Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): update all dependencies #767

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

chore(deps): update all dependencies #767

wants to merge 1 commit into from

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Aug 13, 2024

This PR contains the following updates:

Package Type Update Change Age Adoption Passing Confidence
actions/cache action minor v4.0.2 -> v4.2.0 age adoption passing confidence
actions/checkout action minor v4.1.7 -> v4.2.2 age adoption passing confidence
actions/setup-go action minor v5.0.2 -> v5.2.0 age adoption passing confidence
actions/upload-artifact action minor v4.3.6 -> v4.6.0 age adoption passing confidence
anchore/sbom-action action patch v0.17.0 -> v0.17.9 age adoption passing confidence
cgr.dev/chainguard/static final digest 5e9c881 -> 7e1e8a0
docker/setup-qemu-action action minor v3.2.0 -> v3.3.0 age adoption passing confidence
github.com/fatih/color require minor v1.17.0 -> v1.18.0 age adoption passing confidence
github/codeql-action action minor v3.26.0 -> v3.28.1 age adoption passing confidence
go (source) toolchain minor 1.22.6 -> 1.23.4 age adoption passing confidence
goreleaser/goreleaser-action action minor v6.0.0 -> v6.1.0 age adoption passing confidence
sigstore/cosign-installer action minor v3.6.0 -> v3.7.0 age adoption passing confidence

Release Notes

actions/cache (actions/cache)

v4.2.0

Compare Source

⚠️ Important Changes

The cache backend service has been rewritten from the ground up for improved performance and reliability. actions/cache now integrates with the new cache service (v2) APIs.

The new service will gradually roll out as of February 1st, 2025. The legacy service will also be sunset on the same date. Changes in these release are fully backward compatible.

We are deprecating some versions of this action. We recommend upgrading to version v4 or v3 as soon as possible before February 1st, 2025. (Upgrade instructions below).

If you are using pinned SHAs, please use the SHAs of versions v4.2.0 or v3.4.0

If you do not upgrade, all workflow runs using any of the deprecated actions/cache will fail.

Upgrading to the recommended versions will not break your workflows.

Read more about the change & access the migration guide: reference to the announcement.

Minor changes

Minor and patch version updates for these dependencies:

Full Changelog: actions/cache@v4...v4.2.0

v4.1.2

Compare Source

What's Changed
New Contributors

Full Changelog: actions/cache@v4...v4.1.2

v4.1.1

Compare Source

What's Changed

Full Changelog: actions/cache@v4.1.0...v4.1.1

v4.1.0

Compare Source

What's Changed
New Contributors

Full Changelog: actions/cache@v4.0.2...v4.1.0

actions/checkout (actions/checkout)

v4.2.2

Compare Source

v4.2.1

Compare Source

v4.2.0

Compare Source

actions/setup-go (actions/setup-go)

v5.2.0

Compare Source

What's Changed

New Contributors

Full Changelog: actions/setup-go@v5...v5.2.0

v5.1.0

Compare Source

What's Changed

Bug Fixes

New Contributors

Full Changelog: actions/setup-go@v5...v5.1.0

actions/upload-artifact (actions/upload-artifact)

v4.6.0

Compare Source

What's Changed

Full Changelog: actions/upload-artifact@v4...v4.6.0

v4.5.0

Compare Source

v4.4.3

Compare Source

What's Changed

Full Changelog: actions/upload-artifact@v4.4.2...v4.4.3

v4.4.2

Compare Source

What's Changed

Full Changelog: actions/upload-artifact@v4.4.1...v4.4.2

v4.4.1

Compare Source

What's Changed
New Contributors

Full Changelog: actions/upload-artifact@v4.4.0...v4.4.1

v4.4.0

Compare Source

anchore/sbom-action (anchore/sbom-action)

v0.17.9

Compare Source

Changes in v0.17.9

v0.17.8

Compare Source

Changes in v0.17.8

v0.17.7

Compare Source

Changes in v0.17.7

v0.17.6

Compare Source

Changes in v0.17.6

v0.17.5

Compare Source

Changes in v0.17.5

v0.17.4

Compare Source

Changes in v0.17.4

v0.17.3

Compare Source

Changes in v0.17.3

v0.17.2

Compare Source

Changes in v0.17.2

v0.17.1

Compare Source

Changes in v0.17.1

docker/setup-qemu-action (docker/setup-qemu-action)

v3.3.0

Compare Source

Full Changelog: docker/setup-qemu-action@v3.2.0...v3.3.0

fatih/color (github.com/fatih/color)

v1.18.0

Compare Source

What's Changed

New Contributors

Full Changelog: fatih/color@v1.17.0...v1.18.0

github/codeql-action (github/codeql-action)

v3.28.1

Compare Source

v3.28.0

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.28.0 - 20 Dec 2024
  • Bump the minimum CodeQL bundle version to 2.15.5. #​2655
  • Don't fail in the unusual case that a file is on the search path. #​2660.

See the full CHANGELOG.md for more information.

v3.27.9

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.27.9 - 12 Dec 2024

No user facing changes.

See the full CHANGELOG.md for more information.

v3.27.8

Compare Source

v3.27.7

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.27.7 - 10 Dec 2024
  • We are rolling out a change in December 2024 that will extract the CodeQL bundle directly to the toolcache to improve performance. #​2631
  • Update default CodeQL bundle version to 2.20.0. #​2636

See the full CHANGELOG.md for more information.

v3.27.6

Compare Source

v3.27.5

Compare Source

v3.27.4

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.27.4 - 14 Nov 2024

No user facing changes.

See the full CHANGELOG.md for more information.

v3.27.3

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.27.3 - 12 Nov 2024

No user facing changes.

See the full CHANGELOG.md for more information.

v3.27.2

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.27.2 - 12 Nov 2024
  • Fixed an issue where setting up the CodeQL tools would sometimes fail with the message "Invalid value 'undefined' for header 'authorization'". #​2590

See the full CHANGELOG.md for more information.

v3.27.1

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.27.1 - 08 Nov 2024
  • The CodeQL Action now downloads bundles compressed using Zstandard on GitHub Enterprise Server when using Linux or macOS runners. This speeds up the installation of the CodeQL tools. This feature is already available to GitHub.com users. #​2573
  • Update default CodeQL bundle version to 2.19.3. #​2576

See the full CHANGELOG.md for more information.

v3.27.0

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.27.0 - 22 Oct 2024
  • Bump the minimum CodeQL bundle version to 2.14.6. #​2549
  • Fix an issue where the upload-sarif Action would fail with "upload-sarif post-action step failed: Input required and not supplied: token" when called in a composite Action that had a different set of inputs to the ones expected by the upload-sarif Action. #​2557
  • Update default CodeQL bundle version to 2.19.2. #​2552

See the full CHANGELOG.md for more information.

v3.26.13

Compare Source

v3.26.12

Compare Source

v3.26.11

Compare Source

v3.26.10

Compare Source

v3.26.9

Compare Source

v3.26.8

Compare Source

v3.26.7

Compare Source

v3.26.6

Compare Source

v3.26.5

Compare Source

v3.26.4

Compare Source

v3.26.3

Compare Source

v3.26.2

Compare Source

v3.26.1

Compare Source

golang/go (go)

v1.23.4

v1.23.3

v1.23.2

v1.23.1

v1.23.0

v1.22.10

v1.22.9

v1.22.8

v1.22.7

goreleaser/goreleaser-action (goreleaser/goreleaser-action)

v6.1.0

Compare Source

What's Changed
New Contributors

Full Changelog: goreleaser/goreleaser-action@v6.0.0...v6.1.0

sigstore/cosign-installer (sigstore/cosign-installer)

v3.7.0

Compare Source

What's Changed

Full Changelog: sigstore/cosign-installer@v3.6.0...v3.7.0


Configuration

📅 Schedule: Branch creation - "* 0-4,22-23 * * 1-5,* * * * 0,6" in timezone Europe/Berlin, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot requested a review from dirien as a code owner August 13, 2024 22:04
@renovate renovate bot force-pushed the renovate/all branch 3 times, most recently from d53a7ed to 2cc7d89 Compare August 19, 2024 18:12
@renovate renovate bot force-pushed the renovate/all branch 3 times, most recently from f4d0886 to 792c630 Compare August 23, 2024 22:12
@renovate renovate bot force-pushed the renovate/all branch 2 times, most recently from a365d19 to 85a4bb1 Compare August 30, 2024 21:42
@renovate renovate bot force-pushed the renovate/all branch 2 times, most recently from a01516d to 4a57619 Compare September 9, 2024 02:07
@renovate renovate bot force-pushed the renovate/all branch 3 times, most recently from 31683ca to dd7fbeb Compare September 19, 2024 11:06
@renovate renovate bot force-pushed the renovate/all branch 3 times, most recently from 9dc57c9 to cd3f19d Compare September 30, 2024 15:53
@renovate renovate bot force-pushed the renovate/all branch 8 times, most recently from f2d1ddd to 3d27d33 Compare October 8, 2024 18:08
@renovate renovate bot force-pushed the renovate/all branch 6 times, most recently from c089688 to 073e1cd Compare November 13, 2024 05:29
@renovate renovate bot force-pushed the renovate/all branch 3 times, most recently from 7b58066 to 4492c3a Compare November 20, 2024 16:45
@renovate renovate bot force-pushed the renovate/all branch 3 times, most recently from f2bafcd to 055e84d Compare December 5, 2024 19:47
@renovate renovate bot force-pushed the renovate/all branch 7 times, most recently from e558c05 to 6783606 Compare December 16, 2024 04:03
@renovate renovate bot force-pushed the renovate/all branch 3 times, most recently from ee79f3b to a2582a3 Compare December 20, 2024 19:35
@renovate renovate bot force-pushed the renovate/all branch 4 times, most recently from aa053db to 9a2773f Compare January 10, 2025 17:28
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Copy link

Quality Gate Failed Quality Gate failed

Failed conditions
1 Security Hotspot

See analysis details on SonarQube Cloud

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant