Update all dependencies #313
Open
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![renovate[bot]](https://avatars.githubusercontent.com/in/2740?s=60&v=4){kind=small}
renovate
bot
force-pushed
the
renovate/all
branch
3 times, most recently
from
ddce10e
to
cb9f06b
Compare
renovate
bot
force-pushed
the
renovate/all
branch
3 times, most recently
from
224eb2c
to
641b36e
Compare
renovate
bot
force-pushed
the
renovate/all
branch
2 times, most recently
from
9d6cbe8
to
1ed0e63
Compare
renovate
bot
force-pushed
the
renovate/all
branch
2 times, most recently
from
c0b8bb3
to
ca897d5
Compare
renovate
bot
force-pushed
the
renovate/all
branch
3 times, most recently
from
5012c90
to
ff24193
Compare
renovate
bot
force-pushed
the
renovate/all
branch
4 times, most recently
from
7818cb9
to
f66031b
Compare
renovate
bot
force-pushed
the
renovate/all
branch
3 times, most recently
from
685ce19
to
5156a20
Compare
renovate
bot
force-pushed
the
renovate/all
branch
4 times, most recently
from
08d27d4
to
bfc8ef7
Compare
renovate
bot
force-pushed
the
renovate/all
branch
from
bfc8ef7
to
df75541
Compare
renovate
bot
force-pushed
the
renovate/all
branch
3 times, most recently
from
b928caa
to
dc0c8b1
Compare
renovate
bot
force-pushed
the
renovate/all
branch
2 times, most recently
from
996d71b
to
bc255a2
Compare
renovate
bot
force-pushed
the
renovate/all
branch
from
bc255a2
to
560b634
Compare
renovate
bot
force-pushed
the
renovate/all
branch
from
560b634
to
2128e8f
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v4.0.2->v4.1.2v4.1.7->v4.2.2v4.3.4->v4.4.3v1.18.0->v1.18.2v3.25.12->v3.27.4v2.3.3->v2.4.0v2.8.1->v2.10.1Release Notes
actions/cache (actions/cache)
v4.1.2Compare Source
What's Changed
isGheslogic by @jww3 in https://github.com/actions/cache/pull/14744.1.2release by @Link- in https://github.com/actions/cache/pull/1477New Contributors
Full Changelog: actions/cache@v4...v4.1.2
v4.1.1Compare Source
What's Changed
cache-hitoutput by @joshmgross in https://github.com/actions/cache/pull/1467Full Changelog: actions/cache@v4.1.0...v4.1.1
v4.1.0Compare Source
What's Changed
save-alwaysinput by @joshmgross in https://github.com/actions/cache/pull/1452New Contributors
Full Changelog: actions/cache@v4.0.2...v4.1.0
actions/checkout (actions/checkout)
v4.2.2Compare Source
url-helper.tsnow leverages well-known environment variables by @jww3 in https://github.com/actions/checkout/pull/1941isGhesby @jww3 in https://github.com/actions/checkout/pull/1946v4.2.1Compare Source
v4.2.0Compare Source
actions/upload-artifact (actions/upload-artifact)
v4.4.3Compare Source
What's Changed
Full Changelog: actions/upload-artifact@v4.4.2...v4.4.3
v4.4.2Compare Source
What's Changed
@actions/artifactto 2.1.11 by @robherley in https://github.com/actions/upload-artifact/pull/627Full Changelog: actions/upload-artifact@v4.4.1...v4.4.2
v4.4.1Compare Source
What's Changed
New Contributors
Full Changelog: actions/upload-artifact@v4.4.0...v4.4.1
v4.4.0Compare Source
v4.3.6Compare Source
v4.3.5Compare Source
erlef/setup-elixir (erlef/setup-elixir)
v1.18.2Compare Source
What's Changed
Full Changelog: erlef/setup-beam@v1.18.1...v1.18.2
v1.18.1Compare Source
What's Changed
latestnot matching internal elements by @Schultzer in https://github.com/erlef/setup-beam/pull/298Full Changelog: erlef/setup-beam@v1...v1.18.1
github/codeql-action (github/codeql-action)
v3.27.4Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
Note that the only difference between
v2andv3of the CodeQL Action is the node version they support, withv3running on node 20 while we continue to releasev2to support running on node 16. For example3.22.11was the firstv3release and is functionally identical to2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.3.27.4 - 14 Nov 2024
No user facing changes.
See the full CHANGELOG.md for more information.
v3.27.3Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
Note that the only difference between
v2andv3of the CodeQL Action is the node version they support, withv3running on node 20 while we continue to releasev2to support running on node 16. For example3.22.11was the firstv3release and is functionally identical to2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.3.27.3 - 12 Nov 2024
No user facing changes.
See the full CHANGELOG.md for more information.
v3.27.2Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
Note that the only difference between
v2andv3of the CodeQL Action is the node version they support, withv3running on node 20 while we continue to releasev2to support running on node 16. For example3.22.11was the firstv3release and is functionally identical to2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.3.27.2 - 12 Nov 2024
See the full CHANGELOG.md for more information.
v3.27.1Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
Note that the only difference between
v2andv3of the CodeQL Action is the node version they support, withv3running on node 20 while we continue to releasev2to support running on node 16. For example3.22.11was the firstv3release and is functionally identical to2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.3.27.1 - 08 Nov 2024
See the full CHANGELOG.md for more information.
v3.27.0Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
Note that the only difference between
v2andv3of the CodeQL Action is the node version they support, withv3running on node 20 while we continue to releasev2to support running on node 16. For example3.22.11was the firstv3release and is functionally identical to2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.3.27.0 - 22 Oct 2024
upload-sarifAction would fail with "upload-sarif post-action step failed: Input required and not supplied: token" when called in a composite Action that had a different set of inputs to the ones expected by theupload-sarifAction. #2557See the full CHANGELOG.md for more information.
v3.26.13Compare Source
v3.26.12Compare Source
v3.26.11Compare Source
v3.26.10Compare Source
v3.26.9Compare Source
v3.26.8Compare Source
v3.26.7Compare Source
v3.26.6Compare Source
v3.26.5Compare Source
v3.26.4Compare Source
v3.26.3Compare Source
v3.26.2Compare Source
v3.26.1Compare Source
v3.26.0Compare Source
v3.25.15Compare Source
v3.25.14Compare Source
v3.25.13Compare Source
ossf/scorecard-action (ossf/scorecard-action)
v2.4.0Compare Source
What's Changed
This update bumps the Scorecard version to the v5 release. For a complete list of changes, please refer to the v5.0.0 release notes. Of special note to Scorecard Action is the Maintainer Annotation feature, which can be used to suppress some Code Scanning false positives. Alerts will not be generated for any Scorecard Check with an annotation.
Documentation
New Contributors
Full Changelog: ossf/scorecard-action@v2.3.3...v2.4.0
step-security/harden-runner (step-security/harden-runner)
v2.10.1Compare Source
What's Changed
Release v2.10.1 by @varunsh-coder in https://github.com/step-security/harden-runner/pull/463
Bug fix: Resolves an issue where DNS resolution of .local domains was failing when using a Kind cluster in a GitHub Actions workflow.
Full Changelog: step-security/harden-runner@v2...v2.10.1
v2.10.0Compare Source
What's Changed
Release v2.10.0 by @h0x0er and @varunsh-coder in https://github.com/step-security/harden-runner/pull/455
ARM Support: Harden-Runner Enterprise tier now supports GitHub-hosted ARM runners. This includes all the features that apply to previously supported GitHub-hosted x64 Linux runners.
Full Changelog: step-security/harden-runner@v2...v2.10.0
v2.9.1Compare Source
What's Changed
Release v2.9.1 by @h0x0er and @varunsh-coder in #440
This release includes two changes:
Full Changelog: step-security/harden-runner@v2...v2.9.1
v2.9.0Compare Source
What's Changed
Release v2.9.0 by @h0x0er and @varunsh-coder in https://github.com/step-security/harden-runner/pull/435
This release includes:
For the enterprise tier, this change helps overcome size constraints, allowing for more reliable telemetry uploads from the Harden-Runner agent to the StepSecurity backend API. No configuration change is needed to enable this.
The Harden-Runner agent now uses a per-job key to authenticate to the StepSecurity backend API to submit telemetry. This change prevents the submission of telemetry data anonymously for a given job, improving the integrity of the data collection process. No configuration change is needed to enable this.
A Table of Contents has been added to the README file to improve navigation. This makes it easier for users to find the information they need quickly.
Updated the
bracesnpm package dependency to a non-vulnerable version. The vulnerability inbracesdid not affect the Harden Runner ActionFull Changelog: step-security/harden-runner@v2...v2.9.0
Configuration
📅 Schedule: Branch creation - "before 4am on the first day of the month" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.