chore(deps): update maru support dependencies #128

renovate · 2024-07-15T17:22:36Z

This PR contains the following updates:

Package	Type	Update	Change
actions/create-github-app-token	action	minor	`v1.10.3` -> `v1.11.0`
actions/setup-node	action	patch	`v4.0.3` -> `v4.0.4`
actions/upload-artifact	action	minor	`v4.3.4` -> `v4.4.0`
anchore/sbom-action	action	minor	`v0.16.1` -> `v0.17.2`
docker/setup-buildx-action	action	minor	`v3.4.0` -> `n/a`
github/codeql-action	action	minor	`v3.25.12` -> `v3.26.8`
morphy/revive-action	docker	digest	`087d4e6` -> `540bffd`
ossf/scorecard-action	action	minor	`v2.3.3` -> `v2.4.0`
sigstore/cosign-installer	action	minor	`v3.5.0` -> `n/a`
zarf-dev/zarf		minor	`v0.39.0` -> `v0.40.1`

Release Notes

actions/create-github-app-token (actions/create-github-app-token)

`v1.11.0`

Compare Source

What's Changed

actions/setup-node (actions/setup-node)

`v4.0.4`

Compare Source

actions/upload-artifact (actions/upload-artifact)

`v4.4.0`

Compare Source

`v4.3.6`

Compare Source

`v4.3.5`

Compare Source

anchore/sbom-action (anchore/sbom-action)

`v0.17.2`

Compare Source

Changes in v0.17.2

Update Syft to v1.11.1 (#485) [anchore-actions-token-generator]

`v0.17.1`

Compare Source

Changes in v0.17.1

chore(deps): update Syft to v1.11.0 (#483) [anchore-actions-token-generator]

`v0.17.0`

Compare Source

Changes in v0.17.0

chore(deps): update Syft to v1.9.0 (#479) [anchore-actions-token-generator]

docker/setup-buildx-action (docker/setup-buildx-action)

`v3.6.1`

Compare Source

Check for malformed docker context by @crazy-max in https://github.com/docker/setup-buildx-action/pull/347

Full Changelog: docker/setup-buildx-action@v3.6.0...v3.6.1

`v3.6.0`

Compare Source

Create temp docker context if default one has TLS data loaded before creating a container builder by @crazy-max in https://github.com/docker/setup-buildx-action/pull/341

Full Changelog: docker/setup-buildx-action@v3.5.0...v3.6.0

`v3.5.0`

Compare Source

github/codeql-action (github/codeql-action)

`v3.26.8`

Compare Source

`v3.26.7`

Compare Source

`v3.26.6`

Compare Source

`v3.26.5`

Compare Source

`v3.26.4`

Compare Source

`v3.26.3`

Compare Source

`v3.26.2`

Compare Source

`v3.26.1`

Compare Source

`v3.26.0`

Compare Source

`v3.25.15`

Compare Source

`v3.25.14`

Compare Source

`v3.25.13`

Compare Source

ossf/scorecard-action (ossf/scorecard-action)

`v2.4.0`

Compare Source

What's Changed

This update bumps the Scorecard version to the v5 release. For a complete list of changes, please refer to the v5.0.0 release notes. Of special note to Scorecard Action is the Maintainer Annotation feature, which can be used to suppress some Code Scanning false positives. Alerts will not be generated for any Scorecard Check with an annotation.

🌱 Bump github.com/ossf/scorecard/v5 from v5.0.0-rc2 to v5.0.0 by @spencerschrock in https://github.com/ossf/scorecard-action/pull/1410
🐛 lower license sarif alert threshold to 9 by @spencerschrock in https://github.com/ossf/scorecard-action/pull/1411

Documentation

docs: dogfooding badge by @jkowalleck in https://github.com/ossf/scorecard-action/pull/1399

New Contributors

@jkowalleck made their first contribution in https://github.com/ossf/scorecard-action/pull/1399

Full Changelog: ossf/scorecard-action@v2.3.3...v2.4.0

sigstore/cosign-installer (sigstore/cosign-installer)

`v3.6.0`

Compare Source

What's Changed

Bump actions/checkout from 4.1.2 to 4.1.3 by @dependabot in https://github.com/sigstore/cosign-installer/pull/161
Bump actions/checkout from 4.1.3 to 4.1.4 by @dependabot in https://github.com/sigstore/cosign-installer/pull/162
Bump actions/setup-go from 5.0.0 to 5.0.1 by @dependabot in https://github.com/sigstore/cosign-installer/pull/163
Bump actions/checkout from 4.1.4 to 4.1.5 by @dependabot in https://github.com/sigstore/cosign-installer/pull/164
Bump actions/checkout from 4.1.5 to 4.1.6 by @dependabot in https://github.com/sigstore/cosign-installer/pull/165
Bump actions/checkout from 4.1.6 to 4.1.7 by @dependabot in https://github.com/sigstore/cosign-installer/pull/166
Bump actions/setup-go from 5.0.1 to 5.0.2 by @dependabot in https://github.com/sigstore/cosign-installer/pull/167
pin public key used for verification by @bobcallaway in https://github.com/sigstore/cosign-installer/pull/169
bump default version to v2.4.0 release by @bobcallaway in https://github.com/sigstore/cosign-installer/pull/168
update readme for new release by @bobcallaway in https://github.com/sigstore/cosign-installer/pull/170

Full Changelog: sigstore/cosign-installer@v3...v3.6.0

zarf-dev/zarf (zarf-dev/zarf)

`v0.40.1`

Compare Source

`v0.40.0`

Compare Source

Configuration

📅 Schedule: Branch creation - "after 12pm every weekday,before 11am every weekday" in timezone America/New_York, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

| datasource | package | from | to | | ----------- | ------------------------------- | -------- | ------- | | github-tags | actions/create-github-app-token | v1.10.3 | v1.11.0 | | github-tags | actions/setup-node | v4.0.3 | v4.0.4 | | github-tags | actions/upload-artifact | v4.3.4 | v4.4.0 | | github-tags | anchore/sbom-action | v0.16.1 | v0.17.2 | | github-tags | docker/setup-buildx-action | v3.4.0 | v3.6.1 | | github-tags | github/codeql-action | v3.25.12 | v3.26.8 | | github-tags | ossf/scorecard-action | v2.3.3 | v2.4.0 | | github-tags | sigstore/cosign-installer | v3.5.0 | v3.6.0 | | github-tags | zarf-dev/zarf | v0.39.0 | v0.40.1 |

renovate · 2024-09-20T01:03:30Z

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

renovate bot added the support-deps label Jul 15, 2024

renovate bot force-pushed the renovate/maru-support-dependencies branch from c80ac93 to 98e7353 Compare July 17, 2024 21:43

renovate bot changed the title ~~chore(deps): update support-deps to v0.17.0~~ chore(deps): update maru support dependencies Jul 17, 2024

renovate bot force-pushed the renovate/maru-support-dependencies branch 6 times, most recently from e52134b to 7ab95a9 Compare July 26, 2024 19:36

renovate bot force-pushed the renovate/maru-support-dependencies branch 3 times, most recently from c90c346 to 17a840e Compare August 2, 2024 17:16

renovate bot force-pushed the renovate/maru-support-dependencies branch 5 times, most recently from 04d6a71 to ffa2e1b Compare August 9, 2024 23:17

renovate bot force-pushed the renovate/maru-support-dependencies branch 4 times, most recently from 33aa5c0 to 00a67a2 Compare August 19, 2024 19:35

renovate bot force-pushed the renovate/maru-support-dependencies branch 4 times, most recently from 9b94f21 to 4e15e9a Compare August 24, 2024 00:51

renovate bot force-pushed the renovate/maru-support-dependencies branch 4 times, most recently from cac50b5 to 5243686 Compare September 4, 2024 07:27

renovate bot force-pushed the renovate/maru-support-dependencies branch from 5243686 to ed97ec4 Compare September 5, 2024 21:57

renovate bot force-pushed the renovate/maru-support-dependencies branch 2 times, most recently from 1152948 to 4756823 Compare September 13, 2024 14:23

renovate bot force-pushed the renovate/maru-support-dependencies branch 5 times, most recently from 4053469 to e1ba440 Compare September 20, 2024 00:19

renovate bot force-pushed the renovate/maru-support-dependencies branch from b301755 to 3c9dabb Compare September 20, 2024 00:35

remove uneeded tools

beea307

zachariahmiller approved these changes Sep 20, 2024

View reviewed changes

Racer159 merged commit 5062dc5 into main Sep 20, 2024

Racer159 deleted the renovate/maru-support-dependencies branch September 20, 2024 14:54

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): update maru support dependencies #128

chore(deps): update maru support dependencies #128

Uh oh!

renovate bot commented Jul 15, 2024 •

edited by Racer159

Loading

Uh oh!

renovate bot commented Sep 20, 2024

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

chore(deps): update maru support dependencies #128

chore(deps): update maru support dependencies #128

Uh oh!

Conversation

renovate bot commented Jul 15, 2024 • edited by Racer159 Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

Features

New Contributors

Bug Fixes

Changes in v0.17.2

Changes in v0.17.1

Changes in v0.17.0

What's Changed

Documentation

New Contributors

What's Changed

Configuration

Uh oh!

renovate bot commented Sep 20, 2024

Edited/Blocked Notification

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

renovate bot commented Jul 15, 2024 •

edited by Racer159

Loading