build(deps): bump github/codeql-action from 3.27.5 to 3.27.6 - #1858
Merged
Conversation
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.27.5 to 3.27.6. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@f09c1c0...aa57810) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
dependabot
Bot
deleted the
dependabot/github_actions/github/codeql-action-3.27.6
branch
December 10, 2024 13:33
tae898
pushed a commit
to humemai/arcadedb-embedded-python
that referenced
this pull request
Jun 28, 2026
…ata#1858) Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.27.5 to 3.27.6. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@f09c1c0...aa57810) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
mergify Bot
added a commit
that referenced
this pull request
Aug 16, 2026
….49.0 [skip ci] Bumps [io.fabric8:docker-maven-plugin](https://github.com/fabric8io/docker-maven-plugin) from 0.48.1 to 0.49.0. Release notes *Sourced from [io.fabric8:docker-maven-plugin's releases](https://github.com/fabric8io/docker-maven-plugin/releases).* > 0.49.0 (2026-08-09) > ------------------- > > * Fix `docker.save.aliases`: a non-existent alias in the list was silently ignored instead of failing the save with a clear error > * Make container log streaming (`<wait><log>` and log following) resilient to transient stream disconnects by reconnecting and resuming instead of aborting, fixing flaky log-wait timeouts (e.g. `jnr ... Bad file descriptor` on macOS CI) > * Honour the `<follow>` configuration element (in addition to the `docker.follow` system property) for `docker:start`, `docker:run` and `docker:watch` ([#1797](https://redirect.github.com/fabric8io/docker-maven-plugin/issues/1797)) > * Add opt-in `<buildAllPlatforms>` buildx option to build all platforms during docker:build, warming the builder cache so a later docker:push reuses it ([#1866](https://redirect.github.com/fabric8io/docker-maven-plugin/issues/1866)) > * Normalize empty `<args>` build argument values (e.g. from a property that resolves to an empty value) to an empty string instead of failing the build ([#1858](https://redirect.github.com/fabric8io/docker-maven-plugin/issues/1858)) > * Fall back to the current timestamp instead of crashing the log-follow thread when a container log line has an unparseable timestamp (e.g. `Error` written on stderr) ([#1428](https://redirect.github.com/fabric8io/docker-maven-plugin/issues/1428)) > * Pass externally-resolved build args (`docker.buildArg.*` system/Maven properties and other `BuildArgResolver` sources) to buildx `build` and `push`, so buildx honours them like the classic build path instead of only `<build><args>` ([#1901](https://redirect.github.com/fabric8io/docker-maven-plugin/issues/1901)) > * Add a `wslc://` Docker transport so images can be built against a WSL Containers daemon, which exposes no Windows named pipe or TCP port and is reachable only via a stdio bridge, including auto-detection below the Docker/Podman named pipe ([#1928](https://redirect.github.com/fabric8io/docker-maven-plugin/issues/1928)) > * Add support for the `--target` parameter in the build phase, for both classic and buildx builds ([#1908](https://redirect.github.com/fabric8io/docker-maven-plugin/pull/1908)) > * Add `docker.ecr.endpoint` system property so ECR authentication can be pointed at a VPC endpoint instead of the default `api.ecr.<region>.amazonaws.com` host ([#1872](https://redirect.github.com/fabric8io/docker-maven-plugin/issues/1872)) > * Keep the default value for a repeated build argument in multistage builds ([#1910](https://redirect.github.com/fabric8io/docker-maven-plugin/pull/1910)) > * Only apply a Docker Compose wait config to a service when its alias matches the image configuration alias ([#1902](https://redirect.github.com/fabric8io/docker-maven-plugin/pull/1902)) > * Avoid container name conflicts after an image is rebuilt ([#1958](https://redirect.github.com/fabric8io/docker-maven-plugin/pull/1958)) > * Harden ECR authentication: validate the decoded credential split instead of throwing `ArrayIndexOutOfBoundsException` on input without a colon, and replace the shared `SimpleDateFormat` with a thread-safe `DateTimeFormatter` > * Use an ephemeral random password for the in-memory Docker TLS `KeyStore` instead of a hard-coded one > * Various Sonar-flagged reliability fixes in the socket, log-streaming and file-handling paths, including closing sockets and readers via try-with-resources and re-interrupting the current thread when catching `InterruptedException` > * Bump Jnr JFFI to v1.3.15 > > --- > > Thanks to everyone who contributed to this release: [`@A248`](https://github.com/A248), [`@DavidTavoularis`](https://github.com/DavidTavoularis), [`@JamBalaya56562`](https://github.com/JamBalaya56562), [`@LorenzoBettini`](https://github.com/LorenzoBettini), [`@Marukome0743`](https://github.com/Marukome0743), [`@arend-von-reinersdorff`](https://github.com/arend-von-reinersdorff), [`@jacob-netguardians`](https://github.com/jacob-netguardians), [`@mbarinc`](https://github.com/mbarinc), [`@vckleinew`](https://github.com/vckleinew), [`@viktorgunnarson`](https://github.com/viktorgunnarson) Changelog *Sourced from [io.fabric8:docker-maven-plugin's changelog](https://github.com/fabric8io/docker-maven-plugin/blob/master/doc/changelog.md).* > * **0.50-SNAPSHOT**: > * **0.49.0 (2026-08-09)**: > > + Fix `docker.save.aliases`: a non-existent alias in the list was silently ignored instead of failing the save with a clear error > + Make container log streaming (`<wait><log>` and log following) resilient to transient stream disconnects by reconnecting and resuming instead of aborting, fixing flaky log-wait timeouts (e.g. `jnr ... Bad file descriptor` on macOS CI) > + Honour the `<follow>` configuration element (in addition to the `docker.follow` system property) for `docker:start`, `docker:run` and `docker:watch` ([#1797](https://redirect.github.com/fabric8io/docker-maven-plugin/issues/1797)) > + Add opt-in `<buildAllPlatforms>` buildx option to build all platforms during docker:build, warming the builder cache so a later docker:push reuses it ([#1866](https://redirect.github.com/fabric8io/docker-maven-plugin/issues/1866)) > + Normalize empty `<args>` build argument values (e.g. from a property that resolves to an empty value) to an empty string instead of failing the build ([#1858](https://redirect.github.com/fabric8io/docker-maven-plugin/issues/1858)) > + Fall back to the current timestamp instead of crashing the log-follow thread when a container log line has an unparseable timestamp (e.g. `Error` written on stderr) ([#1428](https://redirect.github.com/fabric8io/docker-maven-plugin/issues/1428)) > + Pass externally-resolved build args (`docker.buildArg.*` system/Maven properties and other `BuildArgResolver` sources) to buildx `build` and `push`, so buildx honours them like the classic build path instead of only `<build><args>` ([#1901](https://redirect.github.com/fabric8io/docker-maven-plugin/issues/1901)) > + Add a `wslc://` Docker transport so images can be built against a WSL Containers daemon, which exposes no Windows named pipe or TCP port and is reachable only via a stdio bridge, including auto-detection below the Docker/Podman named pipe ([#1928](https://redirect.github.com/fabric8io/docker-maven-plugin/issues/1928)) > + Add support for the `--target` parameter in the build phase, for both classic and buildx builds ([#1908](https://redirect.github.com/fabric8io/docker-maven-plugin/pull/1908)) > + Add `docker.ecr.endpoint` system property so ECR authentication can be pointed at a VPC endpoint instead of the default `api.ecr.<region>.amazonaws.com` host ([#1872](https://redirect.github.com/fabric8io/docker-maven-plugin/issues/1872)) > + Keep the default value for a repeated build argument in multistage builds ([#1910](https://redirect.github.com/fabric8io/docker-maven-plugin/pull/1910)) > + Only apply a Docker Compose wait config to a service when its alias matches the image configuration alias ([#1902](https://redirect.github.com/fabric8io/docker-maven-plugin/pull/1902)) > + Avoid container name conflicts after an image is rebuilt ([#1958](https://redirect.github.com/fabric8io/docker-maven-plugin/pull/1958)) > + Harden ECR authentication: validate the decoded credential split instead of throwing `ArrayIndexOutOfBoundsException` on input without a colon, and replace the shared `SimpleDateFormat` with a thread-safe `DateTimeFormatter` > + Use an ephemeral random password for the in-memory Docker TLS `KeyStore` instead of a hard-coded one > + Various Sonar-flagged reliability fixes in the socket, log-streaming and file-handling paths, including closing sockets and readers via try-with-resources and re-interrupting the current thread when catching `InterruptedException` > + Bump Jnr JFFI to v1.3.15 > * **0.48.1 (2026-02-07)**: > > + Use wait config if no Docker Compose healthcheck ([1771](https://redirect.github.com/fabric8io/docker-maven-plugin/issues/1771)) > * **0.48.0 (2025-11-17)**: > > + Allow saving multiple images in docker:save using new parameters saveNames and saveAliases. > + Fixed compatibility with Docker 29+ which requires minimum API version 1.44 > + Fixed IP address parsing to support both legacy and new Docker API schema formats ([#1887](https://redirect.github.com/fabric8io/docker-maven-plugin/issues/1887)) > * **0.47.0 (2025-11-01)**: > > + Support for user namespace mode ([1881](https://redirect.github.com/fabric8io/docker-maven-plugin/pull/1881)) > + Bump Jib Core to v0.27.3 ([1879](https://redirect.github.com/fabric8io/docker-maven-plugin/pull/1879)) > + Bump Jnr UnixSocket to v0.38.23 ([1880](https://redirect.github.com/fabric8io/docker-maven-plugin/pull/1880)) > + Drop Plexus DI, switch to plexus-utils, update m-assembly-p and deps, verified with Maven 4 ([1851](https://redirect.github.com/fabric8io/docker-maven-plugin/pull/1851)) > + `dmp:tag` should skip `<image>s` with no `<build>` ([1871](https://redirect.github.com/fabric8io/docker-maven-plugin/pull/1871)) > + buildArchiveOnly with a path still builds the image ([1863](https://redirect.github.com/fabric8io/docker-maven-plugin/issues/1863)) > + Add skip tag to the image level by `<skipTag>` ([1787](https://redirect.github.com/fabric8io/docker-maven-plugin/pull/1787)) > * **0.46.0 (2025-04-06)**: > > + Docker-compose healthcheck configuration support ([1825](https://redirect.github.com/fabric8io/docker-maven-plugin/pull/1825)) > + Docker container wait timeout default value made configurable using startContainerWaitTimeout configuration option ([1825](https://redirect.github.com/fabric8io/docker-maven-plugin/pull/1825)) > + Respect `network` configuration in POM and with property `docker.build.network` or system property `docker.network.mode` in docker buildx [1850](https://redirect.github.com/fabric8io/docker-maven-plugin/pull/1850)) > + Fix case sensitivity issue in builder name lookup by converting builderName to lowercase, ensuring compatibility across file systems ([1847](https://redirect.github.com/fabric8io/docker-maven-plugin/pull/1847)) > * **0.45.1 (2024-09-29)**: > > + Make copy docker-buildx binary to temporary config directory work on windows too ([1819](https://redirect.github.com/fabric8io/docker-maven-plugin/pull/1819)) > + Pull FROM images in relative path Dockerfiles ([1823](https://redirect.github.com/fabric8io/docker-maven-plugin/issues/1823)) > * **0.45.0 (2024-07-27)**: > > + Automatically create parent directories of portPropertyFile path ([1761](https://redirect.github.com/fabric8io/docker-maven-plugin/pull/1761)) ... (truncated) Commits * [`e31664f`](fabric8io/docker-maven-plugin@e31664f) [RELEASE] Update project version to v0.49.0 * [`6ee8bdd`](fabric8io/docker-maven-plugin@6ee8bdd) Backfill 0.49.0 changelog entries for merged but undocumented changes * [`fbc53d3`](fabric8io/docker-maven-plugin@fbc53d3) Remove commented-out code, keeping the context it carried * [`5d5a589`](fabric8io/docker-maven-plugin@5d5a589) Remove unused imports * [`57d8155`](fabric8io/docker-maven-plugin@57d8155) Replace the abandoned fabric8 base image in ITs and samples * [`0cbecdd`](fabric8io/docker-maven-plugin@0cbecdd) Avoid container name conflicts after image rebuilds * [`adeb9a8`](fabric8io/docker-maven-plugin@adeb9a8) Update JaCoCo to 0.8.15 * [`641df5f`](fabric8io/docker-maven-plugin@641df5f) Run SonarCloud analysis on Java 21 (SonarQube Cloud dropped Java 17) * [`3f7a64e`](fabric8io/docker-maven-plugin@3f7a64e) Harden ECR auth: guard credential split and make the date formatter thread-safe * [`93c228d`](fabric8io/docker-maven-plugin@93c228d) Simplify quote-stripping regex; document Docker's verbatim name regexes (S585... * Additional commits viewable in [compare view](fabric8io/docker-maven-plugin@v0.48.1...v0.49.0) [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps github/codeql-action from 3.27.5 to 3.27.6.
Release notes
Sourced from github/codeql-action's releases.
Changelog
Sourced from github/codeql-action's changelog.
... (truncated)
Commits
aa57810Merge pull request #2628 from github/update-v3.27.6-af49565b834e77b7Update changelog for v3.27.6af49565Merge pull request #2620 from github/cklin/DiffThunkRange-fix5659f01Merge pull request #2626 from github/update-bundle/codeql-bundle-v2.19.45333ff3Add changelog notee4fb28dUpdate default bundle to codeql-bundle-v2.19.43d3d628Merge pull request #2617 from github/update-supported-enterprise-server-versions2eea97eFix DiffThunkRange accessf8e782aMerge pull request #2618 from github/mergeback/v3.27.5-to-main-f09c1c0a49b7c97Update checked-in dependenciesDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)