[PR #4151] [MERGED] build(deps): bump webfactory/ssh-agent from 0.7.0 to 0.8.0 #4226

New issue

Closed

opened 2026-02-27 04:54:20 +03:00 by kerem · 0 comments

kerem commented

2026-02-27 04:54:20 +03:00

Owner

📋 Pull Request Information

Original PR: https://github.com/GameServerManagers/LinuxGSM/pull/4151
Author: @dependabot[bot]
Created: 3/27/2023
Status: ✅ Merged
Merged: 4/1/2023
Merged by: @dgibbs64

Base: develop ← Head: dependabot/github_actions/webfactory/ssh-agent-0.8.0

📝 Commits (2)

51031eb chore: auto add game server requests to gh project
2e24054 build(deps): bump webfactory/ssh-agent from 0.7.0 to 0.8.0

📊 Changes

2 files changed (+19 additions, -2 deletions)

View changed files

➕ .github/workflows/add-to-project.yml (+17 -0)
📝 .github/workflows/git-sync.yml (+2 -2)

📄 Description

Bumps webfactory/ssh-agent from 0.7.0 to 0.8.0.

Release notes

Sourced from webfactory/ssh-agent's releases.

SSH host keys no longer managed – read below 👇

Starting with this release, this action no longer writes GitHub's SSH host keys into the known_hosts SSH config file upon start.

GitHub changed their host keys on short notice this morning, see https://github.blog/2023-03-23-we-updated-our-rsa-ssh-host-key/. We took this as an opportunity to stop maintaining GH SSH keys in the code shipped with this action (#171).

What you need to do:

On GitHub hosted runners, nothing. ✔︎ These runners ship with SSH host keys (for github.com) maintained by directly by GitHub.

On self-hosted runners, review and fix your SSH known_hosts file:

First, you'll find it bloated with redundant entries for github.com, as described in #106. Remove these entries.

Review https://github.blog/2023-03-23-we-updated-our-rsa-ssh-host-key/. You probably removed the old (invalid) SSH key in the previous step.

Configure GitHub's current SSH keys as documented on https://docs.github.com/en/authentication/keeping-your-account-and-data-secure/githubs-ssh-key-fingerprints

As long as versions before v0.8.0 of this action here are run on the self-hosted runner, the old entries will come back. Keep an eye on it, possibly you'll have to rinse & repeat.

Other code changes in this release

Update to actions/checkout@v3 by @mpdude in webfactory/ssh-agent#143

Allow the user to override the commands for git, ssh-agent, and ssh-add by @DilumAluthge in webfactory/ssh-agent#154

New Contributors

@prhiggins made their first contribution in webfactory/ssh-agent#153

@kjarkur made their first contribution in webfactory/ssh-agent#147

@DilumAluthge made their first contribution in webfactory/ssh-agent#154

Full Changelog: https://github.com/webfactory/ssh-agent/compare/v0.7.0...v0.8.0

Changelog

Sourced from webfactory/ssh-agent's changelog.

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[Unreleased]

Commits

d4b9b8f Stop adding GitHub SSH keys (#171)
ea17a05 Add missing semicolons (#159)
9fbc246 Clarify usage for Docker build processes, especially with deployment keys (#145)
6f828cc Allow the user to override the commands for git, ssh-agent, and ssh-add...
209e2d7 Fix a typo in the README.md (#146)
18ff706 Update README.md (#147)
2996779 Replace 0.6.0 references with 0.7.0 in README.md (#153)
4512be8 Update to actions/checkout@v3 (#143)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/GameServerManagers/LinuxGSM/pull/4151 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 3/27/2023 **Status:** ✅ Merged **Merged:** 4/1/2023 **Merged by:** [@dgibbs64](https://github.com/dgibbs64) **Base:** `develop` ← **Head:** `dependabot/github_actions/webfactory/ssh-agent-0.8.0` --- ### 📝 Commits (2) - [`51031eb`](https://github.com/GameServerManagers/LinuxGSM/commit/51031eb71ab3cf5c7fc31b7825271ed63a1ba882) chore: auto add game server requests to gh project - [`2e24054`](https://github.com/GameServerManagers/LinuxGSM/commit/2e24054928dd914993438347e0819dc4f0957ead) build(deps): bump webfactory/ssh-agent from 0.7.0 to 0.8.0 ### 📊 Changes **2 files changed** (+19 additions, -2 deletions) <details> <summary>View changed files</summary> ➕ `.github/workflows/add-to-project.yml` (+17 -0) 📝 `.github/workflows/git-sync.yml` (+2 -2) </details> ### 📄 Description Bumps [webfactory/ssh-agent](https://github.com/webfactory/ssh-agent) from 0.7.0 to 0.8.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/webfactory/ssh-agent/releases">webfactory/ssh-agent's releases</a>.</em></p> <blockquote> <h2>SSH host keys no longer managed – read below 👇</h2> <p>Starting with this release, this action no longer writes GitHub's SSH host keys into the <code>known_hosts</code> SSH config file upon start.</p> <p>GitHub changed their host keys on short notice this morning, see <a href="https://github.blog/2023-03-23-we-updated-our-rsa-ssh-host-key/">https://github.blog/2023-03-23-we-updated-our-rsa-ssh-host-key/</a>. We took this as an opportunity to stop maintaining GH SSH keys in the code shipped with this action (<a href="https://redirect.github.com/webfactory/ssh-agent/issues/171">#171</a>).</p> <p>What you need to do:</p> <ul> <li>On GitHub hosted runners, nothing. ✔︎ These runners ship with SSH host keys (for <code>github.com</code>) maintained by directly by GitHub.</li> <li>On self-hosted runners, review and fix your SSH <code>known_hosts</code> file: <ul> <li>First, you'll find it bloated with redundant entries for <code>github.com</code>, as described in <a href="https://redirect.github.com/webfactory/ssh-agent/issues/106">#106</a>. Remove these entries.</li> <li>Review <a href="https://github.blog/2023-03-23-we-updated-our-rsa-ssh-host-key/">https://github.blog/2023-03-23-we-updated-our-rsa-ssh-host-key/</a>. You probably removed the old (invalid) SSH key in the previous step.</li> <li>Configure GitHub's current SSH keys as documented on <a href="https://docs.github.com/en/authentication/keeping-your-account-and-data-secure/githubs-ssh-key-fingerprints">https://docs.github.com/en/authentication/keeping-your-account-and-data-secure/githubs-ssh-key-fingerprints</a></li> <li>As long as versions before <code>v0.8.0</code> of this action here are run on the self-hosted runner, the old entries will come back. Keep an eye on it, possibly you'll have to rinse & repeat.</li> </ul> </li> </ul> <h4>Other code changes in this release</h4> <ul> <li>Update to <code>actions/checkout@v3</code> by <a href="https://github.com/mpdude"><code>@mpdude</code></a> in <a href="https://redirect.github.com/webfactory/ssh-agent/pull/143">webfactory/ssh-agent#143</a></li> <li>Allow the user to override the commands for <code>git</code>, <code>ssh-agent</code>, and <code>ssh-add</code> by <a href="https://github.com/DilumAluthge"><code>@DilumAluthge</code></a> in <a href="https://redirect.github.com/webfactory/ssh-agent/pull/154">webfactory/ssh-agent#154</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/prhiggins"><code>@prhiggins</code></a> made their first contribution in <a href="https://redirect.github.com/webfactory/ssh-agent/pull/153">webfactory/ssh-agent#153</a></li> <li><a href="https://github.com/kjarkur"><code>@kjarkur</code></a> made their first contribution in <a href="https://redirect.github.com/webfactory/ssh-agent/pull/147">webfactory/ssh-agent#147</a></li> <li><a href="https://github.com/DilumAluthge"><code>@DilumAluthge</code></a> made their first contribution in <a href="https://redirect.github.com/webfactory/ssh-agent/pull/154">webfactory/ssh-agent#154</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/webfactory/ssh-agent/compare/v0.7.0...v0.8.0">https://github.com/webfactory/ssh-agent/compare/v0.7.0...v0.8.0</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/webfactory/ssh-agent/blob/master/CHANGELOG.md">webfactory/ssh-agent's changelog</a>.</em></p> <blockquote> <h1>Changelog</h1> <p>All notable changes to this project will be documented in this file.</p> <p>The format is based on <a href="https://keepachangelog.com/en/1.0.0/">Keep a Changelog</a>, and this project adheres to <a href="https://semver.org/spec/v2.0.0.html">Semantic Versioning</a>.</p> <h2>[Unreleased]</h2> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/webfactory/ssh-agent/commit/d4b9b8ff72958532804b70bbe600ad43b36d5f2e"><code>d4b9b8f</code></a> Stop adding GitHub SSH keys (<a href="https://redirect.github.com/webfactory/ssh-agent/issues/171">#171</a>)</li> <li><a href="https://github.com/webfactory/ssh-agent/commit/ea17a056b908d85ca1f46c275ab91389eb65c9fa"><code>ea17a05</code></a> Add missing semicolons (<a href="https://redirect.github.com/webfactory/ssh-agent/issues/159">#159</a>)</li> <li><a href="https://github.com/webfactory/ssh-agent/commit/9fbc246995ce195568ea31d1110c161283c89684"><code>9fbc246</code></a> Clarify usage for Docker build processes, especially with deployment keys (<a href="https://redirect.github.com/webfactory/ssh-agent/issues/145">#145</a>)</li> <li><a href="https://github.com/webfactory/ssh-agent/commit/6f828ccb51b0d042f4783ff45710decae9836d37"><code>6f828cc</code></a> Allow the user to override the commands for <code>git</code>, <code>ssh-agent</code>, and <code>ssh-add</code>...</li> <li><a href="https://github.com/webfactory/ssh-agent/commit/209e2d72ff4a448964d26610aceaaf1b3f8764c6"><code>209e2d7</code></a> Fix a typo in the README.md (<a href="https://redirect.github.com/webfactory/ssh-agent/issues/146">#146</a>)</li> <li><a href="https://github.com/webfactory/ssh-agent/commit/18ff7066d37af765c4268af534ab1500bc3ea7f9"><code>18ff706</code></a> Update README.md (<a href="https://redirect.github.com/webfactory/ssh-agent/issues/147">#147</a>)</li> <li><a href="https://github.com/webfactory/ssh-agent/commit/2996779c087b05cb911c8fefc8403a8af8d8f2d4"><code>2996779</code></a> Replace 0.6.0 references with 0.7.0 in README.md (<a href="https://redirect.github.com/webfactory/ssh-agent/issues/153">#153</a>)</li> <li><a href="https://github.com/webfactory/ssh-agent/commit/4512be8010f262a32b74d4b4a59300d76bdd43c6"><code>4512be8</code></a> Update to <code>actions/checkout@v3</code> (<a href="https://redirect.github.com/webfactory/ssh-agent/issues/143">#143</a>)</li> <li>See full diff in <a href="https://github.com/webfactory/ssh-agent/compare/v0.7.0...v0.8.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=webfactory/ssh-agent&package-manager=github_actions&previous-version=0.7.0&new-version=0.8.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>