[PR #1311] [MERGED] build(deps): bump github.com/rhysd/actionlint from 1.6.15 to 1.6.16 #1878

Closed
opened 2026-03-01 21:53:04 +03:00 by kerem · 0 comments
Owner

📋 Pull Request Information

Original PR: https://github.com/nektos/act/pull/1311
Author: @dependabot[bot]
Created: 8/22/2022
Status: Merged
Merged: 8/22/2022
Merged by: @mergify[bot]

Base: masterHead: dependabot/go_modules/github.com/rhysd/actionlint-1.6.16


📝 Commits (1)

  • ebf0710 build(deps): bump github.com/rhysd/actionlint from 1.6.15 to 1.6.16

📊 Changes

2 files changed (+3 additions, -3 deletions)

View changed files

📝 go.mod (+1 -1)
📝 go.sum (+2 -2)

📄 Description

Bumps github.com/rhysd/actionlint from 1.6.15 to 1.6.16.

Release notes

Sourced from github.com/rhysd/actionlint's releases.

v1.6.16

  • Allow an empty object at permissions:. You can use it to disable permissions for all of the available scopes. (#170, #171, thanks @​peaceiris)
    permissions: {}
    
  • Support github.triggering_actor context value. (#190, thanks @​stefreak)
  • Rename step-id rule to id rule. Now the rule checks both job IDs and step IDs. See the document for more details. (#182)
    jobs:
      # ERROR: '.' cannot be contained in ID
      v1.2.3:
        runs-on: ubuntu-latest
        steps:
          - run: echo 'job ID with version'
            # ERROR: ID cannot contain spaces
            id: echo for test
      # ERROR: ID cannot start with numbers
      2d-game:
        runs-on: ubuntu-latest
        steps:
          - run: echo 'oops'
    
  • Accessing env context in jobs.<id>.if is now reported as error. (#155)
    jobs:
      test:
        runs-on: ubuntu-latest
        # ERROR: `env` is not available here
        if: ${{ env.DIST == 'arch' }}
        steps:
          - run: ...
    
  • Fix actionlint wrongly typed some matrix value when the matrix is expanded with ${{ }}. For example, matrix.foo in the following code is typed as {x: string}, but it should be any because it is initialized with the value from fromJSON. (#145)
    strategy:
      matrix:
        foo: ${{ fromJSON(...) }}
        exclude:
          - foo:
              x: y
    
  • Fix incorrect type check when multiple runner labels are set to runs-on: via expanding ${{ }} for selecting self-hosted runners. (#164)
    jobs:
      test:
        strategy:
          matrix:
            include:
              - labels: ["self-hosted", "macOS", "X64"]
              - labels: ["self-hosted", "linux"]
    

... (truncated)

Changelog

Sourced from github.com/rhysd/actionlint's changelog.

v1.6.16 - 19 Aug 2022

  • Allow an empty object at permissions:. You can use it to disable permissions for all of the available scopes. (#170, #171, thanks @​peaceiris)
    permissions: {}
    
  • Support github.triggering_actor context value. (#190, thanks @​stefreak)
  • Rename step-id rule to id rule. Now the rule checks both job IDs and step IDs. See the document for more details. (#182)
    jobs:
      # ERROR: '.' cannot be contained in ID
      v1.2.3:
        runs-on: ubuntu-latest
        steps:
          - run: echo 'job ID with version'
            # ERROR: ID cannot contain spaces
            id: echo for test
      # ERROR: ID cannot start with numbers
      2d-game:
        runs-on: ubuntu-latest
        steps:
          - run: echo 'oops'
    
  • Accessing env context in jobs.<id>.if is now reported as error. (#155)
    jobs:
      test:
        runs-on: ubuntu-latest
        # ERROR: `env` is not available here
        if: ${{ env.DIST == 'arch' }}
        steps:
          - run: ...
    
  • Fix actionlint wrongly typed some matrix value when the matrix is expanded with ${{ }}. For example, matrix.foo in the following code is typed as {x: string}, but it should be any because it is initialized with the value from fromJSON. (#145)
    strategy:
      matrix:
        foo: ${{ fromJSON(...) }}
        exclude:
          - foo:
              x: y
    
  • Fix incorrect type check when multiple runner labels are set to runs-on: via expanding ${{ }} for selecting self-hosted runners. (#164)
    jobs:
      test:
        strategy:
          matrix:
            include:
              - labels: ["self-hosted", "macOS", "X64"]
    

... (truncated)

Commits
  • bd1cd41 bump up version to v1.6.16
  • c3792da generate popular actions to update actions/configure-pages
  • 671beb0 stop checking a template when one of expressions caused a type error
  • 6c1ac43 fix crash due to missing nil check (fix #193)
  • 0cca1b5 Merge branch 'issue-182' (fix #182)
  • 835bdf2 add tests for checking job/step ID naming convention
  • 2484b41 describe new ID naming convention check in doc
  • 5b862f5 rename step-id rule to id and add check for naming convention
  • 511e12a fix type of github.event.inputs.* is string (fix #181)
  • a8df4a5 fix missing secret description is not an error (fix #174)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/nektos/act/pull/1311 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 8/22/2022 **Status:** ✅ Merged **Merged:** 8/22/2022 **Merged by:** [@mergify[bot]](https://github.com/apps/mergify) **Base:** `master` ← **Head:** `dependabot/go_modules/github.com/rhysd/actionlint-1.6.16` --- ### 📝 Commits (1) - [`ebf0710`](https://github.com/nektos/act/commit/ebf0710190461ed97a61abf3085061a13b5d76a1) build(deps): bump github.com/rhysd/actionlint from 1.6.15 to 1.6.16 ### 📊 Changes **2 files changed** (+3 additions, -3 deletions) <details> <summary>View changed files</summary> 📝 `go.mod` (+1 -1) 📝 `go.sum` (+2 -2) </details> ### 📄 Description Bumps [github.com/rhysd/actionlint](https://github.com/rhysd/actionlint) from 1.6.15 to 1.6.16. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/rhysd/actionlint/releases">github.com/rhysd/actionlint's releases</a>.</em></p> <blockquote> <h2>v1.6.16</h2> <ul> <li>Allow an empty object at <code>permissions:</code>. You can use it to disable permissions for all of the available scopes. (<a href="https://github-redirect.dependabot.com/rhysd/actionlint/issues/170">#170</a>, <a href="https://github-redirect.dependabot.com/rhysd/actionlint/issues/171">#171</a>, thanks <a href="https://github.com/peaceiris"><code>@​peaceiris</code></a>) <pre lang="yaml"><code>permissions: {} </code></pre> </li> <li>Support <code>github.triggering_actor</code> context value. (<a href="https://github-redirect.dependabot.com/rhysd/actionlint/issues/190">#190</a>, thanks <a href="https://github.com/stefreak"><code>@​stefreak</code></a>)</li> <li>Rename <code>step-id</code> rule to <code>id</code> rule. Now the rule checks both job IDs and step IDs. See <a href="https://github.com/rhysd/actionlint/blob/main/docs/checks.md#id-naming-convention">the document</a> for more details. (<a href="https://github-redirect.dependabot.com/rhysd/actionlint/issues/182">#182</a>) <pre lang="yaml"><code>jobs: # ERROR: '.' cannot be contained in ID v1.2.3: runs-on: ubuntu-latest steps: - run: echo 'job ID with version' # ERROR: ID cannot contain spaces id: echo for test # ERROR: ID cannot start with numbers 2d-game: runs-on: ubuntu-latest steps: - run: echo 'oops' </code></pre> </li> <li>Accessing <code>env</code> context in <code>jobs.&lt;id&gt;.if</code> is now reported as error. (<a href="https://github-redirect.dependabot.com/rhysd/actionlint/issues/155">#155</a>) <pre lang="yaml"><code>jobs: test: runs-on: ubuntu-latest # ERROR: `env` is not available here if: ${{ env.DIST == 'arch' }} steps: - run: ... </code></pre> </li> <li>Fix actionlint wrongly typed some matrix value when the matrix is expanded with <code>${{ }}</code>. For example, <code>matrix.foo</code> in the following code is typed as <code>{x: string}</code>, but it should be <code>any</code> because it is initialized with the value from <code>fromJSON</code>. (<a href="https://github-redirect.dependabot.com/rhysd/actionlint/issues/145">#145</a>) <pre lang="yaml"><code>strategy: matrix: foo: ${{ fromJSON(...) }} exclude: - foo: x: y </code></pre> </li> <li>Fix incorrect type check when multiple runner labels are set to <code>runs-on:</code> via expanding <code>${{ }}</code> for selecting self-hosted runners. (<a href="https://github-redirect.dependabot.com/rhysd/actionlint/issues/164">#164</a>) <pre lang="yaml"><code>jobs: test: strategy: matrix: include: - labels: [&quot;self-hosted&quot;, &quot;macOS&quot;, &quot;X64&quot;] - labels: [&quot;self-hosted&quot;, &quot;linux&quot;] </code></pre> </li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/rhysd/actionlint/blob/main/CHANGELOG.md">github.com/rhysd/actionlint's changelog</a>.</em></p> <blockquote> <h1><a href="https://github.com/rhysd/actionlint/releases/tag/v1.6.16">v1.6.16</a> - 19 Aug 2022</h1> <ul> <li>Allow an empty object at <code>permissions:</code>. You can use it to disable permissions for all of the available scopes. (<a href="https://github-redirect.dependabot.com/rhysd/actionlint/issues/170">#170</a>, <a href="https://github-redirect.dependabot.com/rhysd/actionlint/issues/171">#171</a>, thanks <a href="https://github.com/peaceiris"><code>@​peaceiris</code></a>) <pre lang="yaml"><code>permissions: {} </code></pre> </li> <li>Support <code>github.triggering_actor</code> context value. (<a href="https://github-redirect.dependabot.com/rhysd/actionlint/issues/190">#190</a>, thanks <a href="https://github.com/stefreak"><code>@​stefreak</code></a>)</li> <li>Rename <code>step-id</code> rule to <code>id</code> rule. Now the rule checks both job IDs and step IDs. See <a href="https://github.com/rhysd/actionlint/blob/main/docs/checks.md#id-naming-convention">the document</a> for more details. (<a href="https://github-redirect.dependabot.com/rhysd/actionlint/issues/182">#182</a>) <pre lang="yaml"><code>jobs: # ERROR: '.' cannot be contained in ID v1.2.3: runs-on: ubuntu-latest steps: - run: echo 'job ID with version' # ERROR: ID cannot contain spaces id: echo for test # ERROR: ID cannot start with numbers 2d-game: runs-on: ubuntu-latest steps: - run: echo 'oops' </code></pre> </li> <li>Accessing <code>env</code> context in <code>jobs.&lt;id&gt;.if</code> is now reported as error. (<a href="https://github-redirect.dependabot.com/rhysd/actionlint/issues/155">#155</a>) <pre lang="yaml"><code>jobs: test: runs-on: ubuntu-latest # ERROR: `env` is not available here if: ${{ env.DIST == 'arch' }} steps: - run: ... </code></pre> </li> <li>Fix actionlint wrongly typed some matrix value when the matrix is expanded with <code>${{ }}</code>. For example, <code>matrix.foo</code> in the following code is typed as <code>{x: string}</code>, but it should be <code>any</code> because it is initialized with the value from <code>fromJSON</code>. (<a href="https://github-redirect.dependabot.com/rhysd/actionlint/issues/145">#145</a>) <pre lang="yaml"><code>strategy: matrix: foo: ${{ fromJSON(...) }} exclude: - foo: x: y </code></pre> </li> <li>Fix incorrect type check when multiple runner labels are set to <code>runs-on:</code> via expanding <code>${{ }}</code> for selecting self-hosted runners. (<a href="https://github-redirect.dependabot.com/rhysd/actionlint/issues/164">#164</a>) <pre lang="yaml"><code>jobs: test: strategy: matrix: include: - labels: [&quot;self-hosted&quot;, &quot;macOS&quot;, &quot;X64&quot;] </code></pre> </li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/rhysd/actionlint/commit/bd1cd41ac209a3183616bb510ccba4d0a2eaa262"><code>bd1cd41</code></a> bump up version to v1.6.16</li> <li><a href="https://github.com/rhysd/actionlint/commit/c3792da404a55ec072c34fcf0ffec632a890bff5"><code>c3792da</code></a> generate popular actions to update <code>actions/configure-pages</code></li> <li><a href="https://github.com/rhysd/actionlint/commit/671beb0b55720b76ffe6411d6a4ba8f08eeb355b"><code>671beb0</code></a> stop checking a template when one of expressions caused a type error</li> <li><a href="https://github.com/rhysd/actionlint/commit/6c1ac43620960c5543f7e66cba642ed7b06c1d87"><code>6c1ac43</code></a> fix crash due to missing <code>nil</code> check (fix <a href="https://github-redirect.dependabot.com/rhysd/actionlint/issues/193">#193</a>)</li> <li><a href="https://github.com/rhysd/actionlint/commit/0cca1b5b0923eaac5619b640a8898e25bb08aac6"><code>0cca1b5</code></a> Merge branch 'issue-182' (fix <a href="https://github-redirect.dependabot.com/rhysd/actionlint/issues/182">#182</a>)</li> <li><a href="https://github.com/rhysd/actionlint/commit/835bdf203c43916a1ee9a4df79b19a8612319f5c"><code>835bdf2</code></a> add tests for checking job/step ID naming convention</li> <li><a href="https://github.com/rhysd/actionlint/commit/2484b417d592e2b5e54ee1c6e01bf27bbd4fbe94"><code>2484b41</code></a> describe new ID naming convention check in doc</li> <li><a href="https://github.com/rhysd/actionlint/commit/5b862f586ba3d89dbc2475f55ccc083fffa58c39"><code>5b862f5</code></a> rename <code>step-id</code> rule to <code>id</code> and add check for naming convention</li> <li><a href="https://github.com/rhysd/actionlint/commit/511e12abefba6d09ea7eec7b3bb6dbbe091ab2c4"><code>511e12a</code></a> fix type of <code>github.event.inputs.*</code> is string (fix <a href="https://github-redirect.dependabot.com/rhysd/actionlint/issues/181">#181</a>)</li> <li><a href="https://github.com/rhysd/actionlint/commit/a8df4a56390bad96ca4824a4583deb86cc96ee8f"><code>a8df4a5</code></a> fix missing secret description is not an error (fix <a href="https://github-redirect.dependabot.com/rhysd/actionlint/issues/174">#174</a>)</li> <li>Additional commits viewable in <a href="https://github.com/rhysd/actionlint/compare/v1.6.15...v1.6.16">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/rhysd/actionlint&package-manager=go_modules&previous-version=1.6.15&new-version=1.6.16)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
kerem 2026-03-01 21:53:04 +03:00
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/act#1878
No description provided.