Update github actions using dependabot

Autogenerate changelog entry for dependabot PRs
Add dependabot label to dependabot PRs
2023-05-06 01:27:13 +02:00 · 2023-05-06 01:06:41 +02:00 · 2023-05-06 01:06:32 +02:00 · 2023-05-04 13:00:54 +02:00 · 2023-05-04 12:38:13 +02:00 · 2023-05-03 09:51:05 +02:00
5 changed files with 48 additions and 5 deletions
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@ -10,3 +10,15 @@ updates:
      - vbrandl
    labels:
      - dependencies
+      - dependabot
+
+  - package-ecosystem: 'github-actions'
+    directory: '/'
+    schedule:
+      interval: 'daily'
+    open-pull-requests-limit: 10
+    assignees:
+      - vbrandl
+    labels:
+      - dependabot
+      - dependencies
--- a/.github/workflows/dependabot-changelog.yml
+++ b/.github/workflows/dependabot-changelog.yml
@ -0,0 +1,26 @@
+name: 'Dependabot Changelog'
+on:
+  pull_request:
+    types:
+      - opened
+      - synchronize
+      - reopened
+      - ready_for_review
+      - labeled
+      - unlabeled
+
+jobs:
+  changelog:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+    steps:
+      - uses: actions/checkout@v3
+        with:
+          token: ${{ secrets.GITHUB_TOKEN }}
+      - uses: dangoslen/dependabot-changelog-helper@v3
+        with:
+          activationLabel: 'dependabot'
+      - uses: stefanzweifel/git-auto-commit-action@v4
+        with:
+          commit_message: "Update Changelog"
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@ -5,6 +5,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0

 ## [Unreleased]

+
+## [0.35.0] 2023-05-04
+
 * Updated [`h2`](https://github.com/hyperium/h2) from 0.3.16 to 0.3.17, fixes [SEC#11] ([#599])
 * Updated [`git2`](https://github.com/rust-lang/git2-rs) from 0.16.1 to 0.17.0 ([#602])
 * Updated [`git2`](https://github.com/rust-lang/git2-rs) from 0.17.0 to 0.17.1 ([#603])
@ -14,6 +17,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 * Updated [`vergen`](https://github.com/rustyhorde/vergen) from 8.1.1 to 8.1.3 ([#608])
 * Downgrade yanked [`tracing`](https://github.com/tokio-rs/tracing) 0.1.38 to 0.1.37 ([#611])
 * Updated [`reqwest`](https://github.com/seanmonstar/reqwest) from 0.11.16 to 0.11.17 ([#609])
+* Updated [`anyhow`](https://github.com/dtolnay/anyhow) from 1.0.70 to 1.0.71 ([#610])

 [#599]: https://github.com/vbrandl/hoc/pull/599
 [#602]: https://github.com/vbrandl/hoc/pull/602
@ -24,6 +28,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 [#608]: https://github.com/vbrandl/hoc/pull/608
 [#611]: https://github.com/vbrandl/hoc/pull/611
 [#609]: https://github.com/vbrandl/hoc/pull/609
+[#610]: https://github.com/vbrandl/hoc/pull/610

 [SEC#11]: https://github.com/vbrandl/hoc/security/dependabot/11

--- a/Cargo.lock
+++ b/Cargo.lock
@ -272,9 +272,9 @@ dependencies = [

 [[package]]
 name = "anyhow"
-version = "1.0.70"
+version = "1.0.71"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7de8ce5e0f9f8d88245311066a578d72b7af3e7088f32783804676302df237e4"
+checksum = "9c7d0618f0e0b7e8ff11427422b64564d5fb0be1940354bfe2e0529b18a9d9b8"

 [[package]]
 name = "arc-swap"
@ -1420,7 +1420,7 @@ checksum = "7f24254aa9a54b5c858eaee2f5bccdb46aaf0e486a595ed5fd8f86ba55232a70"

 [[package]]
 name = "hoc"
-version = "0.34.0"
+version = "0.35.0"
 dependencies = [
 "actix-rt",
 "actix-web",
--- a/Cargo.toml
+++ b/Cargo.toml
@ -1,6 +1,6 @@
 [package]
 name = "hoc"
-version = "0.34.0"
+version = "0.35.0"
 authors = ["Valentin Brandl <vbrandl@riseup.net>"]
 edition = "2021"
 build = "src/build.rs"
@ -37,7 +37,7 @@ tracing-log = "0.1.3"
 tracing-subscriber = { version = "0.3.17", features = ["registry", "env-filter"] }

 [build-dependencies]
-anyhow = "1.0.70"
+anyhow = "1.0.71"
 ructe = { version = "0.16.1", features = ["mime03"] }
 vergen = { version = "8.1.3", default-features = false, features = ["git", "gitoxide"] }
Author	SHA1	Message	Date
Valentin Brandl	e6b1dfece8	Update github actions using dependabot All checks were successful continuous-integration/drone/push Build is passing Details	2023-05-06 01:27:13 +02:00
Valentin Brandl	ce9db6b4a7	Autogenerate changelog entry for dependabot PRs	2023-05-06 01:06:41 +02:00
Valentin Brandl	24f2d43550	Add `dependabot` label to dependabot PRs	2023-05-06 01:06:32 +02:00
Valentin Brandl	43bbf4d377	Merge pull request #612 from vbrandl/release/v0.35.0 Some checks failed Security audit / security_audit (push) Failing after 13s Details / Rustfmt (push) Successful in 44s Details / Clippy (push) Failing after 43s Details / Test Suite (ubuntu-latest) (push) Failing after 43s Details continuous-integration/drone/push Build is passing Details Release v0.35.0	2023-05-04 13:00:54 +02:00
Valentin Brandl	23d346d899	Bump version Some checks failed continuous-integration/drone/push Build is passing Details Release / tests (push) Failing after 1m4s Details Release / Publishing for ${{ matrix.os }} (linux, , ubuntu-latest, stable, x86_64-unknown-linux-gnu) (push) Has been skipped Details Release / Publishing for ${{ matrix.os }} (macos, , macos-latest, stable, x86_64-apple-darwin) (push) Has been skipped Details Release / Publishing for ${{ matrix.os }} (windows, .exe, windows-latest, stable, x86_64-pc-windows-msvc) (push) Has been skipped Details Release / Update Changelog (push) Has been skipped Details continuous-integration/drone/tag Build is passing Details	2023-05-04 12:38:13 +02:00
Valentin Brandl	9186de3b53	Merge pull request #610 from vbrandl/dependabot/cargo/anyhow-1.0.71 Some checks failed / Rustfmt (push) Successful in 1m30s Details / Test Suite (ubuntu-latest) (push) Failing after 42s Details / Clippy (push) Failing after 57s Details Security audit / security_audit (push) Failing after 17s Details continuous-integration/drone/push Build is passing Details chore(deps): Bump anyhow from 1.0.70 to 1.0.71	2023-05-03 09:51:05 +02:00
Valentin Brandl	59b1ff41fc	Update changelog All checks were successful continuous-integration/drone/push Build is passing Details	2023-05-03 09:37:57 +02:00
dependabot[bot]	17016c39bf	chore(deps): Bump anyhow from 1.0.70 to 1.0.71 Bumps [anyhow](https://github.com/dtolnay/anyhow) from 1.0.70 to 1.0.71. - [Release notes](https://github.com/dtolnay/anyhow/releases) - [Commits](https://github.com/dtolnay/anyhow/compare/1.0.70...1.0.71) --- updated-dependencies: - dependency-name: anyhow dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	2023-05-03 07:24:27 +00:00
Valentin Brandl	6041c5367b	Merge pull request #609 from vbrandl/dependabot/cargo/reqwest-0.11.17 chore(deps): Bump reqwest from 0.11.16 to 0.11.17	2023-05-03 09:23:45 +02:00