dependabot[bot] opened a new pull request, #1569:
URL: https://github.com/apache/sedona/pull/1569

   Bumps [r-lib/actions](https://github.com/r-lib/actions) from 2.9.0 to 2.10.1.
   <details>
   <summary>Changelog</summary>
   <p><em>Sourced from <a 
href="https://github.com/r-lib/actions/blob/v2-branch/NEWS.md";>r-lib/actions's 
changelog</a>.</em></p>
   <blockquote>
   <h1><code>v2.10.1</code> (2024-08-08)</h1>
   <ul>
   <li>
   <p><code>[setup-r-dependencies]</code> now pins 
<code>quarto-dev/quarto-actions/setup</code>
   version to a constant sha, to be compatible with organizations where
   this is a requirement (<a 
href="https://redirect.github.com/r-lib/actions/issues/901";>#901</a>).</p>
   </li>
   <li>
   <p><code>[setup-renv]</code> now also caches R packages in 
<code>renv/library</code>, used when
   <code>RENV_CONFIG_PAK_ENABLED: true</code> (<a 
href="https://redirect.github.com/r-lib/actions/issues/900";>#900</a>).</p>
   </li>
   <li>
   <p><code>[setup-manifest]</code>: new action to set up an R project with a 
Posit
   Connect <code>manifest.json</code> file (<a 
href="https://redirect.github.com/r-lib/actions/issues/880";>#880</a>).</p>
   </li>
   </ul>
   <h1><code>v2.10.0</code> (2024-08-02)</h1>
   <ul>
   <li>
   <p><code>[setup-r]</code>: on R 3.6.x we now use the P3M snapshot from 
2024-06-01 by
   default. This is because many newer CRAN packages do not work on R 3.6.x
   any more. The default CRAN mirror is still added, so newer packages may
   be used if they are required, but <code>setup-r-dependencies@v2</code> will 
prefer
   the binary packages from P3M.</p>
   <p>Note that this only happens if you opt in to use P3M with the
   <code>use-public-rspm: true</code> input parameter. This is the default in 
all
   example workflows.</p>
   <p>If the <code>RSPM</code> environment variable is already set, then it is 
used
   unchanged, on all R versions. To avoid using a P3M snapshot on R 3.6.x,
   set the <code>RSPM_PIN_3_6</code> environment variable to 
<code>false</code>.</p>
   </li>
   <li>
   <p><code>[setup-r]</code> now installs the x86_64 build of R on arm64 macOS, 
if there
   is no arm64 build available for this R version (<a 
href="https://redirect.github.com/r-lib/actions/issues/883";>#883</a>).</p>
   </li>
   <li>
   <p>Example blogdown, bookdown, document, pr-commands and render-markdown
   workflows now correctly have write permission to repository contents
   (<a href="https://redirect.github.com/r-lib/actions/issues/874";>#874</a>, <a 
href="https://github.com/remlapmot";><code>@​remlapmot</code></a>).</p>
   </li>
   <li>
   <p><code>[check-r-package]</code>: you can now 
set<code>upload-snapshots</code> to <code>always</code>, to
   upload snapshots even after failures (<a 
href="https://redirect.github.com/r-lib/actions/issues/871";>#871</a>).</p>
   </li>
   <li>
   <p><code>[setup-r-dependencies]</code> now always sets the 
<code>R_LIBS_USER</code> GitHub
   environment variable, so it can be used without <code>[setup-r]</code> or 
without
   setting it manually (<a 
href="https://redirect.github.com/r-lib/actions/issues/881";>#881</a>).</p>
   </li>
   <li>
   <p>The example workflows now use their file names as workflow names.
   This is to make it easier to match worflow runs to workflow files.
   Most of the the <code>check-*</code> workflows use 
<code>R-CMD-check.yaml</code>, however,
   to anticipate the usethis package renaming them by default (<a 
href="https://redirect.github.com/r-lib/actions/issues/888";>#888</a>).</p>
   </li>
   <li>
   <p><code>[setup-renv]</code>: you can now set <code>bypass-cache</code> to 
<code>never</code>, to save the
   cache even if the workflow fails (<a 
href="https://redirect.github.com/r-lib/actions/issues/873";>#873</a>, <a 
href="https://github.com/jaradkohl-mfj";><code>@​jaradkohl-mfj</code></a>).</p>
   </li>
   </ul>
   <!-- raw HTML omitted -->
   </blockquote>
   <p>... (truncated)</p>
   </details>
   <details>
   <summary>Commits</summary>
   <ul>
   <li><a 
href="https://github.com/r-lib/actions/commit/e6be4b3706e0f39bc7a4cf4496a5f2c4cb840040";><code>e6be4b3</code></a>
 Prepare NEWS for v2.10.1 (<a 
href="https://redirect.github.com/r-lib/actions/issues/909";>#909</a>)</li>
   <li><a 
href="https://github.com/r-lib/actions/commit/b36f0c1f96aad3a16152609f233d6570fc73c835";><code>b36f0c1</code></a>
 Pin quarto install action to my PR (<a 
href="https://redirect.github.com/r-lib/actions/issues/908";>#908</a>)</li>
   <li><a 
href="https://github.com/r-lib/actions/commit/ace765b8977bac90248fe7f260d41664b4914c95";><code>ace765b</code></a>
 PoC setup-manifest action (<a 
href="https://redirect.github.com/r-lib/actions/issues/907";>#907</a>)</li>
   <li><a 
href="https://github.com/r-lib/actions/commit/47adc024f6cb2fb88bfcfd2b7d8345626fe75c6f";><code>47adc02</code></a>
 Update NEWS for <a 
href="https://redirect.github.com/r-lib/actions/issues/904";>#904</a> (<a 
href="https://redirect.github.com/r-lib/actions/issues/906";>#906</a>)</li>
   <li><a 
href="https://github.com/r-lib/actions/commit/56a62bc8fa39f269efd56b91169b72c2bed72369";><code>56a62bc</code></a>
 Cache renv/library (<a 
href="https://redirect.github.com/r-lib/actions/issues/905";>#905</a>)</li>
   <li><a 
href="https://github.com/r-lib/actions/commit/93795e8f6c1b78845222def125109f4ff6ccb1cb";><code>93795e8</code></a>
 Pin quarto action version (<a 
href="https://redirect.github.com/r-lib/actions/issues/904";>#904</a>)</li>
   <li><a 
href="https://github.com/r-lib/actions/commit/d1a6cbabea8dd2f137598ba2a70ae37ac82d7941";><code>d1a6cba</code></a>
 [setup-r]: resolve older R to x86_64 on macOS (<a 
href="https://redirect.github.com/r-lib/actions/issues/893";>#893</a>)</li>
   <li><a 
href="https://github.com/r-lib/actions/commit/fd93f723797a345d134528e854d9b9a4d3d9e92b";><code>fd93f72</code></a>
 Blogdown and bookdown examples need contents write permission (<a 
href="https://redirect.github.com/r-lib/actions/issues/874";>#874</a>)</li>
   <li><a 
href="https://github.com/r-lib/actions/commit/15dc53465b2f37cf7fc85ed97ae3e28f8e210955";><code>15dc534</code></a>
 [check-r-package]: add 'upload-snapshots: always' (<a 
href="https://redirect.github.com/r-lib/actions/issues/890";>#890</a>)</li>
   <li><a 
href="https://github.com/r-lib/actions/commit/9677f2e32657bbce94feb8bc3786495c443d5d60";><code>9677f2e</code></a>
 [setup-r-dependencies]: set R_LIBS_USER if unset (<a 
href="https://redirect.github.com/r-lib/actions/issues/896";>#896</a>)</li>
   <li>Additional commits viewable in <a 
href="https://github.com/r-lib/actions/compare/v2.9.0...v2.10.1";>compare 
view</a></li>
   </ul>
   </details>
   <br />
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=r-lib/actions&package-manager=github_actions&previous-version=2.9.0&new-version=2.10.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   <details>
   <summary>Dependabot commands and options</summary>
   <br />
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot merge` will merge this PR after your CI passes on it
   - `@dependabot squash and merge` will squash and merge this PR after your CI 
passes on it
   - `@dependabot cancel merge` will cancel a previously requested merge and 
block automerging
   - `@dependabot reopen` will reopen this PR if it is closed
   - `@dependabot close` will close this PR and stop Dependabot recreating it. 
You can achieve the same result by closing it manually
   - `@dependabot show <dependency name> ignore conditions` will show all of 
the ignore conditions of the specified dependency
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating any more for this minor version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this dependency` will close this PR and stop 
Dependabot creating any more for this dependency (unless you reopen the PR or 
upgrade to it yourself)
   
   
   </details>


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@sedona.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

Reply via email to