build(deps): bump the dependencies group across 1 directory with 7 updates #216
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the dependencies group with 7 updates in the / directory:
4.2.0
4.2.1
3.26.9
3.26.12
4.4.0
4.4.3
2.1.2
2.1.3
3.6.1
3.7.1
0.24.0
0.27.0
3.82.6
3.82.8
Updates
actions/checkout
from 4.2.0 to 4.2.1Release notes
Sourced from actions/checkout's releases.
Changelog
Sourced from actions/checkout's changelog.
... (truncated)
Commits
eef6144
Prepare 4.2.1 release (#1925)6b42224
Add workflow file for publishing releases to immutable action package (#1919)de5a000
Check out other refs/* by commit if provided, fall back to ref (#1924)Updates
github/codeql-action
from 3.26.9 to 3.26.12Changelog
Sourced from github/codeql-action's changelog.
... (truncated)
Commits
c36620d
Merge pull request #2529 from github/update-v3.26.12-c9a70ff45570aecb
Update changelog for v3.26.12c9a70ff
Merge pull request #2526 from github/henrymercer/check-zstd-on-pathd65a176
Rebuildbf2e624
Update src/tar.ts56d1975
Merge pull request #2489 from github/redsun82/rust7cf65a5
Merge pull request #2518 from github/dependabot/npm_and_yarn/npm-88156698cd8a56dd2
Update to@actions/core
1.11.11532671
Update default bundle to 2.19.1 (#2519)64871a8
Merge branch 'main' into update-bundle/codeql-bundle-v2.19.1Updates
actions/upload-artifact
from 4.4.0 to 4.4.3Release notes
Sourced from actions/upload-artifact's releases.
Commits
b4b15b8
Merge pull request #632 from actions/joshmgross/undo-dependency-changes92b01eb
Undo indirect dependency updates from #6278448086
Merge pull request #627 from actions/robherley/v4.4.2b1d4642
add explicit relative and absolute symlinks to workflowd50e660
bump versionaabe6f8
build with@actions/artifact
v2.1.11604373d
Merge pull request #625 from actions/robherley/artifact-2.1.100150148
paste right core versiona009b25
update licenses9f6f6f4
update@actions/core
and@actions/artifact
to latest versionsUpdates
checkmarx/kics-github-action
from 2.1.2 to 2.1.3Release notes
Sourced from checkmarx/kics-github-action's releases.
Commits
9446974
Merge pull request #120 from Checkmarx/cx-monicac-update-kics-version517f0f8
refactor:updates kics version4c1b96b
Update README.mdUpdates
docker/setup-buildx-action
from 3.6.1 to 3.7.1Release notes
Sourced from docker/setup-buildx-action's releases.
Commits
c47758b
Merge pull request #369 from crazy-max/revert-crypto8fea382
chore: update generated content2874e98
switch back to uuid package8026d2b
Merge pull request #362 from docker/dependabot/npm_and_yarn/docker/actions-to...e51aab5
chore: update generated contentfd7390e
build(deps): bump@docker/actions-toolkit
from 0.35.0 to 0.39.0910a304
Merge pull request #366 from crazy-max/remove-uuid3623ee4
chore: update generated contente0e5ecf
remove uuid package and switch to crypto5334dd0
Merge pull request #363 from crazy-max/set-buildkitd-flags-optinUpdates
aquasecurity/trivy-action
from 0.24.0 to 0.27.0Release notes
Sourced from aquasecurity/trivy-action's releases.
Commits
5681af8
fix: set envs only when passed (#405)8078967
chore: update description for scanners and format inputs (#407)0fa0cdb
ci: usesetup-trivy
to install Trivy (#406)a20de54
feat: store artifacts in cache by default (#399)1b8b83d
docs: add usage info aboutaction/cache
for trivy databases (#397)f781cce
feat(trivy): Bump to support v0.56.1 (#387)54f21d8
ci: sync trivy-checks version 1 (#398)89b14e5
Upgrade GitHub actions (#374)97646fe
chore: use checks bundle snapshot from trivy-action (#388)d9cd5b1
fix(Makefile): recursive option typo (#371)Updates
trufflesecurity/trufflehog
from 3.82.6 to 3.82.8Release notes
Sourced from trufflesecurity/trufflehog's releases.
... (truncated)
Commits
5280c38
Add SliceContainsString common util (#3395)02d17ca
fix: pr template link to golangci-lint (#3392)f44e623
fix(deps): update golang.org/x/exp digest to f66d83c (#3389)05015b3
Separate detector tests into unit/integration (#3274)e57c712
Manually upgrade github dep (#3387)bc32592
Updated Fastly Personal Token Detector (#3386)6f1a717
fix(deps): update module google.golang.org/api to v0.200.0 (#3391)76ca171
[Fix] Snowflake privatelink Support (#3286)321813f
Enhanced the easyinsight detector (#3384)23afcd7
Log skipped files on debug level (#3383)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase
will rebase this PR@dependabot recreate
will recreate this PR, overwriting any edits that have been made to it@dependabot merge
will merge this PR after your CI passes on it@dependabot squash and merge
will squash and merge this PR after your CI passes on it@dependabot cancel merge
will cancel a previously requested merge and block automerging@dependabot reopen
will reopen this PR if it is closed@dependabot close
will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditions
will show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major version
will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor version
will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>
will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>
will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>
will remove the ignore condition of the specified dependency and ignore conditions