Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: google-github-actions/deploy-cloudrun
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: v2.7.2
Choose a base ref
...
head repository: google-github-actions/deploy-cloudrun
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: v2.7.3
Choose a head ref
  • 5 commits
  • 13 files changed
  • 4 contributors

Commits on Dec 11, 2024

  1. Bump the npm_and_yarn group across 1 directory with 2 updates (#553)

    Bumps the npm_and_yarn group with 2 updates in the /example-app
    directory: [path-to-regexp](https://github.com/pillarjs/path-to-regexp)
    and [express](https://github.com/expressjs/express).
    
    Updates `path-to-regexp` from 0.1.10 to 0.1.12
    <details>
    <summary>Release notes</summary>
    <p><em>Sourced from <a
    href="https://github.com/pillarjs/path-to-regexp/releases">path-to-regexp's
    releases</a>.</em></p>
    <blockquote>
    <h2>Fix backtracking (again)</h2>
    <p><strong>Fixed</strong></p>
    <ul>
    <li>Improved backtracking protection for 0.1.x, will break some
    previously valid paths (see previous advisory: <a
    href="https://github.com/pillarjs/path-to-regexp/security/advisories/GHSA-9wv6-86v2-598j">https://github.com/pillarjs/path-to-regexp/security/advisories/GHSA-9wv6-86v2-598j</a>)</li>
    </ul>
    <p><a
    href="https://github.com/pillarjs/path-to-regexp/compare/v0.1.11...v0.1.12">https://github.com/pillarjs/path-to-regexp/compare/v0.1.11...v0.1.12</a></p>
    <h2>Error on bad input</h2>
    <p><strong>Changed</strong></p>
    <ul>
    <li>Add error on bad input values  8f09549</li>
    </ul>
    <p><a
    href="https://github.com/pillarjs/path-to-regexp/compare/v0.1.10...v0.1.11">https://github.com/pillarjs/path-to-regexp/compare/v0.1.10...v0.1.11</a></p>
    </blockquote>
    </details>
    <details>
    <summary>Commits</summary>
    <ul>
    <li><a
    href="https://github.com/pillarjs/path-to-regexp/commit/640e694c6fd971f78268439df9cf44040855e669"><code>640e694</code></a>
    0.1.12</li>
    <li><a
    href="https://github.com/pillarjs/path-to-regexp/commit/f01c26a013b1889f0c217c643964513acf17f6a4"><code>f01c26a</code></a>
    Merge commit from fork</li>
    <li><a
    href="https://github.com/pillarjs/path-to-regexp/commit/0c7119248b7cb528a0aea3ba45ed4e2db007cba4"><code>0c71192</code></a>
    0.1.11</li>
    <li><a
    href="https://github.com/pillarjs/path-to-regexp/commit/8f095497d678c2ec3495a99ab3928748731e73ee"><code>8f09549</code></a>
    Add error on bad input values</li>
    <li>See full diff in <a
    href="https://github.com/pillarjs/path-to-regexp/compare/v0.1.10...v0.1.12">compare
    view</a></li>
    </ul>
    </details>
    <br />
    
    Updates `express` from 4.21.1 to 4.21.2
    <details>
    <summary>Release notes</summary>
    <p><em>Sourced from <a
    href="https://github.com/expressjs/express/releases">express's
    releases</a>.</em></p>
    <blockquote>
    <h2>4.21.2</h2>
    <h2>What's Changed</h2>
    <ul>
    <li>Add funding field (v4) by <a
    href="https://github.com/bjohansebas"><code>@​bjohansebas</code></a> in
    <a
    href="https://redirect.github.com/expressjs/express/pull/6065">expressjs/express#6065</a></li>
    <li>deps: path-to-regexp@0.1.11 by <a
    href="https://github.com/blakeembrey"><code>@​blakeembrey</code></a> in
    <a
    href="https://redirect.github.com/expressjs/express/pull/5956">expressjs/express#5956</a></li>
    <li>deps: bump path-to-regexp@0.1.12 by <a
    href="https://github.com/jonchurch"><code>@​jonchurch</code></a> in <a
    href="https://redirect.github.com/expressjs/express/pull/6209">expressjs/express#6209</a></li>
    <li>Release: 4.21.2 by <a
    href="https://github.com/UlisesGascon"><code>@​UlisesGascon</code></a>
    in <a
    href="https://redirect.github.com/expressjs/express/pull/6094">expressjs/express#6094</a></li>
    </ul>
    <p><strong>Full Changelog</strong>: <a
    href="https://github.com/expressjs/express/compare/4.21.1...4.21.2">https://github.com/expressjs/express/compare/4.21.1...4.21.2</a></p>
    </blockquote>
    </details>
    <details>
    <summary>Changelog</summary>
    <p><em>Sourced from <a
    href="https://github.com/expressjs/express/blob/4.21.2/History.md">express's
    changelog</a>.</em></p>
    <blockquote>
    <h1>4.21.2 / 2024-11-06</h1>
    <ul>
    <li>deps: path-to-regexp@0.1.12
    <ul>
    <li>Fix backtracking protection</li>
    </ul>
    </li>
    <li>deps: path-to-regexp@0.1.11
    <ul>
    <li>Throws an error on invalid path values</li>
    </ul>
    </li>
    </ul>
    </blockquote>
    </details>
    <details>
    <summary>Commits</summary>
    <ul>
    <li><a
    href="https://github.com/expressjs/express/commit/1faf228935aa0a13111f92c28ee795be64ce3f0f"><code>1faf228</code></a>
    4.21.2</li>
    <li><a
    href="https://github.com/expressjs/express/commit/2e0fb646d03184dd9a5285813460210c0e7ae654"><code>2e0fb64</code></a>
    deps: bump path-to-regexp@0.1.12 (<a
    href="https://redirect.github.com/expressjs/express/issues/6209">#6209</a>)</li>
    <li><a
    href="https://github.com/expressjs/express/commit/59fc27028ec5d212be653d35d7e3f73a2c3ac3c0"><code>59fc270</code></a>
    deps: path-to-regexp@0.1.11 (<a
    href="https://redirect.github.com/expressjs/express/issues/5956">#5956</a>)</li>
    <li><a
    href="https://github.com/expressjs/express/commit/51fc39ccf834eec44547b0f4fed8027e7c05a009"><code>51fc39c</code></a>
    docs: add funding (<a
    href="https://redirect.github.com/expressjs/express/issues/6065">#6065</a>)</li>
    <li>See full diff in <a
    href="https://github.com/expressjs/express/compare/4.21.1...4.21.2">compare
    view</a></li>
    </ul>
    </details>
    <details>
    <summary>Maintainer changes</summary>
    <p>This version was pushed to npm by <a
    href="https://www.npmjs.com/~jonchurch">jonchurch</a>, a new releaser
    for express since your current version.</p>
    </details>
    <br />
    
    
    Dependabot will resolve any conflicts with this PR as long as you don't
    alter it yourself. You can also trigger a rebase manually by commenting
    `@dependabot rebase`.
    
    [//]: # (dependabot-automerge-start)
    [//]: # (dependabot-automerge-end)
    
    ---
    
    <details>
    <summary>Dependabot commands and options</summary>
    <br />
    
    You can trigger Dependabot actions by commenting on this PR:
    - `@dependabot rebase` will rebase this PR
    - `@dependabot recreate` will recreate this PR, overwriting any edits
    that have been made to it
    - `@dependabot merge` will merge this PR after your CI passes on it
    - `@dependabot squash and merge` will squash and merge this PR after
    your CI passes on it
    - `@dependabot cancel merge` will cancel a previously requested merge
    and block automerging
    - `@dependabot reopen` will reopen this PR if it is closed
    - `@dependabot close` will close this PR and stop Dependabot recreating
    it. You can achieve the same result by closing it manually
    - `@dependabot show <dependency name> ignore conditions` will show all
    of the ignore conditions of the specified dependency
    - `@dependabot ignore <dependency name> major version` will close this
    group update PR and stop Dependabot creating any more for the specific
    dependency's major version (unless you unignore this specific
    dependency's major version or upgrade to it yourself)
    - `@dependabot ignore <dependency name> minor version` will close this
    group update PR and stop Dependabot creating any more for the specific
    dependency's minor version (unless you unignore this specific
    dependency's minor version or upgrade to it yourself)
    - `@dependabot ignore <dependency name>` will close this group update PR
    and stop Dependabot creating any more for the specific dependency
    (unless you unignore this specific dependency or upgrade to it yourself)
    - `@dependabot unignore <dependency name>` will remove all of the ignore
    conditions of the specified dependency
    - `@dependabot unignore <dependency name> <ignore condition>` will
    remove the ignore condition of the specified dependency and ignore
    conditions
    You can disable automated security fix PRs for this repo from the
    [Security Alerts
    page](https://github.com/google-github-actions/deploy-cloudrun/network/alerts).
    
    </details>
    
    Signed-off-by: dependabot[bot] <support@github.com>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored Dec 11, 2024
    Configuration menu
    Copy the full SHA
    401169b View commit details
    Browse the repository at this point in the history

Commits on Jan 29, 2025

  1. security: bump undici from 5.28.4 to 5.28.5 in the npm_and_yarn group (

    …#559)
    
    Bumps the npm_and_yarn group with 1 update:
    [undici](https://github.com/nodejs/undici).
    
    Updates `undici` from 5.28.4 to 5.28.5
    <details>
    <summary>Release notes</summary>
    <p><em>Sourced from <a
    href="https://github.com/nodejs/undici/releases">undici's
    releases</a>.</em></p>
    <blockquote>
    <h2>v5.28.5</h2>
    <h1>⚠️ Security Release ⚠️</h1>
    <p>Fixes CVE CVE-2025-22150 <a
    href="https://github.com/nodejs/undici/security/advisories/GHSA-c76h-2ccp-4975">https://github.com/nodejs/undici/security/advisories/GHSA-c76h-2ccp-4975</a>
    (embargoed until 22-01-2025).</p>
    <p><strong>Full Changelog</strong>: <a
    href="https://github.com/nodejs/undici/compare/v5.28.4...v5.28.5">https://github.com/nodejs/undici/compare/v5.28.4...v5.28.5</a></p>
    </blockquote>
    </details>
    <details>
    <summary>Commits</summary>
    <ul>
    <li><a
    href="https://github.com/nodejs/undici/commit/6139ed2e0c787853243de58ef7c4301b26ca66f2"><code>6139ed2</code></a>
    Bumped v5.28.5</li>
    <li><a
    href="https://github.com/nodejs/undici/commit/711e20772764c29f6622ddc937c63b6eefdf07d0"><code>711e207</code></a>
    Backport of c2d78cd</li>
    <li>See full diff in <a
    href="https://github.com/nodejs/undici/compare/v5.28.4...v5.28.5">compare
    view</a></li>
    </ul>
    </details>
    <br />
    
    
    [![Dependabot compatibility
    score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=undici&package-manager=npm_and_yarn&previous-version=5.28.4&new-version=5.28.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
    
    You can trigger a rebase of this PR by commenting `@dependabot rebase`.
    
    [//]: # (dependabot-automerge-start)
    [//]: # (dependabot-automerge-end)
    
    ---
    
    <details>
    <summary>Dependabot commands and options</summary>
    <br />
    
    You can trigger Dependabot actions by commenting on this PR:
    - `@dependabot rebase` will rebase this PR
    - `@dependabot recreate` will recreate this PR, overwriting any edits
    that have been made to it
    - `@dependabot merge` will merge this PR after your CI passes on it
    - `@dependabot squash and merge` will squash and merge this PR after
    your CI passes on it
    - `@dependabot cancel merge` will cancel a previously requested merge
    and block automerging
    - `@dependabot reopen` will reopen this PR if it is closed
    - `@dependabot close` will close this PR and stop Dependabot recreating
    it. You can achieve the same result by closing it manually
    - `@dependabot show <dependency name> ignore conditions` will show all
    of the ignore conditions of the specified dependency
    - `@dependabot ignore <dependency name> major version` will close this
    group update PR and stop Dependabot creating any more for the specific
    dependency's major version (unless you unignore this specific
    dependency's major version or upgrade to it yourself)
    - `@dependabot ignore <dependency name> minor version` will close this
    group update PR and stop Dependabot creating any more for the specific
    dependency's minor version (unless you unignore this specific
    dependency's minor version or upgrade to it yourself)
    - `@dependabot ignore <dependency name>` will close this group update PR
    and stop Dependabot creating any more for the specific dependency
    (unless you unignore this specific dependency or upgrade to it yourself)
    - `@dependabot unignore <dependency name>` will remove all of the ignore
    conditions of the specified dependency
    - `@dependabot unignore <dependency name> <ignore condition>` will
    remove the ignore condition of the specified dependency and ignore
    conditions
    You can disable automated security fix PRs for this repo from the
    [Security Alerts
    page](https://github.com/google-github-actions/deploy-cloudrun/network/alerts).
    
    </details>
    
    Signed-off-by: dependabot[bot] <support@github.com>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored Jan 29, 2025
    Configuration menu
    Copy the full SHA
    4a629b6 View commit details
    Browse the repository at this point in the history

Commits on Jan 31, 2025

  1. Update action.yml to fix README typos (#557)

    Minor doc changes throughout the README.
    
    Signed-off-by: Ethan Knights <ethanknights@hotmail.co.uk>
    ethanknights authored Jan 31, 2025
    Configuration menu
    Copy the full SHA
    b4dcbfc View commit details
    Browse the repository at this point in the history

Commits on Feb 1, 2025

  1. Update deps (#560)

    sethvargo authored Feb 1, 2025
    Configuration menu
    Copy the full SHA
    5c25051 View commit details
    Browse the repository at this point in the history
  2. Release: v2.7.3 (#561)

    ## What's Changed
    * Bump the npm_and_yarn group across 1 directory with 2 updates by
    @dependabot in
    #553
    * security: bump undici from 5.28.4 to 5.28.5 in the npm_and_yarn group
    by @dependabot in
    #559
    * Update action.yml to fix README typos by @ethanknights in
    #557
    * Update deps by @sethvargo in
    #560
    
    ## New Contributors
    * @ethanknights made their first contribution in
    #557
    
    **Full Changelog**:
    v2.7.2...v2.7.3
    google-github-actions-bot authored Feb 1, 2025
    Configuration menu
    Copy the full SHA
    9c5864e View commit details
    Browse the repository at this point in the history
Loading