Skip to content

chore(deps): update all non-major dependencies #322

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 2 commits into from
May 16, 2024

Conversation

renovate-bot
Copy link
Contributor

@renovate-bot renovate-bot commented May 1, 2024

Mend Renovate

This PR contains the following updates:

Package Type Update Change
actions/checkout action patch v4.1.4 -> v4.1.6
actions/dependency-review-action action minor v4.2.5 -> v4.3.2
actions/setup-go action patch v5.0.0 -> v5.0.1
github/codeql-action action patch v3.25.3 -> v3.25.5
ossf/scorecard-action action patch v2.3.1 -> v2.3.3
step-security/harden-runner action patch v2.7.0 -> v2.7.1

Release Notes

actions/checkout (actions/checkout)

v4.1.6

Compare Source

v4.1.5

Compare Source

What's Changed

Full Changelog: actions/checkout@v4.1.4...v4.1.5

actions/dependency-review-action (actions/dependency-review-action)

v4.3.2

Compare Source

What's Changed

Full Changelog: actions/dependency-review-action@v4.3.1...v4.3.2

v4.3.1

Compare Source

What's Changed

This release fixes some bugs related to package-url parsing that were introduced in 4.3.0. See https://github.com/actions/dependency-review-action/pull/753.

Full Changelog: actions/dependency-review-action@V4.3.0...v4.3.1

v4.3.0

Compare Source

New Features

  • The deny-packages option can now be used without a version number to exclude all versions of a package.

What's Changed

New Contributors

Full Changelog: actions/dependency-review-action@v4.2.5...V4.3.0

actions/setup-go (actions/setup-go)

v5.0.1

Compare Source

What's Changed

New Contributors

Full Changelog: actions/setup-go@v5.0.0...v5.0.1

github/codeql-action (github/codeql-action)

v3.25.5

Compare Source

v3.25.4

Compare Source

ossf/scorecard-action (ossf/scorecard-action)

v2.3.3

Compare Source

[!NOTE]
There is no v2.3.2 release as a step was skipped in the release process. This was fixed and re-released under the v2.3.3 tag

What's Changed

For a full changelist of what these include, see the v5.0.0-rc1 and v5.0.0-rc2 release notes.

Documentation

Full Changelog: ossf/scorecard-action@v2.3.1...v2.3.3

v2.3.2

Compare Source

step-security/harden-runner (step-security/harden-runner)

v2.7.1

Compare Source

What's Changed

Release v2.7.1 by @​varunsh-coder, @​h0x0er, @​ashishkurmi in https://github.com/step-security/harden-runner/pull/397
This release:

  • Improves the capability to inspect outbound HTTPS traffic on GitHub-hosted and self-hosted VM runners
  • Updates README to add link to case study video on how Harden-Runner detected a supply chain attack on a Google open-source project
  • Addresses minor bugs

Full Changelog: step-security/harden-runner@v2.7.0...v2.7.1


Configuration

📅 Schedule: Branch creation - "before 4am on the first day of the month" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

@renovate-bot renovate-bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from abaa3c9 to de839bd Compare May 8, 2024 23:14
@renovate-bot renovate-bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 85f8707 to 5aa7b09 Compare May 13, 2024 17:36
@renovate-bot renovate-bot force-pushed the renovate/all-minor-patch branch from 5aa7b09 to 8552fb2 Compare May 16, 2024 18:43
@jrmfg jrmfg assigned jrmfg and unassigned HKWinterhalter May 16, 2024
@jrmfg jrmfg merged commit 0ecd985 into GoogleCloudPlatform:main May 16, 2024
46 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants