Update all dependencies #312

renovate · 2024-09-19T07:45:28Z

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	minor	`v4.1.7` -> `v4.2.2`
actions/checkout	action	digest	`692973e` -> `11bd719`
actions/upload-artifact	action	digest	`5076954` -> `65c4c4a`
cgr.dev/chainguard/glibc-dynamic	final	digest	`cabf47e` -> `d7dd847`
cgr.dev/chainguard/go	stage	digest	`a3b4696` -> `3a47103`
github.com/arangodb/go-driver/v2	require	patch	`v2.1.0` -> `v2.1.2`
github.com/go-resty/resty/v2	require	minor	`v2.15.0` -> `v2.16.4`
github.com/gofiber/fiber/v2	require	patch	`v2.52.5` -> `v2.52.6`
github.com/gofiber/swagger	require	patch	`v1.1.0` -> `v1.1.1`
github.com/ortelius/scec-commons	require	patch	`v0.1.45` -> `v0.1.46`
github.com/swaggo/swag	require	patch	`v1.16.3` -> `v1.16.4`
github/codeql-action	action	minor	`v3.26.7` -> `v3.28.2`
ortelius/workflow-toolkit	action	digest	`b874237` -> `f483857`
oxsecurity/megalinter	action	digest	`c217fe8` -> `1fc052d`
peter-evans/create-pull-request	action	digest	`5e91468` -> `67ccf78`
stefanzweifel/git-auto-commit-action	action	digest	`8621497` -> `e348103`
step-security/harden-runner	action	patch	`v2.10.1` -> `v2.10.4`

Release Notes

actions/checkout (actions/checkout)

`v4.2.2`

Compare Source

url-helper.ts now leverages well-known environment variables by @jww3 in https://github.com/actions/checkout/pull/1941
Expand unit test coverage for isGhes by @jww3 in https://github.com/actions/checkout/pull/1946

`v4.2.1`

Compare Source

Check out other refs/* by commit if provided, fall back to ref by @orhantoy in https://github.com/actions/checkout/pull/1924

`v4.2.0`

Compare Source

Add Ref and Commit outputs by @lucacome in https://github.com/actions/checkout/pull/1180
Dependency updates by @dependabot- https://github.com/actions/checkout/pull/1777, https://github.com/actions/checkout/pull/1872

arangodb/go-driver (github.com/arangodb/go-driver/v2)

`v2.1.2`

Compare Source

Expose NewType method
Connection configuration helper
Adjust Cursor options
Switch to Go 1.22.8
Remove deprecated context functions
Fix Error Handler in CreateCollectionWithOptions

`v2.1.1`

Compare Source

v2.1.1

go-resty/resty (github.com/go-resty/resty/v2)

`v2.16.4`

Compare Source

Release Notes

Bug Fixes

fix: retry not reset multipartField reader by @wxip in https://github.com/go-resty/resty/pull/953
fix: auth scheme override with empty value #954 by @jeevatkm in https://github.com/go-resty/resty/pull/956

Documentation

chore(release): version bump and readme update by @jeevatkm in https://github.com/go-resty/resty/pull/958

New Contributors

@wxip made their first contribution in https://github.com/go-resty/resty/pull/953

Full Changelog: go-resty/resty@v2.16.3...v2.16.4

`v2.16.3`

Compare Source

Release Notes

chore(deps, release): update go mod, version bump and readme update by @jeevatkm in https://github.com/go-resty/resty/pull/946

Full Changelog: go-resty/resty@v2.16.2...v2.16.3

`v2.16.2`

Compare Source

Release Notes

Bug Fixes

fix: buffer reuse and back to pool and release v2.16.2 by @jeevatkm in https://github.com/go-resty/resty/pull/919

Full Changelog: go-resty/resty@v2.16.1...v2.16.2

`v2.16.1`

Compare Source

Release Notes

Bug Fixes

fix: buffer reset issue in io.Reader with content length enabled and release v2.16.1 by @jeevatkm in https://github.com/go-resty/resty/pull/918

Full Changelog: go-resty/resty@v2.16.0...v2.16.1

`v2.16.0`

Compare Source

Release Notes

New Features

feat: option to set URL query params without encoding by @jeevatkm in https://github.com/go-resty/resty/pull/885

Enhancements

Enhance buildCurlRequest for unit test by @yaziedda in https://github.com/go-resty/resty/pull/884
Code optimizations by @jeevatkm in https://github.com/go-resty/resty/pull/892

Documentation

release: version bump and readme update for v2.16.0 by @jeevatkm in https://github.com/go-resty/resty/pull/907

New Contributors

@yaziedda made their first contribution in https://github.com/go-resty/resty/pull/884

Full Changelog: go-resty/resty@v2.15.3...v2.16.0

`v2.15.3`

Compare Source

Release Notes

Bug Fixes

fix: 'invalid memory address or nil pointer dereference' in response logger by @matlockx in https://github.com/go-resty/resty/pull/872

Release Notes

Bug Fixes

fix: do not use errors.Join, just use custom error approach by @jeevatkm in https://github.com/go-resty/resty/pull/863

Documentation

release: version bump and readme update for v2.15.2 by @jeevatkm in https://github.com/go-resty/resty/pull/864

Full Changelog: go-resty/resty@v2.15.1...v2.15.2

`v2.15.1`

Compare Source

Release Notes

Bug Fixes

fix: do not parse response debug log with correct text by @jeevatkm in https://github.com/go-resty/resty/pull/858

Documentation

for v2.15.1 release by @jeevatkm in https://github.com/go-resty/resty/pull/859

Full Changelog: go-resty/resty@v2.15.0...v2.15.1

gofiber/fiber (github.com/gofiber/fiber/v2)

`v2.52.6`

Compare Source

🐛 Bug Fixes

Use Content-Length for bytesReceived and bytesSent tags in Logger Middleware in v2 by @gaby in https://github.com/gofiber/fiber/pull/3067
Fix handle un-matched open brackets in the query params by @dojutsu-user in https://github.com/gofiber/fiber/pull/3121
Middleware/CORS: Remove Scheme Restriction by @zingi in https://github.com/gofiber/fiber/pull/3168
Respect Immutable config for Body() by @nickajacks1 in https://github.com/gofiber/fiber/pull/3246
Support Square Bracket Notation in Multipart Form data by @ReneWerner87 in https://github.com/gofiber/fiber/pull/3268

📚 Documentation

Add detailed documentation for the templates guide by @grivera64 in https://github.com/gofiber/fiber/pull/3113

🛠️ Maintenance

Update benchmark-action to v1.20.3 by @gaby in https://github.com/gofiber/fiber/pull/3084
Add CODEOWNERS file by @gaby in https://github.com/gofiber/fiber/pull/3124
Update dependencies by @gaby in https://github.com/gofiber/fiber/pull/3254
Add parallel benchmark for Next() by @gaby in https://github.com/gofiber/fiber/pull/3259

Full Changelog: gofiber/fiber@v2.52.5...v2.52.6

gofiber/swagger (github.com/gofiber/swagger)

`v1.1.1`

Compare Source

🧹 Updates

build(deps): bump github.com/gofiber/fiber/v2 from 2.52.5 to 2.52.6 (#107)
build(deps): bump github.com/swaggo/files/v2 from 2.0.1 to 2.0.2 (#108)
build(deps): bump github.com/swaggo/swag from 1.16.3 to 1.16.4 (#101)
build(deps): bump dependabot/fetch-metadata from 2.1.0 to 2.2.0 (#98)
build(deps): bump github.com/swaggo/files/v2 from 2.0.0 to 2.0.1 (#97)

Full Changelog: gofiber/swagger@v1.1.0...v1.1.1

ortelius/scec-commons (github.com/ortelius/scec-commons)

`v0.1.46`

Compare Source

swaggo/swag (github.com/swaggo/swag)

`v1.16.4`

Compare Source

Changelog

85254b4 Added multiline support for @description attribute for securityDefinitions (#1786)
7204462 Added suport for parsing comments inside of function bodies (#1824)
d323b48 Feat: Add support for parenthesis in router patterns (#1859)
15dae35 Feat: multi-arch docker image (#1756)
83fe3ca Fix generics used with function scoped types (#1883)
ff50cd6 Fix global overrides for any/interface ref types (#1835)
1d730c5 Fix param comment escaping issue (#1890)
697572a Fixes Issue 1829 (#1830)
28de14c Flags to parse internal and dependency package (#1894)
4c2f8dd Handle case of empty GOROOT (#1798)
87e7d9c Update docker go build version to 1.21 (#1758)
4fd8a36 Update docs for request and response headers (#1825)
56fde5c Update operation.go (#1753)
807dd1f [Issue 1812] fix misalignment in expected.json and api.go messing with parser_test (#1836)
91624ad add support for "title" tag (#1762)
f32d4d3 adds support for complex types with function scope (#1813)
c7f1cd8 adds support for pointer function scoped fields (#1841)
8a47dcb bump go version (#1797)
0834357 chore(deps): bump golang.org/x/net from 0.17.0 to 0.23.0 (#1793)
1bb1445 chore(deps): bump golang.org/x/net in /example/celler (#1794)
6aa6613 chore(deps): bump golang.org/x/net in /example/go-module-support (#1795)
d5af957 chore(deps): bump golang.org/x/net in /example/markdown (#1792)
0368d7d chore(deps): bump golang.org/x/net in /example/object-map-example (#1796)
b8662de chore(deps): bump google.golang.org/protobuf (#1773)
4a11e23 chore(deps): bump google.golang.org/protobuf (#1774)
937c239 chore(deps): bump google.golang.org/protobuf in /example/celler (#1775)
103ac42 chore: Update ci.yml (#1902)
90aa46f chore: fix some typos in comments (#1788)
e55c557 feat: read from stdin, write to stdout (#1831) (#1832)
fd2fa83 fix issue: #1780: filter $GOROOT path (#1827)
10030b0 fix parse nested structs and aliases (#1866)
7159b0f fix: failing assert in enums test on 32bit (#1634)
928264c fix: remove dropped tags from general infos (#1764)
a74d34c fix：parse all field names declared in a row (#1872)
0b9e347 new release (#1901)
a3c6d12 support markdown description for declaration (#1893)
9069105 update README (#1856)

github/codeql-action (github/codeql-action)

`v3.28.2`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.2 - 21 Jan 2025

No user facing changes.

See the full CHANGELOG.md for more information.

`v3.28.1`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.1 - 10 Jan 2025

CodeQL Action v2 is now deprecated, and is no longer updated or supported. For better performance, improved security, and new features, upgrade to v3. For more information, see this changelog post. #2677
Update default CodeQL bundle version to 2.20.1. #2678

See the full CHANGELOG.md for more information.

`v3.28.0`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.28.0 - 20 Dec 2024

Bump the minimum CodeQL bundle version to 2.15.5. #2655
Don't fail in the unusual case that a file is on the search path. #2660.

See the full CHANGELOG.md for more information.

`v3.27.9`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.27.9 - 12 Dec 2024

No user facing changes.

See the full CHANGELOG.md for more information.

`v3.27.8`

Compare Source

`v3.27.7`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.27.7 - 10 Dec 2024

We are rolling out a change in December 2024 that will extract the CodeQL bundle directly to the toolcache to improve performance. #2631
Update default CodeQL bundle version to 2.20.0. #2636

See the full CHANGELOG.md for more information.

`v3.27.6`

Compare Source

`v3.27.5`

Compare Source

`v3.27.4`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.27.4 - 14 Nov 2024

No user facing changes.

See the full CHANGELOG.md for more information.

`v3.27.3`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.27.3 - 12 Nov 2024

No user facing changes.

See the full CHANGELOG.md for more information.

`v3.27.2`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.27.2 - 12 Nov 2024

Fixed an issue where setting up the CodeQL tools would sometimes fail with the message "Invalid value 'undefined' for header 'authorization'". #2590

See the full CHANGELOG.md for more information.

`v3.27.1`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.27.1 - 08 Nov 2024

The CodeQL Action now downloads bundles compressed using Zstandard on GitHub Enterprise Server when using Linux or macOS runners. This speeds up the installation of the CodeQL tools. This feature is already available to GitHub.com users. #2573
Update default CodeQL bundle version to 2.19.3. #2576

See the full CHANGELOG.md for more information.

`v3.27.0`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.27.0 - 22 Oct 2024

Bump the minimum CodeQL bundle version to 2.14.6. #2549
Fix an issue where the upload-sarif Action would fail with "upload-sarif post-action step failed: Input required and not supplied: token" when called in a composite Action that had a different set of inputs to the ones expected by the upload-sarif Action. #2557
Update default CodeQL bundle version to 2.19.2. #2552

See the full CHANGELOG.md for more information.

`v3.26.13`

Compare Source

`v3.26.12`

Compare Source

`v3.26.11`

Compare Source

`v3.26.10`

Compare Source

`v3.26.9`

Compare Source

`v3.26.8`

Compare Source

step-security/harden-runner (step-security/harden-runner)

`v2.10.4`

Compare Source

What's Changed

Fixed a potential Harden-Runner post step failure that could occur when printing agent service logs. The fix gracefully handles failures without failing the post step.

Full Changelog: step-security/harden-runner@v2...v2.10.4

`v2.10.3`

Compare Source

What's Changed

Fixed an issue where DNS requests using uppercase characters (e.g., EXAMPLE.com) were blocked even when the domain was present in the allowed list. This update standardizes domain names to lowercase for consistent comparison.

Full Changelog: step-security/harden-runner@v2...v2.10.3

`v2.10.2`

Compare Source

What's Changed

Fixes low-severity command injection weaknesses
The advisory is here: GHSA-g85v-wf27-67xc
Bug fix to improve detection of whether Harden-Runner is running in a container

Full Changelog: step-security/harden-runner@v2...v2.10.2

Configuration

📅 Schedule: Branch creation - "every 1 hours every weekday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate bot force-pushed the renovate/all branch from 6227814 to f6cf18c Compare September 19, 2024 10:20

renovate bot changed the title ~~Update module github.com/go-resty/resty/v2 to v2.15.1~~ Update all dependencies Sep 19, 2024

renovate bot force-pushed the renovate/all branch 8 times, most recently from a3a9f14 to 4ceedef Compare September 27, 2024 21:16

renovate bot force-pushed the renovate/all branch 6 times, most recently from 7257d96 to 4ec0678 Compare October 3, 2024 21:46

renovate bot force-pushed the renovate/all branch 7 times, most recently from 1f2e906 to 5ea6f42 Compare October 11, 2024 15:40

renovate bot force-pushed the renovate/all branch 7 times, most recently from 1f6ebd5 to a6546a7 Compare October 19, 2024 01:16

renovate bot force-pushed the renovate/all branch 4 times, most recently from efb6fee to 9f6334c Compare December 21, 2024 02:25

renovate bot force-pushed the renovate/all branch 6 times, most recently from d5d616e to f220d4f Compare January 3, 2025 01:51

renovate bot force-pushed the renovate/all branch 9 times, most recently from 86c3b70 to 6478ee6 Compare January 10, 2025 23:06

renovate bot force-pushed the renovate/all branch 5 times, most recently from 774c2a8 to 87240f6 Compare January 17, 2025 00:23

renovate bot force-pushed the renovate/all branch 4 times, most recently from 923405a to 2612aca Compare January 21, 2025 01:42

Update all dependencies

4465310

renovate bot force-pushed the renovate/all branch from 2612aca to 4465310 Compare January 21, 2025 18:27

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Update all dependencies #312

Update all dependencies #312

renovate bot commented Sep 19, 2024 •

edited

Loading

Update all dependencies #312

Are you sure you want to change the base?

Update all dependencies #312

Conversation

renovate bot commented Sep 19, 2024 • edited Loading

Release Notes

Release Notes

Bug Fixes

Documentation

New Contributors

Release Notes

Release Notes

Bug Fixes

Release Notes

Bug Fixes

Release Notes

New Features

Enhancements

Documentation

New Contributors

Release Notes

Bug Fixes

Documentation

New Contributors

Release Notes

Bug Fixes

Documentation

Release Notes

Bug Fixes

Documentation

🐛 Bug Fixes

📚 Documentation

🛠️ Maintenance

🧹 Updates

Changelog

CodeQL Action Changelog

3.28.2 - 21 Jan 2025

CodeQL Action Changelog

3.28.1 - 10 Jan 2025

CodeQL Action Changelog

3.28.0 - 20 Dec 2024

CodeQL Action Changelog

3.27.9 - 12 Dec 2024

CodeQL Action Changelog

3.27.7 - 10 Dec 2024

CodeQL Action Changelog

3.27.4 - 14 Nov 2024

CodeQL Action Changelog

3.27.3 - 12 Nov 2024

CodeQL Action Changelog

3.27.2 - 12 Nov 2024

CodeQL Action Changelog

3.27.1 - 08 Nov 2024

CodeQL Action Changelog

3.27.0 - 22 Oct 2024

What's Changed

What's Changed

What's Changed

Configuration

renovate bot commented Sep 19, 2024 •

edited

Loading