ci: update all non-major github actions #437

renovate · 2023-12-01T02:11:21Z

This PR contains the following updates:

Package	Type	Update	Change	Pending
GoogleCloudPlatform/release-please-action	action	patch	`v3.7.10` -> `v3.7.13`
apexskier/github-release-commenter	action	patch	`v1.3.2` -> `v1.3.6`
github/codeql-action	action	minor	`v2.22.5` -> `v2.24.0`	`v2.24.1`
ossf/scorecard-action	action	minor	`v2.0.6` -> `v2.3.1`
reviewdog/action-golangci-lint	action	minor	`v2.5.0` -> `v2.6.0`

Release Notes

GoogleCloudPlatform/release-please-action (GoogleCloudPlatform/release-please-action)

`v3.7.13`

Compare Source

Bug Fixes

deps: bump dependency versions (#849) (9108012)

`v3.7.12`

Compare Source

Bug Fixes

bump release-please from 15.12.0 to 15.13.0 (#813) (01b3219)

`v3.7.11`

Compare Source

Bug Fixes

bump release-please from 15.11.0 to 15.12.0 (#790) (21e064e)

apexskier/github-release-commenter (apexskier/github-release-commenter)

Upgrade node to v20 internally
Upgrade dependencies

github/codeql-action (github/codeql-action)

`v2.24.0`

Compare Source

`v2.23.2`

Compare Source

`v2.23.1`

Compare Source

`v2.23.0`

Compare Source

`v2.22.12`

Compare Source

`v2.22.11`

Compare Source

`v2.22.10`

Compare Source

`v2.22.9`

Compare Source

`v2.22.8`

Compare Source

`v2.22.7`

Compare Source

`v2.22.6`

Compare Source

ossf/scorecard-action (ossf/scorecard-action)

`v2.3.1`

Compare Source

What's Changed

🌱 Bump github.com/ossf/scorecard/v4 from v4.13.0 to v4.13.1 by @spencerschrock in https://github.com/ossf/scorecard-action/pull/1282
- Adds additional Fuzzing detection and fixes a SAST bug related to detecting CodeQL. For a full changelist of what this includes, see the v4.13.1 release notes

Full Changelog: ossf/scorecard-action@v2.3.0...v2.3.1

`v2.3.0`

Compare Source

What's Changed

🌱 Bump github.com/ossf/scorecard/v4 from v4.11.0 to v4.13.0 by @spencerschrock in https://github.com/ossf/scorecard-action/pull/1270
- For a full changelist of what this includes, see the v4.12.0 and v4.13.0 release notes
✨ Send rekor tlog index to webapp when publishing results by @spencerschrock in https://github.com/ossf/scorecard-action/pull/1169
🐛 Prevent url clipping for GHES instances by @rajbos in https://github.com/ossf/scorecard-action/pull/1225

Documentation

📖 Update access rights needed to see the results in code scanning by @rajbos in https://github.com/ossf/scorecard-action/pull/1229
📖 Add package comments. by @spencerschrock in https://github.com/ossf/scorecard-action/pull/1221
📖 Add SECURITY.md file by @david-a-wheeler in https://github.com/ossf/scorecard-action/pull/1250
📖 Fix typo in token input docs by @aabouzaid in https://github.com/ossf/scorecard-action/pull/1258

New Contributors

@david-a-wheeler made their first contribution in https://github.com/ossf/scorecard-action/pull/1250
@aabouzaid made their first contribution in https://github.com/ossf/scorecard-action/pull/1258

Full Changelog: ossf/scorecard-action@v2.2.0...v2.3.0

`v2.2.0`

Compare Source

What's Changed

🌱 Bump github.com/ossf/scorecard/v4 from v4.10.5 to v4.11.0 by @spencerschrock in https://github.com/ossf/scorecard-action/pull/1192

Scorecard Result Viewer

Thanks to contributions from @cynthia-sg and @tegioz at CLOMonitor, there is a new Scorecard Result visualization page at https://securityscorecards.dev/viewer/?uri=<project-url>.

As an example, you can see our own score visualized here
Checkout our README to learn how to link your README badge to the new visualization page.

Publishing Results

This release contains two fixes which will improve the user experience when publish_results is true

Runs that fail our workflow restrictions will fail with a 400 response indicating the problem, instead of a vague 500 status. (https://github.com/ossf/scorecard-action/pull/1156, resolved https://github.com/ossf/scorecard-action/issues/1150)
Scorecard action will retry when signing results and submitting them to our web API. This should help with flakiness from connection failures. (https://github.com/ossf/scorecard-action/pull/1191)

Docs

📖 Update README to accept fine-grained tokens by @pnacht in https://github.com/ossf/scorecard-action/pull/1175
📖 Update installation instructions to match current GitHub UI by @joycebrum in https://github.com/ossf/scorecard-action/pull/1153
📖 Document the GitHub action workflow restrictions when publishing results. by @spencerschrock in

New Contributors

@bobcallaway made their first contribution in https://github.com/ossf/scorecard-action/pull/1140
@pnacht made their first contribution in https://github.com/ossf/scorecard-action/pull/1175

Full Changelog: ossf/scorecard-action@v2.1.3...v2.2.0

`v2.1.3`

Compare Source

What's Changed

🌱 Bump github.com/ossf/scorecard/v4 from 4.10.2 to 4.10.5 by @spencerschrock in https://github.com/ossf/scorecard-action/pull/1111

Bug Fixes

Invalid SARIF files from a bug in scorecard
- #1076, #1094
Vulnerabilities check crashes if a vulnerable dependency is found via OSVScanner
- #1092
Scorecard action not reporting binary artifacts in the repo
- #1116

Full Scorecard Changelog: ossf/scorecard@v4.10.2...v4.10.5

Full Changelog: ossf/scorecard-action@v2.1.2...v2.1.3

`v2.1.2`

Compare Source

What's Changed

Fixes

🌱 Bump scorecard dependency to v4.10.2 to remove a CODEOWNERS printf statement. by @spencerschrock in https://github.com/ossf/scorecard-action/pull/1054

Full Changelog: ossf/scorecard-action@v2.1.1...v2.1.2

`v2.1.1`

Compare Source

Scorecard version

This release use Scorecard's v4.10.1

Full Changelog: ossf/scorecard-action@v2.1.0...v2.1.1

`v2.1.0`

Compare Source

What's Changed

Scorecard version

This release uses scorecard v4.10.0.

Improvements

Docker build workflow by @naveensrinivasan in https://github.com/ossf/scorecard-action/pull/981
Use root user in distroless to support GitHub Actions by @spencerschrock in https://github.com/ossf/scorecard-action/pull/994
Disable pull_request_target by @laurentsimon in https://github.com/ossf/scorecard-action/pull/1031

Documentation

Add PAT section explaining risks by @olivekl in https://github.com/ossf/scorecard-action/pull/1024
Make the badge text easier to copy by @rajbos in https://github.com/ossf/scorecard-action/pull/1026

New Contributors

@joycebrum made their first contribution in https://github.com/ossf/scorecard-action/pull/984
@rajbos made their first contribution in https://github.com/ossf/scorecard-action/pull/1026

Full Changelog: ossf/scorecard-action@v2.0.6...v2.1.0

reviewdog/action-golangci-lint (reviewdog/action-golangci-lint)

`v2.6.0`

Compare Source

v2.6.0: PR #673 - Update Node.js to 20

`v2.5.1`

Compare Source

What's Changed

chore(deps): update dependency @types/node to v20.8.7 by @renovate in https://github.com/reviewdog/action-golangci-lint/pull/627
chore(deps): update dependency @vercel/ncc to v0.38.1 by @renovate in https://github.com/reviewdog/action-golangci-lint/pull/629
chore(deps): update dependency eslint to v8.52.0 by @renovate in https://github.com/reviewdog/action-golangci-lint/pull/630
chore(deps): update dependency eslint-plugin-import to v2.29.0 by @renovate in https://github.com/reviewdog/action-golangci-lint/pull/632
chore(deps): update actions/setup-node action to v4 by @renovate in https://github.com/reviewdog/action-golangci-lint/pull/633
chore(deps): update dependency @types/node to v20.8.8 by @renovate in https://github.com/reviewdog/action-golangci-lint/pull/634
chore(deps): update dependency @types/node to v20.8.9 by @renovate in https://github.com/reviewdog/action-golangci-lint/pull/635
chore(deps): update dependency @types/jest to v29.5.7 by @renovate in https://github.com/reviewdog/action-golangci-lint/pull/636
chore(deps): update dependency @types/node to v20.8.10 by @renovate in https://github.com/reviewdog/action-golangci-lint/pull/637
chore(deps): update dependency eslint to v8.53.0 by @renovate in https://github.com/reviewdog/action-golangci-lint/pull/638
chore(deps): update dependency eslint-plugin-jest to v27.6.0 by @renovate in https://github.com/reviewdog/action-golangci-lint/pull/631
chore(deps): update dependency @types/semver to v7.5.4 by @renovate in https://github.com/reviewdog/action-golangci-lint/pull/628
chore(deps): update dependency @types/node to v20.9.0 by @renovate in https://github.com/reviewdog/action-golangci-lint/pull/641
chore(deps): update dependency @types/semver to v7.5.5 by @renovate in https://github.com/reviewdog/action-golangci-lint/pull/640
chore(deps): update dependency @types/jest to v29.5.8 by @renovate in https://github.com/reviewdog/action-golangci-lint/pull/639
chore(deps): update dependency prettier to v3.1.0 by @renovate in https://github.com/reviewdog/action-golangci-lint/pull/642
chore(deps): update dependency @types/node to v20.9.1 by @renovate in https://github.com/reviewdog/action-golangci-lint/pull/643
chore(deps): update dependency eslint to v8.54.0 by @renovate in https://github.com/reviewdog/action-golangci-lint/pull/644
chore(deps): update dependency typescript to v5.3.2 by @renovate in https://github.com/reviewdog/action-golangci-lint/pull/646
chore(deps): update dependency @types/jest to v29.5.9 by @renovate in https://github.com/reviewdog/action-golangci-lint/pull/647
chore(deps): update dependency @types/semver to v7.5.6 by @renovate in https://github.com/reviewdog/action-golangci-lint/pull/648
chore(deps): update dependency eslint to v8.55.0 by @renovate in https://github.com/reviewdog/action-golangci-lint/pull/650
chore(deps): update dependency typescript to v5.3.3 by @renovate in https://github.com/reviewdog/action-golangci-lint/pull/651
chore(deps): update dependency prettier to v3.1.1 by @renovate in https://github.com/reviewdog/action-golangci-lint/pull/652
chore(deps): update dependency @types/node to v20.10.4 by @renovate in https://github.com/reviewdog/action-golangci-lint/pull/645
chore(deps): update dependency @types/jest to v29.5.11 by @renovate in https://github.com/reviewdog/action-golangci-lint/pull/649
chore(deps): update github/codeql-action action to v3 by @renovate in https://github.com/reviewdog/action-golangci-lint/pull/653
chore(deps): update dependency eslint to v8.56.0 by @renovate in https://github.com/reviewdog/action-golangci-lint/pull/655
chore(deps): update dependency eslint-plugin-import to v2.29.1 by @renovate in https://github.com/reviewdog/action-golangci-lint/pull/654
chore(deps): update dependency @types/node to v20.10.5 by @renovate in https://github.com/reviewdog/action-golangci-lint/pull/656
chore(deps): update dependency @types/node to v20.10.6 by @renovate in https://github.com/reviewdog/action-golangci-lint/pull/657
chore(deps): update dependency eslint-plugin-jest to v27.6.1 by @renovate in https://github.com/reviewdog/action-golangci-lint/pull/658
chore(deps): update dependency @types/node to v20.10.7 by @renovate in https://github.com/reviewdog/action-golangci-lint/pull/659
chore(deps): update dependency @types/node to v20.10.8 by @renovate in https://github.com/reviewdog/action-golangci-lint/pull/660
chore(deps): update dependency @types/node to v20.11.0 by @renovate in https://github.com/reviewdog/action-golangci-lint/pull/662
chore(deps): update dependency prettier to v3.2.1 by @renovate in https://github.com/reviewdog/action-golangci-lint/pull/664
chore(deps): update dependency prettier to v3.2.2 by @renovate in https://github.com/reviewdog/action-golangci-lint/pull/665
chore(deps): update dependency eslint-plugin-jest to v27.6.3 by @renovate in https://github.com/reviewdog/action-golangci-lint/pull/661
fix(deps): update dependency @actions/cache to v3.2.3 by @renovate in https://github.com/reviewdog/action-golangci-lint/pull/663

Full Changelog: reviewdog/action-golangci-lint@v2.5.0...v2.5.1

Configuration

📅 Schedule: Branch creation - "on the first day of the month also on the 2nd day of the month before 5pm" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

github-actions · 2024-02-21T05:53:52Z

Included in release v0.50.1 🎉

renovate bot force-pushed the renovate/all-non-major-github-actions branch 3 times, most recently from 0a268e1 to 1aa8b40 Compare December 16, 2023 22:45

renovate bot force-pushed the renovate/all-non-major-github-actions branch 2 times, most recently from 5988000 to 5cd17e3 Compare December 29, 2023 04:03

renovate bot force-pushed the renovate/all-non-major-github-actions branch 2 times, most recently from a4f633b to e5535b6 Compare January 17, 2024 08:29

renovate bot force-pushed the renovate/all-non-major-github-actions branch from e5535b6 to ff48b44 Compare January 20, 2024 19:58

renovate bot force-pushed the renovate/all-non-major-github-actions branch 2 times, most recently from b4d6e97 to c7076ee Compare February 2, 2024 01:13

ci: update all non-major github actions

1331fe1

renovate bot force-pushed the renovate/all-non-major-github-actions branch from c7076ee to 1331fe1 Compare February 5, 2024 22:01

lindell approved these changes Feb 14, 2024

View reviewed changes

lindell merged commit 9636f39 into master Feb 14, 2024
17 checks passed

lindell deleted the renovate/all-non-major-github-actions branch February 14, 2024 12:28

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

ci: update all non-major github actions #437

ci: update all non-major github actions #437

renovate bot commented Dec 1, 2023 •

edited

Loading

github-actions bot commented Feb 21, 2024

ci: update all non-major github actions #437

ci: update all non-major github actions #437

Conversation

renovate bot commented Dec 1, 2023 • edited Loading

Release Notes

Bug Fixes

Bug Fixes

Bug Fixes

What's Changed

What's Changed

Documentation

New Contributors

What's Changed

Scorecard Result Viewer

Publishing Results

Docs

New Contributors

What's Changed

Bug Fixes

What's Changed

Fixes

Scorecard version

What's Changed

Scorecard version

Improvements

Documentation

New Contributors

What's Changed

Configuration

github-actions bot commented Feb 21, 2024

renovate bot commented Dec 1, 2023 •

edited

Loading