Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): update github-actions #2493

Merged
merged 3 commits into from
Aug 1, 2023

Conversation

renovate-bot
Copy link
Contributor

@renovate-bot renovate-bot commented Jul 29, 2023

Mend Renovate

This PR contains the following updates:

Package Type Update Change
actions/setup-java action digest cd89f46 -> b943a4e
actions/setup-java action minor v3.11.0 -> v3.12.0
actions/setup-java action digest 5ffc13f -> cd89f46
github/codeql-action action patch v2.21.0 -> v2.21.2
gradle/gradle-build-action action minor v2.6.1 -> v2.7.0

⚠ Dependency Lookup Warnings ⚠

Warnings were logged while processing this repo. Please check the Dependency Dashboard for more information.


Release Notes

actions/setup-java (actions/setup-java)

v3.12.0

Compare Source

In scope of this release the following changes were made:

Bug fixes:

Feature implementations:

Resolving dependencies issues:

Infrastructure updates:

Documentation changes:

New Contributors

Full Changelog: actions/setup-java@v3...v3.12.0

github/codeql-action (github/codeql-action)

v2.21.2

Compare Source

v2.21.1

Compare Source

gradle/gradle-build-action (gradle/gradle-build-action)

v2.7.0

Compare Source

GitHub Dependency Graph support

In this release, the GitHub Dependency Graph support is no longer considered "experimental", and should be considered ready for production use. You can read more about the Dependency Graph support in the README chapter.

Changes
  • Update to [email protected]
    • Dependency graph uses Gradle Settings file as manifest location (if Settings file exists)
  • Adds a dependency-graph-file output to any step that generates a Dependency Graph file
Changelog

Configuration

📅 Schedule: Branch creation - "every weekend" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

@renovate-bot renovate-bot force-pushed the renovate/github-actions branch 2 times, most recently from 00035e0 to bd119c5 Compare July 31, 2023 10:26
@ianlewis ianlewis enabled auto-merge (squash) August 1, 2023 00:07
@ianlewis ianlewis merged commit c683687 into slsa-framework:main Aug 1, 2023
74 checks passed
enteraga6 pushed a commit to enteraga6/slsa-github-generator that referenced this pull request Aug 8, 2023
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| actions/setup-java | action | digest | `cd89f46` -> `b943a4e` |
| [actions/setup-java](https://github.com/actions/setup-java) | action
| minor | `v3.11.0` -> `v3.12.0` |
| [actions/setup-java](https://github.com/actions/setup-java) | action
| digest | `5ffc13f` -> `cd89f46` |
| [github/codeql-action](https://github.com/github/codeql-action) |
action | patch | `v2.21.0` -> `v2.21.2` |
|
[gradle/gradle-build-action](https://github.com/gradle/gradle-build-action)
| action | minor | `v2.6.1` -> `v2.7.0` |

---

### ⚠ Dependency Lookup Warnings ⚠

Warnings were logged while processing this repo. Please check the
Dependency Dashboard for more information.

---

### Release Notes

<details>
<summary>actions/setup-java (actions/setup-java)</summary>

###
[`v3.12.0`](https://github.com/actions/setup-java/releases/tag/v3.12.0)

[Compare
Source](https://github.com/actions/setup-java/compare/v3.11.0...v3.12.0)

In scope of this release the following changes were made:

**Bug fixes:**

- Always check postfix "Contents/Home" on macOS by
[@&#8203;erwin1](https://github.com/erwin1) in
[https://github.com/actions/setup-java/pull/397](https://github.com/actions/setup-java/pull/397)
- Fix sbt/scala cache key by
[@&#8203;Dogacel](https://github.com/Dogacel) in
[https://github.com/actions/setup-java/pull/478](https://github.com/actions/setup-java/pull/478)
- Corretto toolcache folder name fix by
[@&#8203;IvanZosimov](https://github.com/IvanZosimov) in
[https://github.com/actions/setup-java/pull/480](https://github.com/actions/setup-java/pull/480)
- Update versions of Oracle JDK and Microsoft Build of OpenJDK by
[@&#8203;anishi1222](https://github.com/anishi1222) in
[https://github.com/actions/setup-java/pull/489](https://github.com/actions/setup-java/pull/489)
- Update Oracle JDK download URL calculation by
[@&#8203;nikolai-laevskii](https://github.com/nikolai-laevskii) in
[https://github.com/actions/setup-java/pull/507](https://github.com/actions/setup-java/pull/507)

**Feature implementations:**

- Add versions properties to cache by
[@&#8203;Endi327](https://github.com/Endi327) in
[https://github.com/actions/setup-java/pull/280](https://github.com/actions/setup-java/pull/280)

**Resolving dependencies issues:**

- Remove implicit dependencies by
[@&#8203;nikolai-laevskii](https://github.com/nikolai-laevskii) in
[https://github.com/actions/setup-java/pull/494](https://github.com/actions/setup-java/pull/494)
- Update xml2js by
[@&#8203;dmitry-shibanov](https://github.com/dmitry-shibanov) in
[https://github.com/actions/setup-java/pull/484](https://github.com/actions/setup-java/pull/484)
- Update dependencies by
[@&#8203;IvanZosimov](https://github.com/IvanZosimov) in
[https://github.com/actions/setup-java/pull/511](https://github.com/actions/setup-java/pull/511)

**Infrastructure updates:**

- Fix glob bug in package.json scripts section by
[@&#8203;IvanZosimov](https://github.com/IvanZosimov) in
[https://github.com/actions/setup-java/pull/475](https://github.com/actions/setup-java/pull/475)
- Update mocks by
[@&#8203;nikolai-laevskii](https://github.com/nikolai-laevskii) in
[https://github.com/actions/setup-java/pull/498](https://github.com/actions/setup-java/pull/498)

**Documentation changes:**

- Instruction to download custom distribution JDK and install by
[@&#8203;ragsmpl](https://github.com/ragsmpl) in
[https://github.com/actions/setup-java/pull/500](https://github.com/actions/setup-java/pull/500)

#### New Contributors

- [@&#8203;erwin1](https://github.com/erwin1) made their first
contribution in
[https://github.com/actions/setup-java/pull/397](https://github.com/actions/setup-java/pull/397)
- [@&#8203;Dogacel](https://github.com/Dogacel) made their first
contribution in
[https://github.com/actions/setup-java/pull/478](https://github.com/actions/setup-java/pull/478)
- [@&#8203;anishi1222](https://github.com/anishi1222) made their first
contribution in
[https://github.com/actions/setup-java/pull/489](https://github.com/actions/setup-java/pull/489)
- [@&#8203;nikolai-laevskii](https://github.com/nikolai-laevskii) made
their first contribution in
[https://github.com/actions/setup-java/pull/498](https://github.com/actions/setup-java/pull/498)
- [@&#8203;ragsmpl](https://github.com/ragsmpl) made their first
contribution in
[https://github.com/actions/setup-java/pull/500](https://github.com/actions/setup-java/pull/500)
- [@&#8203;Endi327](https://github.com/Endi327) made their first
contribution in
[https://github.com/actions/setup-java/pull/280](https://github.com/actions/setup-java/pull/280)

**Full Changelog**:
actions/setup-java@v3...v3.12.0

</details>

<details>
<summary>github/codeql-action (github/codeql-action)</summary>

###
[`v2.21.2`](https://github.com/github/codeql-action/compare/v2.21.1...v2.21.2)

[Compare
Source](https://github.com/github/codeql-action/compare/v2.21.1...v2.21.2)

###
[`v2.21.1`](https://github.com/github/codeql-action/compare/v2.21.0...v2.21.1)

[Compare
Source](https://github.com/github/codeql-action/compare/v2.21.0...v2.21.1)

</details>

<details>
<summary>gradle/gradle-build-action
(gradle/gradle-build-action)</summary>

###
[`v2.7.0`](https://github.com/gradle/gradle-build-action/releases/tag/v2.7.0)

[Compare
Source](https://github.com/gradle/gradle-build-action/compare/v2.6.1...v2.7.0)

##### GitHub Dependency Graph support

In this release, the GitHub Dependency Graph support is no longer
considered "experimental", and should be considered ready for production
use. You can read more about the Dependency Graph support in [the README
chapter](https://github.com/gradle/gradle-build-action#github-dependency-graph-support).

##### Changes

- Update to
[`[email protected]`](https://plugins.gradle.org/plugin/org.gradle.github-dependency-graph-gradle-plugin/0.2.0)
- Dependency graph uses Gradle Settings file as manifest location (if
Settings file exists)
- Adds a `dependency-graph-file` output to any step that generates a
Dependency Graph file

##### Changelog

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "every weekend" (UTC), Automerge - At
any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config help](https://github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/slsa-framework/slsa-github-generator).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNi4yNC4yIiwidXBkYXRlZEluVmVyIjoiMzYuMjQuMiIsInRhcmdldEJyYW5jaCI6Im1haW4ifQ==-->

---------

Signed-off-by: Mend Renovate <[email protected]>
Signed-off-by: Ian Lewis <[email protected]>
Co-authored-by: Ian Lewis <[email protected]>
Signed-off-by: Noah Elzner <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants