Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: arduino/arduino-lint-action
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: main@{1day}
Choose a base ref
...
head repository: arduino/arduino-lint-action
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: main
Choose a head ref
  • 7 commits
  • 5 files changed
  • 2 contributors

Commits on Nov 3, 2025

  1. Bump @actions/http-client from 2.2.3 to 3.0.0

    Bumps [@actions/http-client](https://github.com/actions/toolkit/tree/HEAD/packages/http-client) from 2.2.3 to 3.0.0.
    - [Changelog](https://github.com/actions/toolkit/blob/main/packages/http-client/RELEASES.md)
    - [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/http-client)
    
    ---
    updated-dependencies:
    - dependency-name: "@actions/http-client"
      dependency-version: 3.0.0
      dependency-type: direct:production
      update-type: version-update:semver-major
    ...
    
    Signed-off-by: dependabot[bot] <[email protected]>
    dependabot[bot] authored Nov 3, 2025
    Configuration menu
    Copy the full SHA
    fa1eea6 View commit details
    Browse the repository at this point in the history
  2. Repackage action following @actions/http-client bump

    GitHub downloads each action run in a workflow during runtime and executes it as a complete package of code before you
    can use workflow commands like run to interact with the runner machine. This means that we must provide all JavaScript
    package dependencies as part of the distributed action in order for it to be usable in workflows.
    
    A naive approach to doing this is checking in the `node_modules` folder. However, this approach results in a huge amount
    of frequently changing external content being included in the repository, much of which is not even part of the executed
    program.
    
    A far better approach is to use the excellent ncc tool to compile the program, including all the relevant code from the
    dependencies, into a single file.
    
    We use a "continuous packaging" approach, where the packaged action code that is generated via ncc is always kept in
    sync with the development source code and dependencies. This allows a beta version of the action to be easily used in
    workflows by beta testers or those who need changes not in the release simply by using the name of the branch as the
    action ref (e.g., `uses: arduino/arduino-lint-action@main` will cause the version of the action from the tip of the
    `main` branch to be used by the workflow run).
    
    The update of the package dependency results in a change to the packaged code, so the packaging is here updated
    accordingly.
    per1234 committed Nov 3, 2025
    Configuration menu
    Copy the full SHA
    bce6a96 View commit details
    Browse the repository at this point in the history
  3. Configuration menu
    Copy the full SHA
    84cb5d9 View commit details
    Browse the repository at this point in the history
  4. Merge pull request #579 from arduino/dependabot/npm_and_yarn/actions/…

    …http-client-3.0.0
    
    Bump @actions/http-client from 2.2.3 to 3.0.0
    per1234 authored Nov 3, 2025
    Configuration menu
    Copy the full SHA
    d3734de View commit details
    Browse the repository at this point in the history
  5. Bump @actions/io from 1.1.3 to 2.0.0

    Bumps [@actions/io](https://github.com/actions/toolkit/tree/HEAD/packages/io) from 1.1.3 to 2.0.0.
    - [Changelog](https://github.com/actions/toolkit/blob/main/packages/io/RELEASES.md)
    - [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/io)
    
    ---
    updated-dependencies:
    - dependency-name: "@actions/io"
      dependency-version: 2.0.0
      dependency-type: direct:development
      update-type: version-update:semver-major
    ...
    
    Signed-off-by: dependabot[bot] <[email protected]>
    dependabot[bot] authored Nov 3, 2025
    Configuration menu
    Copy the full SHA
    c6d1346 View commit details
    Browse the repository at this point in the history
  6. Repackage action following @actions/io bump

    GitHub downloads each action run in a workflow during runtime and executes it as a complete package of code before you
    can use workflow commands like run to interact with the runner machine. This means that we must provide all JavaScript
    package dependencies as part of the distributed action in order for it to be usable in workflows.
    
    A naive approach to doing this is checking in the `node_modules` folder. However, this approach results in a huge amount
    of frequently changing external content being included in the repository, much of which is not even part of the executed
    program.
    
    A far better approach is to use the excellent ncc tool to compile the program, including all the relevant code from the
    dependencies, into a single file.
    
    We use a "continuous packaging" approach, where the packaged action code that is generated via ncc is always kept in
    sync with the development source code and dependencies. This allows a beta version of the action to be easily used in
    workflows by beta testers or those who need changes not in the release simply by using the name of the branch as the
    action ref (e.g., `uses: arduino/arduino-lint-action@main` will cause the version of the action from the tip of the
    `main` branch to be used by the workflow run).
    
    The update of the package dependency results in a change to the packaged code, so the packaging is here updated
    accordingly.
    per1234 committed Nov 3, 2025
    Configuration menu
    Copy the full SHA
    7b1a368 View commit details
    Browse the repository at this point in the history
  7. Merge pull request #578 from arduino/dependabot/npm_and_yarn/actions/…

    …io-2.0.0
    
    Bump @actions/io from 1.1.3 to 2.0.0
    per1234 authored Nov 3, 2025
    Configuration menu
    Copy the full SHA
    b060c01 View commit details
    Browse the repository at this point in the history
Loading