dependabot[bot]
|
9694ee4354
|
Bump the actions-all group with 9 updates
Bumps the actions-all group with 9 updates:
| Package | From | To |
| --- | --- | --- |
| [step-security/harden-runner](https://github.com/step-security/harden-runner) | `2.7.1` | `2.10.1` |
| [actions/checkout](https://github.com/actions/checkout) | `3.6.0` | `4.1.7` |
| [github/codeql-action](https://github.com/github/codeql-action) | `2.25.5` | `3.26.7` |
| [actions/dependency-review-action](https://github.com/actions/dependency-review-action) | `2.5.1` | `4.3.4` |
| [ossf/scorecard-action](https://github.com/ossf/scorecard-action) | `2.0.6` | `2.4.0` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact) | `3.1.3` | `4.4.0` |
| [actions/setup-go](https://github.com/actions/setup-go) | `5.0.1` | `5.0.2` |
| [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) | `6` | `7` |
| [jacobtomlinson/gha-find-replace](https://github.com/jacobtomlinson/gha-find-replace) | `2` | `3` |
Updates `step-security/harden-runner` from 2.7.1 to 2.10.1
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](a4aa98b93c...91182cccc0)
Updates `actions/checkout` from 3.6.0 to 4.1.7
- [Release notes](https://github.com/actions/checkout/releases)
- [Commits](https://github.com/actions/checkout/compare/v3.6.0...v4.1.7)
Updates `github/codeql-action` from 2.25.5 to 3.26.7
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](d05fceb045...8214744c54)
Updates `actions/dependency-review-action` from 2.5.1 to 4.3.4
- [Release notes](https://github.com/actions/dependency-review-action/releases)
- [Commits](0efb1d1d84...5a2ce3f5b9)
Updates `ossf/scorecard-action` from 2.0.6 to 2.4.0
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](99c53751e0...62b2cac7ed)
Updates `actions/upload-artifact` from 3.1.3 to 4.4.0
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](a8a3f3ad30...50769540e7)
Updates `actions/setup-go` from 5.0.1 to 5.0.2
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](cdcb360436...0a12ed9d6a)
Updates `peter-evans/create-pull-request` from 6 to 7
- [Release notes](https://github.com/peter-evans/create-pull-request/releases)
- [Commits](https://github.com/peter-evans/create-pull-request/compare/v6...v7)
Updates `jacobtomlinson/gha-find-replace` from 2 to 3
- [Release notes](https://github.com/jacobtomlinson/gha-find-replace/releases)
- [Commits](https://github.com/jacobtomlinson/gha-find-replace/compare/v2...v3)
---
updated-dependencies:
- dependency-name: step-security/harden-runner
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: actions-all
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: actions-all
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: actions-all
- dependency-name: actions/dependency-review-action
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: actions-all
- dependency-name: ossf/scorecard-action
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: actions-all
- dependency-name: actions/upload-artifact
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: actions-all
- dependency-name: actions/setup-go
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: actions-all
- dependency-name: peter-evans/create-pull-request
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: actions-all
- dependency-name: jacobtomlinson/gha-find-replace
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: actions-all
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2024-09-18 17:02:05 +00:00 |
|
Kubernetes Prow Robot
|
200d46726c
|
Merge pull request #912 from sozercan/secure-repo
[StepSecurity] Apply security best practices
|
2024-09-18 18:00:44 +01:00 |
|
Jing Xu
|
a22fe2a52f
|
Update update-deps.yml
- update schedule to Thursday 8pm
- update versions to match both jobs
|
2024-08-22 17:27:39 -07:00 |
|
Jing Xu
|
5f99c4d9b8
|
Update update-deps.yml update-go-version job
Fix issue when creating PR after update the go version.
|
2024-08-16 22:29:31 -07:00 |
|
Jing Xu
|
09c3cfe7ad
|
Update update-deps.yml with dockerfile update
This change set up a job to update go version in dockerfile. This only updates 1.22 patch version.
|
2024-08-15 10:58:55 -07:00 |
|
Sertac Ozercan
|
19c6f4db70
|
updates
Signed-off-by: Sertac Ozercan <sozercan@gmail.com>
|
2024-05-17 21:39:40 +00:00 |
|
StepSecurity Bot
|
0dde605376
|
[StepSecurity] Apply security best practices
Signed-off-by: StepSecurity Bot <bot@stepsecurity.io>
|
2024-05-17 18:41:33 +00:00 |
|
Ciprian Hacman
|
8c22b69431
|
Update Go to v1.22.3
|
2024-05-13 19:42:51 +03:00 |
|
Ciprian Hacman
|
014cd7d6ac
|
Update dependencies every week
|
2024-03-25 18:05:28 +02:00 |
|
Ciprian Hacman
|
aec1c74025
|
Tag releases via PR
|
2023-09-25 06:07:04 +02:00 |
|