Repository navigation
Bump peter-evans/dockerhub-description from 3.4.2 to 5.0.0 - #78
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps [peter-evans/dockerhub-description](https://github.com/peter-evans/dockerhub-description) from 3.4.2 to 5.0.0. - [Release notes](https://github.com/peter-evans/dockerhub-description/releases) - [Commits](peter-evans/dockerhub-description@v3.4.2...v5.0.0) --- updated-dependencies: - dependency-name: peter-evans/dockerhub-description dependency-version: 5.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
Bot
added
dependencies
|
Superseded by #91. Updating dockerhub-description to v5 also requires migrating the old environment-only configuration to the action’s #91 includes the input migration while preserving the existing secrets, triggers, and repository. Actionlint/upstream-contract checks passed. The description workflow was deliberately not executed, so no Docker Hub description was changed. Closing this stale version-only implementation in favor of that focused pending PR. |
|
OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting If you change your mind, just re-open this PR and I'll resolve any conflicts on it. |
|
Correction to my earlier closure explanation: dockerhub-description v5 DOES retain fallback support for DOCKERHUB_USERNAME, DOCKERHUB_PASSWORD and DOCKERHUB_REPOSITORY environment variables (verified in upstream v5.0.0 src/input-helper.ts). Therefore the old environment-only setup was not itself an established compatibility defect. This PR remains superseded by merged #91, which adopts explicit action inputs, but that migration should not be described as a proven authentication fix. The separate NGINX description-sync failure occurred while acquiring a Docker Hub token and needs credential/account-permission investigation, not a speculative input-format change. |
Bumps peter-evans/dockerhub-description from 3.4.2 to 5.0.0.
Release notes
Sourced from peter-evans/dockerhub-description's releases.
... (truncated)
Commits
1b9a80cfeat: v5 (#327)ef9b19abuild(deps-dev): bump@vercel/nccfrom 0.38.3 to 0.38.4 (#326)a48612bbuild(deps): bump actions/setup-node from 4 to 5 (#325)08eafd1build(deps): bump actions/checkout from 4 to 5 (#324)a0bee1bbuild(deps-dev): bump eslint-plugin-prettier from 5.5.3 to 5.5.4 (#323)2877192build(deps): bump actions/download-artifact from 4 to 5 (#322)444ccd3build(deps): bump form-data from 3.0.1 to 3.0.4 (#321)aca792bbuild(deps-dev): bump eslint-plugin-prettier from 5.5.1 to 5.5.3 (#320)940963abuild(deps-dev): bump eslint-plugin-prettier from 5.5.0 to 5.5.1 (#318)0b249a1build(deps-dev): bump prettier from 3.5.3 to 3.6.2 (#317)You can trigger a rebase of this PR by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)