Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump dawidd6/action-download-artifact from 2 to 6 in /.github/workflows #456

Conversation

dependabot[bot]
Copy link

@dependabot dependabot bot commented on behalf of github Dec 31, 2024

Bumps dawidd6/action-download-artifact from 2 to 6.

Release notes

Sourced from dawidd6/action-download-artifact's releases.

v6

Full Changelog: dawidd6/action-download-artifact@v5...v6

v5

Full Changelog: dawidd6/action-download-artifact@v4...v5

v4

What's Changed

New Contributors

Full Changelog: dawidd6/action-download-artifact@v3...v4

v3.1.4

What's Changed

New Contributors

Full Changelog: dawidd6/action-download-artifact@v3...v3.1.4

v3.1.3

What's Changed

Full Changelog: dawidd6/action-download-artifact@v3.1.2...v3.1.3

v3.1.2

What's Changed

New Contributors

Full Changelog: dawidd6/action-download-artifact@v3.1.1...v3.1.2

v3.1.1

What's Changed

... (truncated)

Commits
  • bf251b5 node_modules: upgrade
  • 93c6296 README: v5
  • deb3bb8 node_modules: upgrade
  • 1d93f37 README: v4
  • 854e2de Set allow_forks to false by default (#290)
  • 436c9d3 build(deps): bump adm-zip from 0.5.12 to 0.5.13 (#289)
  • 1404052 build(deps): bump @​actions/artifact from 2.1.5 to 2.1.7 (#287)
  • 8a9be73 build(deps): bump @​actions/artifact from 2.1.4 to 2.1.5 (#285)
  • df593bb build(deps): bump undici from 5.28.3 to 5.28.4 (#284)
  • 09f2f74 fix: accept expired artifacts with documentation url (#283)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [dawidd6/action-download-artifact](https://github.com/dawidd6/action-download-artifact) from 2 to 6.
- [Release notes](https://github.com/dawidd6/action-download-artifact/releases)
- [Commits](dawidd6/action-download-artifact@v2...v6)

---
updated-dependencies:
- dependency-name: dawidd6/action-download-artifact
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Dec 31, 2024
Copy link

This PR is against the master branch ❌

  • Do not close this PR
  • Click Edit and change the base to dev
  • This CI test will remain failed until you push a new commit

Hi @dependabot[bot],

It looks like this pull-request is has been made against the nf-core/viralrecon master branch.
The master branch on nf-core repositories should always contain code from the latest release.
Because of this, PRs to master are only allowed if they come from the nf-core/viralrecon dev branch.

You do not need to close this PR, you can change the target branch to dev by clicking the "Edit" button at the top of this page.
Note that even after this, the test will continue to show as failing until you push a new commit.

Thanks again for your contribution!

Copy link

github-actions bot commented Dec 31, 2024

nf-core pipelines lint overall result: Passed ✅ ⚠️

Posted for pipeline commit ddc0e61

+| ✅ 201 tests passed       |+
#| ❔   2 tests were ignored |#
!| ❗   9 tests had warnings |!

❗ Test warnings:

  • files_exist - File not found: conf/igenomes.config
  • files_exist - File not found: conf/igenomes_ignored.config
  • readme - README contains the placeholder zenodo.XXXXXXX. This should be replaced with the zenodo doi (after the first release).
  • pipeline_todos - TODO string in main.nf: Optionally add in-text citation tools to this list.
  • pipeline_todos - TODO string in main.nf: Optionally add bibliographic entries to this list.
  • pipeline_todos - TODO string in main.nf: Only uncomment below if logic in toolCitationText/toolBibliographyText has been filled!
  • pipeline_todos - TODO string in base.config: Check the defaults for all processes
  • pipeline_todos - TODO string in methods_description_template.yml: #Update the HTML below to your preferred methods description, e.g. add publication citation for this pipeline
  • system_exit - System.exit in nanopore.nf: System.exit(1) [line 246]

❔ Tests ignored:

  • files_unchanged - File ignored due to lint config: assets/email_template.html
  • files_unchanged - File ignored due to lint config: assets/email_template.txt

✅ Tests passed:

Run details

  • nf-core/tools version 3.0.2
  • Run at 2024-12-31 00:59:54

@heuermh heuermh changed the base branch from master to dev December 31, 2024 00:30
@nf-core-bot
Copy link
Member

Warning

Newer version of the nf-core template is available.

Your pipeline is using an old version of the nf-core template: 3.0.2.
Please update your pipeline to the latest version.

For more documentation on how to update your pipeline, please see the nf-core documentation and Synchronisation documentation.

@heuermh
Copy link
Contributor

heuermh commented Dec 31, 2024

Hmm, not sure the best thing to do here. The change proposed by dependabot is not necessary, given the dev branch is already using version 6, although via commit hash. It might be nice to merge this so that the linked security alert is resolved. Or is there another way to do that?

@maxulysse
Copy link
Member

I wouldn't do anything here, and deal with that via TEMPLATE update

@heuermh heuermh closed this Jan 7, 2025
Copy link
Author

dependabot bot commented on behalf of github Jan 7, 2025

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot dependabot bot deleted the dependabot/github_actions/dot-github/workflows/dawidd6/action-download-artifact-6 branch January 7, 2025 22:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants