Sourced from actions/setup-python's releases.

Improve error handling and messages

In scope of this release we added improved error message to put operating system and its version in the logs (actions/setup-python#559). Besides, the release

• fixes issue about specifying architecture for pypy-nightly on Windows with related pull request.
• improves error handling for Http Errors (actions/setup-python#511).
• updates minimatch (actions/setup-python#558).

v4.3.0

• Update @​actions/core to 1.10.0 version #517
• Update @​actions/cache to 3.0.4 version #499
• Only use github.token on github.com #443
• Improvement of documentation #477 #479 #491 #492

Add check-latest input and bug fixes

In scope of this release we add the check-latest input. If check-latest is set to true, the action first checks if the cached version is the latest one. If the locally cached version is not the most up-to-date, the version will then be downloaded from python-versions repository. By default check-latest is set to false. For PyPy it will to try to reach https://downloads.python.org/pypy/versions.json

Example of usage:

steps:
  - uses: actions/checkout@v3
  - uses: actions/setup-python@v4
    with:
      python-version: '3.9'
      check-latest: true
  - run: python --version

Besides, it includes such changes as

• Resolved logs for python-version and file inputs: actions/setup-python#465
• Added linux os release info to primary key: actions/setup-python#467
• Added fix to change Python versions for poetry: actions/setup-python#445
• Fix Tool Path handling for self-hosted runners: actions/setup-python#466

v4.1.0

In scope of this pull request we updated actions/cache package as the new version contains fixes for caching error handling. Moreover, we added a new input update-environment. This option allows to specify if the action shall update environment variables (default) or not.

Update-environment input

    - name: setup-python 3.9
      uses: actions/setup-python@v4
      with:
        python-version: 3.9
        update-environment: false

Besides, we added such changes as:

• Allow python-version-file to be a relative path: actions/setup-python#431
• Added new environment variables for Cmake: actions/setup-python#440
• Updated error message for resolveVersion: actions/setup-python#450
• Assign default value of AGENT_TOOLSDIRECTORY if not set: actions/setup-python#394

... (truncated)

• 2c3dd9e Add OS info to the error message (#559)
• 76bbdfa Update minimatch (#558)
• 1aafadc Caching projects that use setup.py (#549)
• b80efd6 Update to latest actions/publish-action (#546)
• 5cddb27 Recommend setting python-version (#545)
• 47c4a7a fix(ci): run .github/workflows/workflow.yml on ubuntu-20.04 (#535)
• af57b64 Extend docu regarding rate limit issues. (#510)
• 4818a5a Handle download HTTP error (#511)
• 8bcd256 Add architecture input check for PyPy for Windows platform (#520)
• 13ae5bb Merge pull request #517 from rentziass/rentziass/update-actions-core
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Sourced from actions/setup-python's releases.

v4.3.0

• Update @​actions/core to 1.10.0 version #517
• Update @​actions/cache to 3.0.4 version #499
• Only use github.token on github.com #443
• Improvement of documentation #477 #479 #491 #492

Add check-latest input and bug fixes

In scope of this release we add the check-latest input. If check-latest is set to true, the action first checks if the cached version is the latest one. If the locally cached version is not the most up-to-date, the version will then be downloaded from python-versions repository. By default check-latest is set to false. For PyPy it will to try to reach https://downloads.python.org/pypy/versions.json

Example of usage:

steps:
  - uses: actions/checkout@v3
  - uses: actions/setup-python@v4
    with:
      python-version: '3.9'
      check-latest: true
  - run: python --version

Besides, it includes such changes as

• Resolved logs for python-version and file inputs: actions/setup-python#465
• Added linux os release info to primary key: actions/setup-python#467
• Added fix to change Python versions for poetry: actions/setup-python#445
• Fix Tool Path handling for self-hosted runners: actions/setup-python#466

v4.1.0

In scope of this pull request we updated actions/cache package as the new version contains fixes for caching error handling. Moreover, we added a new input update-environment. This option allows to specify if the action shall update environment variables (default) or not.

Update-environment input

    - name: setup-python 3.9
      uses: actions/setup-python@v4
      with:
        python-version: 3.9
        update-environment: false

Besides, we added such changes as:

• Allow python-version-file to be a relative path: actions/setup-python#431
• Added new environment variables for Cmake: actions/setup-python#440
• Updated error message for resolveVersion: actions/setup-python#450
• Assign default value of AGENT_TOOLSDIRECTORY if not set: actions/setup-python#394

v4.0.0

What's Changed

• Support for python-version-file input: #336

... (truncated)

• 13ae5bb Merge pull request #517 from rentziass/rentziass/update-actions-core
• 0c4d7b8 Update @​actions/core to 1.10.0
• 13a464f Fix typo (#503)
• b4fe97e upgrade @​actions/cache so it respects SEGMENT_DOWNLOAD_TIMEOUT_MINS (#499)
• 434aeab Bump @​actions/core from 1.7.0 to 1.9.1 (#495)
• 98c991d Only use github.token on github.com (#443)
• 397a35f Merge pull request #492 from al-cheb/al-cheb/update-runner-link
• 48a0f00 Update runner links
• 978fd06 Merge pull request #491 from lkfortuna/patch-2
• 050e616 Update README.md
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Sourced from actions/checkout's releases.

v3.1.0

What's Changed

• Inject GitHub host to be able to clone from another GitHub instance by @​peter-murray in actions/checkout#922
• Bump @​actions/core to 1.10.0 by @​rentziass in actions/checkout#939

New Contributors

• @​peter-murray made their first contribution in actions/checkout#922
• @​rentziass made their first contribution in actions/checkout#939

Full Changelog: https://github.com/actions/checkout/compare/v3.0.2...v3.1.0

v3.0.2

What's Changed

• Add set-safe-directory input to allow customers to take control. by @​TingluoHuang in actions/checkout#770
• Prepare changelog for v3.0.2. by @​TingluoHuang in actions/checkout#777

Full Changelog: https://github.com/actions/checkout/compare/v3...v3.0.2

v3.0.1

• Fixed an issue where checkout failed to run in container jobs due to the new git setting safe.directory
• Bumped various npm package versions

v3.0.0

• Updated to the node16 runtime by default
  • This requires a minimum Actions Runner version of v2.285.0 to run, which is by default available in GHES 3.4 or later.

v2.4.2

What's Changed

• Add set-safe-directory input to allow customers to take control. (#770) by @​TingluoHuang in actions/checkout#776
• Prepare changelog for v2.4.2. by @​TingluoHuang in actions/checkout#778

Full Changelog: https://github.com/actions/checkout/compare/v2...v2.4.2

v2.4.1

• Fixed an issue where checkout failed to run in container jobs due to the new git setting safe.directory

Sourced from actions/checkout's changelog.

v3.1.0

• Use @​actions/core saveState and getState
• Add github-server-url input

v3.0.2

• Add input set-safe-directory

v3.0.1

• Fixed an issue where checkout failed to run in container jobs due to the new git setting safe.directory
• Bumped various npm package versions

v3.0.0

• Update to node 16

v2.3.1

• Fix default branch resolution for .wiki and when using SSH

v2.3.0

• Fallback to the default branch

v2.2.0

• Fetch all history for all tags and branches when fetch-depth=0

v2.1.1

• Changes to support GHES (here and here)

v2.1.0

• Group output
• Changes to support GHES alpha release
• Persist core.sshCommand for submodules
• Add support ssh
• Convert submodule SSH URL to HTTPS, when not using SSH
• Add submodule support
• Follow proxy settings
• Fix ref for pr closed event when a pr is merged
• Fix issue checking detached when git less than 2.22

v2.0.0

• Do not pass cred on command line
• Add input persist-credentials
• Fallback to REST API to download repo

v2 (beta)

... (truncated)

• 93ea575 Prepare release v3.1.0 (#940)
• 6a84743 Bump @​actions/core to 1.10.0 (#939)
• e6d535c Inject GitHub host to be able to clone from another GitHub instance (#922)
• 2541b12 Prepare changelog for v3.0.2. (#777)
• 0ffe6f9 Add set-safe-directory input to allow customers to take control. (#770)
• dcd71f6 Enforce safe directory (#762)
• add3486 Patch to fix the dependbot alert. (#744)
• 5126516 Bump minimist from 1.2.5 to 1.2.6 (#741)
• d50f8ea Add v3.0 release information to changelog (#740)
• 2d1c119 update test workflows to checkout v3 (#709)
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Sourced from actions/setup-python's releases.

Add check-latest input and bug fixes

In scope of this release we add the check-latest input. If check-latest is set to true, the action first checks if the cached version is the latest one. If the locally cached version is not the most up-to-date, the version will then be downloaded from python-versions repository. By default check-latest is set to false. For PyPy it will to try to reach https://downloads.python.org/pypy/versions.json

Example of usage:

steps:
  - uses: actions/checkout@v3
  - uses: actions/setup-python@v4
    with:
      python-version: '3.9'
      check-latest: true
  - run: python --version

Besides, it includes such changes as

• Resolved logs for python-version and file inputs: actions/setup-python#465
• Added linux os release info to primary key: actions/setup-python#467
• Added fix to change Python versions for poetry: actions/setup-python#445
• Fix Tool Path handling for self-hosted runners: actions/setup-python#466

v4.1.0

In scope of this pull request we updated actions/cache package as the new version contains fixes for caching error handling. Moreover, we added a new input update-environment. This option allows to specify if the action shall update environment variables (default) or not.

Update-environment input

    - name: setup-python 3.9
      uses: actions/setup-python@v4
      with:
        python-version: 3.9
        update-environment: false

Besides, we added such changes as:

• Allow python-version-file to be a relative path: actions/setup-python#431
• Added new environment variables for Cmake: actions/setup-python#440
• Updated error message for resolveVersion: actions/setup-python#450
• Assign default value of AGENT_TOOLSDIRECTORY if not set: actions/setup-python#394

v4.0.0

What's Changed

• Support for python-version-file input: #336

Example of usage:

- uses: actions/setup-python@v4
  with:
    python-version-file: '.python-version' # Read python version from a file
- run: python my_script.py
</tr></table> 

... (truncated)

• b55428b Merge pull request #472 from IvanZosimov/ReadmeUpdate
• e084fca Merge branch 'main' into ReadmeUpdate
• 789730b Fix broken links in the text body
• c4e98b7 Fix broken links
• cfcafa5 Fix review points
• c318b92 Fix review points
• a93d541 Merge pull request #466 from techman83/fix/tool_path
• 72394d1 Fix typo
• fe396d3 Revert changes
• 853c012 Change advanced-usage.md
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Sourced from actions/setup-python's releases.

v4.1.0

In scope of this pull request we updated actions/cache package as the new version contains fixes for caching error handling. Moreover, we added a new input update-environment. This option allows to specify if the action shall update environment variables (default) or not.

Update-environment input

    - name: setup-python 3.9
      uses: actions/setup-python@v4
      with:
        python-version: 3.9
        update-environment: false

Besides, we added such changes as:

• Allow python-version-file to be a relative path: actions/setup-python#431
• Added new environment variables for Cmake: actions/setup-python#440
• Updated error message for resolveVersion: actions/setup-python#450
• Assign default value of AGENT_TOOLSDIRECTORY if not set: actions/setup-python#394

v4.0.0

What's Changed

• Support for python-version-file input: #336

Example of usage:

- uses: actions/setup-python@v4
  with:
    python-version-file: '.python-version' # Read python version from a file
- run: python my_script.py

There is no default python version for this setup-python major version, the action requires to specify either python-version input or python-version-file input. If the python-version input is not specified the action will try to read required version from file from python-version-file input.

• Use pypyX.Y for PyPy python-version input: #349

Example of usage:

- uses: actions/setup-python@v4
  with:
    python-version: 'pypy3.9' # pypy-X.Y kept for backward compatibility
- run: python my_script.py

• RUNNER_TOOL_CACHE environment variable is equal AGENT_TOOLSDIRECTORY: #338

• Bugfix: create missing pypyX.Y symlinks: #347

• PKG_CONFIG_PATH environment variable: #400

• Added python-path output: #405

... (truncated)

• c4e89fa Improve readme for 3.x and 3.11-dev style python-version (#441)
• 0ad0f6a Merge pull request #452 from mayeut/fix-env
• f0bcf8b Merge pull request #456 from akx/patch-1
• af97157 doc: Add multiple wildcards example to readme
• 364e819 Merge pull request #394 from akv-platform/v-sedoli/set-env-by-default
• 782f81b Merge pull request #450 from IvanZosimov/ResolveVersionFix
• 2c9de4e Remove duplicate code introduced in #440
• 412091c Fix tests for update-environment==false
• 78a2330 Merge pull request #451 from dmitry-shibanov/fx-pipenv-python-version
• 96f494e trigger checks
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Sourced from actions/setup-python's releases.

v4.0.0

What's Changed

• Support for python-version-file input: #336

Example of usage:

- uses: actions/setup-python@v4
  with:
    python-version-file: '.python-version' # Read python version from a file
- run: python my_script.py

There is no default python version for this setup-python major version, the action requires to specify either python-version input or python-version-file input. If the python-version input is not specified the action will try to read required version from file from python-version-file input.

• Use pypyX.Y for PyPy python-version input: #349

Example of usage:

- uses: actions/setup-python@v4
  with:
    python-version: 'pypy3.9' # pypy-X.Y kept for backward compatibility
- run: python my_script.py

• RUNNER_TOOL_CACHE environment variable is equal AGENT_TOOLSDIRECTORY: #338

• Bugfix: create missing pypyX.Y symlinks: #347

• PKG_CONFIG_PATH environment variable: #400

• Added python-path output: #405 python-path output contains Python executable path.

• Updated zeit/ncc to vercel/ncc package: #393

• Bugfix: fixed output for prerelease version of poetry: #409

• Made pythonLocation environment variable consistent for Python and PyPy: #418

• Bugfix for 3.x-dev syntax: #417

• Other improvements: #318 #396 #384 #387 #388

Update actions/cache version to 2.0.2

In scope of this release we updated actions/cache package as the new version contains fixes related to GHES 3.5 (actions/setup-python#382)

Add "cache-hit" output and fix "python-version" output for PyPy

This release introduces new output cache-hit (actions/setup-python#373) and fix python-version output for PyPy (actions/setup-python#365)

The cache-hit output contains boolean value indicating that an exact match was found for the key. It shows that the action uses already existing cache or not. The output is available only if cache is enabled.

... (truncated)

• d09bd5e fix: 3.x-dev can install a 3.y version (#417)
• f72db17 Made env.var pythonLocation consistent for Python and PyPy (#418)
• 53e1529 add support for python-version-file (#336)
• 3f82819 Fix output for prerelease version of poetry (#409)
• 397252c Update zeit/ncc to vercel/ncc (#393)
• de977ad Merge pull request #412 from vsafonkin/v-vsafonkin/fix-poetry-cache-test
• 22c6af9 Change PyPy version to rebuild cache
• 081a3cf Merge pull request #405 from mayeut/interpreter-path
• ff70656 feature: add a python-path output
• fff15a2 Use pypyX.Y for PyPy python-version input (#349)
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Sourced from codecov/codecov-action's releases.

v3.1.0

3.1.0

Features

• #699 Incorporate xcode arguments for the Codecov uploader

Dependencies

• #694 build(deps-dev): bump @​vercel/ncc from 0.33.3 to 0.33.4
• #696 build(deps-dev): bump @​types/node from 17.0.23 to 17.0.25
• #698 build(deps-dev): bump jest-junit from 13.0.0 to 13.2.0

v3.0.0

Breaking Changes

• #689 Bump to node16 and small fixes

Features

• #688 Incorporate gcov arguments for the Codecov uploader

Dependencies

• #548 build(deps-dev): bump jest-junit from 12.2.0 to 13.0.0
• #603 [Snyk] Upgrade @​actions/core from 1.5.0 to 1.6.0
• #628 build(deps): bump node-fetch from 2.6.1 to 3.1.1
• #634 build(deps): bump node-fetch from 3.1.1 to 3.2.0
• #636 build(deps): bump openpgp from 5.0.1 to 5.1.0
• #652 build(deps-dev): bump @​vercel/ncc from 0.30.0 to 0.33.3
• #653 build(deps-dev): bump @​types/node from 16.11.21 to 17.0.18
• #659 build(deps-dev): bump @​types/jest from 27.4.0 to 27.4.1
• #667 build(deps): bump actions/checkout from 2 to 3
• #673 build(deps): bump node-fetch from 3.2.0 to 3.2.3
• #683 build(deps): bump minimist from 1.2.5 to 1.2.6
• #685 build(deps): bump @​actions/github from 5.0.0 to 5.0.1
• #681 build(deps-dev): bump @​types/node from 17.0.18 to 17.0.23
• #682 build(deps-dev): bump typescript from 4.5.5 to 4.6.3
• #676 build(deps): bump @​actions/exec from 1.1.0 to 1.1.1
• #675 build(deps): bump openpgp from 5.1.0 to 5.2.1

Sourced from codecov/codecov-action's changelog.

3.1.0

Features

• #699 Incorporate xcode arguments for the Codecov uploader

Dependencies

• #694 build(deps-dev): bump @​vercel/ncc from 0.33.3 to 0.33.4
• #696 build(deps-dev): bump @​types/node from 17.0.23 to 17.0.25
• #698 build(deps-dev): bump jest-junit from 13.0.0 to 13.2.0

3.0.0

Breaking Changes

• #689 Bump to node16 and small fixes

Features

• #688 Incorporate gcov arguments for the Codecov uploader

Dependencies

• #548 build(deps-dev): bump jest-junit from 12.2.0 to 13.0.0
• #603 [Snyk] Upgrade @​actions/core from 1.5.0 to 1.6.0
• #628 build(deps): bump node-fetch from 2.6.1 to 3.1.1
• #634 build(deps): bump node-fetch from 3.1.1 to 3.2.0
• #636 build(deps): bump openpgp from 5.0.1 to 5.1.0
• #652 build(deps-dev): bump @​vercel/ncc from 0.30.0 to 0.33.3
• #653 build(deps-dev): bump @​types/node from 16.11.21 to 17.0.18
• #659 build(deps-dev): bump @​types/jest from 27.4.0 to 27.4.1
• #667 build(deps): bump actions/checkout from 2 to 3
• #673 build(deps): bump node-fetch from 3.2.0 to 3.2.3
• #683 build(deps): bump minimist from 1.2.5 to 1.2.6
• #685 build(deps): bump @​actions/github from 5.0.0 to 5.0.1
• #681 build(deps-dev): bump @​types/node from 17.0.18 to 17.0.23
• #682 build(deps-dev): bump typescript from 4.5.5 to 4.6.3
• #676 build(deps): bump @​actions/exec from 1.1.0 to 1.1.1
• #675 build(deps): bump openpgp from 5.1.0 to 5.2.1

• 81cd2dc Merge pull request #699 from codecov/feat-xcode
• a03184e feat: add xcode support
• 6a6a9ae Merge pull request #694 from codecov/dependabot/npm_and_yarn/vercel/ncc-0.33.4
• 92a872a Merge pull request #696 from codecov/dependabot/npm_and_yarn/types/node-17.0.25
• 43a9c18 Merge pull request #698 from codecov/dependabot/npm_and_yarn/jest-junit-13.2.0
• 13ce822 Merge pull request #690 from codecov/ci-v3
• 4d6dbaa build(deps-dev): bump jest-junit from 13.0.0 to 13.2.0
• 98f0f19 build(deps-dev): bump @​types/node from 17.0.23 to 17.0.25
• d3021d9 build(deps-dev): bump @​vercel/ncc from 0.33.3 to 0.33.4
• 2c83f35 Update makefile to v3
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Sourced from actions/checkout's releases.

v3.0.2

What's Changed

• Add set-safe-directory input to allow customers to take control. by @​TingluoHuang in actions/checkout#770
• Prepare changelog for v3.0.2. by @​TingluoHuang in actions/checkout#777

Full Changelog: https://github.com/actions/checkout/compare/v3...v3.0.2

v3.0.1

• Fixed an issue where checkout failed to run in container jobs due to the new git setting safe.directory
• Bumped various npm package versions

v3.0.0

• Updated to the node16 runtime by default
  • This requires a minimum Actions Runner version of v2.285.0 to run, which is by default available in GHES 3.4 or later.

v2.4.2

What's Changed

• Add set-safe-directory input to allow customers to take control. (#770) by @​TingluoHuang in actions/checkout#776
• Prepare changelog for v2.4.2. by @​TingluoHuang in actions/checkout#778

Full Changelog: https://github.com/actions/checkout/compare/v2...v2.4.2

v2.4.1

• Fixed an issue where checkout failed to run in container jobs due to the new git setting safe.directory

Sourced from actions/checkout's changelog.

v3.0.2

• Add input set-safe-directory

v3.0.1

• Fixed an issue where checkout failed to run in container jobs due to the new git setting safe.directory
• Bumped various npm package versions

v3.0.0

• Update to node 16

v2.3.1

• Fix default branch resolution for .wiki and when using SSH

v2.3.0

• Fallback to the default branch

v2.2.0

• Fetch all history for all tags and branches when fetch-depth=0

v2.1.1

• Changes to support GHES (here and here)

v2.1.0

• Group output
• Changes to support GHES alpha release
• Persist core.sshCommand for submodules
• Add support ssh
• Convert submodule SSH URL to HTTPS, when not using SSH
• Add submodule support
• Follow proxy settings
• Fix ref for pr closed event when a pr is merged
• Fix issue checking detached when git less than 2.22

v2.0.0

• Do not pass cred on command line
• Add input persist-credentials
• Fallback to REST API to download repo

v2 (beta)

• Improved fetch performance
  • The default behavior now fetches only the SHA being checked-out
• Script authenticated git commands

... (truncated)

• 2541b12 Prepare changelog for v3.0.2. (#777)
• 0ffe6f9 Add set-safe-directory input to allow customers to take control. (#770)
• dcd71f6 Enforce safe directory (#762)
• add3486 Patch to fix the dependbot alert. (#744)
• 5126516 Bump minimist from 1.2.5 to 1.2.6 (#741)
• d50f8ea Add v3.0 release information to changelog (#740)
• 2d1c119 update test workflows to checkout v3 (#709)
• a12a394 update readme for v3 (#708)
• 8f9e05e Update to node 16 (#689)
• 230611d Change secret name for PAT to not start with GITHUB_ (#623)
• See full diff in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Sourced from actions/checkout's releases.

v3.0.1

• Fixed an issue where checkout failed to run in container jobs due to the new git setting safe.directory
• Bumped various npm package versions

v3.0.0

• Updated to the node16 runtime by default
  • This requires a minimum Actions Runner version of v2.285.0 to run, which is by default available in GHES 3.4 or later.

v2.4.1

• Fixed an issue where checkout failed to run in container jobs due to the new git setting safe.directory

Sourced from actions/checkout's changelog.

v3.0.1

• Fixed an issue where checkout failed to run in container jobs due to the new git setting safe.directory
• Bumped various npm package versions

v3.0.0

• Update to node 16

v2.3.1

• Fix default branch resolution for .wiki and when using SSH

v2.3.0

• Fallback to the default branch

v2.2.0

• Fetch all history for all tags and branches when fetch-depth=0

v2.1.1

• Changes to support GHES (here and here)

v2.1.0

• Group output
• Changes to support GHES alpha release
• Persist core.sshCommand for submodules
• Add support ssh
• Convert submodule SSH URL to HTTPS, when not using SSH
• Add submodule support
• Follow proxy settings
• Fix ref for pr closed event when a pr is merged
• Fix issue checking detached when git less than 2.22

v2.0.0

• Do not pass cred on command line
• Add input persist-credentials
• Fallback to REST API to download repo

v2 (beta)

• Improved fetch performance
  • The default behavior now fetches only the SHA being checked-out
• Script authenticated git commands
  • Persists with.token in the local git config
  • Enables your scripts to run authenticated git commands
  • Post-job cleanup removes the token

... (truncated)

• dcd71f6 Enforce safe directory (#762)
• add3486 Patch to fix the dependbot alert. (#744)
• 5126516 Bump minimist from 1.2.5 to 1.2.6 (#741)
• d50f8ea Add v3.0 release information to changelog (#740)
• 2d1c119 update test workflows to checkout v3 (#709)
• a12a394 update readme for v3 (#708)
• 8f9e05e Update to node 16 (#689)
• 230611d Change secret name for PAT to not start with GITHUB_ (#623)
• See full diff in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Sourced from actions/setup-python's releases.

Update actions/cache version to 2.0.2

In scope of this release we updated actions/cache package as the new version contains fixes related to GHES 3.5 (actions/setup-python#382)

Add "cache-hit" output and fix "python-version" output for PyPy

This release introduces new output cache-hit (actions/setup-python#373) and fix python-version output for PyPy (actions/setup-python#365)

The cache-hit output contains boolean value indicating that an exact match was found for the key. It shows that the action uses already existing cache or not. The output is available only if cache is enabled.

The python-version contains version of Python or PyPy.

Support caching poetry dependencies and caching on GHES 3.5

• In the scope of this release, we added support for caching from GHES 3.5 and fixed the download issue for files > 2GB during restore.
• Caching poetry dependencies

steps:
- uses: actions/checkout@v3
- name: Install poetry
  run: pipx install poetry
- uses: actions/setup-python@v3
  with:
    python-version: '3.9'
    cache: 'poetry'
- run: poetry install
- run: poetry run pytest

v3.0.0

What's Changed

• Update default runtime to node16 (actions/setup-python#340)
• Update package-lock.json file version to 2, @types/node to 16.11.25 and typescript to 4.2.3 (actions/setup-python#341)
• Remove legacy pypy2 and pypy3 keywords (actions/setup-python#342)

Breaking Changes

With the update to Node 16, all scripts will now be run with Node 16 rather than Node 12.

This new major release removes support of legacy pypy2 and pypy3 keywords. Please use more specific and flexible syntax to specify a PyPy version:

jobs:
  build:
    runs-on: ubuntu-latest
    strategy:
      matrix:
        python-version:
        - 'pypy-2.7' # the latest available version of PyPy that supports Python 2.7
        - 'pypy-3.8' # the latest available version of PyPy that supports Python 3.8
        - 'pypy-3.8-v7.3.8' # Python 3.8 and PyPy 7.3.8
    steps:
    - uses: actions/checkout@v2
    - uses: actions/setup-python@v3
      with:
        python-version: ${{ matrix.python-version }}
</tr></table> 

... (truncated)

• 98f2ad0 Updated @​actions/cache (#382)
• 5d6f0c8 ci(workflow): add 'npm' cache for actions/setup-node in .github/workflows (#379)
• 21c0493 Cache hit output (#373)
• 7933d5a Add pyton-version to setup PyPy output (#365)
• 7885ec3 Rework pipenv caching test (#375)
• 9c644ca Update README.md to fix setup-python version in example (#368)
• 3e8e90e dist fix (#367)
• 05fb98d Cache on ghes (#363)
• 6c56602 Merge pull request #281 from patrick91/feature/poetry-caching
• 9516be8 Merge pull request #358 from actions/brcrista/codeql-main
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Sourced from actions/checkout's changelog.

v3.0.0

• Update to node 16

v2.3.1

• Fix default branch resolution for .wiki and when using SSH

v2.3.0

• Fallback to the default branch

v2.2.0

• Fetch all history for all tags and branches when fetch-depth=0

v2.1.1

• Changes to support GHES (here and here)

v2.1.0

• Group output
• Changes to support GHES alpha release
• Persist core.sshCommand for submodules
• Add support ssh
• Convert submodule SSH URL to HTTPS, when not using SSH
• Add submodule support
• Follow proxy settings
• Fix ref for pr closed event when a pr is merged
• Fix issue checking detached when git less than 2.22

v2.0.0

• Do not pass cred on command line
• Add input persist-credentials
• Fallback to REST API to download repo

v2 (beta)

• Improved fetch performance
  • The default behavior now fetches only the SHA being checked-out
• Script authenticated git commands
  • Persists with.token in the local git config
  • Enables your scripts to run authenticated git commands
  • Post-job cleanup removes the token
  • Coming soon: Opt out by setting with.persist-credentials to false
• Creates a local branch
  • No longer detached HEAD when checking out a branch
  • A local branch is created with the corresponding upstream branch set

... (truncated)

• a12a394 update readme for v3 (#708)
• 8f9e05e Update to node 16 (#689)
• 230611d Change secret name for PAT to not start with GITHUB_ (#623)
• See full diff in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Sourced from actions/setup-python's releases.

Add support to install multiple python versions

In scope of this release we added support to install multiple python versions. For this you can try to use this snippet:

    - uses: actions/setup-python@v4
      with:
        python-version: |
            3.8
            3.9
            3.10

Besides, we changed logic with throwing the error for GHES if cache is unavailable to warn (actions/setup-python#566).

Improve error handling and messages

In scope of this release we added improved error message to put operating system and its version in the logs (actions/setup-python#559). Besides, the release

• fixes issue about specifying architecture for pypy-nightly on Windows with related pull request.
• improves error handling for Http Errors (actions/setup-python#511).
• updates minimatch (actions/setup-python#558).

v4.3.0

• Update @​actions/core to 1.10.0 version #517
• Update @​actions/cache to 3.0.4 version #499
• Only use github.token on github.com #443
• Improvement of documentation #477 #479 #491 #492

Add check-latest input and bug fixes

In scope of this release we add the check-latest input. If check-latest is set to true, the action first checks if the cached version is the latest one. If the locally cached version is not the most up-to-date, the version will then be downloaded from python-versions repository. By default check-latest is set to false. For PyPy it will to try to reach https://downloads.python.org/pypy/versions.json

Example of usage:

steps:
  - uses: actions/checkout@v3
  - uses: actions/setup-python@v4
    with:
      python-version: '3.9'
      check-latest: true
  - run: python --version

Besides, it includes such changes as

• Resolved logs for python-version and file inputs: actions/setup-python#465
• Added linux os release info to primary key: actions/setup-python#467
• Added fix to change Python versions for poetry: actions/setup-python#445
• Fix Tool Path handling for self-hosted runners: actions/setup-python#466

v4.1.0

In scope of this pull request we updated actions/cache package as the new version contains fixes for caching error handling. Moreover, we added a new input update-environment. This option allows to specify if the action shall update environment variables (default) or not.

Update-environment input

... (truncated)

• 5ccb29d Install multiple python versions (#567)
• c3e0339 Update action to use reusable workflows (#569)
• 206e984 refactor: Use early return pattern to avoid nested conditions (#566)
• 2c3dd9e Add OS info to the error message (#559)
• 76bbdfa Update minimatch (#558)
• 1aafadc Caching projects that use setup.py (#549)
• b80efd6 Update to latest actions/publish-action (#546)
• 5cddb27 Recommend setting python-version (#545)
• 47c4a7a fix(ci): run .github/workflows/workflow.yml on ubuntu-20.04 (#535)
• af57b64 Extend docu regarding rate limit issues. (#510)
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Sourced from actions/checkout's releases.

v3.2.0

What's Changed

• Add GitHub Action to perform release by @​rentziass in actions/checkout#942
• Fix status badge by @​ScottBrenner in actions/checkout#967
• Replace datadog/squid with ubuntu/squid Docker image by @​cory-miller in actions/checkout#1002
• Wrap pipeline commands for submoduleForeach in quotes by @​jokreliable in actions/checkout#964
• Update @​actions/io to 1.1.2 by @​cory-miller in actions/checkout#1029
• Upgrading version to 3.2.0 by @​vmjoseph in actions/checkout#1039

New Contributors

• @​ScottBrenner made their first contribution in actions/checkout#967
• @​cory-miller made their first contribution in actions/checkout#1002
• @​jokreliable made their first contribution in actions/checkout#964
• @​vmjoseph made their first contribution in actions/checkout#1039

Full Changelog: https://github.com/actions/checkout/compare/v3...v3.2.0

v3.1.0

What's Changed

• Inject GitHub host to be able to clone from another GitHub instance by @​peter-murray in actions/checkout#922
• Bump @​actions/core to 1.10.0 by @​rentziass in actions/checkout#939

New Contributors

• @​peter-murray made their first contribution in actions/checkout#922
• @​rentziass made their first contribution in actions/checkout#939

Full Changelog: https://github.com/actions/checkout/compare/v3.0.2...v3.1.0

v3.0.2

What's Changed

• Add set-safe-directory input to allow customers to take control. by @​TingluoHuang in actions/checkout#770
• Prepare changelog for v3.0.2. by @​TingluoHuang in actions/checkout#777

Full Changelog: https://github.com/actions/checkout/compare/v3...v3.0.2

v3.0.1

• Fixed an issue where checkout failed to run in container jobs due to the new git setting safe.directory
• Bumped various npm package versions

v3.0.0

• Updated to the node16 runtime by default
  • This requires a minimum Actions Runner version of v2.285.0 to run, which is by default available in GHES 3.4 or later.

v2.5.0

What's Changed

• Update @​actions/core to 1.10.0 by @​rentziass in actions/checkout#962

Full Changelog: https://github.com/actions/checkout/compare/v2...v2.5.0

... (truncated)

Sourced from actions/checkout's changelog.

Changelog

v3.1.0

• Use @​actions/core saveState and getState
• Add github-server-url input

v3.0.2

• Add input set-safe-directory

v3.0.1

• Fixed an issue where checkout failed to run in container jobs due to the new git setting safe.directory
• Bumped various npm package versions

v3.0.0

• Update to node 16

v2.3.1

• Fix default branch resolution for .wiki and when using SSH

v2.3.0

• Fallback to the default branch

v2.2.0

• Fetch all history for all tags and branches when fetch-depth=0

v2.1.1

• Changes to support GHES (here and here)

v2.1.0

• Group output
• Changes to support GHES alpha release
• Persist core.sshCommand for submodules
• Add support ssh
• Convert submodule SSH URL to HTTPS, when not using SSH
• Add submodule support
• Follow proxy settings
• Fix ref for pr closed event when a pr is merged
• Fix issue checking detached when git less than 2.22

v2.0.0

• Do not pass cred on command line
• Add input persist-credentials
• Fallback to REST API to download repo

... (truncated)

• 755da8c 3.2.0 (#1039)
• 26d48e8 Update @​actions/io to 1.1.2 (#1029)
• bf08527 wrap pipeline commands for submoduleForeach in quotes (#964)
• 5c3ccc2 Replace datadog/squid with ubuntu/squid Docker image (#1002)
• 1f9a0c2 README - fix status badge (#967)
• 8230315 Add workflow to update a main version (#942)
• 93ea575 Prepare release v3.1.0 (#940)
• 6a84743 Bump @​actions/core to 1.10.0 (#939)
• e6d535c Inject GitHub host to be able to clone from another GitHub instance (#922)
• 2541b12 Prepare changelog for v3.0.2. (#777)
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Sourced from conda-incubator/setup-miniconda's releases.

Version 2.2.0

v2.2.0 (2021-11-11)

Documentation

• #187 Document missing bundled conda for self hosted runners
• #200 Provided instructions on how to cache deployed environments for Miniforge variants.
• #246 Fix broken link in README.
• #251 Fix typo in README.
• #256 Update bash commands to include error flag.

Features

• #234 Add input option (run-post: false) to skip post processing.

Fixes

• #189 Error on miniconda-version not specified instead of when it is specified.
• #190 Add regression checks for pinning python version in the created environment.
• #209 Do not move non-existing files.
• #212 Fix caching example. No need to hardcode paths. Write date to step output.
• #230 Fix path handling inconsistency in installer caching.

Tasks and Maintenance

• #210 Use 'npm run ...' to run scripts.
• #233 Add deprecation warning on master branch.
• #252 use Node.js 16 instead of deprecated Node.js 12
• #257 Update dependencies.

#187: conda-incubator/setup-miniconda#187 #189: conda-incubator/setup-miniconda#189 #190: conda-incubator/setup-miniconda#190 #200: conda-incubator/setup-miniconda#200 #209: conda-incubator/setup-miniconda#209 #210: conda-incubator/setup-miniconda#210 #212: conda-incubator/setup-miniconda#212 #230: conda-incubator/setup-miniconda#230 #233: conda-incubator/setup-miniconda#233 #234: conda-incubator/setup-miniconda#234 #246: conda-incubator/setup-miniconda#246 #251: conda-incubator/setup-miniconda#251 #252: conda-incubator/setup-miniconda#252 #256: conda-incubator/setup-miniconda#256 #257: conda-incubator/setup-miniconda#257

Sourced from conda-incubator/setup-miniconda's changelog.

v2.2.0 (2021-11-11)

Documentation

• #187 Document missing bundled conda for self hosted runners
• #200 Provided instructions on how to cache deployed environments for Miniforge variants.
• #246 Fix broken link in README.
• #251 Fix typo in README.
• #256 Update bash commands to include error flag.

Features

• #234 Add input option (run-post: false) to skip post processing.

Fixes

• #189 Error on miniconda-version not specified instead of when it is specified.
• #190 Add regression checks for pinning python version in the created environment.
• #209 Do not move non-existing files.
• #212 Fix caching example. No need to hardcode paths. Write date to step output.
• #230 Fix path handling inconsistency in installer caching.

Tasks and Maintenance

• #210 Use 'npm run ...' to run scripts.
• #233 Add deprecation warning on master branch.
• #252 use Node.js 16 instead of deprecated Node.js 12
• #257 Update dependencies.

#187: conda-incubator/setup-miniconda#187 #189: conda-incubator/setup-miniconda#189 #190: conda-incubator/setup-miniconda#190 #200: conda-incubator/setup-miniconda#200 #209: conda-incubator/setup-miniconda#209 #210: conda-incubator/setup-miniconda#210 #212: conda-incubator/setup-miniconda#212 #230: conda-incubator/setup-miniconda#230 #233: conda-incubator/setup-miniconda#233 #234: conda-incubator/setup-miniconda#234 #246: conda-incubator/setup-miniconda#246 #251: conda-incubator/setup-miniconda#251 #252: conda-incubator/setup-miniconda#252 #256: conda-incubator/setup-miniconda#256 #257: conda-incubator/setup-miniconda#257

• 3b0f250 Update README
• bd486ef Merge pull request #259 from conda-incubator/update-badges
• cd741b1 Update badges and readme
• 446a13e Merge pull request #258 from conda-incubator/fix-caching-example
• b0e3d7d Add matrix for os for caching example
• 9a93a94 Merge pull request #257 from conda-incubator/goanpeca-patch-1
• 6f4a4ea re-add husky hook
• 7af7f76 Remove python 3.7 from workflows
• c0325fc Update changelog and prepare for 2.2.0 release
• d543785 Uopdate lint tules
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

How often will the code scanning analysis run?

By default, code scanning will trigger a scan with the CodeQL engine on the following events:

• On every pull request — to flag up potential security problems for you to investigate before merging a PR.
• On every push to your default branch and other protected branches — this keeps the analysis results on your repository’s Security tab up to date.
• Once a week at a fixed time — to make sure you benefit from the latest updated security analysis even when no code was committed or PRs were opened.

What will this cost?

Nothing! The CodeQL engine will run inside GitHub Actions, making use of your unlimited free compute minutes for public repositories.

What types of problems does CodeQL find?

The CodeQL engine that powers GitHub code scanning is the exact same engine that powers LGTM.com. The exact set of rules has been tweaked slightly, but you should see almost exactly the same types of alerts as you were used to on LGTM.com: we’ve enabled the security-and-quality query suite for you.

How do I upgrade my CodeQL engine?

No need! New versions of the CodeQL analysis are constantly deployed on GitHub.com; your repository will automatically benefit from the most recently released version.

The analysis doesn’t seem to be working

If you get an error in GitHub Actions that indicates that CodeQL wasn’t able to analyze your code, please follow the instructions here to debug the analysis.

How do I disable LGTM.com?

If you have LGTM’s automatic pull request analysis enabled, then you can follow these steps to disable the LGTM pull request analysis. You don’t actually need to remove your repository from LGTM.com; it will automatically be removed in the next few months as part of the deprecation of LGTM.com (more info here).

Which source code hosting platforms does code scanning support?

GitHub code scanning is deeply integrated within GitHub itself. If you’d like to scan source code that is hosted elsewhere, we suggest that you create a mirror of that code on GitHub.

How do I know this PR is legitimate?

This PR is filed by the official LGTM.com GitHub App, in line with the deprecation timeline that was announced on the official GitHub Blog. The proposed GitHub Action workflow uses the official open source GitHub CodeQL Action. If you have any other questions or concerns, please join the discussion here in the official GitHub community!

I have another question / how do I get in touch?

Please join the discussion here to ask further questions and send us suggestions!

Sourced from codecov/codecov-action's releases.

3.1.1

What's Changed

• Update deprecation warning by @​slifty in codecov/codecov-action#661
• Create codeql-analysis.yml by @​mitchell-codecov in codecov/codecov-action#593
• build(deps): bump node-fetch from 3.2.3 to 3.2.4 by @​dependabot in codecov/codecov-action#714
• build(deps-dev): bump typescript from 4.6.3 to 4.6.4 by @​dependabot in codecov/codecov-action#713
• README: fix typo by @​Evalir in codecov/codecov-action#712
• build(deps): bump github/codeql-action from 1 to 2 by @​dependabot in codecov/codecov-action#724
• build(deps-dev): bump @​types/jest from 27.4.1 to 27.5.0 by @​dependabot in codecov/codecov-action#717
• fix: Remove a blank row by @​johnmanjiro13 in codecov/codecov-action#725
• Update README.md with correct badge version by @​gsheni in codecov/codecov-action#726
• build(deps-dev): bump @​types/node from 17.0.25 to 17.0.33 by @​dependabot in codecov/codecov-action#729
• build(deps-dev): downgrade @​types/node to 16.11.35 by @​dependabot in codecov/codecov-action#734
• build(deps): bump actions/checkout from 2 to 3 by @​dependabot in codecov/codecov-action#723
• build(deps): bump @​actions/github from 5.0.1 to 5.0.3 by @​dependabot in codecov/codecov-action#733
• build(deps): bump @​actions/core from 1.6.0 to 1.8.2 by @​dependabot in codecov/codecov-action#732
• build(deps-dev): bump @​types/node from 16.11.35 to 16.11.36 by @​dependabot in codecov/codecov-action#737
• Create scorecards-analysis.yml by @​mitchell-codecov in codecov/codecov-action#633
• build(deps): bump ossf/scorecard-action from 1.0.1 to 1.1.0 by @​dependabot in codecov/codecov-action#749
• fix: add more verbosity to validation by @​thomasrockhu-codecov in codecov/codecov-action#747
• build(deps-dev): bump typescript from 4.6.4 to 4.7.3 by @​dependabot in codecov/codecov-action#755
• Regenerate scorecards-analysis.yml by @​mitchell-codecov in codecov/codecov-action#750
• build(deps-dev): bump @​types/node from 16.11.36 to 16.11.39 by @​dependabot in codecov/codecov-action#759
• build(deps-dev): bump @​types/node from 16.11.39 to 16.11.40 by @​dependabot in codecov/codecov-action#762
• build(deps-dev): bump @​vercel/ncc from 0.33.4 to 0.34.0 by @​dependabot in codecov/codecov-action#746
• build(deps): bump ossf/scorecard-action from 1.1.0 to 1.1.1 by @​dependabot in codecov/codecov-action#757
• build(deps): bump openpgp from 5.2.1 to 5.3.0 by @​dependabot in codecov/codecov-action#760
• build(deps): bump actions/upload-artifact from 2.3.1 to 3.1.0 by @​dependabot in codecov/codecov-action#748
• build(deps-dev): bump typescript from 4.7.3 to 4.7.4 by @​dependabot in codecov/codecov-action#766
• Switch to v3 by @​thomasrockhu in codecov/codecov-action#774
• Fix network entry in table by @​kevmoo in codecov/codecov-action#783
• Trim arguments after splitting them by @​mitchell-codecov in codecov/codecov-action#791
• build(deps): bump openpgp from 5.3.0 to 5.4.0 by @​dependabot in codecov/codecov-action#799
• build(deps): bump @​actions/core from 1.8.2 to 1.9.1 by @​dependabot in codecov/codecov-action#798
• Plumb failCi into verification function. by @​RobbieMcKinstry in codecov/codecov-action#769
• release: update changelog and version to 3.1.1 by @​thomasrockhu-codecov in codecov/codecov-action#828

New Contributors

• @​slifty made their first contribution in codecov/codecov-action#661
• @​Evalir made their first contribution in codecov/codecov-action#712
• @​johnmanjiro13 made their first contribution in codecov/codecov-action#725
• @​gsheni made their first contribution in codecov/codecov-action#726
• @​kevmoo made their first contribution in codecov/codecov-action#783
• @​RobbieMcKinstry made their first contribution in codecov/codecov-action#769

Full Changelog: https://github.com/codecov/codecov-action/compare/v3.1.0...v3.1.1

v3.1.0

3.1.0

Features

... (truncated)

Sourced from codecov/codecov-action's changelog.

3.1.1

Fixes

• #661 Update deprecation warning
• #593 Create codeql-analysis.yml
• #712 README: fix typo
• #725 fix: Remove a blank row
• #726 Update README.md with correct badge version
• #633 Create scorecards-analysis.yml
• #747 fix: add more verbosity to validation
• #750 Regenerate scorecards-analysis.yml
• #774 Switch to v3
• #783 Fix network entry in table
• #791 Trim arguments after splitting them
• #769 Plumb failCi into verification function.

Dependencies

• #713 build(deps-dev): bump typescript from 4.6.3 to 4.6.4
• #714 build(deps): bump node-fetch from 3.2.3 to 3.2.4
• #724 build(deps): bump github/codeql-action from 1 to 2
• #717 build(deps-dev): bump @​types/jest from 27.4.1 to 27.5.0
• #729 build(deps-dev): bump @​types/node from 17.0.25 to 17.0.33
• #734 build(deps-dev): downgrade @​types/node to 16.11.35
• #723 build(deps): bump actions/checkout from 2 to 3
• #733 build(deps): bump @​actions/github from 5.0.1 to 5.0.3
• #732 build(deps): bump @​actions/core from 1.6.0 to 1.8.2
• #737 build(deps-dev): bump @​types/node from 16.11.35 to 16.11.36
• #749 build(deps): bump ossf/scorecard-action from 1.0.1 to 1.1.0
• #755 build(deps-dev): bump typescript from 4.6.4 to 4.7.3
• #759 build(deps-dev): bump @​types/node from 16.11.36 to 16.11.39
• #762 build(deps-dev): bump @​types/node from 16.11.39 to 16.11.40
• #746 build(deps-dev): bump @​vercel/ncc from 0.33.4 to 0.34.0
• #757 build(deps): bump ossf/scorecard-action from 1.1.0 to 1.1.1
• #760 build(deps): bump openpgp from 5.2.1 to 5.3.0
• #748 build(deps): bump actions/upload-artifact from 2.3.1 to 3.1.0
• #766 build(deps-dev): bump typescript from 4.7.3 to 4.7.4
• #799 build(deps): bump openpgp from 5.3.0 to 5.4.0
• #798 build(deps): bump @​actions/core from 1.8.2 to 1.9.1

3.1.0

Features

• #699 Incorporate xcode arguments for the Codecov uploader

Dependencies

• #694 build(deps-dev): bump @​vercel/ncc from 0.33.3 to 0.33.4
• #696 build(deps-dev): bump @​types/node from 17.0.23 to 17.0.25
• #698 build(deps-dev): bump jest-junit from 13.0.0 to 13.2.0

3.0.0

Breaking Changes

• #689 Bump to node16 and small fixes

... (truncated)

• d9f34f8 release: update changelog and version to 3.1.1 (#828)
• 0e9e7b4 Plumb failCi into verification function. (#769)
• 7f20bd4 build(deps): bump @​actions/core from 1.8.2 to 1.9.1 (#798)
• 13bc253 build(deps): bump openpgp from 5.3.0 to 5.4.0 (#799)
• 5c0da1b Trim arguments after splitting them (#791)
• 68d5f6d Fix network entry in table (#783)
• 2a829b9 Switch to v3 (#774)
• 8e09eaf build(deps-dev): bump typescript from 4.7.3 to 4.7.4 (#766)
• 39e2229 build(deps): bump actions/upload-artifact from 2.3.1 to 3.1.0 (#748)
• b2b7703 build(deps): bump openpgp from 5.2.1 to 5.3.0 (#760)
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)