Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): update github-actions #189

Merged
merged 2 commits into from
Oct 17, 2024
Merged

chore(deps): update github-actions #189

merged 2 commits into from
Oct 17, 2024

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Oct 1, 2024

This PR contains the following updates:

Package Type Update Change
actions/checkout action minor v4.1.7 -> v4.2.1
actions/upload-artifact action minor v4.3.3 -> v4.4.3
ghcr.io/miracum/ig-build-tools container patch v2.1.5 -> v2.1.6
github/codeql-action action minor v3.25.11 -> v3.26.13
miracum/.github action minor v1.10.2 -> v1.12.5
ossf/scorecard-action action minor v2.3.3 -> v2.4.0

Release Notes

actions/checkout (actions/checkout)

v4.2.1

Compare Source

v4.2.0

Compare Source

actions/upload-artifact (actions/upload-artifact)

v4.4.3

Compare Source

What's Changed

Full Changelog: actions/upload-artifact@v4.4.2...v4.4.3

v4.4.2

Compare Source

What's Changed

Full Changelog: actions/upload-artifact@v4.4.1...v4.4.2

v4.4.1

Compare Source

What's Changed
New Contributors

Full Changelog: actions/upload-artifact@v4.4.0...v4.4.1

v4.4.0

Compare Source

v4.3.6

Compare Source

v4.3.5

Compare Source

v4.3.4

Compare Source

What's Changed

Full Changelog: actions/upload-artifact@v4.3.3...v4.3.4

miracum/ig-build-tools (ghcr.io/miracum/ig-build-tools)

v2.1.6

Compare Source

Miscellaneous Chores
  • deps: update all non-major dependencies (551651f)
github/codeql-action (github/codeql-action)

v3.26.13

Compare Source

v3.26.12

Compare Source

v3.26.11

Compare Source

v3.26.10

Compare Source

v3.26.9

Compare Source

v3.26.8

Compare Source

v3.26.7

Compare Source

v3.26.6

Compare Source

v3.26.5

Compare Source

v3.26.4

Compare Source

v3.26.3

Compare Source

v3.26.2

Compare Source

v3.26.1

Compare Source

v3.26.0

Compare Source

v3.25.15

Compare Source

v3.25.14

Compare Source

v3.25.13

Compare Source

v3.25.12

Compare Source

miracum/.github (miracum/.github)

v1.12.5

Compare Source

Miscellaneous Chores
  • deps: updated default java and .net version for codeql (#​88) (1748b6a)

v1.12.4

Compare Source

Miscellaneous Chores

v1.12.3

Compare Source

Miscellaneous Chores

v1.12.2

Compare Source

Miscellaneous Chores

v1.12.1

Compare Source

Miscellaneous Chores

v1.12.0

Compare Source

Features
Miscellaneous Chores
  • use best-practices preset (aca53b6)

v1.11.4

Compare Source

Miscellaneous Chores

v1.11.3

Compare Source

Miscellaneous Chores

v1.11.2

Compare Source

Bug Fixes
  • comment only on non fork (028aedc)

v1.11.1

Compare Source

Bug Fixes

v1.11.0

Compare Source

Features
  • multi-platform build support, sbom and provenance by default (#​68) (6486774)

v1.10.3

Compare Source

Miscellaneous Chores
ossf/scorecard-action (ossf/scorecard-action)

v2.4.0

Compare Source

What's Changed

This update bumps the Scorecard version to the v5 release. For a complete list of changes, please refer to the v5.0.0 release notes. Of special note to Scorecard Action is the Maintainer Annotation feature, which can be used to suppress some Code Scanning false positives. Alerts will not be generated for any Scorecard Check with an annotation.

Documentation

New Contributors

Full Changelog: ossf/scorecard-action@v2.3.3...v2.4.0


Configuration

📅 Schedule: Branch creation - "every 3 months on the first day of the month" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot force-pushed the renovate/github-actions branch 5 times, most recently from fb8ebe7 to ff58e6d Compare October 9, 2024 21:04
@renovate renovate bot force-pushed the renovate/github-actions branch 7 times, most recently from e48bf84 to cae5e00 Compare October 15, 2024 22:59
Copy link

Trivy image scan report

ghcr.io/miracum/ahd2fhir:pr-189 (debian 12.7)

No Vulnerabilities found

No Misconfigurations found

Python

1 known vulnerabilities found (CRITICAL: 0 HIGH: 1 MEDIUM: 0 LOW: 0)

Show detailed table of vulnerabilities
Package ID Severity Installed Version Fixed Version
setuptools CVE-2024-6345 HIGH 65.5.1 70.0.0

No Misconfigurations found

Copy link
Contributor Author

renovate bot commented Oct 17, 2024

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

Copy link

🦙 MegaLinter status: ✅ SUCCESS

Descriptor Linter Files Fixed Errors Elapsed time
✅ ACTION actionlint 5 0 0.03s
✅ BASH bash-exec 2 0 0.03s
✅ BASH shellcheck 2 0 0.03s
✅ BASH shfmt 2 0 0.01s
✅ DOCKERFILE hadolint 2 0 0.19s
✅ JSON jsonlint 16 0 0.4s
✅ JSON npm-package-json-lint yes no 0.71s
✅ JSON prettier 16 0 1.81s
✅ MARKDOWN markdownlint 3 0 0.63s
✅ PYTHON bandit 31 0 1.85s
✅ PYTHON black 31 0 2.07s
✅ PYTHON flake8 31 0 0.8s
✅ PYTHON isort 31 0 0.58s
✅ PYTHON mypy 31 0 11.51s
✅ PYTHON pyright 31 0 10.91s
✅ PYTHON ruff 31 0 0.04s
✅ REPOSITORY checkov yes no 24.06s
✅ REPOSITORY gitleaks yes no 0.07s
✅ REPOSITORY git_diff yes no 0.02s
✅ REPOSITORY grype yes no 14.04s
✅ REPOSITORY kics yes no 34.17s
✅ REPOSITORY secretlint yes no 0.89s
✅ REPOSITORY syft yes no 0.6s
✅ REPOSITORY trivy yes no 13.26s
✅ REPOSITORY trivy-sbom yes no 1.17s
✅ REPOSITORY trufflehog yes no 7.1s
✅ YAML prettier 15 0 0.91s
✅ YAML yamllint 15 0 0.62s

See detailed report in MegaLinter reports

You could have same capabilities but better runtime performances if you request a new MegaLinter flavor.

MegaLinter is graciously provided by OX Security

@chgl chgl merged commit b4377b7 into master Oct 17, 2024
14 checks passed
@chgl chgl deleted the renovate/github-actions branch October 17, 2024 19:42
@miracum-bot
Copy link

🎉 This PR is included in version 4.0.3 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants