
- dependency-name: actions/setup-python
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-07-15 01:35:02 +00:00
a9ab50e57d
Bump actions/setup-node from 4.0.2 to 4.0.3
...
Bumps [actions/setup-node](https://github.com/actions/setup-node ) from 4.0.2 to 4.0.3.
- [Release notes](https://github.com/actions/setup-node/releases )
- [Commits](https://github.com/actions/setup-node/compare/v4.0.2...v4.0.3 )
---
updated-dependencies:
- dependency-name: actions/setup-node
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-07-15 01:35:00 +00:00
984fb9afb5
Merge pull request #4707 from mozilla/gha-regen-glean-parser
...
Regenerate server_events.py for new glean-parser versions
2024-05-13 22:24:37 +00:00
4b334a61a2
Regenerate server_events.py for new glean-parser versions
2024-05-13 13:12:41 -05:00
be017ec093
Call probe-scraper when glean YAML updates
2024-05-13 13:08:17 -05:00
367ad747c9
Add more AWS / boto3 type hint packages
2024-05-13 09:34:26 -05:00
0e19e19793
Slack integration for e2e failures
2024-05-08 19:14:56 -04:00
115bafed9a
Fix for e2e workflows
2024-04-25 13:03:10 -04:00
84eb837af1
Added e2e-tests path for prettier linting, updated e2e readme
2024-04-24 16:16:55 -04:00
f366191b69
Moved health check to playwright.yml inputs, added healthcheck cronjob
2024-04-24 15:50:31 -04:00
9d1fb527b1
Relay health check CI and fix for authPage login async waits fix
2024-04-22 16:55:30 -04:00
4d13f77f12
Linter and more test fixes
2024-04-22 15:25:45 -04:00
9108bde1f9
Merge pull request #4566 from mozilla/dependabot-boto-group
...
Group boto and boto types
2024-04-01 11:41:20 -05:00
0b27ba1479
Group boto and boto types
...
boto dependencies are generated from API specifications and change
weekly. The typing modules are often modified on the same schedule.
Grouping them will avoid mismatches and help the typing group update
less often.
2024-04-01 10:26:23 -05:00
d90b18a087
Bump actions/setup-python from 5.0.0 to 5.1.0
...
Bumps [actions/setup-python](https://github.com/actions/setup-python ) from 5.0.0 to 5.1.0.
- [Release notes](https://github.com/actions/setup-python/releases )
- [Commits](https://github.com/actions/setup-python/compare/v5.0.0...v5.1.0 )
---
updated-dependencies:
- dependency-name: actions/setup-python
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-04-01 01:56:39 +00:00
39ca0ec125
Update Python from 3.10.14 to 3.11.8
2024-03-26 13:29:16 -05:00
f6b658f3b4
Bump actions/setup-node from 4.0.1 to 4.0.2
...
Bumps [actions/setup-node](https://github.com/actions/setup-node ) from 4.0.1 to 4.0.2.
- [Release notes](https://github.com/actions/setup-node/releases )
- [Commits](https://github.com/actions/setup-node/compare/v4.0.1...v4.0.2 )
---
updated-dependencies:
- dependency-name: actions/setup-node
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-02-12 01:32:37 +00:00
7aa2ce2158
add CX checkbox to new feature checklist
2024-01-29 16:14:02 -06:00
139930df7f
Bump actions/setup-node from 4.0.0 to 4.0.1
...
Bumps [actions/setup-node](https://github.com/actions/setup-node ) from 4.0.0 to 4.0.1.
- [Release notes](https://github.com/actions/setup-node/releases )
- [Commits](https://github.com/actions/setup-node/compare/v4.0.0...v4.0.1 )
---
updated-dependencies:
- dependency-name: actions/setup-node
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-12-18 22:05:54 +00:00
4a0d73ffe3
Ignore django-stubs 4.2.7
2023-12-18 15:48:57 -06:00
183f78d636
Merge pull request #4227 from mozilla/dependabot/github_actions/actions/upload-artifact-4
...
Bump actions/upload-artifact from 3 to 4
2023-12-18 21:17:02 +00:00
a50ad64fe9
Bump actions/upload-artifact from 3 to 4
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 3 to 4.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](https://github.com/actions/upload-artifact/compare/v3...v4 )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-12-18 01:25:54 +00:00
6d7cb98404
Bump github/codeql-action from 2 to 3
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 2 to 3.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/v2...v3 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-12-18 01:25:51 +00:00
e90a2090e5
Bump actions/setup-python from 4.7.1 to 5.0.0
...
Bumps [actions/setup-python](https://github.com/actions/setup-python ) from 4.7.1 to 5.0.0.
- [Release notes](https://github.com/actions/setup-python/releases )
- [Commits](https://github.com/actions/setup-python/compare/v4.7.1...v5.0.0 )
---
updated-dependencies:
- dependency-name: actions/setup-python
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-12-11 01:41:14 +00:00
b68bc5a59e
Bump actions/setup-node from 3.8.1 to 4.0.0
...
Bumps [actions/setup-node](https://github.com/actions/setup-node ) from 3.8.1 to 4.0.0.
- [Release notes](https://github.com/actions/setup-node/releases )
- [Commits](https://github.com/actions/setup-node/compare/v3.8.1...v4.0.0 )
---
updated-dependencies:
- dependency-name: actions/setup-node
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-10-30 01:17:16 +00:00
378e085bbf
Bump actions/setup-python from 4.7.0 to 4.7.1
...
Bumps [actions/setup-python](https://github.com/actions/setup-python ) from 4.7.0 to 4.7.1.
- [Release notes](https://github.com/actions/setup-python/releases )
- [Commits](https://github.com/actions/setup-python/compare/v4.7.0...v4.7.1 )
---
updated-dependencies:
- dependency-name: actions/setup-python
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-10-09 01:56:30 +00:00
9ad3cb7355
Bump actions/checkout from 3 to 4
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 3 to 4.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v3...v4 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-09-11 02:02:02 +00:00
1c8cfeb75b
Bump actions/setup-node from 3.8.0 to 3.8.1
...
Bumps [actions/setup-node](https://github.com/actions/setup-node ) from 3.8.0 to 3.8.1.
- [Release notes](https://github.com/actions/setup-node/releases )
- [Commits](https://github.com/actions/setup-node/compare/v3.8.0...v3.8.1 )
---
updated-dependencies:
- dependency-name: actions/setup-node
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-08-21 02:04:01 +00:00
1a976e60b3
Bump actions/setup-node from 3.7.0 to 3.8.0
...
Bumps [actions/setup-node](https://github.com/actions/setup-node ) from 3.7.0 to 3.8.0.
- [Release notes](https://github.com/actions/setup-node/releases )
- [Commits](https://github.com/actions/setup-node/compare/v3.7.0...v3.8.0 )
---
updated-dependencies:
- dependency-name: actions/setup-node
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-08-16 14:36:07 +00:00
090f118ee7
Add Python dependency groups
2023-08-15 16:52:24 -05:00
8bcd63601b
Group related Dependabot JS updates
...
This should hopefully cut down on some of the noise of ESLint
updates, and ensure that packages that break unless they are
updated together are actually updated together.
See https://github.blog/changelog/2023-06-30-grouped-version-updates-for-dependabot-public-beta/
2023-08-04 12:28:03 +02:00
5b652a0675
Bump actions/setup-python from 4.6.1 to 4.7.0
...
Bumps [actions/setup-python](https://github.com/actions/setup-python ) from 4.6.1 to 4.7.0.
- [Release notes](https://github.com/actions/setup-python/releases )
- [Commits](https://github.com/actions/setup-python/compare/v4.6.1...v4.7.0 )
---
updated-dependencies:
- dependency-name: actions/setup-python
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-07-17 01:20:49 +00:00
16b159ca62
Bump actions/setup-node from 3.6.0 to 3.7.0
...
Bumps [actions/setup-node](https://github.com/actions/setup-node ) from 3.6.0 to 3.7.0.
- [Release notes](https://github.com/actions/setup-node/releases )
- [Commits](https://github.com/actions/setup-node/compare/v3.6.0...v3.7.0 )
---
updated-dependencies:
- dependency-name: actions/setup-node
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2023-07-10 01:21:27 +00:00
4618c27d8c
Remove commented code
2023-05-31 15:50:56 -05:00
90782d823b
temp remove gh pages setup in yaml
2023-05-31 15:50:55 -05:00
721597c372
gh pages
2023-05-31 15:50:55 -05:00
6d8fa0e798
Bump actions/setup-python from 4.6.0 to 4.6.1 (from PR #3468 )
...
Bumps [actions/setup-python](https://github.com/actions/setup-python ) from 4.6.0 to 4.6.1.
- [Release notes](https://github.com/actions/setup-python/releases )
- [Commits](https://github.com/actions/setup-python/compare/v4.6.0...v4.6.1 )
2023-05-30 10:15:00 -05:00
groovecoder
luke crouch
dependabot[bot]
John Whitlock
Rafee
Vincent
mozrokafor