Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

chore(deps): update github-actions #369

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

chore(deps): update github-actions #369

wants to merge 1 commit into from

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Oct 24, 2024 •
edited
Loading

This PR contains the following updates:

Package Type Update Change
actions/cache action patch v4.1.1 -> v4.1.2
actions/checkout action patch v4.2.1 -> v4.2.2
actions/setup-java action minor v4.4.0 -> v4.5.0
actions/setup-python action minor v5.2.0 -> v5.3.0
ghcr.io/chgl/kube-powertools container patch v2.3.27 -> v2.3.30
github/codeql-action action minor v3.26.13 -> v3.27.4
gradle/actions action minor v4.1.0 -> v4.2.0
lycheeverse/lychee-action action minor v2.0.2 -> v2.1.0
softprops/action-gh-release action minor v2.0.8 -> v2.1.0
yogeshlonkar/trivy-cache-action action patch v0.1.8 -> v0.1.9

Release Notes

actions/cache (actions/cache)

v4.1.2

Compare Source

What's Changed
New Contributors

Full Changelog: actions/cache@v4...v4.1.2

actions/checkout (actions/checkout)

v4.2.2

Compare Source

actions/setup-java (actions/setup-java)

v4.5.0

Compare Source

What's Changed

Bug fixes:
New Contributors:

Full Changelog: actions/setup-java@v4...v4.5.0

actions/setup-python (actions/setup-python)

v5.3.0

Compare Source

What's Changed
Bug Fixes:
Enhancements:
New Contributors

Full Changelog: actions/setup-python@v5...v5.3.0

chgl/kube-powertools (ghcr.io/chgl/kube-powertools)

v2.3.30

Compare Source

Miscellaneous Chores
  • deps: update all non-major dependencies (fb7c564)

v2.3.29

Compare Source

Miscellaneous Chores
  • deps: update docker.io/nginxinc/nginx-unprivileged:1.27.2 docker digest to 1492491 (#​481) (60c87ae)
  • deps: update lycheeverse/lychee-action action to v2 (#​484) (9a9ffd5)

v2.3.28

Compare Source

Miscellaneous Chores
  • deps: update all non-major dependencies (8dead52)
  • deps: update github-actions (bf35c66)
github/codeql-action (github/codeql-action)

v3.27.4

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.27.4 - 14 Nov 2024

No user facing changes.

See the full CHANGELOG.md for more information.

v3.27.3

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.27.3 - 12 Nov 2024

No user facing changes.

See the full CHANGELOG.md for more information.

v3.27.2

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.27.2 - 12 Nov 2024
  • Fixed an issue where setting up the CodeQL tools would sometimes fail with the message "Invalid value 'undefined' for header 'authorization'". #​2590

See the full CHANGELOG.md for more information.

v3.27.1

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.27.1 - 08 Nov 2024
  • The CodeQL Action now downloads bundles compressed using Zstandard on GitHub Enterprise Server when using Linux or macOS runners. This speeds up the installation of the CodeQL tools. This feature is already available to GitHub.com users. #​2573
  • Update default CodeQL bundle version to 2.19.3. #​2576

See the full CHANGELOG.md for more information.

v3.27.0

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.27.0 - 22 Oct 2024
  • Bump the minimum CodeQL bundle version to 2.14.6. #​2549
  • Fix an issue where the upload-sarif Action would fail with "upload-sarif post-action step failed: Input required and not supplied: token" when called in a composite Action that had a different set of inputs to the ones expected by the upload-sarif Action. #​2557
  • Update default CodeQL bundle version to 2.19.2. #​2552

See the full CHANGELOG.md for more information.

gradle/actions (gradle/actions)

v4.2.0

Compare Source

This release fixes a bug that prevents cache-cleanup from working with Gradle 8.11.
A number of improvements to cache reporting are also included.

What's Changed

Full Changelog: gradle/actions@v4.1.0...v4.2.0

lycheeverse/lychee-action (lycheeverse/lychee-action)

v2.1.0: Version 2.1.0

Compare Source

What's Changed

New Contributors

Full Changelog: lycheeverse/lychee-action@v2...v2.1.0

softprops/action-gh-release (softprops/action-gh-release)

v2.1.0

Compare Source

What's Changed

Exciting New Features 🎉
Other Changes 🔄

New Contributors

Full Changelog: softprops/action-gh-release@v2...v2.1.0

v2.0.9

Compare Source

What's Changed

  • maintenance release with updated dependencies

New Contributors

Full Changelog: softprops/action-gh-release@v2...v2.0.9

yogeshlonkar/trivy-cache-action (yogeshlonkar/trivy-cache-action)

v0.1.9

Compare Source

What's Changed

Full Changelog: yogeshlonkar/trivy-cache-action@v0.1.8...v0.1.9

Configuration

📅 Schedule: Branch creation - "before 4am on the first day of the month" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@github-actions GitHub Actions
Copy link

github-actions bot commented Oct 24, 2024 •
edited
Loading

🦙 MegaLinter status: ❌ ERROR

Descriptor Linter Files Fixed Errors Elapsed time
✅ ACTION actionlint 18 0 0.21s
✅ BASH bash-exec 5 0 0.02s
✅ BASH shellcheck 2 0 0.12s
⚠️ BASH shfmt 5 1 0.01s
⚠️ CSHARP csharpier 1 1 1.3s
⚠️ CSHARP dotnet-format yes 1 0.8s
✅ CSHARP roslynator 1 0 16.49s
✅ CSS stylelint 1 0 1.27s
✅ DOCKERFILE hadolint 4 0 0.1s
✅ EDITORCONFIG editorconfig-checker 379 0 2.94s
✅ ENV dotenv-linter 1 0 0.0s
✅ GROOVY npm-groovy-lint 7 0 13.74s
✅ HTML djlint 2 0 0.83s
✅ HTML htmlhint 2 0 0.24s
✅ JAVA checkstyle 59 0 7.09s
✅ JSON jsonlint 31 0 0.23s
⚠️ JSON prettier 31 1 5.65s
✅ JSON v8r 31 0 81.88s
⚠️ MARKDOWN markdownlint 22 190 1.63s
✅ PYTHON bandit 1 0 0.97s
✅ PYTHON black 1 0 0.9s
✅ PYTHON flake8 1 0 0.55s
✅ PYTHON isort 1 0 0.35s
✅ PYTHON mypy 1 0 7.84s
✅ PYTHON ruff 1 0 0.02s
✅ REPOSITORY checkov yes no 19.42s
✅ REPOSITORY gitleaks yes no 2.45s
✅ REPOSITORY git_diff yes no 0.09s
✅ REPOSITORY kics yes no 54.07s
✅ REPOSITORY secretlint yes no 2.15s
✅ REPOSITORY syft yes no 4.04s
❌ REPOSITORY trivy yes 1 46.65s
✅ REPOSITORY trivy-sbom yes no 1.69s
✅ REPOSITORY trufflehog yes no 5.15s
✅ XML xmllint 3 0 0.01s
✅ YAML prettier 111 0 2.98s

See detailed report in MegaLinter reports

You could have same capabilities but better runtime performances if you request a new MegaLinter flavor.

MegaLinter is graciously provided by OX Security

@renovate renovate bot force-pushed the renovate/github-actions branch 6 times, most recently from ca541c6 to 2ae5589 Compare November 7, 2024 15:28
@renovate renovate bot force-pushed the renovate/github-actions branch 5 times, most recently from 1c75a15 to 38d1f3f Compare November 12, 2024 21:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
0 participants