Update dependabot/fetch-metadata action to v1.6.0 (#105)

ilkka · web-flow · commit 37914c579c5e · 2023-09-20T11:11:13.000+03:00
[![Mend Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [dependabot/fetch-metadata](https://togithub.com/dependabot/fetch-metadata) | action | minor | `v1.3.1` -> `v1.6.0` | --- ### Release Notes <details> <summary>dependabot/fetch-metadata (dependabot/fetch-metadata)</summary> ### [`v1.6.0`](https://togithub.com/dependabot/fetch-metadata/releases/tag/v1.6.0) [Compare Source](https://togithub.com/dependabot/fetch-metadata/compare/v1.5.1...v1.6.0) #### What's Changed - Add `.vscode` folder to `.gitignore` by [@&#8203;timothy-humphrey](https://togithub.com/timothy-humphrey) in [https://github.com/dependabot/fetch-metadata/pull/385](https://togithub.com/dependabot/fetch-metadata/pull/385) - Support for Grouped Updates by [@&#8203;Nishnha](https://togithub.com/Nishnha) in [https://github.com/dependabot/fetch-metadata/pull/396](https://togithub.com/dependabot/fetch-metadata/pull/396) - v1.6.0 by [@&#8203;fetch-metadata-action-automation](https://togithub.com/fetch-metadata-action-automation) in [https://github.com/dependabot/fetch-metadata/pull/403](https://togithub.com/dependabot/fetch-metadata/pull/403) #### New Contributors - [@&#8203;timothy-humphrey](https://togithub.com/timothy-humphrey) made their first contribution in [https://github.com/dependabot/fetch-metadata/pull/385](https://togithub.com/dependabot/fetch-metadata/pull/385) **Full Changelog**: dependabot/fetch-metadata@v1...v1.6.0 ### [`v1.5.1`](https://togithub.com/dependabot/fetch-metadata/releases/tag/v1.5.1) [Compare Source](https://togithub.com/dependabot/fetch-metadata/compare/v1.5.0...v1.5.1) #### What's Changed Bugfix: - Fix library parser to trim trailing LF by [@&#8203;kachick](https://togithub.com/kachick) in [https://github.com/dependabot/fetch-metadata/pull/380](https://togithub.com/dependabot/fetch-metadata/pull/380) Dep bumps that are trivial so decided to keep this a patch release: - Bump yargs from 17.7.1 to 17.7.2 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/dependabot/fetch-metadata/pull/379](https://togithub.com/dependabot/fetch-metadata/pull/379) - Bump [@&#8203;types/node](https://togithub.com/types/node) from 20.2.1 to 20.2.3 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/dependabot/fetch-metadata/pull/382](https://togithub.com/dependabot/fetch-metadata/pull/382) Internal-facing infra changes: - Group PR's for `eslint`-related deps by [@&#8203;jeffwidman](https://togithub.com/jeffwidman) in [https://github.com/dependabot/fetch-metadata/pull/374](https://togithub.com/dependabot/fetch-metadata/pull/374) - Bump the eslint-dependencies group with 3 updates by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/dependabot/fetch-metadata/pull/375](https://togithub.com/dependabot/fetch-metadata/pull/375) - Bump the eslint-dependencies group with 2 updates by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/dependabot/fetch-metadata/pull/378](https://togithub.com/dependabot/fetch-metadata/pull/378) - Switch to using an app token instead of a PAT by [@&#8203;jeffwidman](https://togithub.com/jeffwidman) in [https://github.com/dependabot/fetch-metadata/pull/362](https://togithub.com/dependabot/fetch-metadata/pull/362) - v1.5.1 by [@&#8203;fetch-metadata-action-automation](https://togithub.com/fetch-metadata-action-automation) in [https://github.com/dependabot/fetch-metadata/pull/384](https://togithub.com/dependabot/fetch-metadata/pull/384) **Full Changelog**: dependabot/fetch-metadata@v1...v1.5.1 ### [`v1.5.0`](https://togithub.com/dependabot/fetch-metadata/releases/tag/v1.5.0) [Compare Source](https://togithub.com/dependabot/fetch-metadata/compare/v1.4.0...v1.5.0) #### What's Changed New Features: - Added flag if "Maintainer changes" appears in the PR body by [@&#8203;mwaddell](https://togithub.com/mwaddell) in [https://github.com/dependabot/fetch-metadata/pull/174](https://togithub.com/dependabot/fetch-metadata/pull/174) Bumped Deps: - Bump [@&#8203;types/node](https://togithub.com/types/node) from 18.15.11 to 20.2.1 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/dependabot/fetch-metadata/pull/364](https://togithub.com/dependabot/fetch-metadata/pull/364) - Bump nock from 13.3.0 to 13.3.1 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/dependabot/fetch-metadata/pull/366](https://togithub.com/dependabot/fetch-metadata/pull/366) Docs: - Add minimum permissions to usage example by [@&#8203;jablko](https://togithub.com/jablko) in [https://github.com/dependabot/fetch-metadata/pull/343](https://togithub.com/dependabot/fetch-metadata/pull/343) - Document verification overrides in readme by [@&#8203;jeffwidman](https://togithub.com/jeffwidman) in [https://github.com/dependabot/fetch-metadata/pull/345](https://togithub.com/dependabot/fetch-metadata/pull/345) Code cleanup: - Simplify the release process by linking to release notes instead of copy/pasting them by [@&#8203;jeffwidman](https://togithub.com/jeffwidman) in [https://github.com/dependabot/fetch-metadata/pull/347](https://togithub.com/dependabot/fetch-metadata/pull/347) - Use the full email for the GitHub Actions bot by [@&#8203;jeffwidman](https://togithub.com/jeffwidman) in [https://github.com/dependabot/fetch-metadata/pull/354](https://togithub.com/dependabot/fetch-metadata/pull/354) - Inline the PR URL by [@&#8203;jeffwidman](https://togithub.com/jeffwidman) in [https://github.com/dependabot/fetch-metadata/pull/359](https://togithub.com/dependabot/fetch-metadata/pull/359) - No need to request escalated permissions for `GITHUB_TOKEN` by [@&#8203;jeffwidman](https://togithub.com/jeffwidman) in [https://github.com/dependabot/fetch-metadata/pull/357](https://togithub.com/dependabot/fetch-metadata/pull/357) - Remove unused step by [@&#8203;jeffwidman](https://togithub.com/jeffwidman) in [https://github.com/dependabot/fetch-metadata/pull/358](https://togithub.com/dependabot/fetch-metadata/pull/358) - Simplify `bin/bump-version` by [@&#8203;jeffwidman](https://togithub.com/jeffwidman) in [https://github.com/dependabot/fetch-metadata/pull/368](https://togithub.com/dependabot/fetch-metadata/pull/368) - Add a deeplink for tagging releases to the Readme by [@&#8203;jeffwidman](https://togithub.com/jeffwidman) in [https://github.com/dependabot/fetch-metadata/pull/369](https://togithub.com/dependabot/fetch-metadata/pull/369) - Stop using deprecated `set-output` by [@&#8203;jeffwidman](https://togithub.com/jeffwidman) in [https://github.com/dependabot/fetch-metadata/pull/370](https://togithub.com/dependabot/fetch-metadata/pull/370) - Add workflow for creating release PR's by [@&#8203;jeffwidman](https://togithub.com/jeffwidman) in [https://github.com/dependabot/fetch-metadata/pull/360](https://togithub.com/dependabot/fetch-metadata/pull/360) - Add workflow for floating the `v1` tag to the latest release by [@&#8203;jeffwidman](https://togithub.com/jeffwidman) in [https://github.com/dependabot/fetch-metadata/pull/361](https://togithub.com/dependabot/fetch-metadata/pull/361) **Full Changelog**: dependabot/fetch-metadata@v1...v1.5.0 ### [`v1.4.0`](https://togithub.com/dependabot/fetch-metadata/releases/tag/v1.4.0) [Compare Source](https://togithub.com/dependabot/fetch-metadata/compare/v1.3.6...v1.4.0) #### New Features - feat: add option to skip internal verifications by [@&#8203;yeikel](https://togithub.com/yeikel) in [https://github.com/dependabot/fetch-metadata/pull/336](https://togithub.com/dependabot/fetch-metadata/pull/336) #### Bugfix - Allow leading `v` on commit message versions by [@&#8203;jonmcquillan](https://togithub.com/jonmcquillan) in [https://github.com/dependabot/fetch-metadata/pull/338](https://togithub.com/dependabot/fetch-metadata/pull/338) #### Dep Bumps - Bump [@&#8203;typescript-eslint/eslint-plugin](https://togithub.com/typescript-eslint/eslint-plugin) from 5.48.2 to 5.49.0 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/dependabot/fetch-metadata/pull/307](https://togithub.com/dependabot/fetch-metadata/pull/307) - Bump [@&#8203;types/yargs](https://togithub.com/types/yargs) from 17.0.19 to 17.0.20 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/dependabot/fetch-metadata/pull/308](https://togithub.com/dependabot/fetch-metadata/pull/308) - Bump [@&#8203;typescript-eslint/parser](https://togithub.com/typescript-eslint/parser) from 5.48.2 to 5.49.0 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/dependabot/fetch-metadata/pull/309](https://togithub.com/dependabot/fetch-metadata/pull/309) - Bump eslint from 8.32.0 to 8.33.0 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/dependabot/fetch-metadata/pull/315](https://togithub.com/dependabot/fetch-metadata/pull/315) - Bump [@&#8203;typescript-eslint/parser](https://togithub.com/typescript-eslint/parser) from 5.49.0 to 5.50.0 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/dependabot/fetch-metadata/pull/314](https://togithub.com/dependabot/fetch-metadata/pull/314) - Bump [@&#8203;types/yargs](https://togithub.com/types/yargs) from 17.0.20 to 17.0.22 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/dependabot/fetch-metadata/pull/312](https://togithub.com/dependabot/fetch-metadata/pull/312) - Bump [@&#8203;vercel/ncc](https://togithub.com/vercel/ncc) from 0.36.0 to 0.36.1 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/dependabot/fetch-metadata/pull/311](https://togithub.com/dependabot/fetch-metadata/pull/311) - Bump typescript from 4.9.4 to 4.9.5 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/dependabot/fetch-metadata/pull/313](https://togithub.com/dependabot/fetch-metadata/pull/313) - Bump yargs from 17.6.2 to 17.7.1 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/dependabot/fetch-metadata/pull/322](https://togithub.com/dependabot/fetch-metadata/pull/322) - Bump eslint from 8.33.0 to 8.35.0 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/dependabot/fetch-metadata/pull/321](https://togithub.com/dependabot/fetch-metadata/pull/321) - Bump [@&#8203;typescript-eslint/eslint-plugin](https://togithub.com/typescript-eslint/eslint-plugin) from 5.49.0 to 5.54.0 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/dependabot/fetch-metadata/pull/319](https://togithub.com/dependabot/fetch-metadata/pull/319) - Bump [@&#8203;typescript-eslint/parser](https://togithub.com/typescript-eslint/parser) from 5.50.0 to 5.54.0 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/dependabot/fetch-metadata/pull/320](https://togithub.com/dependabot/fetch-metadata/pull/320) - Bump [@&#8203;types/node](https://togithub.com/types/node) from 18.11.18 to 18.14.2 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/dependabot/fetch-metadata/pull/318](https://togithub.com/dependabot/fetch-metadata/pull/318) - Bump [@&#8203;types/node](https://togithub.com/types/node) from 18.14.2 to 18.15.11 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/dependabot/fetch-metadata/pull/324](https://togithub.com/dependabot/fetch-metadata/pull/324) - Bump eslint from 8.35.0 to 8.37.0 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/dependabot/fetch-metadata/pull/327](https://togithub.com/dependabot/fetch-metadata/pull/327) - Bump [@&#8203;types/yargs](https://togithub.com/types/yargs) from 17.0.22 to 17.0.24 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/dependabot/fetch-metadata/pull/326](https://togithub.com/dependabot/fetch-metadata/pull/326) - Bump [@&#8203;typescript-eslint/parser](https://togithub.com/typescript-eslint/parser) from 5.54.0 to 5.57.1 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/dependabot/fetch-metadata/pull/330](https://togithub.com/dependabot/fetch-metadata/pull/330) - Bump [@&#8203;typescript-eslint/eslint-plugin](https://togithub.com/typescript-eslint/eslint-plugin) from 5.54.0 to 5.57.1 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/dependabot/fetch-metadata/pull/329](https://togithub.com/dependabot/fetch-metadata/pull/329) - Bump eslint from 8.37.0 to 8.38.0 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/dependabot/fetch-metadata/pull/340](https://togithub.com/dependabot/fetch-metadata/pull/340) - Bump [@&#8203;typescript-eslint/parser](https://togithub.com/typescript-eslint/parser) from 5.57.1 to 5.59.0 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/dependabot/fetch-metadata/pull/341](https://togithub.com/dependabot/fetch-metadata/pull/341) - Bump [@&#8203;typescript-eslint/eslint-plugin](https://togithub.com/typescript-eslint/eslint-plugin) from 5.57.1 to 5.59.0 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/dependabot/fetch-metadata/pull/342](https://togithub.com/dependabot/fetch-metadata/pull/342) #### Other - chore(ee): add devcontainer by [@&#8203;yeikel](https://togithub.com/yeikel) in [https://github.com/dependabot/fetch-metadata/pull/337](https://togithub.com/dependabot/fetch-metadata/pull/337) #### New Contributors - [@&#8203;jonmcquillan](https://togithub.com/jonmcquillan) made their first contribution in [https://github.com/dependabot/fetch-metadata/pull/338](https://togithub.com/dependabot/fetch-metadata/pull/338) - [@&#8203;yeikel](https://togithub.com/yeikel) made their first contribution in [https://github.com/dependabot/fetch-metadata/pull/337](https://togithub.com/dependabot/fetch-metadata/pull/337) **Full Changelog**: dependabot/fetch-metadata@v1...v1.4.0 ### [`v1.3.6`](https://togithub.com/dependabot/fetch-metadata/releases/tag/v1.3.6) [Compare Source](https://togithub.com/dependabot/fetch-metadata/compare/v1.3.5...v1.3.6) #### What's Changed - Drop mention of "locally" by [@&#8203;jeffwidman](https://togithub.com/jeffwidman) in [https://github.com/dependabot/fetch-metadata/pull/281](https://togithub.com/dependabot/fetch-metadata/pull/281) - Don't assume `git pull` fetches all branches/tags by [@&#8203;jeffwidman](https://togithub.com/jeffwidman) in [https://github.com/dependabot/fetch-metadata/pull/284](https://togithub.com/dependabot/fetch-metadata/pull/284) - Clarify release notes slightly by [@&#8203;jeffwidman](https://togithub.com/jeffwidman) in [https://github.com/dependabot/fetch-metadata/pull/283](https://togithub.com/dependabot/fetch-metadata/pull/283) - Bump eslint-plugin-promise from 6.0.1 to 6.1.1 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/dependabot/fetch-metadata/pull/287](https://togithub.com/dependabot/fetch-metadata/pull/287) - Bump [@&#8203;typescript-eslint/parser](https://togithub.com/typescript-eslint/parser) from 5.38.0 to 5.45.0 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/dependabot/fetch-metadata/pull/290](https://togithub.com/dependabot/fetch-metadata/pull/290) - Bump yargs and [@&#8203;types/yargs](https://togithub.com/types/yargs) by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/dependabot/fetch-metadata/pull/286](https://togithub.com/dependabot/fetch-metadata/pull/286) - Bump [@&#8203;types/node](https://togithub.com/types/node) from 18.11.9 to 18.11.10 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/dependabot/fetch-metadata/pull/289](https://togithub.com/dependabot/fetch-metadata/pull/289) - Bump decode-uri-component from 0.2.0 to 0.2.2 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/dependabot/fetch-metadata/pull/291](https://togithub.com/dependabot/fetch-metadata/pull/291) - Bump yaml from 2.1.1 to 2.1.3 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/dependabot/fetch-metadata/pull/288](https://togithub.com/dependabot/fetch-metadata/pull/288) - Bump [@&#8203;types/node](https://togithub.com/types/node) from 18.11.10 to 18.11.18 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/dependabot/fetch-metadata/pull/296](https://togithub.com/dependabot/fetch-metadata/pull/296) - Bump [@&#8203;vercel/ncc](https://togithub.com/vercel/ncc) from 0.34.0 to 0.36.0 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/dependabot/fetch-metadata/pull/294](https://togithub.com/dependabot/fetch-metadata/pull/294) - Bump dotenv from 16.0.2 to 16.0.3 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/dependabot/fetch-metadata/pull/293](https://togithub.com/dependabot/fetch-metadata/pull/293) - Bump typescript from 4.8.3 to 4.9.4 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/dependabot/fetch-metadata/pull/295](https://togithub.com/dependabot/fetch-metadata/pull/295) - Bump yaml from 2.1.3 to 2.2.1 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/dependabot/fetch-metadata/pull/292](https://togithub.com/dependabot/fetch-metadata/pull/292) - Bump json5 from 1.0.1 to 1.0.2 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/dependabot/fetch-metadata/pull/297](https://togithub.com/dependabot/fetch-metadata/pull/297) - Bump eslint from 8.23.1 to 8.32.0 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/dependabot/fetch-metadata/pull/303](https://togithub.com/dependabot/fetch-metadata/pull/303) - Bump [@&#8203;typescript-eslint/parser](https://togithub.com/typescript-eslint/parser) from 5.45.0 to 5.48.2 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/dependabot/fetch-metadata/pull/300](https://togithub.com/dependabot/fetch-metadata/pull/300) - Bump [@&#8203;typescript-eslint/eslint-plugin](https://togithub.com/typescript-eslint/eslint-plugin) from 5.42.0 to 5.48.2 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/dependabot/fetch-metadata/pull/302](https://togithub.com/dependabot/fetch-metadata/pull/302) - Bump eslint-plugin-import from 2.26.0 to 2.27.5 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/dependabot/fetch-metadata/pull/301](https://togithub.com/dependabot/fetch-metadata/pull/301) - Bump nock from 13.2.9 to 13.3.0 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/dependabot/fetch-metadata/pull/299](https://togithub.com/dependabot/fetch-metadata/pull/299) - Bump [@&#8203;types/yargs](https://togithub.com/types/yargs) from 17.0.15 to 17.0.19 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/dependabot/fetch-metadata/pull/304](https://togithub.com/dependabot/fetch-metadata/pull/304) - Fix parser for libraries by [@&#8203;kachick](https://togithub.com/kachick) in [https://github.com/dependabot/fetch-metadata/pull/224](https://togithub.com/dependabot/fetch-metadata/pull/224) #### New Contributors - [@&#8203;kachick](https://togithub.com/kachick) made their first contribution in [https://github.com/dependabot/fetch-metadata/pull/224](https://togithub.com/dependabot/fetch-metadata/pull/224) **Full Changelog**: dependabot/fetch-metadata@v1...v1.3.6 ### [`v1.3.5`](https://togithub.com/dependabot/fetch-metadata/releases/tag/v1.3.5) [Compare Source](https://togithub.com/dependabot/fetch-metadata/compare/v1.3.4...v1.3.5) #### What's Changed - v1.3.4 Release Notes by [@&#8203;Nishnha](https://togithub.com/Nishnha) in [https://github.com/dependabot/fetch-metadata/pull/267](https://togithub.com/dependabot/fetch-metadata/pull/267) - docs: fix auto-merge example by [@&#8203;rribeiro1](https://togithub.com/rribeiro1) in [https://github.com/dependabot/fetch-metadata/pull/250](https://togithub.com/dependabot/fetch-metadata/pull/250) - Bump [@&#8203;types/node](https://togithub.com/types/node) from 18.7.18 to 18.11.9 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/dependabot/fetch-metadata/pull/275](https://togithub.com/dependabot/fetch-metadata/pull/275) - Fix object-shorthand linter warnings by [@&#8203;mattt](https://togithub.com/mattt) in [https://github.com/dependabot/fetch-metadata/pull/276](https://togithub.com/dependabot/fetch-metadata/pull/276) - Bump [@&#8203;actions/core](https://togithub.com/actions/core) from 1.9.1 to 1.10.0 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/dependabot/fetch-metadata/pull/272](https://togithub.com/dependabot/fetch-metadata/pull/272) - Bump [@&#8203;typescript-eslint/eslint-plugin](https://togithub.com/typescript-eslint/eslint-plugin) from 5.38.0 to 5.42.0 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/dependabot/fetch-metadata/pull/274](https://togithub.com/dependabot/fetch-metadata/pull/274) - Bump [@&#8203;actions/github](https://togithub.com/actions/github) from 5.0.3 to 5.1.1 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/dependabot/fetch-metadata/pull/271](https://togithub.com/dependabot/fetch-metadata/pull/271) - Bump yargs and [@&#8203;types/yargs](https://togithub.com/types/yargs) by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/dependabot/fetch-metadata/pull/273](https://togithub.com/dependabot/fetch-metadata/pull/273) - Document steps for cutting a new release by [@&#8203;jeffwidman](https://togithub.com/jeffwidman) in [https://github.com/dependabot/fetch-metadata/pull/252](https://togithub.com/dependabot/fetch-metadata/pull/252) - Don't bump pin versions in `README.md` by [@&#8203;jeffwidman](https://togithub.com/jeffwidman) in [https://github.com/dependabot/fetch-metadata/pull/280](https://togithub.com/dependabot/fetch-metadata/pull/280) #### New Contributors - [@&#8203;Nishnha](https://togithub.com/Nishnha) made their first contribution in [https://github.com/dependabot/fetch-metadata/pull/267](https://togithub.com/dependabot/fetch-metadata/pull/267) - [@&#8203;rribeiro1](https://togithub.com/rribeiro1) made their first contribution in [https://github.com/dependabot/fetch-metadata/pull/250](https://togithub.com/dependabot/fetch-metadata/pull/250) **Full Changelog**: dependabot/fetch-metadata@v1...v1.3.5 ### [`v1.3.4`](https://togithub.com/dependabot/fetch-metadata/releases/tag/v1.3.4) [Compare Source](https://togithub.com/dependabot/fetch-metadata/compare/v1.3.3...v1.3.4) #### What's Changed - Pin only to major version, not full patch version by [@&#8203;jeffwidman](https://togithub.com/jeffwidman) in [https://github.com/dependabot/fetch-metadata/pull/246](https://togithub.com/dependabot/fetch-metadata/pull/246) - Fix broken logo on readme by [@&#8203;jeffwidman](https://togithub.com/jeffwidman) in [https://github.com/dependabot/fetch-metadata/pull/253](https://togithub.com/dependabot/fetch-metadata/pull/253) - Bump action to use node16 by [@&#8203;quinnjn](https://togithub.com/quinnjn) in [https://github.com/dependabot/fetch-metadata/pull/251](https://togithub.com/dependabot/fetch-metadata/pull/251) - Bump [@&#8203;typescript-eslint/eslint-plugin](https://togithub.com/typescript-eslint/eslint-plugin) from 5.20.0 to 5.38.0 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/dependabot/fetch-metadata/pull/256](https://togithub.com/dependabot/fetch-metadata/pull/256) - Bump [@&#8203;actions/core](https://togithub.com/actions/core) from 1.6.0 to 1.9.1 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/dependabot/fetch-metadata/pull/242](https://togithub.com/dependabot/fetch-metadata/pull/242) - Bump eslint-config-standard from 16.0.3 to 17.0.0 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/dependabot/fetch-metadata/pull/214](https://togithub.com/dependabot/fetch-metadata/pull/214) - Bump [@&#8203;types/node](https://togithub.com/types/node) from 17.0.25 to 18.7.18 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/dependabot/fetch-metadata/pull/255](https://togithub.com/dependabot/fetch-metadata/pull/255) - Bump [@&#8203;typescript-eslint/parser](https://togithub.com/typescript-eslint/parser) from 5.20.0 to 5.38.0 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/dependabot/fetch-metadata/pull/254](https://togithub.com/dependabot/fetch-metadata/pull/254) - Bump eslint from 8.13.0 to 8.23.1 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/dependabot/fetch-metadata/pull/259](https://togithub.com/dependabot/fetch-metadata/pull/259) - Bump nock from 13.2.4 to 13.2.9 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/dependabot/fetch-metadata/pull/260](https://togithub.com/dependabot/fetch-metadata/pull/260) - Bump yargs and [@&#8203;types/yargs](https://togithub.com/types/yargs) by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/dependabot/fetch-metadata/pull/261](https://togithub.com/dependabot/fetch-metadata/pull/261) - Bump eslint-plugin-promise from 6.0.0 to 6.0.1 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/dependabot/fetch-metadata/pull/263](https://togithub.com/dependabot/fetch-metadata/pull/263) - Bump dotenv from 16.0.0 to 16.0.2 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/dependabot/fetch-metadata/pull/262](https://togithub.com/dependabot/fetch-metadata/pull/262) - Bump [@&#8203;vercel/ncc](https://togithub.com/vercel/ncc) from 0.33.4 to 0.34.0 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/dependabot/fetch-metadata/pull/264](https://togithub.com/dependabot/fetch-metadata/pull/264) - Bump [@&#8203;actions/github](https://togithub.com/actions/github) from 5.0.1 to 5.0.3 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/dependabot/fetch-metadata/pull/265](https://togithub.com/dependabot/fetch-metadata/pull/265) - Bump ts-node from 10.7.0 to 10.9.1 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/dependabot/fetch-metadata/pull/266](https://togithub.com/dependabot/fetch-metadata/pull/266) - Bump typescript from 4.6.3 to 4.8.3 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/dependabot/fetch-metadata/pull/257](https://togithub.com/dependabot/fetch-metadata/pull/257) - Bump yaml from 2.0.1 to 2.1.1 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/dependabot/fetch-metadata/pull/258](https://togithub.com/dependabot/fetch-metadata/pull/258) #### New Contributors - [@&#8203;jeffwidman](https://togithub.com/jeffwidman) made their first contribution in [https://github.com/dependabot/fetch-metadata/pull/246](https://togithub.com/dependabot/fetch-metadata/pull/246) - [@&#8203;quinnjn](https://togithub.com/quinnjn) made their first contribution in [https://github.com/dependabot/fetch-metadata/pull/251](https://togithub.com/dependabot/fetch-metadata/pull/251) **Full Changelog**: dependabot/fetch-metadata@v1.3.3...v1.3.4 ### [`v1.3.3`](https://togithub.com/dependabot/fetch-metadata/releases/tag/v1.3.3) [Compare Source](https://togithub.com/dependabot/fetch-metadata/compare/v1.3.2...v1.3.3) #### What's Changed - action.yaml: fix skip-commit-verification quoting by [@&#8203;jsok](https://togithub.com/jsok) in [https://github.com/dependabot/fetch-metadata/pull/232](https://togithub.com/dependabot/fetch-metadata/pull/232) #### New Contributors - [@&#8203;jsok](https://togithub.com/jsok) made their first contribution in [https://github.com/dependabot/fetch-metadata/pull/232](https://togithub.com/dependabot/fetch-metadata/pull/232) **Full Changelog**: dependabot/fetch-metadata@v1.3.2...v1.3.3 ### [`v1.3.2`](https://togithub.com/dependabot/fetch-metadata/releases/tag/v1.3.2) [Compare Source](https://togithub.com/dependabot/fetch-metadata/compare/v1.3.1...v1.3.2) #### What's Changed - Update CODEOWNERS by [@&#8203;mattt](https://togithub.com/mattt) in [https://github.com/dependabot/fetch-metadata/pull/211](https://togithub.com/dependabot/fetch-metadata/pull/211) - Add 'skip-commit-verification' as an input for GitHub Enterprise Server users by [@&#8203;brrygrdn](https://togithub.com/brrygrdn) in [https://github.com/dependabot/fetch-metadata/pull/225](https://togithub.com/dependabot/fetch-metadata/pull/225) #### New Contributors - [@&#8203;mattt](https://togithub.com/mattt) made their first contribution in [https://github.com/dependabot/fetch-metadata/pull/211](https://togithub.com/dependabot/fetch-metadata/pull/211) **Full Changelog**: dependabot/fetch-metadata@v1.3.1...v1.3.2 </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [x] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://developer.mend.io/github/ilkka/nisse).
diff --git a/.github/workflows/dependabot-reviewer.yml b/.github/workflows/dependabot-reviewer.yml
@@ -13,7 +13,7 @@ jobs:
     steps:
       - name: Dependabot metadata
         id: dependabot-metadata
-        uses: dependabot/fetch-metadata@v1.3.1
+        uses: dependabot/fetch-metadata@v1.6.0
       - name: Enable auto-merge for Dependabot PRs
         run: gh pr merge --auto --merge "$PR_URL"
         env:
