fix(deps): update github-actions #179
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
|
Important Review skippedBot user detected. To trigger a single review, invoke the You can disable this status message by setting the 🪧 TipsChatThere are 3 ways to chat with CodeRabbit:
SupportNeed help? Join our Discord community for assistance with any issues or questions. Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments. CodeRabbit Commands (Invoked using PR comments)
Other keywords and placeholders
CodeRabbit Configuration File (
|
|
Thank you for following the naming conventions! 🙏 |
renovate
bot
force-pushed
the
renovate/github-actions
branch
2 times, most recently
from
d05f69b to
5450344
Compare
renovate
bot
force-pushed
the
renovate/github-actions
branch
from
5450344 to
6cb5498
Compare
renovate
bot
force-pushed
the
renovate/github-actions
branch
2 times, most recently
from
2deaaf3 to
a866c06
Compare
renovate
bot
force-pushed
the
renovate/github-actions
branch
2 times, most recently
from
1d3fa19 to
03689cb
Compare
renovate
bot
force-pushed
the
renovate/github-actions
branch
4 times, most recently
from
e5c4387 to
1d8a23a
Compare
renovate
bot
force-pushed
the
renovate/github-actions
branch
2 times, most recently
from
9284250 to
c8a57d4
Compare
renovate
bot
force-pushed
the
renovate/github-actions
branch
3 times, most recently
from
8b28571 to
931cd71
Compare
renovate
bot
force-pushed
the
renovate/github-actions
branch
4 times, most recently
from
0d80895 to
bbec7c2
Compare
renovate
bot
force-pushed
the
renovate/github-actions
branch
from
bbec7c2 to
cddd11f
Compare
renovate
bot
force-pushed
the
renovate/github-actions
branch
2 times, most recently
from
ecf19cf to
cd3ac50
Compare
renovate
bot
force-pushed
the
renovate/github-actions
branch
from
cd3ac50 to
38e07d0
Compare
Signed-off-by: Renovate Bot <[email protected]>
renovate
bot
force-pushed
the
renovate/github-actions
branch
from
38e07d0 to
dbdcff5
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v4.5.0->v4.7.0v4.1.0->v4.4.0v4.6.0->v4.6.2v3.28.1->v3.28.17v2.9.1->v2.9.218.x->18.20.8e2e6dc8->dbe0650v2.4.0->v2.4.1v4.0.0->v4.1.0v2.10.4->v2.12.0v45.0.6->v45.0.9Release Notes
actions/dependency-review-action (actions/dependency-review-action)
v4.7.0Compare Source
MIT AND GPL-2.0) in allow lists (fixes #809 and probably others)OTHERin package licenses withLicenseRef-clearlydefined-OTHERso that parsing passesv4.6.0Compare Source
What's Changed
New Contributors
Full Changelog: actions/dependency-review-action@v4.5.0...v4.6.0
actions/setup-node (actions/setup-node)
v4.4.0Compare Source
What's Changed
Bug fixes:
Enhancement:
Dependency update:
New Contributors
Full Changelog: actions/setup-node@v4...v4.4.0
v4.3.0Compare Source
What's Changed
Dependency updates
New Contributors
Full Changelog: actions/setup-node@v4...v4.3.0
v4.2.0Compare Source
What's Changed
@actions/cacheto^4.0.0by @priyagupta108 in https://github.com/actions/setup-node/pull/1191New Contributors
Full Changelog: actions/setup-node@v4...v4.2.0
actions/upload-artifact (actions/upload-artifact)
v4.6.2Compare Source
What's Changed
New Contributors
Full Changelog: actions/upload-artifact@v4...v4.6.2
v4.6.1Compare Source
What's Changed
Full Changelog: actions/upload-artifact@v4...v4.6.1
github/codeql-action (github/codeql-action)
v3.28.17Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
3.28.17 - 02 May 2025
See the full CHANGELOG.md for more information.
v3.28.16Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
3.28.16 - 23 Apr 2025
See the full CHANGELOG.md for more information.
v3.28.15Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
3.28.15 - 07 Apr 2025
See the full CHANGELOG.md for more information.
v3.28.14Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
3.28.14 - 07 Apr 2025
See the full CHANGELOG.md for more information.
v3.28.13Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
3.28.13 - 24 Mar 2025
No user facing changes.
See the full CHANGELOG.md for more information.
v3.28.12Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
3.28.12 - 19 Mar 2025
build-mode: noneextractions. This should speed up workflows and avoid inconsistent alerts in some cases.See the full CHANGELOG.md for more information.
v3.28.11Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
3.28.11 - 07 Mar 2025
See the full CHANGELOG.md for more information.
v3.28.10Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
3.28.10 - 21 Feb 2025
See the full CHANGELOG.md for more information.
v3.28.9Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
3.28.9 - 07 Feb 2025
See the full CHANGELOG.md for more information.
v3.28.8Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
3.28.8 - 29 Jan 2025
See the full CHANGELOG.md for more information.
v3.28.7Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
3.28.7 - 29 Jan 2025
No user facing changes.
See the full CHANGELOG.md for more information.
v3.28.6Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
3.28.6 - 27 Jan 2025
See the full CHANGELOG.md for more information.
v3.28.5Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
3.28.5 - 24 Jan 2025
See the full CHANGELOG.md for more information.
v3.28.4Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
3.28.4 - 23 Jan 2025
No user facing changes.
See the full CHANGELOG.md for more information.
v3.28.3Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
3.28.3 - 22 Jan 2025
See the full CHANGELOG.md for more information.
v3.28.2Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
3.28.2 - 21 Jan 2025
No user facing changes.
See the full CHANGELOG.md for more information.
marocchino/sticky-pull-request-comment (marocchino/sticky-pull-request-comment)
v2.9.2Compare Source
What's Changed
Full Changelog: marocchino/sticky-pull-request-comment@v2.9.1...v2.9.2
actions/node-versions (node)
v18.20.8: 18.20.8Compare Source
Node.js 18.20.8
v18.20.7: 18.20.7Compare Source
Node.js 18.20.7
v18.20.6: 18.20.6Compare Source
Node.js 18.20.6
v18.20.5: 18.20.5Compare Source
Node.js 18.20.5
v18.20.4: 18.20.4Compare Source
Node.js 18.20.4
v18.20.3: 18.20.3Compare Source
Node.js 18.20.3
v18.20.2: 18.20.2Compare Source
Node.js 18.20.2
v18.20.1: 18.20.1Compare Source
Node.js 18.20.1
v18.20.0: 18.20.0Compare Source
Node.js 18.20.0
v18.19.1: 18.19.1Compare Source
Node.js 18.19.1
v18.19.0: 18.19.0Compare Source
Node.js 18.19.0
v18.18.2: 18.18.2Compare Source
Node.js 18.18.2
v18.18.1: 18.18.1Compare Source
Node.js 18.18.1
v18.18.0: 18.18.0Compare Source
Node.js 18.18.0
v18.17.1: 18.17.1Compare Source
Node.js 18.17.1
v18.17.0: 18.17.0Compare Source
Node.js 18.17.0
v18.16.1: 18.16.1Compare Source
Node.js 18.16.1
v18.16.0: 18.16.0Compare Source
Node.js 18.16.0
v18.15.0: 18.15.0Compare Source
Node.js 18.15.0
v18.14.2: 18.14.2Compare Source
Node.js 18.14.2
v18.14.1: 18.14.1Compare Source
Node.js 18.14.1
v18.14.0: 18.14.0Compare Source
Node.js 18.14.0
v18.13.0: 18.13.0Compare Source
Node.js 18.13.0
v18.12.1: 18.12.1Compare Source
Node.js 18.12.1
v18.12.0: 18.12.0Compare Source
Node.js 18.12.0
v18.11.0: 18.11.0Compare Source
Node.js 18.11.0
v18.10.0: 18.10.0Compare Source
Node.js 18.10.0
v18.9.1: 18.9.1Compare Source
Node.js 18.9.1
v18.9.0: 18.9.0Compare Source
Node.js 18.9.0
v18.8.0: 18.8.0Compare Source
Node.js 18.8.0
v18.7.0: 18.7.0Compare Source
Node.js 18.7.0
v18.6.0: 18.6.0Compare Source
Node.js 18.6.0
v18.5.0: 18.5.0Compare Source
Node.js 18.5.0
v18.4.0: 18.4.0Compare Source
Node.js 18.4.0
v18.3.0: 18.3.0Compare Source
Node.js 18.3.0
v18.2.0: 18.2.0Compare Source
Node.js 18.2.0
v18.1.0: 18.1.0Compare Source
Node.js 18.1.0
ossf/scorecard-action (ossf/scorecard-action)
v2.4.1Compare Source
What's Changed
file_modeinput which controls how repository files are fetched from GitHub. The default isarchive, butgitproduces the most accurate results for repositories with.gitattributesfiles at the cost of analysis speed.--file-modeby @spencerschrock in https://github.com/ossf/scorecard-action/pull/1509Docs
New Contributors
Full Changelog: ossf/scorecard-action@v2.4.0...v2.4.1
pnpm/action-setup (pnpm/action-setup)
v4.1.0Compare Source
Add support for
package.yaml#156.step-security/harden-runner (step-security/harden-runner)
v2.12.0Compare Source
What's Changed
A new option,
disable-sudo-and-containers, is now available to replace thedisable-sudo policy, addressing Docker-based privilege escalation (CVE-2025-32955). More details can be found in this blog post.New detections have been added based on insights from the tj-actions and reviewdog actions incidents.
Full Changelog: step-security/harden-runner@v2...v2.12.0
v2.11.1Compare Source
What's Changed
Full Changelog: step-security/harden-runner@v2...v2.11.1
v2.11.0Compare Source
What's Changed
Release v2.11.0 in #498
Harden-Runner Enterprise tier now supports the use of eBPF for DNS resolution and network call monitoring
Full Changelog: step-security/harden-runner@v2...v2.11.0
tj-actions/changed-files (tj-actions/changed-files)
v45.0.9Compare Source
What's Changed
Configuration
📅 Schedule: Branch creation - "after 10:00 before 19:00 every weekday except after 13:00 before 14:00" in timezone Europe/Berlin, Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.