deps: ci: bump dependabot/fetch-metadata from 2 to 3
Nobody has claimed this yet.
Assessment
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Newbie friendliness
- 48/100
Research direction
Search the GitHub Actions workflows for dependabot/fetch-metadata and check how the workflow selects its Actions runtime. Update the reference from v2 to v3, account for the documented Node.js v24 requirement, and run the affected CI workflow; done means CI completes successfully.
Written by the indexing model from the issue text.
Description
Dependabot Update
Bumps dependabot/fetch-metadata from 2 to 3.
Release notes
Sourced from dependabot/fetch-metadata's releases.
v3.0.0
The breaking change is requiring Node.js version v24 as the Actions runtime.
What's Changed
- feat: Parse versions from metadata links by
@ppkarwaszin dependabot/fetch-metadata#632- Upgrade actions core and actions github packages by
@truggeriin dependabot/fetch-metadata#649- docs: Add notes for using
alert-lookupwith App Token by@sue445in dependabot/fetch-metadata#656- feat!: update Node.js version to v24 by
@sturmanin dependabot/fetch-metadata#671- Switch build tooling from ncc to esbuild by
@truggeriin dependabot/fetch-metadata#676- Add --legal-comments=none to esbuild build commands by
@jeffwidmanin dependabot/fetch-metadata#679- Bump tsconfig target from es2022 to es2024 by
@jeffwidmanin dependabot/fetch-metadata#680- Remove vestigial outDir from tsconfig.json by
@jeffwidmanin dependabot/fetch-metadata#681- Switch tsconfig module resolution to bundler by
@jeffwidmanin dependabot/fetch-metadata#682- Remove skipLibCheck from tsconfig.json by
@jeffwidmanin dependabot/fetch-metadata#683- Add typecheck step to CI by
@jeffwidmanin dependabot/fetch-metadata#685- Enable noImplicitAny in tsconfig.json by
@jeffwidmanin dependabot/fetch-metadata#684- Upgrade
@actions/coreto ^3.0.0 by@truggeriin dependabot/fetch-metadata#677- Upgrade
@actions/githubto ^9.0.0 and@octokit/request-errorto ^7.1.0 by@truggeriin dependabot/fetch-metadata#678- Bump qs from 6.14.0 to 6.14.1 by
@dependabot[bot] in dependabot/fetch-metadata#651- Bump hono from 4.11.1 to 4.11.4 by
@dependabot[bot] in dependabot/fetch-metadata#652- Bump hono from 4.11.4 to 4.11.7 by
@dependabot[bot] in dependabot/fetch-metadata#653- Bump hono from 4.11.7 to 4.12.0 by
@dependabot[bot] in dependabot/fetch-metadata#657- Bump qs from 6.14.1 to 6.14.2 by
@dependabot[bot] in dependabot/fetch-metadata#655- Bump
@modelcontextprotocol/sdkfrom 1.25.1 to 1.26.0 by@dependabot[bot] in dependabot/fetch-metadata#654- Bump
@hono/node-serverfrom 1.19.9 to 1.19.10 by@dependabot[bot] in dependabot/fetch-metadata#665- Bump hono from 4.12.2 to 4.12.5 by
@dependabot[bot] in dependabot/fetch-metadata#664- Bump minimatch from 3.1.2 to 3.1.5 by
@dependabot[bot] in dependabot/fetch-metadata#667- Bump hono from 4.12.5 to 4.12.7 by
@dependabot[bot] in dependabot/fetch-metadata#668- Bump actions/create-github-app-token from 2.2.1 to 3.0.0 by
@dependabot[bot] in dependabot/fetch-metadata#669- Bump flatted from 3.3.3 to 3.4.2 by
@dependabot[bot] in dependabot/fetch-metadata#670- build(deps-dev): bump picomatch from 2.3.1 to 2.3.2 by
@dependabot[bot] in dependabot/fetch-metadata#674New Contributors
@ppkarwaszmade their first contribution in dependabot/fetch-metadata#632@truggerimade their first contribution in dependabot/fetch-metadata#649@sue445made their first contribution in dependabot/fetch-metadata#656@sturmanmade their first contribution in dependabot/fetch-metadata#671Full Changelog: https://github.com/dependabot/fetch-metadata/compare/v2...v3.0.0
v2.5.0
What's Changed
- Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 by
@dependabot[bot] in dependabot/fetch-metadata#628- Bump the dev-dependencies group with 11 updates by
@dependabot[bot] in dependabot/fetch-metadata#629- Bump actions/create-github-app-token from 2.0.6 to 2.1.1 by
@dependabot[bot] in dependabot/fetch-metadata#635- Bump actions/create-github-app-token from 2.1.1 to 2.1.4 by
@dependabot[bot] in dependabot/fetch-metadata#638- Bump actions/checkout from 4 to 5 by
@dependabot[bot] in dependabot/fetch-metadata#636- Bump actions/setup-node from 4 to 5 by
@dependabot[bot] in dependabot/fetch-metadata#637- Bump actions/setup-node from 5 to 6 by
@dependabot[bot] in dependabot/fetch-metadata#639- Bump actions/create-github-app-token from 2.1.4 to 2.2.0 by
@dependabot[bot] in dependabot/fetch-metadata#643
... (truncated)
Commits
ffa630cv3.0.0 (#686)ec8fff2Merge pull request #674 from dependabot/dependabot/npm_and_yarn/picomatch-2.3.2caf48bdbuild(deps-dev): bump picomatch from 2.3.1 to 2.3.213d8274Upgrade@actions/githubto ^9.0.0 and@octokit/request-errorto ^7.1.0 (#678)b603099Upgrade@actions/corefrom ^1.11.1 to ^3.0.0 (#677)c5dc5b1Enable noImplicitAny in tsconfig.json (#684)a183f3cAdd typecheck step to CI (#685)5e17564Remove skipLibCheck from tsconfig.json (#683)bb56eebSwitch tsconfig module resolution to bundler (#682)3632e3dRemove vestigial outDir from tsconfig.json (#681)- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Pull Request
- PR: #8
- Author: @dependabot[bot]
- URL: https://github.com/aRustyDev/trident/pull/8
This issue was automatically created to track the Dependabot update.
- Dominant language
- No language data
- Stars
- 0
- Forks
- 0
- PR merge metrics
- No merged PRs in 30d
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from aRustyDev/trident
-
dependencies github-actions
Difficulty 1/5 Under an hour Newbie friendliness 70/100
-
dependencies github-actions
Difficulty 1/5 Under an hour Newbie friendliness 20/100
-
dependencies github-actions
Difficulty 2/5 1-3 hours Newbie friendliness 20/100
-
dependencies github-actions
Difficulty 2/5 1-3 hours Newbie friendliness 35/100
-
dependencies github-actions
Difficulty 1/5 Under an hour Newbie friendliness 15/100
All issues in aRustyDev/trident
Similar issues
-
Difficulty 2/5 1-3 hours Newbie friendliness 84/100
copse-dev/agent-pane#2953 ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 90/100
simonw/sqlite-utils#872 ·
-
Difficulty 1/5 Under an hour Newbie friendliness 84/100
-
Difficulty 2/5 1-3 hours Newbie friendliness 84/100
danielmiessler/LifeOS#2215 ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
sympozium-ai/sympozium#627 ·