[PR #1234] [MERGED] build(deps): bump github.com/rhysd/actionlint from 1.6.13 to 1.6.14 #1855

Closed
opened 2026-03-01 21:52:58 +03:00 by kerem · 0 comments
Owner

📋 Pull Request Information

Original PR: https://github.com/nektos/act/pull/1234
Author: @dependabot[bot]
Created: 6/27/2022
Status: Merged
Merged: 6/30/2022
Merged by: @cplee

Base: masterHead: dependabot/go_modules/github.com/rhysd/actionlint-1.6.14


📝 Commits (3)

  • bb1441a build(deps): bump github.com/rhysd/actionlint from 1.6.13 to 1.6.14
  • a05844d Merge branch 'master' into dependabot/go_modules/github.com/rhysd/actionlint-1.6.14
  • 44ee823 Merge branch 'master' into dependabot/go_modules/github.com/rhysd/actionlint-1.6.14

📊 Changes

2 files changed (+8 additions, -7 deletions)

View changed files

📝 go.mod (+2 -2)
📝 go.sum (+6 -5)

📄 Description

Bumps github.com/rhysd/actionlint from 1.6.13 to 1.6.14.

Release notes

Sourced from github.com/rhysd/actionlint's releases.

v1.6.14

  • Some filters are exclusive in events at on:. Now actionlint checks the exclusive filters are used in the same event. paths and paths-ignore, branches and branches-ignore, tags and tags-ignore are exclusive. See the document for the details.
    on:
      push:
        # ERROR: Both 'paths' and 'paths-ignore' filters cannot be used for the same event
        paths: ...
        paths-ignore: ...
    
  • Some event filters are checked more strictly. Some filters are only available with specific events. Now actionlint checks the limitation. See the document for complete list of such filters.
    on:
      release:
        # ERROR: 'tags' filter is only available for 'push' event
        tags: v*.*.*
    
  • Paths starting/ending with spaces are now reported as error.
  • Inputs of workflow which specify both default and required are now reported as error. When required is specified at input of workflow call, a caller of it must specify value of the input. So the default value will never be used. (#154, thanks @​sksat)
    on:
      workflow_call:
        inputs:
          my_input:
            description: test
            type: string
            # ERROR: The default value 'aaa' will never be used
            required: true
            default: aaa
    
  • Fix inputs of workflow_dispatch are set to inputs context as well as github.event.inputs. This was added by the recent change of GitHub Actions. (#152)
    on:
      workflow_dispatch:
        inputs:
          my_input:
            type: string
            required: true
    jobs:
      my_job:
        runs-on: ubuntu-latest
        steps:
          - run: echo ${{ github.event.inputs.my_input }}
          # Now the input is also set to `inputs` context
          - run: echo ${{ inputs.my_input }}
    
  • Improve that env context is now not defined in values of env:, id: and uses:. actionlint now reports usage of env context in such places as type errors. (#158)
    runs-on: ubuntu-latest
    env:
      FOO: aaa
    

... (truncated)

Changelog

Sourced from github.com/rhysd/actionlint's changelog.

v1.6.14 - 26 Jun 2022

  • Some filters are exclusive in events at on:. Now actionlint checks the exclusive filters are used in the same event. paths and paths-ignore, branches and branches-ignore, tags and tags-ignore are exclusive. See the document for the details.
    on:
      push:
        # ERROR: Both 'paths' and 'paths-ignore' filters cannot be used for the same event
        paths: path/to/foo
        paths-ignore: path/to/foo
    
  • Some event filters are checked more strictly. Some filters are only available with specific events. Now actionlint checks the limitation. See the document for complete list of such events.
    on:
      release:
        # ERROR: 'tags' filter is only available for 'push' event
        tags: v*.*.*
    
  • Paths starting/ending with spaces are now reported as error.
  • Inputs of workflow which specifying both default and required are now reported as error. When required is specified at input of workflow call, a caller of it must specify value of the input. So the default value will never be used. (#154, thanks @​sksat)
    on:
      workflow_call:
        inputs:
          my_input:
            description: test
            type: string
            # ERROR: The default value 'aaa' will never be used
            required: true
            default: aaa
    
  • Fix inputs of workflow_dispatch are set to inputs context as well as github.event.inputs. This was added by the recent change of GitHub Actions. (#152)
    on:
      workflow_dispatch:
        inputs:
          my_input:
            type: string
            required: true
    jobs:
      my_job:
        runs-on: ubuntu-latest
        steps:
          - run: echo ${{ github.event.inputs.my_input }}
          # Now the input is also set to `inputs` context
          - run: echo ${{ inputs.my_input }}
    
  • Improve that env context is now not defined in values of env:, id: and uses:. actionlint now reports usage of env context in such places as type errors. (#158)
    runs-on: ubuntu-latest
    env:
    

... (truncated)

Commits
  • 081fe92 bump up version to v1.6.14
  • e3db034 fix invalid env context usage in a test in testdata/ok
  • 3843609 remove env context from global scope where it is banned (fix #158)
  • 4de58ac fix all 'github.*' types are copied when updating type of 'jobs' context
  • 0e3985b update document following the change for #152
  • 0c2f55e set type of inputs as well as github.event.inputs on workflow_dispatch ...
  • dbf1364 move workflow call input check from workflow_call rule to events rule
  • f29c57c tweak help message of -stdin-filename option
  • 3257a89 Merge pull request #157 from arahatashun/arahata/stdin-filename
  • 2385fd7 rename to StdinFileName
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/nektos/act/pull/1234 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 6/27/2022 **Status:** ✅ Merged **Merged:** 6/30/2022 **Merged by:** [@cplee](https://github.com/cplee) **Base:** `master` ← **Head:** `dependabot/go_modules/github.com/rhysd/actionlint-1.6.14` --- ### 📝 Commits (3) - [`bb1441a`](https://github.com/nektos/act/commit/bb1441ad236149a0655b7f9d83ad2b708d37cf8a) build(deps): bump github.com/rhysd/actionlint from 1.6.13 to 1.6.14 - [`a05844d`](https://github.com/nektos/act/commit/a05844d921f30bb7378ecdb145e4f9ad4a36ae05) Merge branch 'master' into dependabot/go_modules/github.com/rhysd/actionlint-1.6.14 - [`44ee823`](https://github.com/nektos/act/commit/44ee823d9e0b43693745510916cd13b658b2b258) Merge branch 'master' into dependabot/go_modules/github.com/rhysd/actionlint-1.6.14 ### 📊 Changes **2 files changed** (+8 additions, -7 deletions) <details> <summary>View changed files</summary> 📝 `go.mod` (+2 -2) 📝 `go.sum` (+6 -5) </details> ### 📄 Description Bumps [github.com/rhysd/actionlint](https://github.com/rhysd/actionlint) from 1.6.13 to 1.6.14. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/rhysd/actionlint/releases">github.com/rhysd/actionlint's releases</a>.</em></p> <blockquote> <h2>v1.6.14</h2> <ul> <li>Some filters are exclusive in events at <code>on:</code>. Now actionlint checks the exclusive filters are used in the same event. <code>paths</code> and <code>paths-ignore</code>, <code>branches</code> and <code>branches-ignore</code>, <code>tags</code> and <code>tags-ignore</code> are exclusive. See <a href="https://github.com/rhysd/actionlint/blob/main/docs/checks.md#webhook-events-validation">the document</a> for the details. <pre lang="yaml"><code>on: push: # ERROR: Both 'paths' and 'paths-ignore' filters cannot be used for the same event paths: ... paths-ignore: ... </code></pre> </li> <li>Some event filters are checked more strictly. Some filters are only available with specific events. Now actionlint checks the limitation. See <a href="https://github.com/rhysd/actionlint/blob/main/docs/checks.md#webhook-events-validation">the document</a> for complete list of such filters. <pre lang="yaml"><code>on: release: # ERROR: 'tags' filter is only available for 'push' event tags: v*.*.* </code></pre> </li> <li>Paths starting/ending with spaces are now reported as error.</li> <li>Inputs of workflow which specify both <code>default</code> and <code>required</code> are now reported as error. When <code>required</code> is specified at input of workflow call, a caller of it must specify value of the input. So the default value will never be used. (<a href="https://github-redirect.dependabot.com/rhysd/actionlint/issues/154">#154</a>, thanks <a href="https://github.com/sksat"><code>@​sksat</code></a>) <pre lang="yaml"><code>on: workflow_call: inputs: my_input: description: test type: string # ERROR: The default value 'aaa' will never be used required: true default: aaa </code></pre> </li> <li>Fix inputs of <code>workflow_dispatch</code> are set to <code>inputs</code> context as well as <code>github.event.inputs</code>. This was added by <a href="https://github.blog/changelog/2022-06-10-github-actions-inputs-unified-across-manual-and-reusable-workflows/">the recent change of GitHub Actions</a>. (<a href="https://github-redirect.dependabot.com/rhysd/actionlint/issues/152">#152</a>) <pre lang="yaml"><code>on: workflow_dispatch: inputs: my_input: type: string required: true jobs: my_job: runs-on: ubuntu-latest steps: - run: echo ${{ github.event.inputs.my_input }} # Now the input is also set to `inputs` context - run: echo ${{ inputs.my_input }} </code></pre> </li> <li>Improve that <code>env</code> context is now not defined in values of <code>env:</code>, <code>id:</code> and <code>uses:</code>. actionlint now reports usage of <code>env</code> context in such places as type errors. (<a href="https://github-redirect.dependabot.com/rhysd/actionlint/issues/158">#158</a>) <pre lang="yaml"><code>runs-on: ubuntu-latest env: FOO: aaa </code></pre> </li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/rhysd/actionlint/blob/main/CHANGELOG.md">github.com/rhysd/actionlint's changelog</a>.</em></p> <blockquote> <h1><a href="https://github.com/rhysd/actionlint/releases/tag/v1.6.14">v1.6.14</a> - 26 Jun 2022</h1> <ul> <li>Some filters are exclusive in events at <code>on:</code>. Now actionlint checks the exclusive filters are used in the same event. <code>paths</code> and <code>paths-ignore</code>, <code>branches</code> and <code>branches-ignore</code>, <code>tags</code> and <code>tags-ignore</code> are exclusive. See <a href="https://github.com/rhysd/actionlint/blob/main/docs/checks.md#webhook-events-validation">the document</a> for the details. <pre lang="yaml"><code>on: push: # ERROR: Both 'paths' and 'paths-ignore' filters cannot be used for the same event paths: path/to/foo paths-ignore: path/to/foo </code></pre> </li> <li>Some event filters are checked more strictly. Some filters are only available with specific events. Now actionlint checks the limitation. See <a href="https://github.com/rhysd/actionlint/blob/main/docs/checks.md#webhook-events-validation">the document</a> for complete list of such events. <pre lang="yaml"><code>on: release: # ERROR: 'tags' filter is only available for 'push' event tags: v*.*.* </code></pre> </li> <li>Paths starting/ending with spaces are now reported as error.</li> <li>Inputs of workflow which specifying both <code>default</code> and <code>required</code> are now reported as error. When <code>required</code> is specified at input of workflow call, a caller of it must specify value of the input. So the default value will never be used. (<a href="https://github-redirect.dependabot.com/rhysd/actionlint/issues/154">#154</a>, thanks <a href="https://github.com/sksat"><code>@​sksat</code></a>) <pre lang="yaml"><code>on: workflow_call: inputs: my_input: description: test type: string # ERROR: The default value 'aaa' will never be used required: true default: aaa </code></pre> </li> <li>Fix inputs of <code>workflow_dispatch</code> are set to <code>inputs</code> context as well as <code>github.event.inputs</code>. This was added by <a href="https://github.blog/changelog/2022-06-10-github-actions-inputs-unified-across-manual-and-reusable-workflows/">the recent change of GitHub Actions</a>. (<a href="https://github-redirect.dependabot.com/rhysd/actionlint/issues/152">#152</a>) <pre lang="yaml"><code>on: workflow_dispatch: inputs: my_input: type: string required: true jobs: my_job: runs-on: ubuntu-latest steps: - run: echo ${{ github.event.inputs.my_input }} # Now the input is also set to `inputs` context - run: echo ${{ inputs.my_input }} </code></pre> </li> <li>Improve that <code>env</code> context is now not defined in values of <code>env:</code>, <code>id:</code> and <code>uses:</code>. actionlint now reports usage of <code>env</code> context in such places as type errors. (<a href="https://github-redirect.dependabot.com/rhysd/actionlint/issues/158">#158</a>) <pre lang="yaml"><code>runs-on: ubuntu-latest env: </code></pre> </li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/rhysd/actionlint/commit/081fe9214c6ae8940d8b5ed740d70b94f71cfed3"><code>081fe92</code></a> bump up version to v1.6.14</li> <li><a href="https://github.com/rhysd/actionlint/commit/e3db034ca6068377ec726bb55555e38c7457a9e9"><code>e3db034</code></a> fix invalid <code>env</code> context usage in a test in <code>testdata/ok</code></li> <li><a href="https://github.com/rhysd/actionlint/commit/3843609a7d1a8227cf149e9279941e88f776da23"><code>3843609</code></a> remove <code>env</code> context from global scope where it is banned (fix <a href="https://github-redirect.dependabot.com/rhysd/actionlint/issues/158">#158</a>)</li> <li><a href="https://github.com/rhysd/actionlint/commit/4de58acc51ad7855f91e2a1ff3d3cc3a5b5f66b9"><code>4de58ac</code></a> fix all 'github.*' types are copied when updating type of 'jobs' context</li> <li><a href="https://github.com/rhysd/actionlint/commit/0e3985b4aa2c32df1d28cd928013e726d2ba1501"><code>0e3985b</code></a> update document following the change for <a href="https://github-redirect.dependabot.com/rhysd/actionlint/issues/152">#152</a></li> <li><a href="https://github.com/rhysd/actionlint/commit/0c2f55ecc061fc5634680ed7aebf238ce49ea331"><code>0c2f55e</code></a> set type of <code>inputs</code> as well as <code>github.event.inputs</code> on <code>workflow_dispatch</code> ...</li> <li><a href="https://github.com/rhysd/actionlint/commit/dbf13645968b080b89f0c1cf15388501463f1a1f"><code>dbf1364</code></a> move workflow call input check from <code>workflow_call</code> rule to <code>events</code> rule</li> <li><a href="https://github.com/rhysd/actionlint/commit/f29c57cba2e5082e53f5f0ec1524f9f659430858"><code>f29c57c</code></a> tweak help message of <code>-stdin-filename</code> option</li> <li><a href="https://github.com/rhysd/actionlint/commit/3257a899d77b82b89f6faa16c496dd261adde7f7"><code>3257a89</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/rhysd/actionlint/issues/157">#157</a> from arahatashun/arahata/stdin-filename</li> <li><a href="https://github.com/rhysd/actionlint/commit/2385fd724b4ecef7b52ea30e920f5cb3153e5922"><code>2385fd7</code></a> rename to StdinFileName</li> <li>Additional commits viewable in <a href="https://github.com/rhysd/actionlint/compare/v1.6.13...v1.6.14">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/rhysd/actionlint&package-manager=go_modules&previous-version=1.6.13&new-version=1.6.14)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
kerem 2026-03-01 21:52:58 +03:00
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/act#1855
No description provided.