Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): update github-actions #343

Merged
merged 2 commits into from
Sep 24, 2023
Merged

chore(deps): update github-actions #343

merged 2 commits into from
Sep 24, 2023

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Sep 1, 2023

Mend Renovate

This PR contains the following updates:

Package Type Update Change
actions/checkout action minor v4.0.0 -> v4.1.0
actions/checkout action digest 3df4ab1 -> 8ade135
actions/upload-artifact action patch v3.1.2 -> v3.1.3
actions/upload-artifact action digest 0b7f8ab -> a8a3f3a
github/codeql-action action minor v2.3.5 -> v2.21.8
github/codeql-action action digest 0225834 -> 6a28655
lycheeverse/lychee-action action minor v1.7.0 -> v1.8.0
ossf/scorecard-action action minor v2.1.3 -> v2.2.0
oxsecurity/megalinter action digest a7b1a3a -> fda6ac3

Release Notes

actions/checkout (actions/checkout)

v4.1.0

Compare Source

actions/upload-artifact (actions/upload-artifact)

v3.1.3

Compare Source

What's Changed

Full Changelog: actions/upload-artifact@v3...v3.1.3

github/codeql-action (github/codeql-action)

v2.21.8

Compare Source

v2.21.7

Compare Source

v2.21.6

Compare Source

v2.21.5

Compare Source

v2.21.4

Compare Source

v2.21.3

Compare Source

v2.21.2

Compare Source

v2.21.1

Compare Source

v2.21.0

Compare Source

v2.20.4

Compare Source

v2.20.3

Compare Source

v2.20.2

Compare Source

v2.20.1

Compare Source

v2.20.0

Compare Source

v2.3.6

Compare Source

lycheeverse/lychee-action (lycheeverse/lychee-action)

v1.8.0: Version 1.8.0

Compare Source

What's Changed

  • Update lychee to 0.13.0.
  • Adds support for showing the check duration in the JSON output.
  • Faster link suggestions by using concurrent Wayback Machine lookups.

Full Changelog: lycheeverse/lychee-action@v1...v1.8.0

ossf/scorecard-action (ossf/scorecard-action)

v2.2.0

Compare Source

What's Changed

Scorecard Result Viewer

Thanks to contributions from @​cynthia-sg and @​tegioz at CLOMonitor, there is a new Scorecard Result visualization page at https://securityscorecards.dev/viewer/?uri=<project-url>.

As an example, you can see our own score visualized here
Checkout our README to learn how to link your README badge to the new visualization page.

Publishing Results

This release contains two fixes which will improve the user experience when publish_results is true

Docs

New Contributors

Full Changelog: ossf/scorecard-action@v2.1.3...v2.2.0


Configuration

📅 Schedule: Branch creation - "before 4am on the first day of the month" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

@github-actions
Copy link

github-actions bot commented Sep 1, 2023

🦙 MegaLinter status: ⚠️ WARNING

Descriptor Linter Files Fixed Errors Elapsed time
✅ ACTION actionlint 5 0 0.07s
✅ BASH bash-exec 4 0 0.03s
✅ BASH shellcheck 4 0 0.1s
✅ BASH shfmt 4 0 0.03s
✅ DOCKERFILE hadolint 1 0 1.19s
✅ EDITORCONFIG editorconfig-checker 45 0 0.11s
✅ JSON eslint-plugin-jsonc 4 0 1.6s
✅ JSON jsonlint 4 0 0.32s
✅ JSON npm-package-json-lint yes no 0.78s
✅ JSON prettier 4 0 0.53s
✅ JSON v8r 4 0 5.87s
⚠️ MARKDOWN markdownlint 3 9 0.83s
✅ REPOSITORY checkov yes no 16.72s
✅ REPOSITORY devskim yes no 1.93s
✅ REPOSITORY gitleaks yes no 0.44s
✅ REPOSITORY git_diff yes no 0.02s
✅ REPOSITORY grype yes no 13.67s
✅ REPOSITORY kics yes no 46.16s
✅ REPOSITORY secretlint yes no 0.76s
✅ REPOSITORY syft yes no 0.39s
✅ REPOSITORY trivy yes no 7.4s
✅ REPOSITORY trivy-sbom yes no 1.78s
✅ REPOSITORY trufflehog yes no 13.56s

See detailed report in MegaLinter reports

You could have the same capabilities but better runtime performances if you use a MegaLinter flavor:

MegaLinter is graciously provided by OX Security

@renovate renovate bot force-pushed the renovate/github-actions branch 6 times, most recently from bd52eb8 to ec1a59f Compare September 11, 2023 03:31
@renovate renovate bot force-pushed the renovate/github-actions branch 6 times, most recently from 3fb290e to d0c8cbf Compare September 16, 2023 11:49
@renovate renovate bot force-pushed the renovate/github-actions branch 6 times, most recently from 57dd174 to baf5c72 Compare September 22, 2023 19:22
@chgl chgl force-pushed the renovate/github-actions branch 3 times, most recently from 36e5415 to af122c8 Compare September 24, 2023 09:58
@renovate renovate bot force-pushed the renovate/github-actions branch from af122c8 to e1a5909 Compare September 24, 2023 09:59
@chgl chgl force-pushed the renovate/github-actions branch from e1a5909 to 4b87767 Compare September 24, 2023 10:00
@renovate
Copy link
Contributor Author

renovate bot commented Sep 24, 2023

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

Warning: custom changes will be lost.

@chgl chgl merged commit 9504517 into master Sep 24, 2023
6 checks passed
chgl pushed a commit that referenced this pull request Sep 24, 2023
## [2.2.1](v2.2.0...v2.2.1) (2023-09-24)

### Miscellaneous Chores

* **deps:** update github-actions ([#343](#343)) ([9504517](9504517))
@chgl
Copy link
Owner

chgl commented Sep 24, 2023

🎉 This PR is included in version 2.2.1 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀

@chgl chgl added the released label Sep 24, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant