  dependabot[bot]andGitHub
|
9694ee4354
|
Bump the actions-all group with 9 updates
Bumps the actions-all group with 9 updates:
| Package | From | To |
| --- | --- | --- |
| [step-security/harden-runner](https://github.com/step-security/harden-runner) | `2.7.1` | `2.10.1` |
| [actions/checkout](https://github.com/actions/checkout) | `3.6.0` | `4.1.7` |
| [github/codeql-action](https://github.com/github/codeql-action) | `2.25.5` | `3.26.7` |
| [actions/dependency-review-action](https://github.com/actions/dependency-review-action) | `2.5.1` | `4.3.4` |
| [ossf/scorecard-action](https://github.com/ossf/scorecard-action) | `2.0.6` | `2.4.0` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact) | `3.1.3` | `4.4.0` |
| [actions/setup-go](https://github.com/actions/setup-go) | `5.0.1` | `5.0.2` |
| [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) | `6` | `7` |
| [jacobtomlinson/gha-find-replace](https://github.com/jacobtomlinson/gha-find-replace) | `2` | `3` |
Updates `step-security/harden-runner` from 2.7.1 to 2.10.1
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](https://github.com/step-security/harden-runner/compare/a4aa98b93cab29d9b1101a6143fb8bce00e2eac4...91182cccc01eb5e619899d80e4e971d6181294a7)
Updates `actions/checkout` from 3.6.0 to 4.1.7
- [Release notes](https://github.com/actions/checkout/releases)
- [Commits](https://github.com/actions/checkout/compare/v3.6.0...v4.1.7)
Updates `github/codeql-action` from 2.25.5 to 3.26.7
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/d05fceb0450a68babd9a7597626abef20f03dad6...8214744c546c1e5c8f03dde8fab3a7353211988d)
Updates `actions/dependency-review-action` from 2.5.1 to 4.3.4
- [Release notes](https://github.com/actions/dependency-review-action/releases)
- [Commits](https://github.com/actions/dependency-review-action/compare/0efb1d1d84fc9633afcdaad14c485cbbc90ef46c...5a2ce3f5b92ee19cbb1541a4984c76d921601d7c)
Updates `ossf/scorecard-action` from 2.0.6 to 2.4.0
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](https://github.com/ossf/scorecard-action/compare/99c53751e09b9529366343771cc321ec74e9bd3d...62b2cac7ed8198b15735ed49ab1e5cf35480ba46)
Updates `actions/upload-artifact` from 3.1.3 to 4.4.0
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/a8a3f3ad30e3422c9c7b888a15615d19a852ae32...50769540e7f4bd5e21e526ee35c689e35e0d6874)
Updates `actions/setup-go` from 5.0.1 to 5.0.2
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](https://github.com/actions/setup-go/compare/cdcb36043654635271a94b9a6d1392de5bb323a7...0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32)
Updates `peter-evans/create-pull-request` from 6 to 7
- [Release notes](https://github.com/peter-evans/create-pull-request/releases)
- [Commits](https://github.com/peter-evans/create-pull-request/compare/v6...v7)
Updates `jacobtomlinson/gha-find-replace` from 2 to 3
- [Release notes](https://github.com/jacobtomlinson/gha-find-replace/releases)
- [Commits](https://github.com/jacobtomlinson/gha-find-replace/compare/v2...v3)
---
updated-dependencies:
- dependency-name: step-security/harden-runner
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: actions-all
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: actions-all
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: actions-all
- dependency-name: actions/dependency-review-action
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: actions-all
- dependency-name: ossf/scorecard-action
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: actions-all
- dependency-name: actions/upload-artifact
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: actions-all
- dependency-name: actions/setup-go
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: actions-all
- dependency-name: peter-evans/create-pull-request
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: actions-all
- dependency-name: jacobtomlinson/gha-find-replace
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: actions-all
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2024-09-18 17:02:05 +00:00 |
|
 Kubernetes Prow RobotandGitHub
|
200d46726c
|
Merge pull request #912 from sozercan/secure-repo
[StepSecurity] Apply security best practices
|
2024-09-18 18:00:44 +01:00 |
|
 Jing XuandGitHub
|
a22fe2a52f
|
Update update-deps.yml
- update schedule to Thursday 8pm
- update versions to match both jobs
|
2024-08-22 17:27:39 -07:00 |
|
|
Jing XuandGitHub
|
5f99c4d9b8
|
Update update-deps.yml update-go-version job
Fix issue when creating PR after update the go version.
|
2024-08-16 22:29:31 -07:00 |
|
|
Jing XuandGitHub
|
09c3cfe7ad
|
Update update-deps.yml with dockerfile update
This change set up a job to update go version in dockerfile. This only updates 1.22 patch version.
|
2024-08-15 10:58:55 -07:00 |
|
 StepSecurity Bot
|
0dde605376
|
[StepSecurity] Apply security best practices
Signed-off-by: StepSecurity Bot <bot@stepsecurity.io>
|
2024-05-17 18:41:33 +00:00 |
|
 Ciprian Hacman
|
8c22b69431
|
Update Go to v1.22.3
|
2024-05-13 19:42:51 +03:00 |
|
|
Ciprian Hacman
|
014cd7d6ac
|
Update dependencies every week
|
2024-03-25 18:05:28 +02:00 |
|
|
Ciprian Hacman
|
aec1c74025
|
Tag releases via PR
|
2023-09-25 06:07:04 +02:00 |
|