#3519 chore(deps): bump the actions group with 3 updates Pull request opened by dependabot[bot] Bumps the actions group with 3 updates: CodSpeedHQ/action, actions/dependency-review-action and commitizen-tools/commitizen-action. Updates

CodSpeedHQ/action

from 4.10.6 to 4.11.0 Release notes Sourced from CodSpeedHQ/action's releases.

v4.11.0

Release Notes

🚀 Features

• feat: add SHA256 hash verification for the installer script by `@​art049` in CodSpeedHQ/action#189

• Collect debug info by pid by `@​GuillaumeLagrange` in #240

• Skip tests requiring sudo if

GITHUB_ACTIONS

is not set by `@​GuillaumeLagrange`

• Deduplicate symbol maps, unwind_data and debug info by `@​GuillaumeLagrange`

• Use bench_pids filters when harvesting symbols from perf file by `@​GuillaumeLagrange`

• Add new fields to perf metadata by `@​GuillaumeLagrange` in #246

• Always try to attach to libc-compatible API by `@​not-matthias`

• Support tcmalloc by `@​not-matthias`

• Support more standard allocation APIs by `@​not-matthias`

• Add tracegrind support as an alternative simulation tool by `@​art049` in #236

🐛 Bug Fixes

• Re-add perf map colection removed by mistake by `@​GuillaumeLagrange` in #251

🏗️ Refactor

• Use common lib paths for all allocators by `@​not-matthias`

⚙️ Internals

• chore: bump runner version to 4.11.0 by `@​github-actions`[bot] in CodSpeedHQ/action#190

• Bump exec-harness version

• Remove outdated allocator check by `@​not-matthias` in #241

• Add tcmalloc test by `@​not-matthias`

Install codspeed-runner 4.11.0

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/CodSpeedHQ/codspeed/releases/download/v4.11.0/codspeed-runner-installer.sh | sh

Download codspeed-runner 4.11.0

| File | Platform | Checksum |

| ----------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ---------------- | -------------------------------------------------------------------------------------------------------------------------------------- |

| [codspeed-runner-aarch64-unknown-linux-musl.tar.gz](https://github.com/CodSpeedHQ/codspeed/releases/download/v4.11.0/codspeed-runner-aarch64-unknown-linux-musl.tar.gz) | ARM64 MUSL Linux | [checksum](https://github.com/CodSpeedHQ/codspeed/releases/download/v4.11.0/codspeed-runner-aarch64-unknown-linux-musl.tar.gz.sha256) |

| [codspeed-runner-x86_64-unknown-linux-musl.tar.gz](https://github.com/CodSpeedHQ/codspeed/releases/download/v4.11.0/codspeed-runner-x86%5F64-unknown-linux-musl.tar.gz) | x64 MUSL Linux | [checksum](https://github.com/CodSpeedHQ/codspeed/releases/download/v4.11.0/codspeed-runner-x86%5F64-unknown-linux-musl.tar.gz.sha256) |

Full Runner Changelog: https://github.com/CodSpeedHQ/codspeed/blob/main/CHANGELOG.md

Full Changelog: CodSpeedHQ/action@v4.10.6...v4.11.0

Commits • `2ac5728` Release v4.11.0 🚀 • `9f9b098` chore: bump runner version to 4.11.0 (#190) • `2f0adbd` feat: add SHA256 hash verification for the installer script (#189) • See full diff in compare view Updates

actions/dependency-review-action

from 4.8.2 to 4.8.3 Release notes Sourced from actions/dependency-review-action's releases.

4.8.3

Dependency Review Action v4.8.3

This is a bugfix release that updates a number of upstream dependencies and includes a fix for the earlier feature that detected oversized summaries and upload them as artifacts, which could occasionally crash the action.

We have also updated the release process to use a long-lived

v4

branch for the action, instead of a force-pushed tag, which aligns better with git branching strategies; the change should be transparent to end users.

What's Changed

• GitHub Actions can't push to our protected main by `@​dangoor` in actions/dependency-review-action#1017

• Bump actions/stale from 9.1.0 to 10.1.0 by `@​dependabot`[bot] in actions/dependency-review-action#995

• Bump github/codeql-action from 3 to 4 by `@​dependabot`[bot] in actions/dependency-review-action#1003

• Bump actions/setup-node from 4 to 6 by `@​dependabot`[bot] in actions/dependency-review-action#1005

• Upgrade glob to address a vulnerability by `@​brrygrdn` in actions/dependency-review-action#1024

• Bump js-yaml by `@​dependabot`[bot] in actions/dependency-review-action#1020

• Addressing vulnerabilities by `@​Ahmed3lmallah` in actions/dependency-review-action#1036

• Bump fast-xml-parser from 5.3.3 to 5.3.5 by `@​dependabot`[bot] in actions/dependency-review-action#1050

• Bump fast-xml-parser from 5.3.5 to 5.3.6 by `@​dependabot`[bot] in <https://redirect.github.com/actions/dependency-review-action/pull/1053|actio…

meltano/sdk