Skip to content

deps: update github actions (patch) #3888

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Feb 19, 2025

This PR contains the following updates:

Package Type Update Change Pending
Checkmarx/kics-github-action action patch v2.1.3 -> v2.1.9
actions/upload-artifact action patch v4.6.1 -> v4.6.2
check-spelling/check-spelling action patch v0.0.24 -> v0.0.25
github/codeql-action action patch v3.28.11 -> v3.28.18 v3.28.19
kyverno/action-install-chainsaw action patch v0.2.11 -> v0.2.12
ossf/scorecard-action action patch v2.4.0 -> v2.4.2
peter-evans/create-pull-request action patch v7.0.5 -> v7.0.8
sigstore/cosign-installer action patch v3.8.1 -> v3.8.2
softprops/action-gh-release action patch v2.2.1 -> v2.2.2

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

Checkmarx/kics-github-action (Checkmarx/kics-github-action)

v2.1.9

Compare Source

What's Changed

Full Changelog: Checkmarx/kics-github-action@v2.1.8...v2.1.9

v2.1.8

Compare Source

What's Changed

Full Changelog: Checkmarx/kics-github-action@v2.1.7...v2.1.8

v2.1.7

Compare Source

What's Changed

Full Changelog: Checkmarx/kics-github-action@v2.1.6...v2.1.7

v2.1.6

Compare Source

What's Changed

Full Changelog: Checkmarx/kics-github-action@v2.1.5...v2.1.6

v2.1.5

Compare Source

What's Changed

Full Changelog: Checkmarx/kics-github-action@v2.1.4...v2.1.5

v2.1.4

Compare Source

What's Changed

Full Changelog: Checkmarx/kics-github-action@v2.1.3...v2.1.4

actions/upload-artifact (actions/upload-artifact)

v4.6.2

Compare Source

What's Changed
New Contributors

Full Changelog: actions/upload-artifact@v4...v4.6.2

check-spelling/check-spelling (check-spelling/check-spelling)

v0.0.25: Release 0.0.25

Compare Source

⏩ Upgrading

  • 🧪 Test first on a branch 🏷️ by changing your workflow tags/references to this release
  • See 🐣 Breaking Changes for how to adapt your workflow
  • See 🐛 Known Issues for known issues

🐣 Breaking Changes

✨ New Features

Dictionaries

Hunspell dictionaries
  • Fix support for .dic/.aff dictionaries by installing hunspell as needed (#​79 / #​90)
  • Ensure that Spanish works (a consumer is using this, so it should work reliably)

Fixes

  • macOS: Consistently use check-spelling dictionary instead of looking at the system dictionary (#​84)
  • Fix check_for_newline_at_eof for allow.txt (#​81)
  • Improve handling of inputs.ignored events
  • Fix inputs.debug handling
  • Fix merge instructions order
  • Fix pattern for validating expect entries
  • Fix noisy-file-list handling
  • Fix 504 handling for only_check_changed_files when unshallowing
  • Restore comment (#) support for expect files
  • Include last character in token-is-substring warning

Improvements

  • Line ending detection (#​83)
  • RSQM handling
  • Dictionary download times by skipping delays for 30x redirects
  • Excludes paths generation
  • Error handling of various components
  • Documentation links
  • GitHub error detection patterns for when check-spelling has bugs
  • Handling of We'd
Messages
SARIF
Candidate patterns
  • Suggest using # to suppress candidates (you can do this for forbidden patterns too, but this version won't suggest that)
Apply
  • Improve error handling
Summary Tables
  • List all present event classes at the top level
  • Support cross repository pull requests
Checkout
Testing
Upgrade components

🐛 Known Issues

  • If you use Allow specified actions and reusable workflows, if you run on: pull_request/on: pull_requesrt_target and use with:/checkout: true, you will need to allow check-spelling/checkout-merge@46bad523dcb6368efab50ff2729c00443785abca otherwise you will probably encounter:
    Error: Missing download info for check-spelling/checkout-merge@46bad523dcb6368efab50ff2729c00443785abca
    
  • act as of v0.2.77 is not supported with checkout: true (there's a PR to act to fix this)
  • check-spelling sometimes (e.g., for slow-file-list) won't correctly suggest disabling check_file_names:, instead, it will suggest excluding a file in /tmp/check-spelling/GITHUB_OWNER/REPOSITORY_NAME/paths-of-checked-files.txt (likely escaped)

Full Changelog

Full Changelog: check-spelling/check-spelling@v0.0.24...v0.0.25

github/codeql-action (github/codeql-action)

v3.28.18

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.18 - 16 May 2025

  • Update default CodeQL bundle version to 2.21.3. #​2893
  • Skip validating SARIF produced by CodeQL for improved performance. #​2894
  • The number of threads and amount of RAM used by CodeQL can now be set via the CODEQL_THREADS and CODEQL_RAM runner environment variables. If set, these environment variables override the threads and ram inputs respectively. #​2891

See the full CHANGELOG.md for more information.

v3.28.17

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.17 - 02 May 2025
  • Update default CodeQL bundle version to 2.21.2. #​2872

See the full CHANGELOG.md for more information.

v3.28.16

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.16 - 23 Apr 2025
  • Update default CodeQL bundle version to 2.21.1. #​2863

See the full CHANGELOG.md for more information.

v3.28.15

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.15 - 07 Apr 2025

  • Fix bug where the action would fail if it tried to produce a debug artifact with more than 65535 files. #​2842

See the full CHANGELOG.md for more information.

v3.28.14

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.14 - 07 Apr 2025

  • Update default CodeQL bundle version to 2.21.0. #​2838

See the full CHANGELOG.md for more information.

v3.28.13

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.13 - 24 Mar 2025

No user facing changes.

See the full CHANGELOG.md for more information.

v3.28.12

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.12 - 19 Mar 2025
  • Dependency caching should now cache more dependencies for Java build-mode: none extractions. This should speed up workflows and avoid inconsistent alerts in some cases.
  • Update default CodeQL bundle version to 2.20.7. #​2810

See the full CHANGELOG.md for more information.

kyverno/action-install-chainsaw (kyverno/action-install-chainsaw)

v0.2.12

Compare Source

What's Changed

Full Changelog: kyverno/action-install-chainsaw@v0.2.11...v0.2.12

ossf/scorecard-action (ossf/scorecard-action)

v2.4.2

Compare Source

What's Changed

This update bumps the Scorecard version to the v5.2.1 release. For a complete list of changes, please refer to the Scorecard v5.2.0 and v5.2.1 release notes.

Full Changelog: ossf/scorecard-action@v2.4.1...v2.4.2

v2.4.1

Compare Source

What's Changed

Docs

New Contributors

peter-evans/create-pull-request (peter-evans/create-pull-request)

v7.0.8: Create Pull Request v7.0.8

Compare Source

What's Changed

Full Changelog: peter-evans/create-pull-request@v7.0.7...v7.0.8

v7.0.7: Create Pull Request v7.0.7

Compare Source

⚙️ Fixes an issue with commit signing where modifications to the same file in multiple commits squash into the first commit.

What's Changed
New Contributors

Full Changelog: peter-evans/create-pull-request@v7.0.6...v7.0.7

v7.0.6: Create Pull Request v7.0.6

Compare Source

⚙️ Fixes an issue with commit signing where unicode characters in file paths were not preserved.

What's Changed
New Contributors

Full Changelog: peter-evans/create-pull-request@v7.0.5...v7.0.6

sigstore/cosign-installer (sigstore/cosign-installer)

v3.8.2

Compare Source

What's Changed

Full Changelog: sigstore/cosign-installer@v3...v3.8.2

softprops/action-gh-release (softprops/action-gh-release)

v2.2.2

Compare Source

What's Changed

Bug fixes 🐛
Other Changes 🔄

New Contributors

Full Changelog: softprops/action-gh-release@v2...v2.2.2


Configuration

📅 Schedule: Branch creation - At 12:00 AM through 04:59 AM and 10:00 PM through 11:59 PM, Monday through Friday ( * 0-4,22-23 * * 1-5 ), Only on Sunday and Saturday ( * * * * 0,6 ) in timezone Europe/Vienna, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot requested a review from a team as a code owner February 19, 2025 03:13
@github-actions github-actions bot added the ops label Feb 19, 2025
Copy link

codecov bot commented Feb 19, 2025

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 77.37%. Comparing base (325756f) to head (dd51ca3).

Additional details and impacted files
@@           Coverage Diff           @@
##             main    #3888   +/-   ##
=======================================
  Coverage   77.37%   77.37%           
=======================================
  Files         220      220           
  Lines       11708    11708           
=======================================
  Hits         9059     9059           
  Misses       2281     2281           
  Partials      368      368           
Flag Coverage Δ
certificate-operator 47.44% <ø> (ø)
component-tests 57.08% <ø> (-1.28%) ⬇️
lifecycle-operator 79.68% <ø> (ø)
metrics-operator 74.93% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

renovate-approve[bot]
renovate-approve bot previously approved these changes Feb 19, 2025
renovate-approve[bot]
renovate-approve bot previously approved these changes Feb 24, 2025
renovate-approve[bot]
renovate-approve bot previously approved these changes Feb 27, 2025
renovate-approve[bot]
renovate-approve bot previously approved these changes Feb 27, 2025
renovate-approve[bot]
renovate-approve bot previously approved these changes Mar 5, 2025
renovate-approve[bot]
renovate-approve bot previously approved these changes Mar 7, 2025
renovate-approve[bot]
renovate-approve bot previously approved these changes Mar 17, 2025
renovate-approve[bot]
renovate-approve bot previously approved these changes Mar 21, 2025
renovate-approve[bot]
renovate-approve bot previously approved these changes Mar 22, 2025
renovate-approve[bot]
renovate-approve bot previously approved these changes Apr 21, 2025
renovate-approve[bot]
renovate-approve bot previously approved these changes Apr 22, 2025
renovate-approve[bot]
renovate-approve bot previously approved these changes Apr 24, 2025
renovate-approve[bot]
renovate-approve bot previously approved these changes Apr 26, 2025
@renovate renovate bot force-pushed the renovate/patch-github-actions branch from 117b446 to 6bc7047 Compare May 5, 2025 12:21
renovate-approve[bot]
renovate-approve bot previously approved these changes May 5, 2025
@renovate renovate bot force-pushed the renovate/patch-github-actions branch from 6bc7047 to 04fc1fc Compare May 18, 2025 02:56
renovate-approve[bot]
renovate-approve bot previously approved these changes May 18, 2025
@renovate renovate bot force-pushed the renovate/patch-github-actions branch from 04fc1fc to 03b1cdd Compare May 19, 2025 11:29
renovate-approve[bot]
renovate-approve bot previously approved these changes May 19, 2025
@renovate renovate bot force-pushed the renovate/patch-github-actions branch from 03b1cdd to 229258d Compare May 23, 2025 19:08
renovate-approve[bot]
renovate-approve bot previously approved these changes May 23, 2025
@renovate renovate bot force-pushed the renovate/patch-github-actions branch from 229258d to e720f55 Compare May 30, 2025 14:26
renovate-approve[bot]
renovate-approve bot previously approved these changes May 30, 2025
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate renovate bot force-pushed the renovate/patch-github-actions branch from e720f55 to dd51ca3 Compare June 2, 2025 18:53
Copy link

sonarqubecloud bot commented Jun 2, 2025

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants