Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump actions/checkout from 4.2.0 to 4.2.1 #152

Merged
merged 1 commit into from
Oct 8, 2024

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 7, 2024

Bumps actions/checkout from 4.2.0 to 4.2.1.

Release notes

Sourced from actions/checkout's releases.

v4.2.1

What's Changed

New Contributors

Full Changelog: actions/checkout@v4.2.0...v4.2.1

Changelog

Sourced from actions/checkout's changelog.

v4.2.1

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [actions/checkout](https://github.com/actions/checkout) from 4.2.0 to 4.2.1.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v4.2.0...v4.2.1)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot requested a review from nfx as a code owner October 7, 2024 19:56
@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Oct 7, 2024
@nfx nfx merged commit f5f57e5 into main Oct 8, 2024
8 of 9 checks passed
@nfx nfx deleted the dependabot/github_actions/actions/checkout-4.2.1 branch October 8, 2024 08:48
nfx added a commit that referenced this pull request Oct 10, 2024
* Bump actions/checkout from 4.1.7 to 4.2.0 ([#149](#149)). In this pull request, the `actions/checkout` dependency is upgraded from version 4.1.7 to 4.2.0 in the `acceptance.yml` and `downstreams.yml` workflow files. The new version provides additional Ref and Commit outputs, as well as updated dependencies, which aim to improve the functionality and security of the checkout process. The `Ref` output is a string representing the reference that was checked out, and the `Commit` output is the SHA-1 hash of the checked-out commit. Dependency updates include bumping the `braces` package from 3.0.2 to 3.0.3 and updating the minor-npm-dependencies group across one directory with four updates. These changes contribute to a more reliable and efficient checkout process and enhance the overall functionality and maintainability of the Action. Software engineers are recommended to review the changes and ensure they do not introduce conflicts with their current setup before adopting the new version.
* Bump actions/checkout from 4.2.0 to 4.2.1 ([#152](#152)). In this update, the version of the `actions/checkout` GitHub Action is bumped from 4.2.0 to 4.2.1 in a project's GitHub workflow files. This new version includes a modification to check out other `refs/*` by commit if provided, falling back to the ref. This change enhances the flexibility of the `checkout` action in handling different types of references, which could be useful for users working with multiple branches or references in their workflows. The update also adds a workflow file for publishing releases to an immutable action package. This release was contributed by the new project collaborator, @orhantoy, who made the change in pull request [1924](https://redirect.github.com/actions/checkout/pull/1924).
* Bump databrickslabs/sandbox from acceptance/v0.3.0 to 0.3.1 ([#155](#155)). In this update, the dependency for `databrickslabs/sandbox` has been bumped from version `acceptance/v0.3.0` to `0.3.1`. This change includes bug fixes, upgrades to go-git libraries, and dependency updates. The `golang.org/x/crypto` library was specifically bumped from version `0.16.0` to `0.17.0` in both `/go-libs` and `/runtime-packages`. Additionally, the `cac167b` commit expanded acceptance test logs and introduced experimental OIDC refresh token rotation. The acceptance test job in the workflow was also updated to use the new version of `databrickslabs/sandbox`. Ignore conditions were added for previous versions of `databrickslabs/sandbox` in this release. The README was also modified, and install instructions were added to the changelog.
* Catch all errors when checking Databricks path, notably BadRequest ones ([#156](#156)). This commit introduces improvements to the error handling of the `exists` method in the `paths.py` file when checking Databricks path. Previously, only `NotFound` errors were caught, but now `BadRequest` errors are also handled, addressing issue [#2882](https://github.com/databrickslabs/blueprint/issues/2882). The `exists` method has been updated to catch and manage `DatabricksError` exceptions, which now encompass `BadRequest` errors, ensuring comprehensive error handling for Databricks path-related operations. Additionally, the `_cached_file_info` and `_cached_object_info` attributes are now initialized when a `DatabricksError` exception occurs, returning `False` accordingly. This enhancement maintains consistency and accuracy in the `exists` method while broadening the range of errors captured, resulting in a more robust and reliable codebase with enhanced error reporting for users.
* Normalize databricks paths as part of resolving them ([#157](#157)). In this release, the `resolve` method in the `paths.py` file of the databricks/labs/blueprint project has been enhanced to handle parent directory references ("..") consistently with Python's built-in `Path` object. Previously, `Path("/a/b/../c").resolve()` would return `Path("/a/b/c")`, while Databricks paths were not behaving consistently. This modification introduces a new `_normalize()` method, which processes the path parts and ensures that ".." segments are handled correctly. The commit also includes a new test function, 'test_resolve_is_consistent', which checks the consistent resolution of Databricks paths with various input formats, such as relative paths, ".." or "." components, and absolute paths. This change ensures that the resolved path will be normalized according to the expected behavior, regardless of the input format, contributing to the resolution of issue [#2882](https://github.com/databrickslabs/blueprint/issues/2882). By normalizing Databricks paths in the same fashion as Python's built-in `Path` object, the code should become more robust and predictable, providing a more reliable and predictable experience for software engineers utilizing the project.
* Updated databrickslabs/sandbox requirement to acceptance/v0.3.0 ([#153](#153)). In this pull request, the `databrickslabs/sandbox` package requirement in the downstreams GitHub Actions workflow is updated to version 0.3.0, which is the latest version available. This package provides a sandbox environment for development and testing, and the new version includes bug fixes and dependency updates that may enhance its reliability and performance. Dependabot has been used to ensure a smooth update process, with any conflicts being resolved automatically. However, it is recommended to review the changelog and test the updated version before merging this pull request to ensure compatibility and functionality in your specific use case. Additionally, Dependabot commands are available to manage ignore conditions for this dependency.

Dependency updates:

 * Bump actions/checkout from 4.1.7 to 4.2.0 ([#149](#149)).
 * Bump actions/checkout from 4.2.0 to 4.2.1 ([#152](#152)).
 * Updated databrickslabs/sandbox requirement to acceptance/v0.3.0 ([#153](#153)).
 * Bump databrickslabs/sandbox from acceptance/v0.3.0 to 0.3.1 ([#155](#155)).
@nfx nfx mentioned this pull request Oct 10, 2024
nfx added a commit that referenced this pull request Oct 10, 2024
* Bump actions/checkout from 4.1.7 to 4.2.0
([#149](#149)). In
this pull request, the `actions/checkout` dependency is upgraded from
version 4.1.7 to 4.2.0 in the `acceptance.yml` and `downstreams.yml`
workflow files. The new version provides additional Ref and Commit
outputs, as well as updated dependencies, which aim to improve the
functionality and security of the checkout process. The `Ref` output is
a string representing the reference that was checked out, and the
`Commit` output is the SHA-1 hash of the checked-out commit. Dependency
updates include bumping the `braces` package from 3.0.2 to 3.0.3 and
updating the minor-npm-dependencies group across one directory with four
updates. These changes contribute to a more reliable and efficient
checkout process and enhance the overall functionality and
maintainability of the Action. Software engineers are recommended to
review the changes and ensure they do not introduce conflicts with their
current setup before adopting the new version.
* Bump actions/checkout from 4.2.0 to 4.2.1
([#152](#152)). In
this update, the version of the `actions/checkout` GitHub Action is
bumped from 4.2.0 to 4.2.1 in a project's GitHub workflow files. This
new version includes a modification to check out other `refs/*` by
commit if provided, falling back to the ref. This change enhances the
flexibility of the `checkout` action in handling different types of
references, which could be useful for users working with multiple
branches or references in their workflows. The update also adds a
workflow file for publishing releases to an immutable action package.
This release was contributed by the new project collaborator, @orhantoy,
who made the change in pull request
[1924](https://redirect.github.com/actions/checkout/pull/1924).
* Bump databrickslabs/sandbox from acceptance/v0.3.0 to 0.3.1
([#155](#155)). In
this update, the dependency for `databrickslabs/sandbox` has been bumped
from version `acceptance/v0.3.0` to `0.3.1`. This change includes bug
fixes, upgrades to go-git libraries, and dependency updates. The
`golang.org/x/crypto` library was specifically bumped from version
`0.16.0` to `0.17.0` in both `/go-libs` and `/runtime-packages`.
Additionally, the `cac167b` commit expanded acceptance test logs and
introduced experimental OIDC refresh token rotation. The acceptance test
job in the workflow was also updated to use the new version of
`databrickslabs/sandbox`. Ignore conditions were added for previous
versions of `databrickslabs/sandbox` in this release. The README was
also modified, and install instructions were added to the changelog.
* Catch all errors when checking Databricks path, notably BadRequest
ones ([#156](#156)).
This commit introduces improvements to the error handling of the
`exists` method in the `paths.py` file when checking Databricks path.
Previously, only `NotFound` errors were caught, but now `BadRequest`
errors are also handled, addressing issue
[#2882](https://github.com/databrickslabs/blueprint/issues/2882). The
`exists` method has been updated to catch and manage `DatabricksError`
exceptions, which now encompass `BadRequest` errors, ensuring
comprehensive error handling for Databricks path-related operations.
Additionally, the `_cached_file_info` and `_cached_object_info`
attributes are now initialized when a `DatabricksError` exception
occurs, returning `False` accordingly. This enhancement maintains
consistency and accuracy in the `exists` method while broadening the
range of errors captured, resulting in a more robust and reliable
codebase with enhanced error reporting for users.
* Normalize databricks paths as part of resolving them
([#157](#157)). In
this release, the `resolve` method in the `paths.py` file of the
databricks/labs/blueprint project has been enhanced to handle parent
directory references ("..") consistently with Python's built-in `Path`
object. Previously, `Path("/a/b/../c").resolve()` would return
`Path("/a/b/c")`, while Databricks paths were not behaving consistently.
This modification introduces a new `_normalize()` method, which
processes the path parts and ensures that ".." segments are handled
correctly. The commit also includes a new test function,
'test_resolve_is_consistent', which checks the consistent resolution of
Databricks paths with various input formats, such as relative paths,
".." or "." components, and absolute paths. This change ensures that the
resolved path will be normalized according to the expected behavior,
regardless of the input format, contributing to the resolution of issue
[#2882](https://github.com/databrickslabs/blueprint/issues/2882). By
normalizing Databricks paths in the same fashion as Python's built-in
`Path` object, the code should become more robust and predictable,
providing a more reliable and predictable experience for software
engineers utilizing the project.
* Updated databrickslabs/sandbox requirement to acceptance/v0.3.0
([#153](#153)). In
this pull request, the `databrickslabs/sandbox` package requirement in
the downstreams GitHub Actions workflow is updated to version 0.3.0,
which is the latest version available. This package provides a sandbox
environment for development and testing, and the new version includes
bug fixes and dependency updates that may enhance its reliability and
performance. Dependabot has been used to ensure a smooth update process,
with any conflicts being resolved automatically. However, it is
recommended to review the changelog and test the updated version before
merging this pull request to ensure compatibility and functionality in
your specific use case. Additionally, Dependabot commands are available
to manage ignore conditions for this dependency.

Dependency updates:

* Bump actions/checkout from 4.1.7 to 4.2.0
([#149](#149)).
* Bump actions/checkout from 4.2.0 to 4.2.1
([#152](#152)).
* Updated databrickslabs/sandbox requirement to acceptance/v0.3.0
([#153](#153)).
* Bump databrickslabs/sandbox from acceptance/v0.3.0 to 0.3.1
([#155](#155)).
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant