[PR #1173] [MERGED] build(deps): bump github.com/rhysd/actionlint from 1.6.12 to 1.6.13 #1818

Closed
opened 2026-03-01 21:52:49 +03:00 by kerem · 0 comments
Owner

📋 Pull Request Information

Original PR: https://github.com/nektos/act/pull/1173
Author: @dependabot[bot]
Created: 5/18/2022
Status: Merged
Merged: 5/18/2022
Merged by: @mergify[bot]

Base: masterHead: dependabot/go_modules/github.com/rhysd/actionlint-1.6.13


📝 Commits (1)

  • 11567b3 build(deps): bump github.com/rhysd/actionlint from 1.6.12 to 1.6.13

📊 Changes

2 files changed (+12 additions, -11 deletions)

View changed files

📝 go.mod (+4 -4)
📝 go.sum (+8 -7)

📄 Description

Bumps github.com/rhysd/actionlint from 1.6.12 to 1.6.13.

Release notes

Sourced from github.com/rhysd/actionlint's releases.

v1.6.13

  • secrets: inherit in reusable workflow is now supported (#138)
    on:
      workflow_dispatch:
    

    jobs: pass-secrets-to-workflow: uses: ./.github/workflows/called-workflow.yml secrets: inherit

    This means that actionlint cannot know the workflow inherits secrets or not when checking a reusable workflow. To support secrets: inherit without giving up on checking secrets context, actionlint assumes the followings. See the document for the details.

    • when secrets: is omitted in a reusable workflow, the workflow inherits secrets from a caller
    • when secrets: exists in a reusable workflow, the workflow inherits no other secret
  • macos-12 runner is now supported (#134, thanks @​shogo82148)
  • ubuntu-22.04 runner is now supported (#142, thanks @​shogo82148)
  • concurrency is available on reusable workflow call (#136)
    jobs:
      checks:
        concurrency:
          group: ${{ github.ref }}-${{ github.workflow }}
          cancel-in-progress: true
        uses: ./path/to/workflow.yaml
    
  • pre-commit hook now uses a fixed version of actionlint. For example, the following configuration continues to use actionlint v1.6.13 even if v1.6.14 is released. (#116)
    repos:
      - repo: https://github.com/rhysd/actionlint
        rev: v1.6.13
        hooks:
          - id: actionlint-docker
    
  • Update popular actions data set including new versions of docker/*, haskell/actions/setup, actions/setup-go, ... (#140, thanks @​bflad)
  • Update Go module dependencies
Changelog

Sourced from github.com/rhysd/actionlint's changelog.

v1.6.13 - 18 May 2022

  • secrets: inherit in reusable workflow is now supported (#138)
    on:
      workflow_dispatch:
    

    jobs: pass-secrets-to-workflow: uses: ./.github/workflows/called-workflow.yml secrets: inherit

    This means that actionlint cannot know the workflow inherits secrets or not when checking a reusable workflow. To support secrets: inherit without giving up on checking secrets context, actionlint assumes the followings. See the document for the details.

    • when secrets: is omitted in a reusable workflow, the workflow inherits secrets from a caller
    • when secrets: exists in a reusable workflow, the workflow inherits no other secret
  • macos-12 runner is now supported (#134, thanks @​shogo82148)
  • ubuntu-22.04 runner is now supported (#142, thanks @​shogo82148)
  • concurrency is available on reusable workflow call (#136)
    jobs:
      checks:
        concurrency:
          group: ${{ github.ref }}-${{ github.workflow }}
          cancel-in-progress: true
        uses: ./path/to/workflow.yaml
    
  • pre-commit hook now uses a fixed version of actionlint. For example, the following configuration continues to use actionlint v1.6.13 even if v1.6.14 is released. (#116)
    repos:
      - repo: https://github.com/rhysd/actionlint
        rev: v1.6.13
        hooks:
          - id: actionlint-docker
    
  • Update popular actions data set including new versions of docker/*, haskell/actions/setup, actions/setup-go, ... (#140, thanks @​bflad)
  • Update Go module dependencies

[Changes][v1.6.13]

Commits
  • e4caae9 bump up version to v1.6.13
  • 2334ba7 Merge branch 'issue-136'
  • 8bca30b describe behavior of secrets: considering secrets inheritance
  • f26448b assume reusable workflow inherits secrets only when secrets: is omitted
  • f3909bd Merge pull request #142 from shogo82148/ubuntu-22.04-is-now-public-beta
  • 09a60b0 ubuntu-22.04 is now public beta
  • 8a69b50 push version bump commit to main in bump-version.bash
  • cd139ad Merge branch 'fix-secrets-inherit' (#138)
  • 018dc75 assume reusable workflow inherits secrets when secrets is not declared
  • 4857e80 fix parsing secrets: inherit in use of workflow call
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/nektos/act/pull/1173 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 5/18/2022 **Status:** ✅ Merged **Merged:** 5/18/2022 **Merged by:** [@mergify[bot]](https://github.com/apps/mergify) **Base:** `master` ← **Head:** `dependabot/go_modules/github.com/rhysd/actionlint-1.6.13` --- ### 📝 Commits (1) - [`11567b3`](https://github.com/nektos/act/commit/11567b33a46473474235dbc0dfa8cb89d8d09165) build(deps): bump github.com/rhysd/actionlint from 1.6.12 to 1.6.13 ### 📊 Changes **2 files changed** (+12 additions, -11 deletions) <details> <summary>View changed files</summary> 📝 `go.mod` (+4 -4) 📝 `go.sum` (+8 -7) </details> ### 📄 Description Bumps [github.com/rhysd/actionlint](https://github.com/rhysd/actionlint) from 1.6.12 to 1.6.13. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/rhysd/actionlint/releases">github.com/rhysd/actionlint's releases</a>.</em></p> <blockquote> <h2>v1.6.13</h2> <ul> <li><a href="https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#onworkflow_callsecretsinherit"><code>secrets: inherit</code> in reusable workflow</a> is now supported (<a href="https://github-redirect.dependabot.com/rhysd/actionlint/issues/138">#138</a>) <pre lang="yaml"><code>on: workflow_dispatch: <p>jobs: pass-secrets-to-workflow: uses: ./.github/workflows/called-workflow.yml secrets: inherit </code></pre> This means that actionlint cannot know the workflow inherits secrets or not when checking a reusable workflow. To support <code>secrets: inherit</code> without giving up on checking <code>secrets</code> context, actionlint assumes the followings. See <a href="https://github.com/rhysd/actionlint/blob/main/docs/checks.md#check-types-of-inputs-and-secrets-in-reusable-workflow">the document</a> for the details.</p> <ul> <li>when <code>secrets:</code> is omitted in a reusable workflow, the workflow inherits secrets from a caller</li> <li>when <code>secrets:</code> exists in a reusable workflow, the workflow inherits no other secret</li> </ul> </li> <li><a href="https://github.blog/changelog/2022-04-25-github-actions-public-beta-of-macos-12-for-github-hosted-runners-is-now-available/"><code>macos-12</code> runner</a> is now supported (<a href="https://github-redirect.dependabot.com/rhysd/actionlint/issues/134">#134</a>, thanks <a href="https://github.com/shogo82148"><code>@​shogo82148</code></a>)</li> <li><a href="https://github.blog/changelog/2022-05-10-github-actions-beta-of-ubuntu-22-04-for-github-hosted-runners-is-now-available/"><code>ubuntu-22.04</code> runner</a> is now supported (<a href="https://github-redirect.dependabot.com/rhysd/actionlint/issues/142">#142</a>, thanks <a href="https://github.com/shogo82148"><code>@​shogo82148</code></a>)</li> <li><code>concurrency</code> is available on reusable workflow call (<a href="https://github-redirect.dependabot.com/rhysd/actionlint/issues/136">#136</a>) <pre lang="yaml"><code>jobs: checks: concurrency: group: ${{ github.ref }}-${{ github.workflow }} cancel-in-progress: true uses: ./path/to/workflow.yaml </code></pre> </li> <li><a href="https://pre-commit.com/">pre-commit</a> hook now uses a fixed version of actionlint. For example, the following configuration continues to use actionlint v1.6.13 even if v1.6.14 is released. (<a href="https://github-redirect.dependabot.com/rhysd/actionlint/issues/116">#116</a>) <pre lang="yaml"><code>repos: - repo: https://github.com/rhysd/actionlint rev: v1.6.13 hooks: - id: actionlint-docker </code></pre> </li> <li>Update popular actions data set including new versions of <code>docker/*</code>, <code>haskell/actions/setup</code>, <code>actions/setup-go</code>, ... (<a href="https://github-redirect.dependabot.com/rhysd/actionlint/issues/140">#140</a>, thanks <a href="https://github.com/bflad"><code>@​bflad</code></a>)</li> <li>Update Go module dependencies</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/rhysd/actionlint/blob/main/CHANGELOG.md">github.com/rhysd/actionlint's changelog</a>.</em></p> <blockquote> <h1><a href="https://github.com/rhysd/actionlint/releases/tag/v1.6.13">v1.6.13</a> - 18 May 2022</h1> <ul> <li><a href="https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#onworkflow_callsecretsinherit"><code>secrets: inherit</code> in reusable workflow</a> is now supported (<a href="https://github-redirect.dependabot.com/rhysd/actionlint/issues/138">#138</a>) <pre lang="yaml"><code>on: workflow_dispatch: <p>jobs: pass-secrets-to-workflow: uses: ./.github/workflows/called-workflow.yml secrets: inherit </code></pre> This means that actionlint cannot know the workflow inherits secrets or not when checking a reusable workflow. To support <code>secrets: inherit</code> without giving up on checking <code>secrets</code> context, actionlint assumes the followings. See <a href="https://github.com/rhysd/actionlint/blob/main/docs/checks.md#check-types-of-inputs-and-secrets-in-reusable-workflow">the document</a> for the details.</p> <ul> <li>when <code>secrets:</code> is omitted in a reusable workflow, the workflow inherits secrets from a caller</li> <li>when <code>secrets:</code> exists in a reusable workflow, the workflow inherits no other secret</li> </ul> </li> <li><a href="https://github.blog/changelog/2022-04-25-github-actions-public-beta-of-macos-12-for-github-hosted-runners-is-now-available/"><code>macos-12</code> runner</a> is now supported (<a href="https://github-redirect.dependabot.com/rhysd/actionlint/issues/134">#134</a>, thanks <a href="https://github.com/shogo82148"><code>@​shogo82148</code></a>)</li> <li><a href="https://github.blog/changelog/2022-05-10-github-actions-beta-of-ubuntu-22-04-for-github-hosted-runners-is-now-available/"><code>ubuntu-22.04</code> runner</a> is now supported (<a href="https://github-redirect.dependabot.com/rhysd/actionlint/issues/142">#142</a>, thanks <a href="https://github.com/shogo82148"><code>@​shogo82148</code></a>)</li> <li><code>concurrency</code> is available on reusable workflow call (<a href="https://github-redirect.dependabot.com/rhysd/actionlint/issues/136">#136</a>) <pre lang="yaml"><code>jobs: checks: concurrency: group: ${{ github.ref }}-${{ github.workflow }} cancel-in-progress: true uses: ./path/to/workflow.yaml </code></pre> </li> <li><a href="https://pre-commit.com/">pre-commit</a> hook now uses a fixed version of actionlint. For example, the following configuration continues to use actionlint v1.6.13 even if v1.6.14 is released. (<a href="https://github-redirect.dependabot.com/rhysd/actionlint/issues/116">#116</a>) <pre lang="yaml"><code>repos: - repo: https://github.com/rhysd/actionlint rev: v1.6.13 hooks: - id: actionlint-docker </code></pre> </li> <li>Update popular actions data set including new versions of <code>docker/*</code>, <code>haskell/actions/setup</code>, <code>actions/setup-go</code>, ... (<a href="https://github-redirect.dependabot.com/rhysd/actionlint/issues/140">#140</a>, thanks <a href="https://github.com/bflad"><code>@​bflad</code></a>)</li> <li>Update Go module dependencies</li> </ul> <p>[Changes][v1.6.13]</p> <p><!-- raw HTML omitted --><!-- raw HTML omitted --></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/rhysd/actionlint/commit/e4caae93a1bc24ab2e349236b6b389900e5a7914"><code>e4caae9</code></a> bump up version to v1.6.13</li> <li><a href="https://github.com/rhysd/actionlint/commit/2334ba743b851dbd5db4f564fa4952aed496fe5d"><code>2334ba7</code></a> Merge branch 'issue-136'</li> <li><a href="https://github.com/rhysd/actionlint/commit/8bca30b18d05ac50d8938e09699f68ea75f30c10"><code>8bca30b</code></a> describe behavior of <code>secrets:</code> considering secrets inheritance</li> <li><a href="https://github.com/rhysd/actionlint/commit/f26448b033d379d8a784332bb80670e48555fff0"><code>f26448b</code></a> assume reusable workflow inherits secrets only when <code>secrets:</code> is omitted</li> <li><a href="https://github.com/rhysd/actionlint/commit/f3909bd8ebd741d8ff9eb82fae785bc8b333914b"><code>f3909bd</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/rhysd/actionlint/issues/142">#142</a> from shogo82148/ubuntu-22.04-is-now-public-beta</li> <li><a href="https://github.com/rhysd/actionlint/commit/09a60b0f5761c2d066def294e541c25a89756eea"><code>09a60b0</code></a> ubuntu-22.04 is now public beta</li> <li><a href="https://github.com/rhysd/actionlint/commit/8a69b5081fac45f8d37e514b3f55f579fde43d1e"><code>8a69b50</code></a> push version bump commit to main in <code>bump-version.bash</code></li> <li><a href="https://github.com/rhysd/actionlint/commit/cd139adc4169be67dd0d345735a4db09b76bf0bb"><code>cd139ad</code></a> Merge branch 'fix-secrets-inherit' (<a href="https://github-redirect.dependabot.com/rhysd/actionlint/issues/138">#138</a>)</li> <li><a href="https://github.com/rhysd/actionlint/commit/018dc7589b17f5c64e8b324bfb05049aba5de9ea"><code>018dc75</code></a> assume reusable workflow inherits secrets when <code>secrets</code> is not declared</li> <li><a href="https://github.com/rhysd/actionlint/commit/4857e80e11ac483234973699d224f7d6bb2602ae"><code>4857e80</code></a> fix parsing <code>secrets: inherit</code> in use of workflow call</li> <li>Additional commits viewable in <a href="https://github.com/rhysd/actionlint/compare/v1.6.12...v1.6.13">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/rhysd/actionlint&package-manager=go_modules&previous-version=1.6.12&new-version=1.6.13)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
kerem 2026-03-01 21:52:49 +03:00
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/act#1818
No description provided.