Bump the dependencies group with 2 updates

[dependabot]

Bumps the dependencies group with 2 updates: @actions/core and @actions/github.

Updates @actions/core from 1.10.0 to 1.11.1

Changelog

Sourced from @​actions/core's changelog.

1.11.1

• Fix uses of crypto.randomUUID on Node 18 and earlier #1842

1.11.0

• Add platform info utilities #1551
• Remove dependency on uuid package #1824

1.10.1

• Fix error message reference in oidc utils #1511

Commits

• See full diff in compare view

Updates @actions/github from 5.1.1 to 6.0.0

Changelog

Sourced from @​actions/github's changelog.

6.0.0

• Support the latest Octokit in @​actions/github #1553
  • Drop support of NodeJS v14, v16

Commits

• See full diff in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[dependabot]

Sorry, only users with push access can use that command.

[jeffwidman]

@dependabot rebase

[jeffwidman]

@dependabot rebase

[jeffwidman]

@dependabot rebase

[jarlungoodoo73]

9s
Run npm test

dependabot-pull-request-action@2.4.0 test
jest

PASS src/dependabot/update_metadata.test.ts (6317 ms)
Error: github-token is not set! Please add 'github-token: "${{ secrets.GITHUB_TOKEN }}"' to your workflow file.

PASS src/main.test.ts (6843 ms)

Error: HttpError: Bad credentials - https://docs.github.com/rest

at node_modules/@octokit/request/dist-node/index.js:125:21
at getMessage (src/dependabot/verified_commits.ts:32:29)
at Object.<anonymous> (src/dependabot/verified_commits.test.ts:49:10)

Error: HttpError: Bad credentials - https://docs.github.com/rest

at node_modules/@octokit/request/dist-node/index.js:125:21
at getMessage (src/dependabot/verified_commits.ts:32:29)
at Object.<anonymous> (src/dependabot/verified_commits.test.ts:70:10)

Error: HttpError: Bad credentials - https://docs.github.com/rest

at node_modules/@octokit/request/dist-node/index.js:125:21
at getMessage (src/dependabot/verified_commits.ts:32:29)
at Object.<anonymous> (src/dependabot/verified_commits.test.ts:87:10)

Error: HttpError: Bad credentials - https://docs.github.com/rest

at node_modules/@octokit/request/dist-node/index.js:125:21
at getMessage (src/dependabot/verified_commits.ts:32:29)
at Object.<anonymous> (src/dependabot/verified_commits.test.ts:106:10)

Error: HttpError: Bad credentials - https://docs.github.com/rest

at node_modules/@octokit/request/dist-node/index.js:125:21
at getMessage (src/dependabot/verified_commits.ts:32:29)
at Object.<anonymous> (src/dependabot/verified_commits.test.ts:125:10)

Error: HttpError: Bad credentials - https://docs.github.com/rest

at node_modules/@octokit/request/dist-node/index.js:125:21
at getMessage (src/dependabot/verified_commits.ts:32:29)
at Object.<anonymous> (src/dependabot/verified_commits.test.ts:149:10)

Error: HttpError: Bad credentials - https://docs.github.com/graphql

at node_modules/@octokit/request/dist-node/index.js:125:21
at getAlert (src/dependabot/verified_commits.ts:60:23)
at Object.<anonymous> (src/dependabot/verified_commits.test.ts:196:10)

Error: HttpError: Bad credentials - https://docs.github.com/graphql

at node_modules/@octokit/request/dist-node/index.js:125:21
at getAlert (src/dependabot/verified_commits.ts:60:23)
at Object.<anonymous> (src/dependabot/verified_commits.test.ts:208:10)

Error: HttpError: Bad credentials - https://docs.github.com/graphql

at node_modules/@octokit/request/dist-node/index.js:125:21
at getAlert (src/dependabot/verified_commits.ts:60:23)
at Object.<anonymous> (src/dependabot/verified_commits.test.ts:220:10)

Error: HttpError: Bad credentials - https://docs.github.com/graphql

at node_modules/@octokit/request/dist-node/index.js:125:21
at getAlert (src/dependabot/verified_commits.ts:60:23)
at Object.<anonymous> (src/dependabot/verified_commits.test.ts:232:10)

Error: HttpError: Bad credentials - https://docs.github.com/graphql

at node_modules/@octokit/request/dist-node/index.js:125:21
at getAlert (src/dependabot/verified_commits.ts:60:23)
at Object.<anonymous> (src/dependabot/verified_commits.test.ts:244:10)

FAIL src/dependabot/verified_commits.test.ts (6870 ms)
✓ it returns false if the action is not invoked on a PullRequest (8 ms)
✓ it returns false for an event triggered by someone other than Dependabot (1 ms)
✕ it returns false if the commit was authored by someone other than Dependabot (142 ms)
✕ it returns false if the commit is has no verification payload (62 ms)
✕ it returns the message if the commit is has no verification payload but verification is skipped (39 ms)
✕ it returns the message when skip-verification is enabled (52 ms)
✕ it returns false if the commit is not verified (36 ms)
✕ it returns the commit message for a PR authored exclusively by Dependabot with verified commits (33 ms)
✕ it returns the alert state if it matches all 3 (55 ms)
✕ it returns the alert state if it matches 2 and the version is blank (42 ms)
✕ it returns default if it does not match the version (28 ms)
✕ it returns default if it does not match the directory (46 ms)
✕ it returns default if it does not match the name (32 ms)
✓ trimSlashes should only trim slashes from both ends (1 ms)
✓ getCompatibility pulls out the score (21 ms)
✓ getCompatibility fails gracefully (5 ms)
✓ getCompatibility handles errors (4 ms)

PASS src/dependabot/output.test.ts (937 ms)

Errors thrown in src/dependabot/verified_commits.test.ts

Test Suites: 1 failed, 3 passed, 4 total
Tests: 11 failed, 36 passed, 47 total
Snapshots: 0 total
Time: 8.061 s
Ran all test suites.
Error: Process completed with exit code 1.
0s
NO GITHUB TOKEN IS NOT SET EITHER. NEEDS WORK.