Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): update github actions #396

Merged
merged 1 commit into from
Nov 18, 2024
Merged

chore(deps): update github actions #396

merged 1 commit into from
Nov 18, 2024

Conversation

miracum-renovate[bot]
Copy link
Contributor

This PR contains the following updates:

Package Type Update Change
actions/checkout action patch v4.2.1 -> v4.2.2
github/codeql-action action minor v3.26.13 -> v3.27.4
oxsecurity/megalinter action minor v8.1.0 -> v8.2.0
renovatebot/github-action action patch v40.3.3 -> v40.3.6

Release Notes

actions/checkout (actions/checkout)

v4.2.2

Compare Source

github/codeql-action (github/codeql-action)

v3.27.4

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.27.4 - 14 Nov 2024

No user facing changes.

See the full CHANGELOG.md for more information.

v3.27.3

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.27.3 - 12 Nov 2024

No user facing changes.

See the full CHANGELOG.md for more information.

v3.27.2

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.27.2 - 12 Nov 2024

  • Fixed an issue where setting up the CodeQL tools would sometimes fail with the message "Invalid value 'undefined' for header 'authorization'". #​2590

See the full CHANGELOG.md for more information.

v3.27.1

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.27.1 - 08 Nov 2024

  • The CodeQL Action now downloads bundles compressed using Zstandard on GitHub Enterprise Server when using Linux or macOS runners. This speeds up the installation of the CodeQL tools. This feature is already available to GitHub.com users. #​2573
  • Update default CodeQL bundle version to 2.19.3. #​2576

See the full CHANGELOG.md for more information.

v3.27.0

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.27.0 - 22 Oct 2024

  • Bump the minimum CodeQL bundle version to 2.14.6. #​2549
  • Fix an issue where the upload-sarif Action would fail with "upload-sarif post-action step failed: Input required and not supplied: token" when called in a composite Action that had a different set of inputs to the ones expected by the upload-sarif Action. #​2557
  • Update default CodeQL bundle version to 2.19.2. #​2552

See the full CHANGELOG.md for more information.

oxsecurity/megalinter (oxsecurity/megalinter)

v8.2.0

Compare Source

  • Media

  • Linters enhancements

    • detekt Enable SARIF output + count errors
    • lintr: Support files in subdirectories, fix unit tests
    • phpcs: Activate APPLY_FIXES
    • Salesforce linters: Add SF_CLI_DISABLE_AUTOUPDATE for SF CLI JIT plugins
    • trivy: handle retry if failed to download Java DB is detected
    • tsqllint Re-enabled after .net 8 and security updates
  • Fixes

    • Add message in PR comment if FAIL_IF_UPDATED_SOURCES is triggered
    • Fix linting errors in GitHub Actions template
  • Reporters

    • UpdatedSourcesReporter will git commit & push fixed files to source branch if APPLY_FIXES is set
    • Fix AzureCommentReporter not adding comments to PR
    • Fix AzureCommentReporter fails when target repo contains spaces
  • Doc

    • Updated documentation with Azure central pipeline use case
    • Update DevSkim documentation to show a valid exclusion config file
    • Note about risky rules and how to fix rule violations with PHP-CS-Fixer
  • CI

    • Also prune volumes before pulling and pushing to docker hub
    • Externalize mirroring from ghcr.io to docker hub in another workflow to avoid memory issues
    • Squash docker images to have less layers and size
    • Comment jobs related to GitHub Worker images, as CodeTotal is not actively maintained
    • Make gitpod workflow not blocking until uv install is fixed
    • Update stale comment
    • Try several times to embed trivy db during Docker build, as a workaround to the random failures
    • Wait 10 secondes instead of 1 before retrying a failing test method, to avoid race conditions
  • Linter versions upgrades (104)

renovatebot/github-action (renovatebot/github-action)

v40.3.6

Compare Source

Bug Fixes
Documentation
  • Fix permissions for Renovate 39 (#​873) (80524aa)
  • update references to ghcr.io/renovatebot/renovate to v39 (fa742b7)
Miscellaneous Chores
Continuous Integration
  • deps: update renovate docker tag to v38.142.7 (5bf87b6)

v40.3.5

Compare Source

Documentation
  • update references to actions/checkout to v4.2.2 (2097f2d)
  • update references to ghcr.io/renovatebot/renovate to v38.128.6 (41edd45)
  • update references to ghcr.io/renovatebot/renovate to v38.133.0 (e3f297f)
  • update references to ghcr.io/renovatebot/renovate to v38.142.5 (f4c795d)
  • update references to renovatebot/github-action to v40.3.4 (cf47d93)
Miscellaneous Chores
Build System
  • deps: lock file maintenance (f9b29f3)
Continuous Integration
  • deps: update actions/checkout action to v4.2.2 (2bf9026)
  • deps: update actions/setup-node action to v4.1.0 (86ad664)
  • deps: update renovate docker tag to v38.124.2 (695299e)
  • deps: update renovate docker tag to v38.124.3 (314da6d)
  • deps: update renovate docker tag to v38.126.0 (85ae1f5)
  • deps: update renovate docker tag to v38.127.0 (85e7f44)
  • deps: update renovate docker tag to v38.127.3 (3edbc0c)
  • deps: update renovate docker tag to v38.128.1 (f8211ef)
  • deps: update renovate docker tag to v38.128.2 (d7b8776)
  • deps: update renovate docker tag to v38.128.3 (2e30721)
  • deps: update renovate docker tag to v38.128.6 (a4b62ce)
  • deps: update renovate docker tag to v38.129.1 (2262e7a)
  • deps: update renovate docker tag to v38.129.2 (c86af21)
  • deps: update renovate docker tag to v38.130.0 (54af751)
  • deps: update renovate docker tag to v38.130.2 (000660f)
  • deps: update renovate docker tag to v38.130.3 (b9dda2c)
  • deps: update renovate docker tag to v38.130.4 (908a901)
  • deps: update renovate docker tag to v38.131.0 (dd7bd92)
  • deps: update renovate docker tag to v38.131.1 (6a73efe)
  • deps: update renovate docker tag to v38.131.2 (93861f0)
  • deps: update renovate docker tag to v38.132.1 (c3afe48)
  • deps: update renovate docker tag to v38.132.3 (1973fce)
  • deps: update renovate docker tag to v38.133.0 (4a07c50)
  • deps: update renovate docker tag to v38.133.1 (0e8b35d)
  • deps: update renovate docker tag to v38.133.2 (0b061eb)
  • deps: update renovate docker tag to v38.134.0 (67a9577)
  • deps: update renovate docker tag to v38.135.2 (14382a8)
  • deps: update renovate docker tag to v38.138.3 (1a12b39)
  • deps: update renovate docker tag to v38.138.5 (bb832ea)
  • deps: update renovate docker tag to v38.140.0 (1cefad4)
  • deps: update renovate docker tag to v38.140.2 (2d32293)
  • deps: update renovate docker tag to v38.141.1 (9143751)
  • deps: update renovate docker tag to v38.142.1 (4ed28cd)
  • deps: update renovate docker tag to v38.142.2 (513f3e3)
  • deps: update renovate docker tag to v38.142.3 (02bea1c)
  • deps: update renovate docker tag to v38.142.4 (7574fcb)
  • deps: update renovate docker tag to v38.142.5 (76eb5e4)

v40.3.4

Compare Source

Documentation
  • update references to actions/checkout to v4.2.1 (11212af)
  • update references to renovatebot/github-action to v40.3.3 (7bdca51)
Miscellaneous Chores
Build System
  • deps: update dependency typescript to v5.6.3 (9c10032)
Continuous Integration
  • deps: update renovate docker tag to v38.120.0 (d1179fe)
  • deps: update renovate docker tag to v38.120.1 (7eaca7d)
  • deps: update renovate docker tag to v38.122.0 (5ebe74f)
  • deps: update renovate docker tag to v38.123.0 (398baed)
  • deps: update renovate docker tag to v38.124.1 (76a4553)

Configuration

📅 Schedule: Branch creation - "before 4am on the first day of the month" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

Copy link

🦙 MegaLinter status: ⚠️ WARNING

Descriptor Linter Files Fixed Errors Elapsed time
✅ ACTION actionlint 5 0 0.09s
✅ BASH bash-exec 3 0 0.01s
✅ BASH shellcheck 3 0 0.06s
✅ BASH shfmt 3 0 0.0s
✅ EDITORCONFIG editorconfig-checker 212 0 0.52s
✅ JSON jsonlint 1 0 0.17s
⚠️ JSON prettier 1 1 0.7s
✅ MARKDOWN markdownlint 13 0 1.22s
✅ REPOSITORY checkov yes no 21.15s
✅ REPOSITORY dustilock yes no 0.01s
✅ REPOSITORY gitleaks yes no 2.79s
✅ REPOSITORY git_diff yes no 0.02s
✅ REPOSITORY grype yes no 13.81s
✅ REPOSITORY secretlint yes no 1.39s
✅ REPOSITORY syft yes no 3.16s
✅ REPOSITORY trivy yes no 6.03s
✅ REPOSITORY trivy-sbom yes no 0.13s
✅ REPOSITORY trufflehog yes no 3.05s
✅ YAML prettier 145 0 2.21s
✅ YAML yamllint 145 0 1.49s

See detailed report in MegaLinter reports

You could have the same capabilities but better runtime performances if you use a MegaLinter flavor:

MegaLinter is graciously provided by OX Security

@chgl chgl merged commit c9eab73 into master Nov 18, 2024
6 checks passed
@miracum-renovate miracum-renovate bot deleted the renovate/github-actions branch November 18, 2024 10:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant