-
Notifications
You must be signed in to change notification settings - Fork 126
deps: update github actions (patch) #3888
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Open
renovate
wants to merge
1
commit into
main
Choose a base branch
from
renovate/patch-github-actions
base: main
Could not load branches
Branch not found: {{ refName }}
Loading
Could not load tags
Nothing to show
Loading
Are you sure you want to change the base?
Some commits from the old base branch may be removed from the timeline,
and old review comments may become outdated.
Open
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Codecov ReportAll modified and coverable lines are covered by tests ✅
Additional details and impacted files@@ Coverage Diff @@
## main #3888 +/- ##
=======================================
Coverage 77.37% 77.37%
=======================================
Files 220 220
Lines 11708 11708
=======================================
Hits 9059 9059
Misses 2281 2281
Partials 368 368
Flags with carried forward coverage won't be shown. Click here to find out more. 🚀 New features to boost your workflow:
|
d190df0
to
b911c49
Compare
b911c49
to
29c68ca
Compare
29c68ca
to
09195eb
Compare
09195eb
to
a895b95
Compare
a895b95
to
50f278a
Compare
50f278a
to
0128907
Compare
0128907
to
63a4dc3
Compare
63a4dc3
to
27029ee
Compare
1baad62
to
24cc6a0
Compare
24cc6a0
to
24629b4
Compare
24629b4
to
117b446
Compare
117b446
to
6bc7047
Compare
6bc7047
to
04fc1fc
Compare
04fc1fc
to
03b1cdd
Compare
03b1cdd
to
229258d
Compare
229258d
to
e720f55
Compare
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
e720f55
to
dd51ca3
Compare
|
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v2.1.3
->v2.1.9
v4.6.1
->v4.6.2
v0.0.24
->v0.0.25
v3.28.11
->v3.28.18
v3.28.19
v0.2.11
->v0.2.12
v2.4.0
->v2.4.2
v7.0.5
->v7.0.8
v3.8.1
->v3.8.2
v2.2.1
->v2.2.2
Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
Checkmarx/kics-github-action (Checkmarx/kics-github-action)
v2.1.9
Compare Source
What's Changed
Full Changelog: Checkmarx/kics-github-action@v2.1.8...v2.1.9
v2.1.8
Compare Source
What's Changed
Full Changelog: Checkmarx/kics-github-action@v2.1.7...v2.1.8
v2.1.7
Compare Source
What's Changed
Full Changelog: Checkmarx/kics-github-action@v2.1.6...v2.1.7
v2.1.6
Compare Source
What's Changed
Full Changelog: Checkmarx/kics-github-action@v2.1.5...v2.1.6
v2.1.5
Compare Source
What's Changed
Full Changelog: Checkmarx/kics-github-action@v2.1.4...v2.1.5
v2.1.4
Compare Source
What's Changed
Full Changelog: Checkmarx/kics-github-action@v2.1.3...v2.1.4
actions/upload-artifact (actions/upload-artifact)
v4.6.2
Compare Source
What's Changed
New Contributors
Full Changelog: actions/upload-artifact@v4...v4.6.2
check-spelling/check-spelling (check-spelling/check-spelling)
v0.0.25
: Release 0.0.25Compare Source
⏩ Upgrading
🐣 Breaking Changes
If you use SARIF reporting, then instead of the workflow yielding an ❌ when it fails, it will rely on github-advanced-security 🤖 to report the failure. You will need to adjust your checks for PRs.
on: schedule
whitelist.txt
andadvice.txt
check-spelling/checkout-merge@46bad523dcb6368efab50ff2729c00443785abca
(if you runon: pull_request
/on: pull_request_target
and usewith:
/checkout: true
)✨ New Features
submodules
only_check_changed_files
finds unrecognized words (#86)unknown_file_word_limit
to limit the number of times a path in a filename is reported when usingcheck_file_names
checkout: true
for newmissing-checkout
error casesingle-line-file
Dictionaries
fallback-dictionary-not-found
handlingHunspell dictionaries
.dic
/.aff
dictionaries by installing hunspell as needed (#79 / #90)Fixes
check_for_newline_at_eof
forallow.txt
(#81)inputs.ignored
eventsinputs.debug
handlingnoisy-file-list
handlingonly_check_changed_files
when unshallowing#
) support for expect filestoken-is-substring
warningImprovements
30x
redirectsWe'd
Messages
`
sLine
forcandidate-pattern
ignored-expect-variant
as a warningSARIF
/code-scanning/analysis
directly#
in filenames (#82)note
severity forno-files-to-check
defaultConfiguration.level
whenproblem.severity
is absentCandidate patterns
#
to suppress candidates (you can do this for forbidden patterns too, but this version won't suggest that)Apply
Summary Tables
Checkout
Testing
jd
withTest::More::is_deeply
Upgrade components
🐛 Known Issues
on: pull_request
/on: pull_requesrt_target
and usewith:
/checkout: true
, you will need to allowcheck-spelling/checkout-merge@46bad523dcb6368efab50ff2729c00443785abca
otherwise you will probably encounter:act
as of v0.2.77 is not supported withcheckout: true
(there's a PR toact
to fix this)check_file_names:
, instead, it will suggest excluding a file in/tmp/check-spelling
/GITHUB_OWNER/REPOSITORY_NAME/paths-of-checked-files.txt
(likely escaped)Full Changelog
Full Changelog: check-spelling/check-spelling@v0.0.24...v0.0.25
github/codeql-action (github/codeql-action)
v3.28.18
Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
3.28.18 - 16 May 2025
CODEQL_THREADS
andCODEQL_RAM
runner environment variables. If set, these environment variables override thethreads
andram
inputs respectively. #2891See the full CHANGELOG.md for more information.
v3.28.17
Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
3.28.17 - 02 May 2025
See the full CHANGELOG.md for more information.
v3.28.16
Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
3.28.16 - 23 Apr 2025
See the full CHANGELOG.md for more information.
v3.28.15
Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
3.28.15 - 07 Apr 2025
See the full CHANGELOG.md for more information.
v3.28.14
Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
3.28.14 - 07 Apr 2025
See the full CHANGELOG.md for more information.
v3.28.13
Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
3.28.13 - 24 Mar 2025
No user facing changes.
See the full CHANGELOG.md for more information.
v3.28.12
Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
3.28.12 - 19 Mar 2025
build-mode: none
extractions. This should speed up workflows and avoid inconsistent alerts in some cases.See the full CHANGELOG.md for more information.
kyverno/action-install-chainsaw (kyverno/action-install-chainsaw)
v0.2.12
Compare Source
What's Changed
Full Changelog: kyverno/action-install-chainsaw@v0.2.11...v0.2.12
ossf/scorecard-action (ossf/scorecard-action)
v2.4.2
Compare Source
What's Changed
This update bumps the Scorecard version to the v5.2.1 release. For a complete list of changes, please refer to the Scorecard v5.2.0 and v5.2.1 release notes.
Full Changelog: ossf/scorecard-action@v2.4.1...v2.4.2
v2.4.1
Compare Source
What's Changed
file_mode
input which controls how repository files are fetched from GitHub. The default isarchive
, butgit
produces the most accurate results for repositories with.gitattributes
files at the cost of analysis speed.--file-mode
by @spencerschrock in https://github.com/ossf/scorecard-action/pull/1509Docs
New Contributors
Full Changelog: ossf/scorecard-action@v2.4.0...v2.4.1
peter-evans/create-pull-request (peter-evans/create-pull-request)
v7.0.8
: Create Pull Request v7.0.8Compare Source
What's Changed
Full Changelog: peter-evans/create-pull-request@v7.0.7...v7.0.8
v7.0.7
: Create Pull Request v7.0.7Compare Source
⚙️ Fixes an issue with commit signing where modifications to the same file in multiple commits squash into the first commit.
What's Changed
New Contributors
Full Changelog: peter-evans/create-pull-request@v7.0.6...v7.0.7
v7.0.6
: Create Pull Request v7.0.6Compare Source
⚙️ Fixes an issue with commit signing where unicode characters in file paths were not preserved.
What's Changed
push-to-repo
classic PATworkflow
scope requirement by @scop in https://github.com/peter-evans/create-pull-request/pull/3511New Contributors
Full Changelog: peter-evans/create-pull-request@v7.0.5...v7.0.6
sigstore/cosign-installer (sigstore/cosign-installer)
v3.8.2
Compare Source
What's Changed
Full Changelog: sigstore/cosign-installer@v3...v3.8.2
softprops/action-gh-release (softprops/action-gh-release)
v2.2.2
Compare Source
What's Changed
Bug fixes 🐛
Other Changes 🔄
New Contributors
Full Changelog: softprops/action-gh-release@v2...v2.2.2
Configuration
📅 Schedule: Branch creation - At 12:00 AM through 04:59 AM and 10:00 PM through 11:59 PM, Monday through Friday ( * 0-4,22-23 * * 1-5 ), Only on Sunday and Saturday ( * * * * 0,6 ) in timezone Europe/Vienna, Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.