-
Notifications
You must be signed in to change notification settings - Fork 1.1k
Commit b09d17f
authored
Bump burnett01/rsync-deployments from 7.0.0 to 7.0.1 (#20059)
Bumps
[burnett01/rsync-deployments](https://github.com/burnett01/rsync-deployments)
from 7.0.0 to 7.0.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/burnett01/rsync-deployments/releases">burnett01/rsync-deployments's
releases</a>.</em></p>
<blockquote>
<h2>7.0.1</h2>
<ul>
<li>Pin <a
href="https://github.com/JoshPiper"><code>@JoshPiper</code></a> <a
href="https://github.com/JoshPiper/rsync-docker">drinternet/rsync</a>
image by SHA-256 hash rather than version. (Immutability)
Added via <a
href="https://redirect.github.com/burnett01/rsync-deployments/issues/60">#60</a></li>
</ul>
<p>The docker image of this action is now pinned to the specific SHA-256
hash of the version rather than just the version.
This means for the latest <code>drinternet/rsync:v1.4.4</code> the
corresponding hash is
<code>drinternet/rsync@sha256:15b2949838074bd93c49421c22380396a0cd53a322439e799ac87afcadcfe234</code></p>
<p>Check for validation: <a
href="https://hub.docker.com/layers/drinternet/rsync/v1.4.4/images/sha256-15b2949838074bd93c49421c22380396a0cd53a322439e799ac87afcadcfe234">https://hub.docker.com/layers/drinternet/rsync/v1.4.4/images/sha256-15b2949838074bd93c49421c22380396a0cd53a322439e799ac87afcadcfe234</a></p>
<p>With that, usage of this action is even more secure due to a
consistent dependency chain of trust,
since changes accompanied by a docker image hash are immutable.</p>
<p>Thanks to <a
href="https://github.com/XComp"><code>@XComp</code></a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/Burnett01/rsync-deployments/commit/796cf0d5e4b535745ce49d7429f77cf39e25ef39"><code>796cf0d</code></a>
Merge pull request <a
href="https://redirect.github.com/burnett01/rsync-deployments/issues/61">#61</a>
from Burnett01/release/7.0.1</li>
<li><a
href="https://github.com/Burnett01/rsync-deployments/commit/b2bc75ad2c291720f85040d9b81a366d76467672"><code>b2bc75a</code></a>
Merge pull request <a
href="https://redirect.github.com/burnett01/rsync-deployments/issues/60">#60</a>
from XComp/use-hash-instead-of-version-tag</li>
<li><a
href="https://github.com/Burnett01/rsync-deployments/commit/93c0d7acae56bb1b353ef070e28ba52cfa0f743c"><code>93c0d7a</code></a>
upd: mention version 7.0.1</li>
<li><a
href="https://github.com/Burnett01/rsync-deployments/commit/13aa4f9f57bf89d5e04cf7cf1dd1dbb1e5a13fa5"><code>13aa4f9</code></a>
update year to 2024</li>
<li><a
href="https://github.com/Burnett01/rsync-deployments/commit/b16614048bd61f82b03c532b0200b0f148c86d50"><code>b166140</code></a>
Use SHA instead of Docker version tag for base image to allow for
consistent ...</li>
<li><a
href="https://github.com/Burnett01/rsync-deployments/commit/e1c5b900e976bbc2a6aadf7fd85d7bef67ede4f1"><code>e1c5b90</code></a>
Merge pull request <a
href="https://redirect.github.com/burnett01/rsync-deployments/issues/59">#59</a>
from Burnett01/release/7.0.0</li>
<li>See full diff in <a
href="https://github.com/burnett01/rsync-deployments/compare/7.0.0...7.0.1">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>1 file changed
+1
-1
lines changed+1-1Lines changed: 1 addition & 1 deletion
Original file line number | Diff line number | Diff line change | |
---|---|---|---|
| |||
45 | 45 |
| |
46 | 46 |
| |
47 | 47 |
| |
48 |
| - | |
| 48 | + | |
49 | 49 |
| |
50 | 50 |
| |
51 | 51 |
| |
|
0 commit comments