deps: update github actions (patch) #3888
Open
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## main #3888 +/- ##
==========================================
- Coverage 77.37% 77.34% -0.04%
==========================================
Files 220 220
Lines 11708 11708
==========================================
- Hits 9059 9055 -4
- Misses 2281 2284 +3
- Partials 368 369 +1 see 1 file with indirect coverage changes
Flags with carried forward coverage won't be shown. Click here to find out more. 🚀 New features to boost your workflow:
|
![renovate-approve[bot]](https://avatars.githubusercontent.com/in/7394?s=60&v=4){kind=small}
renovate
bot
force-pushed
the
renovate/patch-github-actions
branch
from
d190df0 to
b911c49
Compare
renovate
bot
force-pushed
the
renovate/patch-github-actions
branch
from
b911c49 to
29c68ca
Compare
renovate
bot
force-pushed
the
renovate/patch-github-actions
branch
from
29c68ca to
09195eb
Compare
renovate
bot
force-pushed
the
renovate/patch-github-actions
branch
from
09195eb to
a895b95
Compare
renovate
bot
force-pushed
the
renovate/patch-github-actions
branch
from
a895b95 to
50f278a
Compare
renovate
bot
force-pushed
the
renovate/patch-github-actions
branch
from
50f278a to
0128907
Compare
renovate
bot
force-pushed
the
renovate/patch-github-actions
branch
from
0128907 to
63a4dc3
Compare
renovate
bot
force-pushed
the
renovate/patch-github-actions
branch
from
63a4dc3 to
27029ee
Compare
renovate
bot
force-pushed
the
renovate/patch-github-actions
branch
from
dd51ca3 to
e26a038
Compare
renovate
bot
force-pushed
the
renovate/patch-github-actions
branch
from
e26a038 to
c9d83ce
Compare
renovate
bot
force-pushed
the
renovate/patch-github-actions
branch
from
c9d83ce to
8b7372e
Compare
renovate
bot
force-pushed
the
renovate/patch-github-actions
branch
from
8b7372e to
b913180
Compare
renovate
bot
force-pushed
the
renovate/patch-github-actions
branch
from
b913180 to
51a7f76
Compare
renovate
bot
force-pushed
the
renovate/patch-github-actions
branch
from
51a7f76 to
a8a80d9
Compare
renovate
bot
force-pushed
the
renovate/patch-github-actions
branch
from
a8a80d9 to
2c2282d
Compare
renovate
bot
force-pushed
the
renovate/patch-github-actions
branch
from
2c2282d to
9ed08e5
Compare
|
renovate
bot
force-pushed
the
renovate/patch-github-actions
branch
from
9ed08e5 to
d803fc1
Compare
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
renovate
bot
force-pushed
the
renovate/patch-github-actions
branch
from
d803fc1 to
abc8ccd
Compare
|
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v2.1.3->v2.1.14v2.1.15v4.6.1->v4.6.2v0.0.24->v0.0.25v3.28.11->v3.28.21v0.2.11->v0.2.13v2.4.0->v2.4.3v7.0.5->v7.0.8v3.8.1->v3.8.2v2.2.1->v2.2.2Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
Checkmarx/kics-github-action (Checkmarx/kics-github-action)
v2.1.14Compare Source
What's Changed
Full Changelog: Checkmarx/kics-github-action@v2.1.13...v2.1.14
v2.1.13Compare Source
What's Changed
Full Changelog: Checkmarx/kics-github-action@v2.1.12...v2.1.13
v2.1.12Compare Source
What's Changed
Full Changelog: Checkmarx/kics-github-action@v2.1.11...v2.1.12
v2.1.11Compare Source
What's Changed
Full Changelog: Checkmarx/kics-github-action@v2.1.10...v2.1.11
v2.1.10Compare Source
What's Changed
New Contributors
Full Changelog: Checkmarx/kics-github-action@v2.1.9...v2.1.10
v2.1.9Compare Source
What's Changed
Full Changelog: Checkmarx/kics-github-action@v2.1.8...v2.1.9
v2.1.8Compare Source
What's Changed
Full Changelog: Checkmarx/kics-github-action@v2.1.7...v2.1.8
v2.1.7Compare Source
What's Changed
Full Changelog: Checkmarx/kics-github-action@v2.1.6...v2.1.7
v2.1.6Compare Source
What's Changed
Full Changelog: Checkmarx/kics-github-action@v2.1.5...v2.1.6
v2.1.5Compare Source
What's Changed
Full Changelog: Checkmarx/kics-github-action@v2.1.4...v2.1.5
v2.1.4Compare Source
What's Changed
Full Changelog: Checkmarx/kics-github-action@v2.1.3...v2.1.4
actions/upload-artifact (actions/upload-artifact)
v4.6.2Compare Source
What's Changed
New Contributors
Full Changelog: actions/upload-artifact@v4...v4.6.2
check-spelling/check-spelling (check-spelling/check-spelling)
v0.0.25: Release 0.0.25Compare Source
⏩ Upgrading
🐣 Breaking Changes
If you use SARIF reporting, then instead of the workflow yielding an ❌ when it fails, it will rely on github-advanced-security 🤖 to report the failure. You will need to adjust your checks for PRs.
use_sarif: ...and are using a ruleset, you'll want to change the value touse_sarif: 1instead of a complicated rule, because otherwisegithub-advanced-securitywill only run sometimes and that will make PRs unmergable.on: schedulewhitelist.txtandadvice.txtcheck-spelling/checkout-merge@46bad523dcb6368efab50ff2729c00443785abca(if you runon: pull_request/on: pull_request_targetand usewith:/checkout: true)✨ New Features
submodulesonly_check_changed_filesfinds unrecognized words (#86)unknown_file_word_limitto limit the number of times a path in a filename is reported when usingcheck_file_namescheckout: truefor newmissing-checkouterror casesingle-line-fileDictionaries
fallback-dictionary-not-foundhandlingHunspell dictionaries
.dic/.affdictionaries by installing hunspell as needed (#79 / #90)Fixes
check_for_newline_at_eofforallow.txt(#81)inputs.ignoredeventsinputs.debughandlingnoisy-file-listhandlingonly_check_changed_fileswhen unshallowing#) support for expect filestoken-is-substringwarningImprovements
30xredirectsWe'dMessages
`sLineforcandidate-patternignored-expect-variantas a warningSARIF
/code-scanning/analysisdirectly#in filenames (#82)noteseverity forno-files-to-checkdefaultConfiguration.levelwhenproblem.severityis absentCandidate patterns
#to suppress candidates (you can do this for forbidden patterns too, but this version won't suggest that)Apply
Summary Tables
Checkout
Testing
jdwithTest::More::is_deeplyUpgrade components
🐛 Known Issues
on: pull_request/on: pull_requesrt_targetand usewith:/checkout: true, you will need to allowcheck-spelling/checkout-merge@46bad523dcb6368efab50ff2729c00443785abcaotherwise you will probably encounter:actas of v0.2.77 is not supported withcheckout: true(there's a PR toactto fix this)check_file_names:, instead, it will suggest excluding a file in/tmp/check-spelling/GITHUB_OWNER/REPOSITORY_NAME/paths-of-checked-files.txt(likely escaped)Full Changelog
Full Changelog: check-spelling/check-spelling@v0.0.24...v0.0.25
github/codeql-action (github/codeql-action)
v3.28.21Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
3.28.21 - 28 July 2025
No user facing changes.
See the full CHANGELOG.md for more information.
v3.28.20Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
3.28.20 - 21 July 2025
See the full CHANGELOG.md for more information.
v3.28.19Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
3.28.19 - 03 Jun 2025
actionslanguage, which is currently in public preview.The
actionsextractor has been included in the CodeQL CLI since v2.20.6. If your workflow has enabled theactionslanguage and you have pinnedyour
tools:property to a specific version of the CodeQL CLI earlier than v2.20.6, you will need to update to at least CodeQL v2.20.6 or disableactionsanalysis.See the full CHANGELOG.md for more information.
v3.28.18Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
3.28.18 - 16 May 2025
CODEQL_THREADSandCODEQL_RAMrunner environment variables. If set, these environment variables override thethreadsandraminputs respectively. #2891See the full CHANGELOG.md for more information.
v3.28.17Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
3.28.17 - 02 May 2025
See the full CHANGELOG.md for more information.
v3.28.16Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
3.28.16 - 23 Apr 2025
See the full CHANGELOG.md for more information.
v3.28.15Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
3.28.15 - 07 Apr 2025
See the full CHANGELOG.md for more information.
v3.28.14Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
3.28.14 - 07 Apr 2025
See the full CHANGELOG.md for more information.
v3.28.13Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
3.28.13 - 24 Mar 2025
No user facing changes.
See the full CHANGELOG.md for more information.
v3.28.12Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
3.28.12 - 19 Mar 2025
build-mode: noneextractions. This should speed up workflows and avoid inconsistent alerts in some cases.See the full CHANGELOG.md for more information.
kyverno/action-install-chainsaw (kyverno/action-install-chainsaw)
v0.2.13Compare Source
What's Changed
Full Changelog: kyverno/action-install-chainsaw@v0.2.12...v0.2.13
v0.2.12Compare Source
What's Changed
Full Changelog: kyverno/action-install-chainsaw@v0.2.11...v0.2.12
ossf/scorecard-action (ossf/scorecard-action)
v2.4.3Compare Source
What's Changed
This update bumps the Scorecard version to the v5.3.0 release. For a complete list of changes, please refer to the Scorecard v5.3.0 release notes.
Documentation
GITHUB_TOKENpermissions needed for private repos by @pankajtaneja5 in #1574Other
New Contributors
Full Changelog: ossf/scorecard-action@v2.4.2...v2.4.3
v2.4.2Compare Source
What's Changed
This update bumps the Scorecard version to the v5.2.1 release. For a complete list of changes, please refer to the Scorecard v5.2.0 and v5.2.1 release notes.
Full Changelog: ossf/scorecard-action@v2.4.1...v2.4.2
v2.4.1Compare Source
What's Changed
file_modeinput which controls how repository files are fetched from GitHub. The default isarchive, butgitproduces the most accurate results for repositories with.gitattributesfiles at the cost of analysis speed.--file-modeby @spencerschrock in #1509Docs
New Contributors
Full Changelog: ossf/scorecard-action@v2.4.0...v2.4.1
peter-evans/create-pull-request (peter-evans/create-pull-request)
v7.0.8: Create Pull Request v7.0.8Compare Source
What's Changed
Full Changelog: peter-evans/create-pull-request@v7.0.7...v7.0.8
v7.0.7: Create Pull Request v7.0.7Compare Source
⚙️ Fixes an issue with commit signing where modifications to the same file in multiple commits squash into the first commit.
What's Changed
New Contributors
Full Changelog: peter-evans/create-pull-request@v7.0.6...v7.0.7
v7.0.6: Create Pull Request v7.0.6Compare Source
⚙️ Fixes an issue with commit signing where unicode characters in file paths were not preserved.
What's Changed
push-to-repoclassic PATworkflowscope requirement by @scop in #3511New Contributors
Full Changelog: peter-evans/create-pull-request@v7.0.5...v7.0.6
sigstore/cosign-installer (sigstore/cosign-installer)
v3.8.2Compare Source
What's Changed
Full Changelog: sigstore/cosign-installer@v3...v3.8.2
softprops/action-gh-release (softprops/action-gh-release)
v2.2.2Compare Source
What's Changed
Bug fixes 🐛
Other Changes 🔄
New Contributors
Full Changelog: softprops/action-gh-release@v2.2.1...v2.2.2
Configuration
📅 Schedule: Branch creation - At 12:00 AM through 04:59 AM and 10:00 PM through 11:59 PM, Monday through Friday ( * 0-4,22-23 * * 1-5 ), Only on Sunday and Saturday ( * * * * 0,6 ) in timezone Europe/Vienna, Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.