Update all dependencies #153
Open
+26
−26
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![renovate[bot]](https://avatars.githubusercontent.com/in/2740?s=60&v=4){kind=small}
renovate
bot
force-pushed
the
renovate/all
branch
2 times, most recently
from
d14d7bc
to
a403d95
Compare
renovate
bot
force-pushed
the
renovate/all
branch
3 times, most recently
from
1d2e66b
to
e9c9b3d
Compare
renovate
bot
force-pushed
the
renovate/all
branch
4 times, most recently
from
3198b34
to
02d37df
Compare
renovate
bot
force-pushed
the
renovate/all
branch
from
02d37df
to
67a03d4
Compare
renovate
bot
force-pushed
the
renovate/all
branch
4 times, most recently
from
91d4d6c
to
b47b5de
Compare
renovate
bot
force-pushed
the
renovate/all
branch
4 times, most recently
from
0a89819
to
c98f91c
Compare
renovate
bot
force-pushed
the
renovate/all
branch
4 times, most recently
from
f2760c5
to
4aa6cf7
Compare
renovate
bot
force-pushed
the
renovate/all
branch
4 times, most recently
from
c1c77ae
to
6971ba6
Compare
renovate
bot
force-pushed
the
renovate/all
branch
2 times, most recently
from
e13336c
to
ed9937f
Compare
renovate
bot
force-pushed
the
renovate/all
branch
2 times, most recently
from
321f9c9
to
ece7d84
Compare
renovate
bot
force-pushed
the
renovate/all
branch
3 times, most recently
from
5f3c1a1
to
de940e6
Compare
renovate
bot
force-pushed
the
renovate/all
branch
3 times, most recently
from
b3fe451
to
0b06557
Compare
renovate
bot
force-pushed
the
renovate/all
branch
4 times, most recently
from
4eab242
to
ca42a23
Compare
renovate
bot
force-pushed
the
renovate/all
branch
3 times, most recently
from
74e0fda
to
7863bbb
Compare
renovate
bot
force-pushed
the
renovate/all
branch
4 times, most recently
from
87b2530
to
1f5e956
Compare
renovate
bot
force-pushed
the
renovate/all
branch
from
1f5e956
to
7042e6f
Compare
renovate
bot
force-pushed
the
renovate/all
branch
3 times, most recently
from
2a77e9c
to
806edd5
Compare
renovate
bot
force-pushed
the
renovate/all
branch
4 times, most recently
from
47ae123
to
90a0e65
Compare
renovate
bot
force-pushed
the
renovate/all
branch
3 times, most recently
from
41664f2
to
7823df1
Compare
renovate
bot
force-pushed
the
renovate/all
branch
from
7823df1
to
4710520
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v4.0.1->v4.1.2v4.1.1->v4.2.2v4.3.1->v4.4.3v1.17.5->v1.18.2~> 0.31->~> 0.35v3.24.6->v3.27.6v2.3.1->v2.4.0~> 0.21.2->~> 0.22.0v2.7.0->v2.10.2Release Notes
actions/cache (actions/cache)
v4.1.2Compare Source
What's Changed
isGheslogic by @jww3 in https://github.com/actions/cache/pull/14744.1.2release by @Link- in https://github.com/actions/cache/pull/1477New Contributors
Full Changelog: actions/cache@v4...v4.1.2
v4.1.1Compare Source
What's Changed
cache-hitoutput by @joshmgross in https://github.com/actions/cache/pull/1467Full Changelog: actions/cache@v4.1.0...v4.1.1
v4.1.0Compare Source
What's Changed
save-alwaysinput by @joshmgross in https://github.com/actions/cache/pull/1452New Contributors
Full Changelog: actions/cache@v4.0.2...v4.1.0
v4.0.2Compare Source
actions/checkout (actions/checkout)
v4.2.2Compare Source
url-helper.tsnow leverages well-known environment variables by @jww3 in https://github.com/actions/checkout/pull/1941isGhesby @jww3 in https://github.com/actions/checkout/pull/1946v4.2.1Compare Source
v4.2.0Compare Source
v4.1.7Compare Source
v4.1.6Compare Source
v4.1.5Compare Source
What's Changed
user.emailto be41898282+github-actions[bot]@​users.noreply.github.comby @cory-miller in https://github.com/actions/checkout/pull/1707Full Changelog: actions/checkout@v4.1.4...v4.1.5
v4.1.4Compare Source
extensions.worktreeConfigwhen disablingsparse-checkoutby @jww3 in https://github.com/actions/checkout/pull/1692v4.1.3Compare Source
What's Changed
actions/checkoutversion inupdate-main-version.ymlby @jww3 in https://github.com/actions/checkout/pull/1650sparse-checkoutby @jww3 in https://github.com/actions/checkout/pull/1656Full Changelog: actions/checkout@v4.1.2...v4.1.3
v4.1.2Compare Source
sparse-checkoutoption is not present @dscho in https://github.com/actions/checkout/pull/1598actions/upload-artifact (actions/upload-artifact)
v4.4.3Compare Source
What's Changed
Full Changelog: actions/upload-artifact@v4.4.2...v4.4.3
v4.4.2Compare Source
What's Changed
@actions/artifactto 2.1.11 by @robherley in https://github.com/actions/upload-artifact/pull/627Full Changelog: actions/upload-artifact@v4.4.1...v4.4.2
v4.4.1Compare Source
What's Changed
New Contributors
Full Changelog: actions/upload-artifact@v4.4.0...v4.4.1
v4.4.0Compare Source
v4.3.6Compare Source
v4.3.5Compare Source
v4.3.4Compare Source
What's Changed
Full Changelog: actions/upload-artifact@v4.3.3...v4.3.4
v4.3.3Compare Source
What's Changed
@actions/artifactdependency to v2.1.6 by @eggyhead in https://github.com/actions/upload-artifact/pull/565Full Changelog: actions/upload-artifact@v4.3.2...v4.3.3
v4.3.2Compare Source
What's Changed
@actions/artifactdependency to v2.1.5 and@actions/coreto v1.0.1 by @eggyhead in https://github.com/actions/upload-artifact/pull/562New Contributors
Full Changelog: actions/upload-artifact@v4.3.1...v4.3.2
erlef/setup-beam (erlef/setup-beam)
v1.18.2Compare Source
What's Changed
Full Changelog: erlef/setup-beam@v1.18.1...v1.18.2
v1.18.1Compare Source
What's Changed
latestnot matching internal elements by @Schultzer in https://github.com/erlef/setup-beam/pull/298Full Changelog: erlef/setup-beam@v1...v1.18.1
v1.18.0Compare Source
What's Changed
rebar3nightly no longer supports OTP 24 by @paulo-ferraz-oliveira in https://github.com/erlef/setup-beam/pull/282markdownlintrules and README versioning by @paulo-ferraz-oliveira in https://github.com/erlef/setup-beam/pull/286New Contributors
Full Changelog: erlef/setup-beam@v1.17...v1.17.7
v1.17.6Compare Source
What's Changed
New Contributors
Full Changelog: erlef/setup-beam@v1.17...v1.17.6
github/codeql-action (github/codeql-action)
v3.27.6Compare Source
v3.27.5Compare Source
v3.27.4Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
Note that the only difference between
v2andv3of the CodeQL Action is the node version they support, withv3running on node 20 while we continue to releasev2to support running on node 16. For example3.22.11was the firstv3release and is functionally identical to2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.3.27.4 - 14 Nov 2024
No user facing changes.
See the full CHANGELOG.md for more information.
v3.27.3Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
Note that the only difference between
v2andv3of the CodeQL Action is the node version they support, withv3running on node 20 while we continue to releasev2to support running on node 16. For example3.22.11was the firstv3release and is functionally identical to2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.3.27.3 - 12 Nov 2024
No user facing changes.
See the full CHANGELOG.md for more information.
v3.27.2Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
Note that the only difference between
v2andv3of the CodeQL Action is the node version they support, withv3running on node 20 while we continue to releasev2to support running on node 16. For example3.22.11was the firstv3release and is functionally identical to2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.3.27.2 - 12 Nov 2024
See the full CHANGELOG.md for more information.
v3.27.1Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
Note that the only difference between
v2andv3of the CodeQL Action is the node version they support, withv3running on node 20 while we continue to releasev2to support running on node 16. For example3.22.11was the firstv3release and is functionally identical to2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.3.27.1 - 08 Nov 2024
See the full CHANGELOG.md for more information.
v3.27.0Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
Note that the only difference between
v2andv3of the CodeQL Action is the node version they support, withv3running on node 20 while we continue to releasev2to support running on node 16. For example3.22.11was the firstv3release and is functionally identical to2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.3.27.0 - 22 Oct 2024
upload-sarifAction would fail with "upload-sarif post-action step failed: Input required and not supplied: token" when called in a composite Action that had a different set of inputs to the ones expected by theupload-sarifAction. #2557See the full CHANGELOG.md for more information.
v3.26.13Compare Source
v3.26.12Compare Source
v3.26.11Compare Source
v3.26.10Compare Source
v3.26.9Compare Source
v3.26.8Compare Source
v3.26.7Compare Source
v3.26.6Compare Source
v3.26.5Compare Source
v3.26.4Compare Source
v3.26.3Compare Source
v3.26.2Compare Source
v3.26.1Compare Source
v3.26.0Compare Source
v3.25.15Compare Source
v3.25.14Compare Source
v3.25.13Compare Source
v3.25.12Compare Source
v3.25.11Compare Source
v3.25.10Compare Source
v3.25.9Compare Source
v3.25.8Compare Source
v3.25.7Compare Source
v3.25.6Compare Source
v3.25.5Compare Source
v3.25.4Compare Source
v3.25.3Compare Source
v3.25.2Compare Source
v3.25.1Compare Source
v3.25.0Compare Source
v3.24.11Compare Source
v3.24.10Compare Source
v3.24.9Compare Source
v3.24.8Compare Source
v3.24.7Compare Source
ossf/scorecard-action (ossf/scorecard-action)
v2.4.0Compare Source
What's Changed
This update bumps the Scorecard version to the v5 release. For a complete list of changes, please refer to the v5.0.0 release notes. Of special note to Scorecard Action is the Maintainer Annotation feature, which can be used to suppress some Code Scanning false positives. Alerts will not be generated for any Scorecard Check with an annotation.
Documentation
New Contributors
Full Changelog: ossf/scorecard-action@v2.3.3...v2.4.0
v2.3.3Compare Source
What's Changed
For a full changelist of what these include, see the v5.0.0-rc1 and v5.0.0-rc2 release notes.
Documentation
ossf/scorecardworkflow instead of maintaining an example by @spencerschrock in https://github.com/ossf/scorecard-action/pull/1352Full Changelog: ossf/scorecard-action@v2.3.1...v2.3.3
v2.3.2Compare Source
step-security/harden-runner (step-security/harden-runner)
v2.10.2Compare Source
What's Changed
Fixes low-severity command injection weaknesses
The advisory is here: GHSA-g85v-wf27-67xc
Bug fix to improve detection of whether Harden-Runner is running in a container
Full Changelog: step-security/harden-runner@v2...v2.10.2
v2.10.1Compare Source
What's Changed
Release v2.10.1 by @varunsh-coder in https://github.com/step-security/harden-runner/pull/463
Bug fix: Resolves an issue where DNS resolution of .local domains was failing when using a Kind cluster in a GitHub Actions workflow.
Full Changelog: step-security/harden-runner@v2...v2.10.1
v2.10.0Compare Source
What's Changed
Release v2.10.0 by @h0x0er and @varunsh-coder in https://github.com/step-security/harden-runner/pull/455
ARM Support: Harden-Runner Enterprise tier now supports GitHub-hosted ARM runners. This includes all the features that apply to previously supported GitHub-hosted x64 Linux runners.
Full Changelog: step-security/harden-runner@v2...v2.10.0
v2.9.1Compare Source
What's Changed
Release v2.9.1 by @h0x0er and @varunsh-coder in #440
This release includes two changes:
Full Changelog: step-security/harden-runner@v2...v2.9.1
v2.9.0Compare Source
What's Changed
Release v2.9.0 by @h0x0er and @varunsh-coder in https://github.com/step-security/harden-runner/pull/435
This release includes:
For the enterprise tier, this change helps overcome size constraints, allowing for more reliable telemetry uploads from the Harden-Runner agent to the StepSecurity backend API. No configuration change is needed to enable this.
The Harden-Runner agent now uses a per-job key to authenticate to the StepSecurity backend API to submit telemetry. This change prevents the submission of telemetry data anonymously for a given job, improving the integrity of the data collection process. No configuration change is needed to enable this.
A Table of Contents has been added to the README file to improve navigation. This makes it easier for users to find the information they need quickly.
Updated the
bracesnpm package dependency to a non-vulnerable version. The vulnerability inbracesdid not affect the Harden Runner ActionFull Changelog: step-security/harden-runner@v2...v2.9.0
v2.8.1Compare Source
What's Changed
The previous implementation incorrectly identified large GitHub-hosted runners as self-hosted runners. As a result, harden-runner was not executing on these large GitHub-hosted runners.
Full Changelog: step-security/harden-runner@v2...v2.8.1
v2.8.0Compare Source
What's Changed
Release v2.8.0 by @h0x0er and @varunsh-coder in https://github.com/step-security/harden-runner/pull/416
This release includes:
These enhancements are based on insights from the XZ Utils incident, aimed at improving observability and detections during the build process.
Full Changelog: step-security/harden-runner@v2...v2.8.0
v2.7.1Compare Source
What's Changed
Release v2.7.1 by @varunsh-coder, @h0x0er, @ashishkurmi in https://github.com/step-security/harden-runner/pull/397
This release:
Full Changelog: step-security/harden-runner@v2.7.0...v2.7.1
Configuration
📅 Schedule: Branch creation - "* 0-3 1 * *" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.