Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Bump the github-actions group with 9 updates #3277

Merged
merged 1 commit into from
Jan 16, 2025
Merged

Bump the github-actions group with 9 updates #3277

merged 1 commit into from
Jan 16, 2025

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 16, 2025

Bumps the github-actions group with 9 updates:

Package From To
actions/checkout 4.1.7 4.2.2
github/codeql-action 3.26.6 3.28.1
anchore/scan-action 4.1.2 6.0.0
docker/setup-qemu-action 3.2.0 3.3.0
peter-evans/create-pull-request 6.1.0 7.0.6
peter-evans/create-issue-from-file 5.0.0 5.0.1
sonarsource/sonarcloud-github-action 3.0.0 4.0.0
actions/stale 3f3b0175e8c66fb49b9a6d5a0cd1f8436d4c3ab6 fa77dfddd04682b7d96dbc4e016318e681fdc10e
actions/upload-artifact 4.4.0 4.6.0

Updates actions/checkout from 4.1.7 to 4.2.2

Release notes

Sourced from actions/checkout's releases.

v4.2.2

What's Changed

Full Changelog: actions/checkout@v4.2.1...v4.2.2

v4.2.1

What's Changed

New Contributors

Full Changelog: actions/checkout@v4.2.0...v4.2.1

v4.2.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v4.1.7...v4.2.0

Changelog

Sourced from actions/checkout's changelog.

Changelog

v4.2.2

v4.2.1

v4.2.0

v4.1.7

v4.1.6

v4.1.5

v4.1.4

v4.1.3

v4.1.2

v4.1.1

v4.1.0

... (truncated)

Commits

Updates github/codeql-action from 3.26.6 to 3.28.1

Release notes

Sourced from github/codeql-action's releases.

v3.28.1

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.1 - 10 Jan 2025

  • CodeQL Action v2 is now deprecated, and is no longer updated or supported. For better performance, improved security, and new features, upgrade to v3. For more information, see this changelog post. #2677
  • Update default CodeQL bundle version to 2.20.1. #2678

See the full CHANGELOG.md for more information.

v3.28.0

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.28.0 - 20 Dec 2024

  • Bump the minimum CodeQL bundle version to 2.15.5. #2655
  • Don't fail in the unusual case that a file is on the search path. #2660.

See the full CHANGELOG.md for more information.

v3.27.9

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.27.9 - 12 Dec 2024

No user facing changes.

See the full CHANGELOG.md for more information.

v3.27.7

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.27.7 - 10 Dec 2024

  • We are rolling out a change in December 2024 that will extract the CodeQL bundle directly to the toolcache to improve performance. #2631
  • Update default CodeQL bundle version to 2.20.0. #2636

... (truncated)

Changelog

Sourced from github/codeql-action's changelog.

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

[UNRELEASED]

No user facing changes.

3.28.1 - 10 Jan 2025

  • CodeQL Action v2 is now deprecated, and is no longer updated or supported. For better performance, improved security, and new features, upgrade to v3. For more information, see this changelog post. #2677
  • Update default CodeQL bundle version to 2.20.1. #2678

3.28.0 - 20 Dec 2024

  • Bump the minimum CodeQL bundle version to 2.15.5. #2655
  • Don't fail in the unusual case that a file is on the search path. #2660.

3.27.9 - 12 Dec 2024

No user facing changes.

3.27.8 - 12 Dec 2024

  • Fixed an issue where streaming the download and extraction of the CodeQL bundle did not respect proxy settings. #2624

3.27.7 - 10 Dec 2024

  • We are rolling out a change in December 2024 that will extract the CodeQL bundle directly to the toolcache to improve performance. #2631
  • Update default CodeQL bundle version to 2.20.0. #2636

3.27.6 - 03 Dec 2024

  • Update default CodeQL bundle version to 2.19.4. #2626

3.27.5 - 19 Nov 2024

No user facing changes.

3.27.4 - 14 Nov 2024

No user facing changes.

3.27.3 - 12 Nov 2024

No user facing changes.

3.27.2 - 12 Nov 2024

  • Fixed an issue where setting up the CodeQL tools would sometimes fail with the message "Invalid value 'undefined' for header 'authorization'". #2590

... (truncated)

Commits
  • b6a472f Merge pull request #2681 from github/update-v3.28.1-ea6acbfea
  • bb999b4 Update changelog for v3.28.1
  • ea6acbf Merge pull request #2677 from github/angelapwen/deprecate-action-v2
  • 4df151e Merge branch 'main' into angelapwen/deprecate-action-v2
  • a05a7eb Fix PR number in changenote
  • 8d2753b Add public changelog blog post link
  • e83e0a4 Merge pull request #2673 from github/dependabot/npm_and_yarn/npm-877f465710
  • b7ff308 Merge pull request #2678 from github/update-bundle/codeql-bundle-v2.20.1
  • 1aa16c2 Merge branch 'main' into update-bundle/codeql-bundle-v2.20.1
  • fb65b6c Merge pull request #2672 from github/mbg/start-proxy/include-type-in-urls-output
  • Additional commits viewable in compare view

Updates anchore/scan-action from 4.1.2 to 6.0.0

Release notes

Sourced from anchore/scan-action's releases.

v6.0.0

New in scan-action v6.0.0

Breaking Change

  • feat: add output-file option, default to random directory output in temp (#346) [kzantow]

The action no longer generates files in your working directory by default, instead you should use the action outputs: ${{ steps.<id>.outputs.sarif }} where the <id> needs to match the id you configured to reference the scan-action, e.g.:

      - uses: anchore/scan-action@v6
        id: scan
        ...
      - uses: github/codeql-action/upload-sarif@v3
        with:
          sarif_file: ${{ steps.scan.outputs.sarif }}

Other Changes

v5.3.0

New in scan-action v5.3.0

v5.2.1

New in scan-action v5.2.1

v5.2.0

New in scan-action v5.2.0

v5.1.0

New in scan-action v5.1.0

... (truncated)

Commits
  • abae793 chore(deps): update Grype to v0.86.1 (#416)
  • f02232c chore: exclude dev-deps from release drafter (#415)
  • 763018a feat: add support for cyclonedx and cyclonedx-json output-formats (#396)
  • e374579 chore(deps-dev): bump lint-staged from 15.2.10 to 15.2.11 (#414)
  • e90bc67 chore(deps): bump @​actions/cache from 3.3.0 to 4.0.0 (#412)
  • 028cd8f feat: add output-file option, default to random directory output in temp (#346)
  • 6e00665 chore(deps): update Grype to v0.86.0 (#413)
  • 15fee38 chore(deps-dev): bump eslint from 9.15.0 to 9.16.0 (#410)
  • c4c24ec chore(deps-dev): bump prettier from 3.3.3 to 3.4.2 (#411)
  • 869c549 chore(deps): update Grype to v0.85.0 (#408)
  • Additional commits viewable in compare view

Updates docker/setup-qemu-action from 3.2.0 to 3.3.0

Release notes

Sourced from docker/setup-qemu-action's releases.

v3.3.0

Full Changelog: docker/setup-qemu-action@v3.2.0...v3.3.0

Commits
  • 53851d1 Merge pull request #187 from docker/dependabot/npm_and_yarn/docker/actions-to...
  • 7066b90 chore: update generated content
  • 7559081 build(deps): bump @​docker/actions-toolkit from 0.35.0 to 0.49.0
  • 08d11eb Merge pull request #172 from docker/dependabot/npm_and_yarn/actions/core-1.11.1
  • e53506f chore: update generated content
  • 610b442 build(deps): bump @​actions/core from 1.10.1 to 1.11.1
  • 58a19f8 Merge pull request #182 from docker/dependabot/npm_and_yarn/cross-spawn-7.0.6
  • 49a12c4 Merge pull request #180 from docker/dependabot/github_actions/codecov/codecov...
  • 2b8ac83 ci: fix deprecated input for codecov-action
  • fdbeaac Merge pull request #130 from crazy-max/cache-image
  • Additional commits viewable in compare view

Updates peter-evans/create-pull-request from 6.1.0 to 7.0.6

Release notes

Sourced from peter-evans/create-pull-request's releases.

Create Pull Request v7.0.6

⚙️ Fixes an issue with commit signing where unicode characters in file paths were not preserved.

What's Changed

New Contributors

... (truncated)

Commits
  • 67ccf78 fix: preserve unicode in filepaths when commit signing (#3588)
  • bb88e27 build: update distribution (#3583)
  • b378ed5 build(deps): bump p-limit from 6.1.0 to 6.2.0 (#3578)
  • fa9200e build(deps-dev): bump @​types/node from 18.19.67 to 18.19.68 (#3570)
  • 16e0059 build(deps-dev): bump prettier from 3.4.1 to 3.4.2 (#3560)
  • 5bffd5a build(deps-dev): bump eslint-import-resolver-typescript (#3559)
  • a22a0dd build(deps-dev): bump prettier from 3.4.0 to 3.4.1 (#3544)
  • b27ce37 build(deps-dev): bump @​types/node from 18.19.66 to 18.19.67 (#3543)
  • 4e0cc19 build(deps): bump @​octokit/plugin-paginate-rest from 11.3.5 to 11.3.6 (#3542)
  • 25b6871 docs: update scopes for push-to-fork
  • Additional commits viewable in compare view

Updates peter-evans/create-issue-from-file from 5.0.0 to 5.0.1

Release notes

Sourced from peter-evans/create-issue-from-file's releases.

Create Issue From File v5.0.1

✨ The action will now truncate the issue body when it exceeds the max size permitted by GitHub's API

What's Changed

New Contributors

Full Changelog: peter-evans/create-issue-from-file@v5.0.0...v5.0.1

Commits

Updates sonarsource/sonarcloud-github-action from 3.0.0 to 4.0.0

Release notes

Sourced from sonarsource/sonarcloud-github-action's releases.

v4.0.0

⚠️ DEPRECATION WARNING ⚠️

This new version of the GitHub action for SonarQube Cloud is going to be the last one specifically designed for SonarQube Cloud.

Since v4.1.0, the former GitHub action for SonarQube Server (sonarqube-scan-action) is the entrypoint for both Server and Cloud: a single GitHub action to interact with the SonarQube solution, whether on premise or in the cloud!

You can read more about the unified action here.

What's Changed

New Contributors

@dependabot
Bump the github-actions group with 9 updates
a26cf8c 
Bumps the github-actions group with 9 updates:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `4.1.7` | `4.2.2` |
| [github/codeql-action](https://github.com/github/codeql-action) | `3.26.6` | `3.28.1` |
| [anchore/scan-action](https://github.com/anchore/scan-action) | `4.1.2` | `6.0.0` |
| [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) | `3.2.0` | `3.3.0` |
| [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) | `6.1.0` | `7.0.6` |
| [peter-evans/create-issue-from-file](https://github.com/peter-evans/create-issue-from-file) | `5.0.0` | `5.0.1` |
| [sonarsource/sonarcloud-github-action](https://github.com/sonarsource/sonarcloud-github-action) | `3.0.0` | `4.0.0` |
| [actions/stale](https://github.com/actions/stale) | `3f3b0175e8c66fb49b9a6d5a0cd1f8436d4c3ab6` | `fa77dfddd04682b7d96dbc4e016318e681fdc10e` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4.4.0` | `4.6.0` |


Updates `actions/checkout` from 4.1.7 to 4.2.2
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@692973e...11bd719)

Updates `github/codeql-action` from 3.26.6 to 3.28.1
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@4dd1613...b6a472f)

Updates `anchore/scan-action` from 4.1.2 to 6.0.0
- [Release notes](https://github.com/anchore/scan-action/releases)
- [Changelog](https://github.com/anchore/scan-action/blob/main/RELEASE.md)
- [Commits](anchore/scan-action@64a33b2...abae793)

Updates `docker/setup-qemu-action` from 3.2.0 to 3.3.0
- [Release notes](https://github.com/docker/setup-qemu-action/releases)
- [Commits](docker/setup-qemu-action@49b3bc8...53851d1)

Updates `peter-evans/create-pull-request` from 6.1.0 to 7.0.6
- [Release notes](https://github.com/peter-evans/create-pull-request/releases)
- [Commits](peter-evans/create-pull-request@c5a7806...67ccf78)

Updates `peter-evans/create-issue-from-file` from 5.0.0 to 5.0.1
- [Release notes](https://github.com/peter-evans/create-issue-from-file/releases)
- [Commits](peter-evans/create-issue-from-file@24452a7...e8ef132)

Updates `sonarsource/sonarcloud-github-action` from 3.0.0 to 4.0.0
- [Release notes](https://github.com/sonarsource/sonarcloud-github-action/releases)
- [Commits](SonarSource/sonarcloud-github-action@eb21172...02ef911)

Updates `actions/stale` from 3f3b0175e8c66fb49b9a6d5a0cd1f8436d4c3ab6 to fa77dfddd04682b7d96dbc4e016318e681fdc10e
- [Release notes](https://github.com/actions/stale/releases)
- [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md)
- [Commits](actions/stale@3f3b017...fa77dfd)

Updates `actions/upload-artifact` from 4.4.0 to 4.6.0
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@5076954...65c4c4a)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: anchore/scan-action
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: docker/setup-qemu-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: peter-evans/create-pull-request
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: peter-evans/create-issue-from-file
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: sonarsource/sonarcloud-github-action
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/stale
  dependency-type: direct:production
  dependency-group: github-actions
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jan 16, 2025
@dependabot dependabot bot requested a review from yboaron as a code owner January 16, 2025 16:20
@submariner-bot submariner-bot added the ready-to-test When a PR is ready for full E2E testing label Jan 16, 2025
@tpantelis tpantelis enabled auto-merge (rebase) January 16, 2025 20:42
@tpantelis tpantelis merged commit 8fc3d42 into release-0.19 Jan 16, 2025
47 checks passed
@dependabot dependabot bot deleted the dependabot/github_actions/release-0.19/github-actions-ad809033f9 branch January 16, 2025 21:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@tpantelis tpantelis tpantelis approved these changes

@skitt skitt skitt approved these changes

@mkolesnik mkolesnik Awaiting requested review from mkolesnik mkolesnik is a code owner

@Oats87 Oats87 Awaiting requested review from Oats87 Oats87 is a code owner

@sridhargaddam sridhargaddam Awaiting requested review from sridhargaddam sridhargaddam is a code owner

@vthapar vthapar Awaiting requested review from vthapar vthapar is a code owner

@yboaron yboaron Awaiting requested review from yboaron yboaron is a code owner

Assignees
No one assigned
Labels
dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code ready-to-test When a PR is ready for full E2E testing
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
3 participants
@skitt @tpantelis @submariner-bot