🌱 Bump github.com/rhysd/actionlint from 1.6.13 to 1.6.15

[dependabot]

Bumps github.com/rhysd/actionlint from 1.6.13 to 1.6.15.

Release notes

Sourced from github.com/rhysd/actionlint's releases.

v1.6.15

• Fix referring env context from env: at step level caused an error. env: at toplevel and job level cannot refer env context, but env: at step level can. (#158)

  on: push
  env:
  ERROR: 'env:' at toplevel cannot refer 'env' context
  ERROR1: ${{ env.PATH }}
  jobs:
  my_job:
  runs-on: ubuntu-latest
  env:
  # ERROR: 'env:' at job level cannot refer 'env' context
  ERROR2: ${{ env.PATH }}
  steps:
  - run: echo "$THIS_IS_OK"
  env:
  # OK: 'env:' at step level CAN refer 'env' context
  THIS_IS_OK: ${{ env.PATH }}

• Docker image for linux/arm64 is now provided. It is useful for M1 Mac users. (#159, thanks @​politician)
• Fix the download script did not respect the version specified via the first argument. (#162, thanks @​mateiidavid)

v1.6.14

• Some filters are exclusive in events at on:. Now actionlint checks the exclusive filters are used in the same event. paths and paths-ignore, branches and branches-ignore, tags and tags-ignore are exclusive. See the document for the details.

  on:
    push:
      # ERROR: Both 'paths' and 'paths-ignore' filters cannot be used for the same event
      paths: ...
      paths-ignore: ...

• Some event filters are checked more strictly. Some filters are only available with specific events. Now actionlint checks the limitation. See the document for complete list of such filters.

  on:
    release:
      # ERROR: 'tags' filter is only available for 'push' event
      tags: v*.*.*

• Paths starting/ending with spaces are now reported as error.
• Inputs of workflow which specify both default and required are now reported as error. When required is specified at input of workflow call, a caller of it must specify value of the input. So the default value will never be used. (#154, thanks @​sksat)

  on:
    workflow_call:
      inputs:
        my_input:
          description: test
          type: string
          # ERROR: The default value 'aaa' will never be used

... (truncated)

Changelog

Sourced from github.com/rhysd/actionlint's changelog.

v1.6.15 - 28 Jun 2022

• Fix referring env context from env: at step level caused an error. env: at toplevel and job level cannot refer env context, but env: at step level can. (#158)

  on: push
  env:
  'env:' at toplevel cannot refer 'env' context
  ERROR1: ${{ env.PATH }}
  jobs:
  my_job:
  runs-on: ubuntu-latest
  env:
  # 'env:' at job level cannot refer 'env' context
  ERROR2: ${{ env.PATH }}
  steps:
  - run: echo "$BAR"
  env:
  # 'env:' at step level CAN refer 'env' context
  THIS_IS_OK: ${{ env.PATH }}

• Docker image for linux/arm64 is now provided. It is useful for M1 Mac users. (#159, thanks @​politician)
• Fix the download script did not respect the version specified via the first argument. (#162, thanks @​mateiidavid)

[Changes][v1.6.15]

v1.6.14 - 26 Jun 2022

• Some filters are exclusive in events at on:. Now actionlint checks the exclusive filters are used in the same event. paths and paths-ignore, branches and branches-ignore, tags and tags-ignore are exclusive. See the document for the details.

  on:
    push:
      # ERROR: Both 'paths' and 'paths-ignore' filters cannot be used for the same event
      paths: ...
      paths-ignore: ...

• Some event filters are checked more strictly. Some filters are only available with specific events. Now actionlint checks the limitation. See the document for complete list of such filters.

  on:
    release:
      # ERROR: 'tags' filter is only available for 'push' event
      tags: v*.*.*

• Paths starting/ending with spaces are now reported as error.
• Inputs of workflow which specify both default and required are now reported as error. When required is specified at input of workflow call, a caller of it must specify value of the input. So the default value will never be used. (#154, thanks @​sksat)

  on:

... (truncated)

Commits

• 97ad72a bump up version to v1.6.15
• 0e88c03 test env: at container: can refer env context
• 323ceb4 fix env: at step level should be able to refer env context (#158)
• ace2ef0 fix updating default version in download script by CI release workflow (#162)
• f4e240b Merge pull request #162 from mateiidavid/matei/fix-install-script-override
• 325cd96 Fix install script version override
• 4df24b5 Merge pull request #159 from politician/patch-1
• 8b86b0c Update Dockerfile
• 99711d6 Add multi platform build
• 96d0b49 update changelog for v1.6.14 changes
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[codecov]

Codecov Report

Merging #2012 (31e5b0e) into main (48291a3) will increase coverage by 2.62%.
The diff coverage is n/a.

@@            Coverage Diff             @@
##             main    #2012      +/-   ##
==========================================
+ Coverage   50.56%   53.19%   +2.62%     
==========================================
  Files          87       87              
  Lines        7202     7202              
==========================================
+ Hits         3642     3831     +189     
+ Misses       3315     3119     -196     
- Partials      245      252       +7     

[github-actions]

Integration tests success for
[2475082]
(https://github.com/ossf/scorecard/actions/runs/2581632191)

[github-actions]

Integration tests success for
[ae39bb3]
(https://github.com/ossf/scorecard/actions/runs/2625560380)

[github-actions]

Integration tests success for
[31e5b0e]
(https://github.com/ossf/scorecard/actions/runs/2646437818)