chore(deps): update github-actions

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
ghcr.io/miracum/ig-build-tools	container	patch	v2.1.6 -> v2.1.10
github/codeql-action	action	patch	v3.27.0 -> v3.27.9
miracum/.github	action	patch	v1.12.7 -> v1.12.12

---

Release Notes

miracum/ig-build-tools (ghcr.io/miracum/ig-build-tools)

v2.1.10

Compare Source

Bug Fixes

• deps: update dependency fsh-sushi to v3.12.1 (#​197) (4b08085)

v2.1.9

Compare Source

Miscellaneous Chores

• deps: update github-actions (#​196) (27766a8)

v2.1.8

Compare Source

Miscellaneous Chores

• deps: update dependency ubuntu to v24 (#​190) (eb652e5)

v2.1.7

Compare Source

Miscellaneous Chores

• deps: update all non-major dependencies (8d9e829)
• deps: update all non-major dependencies (8f475c6)
• deps: update docker.io/library/eclipse-temurin:11-jre docker digest to 22639ff (18913e9)
• deps: update docker.io/library/eclipse-temurin:11-jre docker digest to a271604 (994236f)
• deps: update docker.io/library/eclipse-temurin:11-jre docker digest to cc5855a (338ac43)
• deps: update github-actions (8ed9c79)
• deps: update github-actions (5504b9f)
• deps: update github-actions (6f502c3)
• deps: updated node, java, fhir terminal and re-ordered Dockerfile (#​195) (4436296)

github/codeql-action (github/codeql-action)

v3.27.9

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.27.9 - 12 Dec 2024

No user facing changes.

See the full CHANGELOG.md for more information.

v3.27.8

Compare Source

v3.27.7

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.27.7 - 10 Dec 2024

• We are rolling out a change in December 2024 that will extract the CodeQL bundle directly to the toolcache to improve performance. #​2631
• Update default CodeQL bundle version to 2.20.0. #​2636

See the full CHANGELOG.md for more information.

v3.27.6

Compare Source

v3.27.5

Compare Source

v3.27.4

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.27.4 - 14 Nov 2024

No user facing changes.

See the full CHANGELOG.md for more information.

v3.27.3

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.27.3 - 12 Nov 2024

No user facing changes.

See the full CHANGELOG.md for more information.

v3.27.2

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.27.2 - 12 Nov 2024

• Fixed an issue where setting up the CodeQL tools would sometimes fail with the message "Invalid value 'undefined' for header 'authorization'". #​2590

See the full CHANGELOG.md for more information.

v3.27.1

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.27.1 - 08 Nov 2024

• The CodeQL Action now downloads bundles compressed using Zstandard on GitHub Enterprise Server when using Linux or macOS runners. This speeds up the installation of the CodeQL tools. This feature is already available to GitHub.com users. #​2573
• Update default CodeQL bundle version to 2.19.3. #​2576

See the full CHANGELOG.md for more information.

miracum/.github (miracum/.github)

v1.12.12

Compare Source

Miscellaneous Chores

• deps: update oxsecurity/megalinter action to v8.3.0 (#​99) (abfae50)

v1.12.11

Compare Source

Miscellaneous Chores

• deps: update dependency gradle to v8.11.1 (#​97) (d49d346)
• deps: update github-actions (#​98) (ec147b5)

v1.12.10

Compare Source

Miscellaneous Chores

• deps: update oxsecurity/megalinter action to v8.2.0 (#​96) (3a6d6e8)

v1.12.9

Compare Source

Miscellaneous Chores

• deps: default to .net 9 (2dcefea)
• deps: update all non-major dependencies (#​93) (1853981)
• deps: update gcr.io/distroless/python3-debian12:nonroot docker digest to 97c3cd0 (#​92) (d3e9707)
• deps: update github-actions (#​94) (6b11456)

v1.12.8

Compare Source

Miscellaneous Chores

• deps: update github-actions (#​90) (0549971)

---

Configuration

📅 Schedule: Branch creation - "* 0-3 1 * *" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

🦙 MegaLinter status: ⚠️ WARNING

Descriptor	Linter	Files	Fixed	Errors	Elapsed time
✅ ACTION	actionlint	5		0	0.06s
✅ BASH	bash-exec	5		0	0.03s
✅ BASH	shellcheck	5		0	0.13s
⚠️ BASH	shfmt	5		1	0.01s
✅ DOCKERFILE	hadolint	1		0	0.12s
✅ EDITORCONFIG	editorconfig-checker	128		0	0.78s
✅ GROOVY	npm-groovy-lint	2		0	12.82s
✅ JAVA	checkstyle	46		0	8.91s
✅ JSON	jsonlint	18		0	0.51s
✅ JSON	npm-package-json-lint	yes		no	1.01s
✅ JSON	prettier	18		0	1.05s
✅ JSON	v8r	18		0	40.53s
✅ MARKDOWN	markdownlint	8		0	0.76s
✅ REPOSITORY	checkov	yes		no	20.71s
✅ REPOSITORY	gitleaks	yes		no	0.47s
✅ REPOSITORY	git_diff	yes		no	0.04s
✅ REPOSITORY	grype	yes		no	13.56s
✅ REPOSITORY	kics	yes		no	15.7s
✅ REPOSITORY	secretlint	yes		no	1.02s
✅ REPOSITORY	syft	yes		no	2.48s
✅ REPOSITORY	trivy	yes		no	8.64s
✅ REPOSITORY	trivy-sbom	yes		no	0.17s
✅ REPOSITORY	trufflehog	yes		no	4.38s
✅ XML	xmllint	13		0	0.02s
✅ YAML	prettier	16		0	1.2s
✅ YAML	v8r	16		0	18.17s
✅ YAML	yamllint	16		0	0.78s

See detailed report in MegaLinter reports

You could have the same capabilities but better runtime performances if you use a MegaLinter flavor:

• oxsecurity/megalinter/flavors/[email protected] (83 linters)

MegaLinter is graciously provided by

[github-actions]

Code Coverage Report

Overall Project	88.46%	🍏

There is no coverage information present for the Files changed

[github-actions]

Trivy image scan report

ghcr.io/bzkf/obds-to-fhir:pr-145 (debian 12.7)

No Vulnerabilities found

No Misconfigurations found

Java

5 known vulnerabilities found (LOW: 0 CRITICAL: 0 HIGH: 5 MEDIUM: 0)

Show detailed table of vulnerabilities

Package	ID	Severity	Installed Version	Fixed Version
ca.uhn.hapi.fhir:org.hl7.fhir.r4	CVE-2024-51132	HIGH	6.3.23	6.4.0
ca.uhn.hapi.fhir:org.hl7.fhir.r4	CVE-2024-52007	HIGH	6.3.23	6.4.0
ca.uhn.hapi.fhir:org.hl7.fhir.utilities	CVE-2024-51132	HIGH	6.3.23	6.4.0
ca.uhn.hapi.fhir:org.hl7.fhir.utilities	CVE-2024-52007	HIGH	6.3.23	6.4.0
commons-io:commons-io	CVE-2024-47554	HIGH	2.11.0	2.14.0

No Misconfigurations found