fix(deps): update all dependencies j:cdx-227 #171
Merged
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
19.5.0->19.8.17.1.2->7.2.2v4.2.2->v4.3.011bd719->08eba0bv4.5.0->v4.7.1v4.1.0->v4.4.0v4.4.3->v4.6.2v2.4.0->v2.4.2v2.10.1->v2.13.02.43.0->2.46.13.9.9->3.9.111.17.1->1.19.05.14.2->5.19.02.13.0->2.14.03.0.2->3.2.02.11.0->2.13.12.24.1->2.25.13.2.7->3.2.83.11.1->3.11.3[skip release]
Release Notes
conventional-changelog/commitlint (@commitlint/config-conventional)
v19.8.1Compare Source
Note: Version bump only for package @commitlint/config-conventional
v19.8.0Compare Source
Performance Improvements
node:prefix to bypass require.cache call for builtins (#4302) (0cd8f41)19.7.1 (2025-02-02)
Note: Version bump only for package @commitlint/config-conventional
v19.7.1Compare Source
Note: Version bump only for package @commitlint/config-conventional
v19.6.0Compare Source
Note: Version bump only for package @commitlint/config-conventional
octokit/auth-app.js (@octokit/auth-app)
v7.2.2Compare Source
Bug Fixes
v7.2.1Compare Source
Bug Fixes
v7.2.0Compare Source
Features
v7.1.5Compare Source
Bug Fixes
v7.1.4Compare Source
Bug Fixes
v7.1.3Compare Source
Bug Fixes
actions/checkout (actions/checkout)
v4.3.0Compare Source
What's Changed
New Contributors
Full Changelog: actions/checkout@v4...v4.3.0
actions/setup-java (actions/setup-java)
v4.7.1Compare Source
What's Changed
Documentation changes
Dependency updates:
Full Changelog: actions/setup-java@v4...v4.7.1
v4.7.0Compare Source
What's Changed
cachefrom version 3.2.4 to 4.0.0 by @aparnajyothi-y in https://github.com/actions/setup-java/pull/724@actions/http-clientfrom 2.2.1 to 2.2.3 by @dependabot in https://github.com/actions/setup-java/pull/728actions/publish-immutable-actionfrom 0.0.3 to 0.0.4 by @dependabot in https://github.com/actions/setup-java/pull/727@types/jestfrom 29.5.12 to 29.5.14 by @dependabot in https://github.com/actions/setup-java/pull/729New Contributors
Full Changelog: actions/setup-java@v4...v4.7.0
v4.6.0Compare Source
What's Changed
Add-ons:
Bug fixes:
New Contributors
Full Changelog: actions/setup-java@v4...v4.6.0
actions/setup-node (actions/setup-node)
v4.4.0Compare Source
What's Changed
Bug fixes:
Enhancement:
Dependency update:
New Contributors
Full Changelog: actions/setup-node@v4...v4.4.0
v4.3.0Compare Source
What's Changed
Dependency updates
New Contributors
Full Changelog: actions/setup-node@v4...v4.3.0
v4.2.0Compare Source
What's Changed
@actions/cacheto^4.0.0by @priyagupta108 in https://github.com/actions/setup-node/pull/1191New Contributors
Full Changelog: actions/setup-node@v4...v4.2.0
actions/upload-artifact (actions/upload-artifact)
v4.6.2Compare Source
What's Changed
New Contributors
Full Changelog: actions/upload-artifact@v4...v4.6.2
v4.6.1Compare Source
What's Changed
Full Changelog: actions/upload-artifact@v4...v4.6.1
v4.6.0Compare Source
What's Changed
Full Changelog: actions/upload-artifact@v4...v4.6.0
v4.5.0Compare Source
What's Changed
Node.jsversion in action by @hamirmahal in https://github.com/actions/upload-artifact/pull/578artifact-digestoutput by @bdehamer in https://github.com/actions/upload-artifact/pull/656New Contributors
Full Changelog: actions/upload-artifact@v4.4.3...v4.5.0
ossf/scorecard-action (ossf/scorecard-action)
v2.4.2Compare Source
What's Changed
This update bumps the Scorecard version to the v5.2.1 release. For a complete list of changes, please refer to the Scorecard v5.2.0 and v5.2.1 release notes.
Full Changelog: ossf/scorecard-action@v2.4.1...v2.4.2
v2.4.1Compare Source
What's Changed
file_modeinput which controls how repository files are fetched from GitHub. The default isarchive, butgitproduces the most accurate results for repositories with.gitattributesfiles at the cost of analysis speed.--file-modeby @spencerschrock in https://github.com/ossf/scorecard-action/pull/1509Docs
New Contributors
Full Changelog: ossf/scorecard-action@v2.4.0...v2.4.1
step-security/harden-runner (step-security/harden-runner)
v2.13.0Compare Source
What's Changed
Full Changelog: step-security/harden-runner@v2...v2.13.0
v2.12.2Compare Source
What's Changed
Added HTTPS Monitoring for additional destinations - *.githubusercontent.com
Bug fixes:
Full Changelog: step-security/harden-runner@v2...v2.12.2
v2.12.1Compare Source
What's Changed
Full Changelog: step-security/harden-runner@v2...v2.12.1
v2.12.0Compare Source
What's Changed
A new option,
disable-sudo-and-containers, is now available to replace thedisable-sudo policy, addressing Docker-based privilege escalation (CVE-2025-32955). More details can be found in this blog post.New detections have been added based on insights from the tj-actions and reviewdog actions incidents.
Full Changelog: step-security/harden-runner@v2...v2.12.0
v2.11.1Compare Source
What's Changed
Full Changelog: step-security/harden-runner@v2...v2.11.1
v2.11.0Compare Source
What's Changed
Release v2.11.0 in #498
Harden-Runner Enterprise tier now supports the use of eBPF for DNS resolution and network call monitoring
Full Changelog: step-security/harden-runner@v2...v2.11.0
v2.10.4Compare Source
What's Changed
Fixed a potential Harden-Runner post step failure that could occur when printing agent service logs. The fix gracefully handles failures without failing the post step.
Full Changelog: step-security/harden-runner@v2...v2.10.4
v2.10.3Compare Source
What's Changed
Fixed an issue where DNS requests using uppercase characters (e.g., EXAMPLE.com) were blocked even when the domain was present in the allowed list. This update standardizes domain names to lowercase for consistent comparison.
Full Changelog: step-security/harden-runner@v2...v2.10.3
v2.10.2Compare Source
What's Changed
Fixes low-severity command injection weaknesses
The advisory is here: GHSA-g85v-wf27-67xc
Bug fix to improve detection of whether Harden-Runner is running in a container
Full Changelog: step-security/harden-runner@v2...v2.10.2
diffplug/spotless (com.diffplug.spotless:spotless-maven-plugin)
v2.45.0Added
gofmt(#2001)v2.44.0Added
DiffMessageFormatterwhich allows to retrieve diffs with their line numbers (#1960)Fixed
bufinvocation. (#1976)Changed
ktlintversion to latest1.0.1->1.1.1. (#1973)googleJavaFormatversion to latest1.18.1->1.19.2. (#1971)diktatversion to latest1.2.5->2.0.0. (#1972)apache/commons-codec (commons-codec:commons-codec)
v1.19.0The Apache Commons Codec team is pleased to announce the release of Apache Commons Codec 1.19.0.
The Apache Commons Codec component contains encoders and decoders for
formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these
widely used encoders and decoders, the codec package also maintains a
collection of phonetic encoding utilities.
This is a feature and maintenance release. Java 8 or later is required.
v1.17.2The Apache Commons Codec component contains encoders and decoders for
formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these
widely used encoders and decoders, the codec package also maintains a
collection of phonetic encoding utilities.
This is a feature and maintenance release. Java 8 or later is required.
mockito/mockito (org.mockito:mockito-core)
v5.19.0Compare Source
Changelog generated by Shipkit Changelog Gradle Plugin
5.19.0
(#3681)
v5.18.0Compare Source
Changelog generated by Shipkit Changelog Gradle Plugin
5.18.0
v5.17.0Compare Source
Changelog generated by Shipkit Changelog Gradle Plugin
5.17.0
mockito-inlineshould be modified. (#3621)v5.16.1Compare Source
Changelog generated by Shipkit Changelog Gradle Plugin
5.16.1
[
v5.16.0](https://github.com/mockito/mocConfiguration
📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) in timezone America/Toronto, Automerge - "after 9:00am and before 12:00pm on tuesday, wednesday, thursday" in timezone America/Toronto.
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR has been generated by Renovate Bot.