Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[deps]: Update gh minor #188

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

[deps]: Update gh minor #188

wants to merge 1 commit into from
+19 −19

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Oct 28, 2024 •
edited
Loading

This PR contains the following updates:

Package Type Update Change
actions/checkout action patch v4.2.1 -> v4.2.2
actions/create-github-app-token action patch v1.11.0 -> v1.11.1
actions/setup-dotnet action minor v4.0.1 -> v4.2.0
actions/setup-java action minor v4.4.0 -> v4.6.0
actions/upload-artifact action minor v4.4.3 -> v4.6.0
anchore/scan-action action minor v5.0.1 -> v5.3.0
checkmarx/ast-github-action action patch 2.0.36 -> 2.0.41
crazy-max/ghaction-import-gpg action minor v6.1.0 -> v6.2.0
docker/build-push-action action minor v6.9.0 -> v6.11.0
github/codeql-action action minor v3.26.13 -> v3.28.1

Release Notes

actions/checkout (actions/checkout)

v4.2.2

Compare Source

actions/create-github-app-token (actions/create-github-app-token)

v1.11.1

Compare Source

What's Changed

Bug Fixes

Full Changelog: actions/create-github-app-token@v1.11.0...v1.11.1

actions/setup-dotnet (actions/setup-dotnet)

v4.2.0

Compare Source

What's Changed

Some .NET binaries and installers currently hosted on Azure Content Delivery Network (CDN) domains ending in .azureedge.net will move to new domains as the provider, edg.io, will soon cease operations. There may be downtime or unavailability of .azureedge.net domains in the future as the .NET team is required to migrate to a new CDN and set of domains moving forward.

If your workflows are pinned to specific SHAs or minor tags, please upgrade to a major release tag to avoid service disruptions. Edgio has confirmed their services will be operational until at least January 15, 2025.

For updates, follow https://github.com/dotnet/core/issues/9671.

New Contributors

Full Changelog: actions/setup-dotnet@v4...v4.2.0

v4.1.0

Compare Source

What's Changed

Bug fixes :
Dependency updates :

New Contributors

Full Changelog: actions/setup-dotnet@v4...v4.1.0

actions/setup-java (actions/setup-java)

v4.6.0

Compare Source

What's Changed

Add-ons:

 - name: Checkout
   uses: actions/checkout@v4
 - name: Setup-java
   uses: actions/setup-java@v4
   with:
     distribution: ‘jetbrains’
     java-version: '21'

Bug fixes:

New Contributors

Full Changelog: actions/setup-java@v4...v4.6.0

v4.5.0

Compare Source

What's Changed

Bug fixes:
New Contributors:

Full Changelog: actions/setup-java@v4...v4.5.0

actions/upload-artifact (actions/upload-artifact)

v4.6.0

Compare Source

What's Changed

Full Changelog: actions/upload-artifact@v4...v4.6.0

v4.5.0

Compare Source

anchore/scan-action (anchore/scan-action)

v5.3.0

Compare Source

New in scan-action v5.3.0

v5.2.1

Compare Source

New in scan-action v5.2.1

v5.2.0

Compare Source

New in scan-action v5.2.0

v5.1.0

Compare Source

New in scan-action v5.1.0

checkmarx/ast-github-action (checkmarx/ast-github-action)

v2.0.41

Compare Source

What's Changed

Other Changes

Full Changelog: Checkmarx/ast-github-action@2.0.40...2.0.41

v2.0.40

Compare Source

What's Changed

Other Changes

Full Changelog: Checkmarx/ast-github-action@2.0.39...2.0.40

v2.0.39

Compare Source

What's Changed

Other Changes

Full Changelog: Checkmarx/ast-github-action@2.0.38...2.0.39

v2.0.38

Compare Source

What's Changed

Other Changes

New Contributors

Full Changelog: Checkmarx/ast-github-action@2.0.37...2.0.38

v2.0.37

Compare Source

What's Changed

Other Changes

Full Changelog: Checkmarx/ast-github-action@2.0.36...2.0.37

crazy-max/ghaction-import-gpg (crazy-max/ghaction-import-gpg)

v6.2.0

Compare Source

Full Changelog: crazy-max/ghaction-import-gpg@v6.1.0...v6.2.0

docker/build-push-action (docker/build-push-action)

v6.11.0

Compare Source

v6.10.0

Compare Source

Full Changelog: docker/build-push-action@v6.9.0...v6.10.0

github/codeql-action (github/codeql-action)

v3.28.1

Compare Source

v3.28.0

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.28.0 - 20 Dec 2024
  • Bump the minimum CodeQL bundle version to 2.15.5. #​2655
  • Don't fail in the unusual case that a file is on the search path. #​2660.

See the full CHANGELOG.md for more information.

v3.27.9

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.27.9 - 12 Dec 2024

No user facing changes.

See the full CHANGELOG.md for more information.

v3.27.8

Compare Source

v3.27.7

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.27.7 - 10 Dec 2024
  • We are rolling out a change in December 2024 that will extract the CodeQL bundle directly to the toolcache to improve performance. #​2631
  • Update default CodeQL bundle version to 2.20.0. #​2636

See the full CHANGELOG.md for more information.

v3.27.6

Compare Source

v3.27.5

Compare Source

v3.27.4

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.27.4 - 14 Nov 2024

No user facing changes.

See the full CHANGELOG.md for more information.

v3.27.3

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.27.3 - 12 Nov 2024

No user facing changes.

See the full CHANGELOG.md for more information.

v3.27.2

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.27.2 - 12 Nov 2024
  • Fixed an issue where setting up the CodeQL tools would sometimes fail with the message "Invalid value 'undefined' for header 'authorization'". #​2590

See the full CHANGELOG.md for more information.

v3.27.1

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.27.1 - 08 Nov 2024
  • The CodeQL Action now downloads bundles compressed using Zstandard on GitHub Enterprise Server when using Linux or macOS runners. This speeds up the installation of the CodeQL tools. This feature is already available to GitHub.com users. #​2573
  • Update default CodeQL bundle version to 2.19.3. #​2576

See the full CHANGELOG.md for more information.

v3.27.0

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.27.0 - 22 Oct 2024
  • Bump the minimum CodeQL bundle version to 2.14.6. #​2549
  • Fix an issue where the upload-sarif Action would fail with "upload-sarif post-action step failed: Input required and not supplied: token" when called in a composite Action that had a different set of inputs to the ones expected by the upload-sarif Action. #​2557
  • Update default CodeQL bundle version to 2.19.2. #​2552

See the full CHANGELOG.md for more information.

Configuration

📅 Schedule: Branch creation - "every 2nd week starting on the 2 week of the year before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot requested review from a team as code owners October 28, 2024 01:47
@bitwarden-bot bitwarden-bot changed the title [deps]: Update gh minor [PM-14133] [deps]: Update gh minor Oct 28, 2024
@bitwarden-bot
Copy link

Internal tracking:

@codecov Codecov
Copy link

codecov bot commented Oct 28, 2024 •
edited
Loading

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 7.04%. Comparing base (f78640d) to head (afb47a6).

Additional details and impacted files 
@@          Coverage Diff          @@
##            main    #188   +/-   ##
=====================================
  Coverage   7.04%   7.04%           
=====================================
  Files         49      49           
  Lines       1818    1818           
  Branches      99      99           
=====================================
  Hits         128     128           
  Misses      1685    1685           
  Partials       5       5

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@renovate renovate bot changed the title [PM-14133] [deps]: Update gh minor [deps]: Update gh minor Oct 28, 2024
@renovate renovate bot force-pushed the renovate/gh-minor branch from d76ff87 to a974cb1 Compare October 29, 2024 13:25
vgrassia
vgrassia previously approved these changes Oct 30, 2024
View reviewed changes
@vgrassia vgrassia enabled auto-merge (squash) October 30, 2024 15:25
@renovate renovate bot force-pushed the renovate/gh-minor branch 3 times, most recently from e2c3261 to e60bb1a Compare November 12, 2024 11:16
@renovate renovate bot force-pushed the renovate/gh-minor branch 3 times, most recently from a5c3c6f to a2036e5 Compare November 19, 2024 13:50
@renovate renovate bot force-pushed the renovate/gh-minor branch 3 times, most recently from 1274493 to 0f39c90 Compare November 26, 2024 12:50
@renovate renovate bot force-pushed the renovate/gh-minor branch 2 times, most recently from 7a15938 to f404ad6 Compare December 3, 2024 17:43
@renovate renovate bot force-pushed the renovate/gh-minor branch 5 times, most recently from e26b1fb to 4e81ad5 Compare December 17, 2024 12:14
@renovate renovate bot force-pushed the renovate/gh-minor branch 4 times, most recently from dc53fc4 to 8a102db Compare December 20, 2024 22:56
@renovate renovate bot force-pushed the renovate/gh-minor branch 2 times, most recently from 75ce0a8 to 25bb7a4 Compare December 31, 2024 16:21
@renovate renovate bot force-pushed the renovate/gh-minor branch 2 times, most recently from 9a293de to 9aa3f87 Compare January 10, 2025 17:10
@renovate renovate bot force-pushed the renovate/gh-minor branch from 9aa3f87 to afb47a6 Compare January 10, 2025 20:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@vgrassia vgrassia vgrassia left review comments

At least 1 approving review is required to merge this pull request.

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@bitwarden-bot @vgrassia