Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): update github-actions #101

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Dec 1, 2024

This PR contains the following updates:

Package Type Update Change
actions/cache action minor v4.1.2 -> v4.2.0
actions/setup-java action minor v4.5.0 -> v4.6.0
actions/upload-artifact action minor v4.4.3 -> v4.5.0
docker/build-push-action action minor v6.9.0 -> v6.10.0
docker/setup-buildx-action action minor v3.7.1 -> v3.8.0
github/codeql-action action minor v3.27.5 -> v3.28.0
gradle/actions action patch v4.2.1 -> v4.2.2
softprops/action-gh-release action minor v2.1.0 -> v2.2.0

Release Notes

actions/cache (actions/cache)

v4.2.0

Compare Source

⚠️ Important Changes

The cache backend service has been rewritten from the ground up for improved performance and reliability. actions/cache now integrates with the new cache service (v2) APIs.

The new service will gradually roll out as of February 1st, 2025. The legacy service will also be sunset on the same date. Changes in these release are fully backward compatible.

We are deprecating some versions of this action. We recommend upgrading to version v4 or v3 as soon as possible before February 1st, 2025. (Upgrade instructions below).

If you are using pinned SHAs, please use the SHAs of versions v4.2.0 or v3.4.0

If you do not upgrade, all workflow runs using any of the deprecated actions/cache will fail.

Upgrading to the recommended versions will not break your workflows.

Read more about the change & access the migration guide: reference to the announcement.

Minor changes

Minor and patch version updates for these dependencies:

Full Changelog: actions/cache@v4...v4.2.0

actions/setup-java (actions/setup-java)

v4.6.0

Compare Source

What's Changed

Add-ons:

 - name: Checkout
   uses: actions/checkout@v4
 - name: Setup-java
   uses: actions/setup-java@v4
   with:
     distribution: ‘jetbrains’
     java-version: '21'

Bug fixes:

New Contributors

Full Changelog: actions/setup-java@v4...v4.6.0

actions/upload-artifact (actions/upload-artifact)

v4.5.0

Compare Source

docker/build-push-action (docker/build-push-action)

v6.10.0

Compare Source

Full Changelog: docker/build-push-action@v6.9.0...v6.10.0

docker/setup-buildx-action (docker/setup-buildx-action)

v3.8.0

Compare Source

github/codeql-action (github/codeql-action)

v3.28.0

Compare Source

v3.27.9

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.27.9 - 12 Dec 2024

No user facing changes.

See the full CHANGELOG.md for more information.

v3.27.8

Compare Source

v3.27.7

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.27.7 - 10 Dec 2024
  • We are rolling out a change in December 2024 that will extract the CodeQL bundle directly to the toolcache to improve performance. #​2631
  • Update default CodeQL bundle version to 2.20.0. #​2636

See the full CHANGELOG.md for more information.

v3.27.6

Compare Source

gradle/actions (gradle/actions)

v4.2.2

Compare Source

This patch release updates a bunch of dependency versions and fixes a deprecation warning emitted with Gradle 8.12.

What's Changed
New Contributors

Full Changelog: gradle/actions@v4.2.1...v4.2.2

softprops/action-gh-release (softprops/action-gh-release)

v2.2.0

Compare Source

What's Changed

Exciting New Features 🎉
Bug fixes 🐛
Other Changes 🔄

New Contributors

Full Changelog: softprops/action-gh-release@v2.1.0...v2.2.0


Configuration

📅 Schedule: Branch creation - "* 0-3 1 * *" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

Copy link

github-actions bot commented Dec 1, 2024

🦙 MegaLinter status: ✅ SUCCESS

Descriptor Linter Files Fixed Errors Elapsed time
✅ ACTION actionlint 7 0 0.06s
✅ COPYPASTE jscpd yes no 1.12s
✅ DOCKERFILE hadolint 1 0 0.06s
✅ JSON jsonlint 3 0 0.22s
✅ JSON prettier 3 0 0.35s
✅ JSON v8r 3 0 3.32s
✅ PYTHON bandit 1 0 0.78s
✅ PYTHON black 1 0 0.8s
✅ PYTHON flake8 1 0 0.83s
✅ PYTHON isort 1 0 0.18s
✅ PYTHON mypy 1 0 2.89s
✅ PYTHON pylint 1 0 2.09s
✅ PYTHON pyright 1 0 6.34s
✅ PYTHON ruff 1 0 0.01s
✅ REPOSITORY checkov yes no 18.67s
✅ REPOSITORY devskim yes no 1.15s
✅ REPOSITORY dustilock yes no 0.0s
✅ REPOSITORY gitleaks yes no 0.09s
✅ REPOSITORY git_diff yes no 0.01s
✅ REPOSITORY grype yes no 14.24s
✅ REPOSITORY kics yes no 4.42s
✅ REPOSITORY secretlint yes no 0.82s
✅ REPOSITORY syft yes no 2.09s
✅ REPOSITORY trivy yes no 7.84s
✅ REPOSITORY trivy-sbom yes no 0.17s
✅ REPOSITORY trufflehog yes no 2.79s
✅ YAML prettier 9 0 1.02s
✅ YAML v8r 9 0 9.29s
✅ YAML yamllint 9 0 1.02s

See detailed report in MegaLinter reports

You could have same capabilities but better runtime performances if you request a new MegaLinter flavor.

MegaLinter is graciously provided by OX Security

@renovate renovate bot force-pushed the renovate/github-actions branch from 9e31490 to 0f113f9 Compare December 3, 2024 16:57
@renovate renovate bot changed the title chore(deps): update docker/build-push-action action to v6.10.0 chore(deps): update github-actions Dec 3, 2024
@renovate renovate bot force-pushed the renovate/github-actions branch 3 times, most recently from d26683a to d1c9e21 Compare December 11, 2024 03:53
@renovate renovate bot force-pushed the renovate/github-actions branch 4 times, most recently from 7779fd0 to 2cf3191 Compare December 18, 2024 04:45
@renovate renovate bot force-pushed the renovate/github-actions branch from 2cf3191 to 73642cf Compare December 20, 2024 20:26
Copy link

Trivy image scan report

ghcr.io/miracum/github-reusable-workflow-without-test-image:pr-101 (debian 12.8)

No Vulnerabilities found

No Misconfigurations found

Copy link

Trivy image scan report

ghcr.io/miracum/github-reusable-workflow-with-fixed-image-tags:v1.2.3-beta.123 (debian 12.8)

No Vulnerabilities found

No Misconfigurations found

Copy link

Trivy image scan report

ghcr.io/miracum/github-reusable-workflow:pr-101 (debian 12.8)

No Vulnerabilities found

No Misconfigurations found

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants