chore(deps): update all non-major dependencies #331

renovate-bot · 2025-04-01T01:18:49Z

This PR contains the following updates:

Package	Type	Update	Change
actions/setup-go	action	minor	`v5.3.0` -> `v5.5.0`
actions/setup-java	action	patch	`v4.7.0` -> `v4.7.1`
github/codeql-action	action	minor	`v3.28.10` -> `v3.29.0`
go	uses-with	minor	`1.21` -> `1.24`
ossf/scorecard-action	action	patch	`v2.4.1` -> `v2.4.2`
step-security/harden-runner	action	minor	`v2.11.0` -> `v2.12.1`
org.mockito:mockito-core	test	minor	`5.16.0` -> `5.18.0`
com.google.code.gson:gson	compile	minor	`2.12.1` -> `2.13.1`
com.google.cloud.functions.invoker:java-function-invoker (source)	compile	patch	`1.4.0` -> `1.4.1`
org.apache.maven:maven-core	compile	patch	`3.9.9` -> `3.9.10`
org.apache.maven:maven-plugin-api	compile	patch	`3.9.9` -> `3.9.10`
com.google.guava:guava	compile	patch	`33.4.0-jre` -> `33.4.8-jre`

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

Release Notes

actions/setup-go (actions/setup-go)

`v5.5.0`

Compare Source

What's Changed

What's Changed

Dependency updates :

Upgrade semver from 7.6.0 to 7.6.3 by @dependabot in https://github.com/actions/setup-go/pull/535
Upgrade eslint-config-prettier from 8.10.0 to 10.0.1 by @dependabot in https://github.com/actions/setup-go/pull/536
Upgrade @action/cache from 4.0.0 to 4.0.2 by @aparnajyothi-y in https://github.com/actions/setup-go/pull/568
Upgrade undici from 5.28.4 to 5.28.5 by @dependabot in https://github.com/actions/setup-go/pull/541

New Contributors

@aparnajyothi-y made their first contribution in https://github.com/actions/setup-go/pull/568

Full Changelog: actions/setup-go@v5...v5.4.0

actions/setup-java (actions/setup-java)

`v4.7.1`

Compare Source

What's Changed

Documentation changes

Add Documentation to Recommend Using GraalVM JDK 17 Version to 17.0.12 to Align with GFTC License Terms by @aparnajyothi-y in https://github.com/actions/setup-java/pull/704
Remove duplicated GraalVM section in documentation by @Marcono1234 in https://github.com/actions/setup-java/pull/716

Dependency updates:

Upgrade @action/cache from 4.0.0 to 4.0.2 by @aparnajyothi-y in https://github.com/actions/setup-java/pull/766
Upgrade @actions/glob from 0.4.0 to 0.5.0 by @dependabot in https://github.com/actions/setup-java/pull/744
Upgrade ts-jest from 29.1.2 to 29.2.5 by @dependabot in https://github.com/actions/setup-java/pull/743
Upgrade @action/cache to 4.0.3 by @aparnajyothi-y in https://github.com/actions/setup-java/pull/773

Full Changelog: actions/setup-java@v4...v4.7.1

github/codeql-action (github/codeql-action)

`v3.29.0`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.29.0 - 11 Jun 2025

Update default CodeQL bundle version to 2.22.0. #2925
Bump minimum CodeQL bundle version to 2.16.6. #2912

See the full CHANGELOG.md for more information.

`v3.28.19`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.19 - 03 Jun 2025

The CodeQL Action no longer includes its own copy of the extractor for the actions language, which is currently in public preview.
The actions extractor has been included in the CodeQL CLI since v2.20.6. If your workflow has enabled the actions language and you have pinned
your tools: property to a specific version of the CodeQL CLI earlier than v2.20.6, you will need to update to at least CodeQL v2.20.6 or disable
actions analysis.
Update default CodeQL bundle version to 2.21.4. #2910

See the full CHANGELOG.md for more information.

`v3.28.18`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.18 - 16 May 2025

Update default CodeQL bundle version to 2.21.3. #2893
Skip validating SARIF produced by CodeQL for improved performance. #2894
The number of threads and amount of RAM used by CodeQL can now be set via the CODEQL_THREADS and CODEQL_RAM runner environment variables. If set, these environment variables override the threads and ram inputs respectively. #2891

See the full CHANGELOG.md for more information.

`v3.28.17`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.17 - 02 May 2025

Update default CodeQL bundle version to 2.21.2. #2872

See the full CHANGELOG.md for more information.

`v3.28.16`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.16 - 23 Apr 2025

Update default CodeQL bundle version to 2.21.1. #2863

See the full CHANGELOG.md for more information.

`v3.28.15`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.15 - 07 Apr 2025

Fix bug where the action would fail if it tried to produce a debug artifact with more than 65535 files. #2842

See the full CHANGELOG.md for more information.

`v3.28.14`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.14 - 07 Apr 2025

Update default CodeQL bundle version to 2.21.0. #2838

See the full CHANGELOG.md for more information.

`v3.28.13`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.13 - 24 Mar 2025

No user facing changes.

See the full CHANGELOG.md for more information.

`v3.28.12`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.12 - 19 Mar 2025

Dependency caching should now cache more dependencies for Java build-mode: none extractions. This should speed up workflows and avoid inconsistent alerts in some cases.
Update default CodeQL bundle version to 2.20.7. #2810

See the full CHANGELOG.md for more information.

`v3.28.11`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.11 - 07 Mar 2025

Update default CodeQL bundle version to 2.20.6. #2793

See the full CHANGELOG.md for more information.

actions/go-versions (go)

`v1.24.4`: 1.24.4

Compare Source

Go 1.24.4

`v1.24.3`: 1.24.3

Compare Source

Go 1.24.3

`v1.24.2`: 1.24.2

Compare Source

Go 1.24.2

`v1.24.1`: 1.24.1

Compare Source

Go 1.24.1

`v1.24.0`: 1.24.0

Compare Source

Go 1.24.0

`v1.23.10`: 1.23.10

Compare Source

Go 1.23.10

`v1.23.9`: 1.23.9

Compare Source

Go 1.23.9

`v1.23.8`: 1.23.8

Compare Source

Go 1.23.8

`v1.23.7`: 1.23.7

Compare Source

Go 1.23.7

`v1.23.6`: 1.23.6

Compare Source

Go 1.23.6

`v1.23.5`: 1.23.5

Compare Source

Go 1.23.5

`v1.23.4`: 1.23.4

Compare Source

Go 1.23.4

`v1.23.3`: 1.23.3

Compare Source

Go 1.23.3

`v1.23.2`: 1.23.2

Compare Source

Go 1.23.2

`v1.23.1`: 1.23.1

Compare Source

Go 1.23.1

`v1.23.0`: 1.23.0

Compare Source

Go 1.23.0

`v1.22.12`: 1.22.12

Compare Source

Go 1.22.12

`v1.22.11`: 1.22.11

Compare Source

Go 1.22.11

`v1.22.10`: 1.22.10

Compare Source

Go 1.22.10

`v1.22.9`: 1.22.9

Compare Source

Go 1.22.9

`v1.22.8`: 1.22.8

Compare Source

Go 1.22.8

`v1.22.7`: 1.22.7

Compare Source

Go 1.22.7

`v1.22.6`: 1.22.6

Compare Source

Go 1.22.6

`v1.22.5`: 1.22.5

Compare Source

Go 1.22.5

`v1.22.4`: 1.22.4

Compare Source

Go 1.22.4

`v1.22.3`: 1.22.3

Compare Source

Go 1.22.3

`v1.22.2`: 1.22.2

Compare Source

Go 1.22.2

`v1.22.1`: 1.22.1

Compare Source

Go 1.22.1

`v1.22.0`: 1.22.0

Compare Source

Go 1.22.0

ossf/scorecard-action (ossf/scorecard-action)

`v2.4.2`

Compare Source

What's Changed

This update bumps the Scorecard version to the v5.2.1 release. For a complete list of changes, please refer to the Scorecard v5.2.0 and v5.2.1 release notes.

Full Changelog: ossf/scorecard-action@v2.4.1...v2.4.2

step-security/harden-runner (step-security/harden-runner)

`v2.12.1`

Compare Source

What's Changed

Detection capabilities have been upgraded to better recognize attempts at runner tampering. These improvements are informed by real-world incident learnings, including analysis of anomalous behaviors observed in the tj-actions and reviewdog supply chain attack.
Resolved an issue where the block policy was not enforced correctly when the GitHub Actions job was running inside a container on a self-hosted VM runner.

Full Changelog: step-security/harden-runner@v2...v2.12.1

`v2.12.0`

Compare Source

What's Changed

A new option, disable-sudo-and-containers, is now available to replace the disable-sudo policy, addressing Docker-based privilege escalation (CVE-2025-32955). More details can be found in this blog post.
New detections have been added based on insights from the tj-actions and reviewdog actions incidents.

Full Changelog: step-security/harden-runner@v2...v2.12.0

`v2.11.1`

Compare Source

What's Changed

cache: add support for GitHub Actions cache v2 by @h0x0er in https://github.com/step-security/harden-runner/pull/529

Full Changelog: step-security/harden-runner@v2...v2.11.1

mockito/mockito (org.mockito:mockito-core)

`v5.18.0`

Compare Source

^{^{Changelog generated by Shipkit Changelog Gradle Plugin}}

5.18.0

2025-05-20 - 5 commit(s) by Eugene Platonov, Patrick Doyle, Tim van der Lippe, dependabot[bot]
Make vararg checks Scala friendly (for mockito-scala) (#3651)
For UnfinishedStubbingException, suggest the possibility of another thread (#3636)
UnfinishedStubbingException ought to suggest the possibility of another thread (#3635)

`v5.17.0`

Compare Source

^{^{Changelog generated by Shipkit Changelog Gradle Plugin}}

5.17.0

2025-04-04 - 7 commit(s) by Adrian Roos, Andre Kurait, Jan Ouwens, Rafael Winterhalter, Taeik Lim, Thach Le, Tim van der Lippe
Fixes #3631: Fix broken banner image link (#3632)
Banner image is broken (#3631)
Update exception message with mockito-inline (#3628)
Clarify structure of commit messages (#3626)
Fixes #3622: MockitoExtension fails cleanup when aborted before setup (#3623)
MockitoExtension fails cleanup when aborted before setup (#3622)
Since mockito-inline has been removed, the exception messages with mockito-inline should be modified. (#3621)
Fixes #3171: Fall back to Throwable Location strategy on Android (#3619)
Fixes #3615 : broken links to javadoc.io (#3616)
Broken links to javadoc.io (#3615)
Mocks are not working on particular devices after update Android SDK from 33 to 34 (#3171)

`v5.16.1`

^{^{Changelog generated by Shipkit Changelog Gradle Plugin}}

5.16.1

2025-03-15 - 3 commit(s) by Adrian Roos, Jérôme Prinet, Rafael Winterhalter
Remove Arrays.asList from critical stubbing path in GenericMetadataSu… (#3610)
Rework of injection strategy in the context of modules (#3608)
Adjust inline mocking snippet to allow task relocatability (#3606)
Inline mocking configuration snippet for Gradle should allow task relocatability (#3605)

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, on day 1 of the month ( * 0-3 1 * * ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate-bot force-pushed the renovate/all-minor-patch branch 5 times, most recently from 5ababb3 to bd6d07a Compare April 8, 2025 16:07

renovate-bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from da209f6 to d9febb8 Compare April 14, 2025 20:48

renovate-bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from 1e59b30 to 1e741a4 Compare April 24, 2025 05:13

renovate-bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 7ea531a to d1d744a Compare May 8, 2025 04:23

renovate-bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from a57f980 to 771e59f Compare May 20, 2025 21:14

renovate-bot force-pushed the renovate/all-minor-patch branch from 771e59f to eb1b88a Compare June 1, 2025 03:48

renovate-bot force-pushed the renovate/all-minor-patch branch from eb1b88a to 84dd659 Compare June 9, 2025 13:32

chore(deps): update all non-major dependencies

3ceaded

renovate-bot force-pushed the renovate/all-minor-patch branch from 84dd659 to 3ceaded Compare June 18, 2025 09:32

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): update all non-major dependencies #331

chore(deps): update all non-major dependencies #331

Uh oh!

renovate-bot commented Apr 1, 2025 •

edited

Loading

Uh oh!

Uh oh!

chore(deps): update all non-major dependencies #331

Are you sure you want to change the base?

chore(deps): update all non-major dependencies #331

Uh oh!

Conversation

renovate-bot commented Apr 1, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

Bug fixes:

Dependency updates:

New Contributors

What's Changed

Dependency updates :

New Contributors

What's Changed

Documentation changes

Dependency updates:

CodeQL Action Changelog

3.29.0 - 11 Jun 2025

CodeQL Action Changelog

3.28.19 - 03 Jun 2025

CodeQL Action Changelog

3.28.18 - 16 May 2025

CodeQL Action Changelog

3.28.17 - 02 May 2025

CodeQL Action Changelog

3.28.16 - 23 Apr 2025

CodeQL Action Changelog

3.28.15 - 07 Apr 2025

CodeQL Action Changelog

3.28.14 - 07 Apr 2025

CodeQL Action Changelog

3.28.13 - 24 Mar 2025

CodeQL Action Changelog

3.28.12 - 19 Mar 2025

CodeQL Action Changelog

3.28.11 - 07 Mar 2025

v1.24.4: 1.24.4

v1.24.3: 1.24.3

v1.24.2: 1.24.2

v1.24.1: 1.24.1

v1.24.0: 1.24.0

v1.23.10: 1.23.10

v1.23.9: 1.23.9

v1.23.8: 1.23.8

v1.23.7: 1.23.7

v1.23.6: 1.23.6

v1.23.5: 1.23.5

v1.23.4: 1.23.4

v1.23.3: 1.23.3

v1.23.2: 1.23.2

v1.23.1: 1.23.1

v1.23.0: 1.23.0

v1.22.12: 1.22.12

v1.22.11: 1.22.11

v1.22.10: 1.22.10

v1.22.9: 1.22.9

v1.22.8: 1.22.8

v1.22.7: 1.22.7

v1.22.6: 1.22.6

v1.22.5: 1.22.5

v1.22.4: 1.22.4

v1.22.3: 1.22.3

v1.22.2: 1.22.2

v1.22.1: 1.22.1

v1.22.0: 1.22.0

What's Changed

What's Changed

What's Changed

What's Changed

5.18.0

5.17.0

5.16.1

Configuration

Uh oh!

Uh oh!

renovate-bot commented Apr 1, 2025 •

edited

Loading

`v1.24.4`: 1.24.4

`v1.24.3`: 1.24.3

`v1.24.2`: 1.24.2

`v1.24.1`: 1.24.1

`v1.24.0`: 1.24.0

`v1.23.10`: 1.23.10

`v1.23.9`: 1.23.9

`v1.23.8`: 1.23.8

`v1.23.7`: 1.23.7

`v1.23.6`: 1.23.6

`v1.23.5`: 1.23.5

`v1.23.4`: 1.23.4

`v1.23.3`: 1.23.3

`v1.23.2`: 1.23.2

`v1.23.1`: 1.23.1

`v1.23.0`: 1.23.0

`v1.22.12`: 1.22.12

`v1.22.11`: 1.22.11

`v1.22.10`: 1.22.10

`v1.22.9`: 1.22.9

`v1.22.8`: 1.22.8

`v1.22.7`: 1.22.7

`v1.22.6`: 1.22.6

`v1.22.5`: 1.22.5

`v1.22.4`: 1.22.4

`v1.22.3`: 1.22.3

`v1.22.2`: 1.22.2

`v1.22.1`: 1.22.1

`v1.22.0`: 1.22.0