chore(deps): update github-actions by renovate-bot · Pull Request #4173 · slsa-framework/slsa-github-generator

renovate-bot · 2025-04-01T03:11:15Z

This PR contains the following updates:

Package	Type	Update	Change
actions/download-artifact	action	minor	`v4.2.0` -> `v4.3.0`
actions/setup-go	action	minor	`v5.3.0` -> `v5.5.0`
actions/setup-java	action	patch	`v4.7.0` -> `v4.7.1`
actions/setup-node	action	minor	`v4.3.0` -> `v4.4.0`
actions/setup-node	action	minor	`v3.8.2` -> `v3.9.1`
actions/setup-node	action	digest	`cdca736` -> `49933ea`
actions/upload-artifact	action	patch	`v4.6.1` -> `v4.6.2`
github/codeql-action	action	patch	`v3.28.11` -> `v3.28.18`
google-github-actions/auth	action	patch	`v2.1.8` -> `v2.1.10`
sigstore/cosign-installer	action	patch	`v3.8.1` -> `v3.8.2`
softprops/action-gh-release	action	patch	`v2.2.1` -> `v2.2.2`

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

actions/download-artifact (actions/download-artifact)

actions/setup-go (actions/setup-go)

`v5.5.0`

Compare Source

What's Changed

Bug fixes:

Update self-hosted environment validation by @priyagupta108 in https://github.com/actions/setup-go/pull/556
Add manifest validation and improve error handling by @priyagupta108 in https://github.com/actions/setup-go/pull/586
Update template link by @jsoref in https://github.com/actions/setup-go/pull/527

Dependency updates:

Upgrade @action/cache from 4.0.2 to 4.0.3 by @aparnajyothi-y in https://github.com/actions/setup-go/pull/574
Upgrade @actions/glob from 0.4.0 to 0.5.0 by @dependabot in https://github.com/actions/setup-go/pull/573
Upgrade ts-jest from 29.1.2 to 29.3.2 by @dependabot in https://github.com/actions/setup-go/pull/582
Upgrade eslint-plugin-jest from 27.9.0 to 28.11.0 by @dependabot in https://github.com/actions/setup-go/pull/537

New Contributors

@jsoref made their first contribution in https://github.com/actions/setup-go/pull/527

Full Changelog: actions/setup-go@v5...v5.5.0

`v5.4.0`

Compare Source

What's Changed

Dependency updates :

Upgrade semver from 7.6.0 to 7.6.3 by @dependabot in https://github.com/actions/setup-go/pull/535
Upgrade eslint-config-prettier from 8.10.0 to 10.0.1 by @dependabot in https://github.com/actions/setup-go/pull/536
Upgrade @action/cache from 4.0.0 to 4.0.2 by @aparnajyothi-y in https://github.com/actions/setup-go/pull/568
Upgrade undici from 5.28.4 to 5.28.5 by @dependabot in https://github.com/actions/setup-go/pull/541

New Contributors

@aparnajyothi-y made their first contribution in https://github.com/actions/setup-go/pull/568

Full Changelog: actions/setup-go@v5...v5.4.0

actions/setup-java (actions/setup-java)

`v4.7.1`

Compare Source

What's Changed

Documentation changes

Add Documentation to Recommend Using GraalVM JDK 17 Version to 17.0.12 to Align with GFTC License Terms by @aparnajyothi-y in https://github.com/actions/setup-java/pull/704
Remove duplicated GraalVM section in documentation by @Marcono1234 in https://github.com/actions/setup-java/pull/716

Dependency updates:

Upgrade @action/cache from 4.0.0 to 4.0.2 by @aparnajyothi-y in https://github.com/actions/setup-java/pull/766
Upgrade @actions/glob from 0.4.0 to 0.5.0 by @dependabot in https://github.com/actions/setup-java/pull/744
Upgrade ts-jest from 29.1.2 to 29.2.5 by @dependabot in https://github.com/actions/setup-java/pull/743
Upgrade @action/cache to 4.0.3 by @aparnajyothi-y in https://github.com/actions/setup-java/pull/773

Full Changelog: actions/setup-java@v4...v4.7.1

actions/setup-node (actions/setup-node)

`v4.4.0`

Compare Source

What's Changed

Bug fixes:

Make eslint-compact matcher compatible with Stylelint by @FloEdelmann in https://github.com/actions/setup-node/pull/98
Add support for indented eslint output by @fregante in https://github.com/actions/setup-node/pull/1245

Enhancement:

Support private mirrors by @marco-ippolito in https://github.com/actions/setup-node/pull/1240

Dependency update:

Upgrade @action/cache from 4.0.2 to 4.0.3 by @aparnajyothi-y in https://github.com/actions/setup-node/pull/1262

New Contributors

@FloEdelmann made their first contribution in https://github.com/actions/setup-node/pull/98
@fregante made their first contribution in https://github.com/actions/setup-node/pull/1245
@marco-ippolito made their first contribution in https://github.com/actions/setup-node/pull/1240

Full Changelog: actions/setup-node@v4...v4.4.0

actions/upload-artifact (actions/upload-artifact)

`v4.6.2`

Compare Source

What's Changed

Update to use artifact 2.3.2 package & prepare for new upload-artifact release by @salmanmkc in https://github.com/actions/upload-artifact/pull/685

New Contributors

@salmanmkc made their first contribution in https://github.com/actions/upload-artifact/pull/685

Full Changelog: actions/upload-artifact@v4...v4.6.2

github/codeql-action (github/codeql-action)

`v3.28.18`

Compare Source

`v3.28.17`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.17 - 02 May 2025

Update default CodeQL bundle version to 2.21.2. #2872

See the full CHANGELOG.md for more information.

`v3.28.16`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.16 - 23 Apr 2025

Update default CodeQL bundle version to 2.21.1. #2863

See the full CHANGELOG.md for more information.

`v3.28.15`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.15 - 07 Apr 2025

Fix bug where the action would fail if it tried to produce a debug artifact with more than 65535 files. #2842

See the full CHANGELOG.md for more information.

`v3.28.14`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.14 - 07 Apr 2025

Update default CodeQL bundle version to 2.21.0. #2838

See the full CHANGELOG.md for more information.

`v3.28.13`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.13 - 24 Mar 2025

No user facing changes.

See the full CHANGELOG.md for more information.

`v3.28.12`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.12 - 19 Mar 2025

Dependency caching should now cache more dependencies for Java build-mode: none extractions. This should speed up workflows and avoid inconsistent alerts in some cases.
Update default CodeQL bundle version to 2.20.7. #2810

See the full CHANGELOG.md for more information.

google-github-actions/auth (google-github-actions/auth)

`v2.1.10`

Compare Source

What's Changed

Declare workflow permissions by @sethvargo in https://github.com/google-github-actions/auth/pull/482
Document that the OIDC token expires in 5min by @sethvargo in https://github.com/google-github-actions/auth/pull/483
Release: v2.1.10 by @google-github-actions-bot in https://github.com/google-github-actions/auth/pull/484

Full Changelog: google-github-actions/auth@v2.1.9...v2.1.10

`v2.1.9`

Compare Source

What's Changed

Use our custom boolean parsing by @sethvargo in https://github.com/google-github-actions/auth/pull/478
Update deps by @sethvargo in https://github.com/google-github-actions/auth/pull/479
Release: v2.1.9 by @google-github-actions-bot in https://github.com/google-github-actions/auth/pull/480

Full Changelog: google-github-actions/auth@v2.1.8...v2.1.9

sigstore/cosign-installer (sigstore/cosign-installer)

`v3.8.2`

Compare Source

What's Changed

install cosign v2 from main in https://github.com/sigstore/cosign-installer/pull/186

Full Changelog: sigstore/cosign-installer@v3...v3.8.2

softprops/action-gh-release (softprops/action-gh-release)

`v2.2.2`

Compare Source

What's Changed

Bug fixes 🐛

fix: updating release draft status from true to false by @galargh in https://github.com/softprops/action-gh-release/pull/316

Other Changes 🔄

chore: simplify ref_type test by @steinybot in https://github.com/softprops/action-gh-release/pull/598
fix(docs): clarify the default for tag_name by @muzimuzhi in https://github.com/softprops/action-gh-release/pull/599
test(release): add unit tests when searching for a release by @rwaskiewicz in https://github.com/softprops/action-gh-release/pull/603
dependency updates

New Contributors

@steinybot made their first contribution in https://github.com/softprops/action-gh-release/pull/598
@muzimuzhi made their first contribution in https://github.com/softprops/action-gh-release/pull/599
@galargh made their first contribution in https://github.com/softprops/action-gh-release/pull/316
@rwaskiewicz made their first contribution in https://github.com/softprops/action-gh-release/pull/603

Full Changelog: softprops/action-gh-release@v2...v2.2.2

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, on day 1 of the month ( * 0-3 1 * * ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

saltman007web

reviews

saltman007web

approve

saltman007web

commit

Signed-off-by: Mend Renovate <[email protected]>

renovate-bot requested a review from a team as a code owner April 1, 2025 03:11

renovate-bot requested a review from a team April 1, 2025 03:11

renovate-bot force-pushed the renovate/github-actions branch 5 times, most recently from 387425d to 0f26dab Compare April 14, 2025 05:38

saltman007web approved these changes Apr 16, 2025

View reviewed changes

saltman007web suggested changes Apr 16, 2025

View reviewed changes

saltman007web approved these changes Apr 16, 2025

View reviewed changes

saltman007web approved these changes Apr 17, 2025

View reviewed changes

renovate-bot force-pushed the renovate/github-actions branch 4 times, most recently from 45678cf to 1b6488a Compare April 23, 2025 15:46

renovate-bot force-pushed the renovate/github-actions branch from 1b6488a to 77e05a3 Compare April 24, 2025 19:31

saltman007web approved these changes Apr 24, 2025

View reviewed changes

renovate-bot force-pushed the renovate/github-actions branch 2 times, most recently from 569679c to 8f4f89b Compare May 2, 2025 09:55

renovate-bot force-pushed the renovate/github-actions branch from 8f4f89b to 59b7db3 Compare May 8, 2025 08:37

chore(deps): update github-actions

317470a

Signed-off-by: Mend Renovate <[email protected]>

renovate-bot force-pushed the renovate/github-actions branch from 59b7db3 to 317470a Compare May 16, 2025 11:59

ramonpetgrave64 approved these changes May 16, 2025

View reviewed changes

ramonpetgrave64 merged commit 24e3463 into slsa-framework:main May 16, 2025
75 checks passed

renovate-bot deleted the renovate/github-actions branch May 16, 2025 14:03

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): update github-actions#4173

chore(deps): update github-actions#4173
ramonpetgrave64 merged 1 commit intoslsa-framework:mainfrom
renovate-bot:renovate/github-actions

renovate-bot commented Apr 1, 2025 •

edited

Loading

Uh oh!

saltman007web left a comment

Uh oh!

saltman007web left a comment

Uh oh!

saltman007web left a comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Conversation

renovate-bot commented Apr 1, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

New Contributors

What's Changed

What's Changed

Bug fixes:

Dependency updates:

New Contributors

What's Changed

Dependency updates :

New Contributors

What's Changed

Documentation changes

Dependency updates:

What's Changed

Bug fixes:

Enhancement:

Dependency update:

New Contributors

What's Changed

New Contributors

CodeQL Action Changelog

3.28.17 - 02 May 2025

CodeQL Action Changelog

3.28.16 - 23 Apr 2025

CodeQL Action Changelog

3.28.15 - 07 Apr 2025

CodeQL Action Changelog

3.28.14 - 07 Apr 2025

CodeQL Action Changelog

3.28.13 - 24 Mar 2025

CodeQL Action Changelog

3.28.12 - 19 Mar 2025

What's Changed

What's Changed

What's Changed

What's Changed

Bug fixes 🐛

Other Changes 🔄

New Contributors

Configuration

Uh oh!

saltman007web left a comment

Choose a reason for hiding this comment

Uh oh!

saltman007web left a comment

Choose a reason for hiding this comment

Uh oh!

saltman007web left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

renovate-bot commented Apr 1, 2025 •

edited

Loading