Use custom token to trigger reruns

Merge pull request #618 from vbrandl/dependabot/cargo/tokio-1.28.1
Bump tokio from 1.28.0 to 1.28.1
2023-05-17 15:15:49 +02:00 · 2023-05-11 13:35:05 +02:00 · 2023-05-11 11:21:01 +00:00 · 2023-05-11 11:20:47 +00:00 · 2023-05-11 13:20:07 +02:00 · 2023-05-11 11:06:57 +00:00
6 changed files with 52 additions and 10 deletions
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@ -10,3 +10,15 @@ updates:
      - vbrandl
    labels:
      - dependencies
+      - dependabot
+
+  - package-ecosystem: 'github-actions'
+    directory: '/'
+    schedule:
+      interval: 'daily'
+    open-pull-requests-limit: 10
+    assignees:
+      - vbrandl
+    labels:
+      - dependabot
+      - dependencies
--- a/.github/workflows/dependabot-changelog.yml
+++ b/.github/workflows/dependabot-changelog.yml
@ -0,0 +1,26 @@
+name: 'Dependabot Changelog'
+on:
+  pull_request:
+    types:
+      - opened
+      - synchronize
+      - reopened
+      - ready_for_review
+      - labeled
+      - unlabeled
+
+jobs:
+  changelog:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+    steps:
+      - uses: actions/checkout@v3
+        with:
+          token: ${{ secrets.ACTION_TOKEN }}
+      - uses: dangoslen/dependabot-changelog-helper@v3
+        with:
+          activationLabel: 'dependabot'
+      - uses: stefanzweifel/git-auto-commit-action@v4
+        with:
+          commit_message: "Update Changelog"
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@ -42,7 +42,7 @@ jobs:
          override: true

      - name: Cache cargo registry, index and build directory
-        uses: actions/cache@v2
+        uses: actions/cache@v3
        with:
          path: |
            ~/.cargo/registry
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@ -4,6 +4,10 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).

 ## [Unreleased]
+### Dependencies
+- Bump `serde` from 1.0.160 to 1.0.163 (#613, #617)
+- Bump `actions/cache` from 2 to 3 (#616)
+- Bump `tokio` from 1.28.0 to 1.28.1 (#618)


 ## [0.35.0] 2023-05-04
@ -227,4 +231,4 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 [#502]: https://github.com/vbrandl/hoc/pull/502
 [#503]: https://github.com/vbrandl/hoc/pull/503
 [#504]: https://github.com/vbrandl/hoc/pull/504
-[#508]: https://github.com/vbrandl/hoc/pull/508
+[#508]: https://github.com/vbrandl/hoc/pull/508
--- a/Cargo.lock
+++ b/Cargo.lock
@ -2357,18 +2357,18 @@ checksum = "bebd363326d05ec3e2f532ab7660680f3b02130d780c299bca73469d521bc0ed"

 [[package]]
 name = "serde"
-version = "1.0.160"
+version = "1.0.163"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "bb2f3770c8bce3bcda7e149193a069a0f4365bda1fa5cd88e03bca26afc1216c"
+checksum = "2113ab51b87a539ae008b5c6c02dc020ffa39afd2d83cffcb3f4eb2722cebec2"
 dependencies = [
 "serde_derive",
 ]

 [[package]]
 name = "serde_derive"
-version = "1.0.160"
+version = "1.0.163"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "291a097c63d8497e00160b166a967a4a79c64f3facdd01cbd7502231688d77df"
+checksum = "8c805777e3930c8883389c602315a24224bcc738b63905ef87cd1420353ea93e"
 dependencies = [
 "proc-macro2",
 "quote",
@ -2596,9 +2596,9 @@ checksum = "1f3ccbac311fea05f86f61904b462b55fb3df8837a366dfc601a0161d0532f20"

 [[package]]
 name = "tokio"
-version = "1.28.0"
+version = "1.28.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c3c786bf8134e5a3a166db9b29ab8f48134739014a3eca7bc6bfa95d673b136f"
+checksum = "0aa32867d44e6f2ce3385e89dceb990188b8bb0fb25b0cf576647a6f98ac5105"
 dependencies = [
 "autocfg",
 "bytes",
--- a/Cargo.toml
+++ b/Cargo.toml
@ -26,7 +26,7 @@ mime = "0.3"
 number_prefix = "0.4.0"
 openssl-probe = "0.1.5"
 reqwest = "0.11.17"
-serde = "1.0.158"
+serde = "1.0.163"
 serde_derive = "1.0.137"
 serde_json = "1.0.94"
 tracing = "0.1.37"
@ -45,4 +45,4 @@ vergen = { version = "8.1.3", default-features = false, features = ["git", "gito
 awc = "3.1.1"
 ructe = "0.16.1"
 tempfile = "3.5.0"
-tokio = "1.28.0"
+tokio = "1.28.1"
Author	SHA1	Message	Date
Valentin Brandl	78078132ce	Use custom token to trigger reruns All checks were successful continuous-integration/drone/push Build is passing Details	2023-05-17 15:15:49 +02:00
Valentin Brandl	6aa253d44e	Merge pull request #618 from vbrandl/dependabot/cargo/tokio-1.28.1 Some checks failed Security audit / security_audit (push) Failing after 15s Details / Rustfmt (push) Successful in 44s Details / Test Suite (ubuntu-latest) (push) Failing after 44s Details / Clippy (push) Failing after 30s Details continuous-integration/drone/push Build is passing Details Bump tokio from 1.28.0 to 1.28.1	2023-05-11 13:35:05 +02:00
dependabot[bot]	d461a8f6a1	Update Changelog	2023-05-11 11:21:01 +00:00
dependabot[bot]	4847cc4f1f	Bump tokio from 1.28.0 to 1.28.1 Bumps [tokio](https://github.com/tokio-rs/tokio) from 1.28.0 to 1.28.1. - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](https://github.com/tokio-rs/tokio/compare/tokio-1.28.0...tokio-1.28.1) --- updated-dependencies: - dependency-name: tokio dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	2023-05-11 11:20:47 +00:00
Valentin Brandl	bef518d594	Merge pull request #617 from vbrandl/dependabot/cargo/serde-1.0.163 Bump serde from 1.0.162 to 1.0.163	2023-05-11 13:20:07 +02:00
dependabot[bot]	c22cc59924	Update Changelog	2023-05-11 11:06:57 +00:00
dependabot[bot]	a4e28984ef	Bump serde from 1.0.162 to 1.0.163 Bumps [serde](https://github.com/serde-rs/serde) from 1.0.162 to 1.0.163. - [Release notes](https://github.com/serde-rs/serde/releases) - [Commits](https://github.com/serde-rs/serde/compare/v1.0.162...v1.0.163) --- updated-dependencies: - dependency-name: serde dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	2023-05-11 11:06:41 +00:00
Valentin Brandl	f4372c3248	Merge pull request #616 from vbrandl/dependabot/github_actions/actions/cache-3 Some checks failed Security audit / security_audit (push) Failing after 14s Details / Rustfmt (push) Successful in 45s Details / Clippy (push) Failing after 39s Details / Test Suite (ubuntu-latest) (push) Failing after 40s Details continuous-integration/drone/push Build is passing Details Bump actions/cache from 2 to 3	2023-05-06 01:47:27 +02:00
dependabot[bot]	e9554a20a7	Update Changelog	2023-05-05 23:36:33 +00:00
dependabot[bot]	7862446e16	Bump actions/cache from 2 to 3 Bumps [actions/cache](https://github.com/actions/cache) from 2 to 3. - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](https://github.com/actions/cache/compare/v2...v3) --- updated-dependencies: - dependency-name: actions/cache dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>	2023-05-05 23:36:18 +00:00
Valentin Brandl	b4a7444442	Merge pull request #615 from vbrandl/feature/dependabot-auto-changelog Some checks failed Security audit / security_audit (push) Failing after 15s Details / Clippy (push) Failing after 42s Details / Test Suite (ubuntu-latest) (push) Failing after 43s Details / Rustfmt (push) Successful in 45s Details continuous-integration/drone/push Build is passing Details Update github actions using dependabot	2023-05-06 01:35:56 +02:00
Valentin Brandl	66861cb4d3	Merge branch 'master' into feature/dependabot-auto-changelog	2023-05-06 01:32:13 +02:00
Valentin Brandl	e6b1dfece8	Update github actions using dependabot All checks were successful continuous-integration/drone/push Build is passing Details	2023-05-06 01:27:13 +02:00
Valentin Brandl	6837660a79	Merge pull request #613 from vbrandl/dependabot/cargo/serde-1.0.162 Some checks failed Security audit / security_audit (push) Failing after 17s Details / Rustfmt (push) Successful in 55s Details / Clippy (push) Failing after 50s Details / Test Suite (ubuntu-latest) (push) Failing after 41s Details continuous-integration/drone/push Build is passing Details chore(deps): Bump serde from 1.0.160 to 1.0.162	2023-05-06 01:18:14 +02:00
dependabot[bot]	109886ad9a	Update Changelog	2023-05-05 23:12:00 +00:00
dependabot[bot]	dcadae98b6	chore(deps): Bump serde from 1.0.160 to 1.0.162 Bumps [serde](https://github.com/serde-rs/serde) from 1.0.160 to 1.0.162. - [Release notes](https://github.com/serde-rs/serde/releases) - [Commits](https://github.com/serde-rs/serde/compare/v1.0.160...1.0.162) --- updated-dependencies: - dependency-name: serde dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	2023-05-05 23:11:48 +00:00
Valentin Brandl	4845826023	Merge pull request #614 from vbrandl/feature/dependabot-auto-changelog Autogenerate changelog entry for dependabot PRs	2023-05-06 01:10:58 +02:00
Valentin Brandl	ce9db6b4a7	Autogenerate changelog entry for dependabot PRs	2023-05-06 01:06:41 +02:00
Valentin Brandl	24f2d43550	Add `dependabot` label to dependabot PRs	2023-05-06 01:06:32 +02:00
Valentin Brandl	43bbf4d377	Merge pull request #612 from vbrandl/release/v0.35.0 Some checks failed Security audit / security_audit (push) Failing after 13s Details / Rustfmt (push) Successful in 44s Details / Clippy (push) Failing after 43s Details / Test Suite (ubuntu-latest) (push) Failing after 43s Details continuous-integration/drone/push Build is passing Details Release v0.35.0	2023-05-04 13:00:54 +02:00