Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update all dependencies #362

Open
wants to merge 1 commit into
base: v0.22
Choose a base branch
from
Open

Update all dependencies #362

wants to merge 1 commit into from

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Apr 1, 2024

Mend Renovate

This PR contains the following updates:

Package Type Update Change
actions/cache action patch v4.0.1 -> v4.0.2
actions/checkout action patch v4.1.1 -> v4.1.7
actions/upload-artifact action patch v4.3.1 -> v4.3.4
erlef/setup-beam action minor v1.17.4 -> v1.18.0
erlef/setup-elixir action minor v1.17.4 -> v1.18.0
ex_doc minor ~> 0.31 -> ~> 0.34
github/codeql-action action minor v3.24.6 -> v3.25.12
ossf/scorecard-action action patch v2.3.1 -> v2.3.3
step-security/harden-runner action minor v2.7.0 -> v2.8.1

Release Notes

actions/cache (actions/cache)

v4.0.2

Compare Source

actions/checkout (actions/checkout)

v4.1.7

Compare Source

v4.1.6

Compare Source

v4.1.5

Compare Source

What's Changed

Full Changelog: actions/checkout@v4.1.4...v4.1.5

v4.1.4

Compare Source

v4.1.3

Compare Source

What's Changed

Full Changelog: actions/checkout@v4.1.2...v4.1.3

v4.1.2

Compare Source

actions/upload-artifact (actions/upload-artifact)

v4.3.4

Compare Source

What's Changed

Full Changelog: actions/upload-artifact@v4.3.3...v4.3.4

v4.3.3

Compare Source

What's Changed

Full Changelog: actions/upload-artifact@v4.3.2...v4.3.3

v4.3.2

Compare Source

What's Changed

New Contributors

Full Changelog: actions/upload-artifact@v4.3.1...v4.3.2

erlef/setup-beam (erlef/setup-beam)

v1.18.0

Compare Source

What's Changed
New Contributors

Full Changelog: erlef/setup-beam@v1.17...v1.17.7

v1.17.6

Compare Source

What's Changed
New Contributors

Full Changelog: erlef/setup-beam@v1.17...v1.17.6

v1.17.5

Compare Source

What's Changed

Full Changelog: erlef/setup-beam@v1.17...v1.17.5

erlef/setup-elixir (erlef/setup-elixir)

v1.18.0

Compare Source

What's Changed
New Contributors

Full Changelog: erlef/setup-beam@v1.17...v1.17.7

v1.17.6

Compare Source

What's Changed
New Contributors

Full Changelog: erlef/setup-beam@v1.17...v1.17.6

v1.17.5

Compare Source

What's Changed

Full Changelog: erlef/setup-beam@v1.17...v1.17.5

github/codeql-action (github/codeql-action)

v3.25.12

Compare Source

v3.25.11

Compare Source

v3.25.10

Compare Source

v3.25.9

Compare Source

v3.25.8

Compare Source

v3.25.7

Compare Source

v3.25.6

Compare Source

v3.25.5

Compare Source

v3.25.4

Compare Source

v3.25.3

Compare Source

v3.25.2

Compare Source

v3.25.1

Compare Source

v3.25.0

Compare Source

v3.24.11

Compare Source

v3.24.10

Compare Source

v3.24.9

Compare Source

v3.24.8

Compare Source

v3.24.7

Compare Source

ossf/scorecard-action (ossf/scorecard-action)

v2.3.3

Compare Source

[!NOTE]
There is no v2.3.2 release as a step was skipped in the release process. This was fixed and re-released under the v2.3.3 tag

What's Changed

For a full changelist of what these include, see the v5.0.0-rc1 and v5.0.0-rc2 release notes.

Documentation

Full Changelog: ossf/scorecard-action@v2.3.1...v2.3.3

v2.3.2

Compare Source

step-security/harden-runner (step-security/harden-runner)

v2.8.1

Compare Source

What's Changed

Full Changelog: step-security/harden-runner@v2...v2.8.1

v2.8.0

Compare Source

What's Changed

Release v2.8.0 by @​h0x0er and @​varunsh-coder in https://github.com/step-security/harden-runner/pull/416
This release includes:

  • File Monitoring Enhancements: Adds the capability to view the name and path of every file written during the build process.
  • Process Tracking Enhancements: Adds the capability to view process names and arguments of processes run during the build process.

These enhancements are based on insights from the XZ Utils incident, aimed at improving observability and detections during the build process.

Full Changelog: step-security/harden-runner@v2...v2.8.0

v2.7.1

Compare Source

What's Changed

Release v2.7.1 by @​varunsh-coder, @​h0x0er, @​ashishkurmi in https://github.com/step-security/harden-runner/pull/397
This release:

  • Improves the capability to inspect outbound HTTPS traffic on GitHub-hosted and self-hosted VM runners
  • Updates README to add link to case study video on how Harden-Runner detected a supply chain attack on a Google open-source project
  • Addresses minor bugs

Full Changelog: step-security/harden-runner@v2.7.0...v2.7.1


Configuration

📅 Schedule: Branch creation - "before 4am on the first day of the month" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

@renovate renovate bot force-pushed the renovate/all branch 2 times, most recently from 771f407 to fe17011 Compare April 10, 2024 11:48
@renovate renovate bot force-pushed the renovate/all branch 3 times, most recently from 7aaad11 to d3f5439 Compare April 18, 2024 19:25
@renovate renovate bot force-pushed the renovate/all branch 5 times, most recently from 75380e6 to 400abc4 Compare April 26, 2024 00:20
@renovate renovate bot force-pushed the renovate/all branch 3 times, most recently from fa6a20d to a679381 Compare May 6, 2024 19:21
@renovate renovate bot force-pushed the renovate/all branch 4 times, most recently from 8360a1c to 9679336 Compare May 13, 2024 15:37
@renovate renovate bot force-pushed the renovate/all branch 4 times, most recently from 45c9d12 to c309340 Compare May 22, 2024 04:31
@renovate renovate bot force-pushed the renovate/all branch 4 times, most recently from 190bb56 to 8c8fb43 Compare June 4, 2024 19:06
@renovate renovate bot force-pushed the renovate/all branch 4 times, most recently from 8f2ebbe to 7dc40d5 Compare June 13, 2024 17:09
@renovate renovate bot force-pushed the renovate/all branch 2 times, most recently from 87dd761 to 09e4c36 Compare July 5, 2024 16:23
@Odraxs Odraxs changed the base branch from main to v0.22 July 12, 2024 13:40
Copy link
Contributor Author

renovate bot commented Jul 12, 2024

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants