chore(deps): update all non-major dependencies #52

renovate · 2024-09-04T12:10:41Z

This PR contains the following updates:

Package	Type	Update	Change
actions/cache	action	minor	`v4.0.2` -> `v4.1.2`
actions/checkout	action	minor	`v4.1.7` -> `v4.2.2`
anchore/sbom-action	action	patch	`v0.17.2` -> `v0.17.7`
github.com/cert-manager/cert-manager	require	patch	`v1.16.0` -> `v1.16.1`
github/codeql-action	action	minor	`v2.26.4` -> `v2.27.3`
sigs.k8s.io/structured-merge-diff/v4	replace	patch	`v4.4.1` -> `v4.4.3`
sigstore/cosign-installer	action	minor	`v3.6.0` -> `v3.7.0`
step-security/harden-runner	action	minor	`v2.9.1` -> `v2.10.1`

Release Notes

actions/cache (actions/cache)

What's Changed

Restore original behavior of cache-hit output by @joshmgross in https://github.com/actions/cache/pull/1467

Full Changelog: actions/cache@v4.1.0...v4.1.1

`v4.1.0`

Compare Source

What's Changed

Fix cache-hit output when cache missed by @fchimpan in https://github.com/actions/cache/pull/1404
Deprecate save-always input by @joshmgross in https://github.com/actions/cache/pull/1452

New Contributors

@ottlinger made their first contribution in https://github.com/actions/cache/pull/1437
@Olegt0rr made their first contribution in https://github.com/actions/cache/pull/1377
@fchimpan made their first contribution in https://github.com/actions/cache/pull/1404
@x612skm made their first contribution in https://github.com/actions/cache/pull/1434
@todgru made their first contribution in https://github.com/actions/cache/pull/1311
@Jcambass made their first contribution in https://github.com/actions/cache/pull/1463
@mackey0225 made their first contribution in https://github.com/actions/cache/pull/1462
@quatquatt made their first contribution in https://github.com/actions/cache/pull/1445

Full Changelog: actions/cache@v4.0.2...v4.1.0

actions/checkout (actions/checkout)

`v4.2.2`

Compare Source

url-helper.ts now leverages well-known environment variables by @jww3 in https://github.com/actions/checkout/pull/1941
Expand unit test coverage for isGhes by @jww3 in https://github.com/actions/checkout/pull/1946

`v4.2.1`

Compare Source

Check out other refs/* by commit if provided, fall back to ref by @orhantoy in https://github.com/actions/checkout/pull/1924

`v4.2.0`

Compare Source

Add Ref and Commit outputs by @lucacome in https://github.com/actions/checkout/pull/1180
Dependency updates by @dependabot- https://github.com/actions/checkout/pull/1777, https://github.com/actions/checkout/pull/1872

anchore/sbom-action (anchore/sbom-action)

`v0.17.7`

Compare Source

Changes in v0.17.7

chore(deps): update Syft to v1.16.0 (#506) [anchore-actions-token-generator]

`v0.17.6`

Compare Source

Changes in v0.17.6

chore(deps): update Syft to v1.15.0 (#505) [anchore-actions-token-generator]
chore(deps): bump actions/checkout from 4.2.1 to 4.2.2 (#504) [dependabot]

`v0.17.5`

Compare Source

Changes in v0.17.5

chore(deps): update Syft to v1.14.2 (#503) [anchore-actions-token-generator]

`v0.17.4`

Compare Source

Changes in v0.17.4

chore(deps): update Syft to v1.14.1 (#502) [anchore-actions-token-generator]

`v0.17.3`

Compare Source

Changes in v0.17.3

chore(deps): update Syft to v1.14.0 (#498) [anchore-actions-token-generator]

cert-manager/cert-manager (github.com/cert-manager/cert-manager)

`v1.16.1`

Compare Source

cert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.

The cert-manager 1.16 release includes: new Helm chart features, more Prometheus metrics, memory optimizations, and various improvements and bug fixes for the ACME issuer and Venafi Issuer.

📖 Read the complete 1.16 release notes before upgrading.

📜Changes since `v1.16.0`

Bug or Regression

BUGFIX: Helm schema validation: the new schema validation was too strict for the "global" section. Since the global section is shared across all charts and sub-charts, we must also allow unknown fields. (#7348, @inteon)
BUGFIX: Helm will now accept percentages for the podDisruptionBudget.minAvailable and podDisruptionBudget.maxAvailable values. (#7345, @inteon)
Helm: allow enabled to be set as a value to toggle cert-manager as a dependency. (#7356, @inteon)
BUGFIX: A change in v1.16.0 caused cert-manager's ACME ClusterIssuer to look in the wrong namespace for resources required for the issuance (e.g. credential Secrets). This is now fixed in v1.16.1. (#7342, @inteon)

github/codeql-action (github/codeql-action)

`v2.27.3`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

2.27.3 - 12 Nov 2024

No user facing changes.

See the full CHANGELOG.md for more information.

`v2.27.2`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

2.27.2 - 12 Nov 2024

Fixed an issue where setting up the CodeQL tools would sometimes fail with the message "Invalid value 'undefined' for header 'authorization'". #2590

See the full CHANGELOG.md for more information.

`v2.27.1`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

2.27.1 - 08 Nov 2024

The CodeQL Action now downloads bundles compressed using Zstandard on GitHub Enterprise Server when using Linux or macOS runners. This speeds up the installation of the CodeQL tools. This feature is already available to GitHub.com users. #2573
Update default CodeQL bundle version to 2.19.3. #2576

See the full CHANGELOG.md for more information.

`v2.27.0`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

2.27.0 - 22 Oct 2024

Bump the minimum CodeQL bundle version to 2.14.6. #2549
Fix an issue where the upload-sarif Action would fail with "upload-sarif post-action step failed: Input required and not supplied: token" when called in a composite Action that had a different set of inputs to the ones expected by the upload-sarif Action. #2557
Update default CodeQL bundle version to 2.19.2. #2552

See the full CHANGELOG.md for more information.

`v2.26.13`

Compare Source

`v2.26.12`

Compare Source

`v2.26.11`

Compare Source

`v2.26.10`

Compare Source

`v2.26.9`

Compare Source

`v2.26.8`

Compare Source

`v2.26.7`

Compare Source

`v2.26.6`

Compare Source

`v2.26.5`

Compare Source

kubernetes-sigs/structured-merge-diff (sigs.k8s.io/structured-merge-diff/v4)

`v4.4.3`

Compare Source

`v4.4.2`

Compare Source

sigstore/cosign-installer (sigstore/cosign-installer)

`v3.7.0`

Compare Source

What's Changed

Bump actions/checkout from 4.1.7 to 4.2.0 by @dependabot in https://github.com/sigstore/cosign-installer/pull/172
bump for latest cosign v2.4.1 release by @bobcallaway in https://github.com/sigstore/cosign-installer/pull/173

Full Changelog: sigstore/cosign-installer@v3.6.0...v3.7.0

step-security/harden-runner (step-security/harden-runner)

`v2.10.1`

Compare Source

What's Changed

Release v2.10.1 by @varunsh-coder in https://github.com/step-security/harden-runner/pull/463
Bug fix: Resolves an issue where DNS resolution of .local domains was failing when using a Kind cluster in a GitHub Actions workflow.

Full Changelog: step-security/harden-runner@v2...v2.10.1

`v2.10.0`

Compare Source

What's Changed

Release v2.10.0 by @h0x0er and @varunsh-coder in https://github.com/step-security/harden-runner/pull/455

ARM Support: Harden-Runner Enterprise tier now supports GitHub-hosted ARM runners. This includes all the features that apply to previously supported GitHub-hosted x64 Linux runners.

Full Changelog: step-security/harden-runner@v2...v2.10.0

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

renovate bot force-pushed the renovate/all-minor-patch branch 5 times, most recently from 9a98377 to 9d9c9a1 Compare September 12, 2024 06:48

renovate bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from 586a1e8 to 070189d Compare September 19, 2024 17:22

renovate bot force-pushed the renovate/all-minor-patch branch 5 times, most recently from 69070d6 to 3975f7a Compare October 1, 2024 18:47

renovate bot force-pushed the renovate/all-minor-patch branch 7 times, most recently from bb76804 to bea1baf Compare October 9, 2024 19:19

renovate bot force-pushed the renovate/all-minor-patch branch 5 times, most recently from feb87df to 9e369ca Compare October 15, 2024 15:19

renovate bot force-pushed the renovate/all-minor-patch branch 5 times, most recently from 703f592 to aea0e7c Compare October 23, 2024 17:16

renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 99e3418 to fe3d652 Compare October 29, 2024 15:55

renovate bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from 721462b to cc78176 Compare November 12, 2024 13:16

renovate bot force-pushed the renovate/all-minor-patch branch from cc78176 to afe1ce3 Compare November 12, 2024 22:40

chore(deps): update all non-major dependencies

df5bc08

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

renovate bot force-pushed the renovate/all-minor-patch branch from afe1ce3 to df5bc08 Compare November 14, 2024 08:14

renovate bot merged commit 586718f into main Nov 14, 2024
4 checks passed

renovate bot deleted the renovate/all-minor-patch branch November 14, 2024 09:02

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): update all non-major dependencies #52

chore(deps): update all non-major dependencies #52

Uh oh!

renovate bot commented Sep 4, 2024 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

chore(deps): update all non-major dependencies #52

chore(deps): update all non-major dependencies #52

Uh oh!

Conversation

renovate bot commented Sep 4, 2024 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

Changes in v0.17.7

Changes in v0.17.6

Changes in v0.17.5

Changes in v0.17.4

Changes in v0.17.3

📜Changes since v1.16.0

Bug or Regression

CodeQL Action Changelog

2.27.3 - 12 Nov 2024

CodeQL Action Changelog

2.27.2 - 12 Nov 2024

CodeQL Action Changelog

2.27.1 - 08 Nov 2024

CodeQL Action Changelog

2.27.0 - 22 Oct 2024

What's Changed

What's Changed

What's Changed

Configuration

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

renovate bot commented Sep 4, 2024 •

edited

Loading

📜Changes since `v1.16.0`