Skip to content

Commit

Permalink
chore(deps): update maru support dependencies (#162)
Browse files Browse the repository at this point in the history
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [actions/checkout](https://redirect.github.com/actions/checkout) |
action | patch | `v4.2.1` -> `v4.2.2` |
|
[actions/dependency-review-action](https://redirect.github.com/actions/dependency-review-action)
| action | minor | `v4.3.4` -> `v4.5.0` |
| [actions/setup-go](https://redirect.github.com/actions/setup-go) |
action | minor | `v5.0.2` -> `v5.2.0` |
| [actions/setup-node](https://redirect.github.com/actions/setup-node) |
action | minor | `v4.0.4` -> `v4.1.0` |
| [anchore/sbom-action](https://redirect.github.com/anchore/sbom-action)
| action | patch | `v0.17.4` -> `v0.17.9` |
|
[github/codeql-action](https://redirect.github.com/github/codeql-action)
| action | minor | `v3.26.13` -> `v3.27.9` |
|
[goreleaser/goreleaser-action](https://redirect.github.com/goreleaser/goreleaser-action)
| action | minor | `v6.0.0` -> `v6.1.0` |
|
[morphy/revive-action](https://redirect.github.com/morphy2k/revive-action)
| docker | digest | `d6f0455` -> `793c4e8` |
| [zarf-dev/zarf](https://redirect.github.com/zarf-dev/zarf) | | minor |
`v0.41.0` -> `v0.45.0` |

---

### Release Notes

<details>
<summary>actions/checkout (actions/checkout)</summary>

###
[`v4.2.2`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v422)

[Compare
Source](https://redirect.github.com/actions/checkout/compare/v4.2.1...v4.2.2)

- `url-helper.ts` now leverages well-known environment variables by
[@&#8203;jww3](https://redirect.github.com/jww3) in
[https://github.com/actions/checkout/pull/1941](https://redirect.github.com/actions/checkout/pull/1941)
- Expand unit test coverage for `isGhes` by
[@&#8203;jww3](https://redirect.github.com/jww3) in
[https://github.com/actions/checkout/pull/1946](https://redirect.github.com/actions/checkout/pull/1946)

</details>

<details>
<summary>actions/dependency-review-action
(actions/dependency-review-action)</summary>

###
[`v4.5.0`](https://redirect.github.com/actions/dependency-review-action/releases/tag/v4.5.0)

[Compare
Source](https://redirect.github.com/actions/dependency-review-action/compare/v4.4.0...v4.5.0)

#### What's Changed

- Bump got from 14.4.2 to 14.4.3 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/actions/dependency-review-action/pull/844](https://redirect.github.com/actions/dependency-review-action/pull/844)
- Bump nodemon from 3.1.0 to 3.1.7 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/actions/dependency-review-action/pull/847](https://redirect.github.com/actions/dependency-review-action/pull/847)
- Bump [@&#8203;vercel/ncc](https://redirect.github.com/vercel/ncc) from
0.38.1 to 0.38.3 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/actions/dependency-review-action/pull/849](https://redirect.github.com/actions/dependency-review-action/pull/849)
- Overriding the cross-spawn dependency to use a safe version by
[@&#8203;Ahmed3lmallah](https://redirect.github.com/Ahmed3lmallah) in
[https://github.com/actions/dependency-review-action/pull/850](https://redirect.github.com/actions/dependency-review-action/pull/850)
- fix: add summary comment on failure when warn-only: true by
[@&#8203;ebickle](https://redirect.github.com/ebickle) in
[https://github.com/actions/dependency-review-action/pull/827](https://redirect.github.com/actions/dependency-review-action/pull/827)
- Prepare for 4.5.0 release by
[@&#8203;Ahmed3lmallah](https://redirect.github.com/Ahmed3lmallah) in
[https://github.com/actions/dependency-review-action/pull/851](https://redirect.github.com/actions/dependency-review-action/pull/851)

#### New Contributors

- [@&#8203;ebickle](https://redirect.github.com/ebickle) made their
first contribution in
[https://github.com/actions/dependency-review-action/pull/827](https://redirect.github.com/actions/dependency-review-action/pull/827)

**Full Changelog**:
https://github.com/actions/dependency-review-action/compare/v4...v4.5.0

###
[`v4.4.0`](https://redirect.github.com/actions/dependency-review-action/releases/tag/v4.4.0)

[Compare
Source](https://redirect.github.com/actions/dependency-review-action/compare/v4.3.5...v4.4.0)

#### What's Changed

- Fix for merge_group event bug by
[@&#8203;Ahmed3lmallah](https://redirect.github.com/Ahmed3lmallah) in
[https://github.com/actions/dependency-review-action/pull/846](https://redirect.github.com/actions/dependency-review-action/pull/846)

**Full Changelog**:
https://github.com/actions/dependency-review-action/compare/v4.3.5...v4.4.0

###
[`v4.3.5`](https://redirect.github.com/actions/dependency-review-action/releases/tag/v4.3.5)

[Compare
Source](https://redirect.github.com/actions/dependency-review-action/compare/v4.3.4...v4.3.5)

#### What's Changed

- fix: getRefs function to handle merge_group events by
[@&#8203;louis-bompart](https://redirect.github.com/louis-bompart) in
[https://github.com/actions/dependency-review-action/pull/766](https://redirect.github.com/actions/dependency-review-action/pull/766)
- Create pull_request_template.md by
[@&#8203;jonjanego](https://redirect.github.com/jonjanego) in
[https://github.com/actions/dependency-review-action/pull/794](https://redirect.github.com/actions/dependency-review-action/pull/794)
- Update CONTRIBUTING.md by
[@&#8203;jonjanego](https://redirect.github.com/jonjanego) in
[https://github.com/actions/dependency-review-action/pull/793](https://redirect.github.com/actions/dependency-review-action/pull/793)
- Bump [@&#8203;types/node](https://redirect.github.com/types/node) from
20.11.28 to 20.16.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/actions/dependency-review-action/pull/815](https://redirect.github.com/actions/dependency-review-action/pull/815)
- Upgrade transitive micromatch library by
[@&#8203;elireisman](https://redirect.github.com/elireisman) in
[https://github.com/actions/dependency-review-action/pull/829](https://redirect.github.com/actions/dependency-review-action/pull/829)
- Do not list changed dependencies in summary by
[@&#8203;hmaurer](https://redirect.github.com/hmaurer) in
[https://github.com/actions/dependency-review-action/pull/828](https://redirect.github.com/actions/dependency-review-action/pull/828)
- Update stale.yaml by
[@&#8203;jonjanego](https://redirect.github.com/jonjanego) in
[https://github.com/actions/dependency-review-action/pull/832](https://redirect.github.com/actions/dependency-review-action/pull/832)
- Bump got from 14.4.1 to 14.4.2 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/actions/dependency-review-action/pull/822](https://redirect.github.com/actions/dependency-review-action/pull/822)
- Bump eslint-plugin-jest and ts-jest by
[@&#8203;Ahmed3lmallah](https://redirect.github.com/Ahmed3lmallah) in
[https://github.com/actions/dependency-review-action/pull/840](https://redirect.github.com/actions/dependency-review-action/pull/840)

#### New Contributors

- [@&#8203;louis-bompart](https://redirect.github.com/louis-bompart)
made their first contribution in
[https://github.com/actions/dependency-review-action/pull/766](https://redirect.github.com/actions/dependency-review-action/pull/766)
- [@&#8203;Ahmed3lmallah](https://redirect.github.com/Ahmed3lmallah)
made their first contribution in
[https://github.com/actions/dependency-review-action/pull/840](https://redirect.github.com/actions/dependency-review-action/pull/840)

**Full Changelog**:
https://github.com/actions/dependency-review-action/compare/v4.3.4...v4.3.5

</details>

<details>
<summary>actions/setup-go (actions/setup-go)</summary>

###
[`v5.2.0`](https://redirect.github.com/actions/setup-go/releases/tag/v5.2.0)

[Compare
Source](https://redirect.github.com/actions/setup-go/compare/v5.1.0...v5.2.0)

#### What's Changed

- Leveraging the raw API to retrieve the version-manifest, as it does
not impose a rate limit and hence facilitates unrestricted consumption
without the need for a token for Github Enterprise Servers by
[@&#8203;Shegox](https://redirect.github.com/Shegox) in
[https://github.com/actions/setup-go/pull/496](https://redirect.github.com/actions/setup-go/pull/496)

#### New Contributors

- [@&#8203;Shegox](https://redirect.github.com/Shegox) made their first
contribution in
[https://github.com/actions/setup-go/pull/496](https://redirect.github.com/actions/setup-go/pull/496)

**Full Changelog**:
https://github.com/actions/setup-go/compare/v5...v5.2.0

###
[`v5.1.0`](https://redirect.github.com/actions/setup-go/releases/tag/v5.1.0)

[Compare
Source](https://redirect.github.com/actions/setup-go/compare/v5.0.2...v5.1.0)

##### What's Changed

- Add workflow file for publishing releases to immutable action package
by [@&#8203;Jcambass](https://redirect.github.com/Jcambass) in
[https://github.com/actions/setup-go/pull/500](https://redirect.github.com/actions/setup-go/pull/500)
- Upgrade IA Publish by
[@&#8203;Jcambass](https://redirect.github.com/Jcambass) in
[https://github.com/actions/setup-go/pull/502](https://redirect.github.com/actions/setup-go/pull/502)
- Add architecture to cache key by
[@&#8203;Zxilly](https://redirect.github.com/Zxilly) in
[https://github.com/actions/setup-go/pull/493](https://redirect.github.com/actions/setup-go/pull/493)
This addresses issues with caching by adding the architecture (arch) to
the cache key, ensuring that cache keys are accurate to prevent
conflicts.
Note: This change may break previous cache keys as they will no longer
be compatible with the new format.
- Enhance workflows and Upgrade micromatch Dependency by
[@&#8203;priyagupta108](https://redirect.github.com/priyagupta108) in
[https://github.com/actions/setup-go/pull/510](https://redirect.github.com/actions/setup-go/pull/510)

**Bug Fixes**

- Revise `isGhes` logic by
[@&#8203;jww3](https://redirect.github.com/jww3) in
[https://github.com/actions/setup-go/pull/511](https://redirect.github.com/actions/setup-go/pull/511)

##### New Contributors

- [@&#8203;Zxilly](https://redirect.github.com/Zxilly) made their first
contribution in
[https://github.com/actions/setup-go/pull/493](https://redirect.github.com/actions/setup-go/pull/493)
- [@&#8203;Jcambass](https://redirect.github.com/Jcambass) made their
first contribution in
[https://github.com/actions/setup-go/pull/500](https://redirect.github.com/actions/setup-go/pull/500)
- [@&#8203;jww3](https://redirect.github.com/jww3) made their first
contribution in
[https://github.com/actions/setup-go/pull/511](https://redirect.github.com/actions/setup-go/pull/511)
- [@&#8203;priyagupta108](https://redirect.github.com/priyagupta108)
made their first contribution in
[https://github.com/actions/setup-go/pull/510](https://redirect.github.com/actions/setup-go/pull/510)

**Full Changelog**:
https://github.com/actions/setup-go/compare/v5...v5.1.0

</details>

<details>
<summary>actions/setup-node (actions/setup-node)</summary>

###
[`v4.1.0`](https://redirect.github.com/actions/setup-node/compare/v4.0.4...v4.1.0)

[Compare
Source](https://redirect.github.com/actions/setup-node/compare/v4.0.4...v4.1.0)

</details>

<details>
<summary>anchore/sbom-action (anchore/sbom-action)</summary>

###
[`v0.17.9`](https://redirect.github.com/anchore/sbom-action/releases/tag/v0.17.9)

[Compare
Source](https://redirect.github.com/anchore/sbom-action/compare/v0.17.8...v0.17.9)

#### Changes in v0.17.9

- chore(deps): update Syft to v1.18.1
([#&#8203;510](https://redirect.github.com/anchore/sbom-action/issues/510))
\[[anchore-actions-token-generator](https://redirect.github.com/anchore-actions-token-generator)]
- chore(deps): update Syft to v1.18.0
([#&#8203;509](https://redirect.github.com/anchore/sbom-action/issues/509))
\[[anchore-actions-token-generator](https://redirect.github.com/anchore-actions-token-generator)]

###
[`v0.17.8`](https://redirect.github.com/anchore/sbom-action/releases/tag/v0.17.8)

[Compare
Source](https://redirect.github.com/anchore/sbom-action/compare/v0.17.7...v0.17.8)

##### Changes in v0.17.8

- chore(deps): update Syft to v1.17.0
([#&#8203;507](https://redirect.github.com/anchore/sbom-action/issues/507))
\[[anchore-actions-token-generator](https://redirect.github.com/anchore-actions-token-generator)]

###
[`v0.17.7`](https://redirect.github.com/anchore/sbom-action/releases/tag/v0.17.7)

[Compare
Source](https://redirect.github.com/anchore/sbom-action/compare/v0.17.6...v0.17.7)

#### Changes in v0.17.7

- chore(deps): update Syft to v1.16.0
([#&#8203;506](https://redirect.github.com/anchore/sbom-action/issues/506))
\[[anchore-actions-token-generator](https://redirect.github.com/anchore-actions-token-generator)]

###
[`v0.17.6`](https://redirect.github.com/anchore/sbom-action/releases/tag/v0.17.6)

[Compare
Source](https://redirect.github.com/anchore/sbom-action/compare/v0.17.5...v0.17.6)

#### Changes in v0.17.6

- chore(deps): update Syft to v1.15.0
([#&#8203;505](https://redirect.github.com/anchore/sbom-action/issues/505))
\[[anchore-actions-token-generator](https://redirect.github.com/anchore-actions-token-generator)]
- chore(deps): bump actions/checkout from 4.2.1 to 4.2.2
([#&#8203;504](https://redirect.github.com/anchore/sbom-action/issues/504))
\[[dependabot](https://redirect.github.com/dependabot)]

###
[`v0.17.5`](https://redirect.github.com/anchore/sbom-action/releases/tag/v0.17.5)

[Compare
Source](https://redirect.github.com/anchore/sbom-action/compare/v0.17.4...v0.17.5)

#### Changes in v0.17.5

- chore(deps): update Syft to v1.14.2
([#&#8203;503](https://redirect.github.com/anchore/sbom-action/issues/503))
\[[anchore-actions-token-generator](https://redirect.github.com/anchore-actions-token-generator)]

</details>

<details>
<summary>github/codeql-action (github/codeql-action)</summary>

###
[`v3.27.9`](https://redirect.github.com/github/codeql-action/releases/tag/v3.27.9)

[Compare
Source](https://redirect.github.com/github/codeql-action/compare/v3.27.8...v3.27.9)

##### CodeQL Action Changelog

See the [releases
page](https://redirect.github.com/github/codeql-action/releases) for the
relevant changes to the CodeQL CLI and language packs.

Note that the only difference between `v2` and `v3` of the CodeQL Action
is the node version they support, with `v3` running on node 20 while we
continue to release `v2` to support running on node 16. For example
`3.22.11` was the first `v3` release and is functionally identical to
`2.22.11`. This approach ensures an easy way to track exactly which
features are included in different versions, indicated by the minor and
patch version numbers.

##### 3.27.9 - 12 Dec 2024

No user facing changes.

See the full
[CHANGELOG.md](https://redirect.github.com/github/codeql-action/blob/v3.27.9/CHANGELOG.md)
for more information.

###
[`v3.27.8`](https://redirect.github.com/github/codeql-action/compare/v3.27.7...v3.27.8)

[Compare
Source](https://redirect.github.com/github/codeql-action/compare/v3.27.7...v3.27.8)

###
[`v3.27.7`](https://redirect.github.com/github/codeql-action/releases/tag/v3.27.7)

[Compare
Source](https://redirect.github.com/github/codeql-action/compare/v3.27.6...v3.27.7)

##### CodeQL Action Changelog

See the [releases
page](https://redirect.github.com/github/codeql-action/releases) for the
relevant changes to the CodeQL CLI and language packs.

Note that the only difference between `v2` and `v3` of the CodeQL Action
is the node version they support, with `v3` running on node 20 while we
continue to release `v2` to support running on node 16. For example
`3.22.11` was the first `v3` release and is functionally identical to
`2.22.11`. This approach ensures an easy way to track exactly which
features are included in different versions, indicated by the minor and
patch version numbers.

##### 3.27.7 - 10 Dec 2024

- We are rolling out a change in December 2024 that will extract the
CodeQL bundle directly to the toolcache to improve performance.
[#&#8203;2631](https://redirect.github.com/github/codeql-action/pull/2631)
- Update default CodeQL bundle version to 2.20.0.
[#&#8203;2636](https://redirect.github.com/github/codeql-action/pull/2636)

See the full
[CHANGELOG.md](https://redirect.github.com/github/codeql-action/blob/v3.27.7/CHANGELOG.md)
for more information.

###
[`v3.27.6`](https://redirect.github.com/github/codeql-action/compare/v3.27.5...v3.27.6)

[Compare
Source](https://redirect.github.com/github/codeql-action/compare/v3.27.5...v3.27.6)

###
[`v3.27.5`](https://redirect.github.com/github/codeql-action/compare/v3.27.4...v3.27.5)

[Compare
Source](https://redirect.github.com/github/codeql-action/compare/v3.27.4...v3.27.5)

###
[`v3.27.4`](https://redirect.github.com/github/codeql-action/releases/tag/v3.27.4)

[Compare
Source](https://redirect.github.com/github/codeql-action/compare/v3.27.3...v3.27.4)

##### CodeQL Action Changelog

See the [releases
page](https://redirect.github.com/github/codeql-action/releases) for the
relevant changes to the CodeQL CLI and language packs.

Note that the only difference between `v2` and `v3` of the CodeQL Action
is the node version they support, with `v3` running on node 20 while we
continue to release `v2` to support running on node 16. For example
`3.22.11` was the first `v3` release and is functionally identical to
`2.22.11`. This approach ensures an easy way to track exactly which
features are included in different versions, indicated by the minor and
patch version numbers.

##### 3.27.4 - 14 Nov 2024

No user facing changes.

See the full
[CHANGELOG.md](https://redirect.github.com/github/codeql-action/blob/v3.27.4/CHANGELOG.md)
for more information.

###
[`v3.27.3`](https://redirect.github.com/github/codeql-action/releases/tag/v3.27.3)

[Compare
Source](https://redirect.github.com/github/codeql-action/compare/v3.27.2...v3.27.3)

##### CodeQL Action Changelog

See the [releases
page](https://redirect.github.com/github/codeql-action/releases) for the
relevant changes to the CodeQL CLI and language packs.

Note that the only difference between `v2` and `v3` of the CodeQL Action
is the node version they support, with `v3` running on node 20 while we
continue to release `v2` to support running on node 16. For example
`3.22.11` was the first `v3` release and is functionally identical to
`2.22.11`. This approach ensures an easy way to track exactly which
features are included in different versions, indicated by the minor and
patch version numbers.

##### 3.27.3 - 12 Nov 2024

No user facing changes.

See the full
[CHANGELOG.md](https://redirect.github.com/github/codeql-action/blob/v3.27.3/CHANGELOG.md)
for more information.

###
[`v3.27.2`](https://redirect.github.com/github/codeql-action/releases/tag/v3.27.2)

[Compare
Source](https://redirect.github.com/github/codeql-action/compare/v3.27.1...v3.27.2)

##### CodeQL Action Changelog

See the [releases
page](https://redirect.github.com/github/codeql-action/releases) for the
relevant changes to the CodeQL CLI and language packs.

Note that the only difference between `v2` and `v3` of the CodeQL Action
is the node version they support, with `v3` running on node 20 while we
continue to release `v2` to support running on node 16. For example
`3.22.11` was the first `v3` release and is functionally identical to
`2.22.11`. This approach ensures an easy way to track exactly which
features are included in different versions, indicated by the minor and
patch version numbers.

##### 3.27.2 - 12 Nov 2024

- Fixed an issue where setting up the CodeQL tools would sometimes fail
with the message "Invalid value 'undefined' for header 'authorization'".
[#&#8203;2590](https://redirect.github.com/github/codeql-action/pull/2590)

See the full
[CHANGELOG.md](https://redirect.github.com/github/codeql-action/blob/v3.27.2/CHANGELOG.md)
for more information.

###
[`v3.27.1`](https://redirect.github.com/github/codeql-action/releases/tag/v3.27.1)

[Compare
Source](https://redirect.github.com/github/codeql-action/compare/v3.27.0...v3.27.1)

##### CodeQL Action Changelog

See the [releases
page](https://redirect.github.com/github/codeql-action/releases) for the
relevant changes to the CodeQL CLI and language packs.

Note that the only difference between `v2` and `v3` of the CodeQL Action
is the node version they support, with `v3` running on node 20 while we
continue to release `v2` to support running on node 16. For example
`3.22.11` was the first `v3` release and is functionally identical to
`2.22.11`. This approach ensures an easy way to track exactly which
features are included in different versions, indicated by the minor and
patch version numbers.

##### 3.27.1 - 08 Nov 2024

- The CodeQL Action now downloads bundles compressed using Zstandard on
GitHub Enterprise Server when using Linux or macOS runners. This speeds
up the installation of the CodeQL tools. This feature is already
available to GitHub.com users.
[#&#8203;2573](https://redirect.github.com/github/codeql-action/pull/2573)
- Update default CodeQL bundle version to 2.19.3.
[#&#8203;2576](https://redirect.github.com/github/codeql-action/pull/2576)

See the full
[CHANGELOG.md](https://redirect.github.com/github/codeql-action/blob/v3.27.1/CHANGELOG.md)
for more information.

###
[`v3.27.0`](https://redirect.github.com/github/codeql-action/releases/tag/v3.27.0)

[Compare
Source](https://redirect.github.com/github/codeql-action/compare/v3.26.13...v3.27.0)

##### CodeQL Action Changelog

See the [releases
page](https://redirect.github.com/github/codeql-action/releases) for the
relevant changes to the CodeQL CLI and language packs.

Note that the only difference between `v2` and `v3` of the CodeQL Action
is the node version they support, with `v3` running on node 20 while we
continue to release `v2` to support running on node 16. For example
`3.22.11` was the first `v3` release and is functionally identical to
`2.22.11`. This approach ensures an easy way to track exactly which
features are included in different versions, indicated by the minor and
patch version numbers.

##### 3.27.0 - 22 Oct 2024

- Bump the minimum CodeQL bundle version to 2.14.6.
[#&#8203;2549](https://redirect.github.com/github/codeql-action/pull/2549)
- Fix an issue where the `upload-sarif` Action would fail with
"upload-sarif post-action step failed: Input required and not supplied:
token" when called in a composite Action that had a different set of
inputs to the ones expected by the `upload-sarif` Action.
[#&#8203;2557](https://redirect.github.com/github/codeql-action/pull/2557)
- Update default CodeQL bundle version to 2.19.2.
[#&#8203;2552](https://redirect.github.com/github/codeql-action/pull/2552)

See the full
[CHANGELOG.md](https://redirect.github.com/github/codeql-action/blob/v3.27.0/CHANGELOG.md)
for more information.

</details>

<details>
<summary>goreleaser/goreleaser-action
(goreleaser/goreleaser-action)</summary>

###
[`v6.1.0`](https://redirect.github.com/goreleaser/goreleaser-action/releases/tag/v6.1.0)

[Compare
Source](https://redirect.github.com/goreleaser/goreleaser-action/compare/v6.0.0...v6.1.0)

##### What's Changed

- chore(deps): bump braces from 3.0.2 to 3.0.3 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/goreleaser/goreleaser-action/pull/467](https://redirect.github.com/goreleaser/goreleaser-action/pull/467)
- chore(deps): bump docker/bake-action from 4 to 5 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/goreleaser/goreleaser-action/pull/468](https://redirect.github.com/goreleaser/goreleaser-action/pull/468)
- chore(deps): bump semver from 7.6.2 to 7.6.3 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/goreleaser/goreleaser-action/pull/470](https://redirect.github.com/goreleaser/goreleaser-action/pull/470)
- chore(deps): bump
[@&#8203;actions/http-client](https://redirect.github.com/actions/http-client)
from 2.2.1 to 2.2.2 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/goreleaser/goreleaser-action/pull/473](https://redirect.github.com/goreleaser/goreleaser-action/pull/473)
- chore(deps): bump
[@&#8203;actions/http-client](https://redirect.github.com/actions/http-client)
from 2.2.2 to 2.2.3 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/goreleaser/goreleaser-action/pull/474](https://redirect.github.com/goreleaser/goreleaser-action/pull/474)
- chore(deps): bump micromatch from 4.0.5 to 4.0.8 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/goreleaser/goreleaser-action/pull/475](https://redirect.github.com/goreleaser/goreleaser-action/pull/475)
- chore(deps): bump
[@&#8203;actions/core](https://redirect.github.com/actions/core) from
1.10.1 to 1.11.1 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/goreleaser/goreleaser-action/pull/478](https://redirect.github.com/goreleaser/goreleaser-action/pull/478)
- docs: bump upload-artifact version by
[@&#8203;dunglas](https://redirect.github.com/dunglas) in
[https://github.com/goreleaser/goreleaser-action/pull/479](https://redirect.github.com/goreleaser/goreleaser-action/pull/479)
- chore: update generated content by
[@&#8203;crazy-max](https://redirect.github.com/crazy-max) in
[https://github.com/goreleaser/goreleaser-action/pull/480](https://redirect.github.com/goreleaser/goreleaser-action/pull/480)

##### New Contributors

- [@&#8203;dunglas](https://redirect.github.com/dunglas) made their
first contribution in
[https://github.com/goreleaser/goreleaser-action/pull/479](https://redirect.github.com/goreleaser/goreleaser-action/pull/479)

**Full Changelog**:
https://github.com/goreleaser/goreleaser-action/compare/v6.0.0...v6.1.0

</details>

<details>
<summary>zarf-dev/zarf (zarf-dev/zarf)</summary>

###
[`v0.45.0`](https://redirect.github.com/zarf-dev/zarf/releases/tag/v0.45.0)

[Compare
Source](https://redirect.github.com/zarf-dev/zarf/compare/v0.44.0...v0.45.0)

#### What's Changed

- docs: image crc32 hash mutation by
[@&#8203;AustinAbro321](https://redirect.github.com/AustinAbro321) in
[https://github.com/zarf-dev/zarf/pull/3295](https://redirect.github.com/zarf-dev/zarf/pull/3295)
- chore(deps): bump codecov/codecov-action from 5.0.7 to 5.1.1 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/zarf-dev/zarf/pull/3298](https://redirect.github.com/zarf-dev/zarf/pull/3298)
- chore(deps): bump github.com/mikefarah/yq/v4 from 4.44.5 to 4.44.6 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/zarf-dev/zarf/pull/3300](https://redirect.github.com/zarf-dev/zarf/pull/3300)
- chore(deps): bump github.com/fluxcd/pkg/apis/meta from 1.6.1 to 1.7.0
by [@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/zarf-dev/zarf/pull/3299](https://redirect.github.com/zarf-dev/zarf/pull/3299)
- Fix API Version for Flux resource in docs by
[@&#8203;phillebaba](https://redirect.github.com/phillebaba) in
[https://github.com/zarf-dev/zarf/pull/3301](https://redirect.github.com/zarf-dev/zarf/pull/3301)
- chore(deps): bump github.com/goccy/go-yaml from 1.15.6 to 1.15.8 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/zarf-dev/zarf/pull/3302](https://redirect.github.com/zarf-dev/zarf/pull/3302)
- fix: passing context into packager by
[@&#8203;AustinAbro321](https://redirect.github.com/AustinAbro321) in
[https://github.com/zarf-dev/zarf/pull/3303](https://redirect.github.com/zarf-dev/zarf/pull/3303)
- chore(deps): bump github.com/anchore/syft from 1.17.0 to 1.18.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/zarf-dev/zarf/pull/3308](https://redirect.github.com/zarf-dev/zarf/pull/3308)
- chore(deps): bump github.com/moby/moby from 27.3.1+incompatible to
27.4.0+incompatible by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/zarf-dev/zarf/pull/3309](https://redirect.github.com/zarf-dev/zarf/pull/3309)
- feat: apply `--no-color` to dev and console logging option, remove
`console-no-color` by
[@&#8203;AustinAbro321](https://redirect.github.com/AustinAbro321) in
[https://github.com/zarf-dev/zarf/pull/3312](https://redirect.github.com/zarf-dev/zarf/pull/3312)
- chore(deps): bump github/codeql-action from 3.27.6 to 3.27.7 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/zarf-dev/zarf/pull/3316](https://redirect.github.com/zarf-dev/zarf/pull/3316)
- chore(deps): bump github.com/fluxcd/pkg/apis/meta from 1.7.0 to 1.8.0
by [@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/zarf-dev/zarf/pull/3315](https://redirect.github.com/zarf-dev/zarf/pull/3315)
- fix: truncate agent pod annotation so scheduler doesn't fail when
annoation limit is exceeded by
[@&#8203;AustinAbro321](https://redirect.github.com/AustinAbro321) in
[https://github.com/zarf-dev/zarf/pull/3314](https://redirect.github.com/zarf-dev/zarf/pull/3314)
- chore(deps): bump actions/setup-go from 5.1.0 to 5.2.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/zarf-dev/zarf/pull/3320](https://redirect.github.com/zarf-dev/zarf/pull/3320)
- chore(deps): bump golang.org/x/crypto from 0.30.0 to 0.31.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/zarf-dev/zarf/pull/3323](https://redirect.github.com/zarf-dev/zarf/pull/3323)
- feat: add metadata.annotations to package schema by
[@&#8203;AustinAbro321](https://redirect.github.com/AustinAbro321) in
[https://github.com/zarf-dev/zarf/pull/3319](https://redirect.github.com/zarf-dev/zarf/pull/3319)

**Full Changelog**:
https://github.com/zarf-dev/zarf/compare/v0.44.0...v0.45.0

###
[`v0.44.0`](https://redirect.github.com/zarf-dev/zarf/releases/tag/v0.44.0)

[Compare
Source](https://redirect.github.com/zarf-dev/zarf/compare/v0.43.1...v0.44.0)

#### What's Changed

- chore(deps): bump github/codeql-action from 3.27.3 to 3.27.4 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/zarf-dev/zarf/pull/3246](https://redirect.github.com/zarf-dev/zarf/pull/3246)
- chore(deps): bump codecov/codecov-action from 4.6.0 to 5.0.2 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/zarf-dev/zarf/pull/3245](https://redirect.github.com/zarf-dev/zarf/pull/3245)
- chore(deps): bump helm.sh/helm/v3 from 3.16.2 to 3.16.3 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/zarf-dev/zarf/pull/3240](https://redirect.github.com/zarf-dev/zarf/pull/3240)
- chore: dos-games dockerhub image to ghcr by
[@&#8203;AustinAbro321](https://redirect.github.com/AustinAbro321) in
[https://github.com/zarf-dev/zarf/pull/3233](https://redirect.github.com/zarf-dev/zarf/pull/3233)
- chore: unhide log-format flag by
[@&#8203;AustinAbro321](https://redirect.github.com/AustinAbro321) in
[https://github.com/zarf-dev/zarf/pull/3251](https://redirect.github.com/zarf-dev/zarf/pull/3251)
- chore(deps): bump actions/dependency-review-action from 4.4.0 to 4.5.0
by [@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/zarf-dev/zarf/pull/3258](https://redirect.github.com/zarf-dev/zarf/pull/3258)
- chore(deps): bump github/codeql-action from 3.27.4 to 3.27.5 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/zarf-dev/zarf/pull/3256](https://redirect.github.com/zarf-dev/zarf/pull/3256)
- chore(deps): bump codecov/codecov-action from 5.0.2 to 5.0.7 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/zarf-dev/zarf/pull/3257](https://redirect.github.com/zarf-dev/zarf/pull/3257)
- chore(deps): bump github.com/mikefarah/yq/v4 from 4.44.3 to 4.44.5 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/zarf-dev/zarf/pull/3247](https://redirect.github.com/zarf-dev/zarf/pull/3247)
- chore: add ADOPTERS.md by
[@&#8203;schristoff](https://redirect.github.com/schristoff) in
[https://github.com/zarf-dev/zarf/pull/3225](https://redirect.github.com/zarf-dev/zarf/pull/3225)
- chore(deps): bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.1 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/zarf-dev/zarf/pull/3263](https://redirect.github.com/zarf-dev/zarf/pull/3263)
- Update Go to 1.23.3 by
[@&#8203;phillebaba](https://redirect.github.com/phillebaba) in
[https://github.com/zarf-dev/zarf/pull/3260](https://redirect.github.com/zarf-dev/zarf/pull/3260)
- chore: separate schema generation by
[@&#8203;AustinAbro321](https://redirect.github.com/AustinAbro321) in
[https://github.com/zarf-dev/zarf/pull/2886](https://redirect.github.com/zarf-dev/zarf/pull/2886)
- fix: maintain agent mutate even when already mutated by
[@&#8203;a1994sc](https://redirect.github.com/a1994sc) in
[https://github.com/zarf-dev/zarf/pull/3166](https://redirect.github.com/zarf-dev/zarf/pull/3166)
- chore(deps): bump github.com/anchore/stereoscope from
0.0.6-0.20241101185849-cbd43fb4e5d3 to 0.0.9 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/zarf-dev/zarf/pull/3264](https://redirect.github.com/zarf-dev/zarf/pull/3264)
- Set Helm max history to limit secret creation by
[@&#8203;phillebaba](https://redirect.github.com/phillebaba) in
[https://github.com/zarf-dev/zarf/pull/3249](https://redirect.github.com/zarf-dev/zarf/pull/3249)
- feat: add logger to packager.Publish by
[@&#8203;mkcp](https://redirect.github.com/mkcp) in
[https://github.com/zarf-dev/zarf/pull/3259](https://redirect.github.com/zarf-dev/zarf/pull/3259)
- feat: introduce slog for zarf tools by
[@&#8203;AustinAbro321](https://redirect.github.com/AustinAbro321) in
[https://github.com/zarf-dev/zarf/pull/3212](https://redirect.github.com/zarf-dev/zarf/pull/3212)
- chore(deps): bump github.com/derailed/k9s from 0.32.5 to 0.32.7 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/zarf-dev/zarf/pull/3262](https://redirect.github.com/zarf-dev/zarf/pull/3262)
- feat: add the new logger through Zarf wherever it is missing by
[@&#8203;AustinAbro321](https://redirect.github.com/AustinAbro321) in
[https://github.com/zarf-dev/zarf/pull/3265](https://redirect.github.com/zarf-dev/zarf/pull/3265)
- chore(deps): bump github.com/Masterminds/semver/v3 from 3.3.0 to 3.3.1
by [@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/zarf-dev/zarf/pull/3269](https://redirect.github.com/zarf-dev/zarf/pull/3269)
- chore(deps): bump k8s.io/kubectl from 0.31.2 to 0.31.3 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/zarf-dev/zarf/pull/3268](https://redirect.github.com/zarf-dev/zarf/pull/3268)
- Refactor compose e2e test to not depend on CLI output by
[@&#8203;phillebaba](https://redirect.github.com/phillebaba) in
[https://github.com/zarf-dev/zarf/pull/3126](https://redirect.github.com/zarf-dev/zarf/pull/3126)
- chore(deps): bump github.com/stretchr/testify from 1.9.0 to 1.10.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/zarf-dev/zarf/pull/3272](https://redirect.github.com/zarf-dev/zarf/pull/3272)
- chore(deps): bump sigs.k8s.io/controller-runtime from 0.19.1 to 0.19.2
by [@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/zarf-dev/zarf/pull/3273](https://redirect.github.com/zarf-dev/zarf/pull/3273)
- chore(deps): bump github.com/anchore/syft from 1.16.0 to 1.17.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/zarf-dev/zarf/pull/3271](https://redirect.github.com/zarf-dev/zarf/pull/3271)
- chore(deps): bump github.com/goccy/go-yaml from 1.13.0 to 1.15.3 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/zarf-dev/zarf/pull/3279](https://redirect.github.com/zarf-dev/zarf/pull/3279)
- chore(deps): bump github.com/goccy/go-yaml from 1.15.3 to 1.15.4 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/zarf-dev/zarf/pull/3280](https://redirect.github.com/zarf-dev/zarf/pull/3280)
- Group k8s dependabot dependency updates by
[@&#8203;phillebaba](https://redirect.github.com/phillebaba) in
[https://github.com/zarf-dev/zarf/pull/3274](https://redirect.github.com/zarf-dev/zarf/pull/3274)
- Refactor migrate deprecated by
[@&#8203;phillebaba](https://redirect.github.com/phillebaba) in
[https://github.com/zarf-dev/zarf/pull/3270](https://redirect.github.com/zarf-dev/zarf/pull/3270)
- chore(deps): bump github.com/goccy/go-yaml from 1.15.4 to 1.15.6 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/zarf-dev/zarf/pull/3281](https://redirect.github.com/zarf-dev/zarf/pull/3281)
- chore(deps): bump sigs.k8s.io/controller-runtime from 0.19.2 to 0.19.3
by [@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/zarf-dev/zarf/pull/3282](https://redirect.github.com/zarf-dev/zarf/pull/3282)
- chore(deps): bump github/codeql-action from 3.27.5 to 3.27.6 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/zarf-dev/zarf/pull/3287](https://redirect.github.com/zarf-dev/zarf/pull/3287)
- Update CONTRIBUTING.md to reflect policies by
[@&#8203;schristoff](https://redirect.github.com/schristoff) in
[https://github.com/zarf-dev/zarf/pull/3288](https://redirect.github.com/zarf-dev/zarf/pull/3288)
- feat: allow init packages to be explicitly versioned by
[@&#8203;AustinAbro321](https://redirect.github.com/AustinAbro321) in
[https://github.com/zarf-dev/zarf/pull/3286](https://redirect.github.com/zarf-dev/zarf/pull/3286)
- chore(deps): bump golang.org/x/term from 0.26.0 to 0.27.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/zarf-dev/zarf/pull/3292](https://redirect.github.com/zarf-dev/zarf/pull/3292)
- chore(deps): bump golang.org/x/crypto from 0.29.0 to 0.30.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/zarf-dev/zarf/pull/3291](https://redirect.github.com/zarf-dev/zarf/pull/3291)
- chore: remove deprecated get git password command by
[@&#8203;AustinAbro321](https://redirect.github.com/AustinAbro321) in
[https://github.com/zarf-dev/zarf/pull/3293](https://redirect.github.com/zarf-dev/zarf/pull/3293)
- feat: move console to default by
[@&#8203;AustinAbro321](https://redirect.github.com/AustinAbro321) in
[https://github.com/zarf-dev/zarf/pull/3294](https://redirect.github.com/zarf-dev/zarf/pull/3294)
- feat: render tables and yaml on stdout by
[@&#8203;mkcp](https://redirect.github.com/mkcp) in
[https://github.com/zarf-dev/zarf/pull/3226](https://redirect.github.com/zarf-dev/zarf/pull/3226)

**Full Changelog**:
https://github.com/zarf-dev/zarf/compare/v0.43.1...v0.44.0

###
[`v0.43.1`](https://redirect.github.com/zarf-dev/zarf/releases/tag/v0.43.1)

[Compare
Source](https://redirect.github.com/zarf-dev/zarf/compare/v0.43.0...v0.43.1)

#### What's Changed

- fix: change agent to run as same user in dockerfile by
[@&#8203;AustinAbro321](https://redirect.github.com/AustinAbro321) in
[https://github.com/zarf-dev/zarf/pull/3243](https://redirect.github.com/zarf-dev/zarf/pull/3243)

**Full Changelog**:
https://github.com/zarf-dev/zarf/compare/v0.43.0...v0.43.1

###
[`v0.43.0`](https://redirect.github.com/zarf-dev/zarf/releases/tag/v0.43.0)

[Compare
Source](https://redirect.github.com/zarf-dev/zarf/compare/v0.42.2...v0.43.0)

#### What's Changed

- feat: implement new logger for Zarf connect by
[@&#8203;AustinAbro321](https://redirect.github.com/AustinAbro321) in
[https://github.com/zarf-dev/zarf/pull/3208](https://redirect.github.com/zarf-dev/zarf/pull/3208)
- chore(deps): bump golang.org/x/sync from 0.8.0 to 0.9.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/zarf-dev/zarf/pull/3218](https://redirect.github.com/zarf-dev/zarf/pull/3218)
- chore: true up logger comments and minor refactors by
[@&#8203;mkcp](https://redirect.github.com/mkcp) in
[https://github.com/zarf-dev/zarf/pull/3215](https://redirect.github.com/zarf-dev/zarf/pull/3215)
- chore(deps): bump goreleaser/goreleaser-action from 6.0.0 to 6.1.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/zarf-dev/zarf/pull/3216](https://redirect.github.com/zarf-dev/zarf/pull/3216)
- chore(deps): bump golang.org/x/term from 0.25.0 to 0.26.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/zarf-dev/zarf/pull/3220](https://redirect.github.com/zarf-dev/zarf/pull/3220)
- chore: export setupMessage function by
[@&#8203;catsby](https://redirect.github.com/catsby) in
[https://github.com/zarf-dev/zarf/pull/3221](https://redirect.github.com/zarf-dev/zarf/pull/3221)
- chore: fix lint by
[@&#8203;AustinAbro321](https://redirect.github.com/AustinAbro321) in
[https://github.com/zarf-dev/zarf/pull/3232](https://redirect.github.com/zarf-dev/zarf/pull/3232)
- chore(deps): bump github/codeql-action from 3.27.0 to 3.27.1 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/zarf-dev/zarf/pull/3228](https://redirect.github.com/zarf-dev/zarf/pull/3228)
- fix(docs): replace `it"s` with `it is` by
[@&#8203;daveworth](https://redirect.github.com/daveworth) in
[https://github.com/zarf-dev/zarf/pull/3227](https://redirect.github.com/zarf-dev/zarf/pull/3227)
- chore(deps): bump golang.org/x/crypto from 0.28.0 to 0.29.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/zarf-dev/zarf/pull/3230](https://redirect.github.com/zarf-dev/zarf/pull/3230)
- chore(deps): bump github/codeql-action from 3.27.1 to 3.27.3 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/zarf-dev/zarf/pull/3237](https://redirect.github.com/zarf-dev/zarf/pull/3237)

**Full Changelog**:
https://github.com/zarf-dev/zarf/compare/v0.42.2...v0.43.0

#### What's Changed

- feat: implement new logger for Zarf connect by
[@&#8203;AustinAbro321](https://redirect.github.com/AustinAbro321) in
[https://github.com/zarf-dev/zarf/pull/3208](https://redirect.github.com/zarf-dev/zarf/pull/3208)
- chore(deps): bump golang.org/x/sync from 0.8.0 to 0.9.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/zarf-dev/zarf/pull/3218](https://redirect.github.com/zarf-dev/zarf/pull/3218)
- chore: true up logger comments and minor refactors by
[@&#8203;mkcp](https://redirect.github.com/mkcp) in
[https://github.com/zarf-dev/zarf/pull/3215](https://redirect.github.com/zarf-dev/zarf/pull/3215)
- chore(deps): bump goreleaser/goreleaser-action from 6.0.0 to 6.1.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/zarf-dev/zarf/pull/3216](https://redirect.github.com/zarf-dev/zarf/pull/3216)
- chore(deps): bump golang.org/x/term from 0.25.0 to 0.26.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/zarf-dev/zarf/pull/3220](https://redirect.github.com/zarf-dev/zarf/pull/3220)
- chore: export setupMessage function by
[@&#8203;catsby](https://redirect.github.com/catsby) in
[https://github.com/zarf-dev/zarf/pull/3221](https://redirect.github.com/zarf-dev/zarf/pull/3221)
- chore: fix lint by
[@&#8203;AustinAbro321](https://redirect.github.com/AustinAbro321) in
[https://github.com/zarf-dev/zarf/pull/3232](https://redirect.github.com/zarf-dev/zarf/pull/3232)
- chore(deps): bump github/codeql-action from 3.27.0 to 3.27.1 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/zarf-dev/zarf/pull/3228](https://redirect.github.com/zarf-dev/zarf/pull/3228)
- fix(docs): replace `it"s` with `it is` by
[@&#8203;daveworth](https://redirect.github.com/daveworth) in
[https://github.com/zarf-dev/zarf/pull/3227](https://redirect.github.com/zarf-dev/zarf/pull/3227)
- chore(deps): bump golang.org/x/crypto from 0.28.0 to 0.29.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/zarf-dev/zarf/pull/3230](https://redirect.github.com/zarf-dev/zarf/pull/3230)
- chore(deps): bump github/codeql-action from 3.27.1 to 3.27.3 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/zarf-dev/zarf/pull/3237](https://redirect.github.com/zarf-dev/zarf/pull/3237)

**Full Changelog**:
https://github.com/zarf-dev/zarf/compare/v0.42.2...v0.43.0

###
[`v0.42.2`](https://redirect.github.com/zarf-dev/zarf/releases/tag/v0.42.2)

[Compare
Source](https://redirect.github.com/zarf-dev/zarf/compare/v0.42.1...v0.42.2)

#### What's Changed

- feat: send actions output to slogger by
[@&#8203;AustinAbro321](https://redirect.github.com/AustinAbro321) in
[https://github.com/zarf-dev/zarf/pull/3164](https://redirect.github.com/zarf-dev/zarf/pull/3164)
- chore: add logger package deploy by
[@&#8203;AustinAbro321](https://redirect.github.com/AustinAbro321) in
[https://github.com/zarf-dev/zarf/pull/3159](https://redirect.github.com/zarf-dev/zarf/pull/3159)
- chore(deps): bump github.com/anchore/syft from 1.14.2 to 1.15.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/zarf-dev/zarf/pull/3156](https://redirect.github.com/zarf-dev/zarf/pull/3156)
- feat: make zarf-agent pods comply with offical restricted pod security
standard by
[@&#8203;Ansible-man](https://redirect.github.com/Ansible-man) in
[https://github.com/zarf-dev/zarf/pull/3036](https://redirect.github.com/zarf-dev/zarf/pull/3036)
- Refactor config e2e test to not depend on CLI output by
[@&#8203;phillebaba](https://redirect.github.com/phillebaba) in
[https://github.com/zarf-dev/zarf/pull/3173](https://redirect.github.com/zarf-dev/zarf/pull/3173)
- chore: make the nightly tests run only in `zarf-dev/zarf` by
[@&#8203;joonas](https://redirect.github.com/joonas) in
[https://github.com/zarf-dev/zarf/pull/3174](https://redirect.github.com/zarf-dev/zarf/pull/3174)
- fear: allow versioning of init packages outside of binary version by
[@&#8203;a1994sc](https://redirect.github.com/a1994sc) in
[https://github.com/zarf-dev/zarf/pull/3169](https://redirect.github.com/zarf-dev/zarf/pull/3169)
- chore: slog dev deploy by
[@&#8203;AustinAbro321](https://redirect.github.com/AustinAbro321) in
[https://github.com/zarf-dev/zarf/pull/3176](https://redirect.github.com/zarf-dev/zarf/pull/3176)
- chore: slogger for zarf dev generate by
[@&#8203;AustinAbro321](https://redirect.github.com/AustinAbro321) in
[https://github.com/zarf-dev/zarf/pull/3178](https://redirect.github.com/zarf-dev/zarf/pull/3178)
- chore: slogger for `zarf init` by
[@&#8203;AustinAbro321](https://redirect.github.com/AustinAbro321) in
[https://github.com/zarf-dev/zarf/pull/3168](https://redirect.github.com/zarf-dev/zarf/pull/3168)
- Refactor zoci push to support new package layout by
[@&#8203;phillebaba](https://redirect.github.com/phillebaba) in
[https://github.com/zarf-dev/zarf/pull/3185](https://redirect.github.com/zarf-dev/zarf/pull/3185)
- refactor: debug template print by
[@&#8203;AustinAbro321](https://redirect.github.com/AustinAbro321) in
[https://github.com/zarf-dev/zarf/pull/3171](https://redirect.github.com/zarf-dev/zarf/pull/3171)
- feat: slogging in agent by
[@&#8203;AustinAbro321](https://redirect.github.com/AustinAbro321) in
[https://github.com/zarf-dev/zarf/pull/3190](https://redirect.github.com/zarf-dev/zarf/pull/3190)
- chore: update feature_request.md by
[@&#8203;schristoff](https://redirect.github.com/schristoff) in
[https://github.com/zarf-dev/zarf/pull/3179](https://redirect.github.com/zarf-dev/zarf/pull/3179)
- Upgrading to k8s v1.29 for distro k3s package by
[@&#8203;dgershman](https://redirect.github.com/dgershman) in
[https://github.com/zarf-dev/zarf/pull/3186](https://redirect.github.com/zarf-dev/zarf/pull/3186)
- chore(deps): bump mermaid from 10.9.0 to 10.9.3 in /site by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/zarf-dev/zarf/pull/3195](https://redirect.github.com/zarf-dev/zarf/pull/3195)
- refactor: server side apply over create / update by
[@&#8203;AustinAbro321](https://redirect.github.com/AustinAbro321) in
[https://github.com/zarf-dev/zarf/pull/3075](https://redirect.github.com/zarf-dev/zarf/pull/3075)
- chore(deps): bump astro from 4.5.12 to 4.16.10 in /site by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/zarf-dev/zarf/pull/3207](https://redirect.github.com/zarf-dev/zarf/pull/3207)
- chore(deps): bump micromatch and markdownlint-cli2 in /site by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/zarf-dev/zarf/pull/3204](https://redirect.github.com/zarf-dev/zarf/pull/3204)
- feat: exit on config file error by
[@&#8203;AustinAbro321](https://redirect.github.com/AustinAbro321) in
[https://github.com/zarf-dev/zarf/pull/3193](https://redirect.github.com/zarf-dev/zarf/pull/3193)
- chore(deps): bump
[@&#8203;pagefind/default-ui](https://redirect.github.com/pagefind/default-ui)
from 1.0.4 to 1.2.0 in /site by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/zarf-dev/zarf/pull/3203](https://redirect.github.com/zarf-dev/zarf/pull/3203)
- chore(deps): bump dompurify from 3.0.11 to 3.1.6 in /site by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/zarf-dev/zarf/pull/3206](https://redirect.github.com/zarf-dev/zarf/pull/3206)
- chore(deps): bump pagefind from 1.0.4 to 1.2.0 in /site by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/zarf-dev/zarf/pull/3202](https://redirect.github.com/zarf-dev/zarf/pull/3202)
- chore(deps): bump github.com/anchore/syft from 1.15.0 to 1.16.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/zarf-dev/zarf/pull/3187](https://redirect.github.com/zarf-dev/zarf/pull/3187)

#### New Contributors

- [@&#8203;Ansible-man](https://redirect.github.com/Ansible-man) made
their first contribution in
[https://github.com/zarf-dev/zarf/pull/3036](https://redirect.github.com/zarf-dev/zarf/pull/3036)

**Full Changelog**:
https://github.com/zarf-dev/zarf/compare/v0.42.1...v0.42.2

###
[`v0.42.1`](https://redirect.github.com/zarf-dev/zarf/releases/tag/v0.42.1)

[Compare
Source](https://redirect.github.com/zarf-dev/zarf/compare/v0.42.0...v0.42.1)

#### What's Changed

- Remove import chaining from import package by
[@&#8203;phillebaba](https://redirect.github.com/phillebaba) in
[https://github.com/zarf-dev/zarf/pull/3115](https://redirect.github.com/zarf-dev/zarf/pull/3115)
- chore(deps): bump actions/dependency-review-action from 4.3.4 to 4.3.5
by [@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/zarf-dev/zarf/pull/3122](https://redirect.github.com/zarf-dev/zarf/pull/3122)
- fix: support registry override for dev deploy (yolo) by
[@&#8203;mjnagel](https://redirect.github.com/mjnagel) in
[https://github.com/zarf-dev/zarf/pull/3064](https://redirect.github.com/zarf-dev/zarf/pull/3064)
- Refactor flavor e2e test to not depend on CLI output by
[@&#8203;phillebaba](https://redirect.github.com/phillebaba) in
[https://github.com/zarf-dev/zarf/pull/3125](https://redirect.github.com/zarf-dev/zarf/pull/3125)
- feat: introduce logger to ctx, refactor cmd, and migrate logo to Zarf
Say by [@&#8203;mkcp](https://redirect.github.com/mkcp) in
[https://github.com/zarf-dev/zarf/pull/3120](https://redirect.github.com/zarf-dev/zarf/pull/3120)
- chore(deps): bump github/codeql-action from 3.26.13 to 3.27.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/zarf-dev/zarf/pull/3128](https://redirect.github.com/zarf-dev/zarf/pull/3128)
- chore(deps): bump github.com/anchore/syft from 1.14.0 to 1.14.2 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/zarf-dev/zarf/pull/3121](https://redirect.github.com/zarf-dev/zarf/pull/3121)
- chore(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/gcp
from 1.8.9 to 1.8.10 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/zarf-dev/zarf/pull/3105](https://redirect.github.com/zarf-dev/zarf/pull/3105)
- chore(deps): bump sigs.k8s.io/kustomize/api from 0.17.3 to 0.18.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/zarf-dev/zarf/pull/3091](https://redirect.github.com/zarf-dev/zarf/pull/3091)
- chore(deps): bump
github.com/sigstore/sigstore/pkg/signature/kms/hashivault from 1.8.9 to
1.8.10 by [@&#8203;dependabot](https://redirect.github.com/dependabot)
in
[https://github.com/zarf-dev/zarf/pull/3104](https://redirect.github.com/zarf-dev/zarf/pull/3104)
- Refactor sbom e2e test to not depend on CLI output by
[@&#8203;phillebaba](https://redirect.github.com/phillebaba) in
[https://github.com/zarf-dev/zarf/pull/3129](https://redirect.github.com/zarf-dev/zarf/pull/3129)
- chore: address clippy feedback by
[@&#8203;joonas](https://redirect.github.com/joonas) in
[https://github.com/zarf-dev/zarf/pull/2959](https://redirect.github.com/zarf-dev/zarf/pull/2959)
- Refactor deprecation e2e test to not depend on CLI output by
[@&#8203;phillebaba](https://redirect.github.com/phillebaba) in
[https://github.com/zarf-dev/zarf/pull/3130](https://redirect.github.com/zarf-dev/zarf/pull/3130)
- chore(deps): bump actions/checkout from 4.2.1 to 4.2.2 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/zarf-dev/zarf/pull/3133](https://redirect.github.com/zarf-dev/zarf/pull/3133)
- chore(deps): bump k8s.io/client-go from 0.31.1 to 0.31.2 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/zarf-dev/zarf/pull/3135](https://redirect.github.com/zarf-dev/zarf/pull/3135)
- chore(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/azure
from 1.8.9 to 1.8.10 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/zarf-dev/zarf/pull/3137](https://redirect.github.com/zarf-dev/zarf/pull/3137)
- chore(deps): bump github.com/go-git/go-billy/v5 from 5.5.0 to 5.6.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/zarf-dev/zarf/pull/3138](https://redirect.github.com/zarf-dev/zarf/pull/3138)
- chore(deps): bump actions/setup-go from 5.0.2 to 5.1.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/zarf-dev/zarf/pull/3140](https://redirect.github.com/zarf-dev/zarf/pull/3140)
- chore(deps): bump actions/setup-node from 4.0.4 to 4.1.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/zarf-dev/zarf/pull/3141](https://redirect.github.com/zarf-dev/zarf/pull/3141)
- chore(deps): bump github.com/prometheus/client_golang from 1.20.4 to
1.20.5 by [@&#8203;dependabot](https://redirect.github.com/dependabot)
in
[https://github.com/zarf-dev/zarf/pull/3143](https://redirect.github.com/zarf-dev/zarf/pull/3143)
- chore(deps): bump k8s.io/kubectl from 0.31.1 to 0.31.2 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/zarf-dev/zarf/pull/3142](https://redirect.github.com/zarf-dev/zarf/pull/3142)
- chore(deps): bump sigs.k8s.io/controller-runtime from 0.19.0 to 0.19.1
by [@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/zarf-dev/zarf/pull/3144](https://redirect.github.com/zarf-dev/zarf/pull/3144)
- chore(deps): bump github.com/fatih/color from 1.17.0 to 1.18.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/zarf-dev/zarf/pull/3145](https://redirect.github.com/zarf-dev/zarf/pull/3145)
- Refactor templating e2e test to not depend on CLI output by
[@&#8203;phillebaba](https://redirect.github.com/phillebaba) in
[https://github.com/zarf-dev/zarf/pull/3147](https://redirect.github.com/zarf-dev/zarf/pull/3147)
- feat: migrate package create to slog by
[@&#8203;mkcp](https://redirect.github.com/mkcp) in
[https://github.com/zarf-dev/zarf/pull/3132](https://redirect.github.com/zarf-dev/zarf/pull/3132)
- chore(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/aws
from 1.8.9 to 1.8.10 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/zarf-dev/zarf/pull/3150](https://redirect.github.com/zarf-dev/zarf/pull/3150)
- chore: improve the Info and Debug logging for image pulls by
[@&#8203;mkcp](https://redirect.github.com/mkcp) in
[https://github.com/zarf-dev/zarf/pull/3149](https://redirect.github.com/zarf-dev/zarf/pull/3149)
- chore: add logger to packager2 Remove by
[@&#8203;mkcp](https://redirect.github.com/mkcp) in
[https://github.com/zarf-dev/zarf/pull/3151](https://redirect.github.com/zarf-dev/zarf/pull/3151)
- chore: add logger to packager2 inspect by
[@&#8203;mkcp](https://redirect.github.com/mkcp) in
[https://github.com/zarf-dev/zarf/pull/3153](https://redirect.github.com/zarf-dev/zarf/pull/3153)
- chore: add logger to packager2 list by
[@&#8203;mkcp](https://redirect.github.com/mkcp) in
[https://github.com/zarf-dev/zarf/pull/3154](https://redirect.github.com/zarf-dev/zarf/pull/3154)
- chore: feature flag to enable switching between logger for libaries by
[@&#8203;AustinAbro321](https://redirect.github.com/AustinAbro321) in
[https://github.com/zarf-dev/zarf/pull/3161](https://redirect.github.com/zarf-dev/zarf/pull/3161)
- chore: add logger to packager2 Mirror by
[@&#8203;mkcp](https://redirect.github.com/mkcp) in
[https://github.com/zarf-dev/zarf/pull/3152](https://redirect.github.com/zarf-dev/zarf/pull/3152)
- chore: add logger to zarf destroy by
[@&#8203;mkcp](https://redirect.github.com/mkcp) in
[https://github.com/zarf-dev/zarf/pull/3162](https://redirect.github.com/zarf-dev/zarf/pull/3162)
- chore(deps): bump github.com/goccy/go-yaml from 1.12.0 to 1.13.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/zarf-dev/zarf/pull/3155](https://redirect.github.com/zarf-dev/zarf/pull/3155)
- chore(deps): bump github.com/anchore/stereoscope from
0.0.5-0.20241018131503-a38c93517fc7 to 0.0.5 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[https://github.com/zarf-dev/zarf/pull/3157](https://redirect.github.com/zarf-dev/zarf/pull/3157)
- fix: issue where kustomization files are empty by
[@&#8203;a1994sc](https://redirect.github.com/a1994sc) in
[https://github.com/zarf-dev/zarf/pull/3094](https://redirect.github.com/zarf-dev/zarf/pull/3094)
-   chore(deps): bump actions/dependency-review-action f

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "after 12pm every weekday,before 11am
every weekday" in timezone America/New_York, Automerge - At any time (no
schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/defenseunicorns/maru-runner).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC4xMjAuMSIsInVwZGF0ZWRJblZlciI6IjM5LjcyLjIiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbInN1cHBvcnQtZGVwcyJdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
  • Loading branch information
renovate[bot] authored Dec 17, 2024
1 parent 7721fa8 commit 118dcc5
Show file tree
Hide file tree
Showing 12 changed files with 21 additions and 21 deletions.
2 changes: 1 addition & 1 deletion .github/actions/golang/action.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -4,6 +4,6 @@ description: "Setup Go binary and caching"
runs:
using: composite
steps:
- uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2
- uses: actions/setup-go@3041bf56c941b39c61721a86cd11f3bb1338122a # v5.2.0
with:
go-version: 1.21.x
2 changes: 1 addition & 1 deletion .github/actions/install-tools/action.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -5,4 +5,4 @@ runs:
using: composite
steps:
# used by goreleaser to create SBOMs
- uses: anchore/sbom-action/download-syft@8d0a6505bf28ced3e85154d13dc6af83299e13f1 # v0.17.4
- uses: anchore/sbom-action/download-syft@df80a981bc6edbc4e220a492d3cbe9f5547a6e75 # v0.17.9
2 changes: 1 addition & 1 deletion .github/actions/zarf/action.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -7,4 +7,4 @@ runs:
- uses: defenseunicorns/setup-zarf@main
with:
# renovate: datasource=github-tags depName=zarf-dev/zarf
version: v0.41.0
version: v0.45.0
4 changes: 2 additions & 2 deletions .github/workflows/commitlint.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -16,12 +16,12 @@ jobs:

steps:
- name: Checkout
uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
with:
fetch-depth: 0

- name: Setup Node.js
uses: actions/setup-node@0a44ba7841725637a19e28fa30b79a866c81b0a6 # v4.0.4
uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0

- name: Install commitlint
run: npm install --save-dev @commitlint/{config-conventional,cli}
Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/dependency-review.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -9,7 +9,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

- name: Dependency Review
uses: actions/dependency-review-action@5a2ce3f5b92ee19cbb1541a4984c76d921601d7c # v4.3.4
uses: actions/dependency-review-action@3b139cfc5fae8b618d3eae3675e383bb1769c019 # v4.5.0
8 changes: 4 additions & 4 deletions .github/workflows/release.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -11,7 +11,7 @@ jobs:
steps:
# Checkout the repo and setup the tooling for this job
- name: Checkout
uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
with:
fetch-depth: 0

Expand All @@ -38,7 +38,7 @@ jobs:
steps:
# Checkout the repo and setup the tooling for this job
- name: Checkout
uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
with:
fetch-depth: 0

Expand Down Expand Up @@ -78,7 +78,7 @@ jobs:
contents: write
steps:
- name: Checkout
uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
with:
fetch-depth: 0

Expand Down Expand Up @@ -112,7 +112,7 @@ jobs:
repositories: homebrew-tap

- name: Run GoReleaser
uses: goreleaser/goreleaser-action@286f3b13b1b49da4ac219696163fb8c1c93e1200 # v6.0.0
uses: goreleaser/goreleaser-action@9ed2f89a662bf1735a48bc8557fd212fa902bebf # v6.1.0
with:
distribution: goreleaser
version: latest
Expand Down
6 changes: 3 additions & 3 deletions .github/workflows/scan-codeql.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -36,7 +36,7 @@ jobs:

steps:
- name: Checkout
uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

- name: Setup golang
uses: ./.github/actions/golang
Expand All @@ -45,7 +45,7 @@ jobs:
run: make build-cli-linux-amd

- name: Initialize CodeQL
uses: github/codeql-action/init@f779452ac5af1c261dce0346a8f964149f49322b # v3.26.13
uses: github/codeql-action/init@df409f7d9260372bd5f19e5b04e83cb3c43714ae # v3.27.9
env:
CODEQL_EXTRACTOR_GO_BUILD_TRACING: on
with:
Expand All @@ -54,6 +54,6 @@ jobs:


- name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@f779452ac5af1c261dce0346a8f964149f49322b # v3.26.13
uses: github/codeql-action/analyze@df409f7d9260372bd5f19e5b04e83cb3c43714ae # v3.27.9
with:
category: "/language:${{matrix.language}}"
4 changes: 2 additions & 2 deletions .github/workflows/scan-lint.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -9,7 +9,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

- name: Setup golang
uses: ./.github/actions/golang
Expand All @@ -26,7 +26,7 @@ jobs:
extra_args: --all-files --verbose # pre-commit run --all-files --verbose

- name: Run Revive Action by pulling pre-built image
uses: docker://morphy/revive-action:v2@sha256:d6f045593cf654035d239c3b64595bcc09a6271fc974a97b9f7a4e678cfcfa72
uses: docker://morphy/revive-action:v2@sha256:793c4e8bac339d7dcfccb0c35c9dbc623f5b0956515fcce9efd78162c084e8e0
with:
config: revive.toml
# Exclude patterns, separated by semicolons (optional)
Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/scorecard.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -22,7 +22,7 @@ jobs:

steps:
- name: "Checkout code"
uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
with:
persist-credentials: false

Expand All @@ -45,6 +45,6 @@ jobs:

# Upload the results to GitHub's code scanning dashboard.
- name: "Upload to code-scanning"
uses: github/codeql-action/upload-sarif@f779452ac5af1c261dce0346a8f964149f49322b # v3.26.13
uses: github/codeql-action/upload-sarif@df409f7d9260372bd5f19e5b04e83cb3c43714ae # v3.27.9
with:
sarif_file: results.sarif
2 changes: 1 addition & 1 deletion .github/workflows/test-e2e-pr.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -22,7 +22,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

- name: Setup golang
uses: ./.github/actions/golang
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/test-schema.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -10,7 +10,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

- name: Setup golang
uses: ./.github/actions/golang
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/test-unit-pr.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -22,7 +22,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

- name: Setup golang
uses: ./.github/actions/golang
Expand Down

0 comments on commit 118dcc5

Please sign in to comment.