chore(deps): bump the dependencies group with 11 updates #1
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Bumps the dependencies group with 11 updates: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `4` | `5` | | [github/codeql-action](https://github.com/github/codeql-action) | `3.28.1` | `3.30.3` | | [actions/setup-java](https://github.com/actions/setup-java) | `4.6.0` | `5.0.0` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4.6.0` | `4.6.2` | | [checkmarx/kics-github-action](https://github.com/checkmarx/kics-github-action) | `2.1.3` | `2.1.13` | | [amannn/action-semantic-pull-request](https://github.com/amannn/action-semantic-pull-request) | `5.5.3` | `6.1.1` | | [marocchino/sticky-pull-request-comment](https://github.com/marocchino/sticky-pull-request-comment) | `2.9.1` | `2.9.4` | | [actions/setup-node](https://github.com/actions/setup-node) | `4.1.0` | `5.0.0` | | [actions/upload-pages-artifact](https://github.com/actions/upload-pages-artifact) | `3` | `4` | | [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) | `0.29.0` | `0.33.1` | | [trufflesecurity/trufflehog](https://github.com/trufflesecurity/trufflehog) | `3.88.2` | `3.90.8` | Updates `actions/checkout` from 4 to 5 - [Release notes](https://github.com/actions/checkout/releases) - [Commits](actions/checkout@v4...v5) Updates `github/codeql-action` from 3.28.1 to 3.30.3 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@b6a472f...192325c) Updates `actions/setup-java` from 4.6.0 to 5.0.0 - [Release notes](https://github.com/actions/setup-java/releases) - [Commits](actions/setup-java@7a6d8a8...dded088) Updates `actions/upload-artifact` from 4.6.0 to 4.6.2 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@65c4c4a...ea165f8) Updates `checkmarx/kics-github-action` from 2.1.3 to 2.1.13 - [Release notes](https://github.com/checkmarx/kics-github-action/releases) - [Commits](Checkmarx/kics-github-action@9446974...7145454) Updates `amannn/action-semantic-pull-request` from 5.5.3 to 6.1.1 - [Release notes](https://github.com/amannn/action-semantic-pull-request/releases) - [Changelog](https://github.com/amannn/action-semantic-pull-request/blob/main/CHANGELOG.md) - [Commits](amannn/action-semantic-pull-request@0723387...48f2562) Updates `marocchino/sticky-pull-request-comment` from 2.9.1 to 2.9.4 - [Release notes](https://github.com/marocchino/sticky-pull-request-comment/releases) - [Commits](marocchino/sticky-pull-request-comment@52423e0...7737449) Updates `actions/setup-node` from 4.1.0 to 5.0.0 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](actions/setup-node@39370e3...a0853c2) Updates `actions/upload-pages-artifact` from 3 to 4 - [Release notes](https://github.com/actions/upload-pages-artifact/releases) - [Commits](actions/upload-pages-artifact@v3...v4) Updates `aquasecurity/trivy-action` from 0.29.0 to 0.33.1 - [Release notes](https://github.com/aquasecurity/trivy-action/releases) - [Commits](aquasecurity/trivy-action@18f2510...b6643a2) Updates `trufflesecurity/trufflehog` from 3.88.2 to 3.90.8 - [Release notes](https://github.com/trufflesecurity/trufflehog/releases) - [Changelog](https://github.com/trufflesecurity/trufflehog/blob/main/.goreleaser.yml) - [Commits](trufflesecurity/trufflehog@a94d152...466da5b) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '5' dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: github/codeql-action dependency-version: 3.30.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: actions/setup-java dependency-version: 5.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: actions/upload-artifact dependency-version: 4.6.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: checkmarx/kics-github-action dependency-version: 2.1.13 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: amannn/action-semantic-pull-request dependency-version: 6.1.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: marocchino/sticky-pull-request-comment dependency-version: 2.9.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: actions/setup-node dependency-version: 5.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: actions/upload-pages-artifact dependency-version: '4' dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: aquasecurity/trivy-action dependency-version: 0.33.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: trufflesecurity/trufflehog dependency-version: 3.90.8 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies ... Signed-off-by: dependabot[bot] <[email protected]>
Author
LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the dependencies group with 11 updates:
453.28.13.30.34.6.05.0.04.6.04.6.22.1.32.1.135.5.36.1.12.9.12.9.44.1.05.0.0340.29.00.33.13.88.23.90.8Updates
actions/checkoutfrom 4 to 5Release notes
Sourced from actions/checkout's releases.
... (truncated)
Commits
08c6903Prepare v5.0.0 release (#2238)9f26565Update actions checkout to use node 24 (#2226)Updates
github/codeql-actionfrom 3.28.1 to 3.30.3Release notes
Sourced from github/codeql-action's releases.
... (truncated)
Changelog
Sourced from github/codeql-action's changelog.
... (truncated)
Commits
192325cMerge pull request #3104 from github/update-v3.30.3-b660efdcfe68956dUpdate changelog for v3.30.3b660efdMerge pull request #3103 from github/mbg/fix/category-checke49458bFixrunInterpretResultsForusing the wrongAnalysisConfigforcategoryfixf374a62Merge pull request #3098 from github/kaspersv/increase-overlay-base-size-limit5efa438Merge pull request #3101 from github/mbg/public-repo-notice-in-pr-template8a84a62Overlay: Increase size limit for cached overlay base databaseeb50a88Merge pull request #3097 from github/redsun82/only-dump-sarif4c53461Tweak sarif dump logdae3742Dump soon to be uploaded SARIF on requestUpdates
actions/setup-javafrom 4.6.0 to 5.0.0Release notes
Sourced from actions/setup-java's releases.
... (truncated)
Commits
dded088Bump actions/checkout from 4 to 5 (#896)0913e9aUpgrade to node 24 (#888)e9343dbBumps form-data (#887)ae2b61dBump undici from 5.28.5 to 5.29.0 (#833)c190c18Bump eslint-plugin-jest from 27.9.0 to 29.0.1 (#730)67aec00Fix: prevent default installation of JetBrains pre-releases (#859)ebb356cImprove Error Handling for Setup-Java Action to Help Debug Intermittent Failu...f4f1212Update publish-immutable-actions.yml (#798)c5195efactions/cache upgrade to 4.0.3 (#773)dd38875Bump ts-jest from 29.1.2 to 29.2.5 (#743)Updates
actions/upload-artifactfrom 4.6.0 to 4.6.2Release notes
Sourced from actions/upload-artifact's releases.
Commits
ea165f8Merge pull request #685 from salmanmkc/salmanmkc/3-new-upload-artifacts-release0839620Prepare for new release of actions/upload-artifact with new toolkit cache ver...4cec3d8Merge pull request #673 from actions/yacaovsnc/artifact_2.2.2e9fad96license cache update for artifactb26fd06Update to use artifact 2.2.2 packageUpdates
checkmarx/kics-github-actionfrom 2.1.3 to 2.1.13Release notes
Sourced from checkmarx/kics-github-action's releases.
... (truncated)
Commits
7145454bump kics version to 2-1-13 (#139)cd1f377bumps kics version to 2.1.12 (#136)3545b74bump kics version to 2.1.11 (#133)c06a133Update kics to version 2.1.10 (#132)1141bdaUpdateKicsVersionTo219 (#131)c456d04Merge pull request #129 from Checkmarx/UpdateKICSVersionTo218d83c04eupdate kics version to 2185373b38Merge pull request #127 from Checkmarx/updateKicsVersionTo217061d0d8update kics dockerfile version80b24bbUpdate kics versionUpdates
amannn/action-semantic-pull-requestfrom 5.5.3 to 6.1.1Release notes
Sourced from amannn/action-semantic-pull-request's releases.
Changelog
Sourced from amannn/action-semantic-pull-request's changelog.
... (truncated)
Commits
48f2562chore: Release 6.1.1 [skip ci]800da4cfix: ParseheaderPatternCorrespondenceproperly (#295)677b895test: Fix broken test24e6f01ci: Fix permissions for tagger7f33ba7chore: Release 6.1.0 [skip ci]afa4edbfix: Remove trailing whitespace from "unknown release type" error message (#291)a30288bfeat: Support providing regexps for types (#292)a46a7c8build: Move Vitest todevDependencies(#290)fdd4d3dchore: Release 6.0.1 [skip ci]58e4ab4fix: Actually execute action (#289)Updates
marocchino/sticky-pull-request-commentfrom 2.9.1 to 2.9.4Release notes
Sourced from marocchino/sticky-pull-request-comment's releases.
Commits
7737449📦️ Build8b423c6Merge pull request #1564 from marocchino/dependabot/npm_and_yarn/types/node-2...3ac8a74build(deps-dev): Bump@types/nodefrom 24.0.12 to 24.0.13e430cfcMerge pull request #1563 from marocchino/dependabot/npm_and_yarn/types/node-2...99f9378build(deps-dev): Bump@types/nodefrom 24.0.11 to 24.0.122216b3aMerge pull request #1562 from marocchino/dependabot/npm_and_yarn/biomejs/biom...482d7fdbuild(deps-dev): Bump@biomejs/biomefrom 2.0.4 to 2.1.1c2da581Merge pull request #1561 from marocchino/dependabot/npm_and_yarn/types/node-2...76f8462build(deps-dev): Bump@types/nodefrom 24.0.3 to 24.0.11246151a⬆️ Update biomeUpdates
actions/setup-nodefrom 4.1.0 to 5.0.0Release notes
Sourced from actions/setup-node's releases.
... (truncated)
Commits
a0853c2Bump actions/checkout from 4 to 5 (#1345)b7234ccUpgrade action to use node24 (#1325)d7a1131Enhance caching in setup-node with automatic package manager detection (#1348)5e2628cBumps form-data (#1332)65becefBump undici from 5.28.5 to 5.29.0 (#1295)7e24a65Bump uuid from 9.0.1 to 11.1.0 (#1273)08f58d1Bump@octokit/request-errorand@actions/github(#1227)49933eaBump@action/cachefrom 4.0.2 to 4.0.3 (#1262)e3ce749feat: support private mirrors (#1240)40337cbAdd support for indented eslint output (#1245)Updates
actions/upload-pages-artifactfrom 3 to 4Release notes
Sourced from actions/upload-pages-artifact's releases.
Commits
7b1f4a7Merge pull request #127 from heavymachinery/pin-sha4cc19c7Pinactions/upload-artifactto SHA2d163beMerge pull request #107 from KittyChiu/mainc704843fix: linted README9605915Merge pull request #106 from KittyChiu/kittychiu/update-readme-1e59cdfeUpdate README.mda2d6704doc: updated usage section in readme984864eMerge pull request #105 from actions/Jcambass-patch-145dc788Add workflow file for publishing releases to immutable action packageefaad07Merge pull request #102 from actions/hidden-filesUpdates
aquasecurity/trivy-actionfrom 0.29.0 to 0.33.1Release notes
Sourced from aquasecurity/trivy-action's releases.