Bump prefix-dev/rattler-build-action from 0.2.38 to 0.2.39 - #544
Conversation
dependabot
Bot
added
dependencies
Bumps [prefix-dev/rattler-build-action](https://github.com/prefix-dev/rattler-build-action) from 0.2.38 to 0.2.39. - [Release notes](https://github.com/prefix-dev/rattler-build-action/releases) - [Commits](prefix-dev/rattler-build-action@v0.2.38...v0.2.39) --- updated-dependencies: - dependency-name: prefix-dev/rattler-build-action dependency-version: 0.2.39 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
blooop
left a comment
blooop
left a comment
There was a problem hiding this comment.
The action's own version is a patch bump, but the substance is what it pins
underneath: rattler-build v0.65.0 → v0.68.0
(prefix-dev/rattler-build-action#115),
three minor versions of the tool that actually builds the package. That is the
part worth reading, and the action's inputs are not where the risk is —
recipe-path and build-args are unchanged.
Read 0.66, 0.67 and 0.68's notes against what this recipe relies on:
--experimental for load_from_file, --no-include-recipe, and
${{ compiler('rust') }} with the variants.yaml floor. All three releases are
additions and fixes — interpreters, late-bound SRC_DIR/PREFIX variables, CRAN
generation, error-message quality. Nothing removed or renamed on any path this
recipe takes, and no breaking-change section in any of the three.
One thing this bump exposes that is worth recording, though it is not a reason to
hold the bump:
CI and publish do not use the same rattler-build. The packaging job's
"conda recipe parses and names the same version" step runs pixi exec rattler-build, which is unpinned and resolves whatever conda-forge currently
offers. conda-publish.yml builds with the action's pin, now v0.68.0. So the
version that proves the recipe renders is not the version that builds it, and
the two drift independently — this PR moves one of them and cannot move the
other. The check passing here is real evidence the recipe is well-formed, just
not evidence about v0.68.0 specifically.
Also worth being explicit: conda-publish.yml only runs off a completed
Auto-publish on main, so PR CI never executes the changed line. The first real
exercise of v0.68.0 will be the next release cut.
6925f65 to
bfbc87b
Compare
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files
Flags with carried forward coverage won't be shown. Click here to find out more.
🚀 New features to boost your workflow:
|
1 participant
Bumps prefix-dev/rattler-build-action from 0.2.38 to 0.2.39.
Release notes
Sourced from prefix-dev/rattler-build-action's releases.
Commits
1ca5f45Bump rattler-build to v0.68.0 (#115)58d12bfBump actions/checkout from 6.0.2 to 6.0.3 in the dependencies group (#116)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)