chore(deps): update maru support dependencies #99

renovate · 2024-05-22T22:02:33Z

This PR contains the following updates:

Package	Type	Update	Change
actions/create-github-app-token	action	minor	`v1.9.0` -> `v1.10.0`
actions/setup-go	action	patch	`v5.0.0` -> `v5.0.1`
anchore/sbom-action	action	minor	`v0.15.11` -> `v0.16.0`
defenseunicorns/zarf		minor	`v0.32.5` -> `v0.33.2`
github/codeql-action	action	patch	`v3.25.3` -> `v3.25.6`
goreleaser/goreleaser-action	action	minor	`v5.0.0` -> `v5.1.0`
ossf/scorecard-action	action	patch	`v2.3.1` -> `v2.3.3`

Release Notes

actions/create-github-app-token (actions/create-github-app-token)

`v1.10.0`

Compare Source

Features

private-key: escaped newlines will be replaced (#132) (9d23fb9)

Bug Fixes

clarify owner input description (#118) (d9bc169)

actions/setup-go (actions/setup-go)

`v5.0.1`

Compare Source

What's Changed

Bump undici from 5.28.2 to 5.28.3 and dependencies upgrade by @dependabot , @HarithaVattikuti in https://github.com/actions/setup-go/pull/465
Update documentation with latest V5 release notes by @ab in https://github.com/actions/setup-go/pull/459
Update version documentation by @178inaba in https://github.com/actions/setup-go/pull/458
Documentation update of actions/setup-go to v5 by @chenrui333 in https://github.com/actions/setup-go/pull/449

New Contributors

@ab made their first contribution in https://github.com/actions/setup-go/pull/459

Full Changelog: actions/setup-go@v5.0.0...v5.0.1

anchore/sbom-action (anchore/sbom-action)

`v0.16.0`: v0.16

Compare Source

Changes in v0.16.0

Update Syft to v1.4.1 (#465)
Update GitHub artifact client (#463) [kzantow]

defenseunicorns/zarf (defenseunicorns/zarf)

`v0.33.2`

Compare Source

What's Changed

fix: schema integration by @AustinAbro321 in https://github.com/defenseunicorns/zarf/pull/2463
docs: add contributor covenant code of conduct by @salaxander in https://github.com/defenseunicorns/zarf/pull/2462
docs: fix casing on code of conduct badge by @salaxander in https://github.com/defenseunicorns/zarf/pull/2466
fix(deps): update github.com/anchore/clio digest to 3c4abf8 by @renovate in https://github.com/defenseunicorns/zarf/pull/2424
fix: update docker media type in registry by @AustinAbro321 in https://github.com/defenseunicorns/zarf/pull/2476
fix: adds GetVariableConfig function for packager by @decleaver in https://github.com/defenseunicorns/zarf/pull/2475
test: add tests for remove copies from components to enable refactoring by @phillebaba in https://github.com/defenseunicorns/zarf/pull/2473
fix!: do not uninstall helm chart after failed install or upgrade by @lucasrod16 in https://github.com/defenseunicorns/zarf/pull/2456
feat: inspect --list-images by @Noxsios in https://github.com/defenseunicorns/zarf/pull/2478
refactor: remove copies from components to a filter by @phillebaba in https://github.com/defenseunicorns/zarf/pull/2474
chore: add support.md by @schristoff in https://github.com/defenseunicorns/zarf/pull/2480
chore: add a check for go mod tidy by @lucasrod16 in https://github.com/defenseunicorns/zarf/pull/2481
fix: use correct sha256 checksum for arm64 injector binary by @lucasrod16 in https://github.com/defenseunicorns/zarf/pull/2483
fix: simplify go mod tidy check by @lucasrod16 in https://github.com/defenseunicorns/zarf/pull/2482

New Contributors

@salaxander made their first contribution in https://github.com/defenseunicorns/zarf/pull/2462
@phillebaba made their first contribution in https://github.com/defenseunicorns/zarf/pull/2473
@schristoff made their first contribution in https://github.com/defenseunicorns/zarf/pull/2480

Full Changelog: zarf-dev/zarf@v0.33.1...v0.33.2

`v0.33.1`

Compare Source

What's Changed

fix: add redirect so old zarf base link is compatiable by @AustinAbro321 in https://github.com/defenseunicorns/zarf/pull/2432
ci: pin third-party gh actions by hash by @lucasrod16 in https://github.com/defenseunicorns/zarf/pull/2433
docs: add redirect for examples by @lucasrod16 in https://github.com/defenseunicorns/zarf/pull/2438
docs: update contributing and pre-commit by @Noxsios in https://github.com/defenseunicorns/zarf/pull/2439
ci: fix revive image ref in lint workflow by @lucasrod16 in https://github.com/defenseunicorns/zarf/pull/2436
fix: filter on running pods when finding an image for injector pod by @lucasrod16 in https://github.com/defenseunicorns/zarf/pull/2415
fix: readme dead links by @AustinAbro321 in https://github.com/defenseunicorns/zarf/pull/2442
fix: differential package create with non local sources by @AustinAbro321 in https://github.com/defenseunicorns/zarf/pull/2444
refactor: move variables into separate package by @Racer159 in https://github.com/defenseunicorns/zarf/pull/2414
ci: add top level workflow permission to commitlint by @lucasrod16 in https://github.com/defenseunicorns/zarf/pull/2449
ci: remove unused env var from codeql workflow by @lucasrod16 in https://github.com/defenseunicorns/zarf/pull/2450
chore: cleanup root level files and add SPDX check for Go files by @Noxsios in https://github.com/defenseunicorns/zarf/pull/2431
feat: config to enable resilient registry by @Michael-Kruggel in https://github.com/defenseunicorns/zarf/pull/2440
docs: init package clarity and cleanup by @AustinAbro321 in https://github.com/defenseunicorns/zarf/pull/2447
ci: compare cves to main by @AustinAbro321 in https://github.com/defenseunicorns/zarf/pull/2448
test: unpin version in bigbang extension test by @lucasrod16 in https://github.com/defenseunicorns/zarf/pull/2459
fix: broken schema from unexpanded embedded variables by @AustinAbro321 in https://github.com/defenseunicorns/zarf/pull/2458
fix: error on create if an index sha is used by @AustinAbro321 in https://github.com/defenseunicorns/zarf/pull/2429

New Contributors

@Michael-Kruggel made their first contribution in https://github.com/defenseunicorns/zarf/pull/2440

Full Changelog: zarf-dev/zarf@v0.33.0...v0.33.1

`v0.33.0`

Compare Source

What's Changed

fix: update deprecated syft packages command to syft scan by @lucasrod16 in https://github.com/defenseunicorns/zarf/pull/2399
chore: move helpers to defenseunicorns/pkg by @AustinAbro321 in https://github.com/defenseunicorns/zarf/pull/2402
fix(deps): update github.com/anchore/clio digest to fb5fc4c by @renovate in https://github.com/defenseunicorns/zarf/pull/2366
feat(tools): add yq by @zachariahmiller in https://github.com/defenseunicorns/zarf/pull/2406
chore: switch to use oci lib in defenseunicorns/pkg by @AustinAbro321 in https://github.com/defenseunicorns/zarf/pull/2404
fix(deps): update module github.com/defenseunicorns/pkg/helpers to v1 by @renovate in https://github.com/defenseunicorns/zarf/pull/2411
fix: use env var for PR title in commitlint workflow to prevent untrusted script injection by @lucasrod16 in https://github.com/defenseunicorns/zarf/pull/2418
fix: use default GITHUB_TOKEN for ossf/scorecard-action by @bburky in https://github.com/defenseunicorns/zarf/pull/2416
fix: remove duplicate logic for writing image layers to disk concurrently by @lucasrod16 in https://github.com/defenseunicorns/zarf/pull/2409
feat: add option to skip cosign lookup during find images by @Racer159 in https://github.com/defenseunicorns/zarf/pull/2427
feat: allow chart deploy overrides ALPHA by @naveensrinivasan in https://github.com/defenseunicorns/zarf/pull/2403
chore: update pull_request_template.md by @Noxsios in https://github.com/defenseunicorns/zarf/pull/2428
ci: pin k3s image version in k3d github action by @lucasrod16 in https://github.com/defenseunicorns/zarf/pull/2430
feat(docs): port docs to starlight by @Noxsios in https://github.com/defenseunicorns/zarf/pull/2315

New Contributors

@zachariahmiller made their first contribution in https://github.com/defenseunicorns/zarf/pull/2406
@bburky made their first contribution in https://github.com/defenseunicorns/zarf/pull/2416

Full Changelog: zarf-dev/zarf@v0.32.6...v0.33.0

`v0.32.6`

Compare Source

[0.32.6] - 2024-03-22

trying out some different release note generators, formatting may vary for a few releases while we figure out what works best ~@Noxsios

🚀 Features

[ALPHA] feat: package generation ALPHA by @andrewg-xyz in #2269
(lib) feat(lib): configurable log file location by @Noxsios in #2380
[BREAKING] feat!: filter package components with strategy interface by @Noxsios in #2321

🐛 Bug Fixes

fix: refactor create stages into separate lib by @lucasrod16 in #2223
fix: handle registry caBundle as a multiline string by @AbrohamLincoln in #2381
(regression) fix: populate p.sbomViewFiles on deploy and mirror by @lucasrod16 in #2386
fix: allow absolute paths for differential packages by @AustinAbro321 in #2397
fix: hotfix skeleton publish by @Noxsios in #2398

🚜 Refactor

refactor: split helpers/exec libs by @Racer159 in #2379

🧪 Testing

test: data injection flake by @lucasrod16 in #2361

⚙️ Miscellaneous Tasks

ci: add commitlint workflow and update contributing guide by @lucasrod16 in #2391

🛡️ Security

(release) build: create PRs on homebrew-tap by @Noxsios in #2385

Full Changelog: zarf-dev/zarf@v0.32.5...v0.32.6

github/codeql-action (github/codeql-action)

`v3.25.6`

Compare Source

`v3.25.5`

Compare Source

`v3.25.4`

Compare Source

goreleaser/goreleaser-action (goreleaser/goreleaser-action)

`v5.1.0`

Compare Source

Important

This version changes the default behavior of latest to ~> v1.

The next major of this action (v6), will change this to ~> v2, and will be launched together with GoReleaser v2.

What's Changed

docs: bump actions to latest major by @crazy-max in https://github.com/goreleaser/goreleaser-action/pull/435
chore(deps): bump docker/bake-action from 3 to 4 by @dependabot in https://github.com/goreleaser/goreleaser-action/pull/436
chore(deps): bump codecov/codecov-action from 3 to 4 by @dependabot in https://github.com/goreleaser/goreleaser-action/pull/437
chore(deps): bump actions/setup-go from 4 to 5 by @dependabot in https://github.com/goreleaser/goreleaser-action/pull/443
chore(deps): bump actions/upload-artifact from 3 to 4 by @dependabot in https://github.com/goreleaser/goreleaser-action/pull/444
Delete .kodiak.toml by @vedantmgoyal9 in https://github.com/goreleaser/goreleaser-action/pull/446
chore(deps): bump codecov/codecov-action from 3 to 4 by @dependabot in https://github.com/goreleaser/goreleaser-action/pull/448
chore(deps): bump ip from 2.0.0 to 2.0.1 by @dependabot in https://github.com/goreleaser/goreleaser-action/pull/450
Upgrade setup-go action version in README by @kishaningithub in https://github.com/goreleaser/goreleaser-action/pull/455
chore(deps): bump tar from 6.1.14 to 6.2.1 by @dependabot in https://github.com/goreleaser/goreleaser-action/pull/456
chore: use corepack to install yarn by @crazy-max in https://github.com/goreleaser/goreleaser-action/pull/458
feat: lock this major version of the action to use '~> v1' as 'latest' by @caarlos0 in https://github.com/goreleaser/goreleaser-action/pull/461
chore(deps): bump semver from 7.6.0 to 7.6.2 by @dependabot in https://github.com/goreleaser/goreleaser-action/pull/462
chore(deps): bump @actions/http-client from 2.2.0 to 2.2.1 by @dependabot in https://github.com/goreleaser/goreleaser-action/pull/451

New Contributors

@vedantmgoyal9 made their first contribution in https://github.com/goreleaser/goreleaser-action/pull/446

Full Changelog: goreleaser/goreleaser-action@v5.0.0...v5.1.0

ossf/scorecard-action (ossf/scorecard-action)

`v2.3.3`

Compare Source

[!NOTE]
There is no v2.3.2 release as a step was skipped in the release process. This was fixed and re-released under the v2.3.3 tag

What's Changed

🌱 Bump github.com/ossf/scorecard/v4 (v4.13.1) to github.com/ossf/scorecard/v5 (v5.0.0-rc1) by @spencerschrock in https://github.com/ossf/scorecard-action/pull/1366
🌱 Bump github.com/ossf/scorecard/v5 from v5.0.0-rc1 to v5.0.0-rc2 by @spencerschrock in https://github.com/ossf/scorecard-action/pull/1374
🌱 Bump github.com/ossf/scorecard/v5 from v5.0.0-rc2 to v5.0.0-rc2.0.20240509182734-7ce860946928 by @spencerschrock in https://github.com/ossf/scorecard-action/pull/1377

For a full changelist of what these include, see the v5.0.0-rc1 and v5.0.0-rc2 release notes.

Documentation

📖 Move token discussion out of main README. by @spencerschrock in https://github.com/ossf/scorecard-action/pull/1279
📖 link to ossf/scorecard workflow instead of maintaining an example by @spencerschrock in https://github.com/ossf/scorecard-action/pull/1352
📖 update api links to new scorecard.dev site by @spencerschrock in https://github.com/ossf/scorecard-action/pull/1376

Full Changelog: ossf/scorecard-action@v2.3.1...v2.3.3

`v2.3.2`

Compare Source

Configuration

📅 Schedule: Branch creation - "after 12pm every weekday,before 11am every weekday" in timezone America/New_York, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

| datasource | package | from | to | | ----------- | ------------------------------- | -------- | ------- | | github-tags | actions/create-github-app-token | v1.9.0 | v1.10.0 | | github-tags | actions/setup-go | v5.0.0 | v5.0.1 | | github-tags | anchore/sbom-action | v0.15.11 | v0.16.0 | | github-tags | defenseunicorns/zarf | v0.32.5 | v0.33.2 | | github-tags | github/codeql-action | v3.25.3 | v3.25.6 | | github-tags | goreleaser/goreleaser-action | v5.0.0 | v5.1.0 | | github-tags | ossf/scorecard-action | v2.3.1 | v2.3.3 |

renovate bot added the support-deps label May 22, 2024

Racer159 approved these changes May 22, 2024

View reviewed changes

Racer159 merged commit 6369bce into main May 22, 2024

Racer159 deleted the renovate/maru-support-dependencies branch May 22, 2024 22:14

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): update maru support dependencies #99

chore(deps): update maru support dependencies #99

Uh oh!

renovate bot commented May 22, 2024

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

chore(deps): update maru support dependencies #99

chore(deps): update maru support dependencies #99

Uh oh!

Conversation

renovate bot commented May 22, 2024

Release Notes

Features

Bug Fixes

Bug Fixes

Bug Fixes

What's Changed

New Contributors

v0.16.0: v0.16

Changes in v0.16.0

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

[0.32.6] - 2024-03-22

🚀 Features

🐛 Bug Fixes

🚜 Refactor

🧪 Testing

⚙️ Miscellaneous Tasks

🛡️ Security

Important

What's Changed

New Contributors

What's Changed

Documentation

Configuration

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

`v0.16.0`: v0.16