Skip to content

chore(deps): update all non-major dependencies #219

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

renovate-bot
Copy link
Contributor

@renovate-bot renovate-bot commented Apr 1, 2025

This PR contains the following updates:

Package Type Update Change Age Adoption Passing Confidence
actions/dependency-review-action action minor v4.5.0 -> v4.7.1 age adoption passing confidence
actions/setup-go action minor v5.3.0 -> v5.5.0 age adoption passing confidence
github/codeql-action action patch v3.28.11 -> v3.28.18 age adoption passing confidence
google-style minor "~> 1.30.1" -> "~> 1.31.0" age adoption passing confidence
ossf/scorecard-action action patch v2.4.1 -> v2.4.2 age adoption passing confidence
ruby/setup-ruby action minor v1.225.0 -> v1.244.0 age adoption passing confidence
step-security/harden-runner action minor v2.11.0 -> v2.12.0 age adoption passing confidence

Release Notes

actions/dependency-review-action (actions/dependency-review-action)

v4.7.1

Compare Source

  • Packages added to allow-dependencies-licenses will be allowed even if the package in question has no license information #​889
  • License expressions (e.g. Ruby OR GPL-2.0) in the allow list are automatically discarded so that they don't invalidate the whole allow list, which should just be license identifier (e.g. Ruby)

v4.7.0

Compare Source

  • Handle complex license expressions (e.g. MIT AND GPL-2.0) in allow lists (fixes #​809 and probably others)
  • Replace OTHER in package licenses with LicenseRef-clearlydefined-OTHER so that parsing passes

v4.6.0

Compare Source

What's Changed

New Contributors

Full Changelog: actions/dependency-review-action@v4.5.0...v4.6.0

actions/setup-go (actions/setup-go)

v5.5.0

Compare Source

What's Changed
Bug fixes:
Dependency updates:
New Contributors

Full Changelog: actions/setup-go@v5...v5.5.0

v5.4.0

Compare Source

What's Changed
Dependency updates :
New Contributors

Full Changelog: actions/setup-go@v5...v5.4.0

github/codeql-action (github/codeql-action)

v3.28.18

Compare Source

v3.28.17

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.17 - 02 May 2025

  • Update default CodeQL bundle version to 2.21.2. #​2872

See the full CHANGELOG.md for more information.

v3.28.16

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.16 - 23 Apr 2025
  • Update default CodeQL bundle version to 2.21.1. #​2863

See the full CHANGELOG.md for more information.

v3.28.15

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.15 - 07 Apr 2025
  • Fix bug where the action would fail if it tried to produce a debug artifact with more than 65535 files. #​2842

See the full CHANGELOG.md for more information.

v3.28.14

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.14 - 07 Apr 2025

  • Update default CodeQL bundle version to 2.21.0. #​2838

See the full CHANGELOG.md for more information.

v3.28.13

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.13 - 24 Mar 2025

No user facing changes.

See the full CHANGELOG.md for more information.

v3.28.12

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.12 - 19 Mar 2025

  • Dependency caching should now cache more dependencies for Java build-mode: none extractions. This should speed up workflows and avoid inconsistent alerts in some cases.
  • Update default CodeQL bundle version to 2.20.7. #​2810

See the full CHANGELOG.md for more information.

googleapis/ruby-style (google-style)

v1.31.0

Features
  • update ruby version, audit some cops (#​88)
ossf/scorecard-action (ossf/scorecard-action)

v2.4.2

Compare Source

ruby/setup-ruby (ruby/setup-ruby)

v1.244.0

Compare Source

What's Changed

Full Changelog: ruby/setup-ruby@v1.243.0...v1.244.0

v1.243.0

Compare Source

What's Changed
New Contributors

Full Changelog: ruby/setup-ruby@v1.242.0...v1.243.0

v1.242.0

Compare Source

What's Changed

Full Changelog: ruby/setup-ruby@v1.241.0...v1.242.0

v1.241.0

Compare Source

What's Changed

Full Changelog: ruby/setup-ruby@v1.240.0...v1.241.0

v1.240.0

Compare Source

What's Changed

Full Changelog: ruby/setup-ruby@v1.239.0...v1.240.0

v1.239.0

Compare Source

What's Changed

Full Changelog: ruby/setup-ruby@v1.238.0...v1.239.0

v1.238.0

Compare Source

What's Changed

Full Changelog: ruby/setup-ruby@v1.237.0...v1.238.0

v1.237.0

Compare Source

What's Changed

Full Changelog: ruby/setup-ruby@v1.236.0...v1.237.0

v1.236.0

Compare Source

What's Changed

Full Changelog: ruby/setup-ruby@v1.235.0...v1.236.0

v1.235.0

Compare Source

What's Changed

Full Changelog: ruby/setup-ruby@v1.234.0...v1.235.0

v1.234.0

Compare Source

Full Changelog: ruby/setup-ruby@v1.233.0...v1.234.0

v1.233.0

Compare Source

What's Changed

Full Changelog: ruby/setup-ruby@v1.232.0...v1.233.0

v1.232.0

Compare Source

What's Changed

Full Changelog: ruby/setup-ruby@v1.231.0...v1.232.0

v1.231.0

Compare Source

What's Changed

Full Changelog: ruby/setup-ruby@v1.230.0...v1.231.0

v1.230.0

Compare Source

What's Changed

Full Changelog: ruby/setup-ruby@v1.229.0...v1.230.0

v1.229.0

Compare Source

What's Changed

Full Changelog: ruby/setup-ruby@v1.228.0...v1.229.0

v1.228.0

Compare Source

What's Changed

Full Changelog: ruby/setup-ruby@v1.227.0...v1.228.0

v1.227.0

Compare Source

What's Changed

Full Changelog: ruby/setup-ruby@v1.226.0...v1.227.0

v1.226.0

Compare Source

What's Changed

Full Changelog: ruby/setup-ruby@v1.225.0...v1.226.0

step-security/harden-runner (step-security/harden-runner)

v2.12.0

Compare Source

What's Changed

  1. A new option, disable-sudo-and-containers, is now available to replace the disable-sudo policy, addressing Docker-based privilege escalation (CVE-2025-32955). More details can be found in this blog post.

  2. New detections have been added based on insights from the tj-actions and reviewdog actions incidents.

Full Changelog: step-security/harden-runner@v2...v2.12.0

v2.11.1

Compare Source

What's Changed

Full Changelog: step-security/harden-runner@v2...v2.11.1


Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, on day 1 of the month ( * 0-3 1 * * ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate-bot renovate-bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from 45029df to 6da35a4 Compare April 8, 2025 00:43
@renovate-bot renovate-bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from 22a3791 to 589d042 Compare April 18, 2025 09:34
@renovate-bot renovate-bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from fe7f123 to df3e94a Compare April 26, 2025 12:44
@renovate-bot renovate-bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from 928636d to 0e37f69 Compare May 2, 2025 12:38
@renovate-bot renovate-bot force-pushed the renovate/all-minor-patch branch 5 times, most recently from 485e7fd to dc55a2c Compare May 14, 2025 21:36
@renovate-bot renovate-bot force-pushed the renovate/all-minor-patch branch 5 times, most recently from 4fa028b to 6cd92f0 Compare May 21, 2025 10:38
@renovate-bot renovate-bot force-pushed the renovate/all-minor-patch branch from 6cd92f0 to 66de28c Compare June 1, 2025 03:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant