build(deps): bump github.com/rhysd/actionlint from 1.6.12 to 1.6.19

[dependabot]

Bumps github.com/rhysd/actionlint from 1.6.12 to 1.6.19.

Release notes

Sourced from github.com/rhysd/actionlint's releases.

v1.6.19

• Fix inputs, outputs, and secrets of reusable workflow should be case-insensitive. (#216)

  # .github/workflows/reusable.yaml
  on:
    workflow_call:
      inputs:
        INPUT_UPPER:
          type: string
        input_lower:
          type: string
      secrets:
        SECRET_UPPER:
        secret_lower:
  ...
  .github/workflows/test.yaml
  ...
  jobs:
  caller:
  uses: ./.github/workflows/reusable.yaml
  # Inputs and secrets are case-insensitive. So all the followings should be OK
  with:
  input_upper: ...
  INPUT_LOWER: ...
  secrets:
  secret_upper: ...
  SECRET_LOWER: ...

• Describe how to install specific version of actionlint binary with the download script. (#218)

v1.6.18

• This release much enhances checks for local reusable workflow calls. Note that these checks are done for local reusable workflows (starting with ./). (#179).
  • Detect missing required inputs/secrets and undefined inputs/secrets at jobs.<job_id>.with and jobs.<job_id>.secrets. See the document for more details.

    # .github/workflows/reusable.yml
    on:
      workflow_call:
        inputs:
          name:
            type: string
            required: true
        secrets:
          password:
            required: true
    ...
    .github/workflows/test.yml
    ...

... (truncated)

Changelog

Sourced from github.com/rhysd/actionlint's changelog.

v1.6.19 - 22 Sep 2022

• Fix inputs, outputs, and secrets of reusable workflow should be in case-insensitive. (#216)

  # .github/workflows/reusable.yaml
  on:
    workflow_call:
      inputs:
        INPUT_UPPER:
          type: string
        input_lower:
          type: string
      secrets:
        SECRET_UPPER:
        secret_lower:
  ...
  .github/workflows/test.yaml
  ...
  jobs:
  caller:
  uses: ./.github/workflows/reusable.yaml
  # Inputs and secrets are in case-insensitive. So all the followings should be OK
  with:
  input_upper: ...
  INPUT_LOWER: ...
  secrets:
  secret_upper: ...
  SECRET_LOWER: ...

• Describe how to install specific version of actionlint binary with the download script (#218)

[Changes][v1.6.19]

v1.6.18 - 17 Sep 2022

• This release much enhances checks for local reusable workflow calls. Note that these checks are done for local reusable workflows (starting with ./). (#179).
  • Detect missing required inputs/secrets and undefined inputs/secrets at jobs.<job_id>.with and jobs.<job_id>.secrets. See the document for more details.

    # .github/workflows/reusable.yml
    on:
      workflow_call:
        inputs:
          name:
            type: string
            required: true
        secrets:

... (truncated)

Commits

• d81f1c3 bump up version to v1.6.19
• 559b20e improve error message on parse error of reusable workflow file
• 0ffabf9 Merge branch 'issue-216' (fix #216)
• 90103e0 test type check of outputs from workflow call in case-insensitive
• 263c68c add tests for reusable workflow call where no input/secret is defined
• c15d911 add tests for checking inputs/secrets of reusable workflow calls in case-inse...
• ee1012a add tests for checking inputs/secrets of reusable workflow call in case-insen...
• c254394 explain how to install specific version of actionlint with the download scrip...
• 6713f82 fix input/output/secret names of reusable workflow are case-insensitive (#216)
• 0ea32b7 remove the tool to inspect workflow AST
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #44.