Bump the actions group across 1 directory with 6 updates (#1868) · chainguard-dev/edu@95d244c

Commit

Bump the actions group across 1 directory with 6 updates (#1868)

Bumps the actions group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `4.2.0` |
`4.2.2` |
|
[google-github-actions/auth](https://github.com/google-github-actions/auth)
| `2.1.5` | `2.1.6` |
|
[rtCamp/action-slack-notify](https://github.com/rtcamp/action-slack-notify)
| `2.3.0` | `2.3.2` |
| [actions/setup-node](https://github.com/actions/setup-node) | `4.0.4`
| `4.1.0` |
|
[sigstore/cosign-installer](https://github.com/sigstore/cosign-installer)
| `3.6.0` | `3.7.0` |
| [actions/setup-go](https://github.com/actions/setup-go) | `5.0.2` |
`5.1.0` |


Updates `actions/checkout` from 4.2.0 to 4.2.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/checkout/releases">actions/checkout's
releases</a>.</em></p>
<blockquote>
<h2>v4.2.2</h2>
<h2>What's Changed</h2>
<ul>
<li><code>url-helper.ts</code> now leverages well-known environment
variables by <a href="https://github.com/jww3"><code>@jww3</code></a>
in <a
href="https://redirect.github.com/actions/checkout/pull/1941">actions/checkout#1941</a></li>
<li>Expand unit test coverage for <code>isGhes</code> by <a
href="https://github.com/jww3"><code>@jww3</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1946">actions/checkout#1946</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/checkout/compare/v4.2.1...v4.2.2">https://github.com/actions/checkout/compare/v4.2.1...v4.2.2</a></p>
<h2>v4.2.1</h2>
<h2>What's Changed</h2>
<ul>
<li>Check out other refs/* by commit if provided, fall back to ref by <a
href="https://github.com/orhantoy"><code>@orhantoy</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1924">actions/checkout#1924</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/Jcambass"><code>@Jcambass</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/checkout/pull/1919">actions/checkout#1919</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/checkout/compare/v4.2.0...v4.2.1">https://github.com/actions/checkout/compare/v4.2.0...v4.2.1</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/actions/checkout/blob/main/CHANGELOG.md">actions/checkout's
changelog</a>.</em></p>
<blockquote>
<h1>Changelog</h1>
<h2>v4.2.2</h2>
<ul>
<li><code>url-helper.ts</code> now leverages well-known environment
variables by <a href="https://github.com/jww3"><code>@jww3</code></a>
in <a
href="https://redirect.github.com/actions/checkout/pull/1941">actions/checkout#1941</a></li>
<li>Expand unit test coverage for <code>isGhes</code> by <a
href="https://github.com/jww3"><code>@jww3</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1946">actions/checkout#1946</a></li>
</ul>
<h2>v4.2.1</h2>
<ul>
<li>Check out other refs/* by commit if provided, fall back to ref by <a
href="https://github.com/orhantoy"><code>@orhantoy</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1924">actions/checkout#1924</a></li>
</ul>
<h2>v4.2.0</h2>
<ul>
<li>Add Ref and Commit outputs by <a
href="https://github.com/lucacome"><code>@lucacome</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1180">actions/checkout#1180</a></li>
<li>Dependency updates by <a
href="https://github.com/dependabot"><code>@dependabot</code></a>- <a
href="https://redirect.github.com/actions/checkout/pull/1777">actions/checkout#1777</a>,
<a
href="https://redirect.github.com/actions/checkout/pull/1872">actions/checkout#1872</a></li>
</ul>
<h2>v4.1.7</h2>
<ul>
<li>Bump the minor-npm-dependencies group across 1 directory with 4
updates by <a
href="https://github.com/dependabot"><code>@dependabot</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1739">actions/checkout#1739</a></li>
<li>Bump actions/checkout from 3 to 4 by <a
href="https://github.com/dependabot"><code>@dependabot</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1697">actions/checkout#1697</a></li>
<li>Check out other refs/* by commit by <a
href="https://github.com/orhantoy"><code>@orhantoy</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1774">actions/checkout#1774</a></li>
<li>Pin actions/checkout's own workflows to a known, good, stable
version. by <a href="https://github.com/jww3"><code>@jww3</code></a> in
<a
href="https://redirect.github.com/actions/checkout/pull/1776">actions/checkout#1776</a></li>
</ul>
<h2>v4.1.6</h2>
<ul>
<li>Check platform to set archive extension appropriately by <a
href="https://github.com/cory-miller"><code>@cory-miller</code></a> in
<a
href="https://redirect.github.com/actions/checkout/pull/1732">actions/checkout#1732</a></li>
</ul>
<h2>v4.1.5</h2>
<ul>
<li>Update NPM dependencies by <a
href="https://github.com/cory-miller"><code>@cory-miller</code></a> in
<a
href="https://redirect.github.com/actions/checkout/pull/1703">actions/checkout#1703</a></li>
<li>Bump github/codeql-action from 2 to 3 by <a
href="https://github.com/dependabot"><code>@dependabot</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1694">actions/checkout#1694</a></li>
<li>Bump actions/setup-node from 1 to 4 by <a
href="https://github.com/dependabot"><code>@dependabot</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1696">actions/checkout#1696</a></li>
<li>Bump actions/upload-artifact from 2 to 4 by <a
href="https://github.com/dependabot"><code>@dependabot</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1695">actions/checkout#1695</a></li>
<li>README: Suggest <code>user.email</code> to be
<code>41898282+github-actions[bot]@users.noreply.github.com</code> by <a
href="https://github.com/cory-miller"><code>@cory-miller</code></a> in
<a
href="https://redirect.github.com/actions/checkout/pull/1707">actions/checkout#1707</a></li>
</ul>
<h2>v4.1.4</h2>
<ul>
<li>Disable <code>extensions.worktreeConfig</code> when disabling
<code>sparse-checkout</code> by <a
href="https://github.com/jww3"><code>@jww3</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1692">actions/checkout#1692</a></li>
<li>Add dependabot config by <a
href="https://github.com/cory-miller"><code>@cory-miller</code></a> in
<a
href="https://redirect.github.com/actions/checkout/pull/1688">actions/checkout#1688</a></li>
<li>Bump the minor-actions-dependencies group with 2 updates by <a
href="https://github.com/dependabot"><code>@dependabot</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1693">actions/checkout#1693</a></li>
<li>Bump word-wrap from 1.2.3 to 1.2.5 by <a
href="https://github.com/dependabot"><code>@dependabot</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1643">actions/checkout#1643</a></li>
</ul>
<h2>v4.1.3</h2>
<ul>
<li>Check git version before attempting to disable
<code>sparse-checkout</code> by <a
href="https://github.com/jww3"><code>@jww3</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1656">actions/checkout#1656</a></li>
<li>Add SSH user parameter by <a
href="https://github.com/cory-miller"><code>@cory-miller</code></a> in
<a
href="https://redirect.github.com/actions/checkout/pull/1685">actions/checkout#1685</a></li>
<li>Update <code>actions/checkout</code> version in
<code>update-main-version.yml</code> by <a
href="https://github.com/jww3"><code>@jww3</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1650">actions/checkout#1650</a></li>
</ul>
<h2>v4.1.2</h2>
<ul>
<li>Fix: Disable sparse checkout whenever <code>sparse-checkout</code>
option is not present <a
href="https://github.com/dscho"><code>@dscho</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1598">actions/checkout#1598</a></li>
</ul>
<h2>v4.1.1</h2>
<ul>
<li>Correct link to GitHub Docs by <a
href="https://github.com/peterbe"><code>@peterbe</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1511">actions/checkout#1511</a></li>
<li>Link to release page from what's new section by <a
href="https://github.com/cory-miller"><code>@cory-miller</code></a> in
<a
href="https://redirect.github.com/actions/checkout/pull/1514">actions/checkout#1514</a></li>
</ul>
<h2>v4.1.0</h2>
<ul>
<li><a href="https://redirect.github.com/actions/checkout/pull/1396">Add
support for partial checkout filters</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/actions/checkout/commit/11bd71901bbe5b1630ceea73d27597364c9af683"><code>11bd719</code></a>
Prepare 4.2.2 Release (<a
href="https://redirect.github.com/actions/checkout/issues/1953">#1953</a>)</li>
<li><a
href="https://github.com/actions/checkout/commit/e3d2460bbb42d7710191569f88069044cfb9d8cf"><code>e3d2460</code></a>
Expand unit test coverage (<a
href="https://redirect.github.com/actions/checkout/issues/1946">#1946</a>)</li>
<li><a
href="https://github.com/actions/checkout/commit/163217dfcd28294438ea1c1c149cfaf66eec283e"><code>163217d</code></a>
<code>url-helper.ts</code> now leverages well-known environment
variables. (<a
href="https://redirect.github.com/actions/checkout/issues/1941">#1941</a>)</li>
<li><a
href="https://github.com/actions/checkout/commit/eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871"><code>eef6144</code></a>
Prepare 4.2.1 release (<a
href="https://redirect.github.com/actions/checkout/issues/1925">#1925</a>)</li>
<li><a
href="https://github.com/actions/checkout/commit/6b42224f41ee5dfe5395e27c8b2746f1f9955030"><code>6b42224</code></a>
Add workflow file for publishing releases to immutable action package
(<a
href="https://redirect.github.com/actions/checkout/issues/1919">#1919</a>)</li>
<li><a
href="https://github.com/actions/checkout/commit/de5a000abf73b6f4965bd1bcdf8f8d94a56ea815"><code>de5a000</code></a>
Check out other refs/* by commit if provided, fall back to ref (<a
href="https://redirect.github.com/actions/checkout/issues/1924">#1924</a>)</li>
<li>See full diff in <a
href="https://github.com/actions/checkout/compare/d632683dd7b4114ad314bca15554477dd762a938...11bd71901bbe5b1630ceea73d27597364c9af683">compare
view</a></li>
</ul>
</details>
<br />

Updates `google-github-actions/auth` from 2.1.5 to 2.1.6
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/google-github-actions/auth/releases">google-github-actions/auth's
releases</a>.</em></p>
<blockquote>
<h2>v2.1.6</h2>
<h2>What's Changed</h2>
<ul>
<li>Recommend <code>gcloud storage</code> over <code>gsutil</code> by <a
href="https://github.com/sethvargo"><code>@sethvargo</code></a> in <a
href="https://redirect.github.com/google-github-actions/auth/pull/438">google-github-actions/auth#438</a></li>
<li>Add missing log line by <a
href="https://github.com/sethvargo"><code>@sethvargo</code></a> in <a
href="https://redirect.github.com/google-github-actions/auth/pull/448">google-github-actions/auth#448</a></li>
<li>Release: v2.1.6 by <a
href="https://github.com/google-github-actions-bot"><code>@google-github-actions-bot</code></a>
in <a
href="https://redirect.github.com/google-github-actions/auth/pull/449">google-github-actions/auth#449</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/google-github-actions/auth/compare/v2.1.5...v2.1.6">https://github.com/google-github-actions/auth/compare/v2.1.5...v2.1.6</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/google-github-actions/auth/commit/8254fb75a33b976a221574d287e93919e6a36f70"><code>8254fb7</code></a>
Release: v2.1.6 (<a
href="https://redirect.github.com/google-github-actions/auth/issues/449">#449</a>)</li>
<li><a
href="https://github.com/google-github-actions/auth/commit/d1b27fe5c4d3d1e3dc8a68e8fc94cc4b24009c24"><code>d1b27fe</code></a>
Add missing log line (<a
href="https://redirect.github.com/google-github-actions/auth/issues/448">#448</a>)</li>
<li><a
href="https://github.com/google-github-actions/auth/commit/c8788cc4c52eba6566baf085281fec298f1a1146"><code>c8788cc</code></a>
Recommend <code>gcloud storage</code> over <code>gsutil</code> (<a
href="https://redirect.github.com/google-github-actions/auth/issues/438">#438</a>)</li>
<li>See full diff in <a
href="https://github.com/google-github-actions/auth/compare/62cf5bd3e4211a0a0b51f2c6d6a37129d828611d...8254fb75a33b976a221574d287e93919e6a36f70">compare
view</a></li>
</ul>
</details>
<br />

Updates `rtCamp/action-slack-notify` from 2.3.0 to 2.3.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/rtcamp/action-slack-notify/releases">rtCamp/action-slack-notify's
releases</a>.</em></p>
<blockquote>
<h2>v2.3.2</h2>
<h2>What's Changed</h2>
<p><strong>Changelog:</strong></p>
<h2>What's Changed</h2>
<ul>
<li>Bump golang from <code>e0ea2a1</code> to <code>f6392ff</code> by <a
href="https://github.com/dependabot"><code>@dependabot</code></a> in <a
href="https://redirect.github.com/rtCamp/action-slack-notify/pull/206">rtCamp/action-slack-notify#206</a></li>
<li>Update the way <code>text</code> is set using status-specific
messages by <a
href="https://github.com/L0RD-ZER0"><code>@L0RD-ZER0</code></a> in <a
href="https://redirect.github.com/rtCamp/action-slack-notify/pull/207">rtCamp/action-slack-notify#207</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/rtCamp/action-slack-notify/compare/v2.3.1...v2.3.2">https://github.com/rtCamp/action-slack-notify/compare/v2.3.1...v2.3.2</a></p>
<h2>v2.3.1</h2>
<h2>What's Changed</h2>
<p><strong>Changelog:</strong></p>
<h2>What's Changed</h2>
<ul>
<li>Fix variable names for custom status messages in readme by <a
href="https://github.com/modalkonform"><code>@modalkonform</code></a>
in <a
href="https://redirect.github.com/rtCamp/action-slack-notify/pull/171">rtCamp/action-slack-notify#171</a></li>
<li>Add markdown conversion for custom status messages by <a
href="https://github.com/modalkonform"><code>@modalkonform</code></a>
in <a
href="https://redirect.github.com/rtCamp/action-slack-notify/pull/172">rtCamp/action-slack-notify#172</a></li>
<li>Pin <code>Dockerfile</code> digests to the index instead of a
specific manifest by <a
href="https://github.com/noamcohen97"><code>@noamcohen97</code></a> in
<a
href="https://redirect.github.com/rtCamp/action-slack-notify/pull/175">rtCamp/action-slack-notify#175</a></li>
<li>Use only major version of slackify-markdown-action by <a
href="https://github.com/anagyzambo-kx"><code>@anagyzambo-kx</code></a>
in <a
href="https://redirect.github.com/rtCamp/action-slack-notify/pull/180">rtCamp/action-slack-notify#180</a></li>
<li>Make calling Slackify-Markdown more robust by <a
href="https://github.com/L0RD-ZER0"><code>@L0RD-ZER0</code></a> in <a
href="https://redirect.github.com/rtCamp/action-slack-notify/pull/181">rtCamp/action-slack-notify#181</a></li>
<li>Update CI and add Dependabot by <a
href="https://github.com/L0RD-ZER0"><code>@L0RD-ZER0</code></a> in <a
href="https://redirect.github.com/rtCamp/action-slack-notify/pull/182">rtCamp/action-slack-notify#182</a></li>
<li>Bump alpine from <code>c5b1261</code> to <code>77726ef</code> by <a
href="https://github.com/dependabot"><code>@dependabot</code></a> in <a
href="https://redirect.github.com/rtCamp/action-slack-notify/pull/184">rtCamp/action-slack-notify#184</a></li>
<li>Bump golang from <code>0466223</code> to <code>65b5d2d</code> by <a
href="https://github.com/dependabot"><code>@dependabot</code></a> in <a
href="https://redirect.github.com/rtCamp/action-slack-notify/pull/183">rtCamp/action-slack-notify#183</a></li>
<li>Update README.md by <a
href="https://github.com/Issei0804-ie"><code>@Issei0804-ie</code></a>
in <a
href="https://redirect.github.com/rtCamp/action-slack-notify/pull/197">rtCamp/action-slack-notify#197</a></li>
<li>Bump golang from 1.22-alpine3.19 to 1.23-alpine3.19 by <a
href="https://github.com/dependabot"><code>@dependabot</code></a> in <a
href="https://redirect.github.com/rtCamp/action-slack-notify/pull/196">rtCamp/action-slack-notify#196</a></li>
<li>Bump alpine from <code>77726ef</code> to <code>0a4eaa0</code> by <a
href="https://github.com/dependabot"><code>@dependabot</code></a> in <a
href="https://redirect.github.com/rtCamp/action-slack-notify/pull/195">rtCamp/action-slack-notify#195</a></li>
<li>fix: typo in readme by <a
href="https://github.com/cseas"><code>@cseas</code></a> in <a
href="https://redirect.github.com/rtCamp/action-slack-notify/pull/186">rtCamp/action-slack-notify#186</a></li>
<li>Bump alpine from <code>0a4eaa0</code> to <code>beefdbd</code> by <a
href="https://github.com/dependabot"><code>@dependabot</code></a> in <a
href="https://redirect.github.com/rtCamp/action-slack-notify/pull/199">rtCamp/action-slack-notify#199</a></li>
<li>Bump golang from <code>fe8f9c7</code> to <code>e0ea2a1</code> by <a
href="https://github.com/dependabot"><code>@dependabot</code></a> in <a
href="https://redirect.github.com/rtCamp/action-slack-notify/pull/198">rtCamp/action-slack-notify#198</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/modalkonform"><code>@modalkonform</code></a>
made their first contribution in <a
href="https://redirect.github.com/rtCamp/action-slack-notify/pull/171">rtCamp/action-slack-notify#171</a></li>
<li><a
href="https://github.com/noamcohen97"><code>@noamcohen97</code></a>
made their first contribution in <a
href="https://redirect.github.com/rtCamp/action-slack-notify/pull/175">rtCamp/action-slack-notify#175</a></li>
<li><a
href="https://github.com/anagyzambo-kx"><code>@anagyzambo-kx</code></a>
made their first contribution in <a
href="https://redirect.github.com/rtCamp/action-slack-notify/pull/180">rtCamp/action-slack-notify#180</a></li>
<li><a
href="https://github.com/dependabot"><code>@dependabot</code></a> made
their first contribution in <a
href="https://redirect.github.com/rtCamp/action-slack-notify/pull/184">rtCamp/action-slack-notify#184</a></li>
<li><a
href="https://github.com/Issei0804-ie"><code>@Issei0804-ie</code></a>
made their first contribution in <a
href="https://redirect.github.com/rtCamp/action-slack-notify/pull/197">rtCamp/action-slack-notify#197</a></li>
<li><a href="https://github.com/cseas"><code>@cseas</code></a> made
their first contribution in <a
href="https://redirect.github.com/rtCamp/action-slack-notify/pull/186">rtCamp/action-slack-notify#186</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/rtCamp/action-slack-notify/compare/v2...v2.3.1">https://github.com/rtCamp/action-slack-notify/compare/v2...v2.3.1</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/rtCamp/action-slack-notify/commit/c33737706dea87cd7784c687dadc9adf1be59990"><code>c337377</code></a>
Update action image version to v2.3.2</li>
<li><a
href="https://github.com/rtCamp/action-slack-notify/commit/1134e5125744f65948ace294907736ff0d13f375"><code>1134e51</code></a>
Merge pull request <a
href="https://redirect.github.com/rtcamp/action-slack-notify/issues/207">#207</a>
from L0RD-ZER0/master</li>
<li><a
href="https://github.com/rtCamp/action-slack-notify/commit/2e9d8e489206636939aed7c7c43e5bcb6c51f082"><code>2e9d8e4</code></a>
Update the way text is set</li>
<li><a
href="https://github.com/rtCamp/action-slack-notify/commit/3154c16259190ff5eb4675d8f012f8dc6ffbd77f"><code>3154c16</code></a>
Merge pull request <a
href="https://redirect.github.com/rtcamp/action-slack-notify/issues/206">#206</a>
from rtCamp/dependabot/docker/golang-f6392ff</li>
<li><a
href="https://github.com/rtCamp/action-slack-notify/commit/083cc1d6f422c2fc83dec678da3a51459d20cf8f"><code>083cc1d</code></a>
Bump golang from <code>e0ea2a1</code> to <code>f6392ff</code></li>
<li><a
href="https://github.com/rtCamp/action-slack-notify/commit/65e6fc1ce697e2df8149d9ae9909acc5ec5599ce"><code>65e6fc1</code></a>
Update action image version to v2.3.1</li>
<li><a
href="https://github.com/rtCamp/action-slack-notify/commit/dbbd015476f0895ba1019b49915c3d730c6c60cd"><code>dbbd015</code></a>
Merge pull request <a
href="https://redirect.github.com/rtcamp/action-slack-notify/issues/198">#198</a>
from rtCamp/dependabot/docker/golang-e0ea2a1</li>
<li><a
href="https://github.com/rtCamp/action-slack-notify/commit/9cf45d7faf33622ca83a82320f359f2200e6efd7"><code>9cf45d7</code></a>
Merge pull request <a
href="https://redirect.github.com/rtcamp/action-slack-notify/issues/199">#199</a>
from rtCamp/dependabot/docker/alpine-beefdbd8a1da6d29...</li>
<li><a
href="https://github.com/rtCamp/action-slack-notify/commit/17200f425efe2aad108af56eb58b44421648155c"><code>17200f4</code></a>
Bump alpine from <code>0a4eaa0</code> to <code>beefdbd</code></li>
<li><a
href="https://github.com/rtCamp/action-slack-notify/commit/e01e65eebf05600777e3c9208c469c0f856446af"><code>e01e65e</code></a>
Bump golang from <code>fe8f9c7</code> to <code>e0ea2a1</code></li>
<li>Additional commits viewable in <a
href="https://github.com/rtcamp/action-slack-notify/compare/4e5fb42d249be6a45a298f3c9543b111b02f7907...c33737706dea87cd7784c687dadc9adf1be59990">compare
view</a></li>
</ul>
</details>
<br />

Updates `actions/setup-node` from 4.0.4 to 4.1.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/setup-node/releases">actions/setup-node's
releases</a>.</em></p>
<blockquote>
<h2>v4.1.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Resolve High Security Alerts by upgrading Dependencies by <a
href="https://github.com/aparnajyothi-y"><code>@aparnajyothi-y</code></a>
in <a
href="https://redirect.github.com/actions/setup-node/pull/1132">actions/setup-node#1132</a></li>
<li>Upgrade IA Publish by <a
href="https://github.com/Jcambass"><code>@Jcambass</code></a> in <a
href="https://redirect.github.com/actions/setup-node/pull/1134">actions/setup-node#1134</a></li>
<li>Revise <code>isGhes</code> logic by <a
href="https://github.com/jww3"><code>@jww3</code></a> in <a
href="https://redirect.github.com/actions/setup-node/pull/1148">actions/setup-node#1148</a></li>
<li>Add architecture to cache key by <a
href="https://github.com/pengx17"><code>@pengx17</code></a> in <a
href="https://redirect.github.com/actions/setup-node/pull/843">actions/setup-node#843</a>
This addresses issues with caching by adding the architecture (arch) to
the cache key, ensuring that cache keys are accurate to prevent
conflicts.
Note: This change may break previous cache keys as they will no longer
be compatible with the new format.</li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/jww3"><code>@jww3</code></a> made their
first contribution in <a
href="https://redirect.github.com/actions/setup-node/pull/1148">actions/setup-node#1148</a></li>
<li><a href="https://github.com/pengx17"><code>@pengx17</code></a> made
their first contribution in <a
href="https://redirect.github.com/actions/setup-node/pull/843">actions/setup-node#843</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/setup-node/compare/v4...v4.1.0">https://github.com/actions/setup-node/compare/v4...v4.1.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/actions/setup-node/commit/39370e3970a6d050c480ffad4ff0ed4d3fdee5af"><code>39370e3</code></a>
fix: add arch to cached path (<a
href="https://redirect.github.com/actions/setup-node/issues/843">#843</a>)</li>
<li><a
href="https://github.com/actions/setup-node/commit/abb238b1313d8ef4d3e3a96d204e08329cafbf85"><code>abb238b</code></a>
Revise <code>isGhes</code> logic (<a
href="https://redirect.github.com/actions/setup-node/issues/1148">#1148</a>)</li>
<li><a
href="https://github.com/actions/setup-node/commit/aca7b64a59c0063db8564e0ffdadd3887f1cbae5"><code>aca7b64</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/setup-node/issues/1134">#1134</a>
from actions/Jcambass-patch-1</li>
<li><a
href="https://github.com/actions/setup-node/commit/88de2a3d99c13aa734c49200e8bc673fb0a80ab8"><code>88de2a3</code></a>
Resolve High Security Alerts by upgrading Dependencies (<a
href="https://redirect.github.com/actions/setup-node/issues/1132">#1132</a>)</li>
<li><a
href="https://github.com/actions/setup-node/commit/d6ebc7b438e9cf1b22a3c440a164b179ed0e37d6"><code>d6ebc7b</code></a>
Upgrade IA Publish</li>
<li>See full diff in <a
href="https://github.com/actions/setup-node/compare/0a44ba7841725637a19e28fa30b79a866c81b0a6...39370e3970a6d050c480ffad4ff0ed4d3fdee5af">compare
view</a></li>
</ul>
</details>
<br />

Updates `sigstore/cosign-installer` from 3.6.0 to 3.7.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/sigstore/cosign-installer/releases">sigstore/cosign-installer's
releases</a>.</em></p>
<blockquote>
<h2>v3.7.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Bump actions/checkout from 4.1.7 to 4.2.0 by <a
href="https://github.com/dependabot"><code>@dependabot</code></a> in <a
href="https://redirect.github.com/sigstore/cosign-installer/pull/172">sigstore/cosign-installer#172</a></li>
<li>bump for latest cosign v2.4.1 release by <a
href="https://github.com/bobcallaway"><code>@bobcallaway</code></a> in
<a
href="https://redirect.github.com/sigstore/cosign-installer/pull/173">sigstore/cosign-installer#173</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/sigstore/cosign-installer/compare/v3.6.0...v3.7.0">https://github.com/sigstore/cosign-installer/compare/v3.6.0...v3.7.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/sigstore/cosign-installer/commit/dc72c7d5c4d10cd6bcb8cf6e3fd625a9e5e537da"><code>dc72c7d</code></a>
bump for latest cosign v2.4.1 release (<a
href="https://redirect.github.com/sigstore/cosign-installer/issues/173">#173</a>)</li>
<li><a
href="https://github.com/sigstore/cosign-installer/commit/08bb361e01a71697a353a4d79b633cccf31f5530"><code>08bb361</code></a>
Bump actions/checkout from 4.1.7 to 4.2.0 (<a
href="https://redirect.github.com/sigstore/cosign-installer/issues/172">#172</a>)</li>
<li>See full diff in <a
href="https://github.com/sigstore/cosign-installer/compare/4959ce089c160fddf62f7b42464195ba1a56d382...dc72c7d5c4d10cd6bcb8cf6e3fd625a9e5e537da">compare
view</a></li>
</ul>
</details>
<br />

Updates `actions/setup-go` from 5.0.2 to 5.1.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/setup-go/releases">actions/setup-go's
releases</a>.</em></p>
<blockquote>
<h2>v5.1.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Add workflow file for publishing releases to immutable action
package by <a
href="https://github.com/Jcambass"><code>@Jcambass</code></a> in <a
href="https://redirect.github.com/actions/setup-go/pull/500">actions/setup-go#500</a></li>
<li>Upgrade IA Publish by <a
href="https://github.com/Jcambass"><code>@Jcambass</code></a> in <a
href="https://redirect.github.com/actions/setup-go/pull/502">actions/setup-go#502</a></li>
<li>Add architecture to cache key by <a
href="https://github.com/Zxilly"><code>@Zxilly</code></a> in <a
href="https://redirect.github.com/actions/setup-go/pull/493">actions/setup-go#493</a>
This addresses issues with caching by adding the architecture (arch) to
the cache key, ensuring that cache keys are accurate to prevent
conflicts.
Note: This change may break previous cache keys as they will no longer
be compatible with the new format.</li>
<li>Enhance workflows and Upgrade micromatch Dependency by <a
href="https://github.com/priyagupta108"><code>@priyagupta108</code></a>
in <a
href="https://redirect.github.com/actions/setup-go/pull/510">actions/setup-go#510</a></li>
</ul>
<p><strong>Bug Fixes</strong></p>
<ul>
<li>Revise <code>isGhes</code> logic by <a
href="https://github.com/jww3"><code>@jww3</code></a> in <a
href="https://redirect.github.com/actions/setup-go/pull/511">actions/setup-go#511</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/Zxilly"><code>@Zxilly</code></a> made
their first contribution in <a
href="https://redirect.github.com/actions/setup-go/pull/493">actions/setup-go#493</a></li>
<li><a href="https://github.com/Jcambass"><code>@Jcambass</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/setup-go/pull/500">actions/setup-go#500</a></li>
<li><a href="https://github.com/jww3"><code>@jww3</code></a> made their
first contribution in <a
href="https://redirect.github.com/actions/setup-go/pull/511">actions/setup-go#511</a></li>
<li><a
href="https://github.com/priyagupta108"><code>@priyagupta108</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/setup-go/pull/510">actions/setup-go#510</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/setup-go/compare/v5...v5.1.0">https://github.com/actions/setup-go/compare/v5...v5.1.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/actions/setup-go/commit/41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed"><code>41dfa10</code></a>
Enhance workflows and Upgrade micromatch Dependency (<a
href="https://redirect.github.com/actions/setup-go/issues/510">#510</a>)</li>
<li><a
href="https://github.com/actions/setup-go/commit/941977282cd715ac8e0b3adc8555bef6dc794b7e"><code>9419772</code></a>
Revise <code>isGhes</code> logic (<a
href="https://redirect.github.com/actions/setup-go/issues/511">#511</a>)</li>
<li><a
href="https://github.com/actions/setup-go/commit/d60b41a563a30eac31c3ec623e6ff0b3f16e1a06"><code>d60b41a</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/setup-go/issues/502">#502</a>
from actions/Jcambass-patch-1</li>
<li><a
href="https://github.com/actions/setup-go/commit/e09f57f6a9dc1a4c326dfc2aaf66b49f6c56f9f8"><code>e09f57f</code></a>
Upgrade IA Publish</li>
<li><a
href="https://github.com/actions/setup-go/commit/df1a11710ed378b187f40c71eb3d6c08d82e7108"><code>df1a117</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/setup-go/issues/500">#500</a>
from actions/Jcambass-patch-1</li>
<li><a
href="https://github.com/actions/setup-go/commit/49582f64768fe5808736e4f6d4a39b55b1d0ee52"><code>49582f6</code></a>
Add workflow file for publishing releases to immutable action
package</li>
<li><a
href="https://github.com/actions/setup-go/commit/b26d40294f8ad76fcc90b915dac85892322fe62d"><code>b26d402</code></a>
fix: add arch to cache key (<a
href="https://redirect.github.com/actions/setup-go/issues/493">#493</a>)</li>
<li>See full diff in <a
href="https://github.com/actions/setup-go/compare/0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32...41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Loading branch information

dependabot[bot] authored Oct 29, 2024

1 parent 8e0370c commit 95d244c

.github/workflows/autodocs-platform.yaml

            
                      Original file line number
                      Diff line number
                      Diff line change
                  
    @@ -31,11 +31,11 @@ jobs:
  
            egress-policy: audit

        - name: 'Checkout default branch to $GITHUB_WORKSPACE dir'

          uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0

          uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

        - name: Authenticate to Google Cloud

          id: auth

          uses: google-github-actions/auth@62cf5bd3e4211a0a0b51f2c6d6a37129d828611d # v2.1.5

          uses: google-github-actions/auth@8254fb75a33b976a221574d287e93919e6a36f70 # v2.1.6

          with:

            service_account: "github-chainguard-academy@chainguard-academy.iam.gserviceaccount.com"

            workload_identity_provider: "projects/456977358484/locations/global/workloadIdentityPools/chainguard-academy/providers/chainguard-edu"

    @@ -56,7 +56,7 @@ jobs:
  
            fi

        - name: Post failure notice to Slack

          uses: rtCamp/action-slack-notify@4e5fb42d249be6a45a298f3c9543b111b02f7907 # v2.3.0

          uses: rtCamp/action-slack-notify@c33737706dea87cd7784c687dadc9adf1be59990 # v2.3.2

          if: ${{ failure() }}

          env:

            SLACK_ICON: http://github.com/chainguard-dev.png?size=48

    @@ -86,14 +86,14 @@ jobs:
  
            egress-policy: audit

        - name: 'Checkout default branch to $GITHUB_WORKSPACE dir'

          uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0

          uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

        - name: 'Setup gitsign'

          uses: chainguard-dev/actions/setup-gitsign@main

        - name: Authenticate to Google Cloud

          id: auth

          uses: google-github-actions/auth@62cf5bd3e4211a0a0b51f2c6d6a37129d828611d # v2.1.5

          uses: google-github-actions/auth@8254fb75a33b976a221574d287e93919e6a36f70 # v2.1.6

          with:

            service_account: "github-chainguard-academy@chainguard-academy.iam.gserviceaccount.com"

            workload_identity_provider: "projects/456977358484/locations/global/workloadIdentityPools/chainguard-academy/providers/chainguard-edu"

    @@ -104,7 +104,7 @@ jobs:
  
            storage_bucket: "${{ secrets.STORAGE_BUCKET }}"

            platform_changelog: "${{ env.PLATFORM_CHANGELOG }}"

        - uses: actions/setup-node@0a44ba7841725637a19e28fa30b79a866c81b0a6 # v4.0.4

        - uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0

          with:

            node-version: 16

    @@ -140,7 +140,7 @@ jobs:
  
            assignees: erikaheidi

        - name: Post failure notice to Slack

          uses: rtCamp/action-slack-notify@4e5fb42d249be6a45a298f3c9543b111b02f7907 # v2.3.0

          uses: rtCamp/action-slack-notify@c33737706dea87cd7784c687dadc9adf1be59990 # v2.3.2

          if: ${{ failure() }}

          env:

            SLACK_ICON: http://github.com/chainguard-dev.png?size=48

.github/workflows/build-terminal-images.yaml

            
                      Original file line number
                      Diff line number
                      Diff line change
                  
    @@ -35,10 +35,10 @@ jobs:
  
            with:

              egress-policy: audit

          - uses: sigstore/cosign-installer@4959ce089c160fddf62f7b42464195ba1a56d382 # v3.6.0

          - uses: sigstore/cosign-installer@dc72c7d5c4d10cd6bcb8cf6e3fd625a9e5e537da # v3.7.0

          - name: 'Checkout default branch to $GITHUB_WORKSPACE dir'

            uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0

            uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

          - name: melange keygen

            shell: bash

    @@ -54,7 +54,7 @@ jobs:
  
          - name: Authenticate to Google Cloud

            id: auth

            uses: google-github-actions/auth@62cf5bd3e4211a0a0b51f2c6d6a37129d828611d # v2.1.5

            uses: google-github-actions/auth@8254fb75a33b976a221574d287e93919e6a36f70 # v2.1.6

            with:

              service_account: "github-chainguard-academy@chainguard-academy.iam.gserviceaccount.com"

              workload_identity_provider: "projects/456977358484/locations/global/workloadIdentityPools/chainguard-academy/providers/chainguard-edu"

    @@ -104,7 +104,7 @@ jobs:
  
          #  run: cosign sign -y "$(cat image-refs.txt)

          - name: Post failure notice to Slack

            uses: rtCamp/action-slack-notify@4e5fb42d249be6a45a298f3c9543b111b02f7907 # v2.3.0

            uses: rtCamp/action-slack-notify@c33737706dea87cd7784c687dadc9adf1be59990 # v2.3.2

            if: ${{ failure() }}

            env:

              SLACK_ICON: http://github.com/chainguard-dev.png?size=48

.github/workflows/check-links.yaml

            
                      Original file line number
                      Diff line number
                      Diff line change
                  
    @@ -28,7 +28,7 @@ jobs:
  
              egress-policy: audit

          - name: 'Checkout default branch to $GITHUB_WORKSPACE dir'

            uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0

            uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

          - name: Install jq

            run: |

    @@ -41,7 +41,7 @@ jobs:
  
              sudo chmod +x /usr/local/bin/yq

          - name: Set up Go

            uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # actions/setup-go@v4

            uses: actions/setup-go@41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed # actions/setup-go@v4

            with:

              go-version: '^1.20.0'

    @@ -86,7 +86,7 @@ jobs:
  
              fi

          - name: Post failure notice to Slack

            uses: rtCamp/action-slack-notify@4e5fb42d249be6a45a298f3c9543b111b02f7907 # v2.3.0

            uses: rtCamp/action-slack-notify@c33737706dea87cd7784c687dadc9adf1be59990 # v2.3.2

            if: ${{ failure() }}

            env:

              SLACK_ICON: http://github.com/chainguard-dev.png?size=48

.github/workflows/cloud-run.yaml

            
                      Original file line number
                      Diff line number
                      Diff line change
                  
    @@ -21,9 +21,9 @@ jobs:
  
            egress-policy: audit

        - name: 'Checkout default branch to $GITHUB_WORKSPACE dir'

          uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0

          uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

        - uses: actions/setup-node@0a44ba7841725637a19e28fa30b79a866c81b0a6 # v3

        - uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v3

          with:

            node-version: 16

    @@ -38,7 +38,7 @@ jobs:
  
        - name: Authenticate to Google Cloud

          id: auth

          uses: google-github-actions/auth@62cf5bd3e4211a0a0b51f2c6d6a37129d828611d # v0

          uses: google-github-actions/auth@8254fb75a33b976a221574d287e93919e6a36f70 # v0

          with:

            token_format: 'access_token'

            project_id: '${{ secrets.PROJECT_ID }}'

    @@ -76,7 +76,7 @@ jobs:
  
            terraform apply -auto-approve

        - name: Post failure notice to Slack

          uses: rtCamp/action-slack-notify@4e5fb42d249be6a45a298f3c9543b111b02f7907 # v2.3.0

          uses: rtCamp/action-slack-notify@c33737706dea87cd7784c687dadc9adf1be59990 # v2.3.2

          if: ${{ failure() }}

          env:

            SLACK_ICON: http://github.com/chainguard-dev.png?size=48

.github/workflows/rumble-vulnerability-data.yaml

            
                      Original file line number
                      Diff line number
                      Diff line change
                  
    @@ -31,17 +31,17 @@ jobs:
  
              egress-policy: audit

          - name: 'Checkout default branch to $GITHUB_WORKSPACE dir'

            uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0

            uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

          - name: Set up Go

            uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # actions/setup-go@v4

            uses: actions/setup-go@41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed # actions/setup-go@v4

            with:

              go-version-file: ./tools/rumble/go.mod

              check-latest: true

          - name: Authenticate to Google Cloud

            id: auth

            uses: google-github-actions/auth@62cf5bd3e4211a0a0b51f2c6d6a37129d828611d # v2.1.5

            uses: google-github-actions/auth@8254fb75a33b976a221574d287e93919e6a36f70 # v2.1.6

            with:

              service_account: "github-chainguard-academy@chainguard-academy.iam.gserviceaccount.com"

              workload_identity_provider: "projects/456977358484/locations/global/workloadIdentityPools/chainguard-academy/providers/chainguard-edu"

    @@ -75,7 +75,7 @@ jobs:
  
                --upload

          - name: Post failure notice to Slack

            uses: rtCamp/action-slack-notify@4e5fb42d249be6a45a298f3c9543b111b02f7907 # v2.3.0

            uses: rtCamp/action-slack-notify@c33737706dea87cd7784c687dadc9adf1be59990 # v2.3.2

            if: ${{ failure() }}

            env:

              SLACK_ICON: http://github.com/chainguard-dev.png?size=48

0 comments on commit `95d244c`

Please sign in to comment.

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Commit

There are no files selected for viewing

0 comments on commit `95d244c`

Commit

There are no files selected for viewing

0 comments on commit 95d244c

0 comments on commit `95d244c`