roocs / clisops

87%

LAST BUILD ON BRANCH master

branch: SELECT

CHANGE BRANCH

x

Sync Branches

• No branch selected
• adapt-xarray
• add-platforms
• add-test-pypi
• add_coverage
• adjust-tests
• atlas
• dependabot
• dependabot-auto-approve
• dependabot/github_actions/actions-1db280f781
• dependabot/github_actions/actions-2353c7e9d3
• dependabot/github_actions/actions-346aed4608
• dependabot/github_actions/actions-461db7b400
• dependabot/github_actions/actions-6ece7c7a61
• dependabot/github_actions/actions-7f321800dd
• dependabot/github_actions/actions-9bfc11c9dc
• dependabot/github_actions/actions-9f0572fc03
• dependabot/github_actions/actions-a585c3c1b6
• dependabot/github_actions/actions-a7888efe8c
• dependabot/github_actions/actions-ad1cfd279c
• dependabot/github_actions/actions-af23a0451d
• dependabot/github_actions/actions-b742a5716d
• dependabot/github_actions/actions-c7b624ec4b
• dependabot/github_actions/actions-db0d8a3f2a
• dependabot/github_actions/actions-e74af9633e
• dependabot/github_actions/actions-f2e6fc259d
• dependabot/github_actions/actions/cache-4.1.0
• dependabot/github_actions/actions/cache-4.1.1
• dependabot/github_actions/actions/cache-4.1.2
• dependabot/github_actions/actions/cache-4.2.0
• dependabot/github_actions/actions/cache-4.2.1
• dependabot/github_actions/actions/checkout-4
• dependabot/github_actions/actions/checkout-4.2.0
• dependabot/github_actions/actions/checkout-4.2.1
• dependabot/github_actions/actions/checkout-4.2.2
• dependabot/github_actions/actions/github-script-7
• dependabot/github_actions/actions/setup-python-5
• dependabot/github_actions/actions/setup-python-5.2.0
• dependabot/github_actions/actions/setup-python-5.3.0
• dependabot/github_actions/actions/setup-python-5.4.0
• dependabot/github_actions/dot-github/workflows/actions-25b786c4d4
• dependabot/github_actions/mamba-org/setup-micromamba-2.0.0
• dependabot/github_actions/mamba-org/setup-micromamba-2.0.1
• dependabot/github_actions/mamba-org/setup-micromamba-2.0.2
• dependabot/github_actions/mamba-org/setup-micromamba-2.0.3
• dependabot/github_actions/mamba-org/setup-micromamba-2.0.4
• dependabot/github_actions/pypa/gh-action-pypi-publish-1.10.2
• dependabot/github_actions/pypa/gh-action-pypi-publish-1.10.3
• dependabot/github_actions/pypa/gh-action-pypi-publish-1.11.0
• dependabot/github_actions/pypa/gh-action-pypi-publish-1.12.2
• dependabot/github_actions/pypa/gh-action-pypi-publish-1.12.3
• dependabot/github_actions/pypa/gh-action-pypi-publish-1.12.4
• dependabot/github_actions/softprops/action-gh-release-2
• dependabot/github_actions/softprops/action-gh-release-2.0.9
• dependabot/github_actions/softprops/action-gh-release-2.1.0
• dependabot/github_actions/softprops/action-gh-release-2.2.0
• dependabot/github_actions/softprops/action-gh-release-2.2.1
• dependabot/github_actions/step-security/harden-runner-2.10.1
• dependabot/github_actions/step-security/harden-runner-2.10.2
• dependabot/github_actions/step-security/harden-runner-2.10.3
• dependabot/github_actions/step-security/harden-runner-2.10.4
• dependabot/github_actions/step-security/harden-runner-2.11.0
• dependabot/github_actions/styfle/cancel-workflow-action-0.12.1
• dependabot/pip/CI/bump-my-version-1.2.6
• dependabot/pip/CI/exceptiongroup-1.3.1
• dependabot/pip/CI/pip-25.3
• dependabot/pip/CI/pip-2c7469b053
• dependabot/pip/CI/pip-512858e340
• dependabot/pip/CI/pip-8177a8837a
• dependabot/pip/CI/pip-a6aa50acab
• dependabot/pip/CI/requests-2.33.0
• dependabot/pip/cf-xarray-gte-0.7.5-and-lte-0.8.9
• dependabot/pip/cf-xarray-gte-0.7.5-and-lte-0.9.0
• dependabot/pip/numpy-gte-1.23.0-and-lt-2.3
• dependabot/pip/python-019fa7857d
• dependabot/pip/python-0fcc65f3e2
• dependabot/pip/python-1d1aa3af04
• dependabot/pip/python-2040a6291e
• dependabot/pip/python-21132373fa
• dependabot/pip/python-2253f64ff7
• dependabot/pip/python-2ea8ebdaef
• dependabot/pip/python-350a0f59bc
• dependabot/pip/python-5eb9432ed0
• dependabot/pip/python-6a57027130
• dependabot/pip/python-6abd2dd00d
• dependabot/pip/python-7788f5c6c8
• dependabot/pip/python-8205546052
• dependabot/pip/python-82ad70ff23
• dependabot/pip/python-9d4d47bb59
• dependabot/pip/python-b54df851fe
• dependabot/pip/python-bbbf337803
• dependabot/pip/python-ce2478f967
• dependabot/pip/python-d8c93f5b65
• dependabot/pip/python-d8eef1601a
• dependabot/pip/python-ebe56b0d10
• dependabot/pip/python-f8b8e00329
• dependabot/pip/xarray-gte-0.21.0-and-lt-2023.13.0
• dependabot/pip/xarray-gte-0.21.0-and-lt-2024.2.0
• dependabot/pip/xarray-gte-2022.6.0-and-lt-2025.2.0
• dev-kerchunk
• docstring-linting-cleanup
• drop-python310
• fix-280
• fix-283
• fix-ci-dependencies
• fix-connections
• fix-crs
• fix-docstrings
• fix-file-namer
• fix-is-time
• fix-issue-308-fillvalue
• fix-issue-451-dataset-utils
• fix-tests
• fix-tmpfile-location
• lift-xarray-pin
• lint-fix
• locstream-support
• master
• modern-conventions
• modernisations
• modernize
• modernize_carsten
• open-xarray-pin
• pin-deps
• pre-commit-ci-update-config
• pre-release
• prepare-rel-0.17.0
• prepare-v013
• prepare-v0140
• prepare-v0141
• prepare-v0150
• prepare-v0160
• prepare-v0162
• prepare_v0110
• prepare_v0120
• prepare_v0121
• prepare_v0122
• prepare_v097
• pytest-package-updates
• reduce-warnings
• regrid-dev
• regrid-main
• regrid_masks_and_fixes
• regrid_updates_and_output_fixes
• savg
• subset-nomask-poly
• subset_360day_and_detect_coord
• subsetshapecrs
• support-py313
• update-ci
• update-deps
• update_deps
• use-master

Build # 24097165165

Build Type

push

github

Committed by web-flow

Commit Message

Bump the actions group across 1 directory with 8 updates (#491)

Bumps the actions group with 8 updates in the /.github/workflows
directory:

| Package | From | To |
| --- | --- | --- |
|
[step-security/harden-runner](https://github.com/step-security/harden-runner)
| `2.14.0` | `2.16.1` |
|
[dependabot/fetch-metadata](https://github.com/dependabot/fetch-metadata)
| `2.5.0` | `3.0.0` |
| [actions/checkout](https://github.com/actions/checkout) | `6.0.1` |
`6.0.2` |
| [actions/setup-python](https://github.com/actions/setup-python) |
`6.1.0` | `6.2.0` |
| [actions/cache](https://github.com/actions/cache) | `5.0.1` | `5.0.4`
|
|
[mamba-org/setup-micromamba](https://github.com/mamba-org/setup-micromamba)
| `2.0.7` | `3.0.0` |
|
[softprops/action-gh-release](https://github.com/softprops/action-gh-release)
| `2.5.0` | `2.6.1` |
|
[pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish)
| `1.13.0` | `1.14.0` |


Updates `step-security/harden-runner` from 2.14.0 to 2.16.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/step-security/harden-runner/releases">step-security/harden-runner's
releases</a>.</em></p>
<blockquote>
<h2>v2.16.1</h2>
<h2>What's Changed</h2>
<p>Enterprise tier: Added support for direct IP addresses in the allow
list
Community tier: Migrated Harden Runner telemetry to a new endpoint</p>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/step-security/harden-runner/compare/v2.16.0...v2.16.1">https://github.com/step-security/harden-runner/compare/v2.16.0...v2.16.1</a></p>
<h2>v2.16.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Updated action.yml to use node24</li>
<li>Security fix: Fixed a medium severity vulnerability where the egress
block policy could be bypassed via DNS over HTTPS (DoH) by proxying DNS
queries through a permitted resolver, allowing data exfiltration even
with a restrictive allowed-endpoints list. This issue only affects the
Community Tier; the Enterprise... (continued)

Coverage Stats

3186 of 3650 relevant lines covered (87.29%)

4.15 hits per line