Bump MrOctopus/download-asset-action from 1.0 to 1.1 #212
Conversation
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
There was a problem hiding this comment.
Starting from version 2.0.0, the editorconfig-checker/action-editorconfig-checker action now acts as an installer for the editorconfig-checker tool (similar to how the actions/setup-* actions work). This means it can serve as a replacement for the MrOctopus/download-asset-action action.
The problem with the MrOctopus/download-asset-action action was fixed, but the fact that a fundamentally broken release was made in the first place (indicating there is no validation/quality control whatsoever), and then the way the fix was deployed (by moving the tag instead of making a new tag) tells me that we should avoid the use of MrOctopus/download-asset-action when possible.
See the review of the PR for the same change in the upstream template:
|
@dependabot rebase |
Bumps [MrOctopus/download-asset-action](https://github.com/mroctopus/download-asset-action) from 1.0 to 1.1. - [Release notes](https://github.com/mroctopus/download-asset-action/releases) - [Commits](MrOctopus/download-asset-action@1.0...1.1) --- updated-dependencies: - dependency-name: MrOctopus/download-asset-action dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
force-pushed
the
dependabot/github_actions/MrOctopus/download-asset-action-1.1
branch
from
4ee95e0 to
1797192
Compare
There was a problem hiding this comment.
The plan to migrate away from this action mentioned in the previous review still stands. However, since the new version of the action is perfectly functional for the purpose, and since clearly we are not able to complete that task in a timely fashion, it is best to just go ahead with the bump.
per1234
deleted the
dependabot/github_actions/MrOctopus/download-asset-action-1.1
branch
Bumps MrOctopus/download-asset-action from 1.0 to 1.1.
Release notes
Sourced from MrOctopus/download-asset-action's releases.
Commits
175b1afUpdated package.json version to 1.1.0d81f005Updated node_modulesYou can trigger a rebase of this PR by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)