Skip to content

chore(deps): update all dependencies #771

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

chore(deps): update all dependencies #771

wants to merge 1 commit into from

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Feb 20, 2025

This PR contains the following updates:

Package Type Update Change
actions/cache action patch v4.2.1 -> v4.2.3
actions/setup-go action minor v5.3.0 -> v5.5.0
actions/upload-artifact action patch v4.6.0 -> v4.6.2
anchore/sbom-action action minor v0.18.0 -> v0.19.0
cgr.dev/chainguard/static final digest 853bfd4 -> 8d1a963
docker/login-action action minor v3.3.0 -> v3.4.0
docker/setup-qemu-action action minor v3.4.0 -> v3.6.0
github/codeql-action action patch v3.28.9 -> v3.28.17
go (source) toolchain patch 1.24.0 -> 1.24.3
go uses-with minor 1.21.x -> 1.24.x
goreleaser/goreleaser-action action minor v6.2.1 -> v6.3.0
ossf/scorecard-action action patch v2.4.0 -> v2.4.1
sigstore/cosign-installer action patch v3.8.0 -> v3.8.2

Release Notes

actions/cache (actions/cache)

v4.2.3

Compare Source

What's Changed
New Contributors

Full Changelog: actions/cache@v4.2.2...v4.2.3

v4.2.2

Compare Source

What's Changed

[!IMPORTANT]
As a reminder, there were important backend changes to release v4.2.0, see those release notes and the announcement for more details.

Full Changelog: actions/cache@v4.2.1...v4.2.2

actions/setup-go (actions/setup-go)

v5.5.0

Compare Source

What's Changed
Bug fixes:
Dependency updates:
New Contributors

Full Changelog: actions/setup-go@v5...v5.5.0

v5.4.0

Compare Source

What's Changed
Dependency updates :
New Contributors

Full Changelog: actions/setup-go@v5...v5.4.0

actions/upload-artifact (actions/upload-artifact)

v4.6.2

Compare Source

What's Changed
New Contributors

Full Changelog: actions/upload-artifact@v4...v4.6.2

v4.6.1

Compare Source

What's Changed

Full Changelog: actions/upload-artifact@v4...v4.6.1

anchore/sbom-action (anchore/sbom-action)

v0.19.0

Compare Source

Changes in v0.19.0

  • chore(deps): update Syft to v1.23.0 (#​521)
  • chore(deps): bump peter-evans/create-pull-request from 7.0.6 to 7.0.8 (#​519)
  • chore(deps): bump cross-spawn (#​514)
docker/login-action (docker/login-action)

v3.4.0

Compare Source

Full Changelog: docker/login-action@v3.3.0...v3.4.0

docker/setup-qemu-action (docker/setup-qemu-action)

v3.6.0

Compare Source

Full Changelog: docker/setup-qemu-action@v3.5.0...v3.6.0

v3.5.0

Compare Source

Full Changelog: docker/setup-qemu-action@v3.4.0...v3.5.0

github/codeql-action (github/codeql-action)

v3.28.17

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.17 - 02 May 2025
  • Update default CodeQL bundle version to 2.21.2. #​2872

See the full CHANGELOG.md for more information.

v3.28.16

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.16 - 23 Apr 2025
  • Update default CodeQL bundle version to 2.21.1. #​2863

See the full CHANGELOG.md for more information.

v3.28.15

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.15 - 07 Apr 2025

  • Fix bug where the action would fail if it tried to produce a debug artifact with more than 65535 files. #​2842

See the full CHANGELOG.md for more information.

v3.28.14

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.14 - 07 Apr 2025

  • Update default CodeQL bundle version to 2.21.0. #​2838

See the full CHANGELOG.md for more information.

v3.28.13

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.13 - 24 Mar 2025

No user facing changes.

See the full CHANGELOG.md for more information.

v3.28.12

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.12 - 19 Mar 2025
  • Dependency caching should now cache more dependencies for Java build-mode: none extractions. This should speed up workflows and avoid inconsistent alerts in some cases.
  • Update default CodeQL bundle version to 2.20.7. #​2810

See the full CHANGELOG.md for more information.

v3.28.11

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.11 - 07 Mar 2025
  • Update default CodeQL bundle version to 2.20.6. #​2793

See the full CHANGELOG.md for more information.

v3.28.10

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.10 - 21 Feb 2025

  • Update default CodeQL bundle version to 2.20.5. #​2772
  • Address an issue where the CodeQL Bundle would occasionally fail to decompress on macOS. #​2768

See the full CHANGELOG.md for more information.

golang/go (go)

v1.24.3

v1.24.2

v1.24.1

actions/go-versions (go)

v1.24.3: 1.24.3

Compare Source

Go 1.24.3

v1.24.2: 1.24.2

Compare Source

Go 1.24.2

v1.24.1: 1.24.1

Compare Source

Go 1.24.1

v1.24.0: 1.24.0

Compare Source

Go 1.24.0

v1.23.9: 1.23.9

Compare Source

Go 1.23.9

v1.23.8: 1.23.8

Compare Source

Go 1.23.8

v1.23.7: 1.23.7

Compare Source

Go 1.23.7

v1.23.6: 1.23.6

Compare Source

Go 1.23.6

v1.23.5: 1.23.5

Compare Source

Go 1.23.5

v1.23.4: 1.23.4

Compare Source

Go 1.23.4

v1.23.3: 1.23.3

Compare Source

Go 1.23.3

v1.23.2: 1.23.2

Compare Source

Go 1.23.2

v1.23.1: 1.23.1

Compare Source

Go 1.23.1

v1.23.0: 1.23.0

Compare Source

Go 1.23.0

v1.22.12: 1.22.12

Compare Source

Go 1.22.12

v1.22.11: 1.22.11

Compare Source

Go 1.22.11

v1.22.10: 1.22.10

Compare Source

Go 1.22.10

v1.22.9: 1.22.9

Compare Source

Go 1.22.9

v1.22.8: 1.22.8

Compare Source

Go 1.22.8

v1.22.7: 1.22.7

Compare Source

Go 1.22.7

v1.22.6: 1.22.6

Compare Source

Go 1.22.6

v1.22.5: 1.22.5

Compare Source

Go 1.22.5

v1.22.4: 1.22.4

Compare Source

Go 1.22.4

v1.22.3: 1.22.3

Compare Source

Go 1.22.3

v1.22.2: 1.22.2

Compare Source

Go 1.22.2

v1.22.1: 1.22.1

Compare Source

Go 1.22.1

v1.22.0: 1.22.0

Compare Source

Go 1.22.0

goreleaser/goreleaser-action (goreleaser/goreleaser-action)

v6.3.0

Compare Source

Full Changelog: goreleaser/goreleaser-action@v6.2.1...v6.3.0

ossf/scorecard-action (ossf/scorecard-action)

v2.4.1

Compare Source

What's Changed

Docs

New Contributors

sigstore/cosign-installer (sigstore/cosign-installer)

v3.8.2

Compare Source

What's Changed

Full Changelog: sigstore/cosign-installer@v3...v3.8.2

v3.8.1

Compare Source

What's Changed

Full Changelog: sigstore/cosign-installer@v3...v3.8.1


Configuration

📅 Schedule: Branch creation - At 12:00 AM through 04:59 AM and 10:00 PM through 11:59 PM, Monday through Friday ( * 0-4,22-23 * * 1-5 ), Only on Sunday and Saturday ( * * * * 0,6 ) in timezone Europe/Berlin, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot requested a review from dirien as a code owner February 20, 2025 23:04
@renovate renovate bot changed the title chore(deps): update sigstore/cosign-installer action to v3.8.1 chore(deps): update all dependencies Feb 21, 2025
@renovate renovate bot force-pushed the renovate/all branch 3 times, most recently from d50d975 to b31cfdb Compare February 26, 2025 16:26
@renovate renovate bot force-pushed the renovate/all branch 4 times, most recently from 50b1e86 to 1756a8e Compare March 4, 2025 21:39
Copy link
Contributor Author

renovate bot commented Mar 4, 2025

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum
Command failed: install-tool golang 1.24.0

@renovate renovate bot force-pushed the renovate/all branch 4 times, most recently from 64e903e to b11093b Compare March 12, 2025 02:37
@renovate renovate bot force-pushed the renovate/all branch 6 times, most recently from 6d878bb to a7274d7 Compare March 19, 2025 22:19
@renovate renovate bot force-pushed the renovate/all branch 2 times, most recently from a241b9e to 8a9b1b6 Compare March 30, 2025 14:38
@pull-request-size pull-request-size bot added size/M and removed size/S labels Mar 30, 2025
@renovate renovate bot force-pushed the renovate/all branch 3 times, most recently from 9458bea to a02009c Compare April 7, 2025 22:06
@renovate renovate bot force-pushed the renovate/all branch 3 times, most recently from defe774 to b712f90 Compare April 24, 2025 22:31
@renovate renovate bot force-pushed the renovate/all branch 4 times, most recently from bb98952 to 5af7f17 Compare May 7, 2025 22:23
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate renovate bot force-pushed the renovate/all branch from 5af7f17 to 52b9cfb Compare May 8, 2025 05:41
Copy link

sonarqubecloud bot commented May 8, 2025

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant