From 5b646786c1a557f41f70ed2d6c7a407e1235787d Mon Sep 17 00:00:00 2001 From: Ashley Caselli Date: Thu, 9 May 2024 10:27:24 -0400 Subject: [PATCH 01/17] chore(deps): update alpine docker tag to v3.19.1 --- .docker/Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.docker/Dockerfile b/.docker/Dockerfile index f500b83f..763b1c23 100644 --- a/.docker/Dockerfile +++ b/.docker/Dockerfile @@ -32,7 +32,7 @@ RUN unzip target/shacl-${VERSION}-bin.zip -d /app/ # BUILD STAGE 2: keep only Java and SHACL -FROM alpine:3.18 +FROM alpine:3.19.1 ARG VERSION From 2e219794b0143a67596fe1082910bda74865d024 Mon Sep 17 00:00:00 2001 From: Ashley Caselli Date: Thu, 9 May 2024 18:29:48 -0400 Subject: [PATCH 02/17] ci(deps): update actions/upload-artifact action to v4.3.3 --- .github/workflows/docker-image.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/docker-image.yml b/.github/workflows/docker-image.yml index 9f0933c4..989f87d9 100644 --- a/.github/workflows/docker-image.yml +++ b/.github/workflows/docker-image.yml @@ -93,7 +93,7 @@ jobs: digest="${{ steps.build.outputs.digest }}" touch "/tmp/digests/${digest#sha256:}" - name: Upload digest - uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1 + uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 # v4.3.3 with: name: digests-${{ matrix.package }} path: /tmp/digests/* From 23727f0939b32f12ff29f47f4a76cbe4b2ab41a3 Mon Sep 17 00:00:00 2001 From: Ashley Caselli Date: Thu, 9 May 2024 18:37:01 -0400 Subject: [PATCH 03/17] ci(deps): update actions/download-artifact action to v4.1.7 --- .github/workflows/docker-image.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/docker-image.yml b/.github/workflows/docker-image.yml index 989f87d9..cfca6740 100644 --- a/.github/workflows/docker-image.yml +++ b/.github/workflows/docker-image.yml @@ -124,7 +124,7 @@ jobs: echo "version_build=${LATEST_RELEASE}_"$(git rev-parse --short "$GITHUB_SHA") >> $GITHUB_OUTPUT - name: Download digests - uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 + uses: actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e # v4.1.7 with: path: /tmp/digests pattern: digests-* From 73bd4e603853951e4549dea3fd8ab73c804f6a24 Mon Sep 17 00:00:00 2001 From: Ashley Caselli Date: Fri, 10 May 2024 12:10:16 -0400 Subject: [PATCH 04/17] ci(deps): update docker/setup-buildx-action action to v3.3.0 --- .github/workflows/docker-image.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/docker-image.yml b/.github/workflows/docker-image.yml index cfca6740..048afcf9 100644 --- a/.github/workflows/docker-image.yml +++ b/.github/workflows/docker-image.yml @@ -43,7 +43,7 @@ jobs: - name: Set up Docker Buildx id: buildx - uses: docker/setup-buildx-action@2b51285047da1547ffb1b2203d8be4c0af6b1f20 # v3.2.0 + uses: docker/setup-buildx-action@d70bba72b1f3fd22344832f00baa16ece964efeb # v3.3.0 # inspired by https://github.com/reloc8/action-latest-release-version - name: Get release version @@ -131,7 +131,7 @@ jobs: merge-multiple: true - name: Set up Docker Buildx - uses: docker/setup-buildx-action@2b51285047da1547ffb1b2203d8be4c0af6b1f20 # v3.2.0 + uses: docker/setup-buildx-action@d70bba72b1f3fd22344832f00baa16ece964efeb # v3.3.0 - name: Extract metadata (tags, labels) for Docker id: meta From acfb6e374db4730fa85fe168b74e4fe19ac8d98d Mon Sep 17 00:00:00 2001 From: Ashley Caselli Date: Fri, 10 May 2024 12:27:29 -0400 Subject: [PATCH 05/17] ci(deps): update actions/checkout version tag with the right one --- .github/workflows/docker-image.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/docker-image.yml b/.github/workflows/docker-image.yml index 048afcf9..1f933979 100644 --- a/.github/workflows/docker-image.yml +++ b/.github/workflows/docker-image.yml @@ -110,7 +110,7 @@ jobs: echo "IMAGE_NAME=${GITHUB_REPOSITORY,,}" >> ${GITHUB_ENV} - name: Checkout repository - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4 + uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 # inspired by https://github.com/reloc8/action-latest-release-version - name: Get release version From 42ecc775196e724cd218af8a31275b7f7de4ff9f Mon Sep 17 00:00:00 2001 From: Ashley Caselli Date: Fri, 10 May 2024 12:30:40 -0400 Subject: [PATCH 06/17] ci(deps): update actions/checkout action version tag to v4.1.1 --- .github/workflows/docker-image.yml | 2 +- .github/workflows/maven-test-pr.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/docker-image.yml b/.github/workflows/docker-image.yml index 1f933979..12d1002a 100644 --- a/.github/workflows/docker-image.yml +++ b/.github/workflows/docker-image.yml @@ -36,7 +36,7 @@ jobs: echo "IMAGE_NAME=${GITHUB_REPOSITORY,,}" >> ${GITHUB_ENV} - name: Checkout repository - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4 + uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 - name: Set up QEMU uses: docker/setup-qemu-action@68827325e0b33c7199eb31dd4e31fbe9023e06e3 # v3.0.0 diff --git a/.github/workflows/maven-test-pr.yml b/.github/workflows/maven-test-pr.yml index c0a0f5e1..2a233a03 100644 --- a/.github/workflows/maven-test-pr.yml +++ b/.github/workflows/maven-test-pr.yml @@ -8,7 +8,7 @@ jobs: test: runs-on: ubuntu-latest steps: - - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4 + - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 - name: Set up JDK uses: actions/setup-java@99b8673ff64fbf99d8d325f52d9a5bdedb8483e9 # v4.2.1 with: From b93e7c7ad9abc214cbcd83afce7bb2cb4b2989e5 Mon Sep 17 00:00:00 2001 From: Ashley Caselli Date: Wed, 15 May 2024 16:29:18 +0200 Subject: [PATCH 07/17] build(deps): update dependency org.apache.maven.plugins:maven-assembly-plugin to v3.6.0 --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index 6fa7702c..89ab044c 100644 --- a/pom.xml +++ b/pom.xml @@ -155,7 +155,7 @@ org.apache.maven.plugins maven-assembly-plugin - 3.1.1 + 3.6.0 src/assembly/bin.xml From 159d246c4d08217eac1097040ab1635c9cc6f4bb Mon Sep 17 00:00:00 2001 From: Ashley Caselli Date: Thu, 16 May 2024 10:22:46 +0200 Subject: [PATCH 08/17] build(deps): update dependency org.apache.maven.plugins:maven-jar-plugin to v3.3.0 --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index 89ab044c..cda8eb09 100644 --- a/pom.xml +++ b/pom.xml @@ -121,7 +121,7 @@ org.apache.maven.plugins maven-jar-plugin - 3.1.1 + 3.3.0 From 9f229e947fdcf6c44febf272c87d3086255127be Mon Sep 17 00:00:00 2001 From: Ashley Caselli Date: Thu, 16 May 2024 10:26:12 +0200 Subject: [PATCH 09/17] build(deps): update dependency org.apache.maven.plugins:maven-source-plugin to v3.3.0 --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index cda8eb09..40ac5b0c 100644 --- a/pom.xml +++ b/pom.xml @@ -134,7 +134,7 @@ org.apache.maven.plugins maven-source-plugin - 3.0.1 + 3.3.0 attach-sources From bf5ebf39cb8aa0282c7c98c3971a3d19cf971ba0 Mon Sep 17 00:00:00 2001 From: Ashley Caselli Date: Thu, 16 May 2024 11:25:17 +0200 Subject: [PATCH 10/17] chore(renovate): enable forkProcessing --- renovate.json | 1 + 1 file changed, 1 insertion(+) diff --git a/renovate.json b/renovate.json index 9519d306..1d9a2082 100644 --- a/renovate.json +++ b/renovate.json @@ -4,6 +4,7 @@ "local>ashleycaselli/renovate-config" ], "automerge": false, + "forkProcessing": "enabled", "packageRules": [ { "description": "Updates to the parent dependencies should trigger a new patch release", From 2c5188e0455770efc002897481f26f1657d83000 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Thu, 16 May 2024 09:25:47 +0000 Subject: [PATCH 11/17] ci(deps): update actions/checkout action to v4.1.5 --- .github/workflows/docker-image.yml | 4 ++-- .github/workflows/maven-test-pr.yml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/docker-image.yml b/.github/workflows/docker-image.yml index 12d1002a..e6f25e2c 100644 --- a/.github/workflows/docker-image.yml +++ b/.github/workflows/docker-image.yml @@ -36,7 +36,7 @@ jobs: echo "IMAGE_NAME=${GITHUB_REPOSITORY,,}" >> ${GITHUB_ENV} - name: Checkout repository - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 + uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5 - name: Set up QEMU uses: docker/setup-qemu-action@68827325e0b33c7199eb31dd4e31fbe9023e06e3 # v3.0.0 @@ -110,7 +110,7 @@ jobs: echo "IMAGE_NAME=${GITHUB_REPOSITORY,,}" >> ${GITHUB_ENV} - name: Checkout repository - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 + uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5 # inspired by https://github.com/reloc8/action-latest-release-version - name: Get release version diff --git a/.github/workflows/maven-test-pr.yml b/.github/workflows/maven-test-pr.yml index 2a233a03..fe5727fc 100644 --- a/.github/workflows/maven-test-pr.yml +++ b/.github/workflows/maven-test-pr.yml @@ -8,7 +8,7 @@ jobs: test: runs-on: ubuntu-latest steps: - - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 + - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5 - name: Set up JDK uses: actions/setup-java@99b8673ff64fbf99d8d325f52d9a5bdedb8483e9 # v4.2.1 with: From ed71104ba65e29c5d8ebaf22e87f054fc697dd37 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Thu, 16 May 2024 09:31:19 +0000 Subject: [PATCH 12/17] build(deps): update dependency org.apache.maven.plugins:maven-source-plugin to v3.3.1 --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index 40ac5b0c..3caeaad7 100644 --- a/pom.xml +++ b/pom.xml @@ -134,7 +134,7 @@ org.apache.maven.plugins maven-source-plugin - 3.3.0 + 3.3.1 attach-sources From 124a0ca9c0aa5ce306b294e55358e658200c9778 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Thu, 16 May 2024 09:49:55 +0000 Subject: [PATCH 13/17] build(deps): update dependency org.apache.maven.plugins:maven-jar-plugin to v3.4.1 --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index 3caeaad7..b6c1bc66 100644 --- a/pom.xml +++ b/pom.xml @@ -121,7 +121,7 @@ org.apache.maven.plugins maven-jar-plugin - 3.3.0 + 3.4.1 From 3049d5014f9de86fdbda395d6c2f2439349cd641 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Thu, 16 May 2024 09:56:34 +0000 Subject: [PATCH 14/17] build(deps): update dependency org.apache.maven.plugins:maven-assembly-plugin to v3.7.1 --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index b6c1bc66..9f0b51aa 100644 --- a/pom.xml +++ b/pom.xml @@ -155,7 +155,7 @@ org.apache.maven.plugins maven-assembly-plugin - 3.6.0 + 3.7.1 src/assembly/bin.xml From 24005498f1873619a62e61b2450a5161f736ef04 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Thu, 16 May 2024 10:08:43 +0000 Subject: [PATCH 15/17] build(deps): update dependency org.apache.maven.plugins:maven-compiler-plugin to v3.13.0 --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index 9f0b51aa..60cb10cf 100644 --- a/pom.xml +++ b/pom.xml @@ -112,7 +112,7 @@ org.apache.maven.plugins maven-compiler-plugin - 3.8.1 + 3.13.0 ${java.version} From 41f858386266bc1922fa2f1e516e20cfaa83a732 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Thu, 16 May 2024 13:49:09 +0000 Subject: [PATCH 16/17] build(deps): update dependency org.apache.maven.plugins:maven-gpg-plugin to v3.2.4 --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index 60cb10cf..98dc9ff6 100644 --- a/pom.xml +++ b/pom.xml @@ -223,7 +223,7 @@ org.apache.maven.plugins maven-gpg-plugin - 3.1.0 + 3.2.4 sign-artifacts From d1479f390c0c02b827b06da6c8ae45aa550ef0a1 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Fri, 17 May 2024 08:00:54 +0000 Subject: [PATCH 17/17] ci(deps): update actions/checkout action to v4.1.6 --- .github/workflows/docker-image.yml | 4 ++-- .github/workflows/maven-test-pr.yml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/docker-image.yml b/.github/workflows/docker-image.yml index e6f25e2c..c2b88496 100644 --- a/.github/workflows/docker-image.yml +++ b/.github/workflows/docker-image.yml @@ -36,7 +36,7 @@ jobs: echo "IMAGE_NAME=${GITHUB_REPOSITORY,,}" >> ${GITHUB_ENV} - name: Checkout repository - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5 + uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6 - name: Set up QEMU uses: docker/setup-qemu-action@68827325e0b33c7199eb31dd4e31fbe9023e06e3 # v3.0.0 @@ -110,7 +110,7 @@ jobs: echo "IMAGE_NAME=${GITHUB_REPOSITORY,,}" >> ${GITHUB_ENV} - name: Checkout repository - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5 + uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6 # inspired by https://github.com/reloc8/action-latest-release-version - name: Get release version diff --git a/.github/workflows/maven-test-pr.yml b/.github/workflows/maven-test-pr.yml index fe5727fc..8140f34a 100644 --- a/.github/workflows/maven-test-pr.yml +++ b/.github/workflows/maven-test-pr.yml @@ -8,7 +8,7 @@ jobs: test: runs-on: ubuntu-latest steps: - - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5 + - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6 - name: Set up JDK uses: actions/setup-java@99b8673ff64fbf99d8d325f52d9a5bdedb8483e9 # v4.2.1 with: