chore(deps): update github-actions #58

renovate · 2025-01-01T01:52:55Z

This PR contains the following updates:

Package	Type	Update	Change
actions/setup-java	action	minor	`v4.5.0` -> `v4.6.0`
actions/upload-artifact	action	minor	`v4.4.3` -> `v4.6.0`
github/codeql-action	action	minor	`v3.27.0` -> `v3.28.5`
gradle/actions	action	minor	`v4.1.0` -> `v4.2.2`
lycheeverse/lychee-action	action	minor	`v2.1.0` -> `v2.2.0`
miracum/.github	action	minor	`v1.12.8` -> `v1.13.1`

Release Notes

actions/setup-java (actions/setup-java)

`v4.6.0`

Compare Source

What's Changed

Add-ons:

Add Support for JetBrains Runtime by @gmitch215 in https://github.com/actions/setup-java/pull/637

 - name: Checkout
   uses: actions/checkout@v4
 - name: Setup-java
   uses: actions/setup-java@v4
   with:
     distribution: ‘jetbrains’
     java-version: '21'

Bug fixes:

Fix Ubuntu-latest CI failures by @mahabaleshwars in https://github.com/actions/setup-java/pull/693

New Contributors

@gmitch215 made their first contribution in https://github.com/actions/setup-java/pull/637

Full Changelog: actions/setup-java@v4...v4.6.0

actions/upload-artifact (actions/upload-artifact)

github/codeql-action (github/codeql-action)

`v3.28.5`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.5 - 24 Jan 2025

Update default CodeQL bundle version to 2.20.3. #2717

See the full CHANGELOG.md for more information.

`v3.28.4`

Compare Source

`v3.28.3`

Compare Source

`v3.28.2`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.2 - 21 Jan 2025

No user facing changes.

See the full CHANGELOG.md for more information.

`v3.28.1`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.1 - 10 Jan 2025

CodeQL Action v2 is now deprecated, and is no longer updated or supported. For better performance, improved security, and new features, upgrade to v3. For more information, see this changelog post. #2677
Update default CodeQL bundle version to 2.20.1. #2678

See the full CHANGELOG.md for more information.

`v3.28.0`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.28.0 - 20 Dec 2024

Bump the minimum CodeQL bundle version to 2.15.5. #2655
Don't fail in the unusual case that a file is on the search path. #2660.

See the full CHANGELOG.md for more information.

`v3.27.9`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.27.9 - 12 Dec 2024

No user facing changes.

See the full CHANGELOG.md for more information.

`v3.27.8`

Compare Source

`v3.27.7`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.27.7 - 10 Dec 2024

We are rolling out a change in December 2024 that will extract the CodeQL bundle directly to the toolcache to improve performance. #2631
Update default CodeQL bundle version to 2.20.0. #2636

See the full CHANGELOG.md for more information.

`v3.27.6`

Compare Source

`v3.27.5`

Compare Source

`v3.27.4`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.27.4 - 14 Nov 2024

No user facing changes.

See the full CHANGELOG.md for more information.

`v3.27.3`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.27.3 - 12 Nov 2024

No user facing changes.

See the full CHANGELOG.md for more information.

`v3.27.2`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.27.2 - 12 Nov 2024

Fixed an issue where setting up the CodeQL tools would sometimes fail with the message "Invalid value 'undefined' for header 'authorization'". #2590

See the full CHANGELOG.md for more information.

`v3.27.1`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.27.1 - 08 Nov 2024

The CodeQL Action now downloads bundles compressed using Zstandard on GitHub Enterprise Server when using Linux or macOS runners. This speeds up the installation of the CodeQL tools. This feature is already available to GitHub.com users. #2573
Update default CodeQL bundle version to 2.19.3. #2576

See the full CHANGELOG.md for more information.

gradle/actions (gradle/actions)

`v4.2.2`

Compare Source

This patch release updates a bunch of dependency versions and fixes a deprecation warning emitted with Gradle 8.12.

What's Changed

Bump cross-spawn in /sources by @dependabot in https://github.com/gradle/actions/pull/455
Update known wrapper checksums by @github-actions in https://github.com/gradle/actions/pull/462
Bump the github-actions group across 1 directory with 2 updates by @dependabot in https://github.com/gradle/actions/pull/474
Update @actions/cache4.0.0 and patch by @amyu in https://github.com/gradle/actions/pull/479
Update develocity-injection init script to v1.1 by @bot-githubaction in https://github.com/gradle/actions/pull/471
Dependency updates by @bigdaz in https://github.com/gradle/actions/pull/480
Bump references to Develocity Gradle plugin from 3.18.2 to 3.19 by @bot-githubaction in https://github.com/gradle/actions/pull/483
Update known wrapper checksums by @github-actions in https://github.com/gradle/actions/pull/484
Bump the gradle group across 1 directory with 2 updates by @dependabot in https://github.com/gradle/actions/pull/485
Attempt to limit failures in wrapper-validation tests by @bigdaz in https://github.com/gradle/actions/pull/490
Update known wrapper checksums by @github-actions in https://github.com/gradle/actions/pull/488
Remove deprecation warning from init-script by @bigdaz in https://github.com/gradle/actions/pull/491
Use latest dependency-graph plugin by @bigdaz in https://github.com/gradle/actions/pull/489

New Contributors

@sebastian-dyroff made their first contribution in https://github.com/gradle/actions/pull/465
@amyu made their first contribution in https://github.com/gradle/actions/pull/479

Full Changelog: gradle/actions@v4.2.1...v4.2.2

`v4.2.1`

Compare Source

This patch release fixes some issues with Develocity and Build Scan integration:

Build scan links not captured in project using plugin com.gradle.enteprise:3.18.2 (#449)
Enabling build-scan-publish causes some Develocity injection parameters to be ignored (#447)
Setting develocity-ccud-plugin-version parameter is ignored (#446)

What's Changed

Do not fail wrapper-validation on filename with illegal characters #438
Bump references to Develocity Gradle plugin from 3.18.1 to 3.18.2 by @bot-githubaction in https://github.com/gradle/actions/pull/441
Bump Gradle from 8.10.2 to 8.11 in https://github.com/gradle/actions/pull/443
Develocity injection fixes in https://github.com/gradle/actions/pull/448
Adapt build-result-capture script for GE plugin 3.17+ in https://github.com/gradle/actions/pull/450
ci: add scorecard by @nitrocode in https://github.com/gradle/actions/pull/384

New Contributors

@nitrocode made their first contribution in https://github.com/gradle/actions/pull/384

Full Changelog: gradle/actions@v4.2.0...v4.2.1

`v4.2.0`

Compare Source

This release fixes a bug that prevents cache-cleanup from working with Gradle 8.11.
A number of improvements to cache reporting are also included.

What's Changed

Fix cache-cleanup with Gradle 8.11 (https://github.com/gradle/actions/pull/430)
Update known wrapper checksums to include Gradle 8.11 (https://github.com/gradle/actions/pull/424)
Include cache save/restore times in Job Summary (https://github.com/gradle/actions/pull/389)
Improve cache logging by @bigdaz (https://github.com/gradle/actions/pull/392)
Correctly handle multiline patterns for extracted entries (https://github.com/gradle/actions/pull/393)
Numerous dependency updates

Full Changelog: gradle/actions@v4.1.0...v4.2.0

lycheeverse/lychee-action (lycheeverse/lychee-action)

`v2.2.0`: Version 2.2.0

Compare Source

What's Changed

Fix if expressions in GitHub actions by @YDX-2147483647 in https://github.com/lycheeverse/lychee-action/pull/265
Update README.md to include continue-on-error: true in action by @psobolewskiPhD in https://github.com/lycheeverse/lychee-action/pull/267
Bump default version to latest (0.18.0) by @trask in https://github.com/lycheeverse/lychee-action/pull/269

New Contributors

@psobolewskiPhD made their first contribution in https://github.com/lycheeverse/lychee-action/pull/267
@trask made their first contribution in https://github.com/lycheeverse/lychee-action/pull/269

Full Changelog: lycheeverse/lychee-action@v2...v2.2.0

miracum/.github (miracum/.github)

`v1.13.1`

Compare Source

Miscellaneous Chores

deps: update all non-major dependencies (#103) (4cc91ea)
deps: update github-actions (#101) (5b16dd8)

`v1.13.0`

Compare Source

Features

support for app-token based releases (91be41c)

`v1.12.12`

Compare Source

Miscellaneous Chores

deps: update oxsecurity/megalinter action to v8.3.0 (#99) (abfae50)

`v1.12.11`

Compare Source

Miscellaneous Chores

deps: update dependency gradle to v8.11.1 (#97) (d49d346)
deps: update github-actions (#98) (ec147b5)

`v1.12.10`

Compare Source

Miscellaneous Chores

deps: update oxsecurity/megalinter action to v8.2.0 (#96) (3a6d6e8)

`v1.12.9`

Compare Source

Miscellaneous Chores

deps: default to .net 9 (2dcefea)
deps: update all non-major dependencies (#93) (1853981)
deps: update gcr.io/distroless/python3-debian12:nonroot docker digest to 97c3cd0 (#92) (d3e9707)
deps: update github-actions (#94) (6b11456)

Configuration

📅 Schedule: Branch creation - "* * 1 */3 *" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

github-advanced-security · 2025-01-01T01:53:17Z

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.

github-actions · 2025-01-01T01:55:27Z

🦙 MegaLinter status: ⚠️ WARNING

Descriptor	Linter	Files	Errors	Elapsed time
✅ ACTION	actionlint	3	0	0.03s
✅ BASH	bash-exec	1	0	0.01s
✅ BASH	shellcheck	1	0	0.11s
⚠️ BASH	shfmt	1	1	0.01s
✅ GROOVY	npm-groovy-lint	2	0	12.74s
✅ JAVA	checkstyle	4	0	6.45s
✅ JSON	jsonlint	1	0	0.11s
✅ JSON	prettier	1	0	0.38s
✅ JSON	v8r	1	0	2.93s
✅ MARKDOWN	markdownlint	2	0	0.76s
✅ MARKDOWN	markdown-table-formatter	2	0	0.28s
✅ REPOSITORY	checkov	yes	no	17.99s
✅ REPOSITORY	dustilock	yes	no	0.02s
✅ REPOSITORY	gitleaks	yes	no	0.14s
✅ REPOSITORY	git_diff	yes	no	0.0s
✅ REPOSITORY	grype	yes	no	13.85s
✅ REPOSITORY	kics	yes	no	1.5s
✅ REPOSITORY	secretlint	yes	no	0.82s
✅ REPOSITORY	syft	yes	no	2.5s
✅ REPOSITORY	trivy	yes	no	6.11s
✅ REPOSITORY	trivy-sbom	yes	no	0.13s
✅ REPOSITORY	trufflehog	yes	no	3.02s
✅ XML	xmllint	1	0	0.01s
✅ YAML	prettier	4	0	0.63s
✅ YAML	v8r	4	0	6.37s
✅ YAML	yamllint	4	0	0.66s

See detailed report in MegaLinter reports

You could have the same capabilities but better runtime performances if you use a MegaLinter flavor:

oxsecurity/megalinter/flavors/[email protected] (83 linters)

MegaLinter is graciously provided by

sonarqubecloud · 2025-01-24T17:12:10Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

renovate bot force-pushed the renovate/github-actions branch 3 times, most recently from 0864641 to 36b9bf9 Compare January 14, 2025 21:33

renovate bot force-pushed the renovate/github-actions branch 3 times, most recently from 51e50a1 to c281c36 Compare January 23, 2025 21:58

chore(deps): update github-actions

430cf34

renovate bot force-pushed the renovate/github-actions branch from c281c36 to 430cf34 Compare January 24, 2025 17:11

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): update github-actions #58

chore(deps): update github-actions #58

renovate bot commented Jan 1, 2025 •

edited

Loading

github-advanced-security bot commented Jan 1, 2025

github-actions bot commented Jan 1, 2025 •

edited

Loading

sonarqubecloud bot commented Jan 24, 2025

chore(deps): update github-actions #58

Are you sure you want to change the base?

chore(deps): update github-actions #58

Conversation

renovate bot commented Jan 1, 2025 • edited Loading

Release Notes

What's Changed

New Contributors

What's Changed

CodeQL Action Changelog

3.28.5 - 24 Jan 2025

CodeQL Action Changelog

3.28.2 - 21 Jan 2025

CodeQL Action Changelog

3.28.1 - 10 Jan 2025

CodeQL Action Changelog

3.28.0 - 20 Dec 2024

CodeQL Action Changelog

3.27.9 - 12 Dec 2024

CodeQL Action Changelog

3.27.7 - 10 Dec 2024

CodeQL Action Changelog

3.27.4 - 14 Nov 2024

CodeQL Action Changelog

3.27.3 - 12 Nov 2024

CodeQL Action Changelog

3.27.2 - 12 Nov 2024

CodeQL Action Changelog

3.27.1 - 08 Nov 2024

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

v2.2.0: Version 2.2.0

What's Changed

New Contributors

Miscellaneous Chores

Features

Miscellaneous Chores

Miscellaneous Chores

Miscellaneous Chores

Miscellaneous Chores

Configuration

github-advanced-security bot commented Jan 1, 2025

github-actions bot commented Jan 1, 2025 • edited Loading

🦙 MegaLinter status: ⚠️ WARNING

sonarqubecloud bot commented Jan 24, 2025

Quality Gate passed

renovate bot commented Jan 1, 2025 •

edited

Loading

`v2.2.0`: Version 2.2.0

github-actions bot commented Jan 1, 2025 •

edited

Loading