Repository: argoproj/argo-rollouts
Pull request #2286 (2022-10-06 00:32:54)

chore(deps): bump dependabot/fetch-metadata from 1.3.3 to 1.3.4
Bumps [dependabot/fetch-metadata](https://github.com/dependabot/fetch-metadata) from 1.3.3 to 1.3.4.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/dependabot/fetch-metadata/releases">dependabot/fetch-metadata's releases</a>.</em></p>
<blockquote>
<h2>v1.3.4</h2>
<h2>What's Changed</h2>
<ul>
<li>Pin only to major version, not full patch version by <a href="https://github.com/jeffwidman"><code>@​jeffwidman</code></a> in <a href="https://github-redirect.dependabot.com/dependabot/fetch-metadata/pull/246">dependabot/fetch-metadata#246</a></li>
<li>Fix broken logo on readme by <a href="https://github.com/jeffwidman"><code>@​jeffwidman</code></a> in <a href="https://github-redirect.dependabot.com/dependabot/fetch-metadata/pull/253">dependabot/fetch-metadata#253</a></li>
<li>Bump action to use node16 by <a href="https://github.com/quinnjn"><code>@​quinnjn</code></a> in <a href="https://github-redirect.dependabot.com/dependabot/fetch-metadata/pull/251">dependabot/fetch-metadata#251</a></li>
<li>Bump <code>@​typescript-eslint/eslint-plugin</code> from 5.20.0 to 5.38.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://github-redirect.dependabot.com/dependabot/fetch-metadata/pull/256">dependabot/fetch-metadata#256</a></li>
<li>Bump <code>@​actions/core</code> from 1.6.0 to 1.9.1 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://github-redirect.dependabot.com/dependabot/fetch-metadata/pull/242">dependabot/fetch-metadata#242</a></li>
<li>Bump eslint-config-standard from 16.0.3 to 17.0.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://github-redirect.dependabot.com/dependabot/fetch-metadata/pull/214">dependabot/fetch-metadata#214</a></li>
<li>Bump <code>@​types/node</code> from 17.0.25 to 18.7.18 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://github-redirect.dependabot.com/dependabot/fetch-metadata/pull/255">dependabot/fetch-metadata#255</a></li>
<li>Bump <code>@​typescript-eslint/parser</code> from 5.20.0 to 5.38.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://github-redirect.dependabot.com/dependabot/fetch-metadata/pull/254">dependabot/fetch-metadata#254</a></li>
<li>Bump eslint from 8.13.0 to 8.23.1 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://github-redirect.dependabot.com/dependabot/fetch-metadata/pull/259">dependabot/fetch-metadata#259</a></li>
<li>Bump nock from 13.2.4 to 13.2.9 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://github-redirect.dependabot.com/dependabot/fetch-metadata/pull/260">dependabot/fetch-metadata#260</a></li>
<li>Bump yargs and <code>@​types/yargs</code> by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://github-redirect.dependabot.com/dependabot/fetch-metadata/pull/261">dependabot/fetch-metadata#261</a></li>
<li>Bump eslint-plugin-promise from 6.0.0 to 6.0.1 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://github-redirect.dependabot.com/dependabot/fetch-metadata/pull/263">dependabot/fetch-metadata#263</a></li>
<li>Bump dotenv from 16.0.0 to 16.0.2 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://github-redirect.dependabot.com/dependabot/fetch-metadata/pull/262">dependabot/fetch-metadata#262</a></li>
<li>Bump <code>@​vercel/ncc</code> from 0.33.4 to 0.34.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://github-redirect.dependabot.com/dependabot/fetch-metadata/pull/264">dependabot/fetch-metadata#264</a></li>
<li>Bump <code>@​actions/github</code> from 5.0.1 to 5.0.3 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://github-redirect.dependabot.com/dependabot/fetch-metadata/pull/265">dependabot/fetch-metadata#265</a></li>
<li>Bump ts-node from 10.7.0 to 10.9.1 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://github-redirect.dependabot.com/dependabot/fetch-metadata/pull/266">dependabot/fetch-metadata#266</a></li>
<li>Bump typescript from 4.6.3 to 4.8.3 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://github-redirect.dependabot.com/dependabot/fetch-metadata/pull/257">dependabot/fetch-metadata#257</a></li>
<li>Bump yaml from 2.0.1 to 2.1.1 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://github-redirect.dependabot.com/dependabot/fetch-metadata/pull/258">dependabot/fetch-metadata#258</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/jeffwidman"><code>@​jeffwidman</code></a> made their first contribution in <a href="https://github-redirect.dependabot.com/dependabot/fetch-metadata/pull/246">dependabot/fetch-metadata#246</a></li>
<li><a href="https://github.com/quinnjn"><code>@​quinnjn</code></a> made their first contribution in <a href="https://github-redirect.dependabot.com/dependabot/fetch-metadata/pull/251">dependabot/fetch-metadata#251</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/dependabot/fetch-metadata/compare/v1.3.3...v1.3.4">https://github.com/dependabot/fetch-metadata/compare/v1.3.3...v1.3.4</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/dependabot/fetch-metadata/commit/bfc19f43c126171ed783cdcf9a125055b7831d32"><code>bfc19f4</code></a> v1.3.4</li>
<li><a href="https://github.com/dependabot/fetch-metadata/commit/4367f5862b4756234c862b5335cf73defba245a6"><code>4367f58</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/dependabot/fetch-metadata/issues/258">#258</a> from dependabot/dependabot/npm_and_yarn/yaml-2.1.1</li>
<li><a href="https://github.com/dependabot/fetch-metadata/commit/00ab600844a567fa21584ebf001daf5fec173387"><code>00ab600</code></a> Manually bump dist/</li>
<li><a href="https://github.com/dependabot/fetch-metadata/commit/bdbe81d735980eec3b9c2f5d162638bee8daa76f"><code>bdbe81d</code></a> Bump yaml from 2.0.1 to 2.1.1</li>
<li><a href="https://github.com/dependabot/fetch-metadata/commit/5fc325ad56549ed07c93e902d0c35ae5a483ed85"><code>5fc325a</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/dependabot/fetch-metadata/issues/257">#257</a> from dependabot/dependabot/npm_and_yarn/typescript-4.8.3</li>
<li><a href="https://github.com/dependabot/fetch-metadata/commit/c91309cd90cb48f133dcc458044df5ff3aa3e9ec"><code>c91309c</code></a> Bump typescript from 4.6.3 to 4.8.3</li>
<li><a href="https://github.com/dependabot/fetch-metadata/commit/264d039a3f5a596695bc8045bf2c43ce60fcd768"><code>264d039</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/dependabot/fetch-metadata/issues/266">#266</a> from dependabot/dependabot/npm_and_yarn/ts-node-10.9.1</li>
<li><a href="https://github.com/dependabot/fetch-metadata/commit/d1cd6ed64fede7541a98652022029db656398456"><code>d1cd6ed</code></a> Bump ts-node from 10.7.0 to 10.9.1</li>
<li><a href="https://github.com/dependabot/fetch-metadata/commit/e3cb77ec614c3e9a4b62d5492e0f69fe74fb49f1"><code>e3cb77e</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/dependabot/fetch-metadata/issues/265">#265</a> from dependabot/dependabot/npm_and_yarn/actions/githu...</li>
<li><a href="https://github.com/dependabot/fetch-metadata/commit/e46234153b70533a9f066558bf481160f6bd9c29"><code>e462341</code></a> [dependabot skip] Update dist/ with build changes</li>
<li>Additional commits viewable in <a href="https://github.com/dependabot/fetch-metadata/compare/v1.3.3...v1.3.4">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=dependabot/fetch-metadata&package-manager=github_actions&previous-version=1.3.3&new-version=1.3.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>

sonarcloud[bot]: Kudos, SonarCloud Quality Gate passed!&nbsp; &nbsp; [![Quality Gate passed](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/checks/QualityGateBadge/passed-16px.png 'Quality Gate passed')](https://sonarcloud.io/dashboard?id=argoproj_argo-rollouts&pullRequest=2286)

[![Bug](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/common/bug-16px.png 'Bug')](https://sonarcloud.io/project/issues?id=argoproj_argo-rollouts&pullRequest=2286&resolved=false&types=BUG) [![A](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/checks/RatingBadge/A-16px.png 'A')](https://sonarcloud.io/project/issues?id=argoproj_argo-rollouts&pullRequest=2286&resolved=false&types=BUG) [0 Bugs](https://sonarcloud.io/project/issues?id=argoproj_argo-rollouts&pullRequest=2286&resolved=false&types=BUG)  
[![Vulnerability](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/common/vulnerability-16px.png 'Vulnerability')](https://sonarcloud.io/project/issues?id=argoproj_argo-rollouts&pullRequest=2286&resolved=false&types=VULNERABILITY) [![A](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/checks/RatingBadge/A-16px.png 'A')](https://sonarcloud.io/project/issues?id=argoproj_argo-rollouts&pullRequest=2286&resolved=false&types=VULNERABILITY) [0 Vulnerabilities](https://sonarcloud.io/project/issues?id=argoproj_argo-rollouts&pullRequest=2286&resolved=false&types=VULNERABILITY)  
[![Security Hotspot](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/common/security_hotspot-16px.png 'Security Hotspot')](https://sonarcloud.io/project/security_hotspots?id=argoproj_argo-rollouts&pullRequest=2286&resolved=false&types=SECURITY_HOTSPOT) [![A](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/checks/RatingBadge/A-16px.png 'A')](https://sonarcloud.io/project/security_hotspots?id=argoproj_argo-rollouts&pullRequest=2286&resolved=false&types=SECURITY_HOTSPOT) [0 Security Hotspots](https://sonarcloud.io/project/security_hotspots?id=argoproj_argo-rollouts&pullRequest=2286&resolved=false&types=SECURITY_HOTSPOT)  
[![Code Smell](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/common/code_smell-16px.png 'Code Smell')](https://sonarcloud.io/project/issues?id=argoproj_argo-rollouts&pullRequest=2286&resolved=false&types=CODE_SMELL) [![A](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/checks/RatingBadge/A-16px.png 'A')](https://sonarcloud.io/project/issues?id=argoproj_argo-rollouts&pullRequest=2286&resolved=false&types=CODE_SMELL) [0 Code Smells](https://sonarcloud.io/project/issues?id=argoproj_argo-rollouts&pullRequest=2286&resolved=false&types=CODE_SMELL)

[![No Coverage information](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/checks/CoverageChart/NoCoverageInfo-16px.png 'No Coverage information')](https://sonarcloud.io/component_measures?id=argoproj_argo-rollouts&pullRequest=2286) No Coverage information  
[![No Duplication information](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/checks/Duplications/NoDuplicationInfo-16px.png 'No Duplication information')](https://sonarcloud.io/component_measures?id=argoproj_argo-rollouts&pullRequest=2286&metric=duplicated_lines_density&view=list) No Duplication information



Patch:
diff --git a/.github/workflows/dependabot_automerge.yml b/.github/workflows/dependabot_automerge.yml
index 0fadf0037..961ab6da4 100644
--- a/.github/workflows/dependabot_automerge.yml
+++ b/.github/workflows/dependabot_automerge.yml
@@ -13,7 +13,7 @@ jobs:
     steps:
       - name: Dependabot metadata
         id: metadata
-        uses: dependabot/fetch-metadata@v1.3.3
+        uses: dependabot/fetch-metadata@v1.3.4
         with:
           github-token: "${{ secrets.GITHUB_TOKEN }}"
       - name: Approve PR
diff --git a/.github/workflows/gh-pages.yaml b/.github/workflows/gh-pages.yaml
index 877fbf17e..07467a297 100644
--- a/.github/workflows/gh-pages.yaml
+++ b/.github/workflows/gh-pages.yaml
@@ -15,7 +15,7 @@ jobs:
     steps:
       - uses: actions/checkout@v3.1.0
       - name: Setup Python
-        uses: actions/setup-python@v2
+        uses: actions/setup-python@v4
         with:
           python-version: 3.x
       - name: Set up Go


Test patch:
diff --git a/.github/workflows/e2e-test-results.yml b/.github/workflows/e2e-test-results.yml
index 7130f3503..929292e71 100644
--- a/.github/workflows/e2e-test-results.yml
+++ b/.github/workflows/e2e-test-results.yml
@@ -31,7 +31,7 @@ jobs:
           done
 
       - name: Publish Test Results
-        uses: EnricoMi/publish-unit-test-result-action@v1
+        uses: EnricoMi/publish-unit-test-result-action@v2
         with:
           check_name: "${{ github.event.workflow.name }} Published Test Results"
           commit: ${{ github.event.workflow_run.head_sha }}