chore(deps): update all dependencies #79

renovate · 2023-07-17T06:22:28Z

This PR contains the following updates:

Package	Type	Update	Change
actions/cache	action	patch	`v3.3.1` -> `v3.3.2`
actions/checkout	action	major	`v3.5.3` -> `v4.1.1`
actions/dependency-review-action	action	minor	`v3.0.6` -> `v3.1.3`
actions/setup-go	action	minor	`v4.0.1` -> `v4.1.0`
actions/upload-artifact	action	patch	`v3.1.2` -> `v3.1.3`
github/codeql-action	action	minor	`v2.20.4` -> `v2.22.8`
gopkg.in/yaml.v2	require	major	`v2.4.0` -> `v3.0.1`
ossf/scorecard-action	action	minor	`v2.2.0` -> `v2.3.1`
step-security/harden-runner	action	minor	`v2.4.1` -> `v2.6.1`

Release Notes

actions/cache (actions/cache)

actions/checkout (actions/checkout)

`v4.1.1`

Compare Source

What's Changed

Update CODEOWNERS to Launch team by @joshmgross in https://github.com/actions/checkout/pull/1510
Correct link to GitHub Docs by @peterbe in https://github.com/actions/checkout/pull/1511
Link to release page from what's new section by @cory-miller in https://github.com/actions/checkout/pull/1514

New Contributors

@joshmgross made their first contribution in https://github.com/actions/checkout/pull/1510
@peterbe made their first contribution in https://github.com/actions/checkout/pull/1511

Full Changelog: actions/checkout@v4.1.0...v4.1.1

`v4.1.0`

Compare Source

Add support for partial checkout filters

`v4.0.0`

Compare Source

`v3.6.0`

Compare Source

actions/dependency-review-action (actions/dependency-review-action)

`v3.1.3`: 3.1.3

Compare Source

What's Changed

Fixes purl "version must be percent-encoded" by @theztefan in https://github.com/actions/dependency-review-action/pull/617

Full Changelog: actions/dependency-review-action@v3...v3.1.3

`v3.1.2`: 3.1.2

Compare Source

What's Changed

Fix a regression for setups using self-hosted runners behind HTTP proxies:@febuiles in https://github.com/actions/dependency-review-action/pull/611

Full Changelog: actions/dependency-review-action@v3...v3.1.2

`v3.1.1`: 3.1.1

Compare Source

What's Changed

Update a bunch of dependencies, including major version upgrades for octokit, @actions/github and typescript.

Full Changelog: actions/dependency-review-action@v3.1.0...v3.1.1

`v3.1.0`: 3.1.0

Compare Source

What's New

Added support for dependencies submitted through the dependency submission API. This includes two new configuration parameters: retry-on-snapshot-warnings and retry-on-snapshot-warnings-timeout.

What's Changed

Fix(docs): Correct action input name by @oerd in https://github.com/actions/dependency-review-action/pull/551

New Contributors

@oerd made their first contribution in https://github.com/actions/dependency-review-action/pull/551

Full Changelog: actions/dependency-review-action@v3...v3.1.0

`v3.0.8`: 3.0.8

Compare Source

What's Changed

Added on-failure option to comment-summary-in-pr setting by @sgmurphy in https://github.com/actions/dependency-review-action/pull/540

Previous configuration files using true/false for comment-summary-in-pr will be mapped automatically to the new values, but we encourage you to update to always/on-failure/never.

New Contributors

@sgmurphy made their first contribution in https://github.com/actions/dependency-review-action/pull/540

Full Changelog: actions/dependency-review-action@v3...v3.0.8

`v3.0.7`: 3.0.7

Compare Source

What's Changed

Make GHES support / setup more clear by @rajbos in https://github.com/actions/dependency-review-action/pull/534
Add an option to deny packages or groups of packages by @adrienpessu in https://github.com/actions/dependency-review-action/pull/544

New Contributors

@rajbos made their first contribution in https://github.com/actions/dependency-review-action/pull/534
@adrienpessu made their first contribution in https://github.com/actions/dependency-review-action/pull/544

Full Changelog: actions/dependency-review-action@v3...v3.0.7

actions/setup-go (actions/setup-go)

`v4.1.0`

Compare Source

What's Changed

In scope of this release, slow installation on Windows was fixed by @dsame in https://github.com/actions/setup-go/pull/393 and OS version was added to primaryKey for Ubuntu runners to avoid conflicts (https://github.com/actions/setup-go/pull/383)

This release also includes the following changes:

Remove implicit dependencies by @nikolai-laevskii in https://github.com/actions/setup-go/pull/378
Update action.yml by @mkelly in https://github.com/actions/setup-go/pull/379
Added a description that go-version should be specified as a string type by @n3xem in https://github.com/actions/setup-go/pull/367
Add note about YAML parsing versions by @dmitry-shibanov in https://github.com/actions/setup-go/pull/382
Automatic update of configuration files from 05/23/2023 by @github-actions in https://github.com/actions/setup-go/pull/377
Bump tough-cookie and @azure/ms-rest-js by @dependabot in https://github.com/actions/setup-go/pull/392
Bump word-wrap from 1.2.3 to 1.2.4 by @dependabot in https://github.com/actions/setup-go/pull/397
Bump semver from 6.3.0 to 6.3.1 by @dependabot in https://github.com/actions/setup-go/pull/396

New Contributors

@mkelly made their first contribution in https://github.com/actions/setup-go/pull/379
@n3xem made their first contribution in https://github.com/actions/setup-go/pull/367

Full Changelog: actions/setup-go@v4...v4.1.0

actions/upload-artifact (actions/upload-artifact)

`v3.1.3`

Compare Source

What's Changed

chore(github): remove trailing whitespaces by @ljmf00 in https://github.com/actions/upload-artifact/pull/313
Bump @actions/artifact version to v1.1.2 by @bethanyj28 in https://github.com/actions/upload-artifact/pull/436

Full Changelog: actions/upload-artifact@v3...v3.1.3

github/codeql-action (github/codeql-action)

`v2.22.8`

Compare Source

`v2.22.7`

Compare Source

`v2.22.6`

Compare Source

`v2.22.5`

Compare Source

`v2.22.4`

Compare Source

`v2.22.3`

Compare Source

`v2.22.2`

Compare Source

`v2.22.1`

Compare Source

`v2.22.0`

Compare Source

`v2.21.9`

Compare Source

`v2.21.8`

Compare Source

`v2.21.7`

Compare Source

`v2.21.6`

Compare Source

`v2.21.5`

Compare Source

`v2.21.4`

Compare Source

`v2.21.3`

Compare Source

`v2.21.2`

Compare Source

`v2.21.1`

Compare Source

`v2.21.0`

Compare Source

go-yaml/yaml (gopkg.in/yaml.v2)

`v3.0.1`

Compare Source

`v3.0.0`

Compare Source

ossf/scorecard-action (ossf/scorecard-action)

`v2.3.1`

Compare Source

What's Changed

🌱 Bump github.com/ossf/scorecard/v4 from v4.13.0 to v4.13.1 by @spencerschrock in https://github.com/ossf/scorecard-action/pull/1282
- Adds additional Fuzzing detection and fixes a SAST bug related to detecting CodeQL. For a full changelist of what this includes, see the v4.13.1 release notes

Full Changelog: ossf/scorecard-action@v2.3.0...v2.3.1

`v2.3.0`

Compare Source

What's Changed

🌱 Bump github.com/ossf/scorecard/v4 from v4.11.0 to v4.13.0 by @spencerschrock in https://github.com/ossf/scorecard-action/pull/1270
- For a full changelist of what this includes, see the v4.12.0 and v4.13.0 release notes
✨ Send rekor tlog index to webapp when publishing results by @spencerschrock in https://github.com/ossf/scorecard-action/pull/1169
🐛 Prevent url clipping for GHES instances by @rajbos in https://github.com/ossf/scorecard-action/pull/1225

Documentation

📖 Update access rights needed to see the results in code scanning by @rajbos in https://github.com/ossf/scorecard-action/pull/1229
📖 Add package comments. by @spencerschrock in https://github.com/ossf/scorecard-action/pull/1221
📖 Add SECURITY.md file by @david-a-wheeler in https://github.com/ossf/scorecard-action/pull/1250
📖 Fix typo in token input docs by @aabouzaid in https://github.com/ossf/scorecard-action/pull/1258

New Contributors

@david-a-wheeler made their first contribution in https://github.com/ossf/scorecard-action/pull/1250
@aabouzaid made their first contribution in https://github.com/ossf/scorecard-action/pull/1258

Full Changelog: ossf/scorecard-action@v2.2.0...v2.3.0

step-security/harden-runner (step-security/harden-runner)

`v2.6.1`

Compare Source

What's Changed

Release v2.6.1 by @varunsh-coder and @h0x0er in https://github.com/step-security/harden-runner/pull/356
This release:

Improves the job summary markdown written by the Harden-Runner Action
Improves detection of cache endpoint used by the job
Detects use of Kubernetes mode in Actions Runner Controller (ARC) based runners
Updates dependencies

Full Changelog: step-security/harden-runner@v2...v2.6.1

`v2.6.0`

Compare Source

What's Changed

Release v2.6.0 by @varunsh-coder in https://github.com/step-security/harden-runner/pull/346

This release adds support for self-hosted Virtual Machine runners (e.g. on EC2).

Both ephemeral and persistent self-hosted VM runners are supported
Documentation: https://docs.stepsecurity.io/harden-runner/how-tos/enable-runtime-security-vm

Full Changelog: step-security/harden-runner@v2...v2.6.0

`v2.5.1`

Compare Source

What's Changed

Updated default allowed endpoints to include *.actions.githubusercontent.com. GitHub Actions recently started making calls to additional sub-domains for this domain. Please update to this latest version of harden-runner to allow these new endpoints.
Update README.md by @varunsh-coder in https://github.com/step-security/harden-runner/pull/326
Bump step-security/harden-runner from 2.4.1 to 2.5.0 by @dependabot in https://github.com/step-security/harden-runner/pull/327

Full Changelog: step-security/harden-runner@v2...v2.5.1

`v2.5.0`

Compare Source

What's Changed

Release v2.5.0 by @h0x0er and @varunsh-coder in https://github.com/step-security/harden-runner/pull/325

This release:

Adds support for Actions Runner Controller (ARC) environment
Improves the job summary markdown

Full Changelog: step-security/harden-runner@v2...v2.5.0

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

renovate bot changed the title ~~fix(deps): update module gopkg.in/yaml.v2 to v3~~ fix(deps): update all dependencies Jul 17, 2023

renovate bot force-pushed the renovate/all branch 5 times, most recently from 9e83a30 to 03e2e1e Compare July 18, 2023 03:58

renovate bot changed the title ~~fix(deps): update all dependencies~~ fix(deps): update module gopkg.in/yaml.v2 to v3 Jul 18, 2023

renovate bot changed the title ~~fix(deps): update module gopkg.in/yaml.v2 to v3~~ fix(deps): update all dependencies Jul 18, 2023

renovate bot force-pushed the renovate/all branch 4 times, most recently from dd8264b to 25cef35 Compare July 19, 2023 08:41

renovate bot changed the title ~~fix(deps): update all dependencies~~ fix(deps): update module gopkg.in/yaml.v2 to v3 Jul 19, 2023

renovate bot changed the title ~~fix(deps): update module gopkg.in/yaml.v2 to v3~~ fix(deps): update all dependencies Jul 19, 2023

renovate bot force-pushed the renovate/all branch 8 times, most recently from 63cea87 to 9343ae2 Compare July 21, 2023 01:35

renovate bot changed the title ~~fix(deps): update all dependencies~~ chore(deps): update all dependencies Jul 21, 2023

renovate bot changed the title ~~chore(deps): update all dependencies~~ fix(deps): update all dependencies Jul 21, 2023

renovate bot force-pushed the renovate/all branch 5 times, most recently from b60e534 to de1e4bc Compare July 22, 2023 00:57

renovate bot changed the title ~~fix(deps): update all dependencies~~ chore(deps): update all dependencies Jul 22, 2023

renovate bot force-pushed the renovate/all branch 7 times, most recently from 29af129 to 30e744e Compare October 12, 2023 12:12

renovate bot force-pushed the renovate/all branch 5 times, most recently from b9665dc to 41de992 Compare October 17, 2023 18:31

renovate bot force-pushed the renovate/all branch 5 times, most recently from 92c1bfe to 7e85a80 Compare October 27, 2023 11:06

renovate bot force-pushed the renovate/all branch from 7e85a80 to 503b39a Compare October 28, 2023 10:20

renovate bot force-pushed the renovate/all branch 3 times, most recently from 0e3a030 to bf25ce6 Compare November 8, 2023 22:18

renovate bot force-pushed the renovate/all branch 4 times, most recently from 15ade16 to e389d0b Compare November 16, 2023 21:09

renovate bot force-pushed the renovate/all branch from e389d0b to c430f4f Compare November 23, 2023 13:33

chore(deps): update all dependencies

285b193

renovate bot force-pushed the renovate/all branch from c430f4f to 285b193 Compare November 26, 2023 07:35

paralin merged commit 15b8f60 into master Nov 26, 2023
3 checks passed

paralin deleted the renovate/all branch November 26, 2023 07:35

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): update all dependencies #79

chore(deps): update all dependencies #79

renovate bot commented Jul 17, 2023 •

edited

Loading

chore(deps): update all dependencies #79

chore(deps): update all dependencies #79

Conversation

renovate bot commented Jul 17, 2023 • edited Loading

Release Notes

What's Changed

New Contributors

What's Changed

New Contributors

v3.1.3: 3.1.3

What's Changed

v3.1.2: 3.1.2

What's Changed

v3.1.1: 3.1.1

What's Changed

v3.1.0: 3.1.0

What's New

What's Changed

New Contributors

v3.0.8: 3.0.8

What's Changed

New Contributors

v3.0.7: 3.0.7

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

Documentation

New Contributors

What's Changed

What's Changed

What's Changed

What's Changed

Configuration

renovate bot commented Jul 17, 2023 •

edited

Loading

`v3.1.3`: 3.1.3

`v3.1.2`: 3.1.2

`v3.1.1`: 3.1.1

`v3.1.0`: 3.1.0

`v3.0.8`: 3.0.8

`v3.0.7`: 3.0.7