ci(deps): bump actions/download-artifact from 3 to 4 #5
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
- Created PatrickMemoryManager in stubs.py, a simplified memory manager hardcoded for Patrick - Implemented all required memory management functions with single-user optimizations - Added comprehensive test suite in test_memory.py with 11 test cases covering all functionality - Created necessary __init__.py files for proper Python package structure This completes Step 1 of Phase 1, enabling the Orchestrator to store and retrieve conversation history.
…build.yaml for dynamic secrets
This merge fixes circular imports and enhances CI pipeline with GCP authentication and deployment improvements.
… all environments
- Enhanced CI/CD workflow with parallel execution and security scanning - Added terraform-optimizer.sh for easier CLI operations - Configured .terraformrc for performance improvements - Added .tflint.hcl with Google Cloud specific rules - Created comprehensive optimization documentation
- Update backend.tf to use new project bucket (tfstate-cherry-ai-project) - Enhance migrate_github_to_gcp_secrets.sh security by removing hardcoded token - Create update-project-references.sh automation script for migrating project references - Add comprehensive GCP_PROJECT_MIGRATION_SUMMARY.md document
…orm secrets and removed requirements-consolidated.txt
1. Restricted Mode Fix: - Add comprehensive fix_restricted_mode.sh script - Add verify_standard_mode.sh for verification - Update devcontainer configuration and Docker files - Update documentation 2. Terraform Common Environment: - Update all resource configurations with best practices - Add provider version constraints - Use variables instead of hardcoded values - Add IAM bindings and security configurations - Consolidate outputs in dedicated file - Improve resource lifecycle management
…s.sh - Add github-actions: allow annotations to sections that handle secrets but don't contain actual credentials - Add comments to clarify that these sections are retrieving secrets securely, not exposing credentials
- Add .github/secret_scanning.yml to configure secret scanning - Add .github/SECURITY.md to document security practices - Add .github/dependabot.yml for automated dependency updates - Add .gitattributes to mark specific files as generated to avoid false positives
Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 3 to 4. - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](actions/download-artifact@v3...v4) --- updated-dependencies: - dependency-name: actions/download-artifact dependency-version: '4' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]>
LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
|
OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting If you change your mind, just re-open this PR and I'll resolve any conflicts on it. |
dependabot
bot
deleted the
dependabot/github_actions/actions/download-artifact-4
branch
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps actions/download-artifact from 3 to 4.
Release notes
Sourced from actions/download-artifact's releases.
Commits
d3f86a1Merge pull request #404 from actions/robherley/v4.3.0fc02353prep for v4.3.0 release7745437Merge pull request #402 from actions/joshmgross/download-by-id-example84fc7a0Remove path filters from Check dist workflow67f2bc3Fix workflow example for downloading by artifact ID8ea3c2cMerge pull request #401 from actions/download-by-idd219c63add supporting unit tests for artifact downloads with ids54124fbrevertgetArtifact()changes - for now we have to list and filter by artifa...b83057bbundle171183cuse the sameartifactClient.getArtifactstructure as seen above in `isSingl...Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)