Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump the github-actions group across 1 directory with 2 updates #213

Merged
merged 1 commit into from
Feb 8, 2025

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 1, 2025

Bumps the github-actions group with 2 updates in the / directory: actions/setup-python and SonarSource/sonarcloud-github-c-cpp.

Updates actions/setup-python from 5.2.0 to 5.4.0

Release notes

Sourced from actions/setup-python's releases.

v5.4.0

What's Changed

Enhancements:

Documentation changes:

Dependency updates:

New Contributors

Full Changelog: actions/setup-python@v5...v5.4.0

v5.3.0

What's Changed

Bug Fixes:

Enhancements:

New Contributors

Full Changelog: actions/setup-python@v5...v5.3.0

Commits

Updates SonarSource/sonarcloud-github-c-cpp from 3.1.0 to 3.2.0

Release notes

Sourced from SonarSource/sonarcloud-github-c-cpp's releases.

v3.2.0

[!WARNING] This new version of the GitHub action for C, C++, and Objective-C with SonarQube Cloud (sonarcloud-github-c-cpp) is going to be the last one specifically designed for these languages.

This action is deprecated and will be removed in a future release.

Please use the sonarqube-scan-action and its install-build-wrapper sub-action instead.

More specifically, if the action is used to install both the SonarScanner CLI and the Build Wrapper:

  • replace sonarcloud-github-c-cpp with the latest version of SonarSource/sonarqube-scan-action/install-build-wrapper
  • if the step calling the action is named Install sonar-scanner and build-wrapper, or something similar, rename it to Install Build Wrapper
  • replace the step calling sonar-scanner with a step using SonarSource/sonarqube-scan-action
  • the arguments passed to sonar-scanner should be passed to the action via the args input parameter

If the action is used to install the SonarScanner CLI, and the Build Wrapper is not required:

  • remove the sonarcloud-github-c-cpp step altogether
  • replace the step calling sonar-scanner with a step using SonarSource/sonarqube-scan-action
  • the arguments passed to sonar-scanner should be passed to the action via the args input parameter

Check the C++ section in the README of the sonarqube-scan-action for complete examples.

What's Changed

New Contributors

Full Changelog: SonarSource/sonarcloud-github-c-cpp@v3.1.0...v3.2.0

Commits
  • 44cc4d3 SCCPPGHA-21 Change title back to SonarCloud Scan for C and C++ (#65)
  • 211a45f SCCPPGHA-16 Deprecate in favor of sonarqube-scan-action (#66)
  • 166e6d6 SCCPPGHA-10 Rebrand and forward to the C and C++ action for SQS (#64)
  • 0aed737 Add Jira integration
  • 754f54f SCCPPGHA-9 Upgrade all recommended GitHub Action versions (#61)
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Feb 1, 2025
Bumps the github-actions group with 2 updates in the / directory: [actions/setup-python](https://github.com/actions/setup-python) and [SonarSource/sonarcloud-github-c-cpp](https://github.com/sonarsource/sonarcloud-github-c-cpp).


Updates `actions/setup-python` from 5.2.0 to 5.4.0
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](actions/setup-python@f677139...4237552)

Updates `SonarSource/sonarcloud-github-c-cpp` from 3.1.0 to 3.2.0
- [Release notes](https://github.com/sonarsource/sonarcloud-github-c-cpp/releases)
- [Commits](SonarSource/sonarcloud-github-c-cpp@816b182...44cc4d3)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: SonarSource/sonarcloud-github-c-cpp
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <[email protected]>
@manugarg manugarg force-pushed the dependabot/github_actions/github-actions-8d5a9c0fc9 branch from c7d4e1f to b3d0856 Compare February 8, 2025 00:20
Copy link

sonarqubecloud bot commented Feb 8, 2025

@manugarg manugarg merged commit 8b9c063 into main Feb 8, 2025
27 checks passed
@manugarg manugarg deleted the dependabot/github_actions/github-actions-8d5a9c0fc9 branch February 8, 2025 00:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant