Commit Graph
57 Commits
Author SHA1 Message Date
Ramon PetgraveandGitHub d96b977709 chore: v2.6.0: update docs (#789)
#label:release v2.6.0

# How to Verify

Clone the repo and run the script described in
https://github.com/slsa-framework/slsa-verifier/blob/main/RELEASE.md#verify-provenance.
```
$ git clone git@github.com:slsa-framework/slsa-verifier.git
$ cd slsa-verifier
$ bash verify-release.sh v2.6.0
```

This will download the release files and verify the binaries. Confirm
that the output hashes matches those in this PR's SHA256SUM.md
-
https://github.com/slsa-framework/slsa-verifier/pull/789/files#diff-7834ca792905514302a0630d1c57dc1d330569a18fc2fff4aac6129efb00f4ccR1-R8

---------

Signed-off-by: Ramon Petgrave <32398091+ramonpetgrave64@users.noreply.github.com>
Signed-off-by: Ramon Petgrave <ramon.petgrave64@gmail.com>
2024-07-17 12:21:44 -04:00
4bab78a528 chore(deps): update npm dev (#650)
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Change | Age | Adoption | Passing | Confidence | Type |
Update |
|---|---|---|---|---|---|---|---|
|
[@types/node](https://togithub.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node)
([source](https://togithub.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node))
| [`18.19.28` ->
`18.19.33`](https://renovatebot.com/diffs/npm/@types%2fnode/18.19.28/18.19.33)
|
[![age](https://developer.mend.io/api/mc/badges/age/npm/@types%2fnode/18.19.33?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/@types%2fnode/18.19.33?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/@types%2fnode/18.19.28/18.19.33?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@types%2fnode/18.19.28/18.19.33?slim=true)](https://docs.renovatebot.com/merge-confidence/)
| devDependencies | patch |
| [eslint](https://eslint.org)
([source](https://togithub.com/eslint/eslint)) | [`^8.57.0` ->
`8.57.0`](https://renovatebot.com/diffs/npm/eslint/8.57.0/8.57.0) |
[![age](https://developer.mend.io/api/mc/badges/age/npm/eslint/8.57.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/eslint/8.57.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/eslint/8.57.0/8.57.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/eslint/8.57.0/8.57.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
| devDependencies | pin |
|
[eslint-plugin-prettier](https://togithub.com/prettier/eslint-plugin-prettier)
| [`^5.1.3` ->
`5.1.3`](https://renovatebot.com/diffs/npm/eslint-plugin-prettier/5.1.3/5.1.3)
|
[![age](https://developer.mend.io/api/mc/badges/age/npm/eslint-plugin-prettier/5.1.3?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/eslint-plugin-prettier/5.1.3?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/eslint-plugin-prettier/5.1.3/5.1.3?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/eslint-plugin-prettier/5.1.3/5.1.3?slim=true)](https://docs.renovatebot.com/merge-confidence/)
| devDependencies | pin |
| [markdown-toc](https://togithub.com/jonschlinkert/markdown-toc) |
[`^1.2.0` ->
`1.2.0`](https://renovatebot.com/diffs/npm/markdown-toc/1.2.0/1.2.0) |
[![age](https://developer.mend.io/api/mc/badges/age/npm/markdown-toc/1.2.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/markdown-toc/1.2.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/markdown-toc/1.2.0/1.2.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/markdown-toc/1.2.0/1.2.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
| devDependencies | pin |
| [renovate](https://renovatebot.com)
([source](https://togithub.com/renovatebot/renovate)) | [`37.363.4` ->
`37.374.1`](https://renovatebot.com/diffs/npm/renovate/37.363.4/37.374.1)
|
[![age](https://developer.mend.io/api/mc/badges/age/npm/renovate/37.374.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/renovate/37.374.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/renovate/37.363.4/37.374.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/renovate/37.363.4/37.374.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
| devDependencies | minor |
| [typescript](https://www.typescriptlang.org/)
([source](https://togithub.com/Microsoft/TypeScript)) | [`^5.4.3` ->
`5.4.3`](https://renovatebot.com/diffs/npm/typescript/5.4.3/5.4.3) |
[![age](https://developer.mend.io/api/mc/badges/age/npm/typescript/5.4.3?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/typescript/5.4.3?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/typescript/5.4.3/5.4.3?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/typescript/5.4.3/5.4.3?slim=true)](https://docs.renovatebot.com/merge-confidence/)
| devDependencies | pin |
|
[typescript-eslint](https://typescript-eslint.io/packages/typescript-eslint)
([source](https://togithub.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint))
| [`^7.5.0` ->
`7.5.0`](https://renovatebot.com/diffs/npm/typescript-eslint/7.5.0/7.5.0)
|
[![age](https://developer.mend.io/api/mc/badges/age/npm/typescript-eslint/7.5.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/typescript-eslint/7.5.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/typescript-eslint/7.5.0/7.5.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/typescript-eslint/7.5.0/7.5.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
| devDependencies | pin |

---

### Release Notes

<details>
<summary>renovatebot/renovate (renovate)</summary>

###
[`v37.374.1`](https://togithub.com/renovatebot/renovate/releases/tag/37.374.1)

[Compare
Source](https://togithub.com/renovatebot/renovate/compare/37.374.0...37.374.1)

##### Bug Fixes

- **deps:** update ghcr.io/renovatebot/base-image docker tag to v2.12.6
([#&#8203;29212](https://togithub.com/renovatebot/renovate/issues/29212))
([f4eeaaa](https://togithub.com/renovatebot/renovate/commit/f4eeaaaff6bcdf3c8a6b76bc784c5d43f6ce38ce))

###
[`v37.374.0`](https://togithub.com/renovatebot/renovate/compare/37.373.0...fe62e80aebe988dd9dcbe47d3e5eee225ec3904d)

[Compare
Source](https://togithub.com/renovatebot/renovate/compare/37.373.0...37.374.0)

###
[`v37.373.0`](https://togithub.com/renovatebot/renovate/compare/37.372.1...25255596d63a03a312885aba1b25fdfd7b76c7a4)

[Compare
Source](https://togithub.com/renovatebot/renovate/compare/37.372.1...37.373.0)

###
[`v37.372.1`](https://togithub.com/renovatebot/renovate/releases/tag/37.372.1)

[Compare
Source](https://togithub.com/renovatebot/renovate/compare/37.372.0...37.372.1)

##### Bug Fixes

- **packageRules:** prPriority should only be in packageRules
([#&#8203;29201](https://togithub.com/renovatebot/renovate/issues/29201))
([70f1f93](https://togithub.com/renovatebot/renovate/commit/70f1f93823478a369bf7308964c14815cc544048))

###
[`v37.372.0`](https://togithub.com/renovatebot/renovate/releases/tag/37.372.0)

[Compare
Source](https://togithub.com/renovatebot/renovate/compare/37.371.1...37.372.0)

##### Features

- **util/package-rules:** allow glob pattens in match{Current,New}Value
([#&#8203;29168](https://togithub.com/renovatebot/renovate/issues/29168))
([56856d4](https://togithub.com/renovatebot/renovate/commit/56856d4a46ab007ca118fcd831a76611ea1e9fdd))

##### Bug Fixes

- **deps:** update ghcr.io/containerbase/sidecar docker tag to v10.6.14
([#&#8203;29199](https://togithub.com/renovatebot/renovate/issues/29199))
([4edd63a](https://togithub.com/renovatebot/renovate/commit/4edd63a297d1108bbd9f81f2a617c092a40a5ca6))
- **deps:** update ghcr.io/renovatebot/base-image docker tag to v2.12.5
([#&#8203;29200](https://togithub.com/renovatebot/renovate/issues/29200))
([757574b](https://togithub.com/renovatebot/renovate/commit/757574b931b9828b3283511b7c4bc65d4506fbcc))

##### Miscellaneous Chores

- **deps:** update ghcr.io/containerbase/devcontainer docker tag to
v10.6.14
([#&#8203;29198](https://togithub.com/renovatebot/renovate/issues/29198))
([a8855d8](https://togithub.com/renovatebot/renovate/commit/a8855d811c3885d485b798b0332a0ca58f7d8039))

###
[`v37.371.1`](https://togithub.com/renovatebot/renovate/releases/tag/37.371.1)

[Compare
Source](https://togithub.com/renovatebot/renovate/compare/37.371.0...37.371.1)

##### Bug Fixes

- **pdm:** change pdm update strategy to eager
([#&#8203;29183](https://togithub.com/renovatebot/renovate/issues/29183))
([2f335b6](https://togithub.com/renovatebot/renovate/commit/2f335b61f46c6aed7a1fb0c5c05a6844371ca85d))

##### Miscellaneous Chores

- **deps:** update dependency
[@&#8203;swc/core](https://togithub.com/swc/core) to v1.5.7
([#&#8203;29192](https://togithub.com/renovatebot/renovate/issues/29192))
([436fa71](https://togithub.com/renovatebot/renovate/commit/436fa71ce4da455d9cf4d374442bea7318c20b9d))
- **deps:** update linters to v7.10.0
([#&#8203;29196](https://togithub.com/renovatebot/renovate/issues/29196))
([ab36239](https://togithub.com/renovatebot/renovate/commit/ab362394213afff57b308186a28701683053b43c))
- log when \_PROXY values detected
([#&#8203;29191](https://togithub.com/renovatebot/renovate/issues/29191))
([e281931](https://togithub.com/renovatebot/renovate/commit/e28193134a2e488749b644b9bb87fa97c2788bec))

###
[`v37.371.0`](https://togithub.com/renovatebot/renovate/releases/tag/37.371.0)

[Compare
Source](https://togithub.com/renovatebot/renovate/compare/37.370.0...37.371.0)

##### Features

- **asdf:** Add rebar3 to asdf manager
([#&#8203;29188](https://togithub.com/renovatebot/renovate/issues/29188))
([2e6c563](https://togithub.com/renovatebot/renovate/commit/2e6c5636eabf6cf6e2b4e0942c4f3ee3263e6a53))

##### Miscellaneous Chores

- **deps:** update linters
([#&#8203;29193](https://togithub.com/renovatebot/renovate/issues/29193))
([f59c7f3](https://togithub.com/renovatebot/renovate/commit/f59c7f31622b4efda09c010ca99173ffe115fe5f))

###
[`v37.370.0`](https://togithub.com/renovatebot/renovate/releases/tag/37.370.0)

[Compare
Source](https://togithub.com/renovatebot/renovate/compare/37.369.1...37.370.0)

##### Features

- **self-hosted:** `mergeConfidenceEndpoint` and
`mergeConfidenceDatasources`
([#&#8203;28880](https://togithub.com/renovatebot/renovate/issues/28880))
([044dc0f](https://togithub.com/renovatebot/renovate/commit/044dc0fa2807c303a7043c326cec0d8f5fc9c4d1))

###
[`v37.369.1`](https://togithub.com/renovatebot/renovate/compare/37.369.0...ae15a51554828bb3891268c16f180124a90ade55)

[Compare
Source](https://togithub.com/renovatebot/renovate/compare/37.369.0...37.369.1)

###
[`v37.369.0`](https://togithub.com/renovatebot/renovate/releases/tag/37.369.0)

[Compare
Source](https://togithub.com/renovatebot/renovate/compare/37.368.10...37.369.0)

##### Features

- **datasource:** `sourceUrl` & `releaseTimestamp` support
([#&#8203;29122](https://togithub.com/renovatebot/renovate/issues/29122))
([d0b77e5](https://togithub.com/renovatebot/renovate/commit/d0b77e584a8dde76ef98ee402354f63978218f54))

###
[`v37.368.10`](https://togithub.com/renovatebot/renovate/compare/37.368.9...3c75e4bfb3e6786508f57ead837af102d468f4ab)

[Compare
Source](https://togithub.com/renovatebot/renovate/compare/37.368.9...37.368.10)

###
[`v37.368.9`](https://togithub.com/renovatebot/renovate/releases/tag/37.368.9)

[Compare
Source](https://togithub.com/renovatebot/renovate/compare/37.368.8...37.368.9)

##### Bug Fixes

- **homebrew:** handle new github archive url format
([#&#8203;29138](https://togithub.com/renovatebot/renovate/issues/29138))
([e035f05](https://togithub.com/renovatebot/renovate/commit/e035f0562d9ab4772c05116c3b753c820785a41c))

###
[`v37.368.8`](https://togithub.com/renovatebot/renovate/compare/37.368.7...5b88dd6a31c24880da2b2dc5915916a8f3e4f6e8)

[Compare
Source](https://togithub.com/renovatebot/renovate/compare/37.368.7...37.368.8)

###
[`v37.368.7`](https://togithub.com/renovatebot/renovate/releases/tag/37.368.7)

[Compare
Source](https://togithub.com/renovatebot/renovate/compare/37.368.6...37.368.7)

##### Bug Fixes

- **deps:** update ghcr.io/containerbase/sidecar docker tag to v10.6.12
([#&#8203;29157](https://togithub.com/renovatebot/renovate/issues/29157))
([4a1e758](https://togithub.com/renovatebot/renovate/commit/4a1e75889ffc9180570606adcdd67449e85d295f))

##### Documentation

- **readme:** better alt text, add toggleable list of companies/projects
that use Renovate
([#&#8203;29022](https://togithub.com/renovatebot/renovate/issues/29022))
([f8f5184](https://togithub.com/renovatebot/renovate/commit/f8f518493dad03c26facac4f110b4e553b09b99e))

##### Miscellaneous Chores

- **deps:** update containerbase/internal-tools action to v3.0.88
([#&#8203;29149](https://togithub.com/renovatebot/renovate/issues/29149))
([92686aa](https://togithub.com/renovatebot/renovate/commit/92686aa201dc076acd280e11c3db6319957832d9))

###
[`v37.368.6`](https://togithub.com/renovatebot/renovate/releases/tag/37.368.6)

[Compare
Source](https://togithub.com/renovatebot/renovate/compare/37.368.5...37.368.6)

##### Bug Fixes

- **deps:** update ghcr.io/renovatebot/base-image docker tag to v2.12.3
([#&#8203;29143](https://togithub.com/renovatebot/renovate/issues/29143))
([7f6964c](https://togithub.com/renovatebot/renovate/commit/7f6964cea9a10be6e07c1b5d3980ab4747f29671))

###
[`v37.368.5`](https://togithub.com/renovatebot/renovate/releases/tag/37.368.5)

[Compare
Source](https://togithub.com/renovatebot/renovate/compare/37.368.4...37.368.5)

##### Bug Fixes

- **deps:** update ghcr.io/renovatebot/base-image docker tag to v2.12.2
([#&#8203;29142](https://togithub.com/renovatebot/renovate/issues/29142))
([c23c70f](https://togithub.com/renovatebot/renovate/commit/c23c70fc8bc4dd591c1ef28ae934521962ea0921))

##### Miscellaneous Chores

- **deps:** update dependency rimraf to v5.0.7
([#&#8203;29141](https://togithub.com/renovatebot/renovate/issues/29141))
([483bfc2](https://togithub.com/renovatebot/renovate/commit/483bfc28f522c09aa8a16423c645bc2aba2ff81c))

###
[`v37.368.4`](https://togithub.com/renovatebot/renovate/releases/tag/37.368.4)

[Compare
Source](https://togithub.com/renovatebot/renovate/compare/37.368.3...37.368.4)

##### Bug Fixes

- **deps:** update ghcr.io/renovatebot/base-image docker tag to v2.12.1
([#&#8203;29140](https://togithub.com/renovatebot/renovate/issues/29140))
([947bf17](https://togithub.com/renovatebot/renovate/commit/947bf17aea6ff3185d4ac8f5babc95a70b3a23a9))

##### Miscellaneous Chores

- **deps:** update dependency rimraf to v5.0.6
([#&#8203;29139](https://togithub.com/renovatebot/renovate/issues/29139))
([a2ba884](https://togithub.com/renovatebot/renovate/commit/a2ba88412c3b9b2d349b79a2d4cdddd740a9d034))

###
[`v37.368.3`](https://togithub.com/renovatebot/renovate/releases/tag/37.368.3)

[Compare
Source](https://togithub.com/renovatebot/renovate/compare/37.368.2...37.368.3)

##### Bug Fixes

- **deps:** update ghcr.io/containerbase/sidecar docker tag to v10.6.11
([#&#8203;29134](https://togithub.com/renovatebot/renovate/issues/29134))
([8216f20](https://togithub.com/renovatebot/renovate/commit/8216f205dca1728003dd8ca21e9d96504fbd2949))

##### Documentation

- **config:** warn about spaces in `schedule`
([#&#8203;29121](https://togithub.com/renovatebot/renovate/issues/29121))
([ebfb48d](https://togithub.com/renovatebot/renovate/commit/ebfb48d416d5a83850627c40a4e2ace1fd3e6928))

##### Miscellaneous Chores

- **deps:** update ghcr.io/containerbase/devcontainer docker tag to
v10.6.11
([#&#8203;29133](https://togithub.com/renovatebot/renovate/issues/29133))
([463226b](https://togithub.com/renovatebot/renovate/commit/463226b1ed605b49c470a35a96c9b130b6363b50))

###
[`v37.368.2`](https://togithub.com/renovatebot/renovate/releases/tag/37.368.2)

[Compare
Source](https://togithub.com/renovatebot/renovate/compare/37.368.1...37.368.2)

##### Bug Fixes

- **gomod:** treat v0 pseudo version updates as digest updates
([#&#8203;29042](https://togithub.com/renovatebot/renovate/issues/29042))
([6f8cde4](https://togithub.com/renovatebot/renovate/commit/6f8cde4e679bea23fea64fefd65200e87578e0b5))

###
[`v37.368.1`](https://togithub.com/renovatebot/renovate/releases/tag/37.368.1)

[Compare
Source](https://togithub.com/renovatebot/renovate/compare/37.368.0...37.368.1)

##### Miscellaneous Chores

- **deps:** update actions/checkout action to v4.1.6
([#&#8203;29126](https://togithub.com/renovatebot/renovate/issues/29126))
([f951139](https://togithub.com/renovatebot/renovate/commit/f9511394096516ef21f01ebd50f6f57d1dd875fe))

##### Build System

- **deps:** update dependency glob to v10.3.15
([#&#8203;29125](https://togithub.com/renovatebot/renovate/issues/29125))
([dc7d73f](https://togithub.com/renovatebot/renovate/commit/dc7d73f98fcc5644790243c1642de29b4b2f44d2))

###
[`v37.368.0`](https://togithub.com/renovatebot/renovate/releases/tag/37.368.0)

[Compare
Source](https://togithub.com/renovatebot/renovate/compare/37.367.0...37.368.0)

##### Features

- **deps:** update ghcr.io/renovatebot/base-image docker tag to v2.12.0
([#&#8203;29124](https://togithub.com/renovatebot/renovate/issues/29124))
([676e1ef](https://togithub.com/renovatebot/renovate/commit/676e1ef47f81432d57301d49a60f283185d2eee0))

##### Build System

- **deps:** update dependency glob to v10.3.14
([#&#8203;29123](https://togithub.com/renovatebot/renovate/issues/29123))
([40a6b4d](https://togithub.com/renovatebot/renovate/commit/40a6b4d2901c9a5cf84d11ce5a58b9bffa4a8e78))

###
[`v37.367.0`](https://togithub.com/renovatebot/renovate/releases/tag/37.367.0)

[Compare
Source](https://togithub.com/renovatebot/renovate/compare/37.366.1...37.367.0)

##### Features

- **presets:** add replacements for ZAP org moves
([#&#8203;29117](https://togithub.com/renovatebot/renovate/issues/29117))
([7df1dc7](https://togithub.com/renovatebot/renovate/commit/7df1dc77ae6b5b55b37a565e29f62cd594ca2541))

###
[`v37.366.1`](https://togithub.com/renovatebot/renovate/releases/tag/37.366.1)

[Compare
Source](https://togithub.com/renovatebot/renovate/compare/37.366.0...37.366.1)

##### Build System

- **deps:** update dependency jsonata to v2.0.5
([#&#8203;29116](https://togithub.com/renovatebot/renovate/issues/29116))
([8bbde23](https://togithub.com/renovatebot/renovate/commit/8bbde23579b4bf86a121ed6951681ef9d258a701))

###
[`v37.366.0`](https://togithub.com/renovatebot/renovate/releases/tag/37.366.0)

[Compare
Source](https://togithub.com/renovatebot/renovate/compare/37.365.0...37.366.0)

##### Features

- **datasource:** Add python-version datasource
([#&#8203;27583](https://togithub.com/renovatebot/renovate/issues/27583))
([c8aacc4](https://togithub.com/renovatebot/renovate/commit/c8aacc4c055071e642eb0a56ff9caece084b7c7c))
- Support custom artifact notice
([#&#8203;28957](https://togithub.com/renovatebot/renovate/issues/28957))
([1c8eb34](https://togithub.com/renovatebot/renovate/commit/1c8eb34876e99d15a3b84e2422aceb34b24a9fe2))

###
[`v37.365.0`](https://togithub.com/renovatebot/renovate/releases/tag/37.365.0)

[Compare
Source](https://togithub.com/renovatebot/renovate/compare/37.364.0...37.365.0)

##### Features

- **presets/workarounds:** add bitnami docker versioning
([#&#8203;29112](https://togithub.com/renovatebot/renovate/issues/29112))
([66de046](https://togithub.com/renovatebot/renovate/commit/66de0465e944f55669d5822cea6a2d459a6e5ed6))

###
[`v37.364.0`](https://togithub.com/renovatebot/renovate/releases/tag/37.364.0)

[Compare
Source](https://togithub.com/renovatebot/renovate/compare/37.363.9...37.364.0)

##### Features

- **presets:** add strum to monorepos
([#&#8203;29109](https://togithub.com/renovatebot/renovate/issues/29109))
([20716b0](https://togithub.com/renovatebot/renovate/commit/20716b060942d90466fd65388712b1558de4b554))

##### Miscellaneous Chores

- **deps:** update containerbase/internal-tools action to v3.0.87
([#&#8203;29108](https://togithub.com/renovatebot/renovate/issues/29108))
([e03a5cf](https://togithub.com/renovatebot/renovate/commit/e03a5cf0cbd1d566f2b19901882243ecd6dd6cfb))

##### Tests

- **osgi:** Use "codeBlock" for tests
([#&#8203;29110](https://togithub.com/renovatebot/renovate/issues/29110))
([2429a07](https://togithub.com/renovatebot/renovate/commit/2429a07eefbecb83408a9135bad600bee1af2544))

###
[`v37.363.9`](https://togithub.com/renovatebot/renovate/releases/tag/37.363.9)

[Compare
Source](https://togithub.com/renovatebot/renovate/compare/37.363.8...37.363.9)

##### Bug Fixes

- **deps:** update ghcr.io/renovatebot/base-image docker tag to v2.11.2
([#&#8203;29099](https://togithub.com/renovatebot/renovate/issues/29099))
([99ba857](https://togithub.com/renovatebot/renovate/commit/99ba857374c455b929790a538623638f17957898))

##### Documentation

- **config:** add note about GnuPG v2.4 usage
([#&#8203;29067](https://togithub.com/renovatebot/renovate/issues/29067))
([88fd212](https://togithub.com/renovatebot/renovate/commit/88fd2124ff0a410d3cbca1780954e499d1f94f7f))

###
[`v37.363.8`](https://togithub.com/renovatebot/renovate/releases/tag/37.363.8)

[Compare
Source](https://togithub.com/renovatebot/renovate/compare/37.363.7...37.363.8)

##### Bug Fixes

- **deps:** update ghcr.io/containerbase/sidecar docker tag to v10.6.10
([#&#8203;29096](https://togithub.com/renovatebot/renovate/issues/29096))
([1254f6a](https://togithub.com/renovatebot/renovate/commit/1254f6a66254c9202eb6724489f80d183f3f5586))

##### Documentation

- **bot comparison:** dependabot-core switched to MIT license
([#&#8203;29095](https://togithub.com/renovatebot/renovate/issues/29095))
([d9cd961](https://togithub.com/renovatebot/renovate/commit/d9cd9612eca0e5d262a4bb4c0d08d1c1871d299c))
- Update Swissquote article with information on the scheduler and
dashboards
([#&#8203;29030](https://togithub.com/renovatebot/renovate/issues/29030))
([01f9861](https://togithub.com/renovatebot/renovate/commit/01f9861069ccecbee921da41cabc7f6b8ddc5f14))

###
[`v37.363.7`](https://togithub.com/renovatebot/renovate/releases/tag/37.363.7)

[Compare
Source](https://togithub.com/renovatebot/renovate/compare/37.363.6...37.363.7)

##### Miscellaneous Chores

- **deps:** update ghcr.io/containerbase/devcontainer docker tag to
v10.6.10
([#&#8203;29091](https://togithub.com/renovatebot/renovate/issues/29091))
([dba9ad3](https://togithub.com/renovatebot/renovate/commit/dba9ad3353409461e1d7261662d4115461d80f75))

##### Build System

- **deps:** update dependency zod to v3.23.8
([#&#8203;29090](https://togithub.com/renovatebot/renovate/issues/29090))
([caedb6f](https://togithub.com/renovatebot/renovate/commit/caedb6f4528d87fc0f46f8d5a7a4c5c6443f098f))

###
[`v37.363.6`](https://togithub.com/renovatebot/renovate/releases/tag/37.363.6)

[Compare
Source](https://togithub.com/renovatebot/renovate/compare/37.363.5...37.363.6)

##### Bug Fixes

- **datasource/github-runners:** add Ubuntu 24.04 Noble Numbat as
unstable
([#&#8203;29088](https://togithub.com/renovatebot/renovate/issues/29088))
([e291ef0](https://togithub.com/renovatebot/renovate/commit/e291ef0dbdf515399d4cc97ff5aeb954ff2d5e8a))

###
[`v37.363.5`](https://togithub.com/renovatebot/renovate/releases/tag/37.363.5)

[Compare
Source](https://togithub.com/renovatebot/renovate/compare/37.363.4...37.363.5)

##### Bug Fixes

- **deps:** update ghcr.io/renovatebot/base-image docker tag to v2.11.1
([#&#8203;29079](https://togithub.com/renovatebot/renovate/issues/29079))
([945c4cf](https://togithub.com/renovatebot/renovate/commit/945c4cf8bae32b8309628ae51d95ed86b833852d))

##### Miscellaneous Chores

- **deps:** update codecov/codecov-action action to v4.4.0
([#&#8203;29080](https://togithub.com/renovatebot/renovate/issues/29080))
([78edb5b](https://togithub.com/renovatebot/renovate/commit/78edb5b0f857d9a3b6c4c62e30a63fe595219ee2))

##### Build System

- **deps:** update dependency zod to v3.23.7
([#&#8203;29077](https://togithub.com/renovatebot/renovate/issues/29077))
([ead5d55](https://togithub.com/renovatebot/renovate/commit/ead5d55a4986856d731ea13c9bec81987db38e8c))

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "before 4am on the first day of the
month" (UTC), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config help](https://togithub.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/slsa-framework/slsa-verifier).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNS4xNDQuMiIsInVwZGF0ZWRJblZlciI6IjM3LjM2OC4xMCIsInRhcmdldEJyYW5jaCI6Im1haW4ifQ==-->

Co-authored-by: Ramon Petgrave <32398091+ramonpetgrave64@users.noreply.github.com>
2024-06-27 18:54:52 +00:00
9fb6f246f8 chore(deps-dev): bump braces from 3.0.2 to 3.0.3 in /actions/installer (#780)
Bumps [braces](https://github.com/micromatch/braces) from 3.0.2 to
3.0.3.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/micromatch/braces/commit/74b2db2938fad48a2ea54a9c8bf27a37a62c350d"><code>74b2db2</code></a>
3.0.3</li>
<li><a
href="https://github.com/micromatch/braces/commit/88f1429a0f47e1dd3813de35211fc97ffda27f9e"><code>88f1429</code></a>
update eslint. lint, fix unit tests.</li>
<li><a
href="https://github.com/micromatch/braces/commit/415d660c3002d1ab7e63dbf490c9851da80596ff"><code>415d660</code></a>
Snyk js braces 6838727 (<a
href="https://redirect.github.com/micromatch/braces/issues/40">#40</a>)</li>
<li><a
href="https://github.com/micromatch/braces/commit/190510f79db1adf21d92798b0bb6fccc1f72c9d6"><code>190510f</code></a>
fix tests, skip 1 test in test/braces.expand</li>
<li><a
href="https://github.com/micromatch/braces/commit/716eb9f12d820b145a831ad678618731927e8856"><code>716eb9f</code></a>
readme bump</li>
<li><a
href="https://github.com/micromatch/braces/commit/a5851e57f45c3431a94d83fc565754bc10f5bbc3"><code>a5851e5</code></a>
Merge pull request <a
href="https://redirect.github.com/micromatch/braces/issues/37">#37</a>
from coderaiser/fix/vulnerability</li>
<li><a
href="https://github.com/micromatch/braces/commit/2092bd1fb108d2c59bd62e243b70ad98db961538"><code>2092bd1</code></a>
feature: braces: add maxSymbols (<a
href="https://github.com/micromatch/braces/issues/">https://github.com/micromatch/braces/issues/</a>...</li>
<li><a
href="https://github.com/micromatch/braces/commit/9f5b4cf47329351bcb64287223ffb6ecc9a5e6d3"><code>9f5b4cf</code></a>
fix: vulnerability (<a
href="https://security.snyk.io/vuln/SNYK-JS-BRACES-6838727">https://security.snyk.io/vuln/SNYK-JS-BRACES-6838727</a>)</li>
<li><a
href="https://github.com/micromatch/braces/commit/98414f9f1fabe021736e26836d8306d5de747e0d"><code>98414f9</code></a>
remove funding file</li>
<li><a
href="https://github.com/micromatch/braces/commit/665ab5d561c017a38ba7aafd92cc6655b91d8c14"><code>665ab5d</code></a>
update keepEscaping doc (<a
href="https://redirect.github.com/micromatch/braces/issues/27">#27</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/micromatch/braces/compare/3.0.2...3.0.3">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=braces&package-manager=npm_and_yarn&previous-version=3.0.2&new-version=3.0.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/slsa-framework/slsa-verifier/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-06-27 15:37:36 +00:00
96619e48c2 chore(deps): bump undici from 5.28.3 to 5.28.4 in /actions/installer (#779)
Bumps [undici](https://github.com/nodejs/undici) from 5.28.3 to 5.28.4.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/nodejs/undici/releases">undici's
releases</a>.</em></p>
<blockquote>
<h2>v5.28.4</h2>
<h2>⚠️ Security Release ⚠️</h2>
<ul>
<li>Fixes <a
href="https://github.com/nodejs/undici/security/advisories/GHSA-m4v8-wqvr-p9f7">https://github.com/nodejs/undici/security/advisories/GHSA-m4v8-wqvr-p9f7</a>
CVE-2024-30260</li>
<li>Fixes <a
href="https://github.com/nodejs/undici/security/advisories/GHSA-9qxr-qj54-h672">https://github.com/nodejs/undici/security/advisories/GHSA-9qxr-qj54-h672</a>
CVE-2024-30261</li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/nodejs/undici/compare/v5.28.3...v5.28.4">https://github.com/nodejs/undici/compare/v5.28.3...v5.28.4</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/nodejs/undici/commit/fb983069071f52e0a7ea0e71078459c765aae172"><code>fb98306</code></a>
Bumped v5.28.4</li>
<li><a
href="https://github.com/nodejs/undici/commit/2b39440bd9ded841c93dd72138f3b1763ae26055"><code>2b39440</code></a>
Merge pull request from GHSA-9qxr-qj54-h672</li>
<li><a
href="https://github.com/nodejs/undici/commit/64e3402da4e032e68de46acb52800c9a06aaea3f"><code>64e3402</code></a>
Merge pull request from GHSA-m4v8-wqvr-p9f7</li>
<li><a
href="https://github.com/nodejs/undici/commit/723c4e728051aefd5eb5ae7193dfb18046009f83"><code>723c4e7</code></a>
Revert &quot;build(deps-dev): bump formdata-node from 4.4.1 to 6.0.3 (<a
href="https://redirect.github.com/nodejs/undici/issues/2389">#2389</a>)&quot;</li>
<li><a
href="https://github.com/nodejs/undici/commit/0e9d54b2c2a5ec0b58937114c857a9ed9fe22d5b"><code>0e9d54b</code></a>
skip failing test due to Node.js changes</li>
<li>See full diff in <a
href="https://github.com/nodejs/undici/compare/v5.28.3...v5.28.4">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=undici&package-manager=npm_and_yarn&previous-version=5.28.3&new-version=5.28.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/slsa-framework/slsa-verifier/network/alerts).

</details>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: github-actions <github-actions@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: github-actions <github-actions@github.com>
Co-authored-by: Ramon Petgrave <32398091+ramonpetgrave64@users.noreply.github.com>
2024-06-27 14:28:25 +00:00
e7a8f74b9c fix(deps): update dependency @actions/core to v1.10.1 (#717)
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
|
[@actions/core](https://togithub.com/actions/toolkit/tree/main/packages/core)
([source](https://togithub.com/actions/toolkit/tree/HEAD/packages/core))
| [`1.10.0` ->
`1.10.1`](https://renovatebot.com/diffs/npm/@actions%2fcore/1.10.0/1.10.1)
|
[![age](https://developer.mend.io/api/mc/badges/age/npm/@actions%2fcore/1.10.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/@actions%2fcore/1.10.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/@actions%2fcore/1.10.0/1.10.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@actions%2fcore/1.10.0/1.10.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>actions/toolkit (@&#8203;actions/core)</summary>

###
[`v1.10.1`](https://togithub.com/actions/toolkit/blob/HEAD/packages/core/RELEASES.md#1101)

- Fix error message reference in oidc utils
[#&#8203;1511](https://togithub.com/actions/toolkit/pull/1511)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "before 4am on the first day of the
month" (UTC), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/slsa-framework/slsa-verifier).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy44LjEiLCJ1cGRhdGVkSW5WZXIiOiIzNy4zNDAuMTAiLCJ0YXJnZXRCcmFuY2giOiJtYWluIn0=-->

---------

Signed-off-by: Mend Renovate <bot@renovateapp.com>
Signed-off-by: github-actions <github-actions@github.com>
Co-authored-by: github-actions <github-actions@github.com>
2024-05-07 14:09:48 -04:00
bcc39bf21a chore(deps): update npm dev (major) (#753)
Redo of https://github.com/slsa-framework/slsa-verifier/pull/654

- Fix dev-dependencies related to es-lint that the renovate-bot couldn't
auto-fix

- a few commas automatically added by the new linter

- use node20 for tests to avoid caompatibility warnings

```
npm WARN EBADENGINE Unsupported engine {
npm WARN EBADENGINE   package: '@typescript-eslint/parser@7.5.0',
npm WARN EBADENGINE   required: { node: '^18.18.0 || >=20.0.0' },
npm WARN EBADENGINE   current: { node: 'v16.20.2', npm: '8.19.4' }
npm WARN EBADENGINE }
```

---------

Signed-off-by: Mend Renovate <bot@renovateapp.com>
Signed-off-by: Ramon Petgrave <32398091+ramonpetgrave64@users.noreply.github.com>
Co-authored-by: Mend Renovate <bot@renovateapp.com>
2024-04-02 17:44:08 -07:00
laurentsimonandGitHub b1f986788d chore: Update @actions/github v6 (#749)
Need to re-compile
https://github.com/slsa-framework/slsa-verifier/pull/720/files

Signed-off-by: laurentsimon <laurentsimon@google.com>
2024-03-26 22:03:42 +00:00
laurentsimonandGitHub f315652a8c chore: Update doc and digests for v2.5.1 (#748)
This sets the expected sha256 of the v2.5.1 slsa-verifier released
binary.

How to LGTM this PR (I'll work on a proper doc for this in
https://github.com/slsa-framework/slsa-github-generator/issues/112):

1. Download the binary and provenance from
https://github.com/slsa-framework/slsa-verifier/releases/tag/v0.0.1
2. Clone the slsa-verifier repo, compile and verify the provenance using
the steps described in
https://github.com/slsa-framework/slsa-verifier/blob/main/RELEASE.md#verify-provenance
```
$ git clone git@github.com:slsa-framework/slsa-verifier.git
$ cd slsa-verifier
$ bash verify-release.sh v2.5.1
```

The output hash should be the hash I'm updating to in this PR. If they
match, LGTM. If they don't, someone tampered with the released binary
and don't LGTM

---------

Signed-off-by: laurentsimon <laurentsimon@google.com>
2024-03-26 08:11:24 -07:00
laurentsimonandGitHub eb7007070b feat: Update verifier version in GHA installer (#747)
This is part of the release tests in
https://github.com/slsa-framework/slsa-verifier/blob/main/RELEASE.md#dry-run
to verify that the Action installer works.

A follow up PR will be sent prior to release to update to `v2.5.0`

---------

Signed-off-by: laurentsimon <laurentsimon@google.com>
2024-03-25 14:54:53 +00:00
laurentsimonandGitHub e986dfc0ff feat: Digest for new release (#722)
#label:release v2.4.1

How to LGTM this PR:

Ensure you have installed the GitHub client from https://cli.github.com.
If it is not installed in your `PATH`, set `export GH=/path/to/your/gh`

Set your `export GH_TOKEN=...`

Use [verify-release.sh](./verify-release.sh) script in this repository:
```
bash verify-release v2.4.1
```

Once it completes, you will see the last line `Verifying artifact
/tmp/tmp.SomeRanDOm/` and do:
```bash
sha256sum /tmp/tmp.SomeRanDOm/* | grep -v intoto
```

This will print out the hashes. Compare them to the changes in this PR

---------

Signed-off-by: laurentsimon <laurentsimon@google.com>
2023-11-07 17:23:25 -08:00
laurentsimonandGitHub 2184d9d604 chore: bump versions (#715)
Signed-off-by: laurentsimon <laurentsimon@google.com>
2023-10-10 00:27:33 +00:00
laurentsimonandGitHub d23c97947e chore: Update doc for v2.4.0 (#699)
How to LGTM this PR (I'll work on a proper doc for this in
https://github.com/slsa-framework/slsa-github-generator/issues/112):

1.  Clone repo
```
$ git clone git@github.com:slsa-framework/slsa-verifier.git 
$ cd slsa-verifier
$ bash verify-release.sh v2.4.0 # NOTE: use the file in _this_ PR.
# Note down the path to the temporary dir use. The bash script will print its first line as "INFO: using dir: /tmp/tmp.VaYi6HfbmL"
```
2. Run command below and compare to SHA256SUM.md in this PR
```
$sha256sum /tmp/tmp.VaYi6HfbmL/*
```

The output hash should be the hash I'm updating to in this PR. If they
match, LGTM. If they don't, someone tampered with the released binary
and don't LGTM

---------

Signed-off-by: laurentsimon <laurentsimon@google.com>
2023-08-25 12:09:40 -07:00
Mend RenovateandGitHub 658d91aa82 chore(deps): update npm dev (#608)
Signed-off-by: Renovate Bot <bot@renovateapp.com>
2023-06-12 13:47:38 +09:00
Mend RenovateandGitHub a86957c6a5 chore(deps): update dependency jasmine to v5 (#598)
Signed-off-by: Renovate Bot <bot@renovateapp.com>
2023-05-15 04:14:31 +00:00
Mend RenovateandGitHub ab4b6b4cc7 chore(deps): update dependency @types/node to v18.16.9 (#596)
Signed-off-by: Renovate Bot <bot@renovateapp.com>
2023-05-15 03:55:18 +00:00
Ian LewisandGitHub f59b55ef21 chore: Update SHA256SUM.md for v2.3.0 (#592)
Signed-off-by: Ian Lewis <ianlewis@google.com>
2023-05-12 08:23:56 +09:00
c9abffe4d2 chore(deps): update npm dev (#586)
Signed-off-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: Ian Lewis <ianlewis@google.com>
2023-05-10 00:48:36 +00:00
sunnyyipandGitHub 030c40080b docs(gh-action): update actions installer path (#581)
Signed-off-by: Sunny Yip <sunny@kusari.dev>
2023-05-03 09:20:04 -07:00
Mend RenovateandGitHub 5c0baa4f3e chore(deps): update npm dev (#568)
Signed-off-by: Renovate Bot <bot@renovateapp.com>
2023-05-01 11:03:55 +09:00
62c0dfdde9 docs: Update docs for 2.2.0 release. (#556)
* Update SHA256SUM.md

Signed-off-by: Ian Lewis <ianlewis@google.com>

* Update version in docs

Signed-off-by: Ian Lewis <ianlewis@google.com>

---------

Signed-off-by: Ian Lewis <ianlewis@google.com>
Co-authored-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com>
2023-04-13 19:15:15 +00:00
623cf20a23 fix(deps): update npm (#535)
* fix(deps): update npm

---------

Signed-off-by: Renovate Bot <bot@renovateapp.com>
Signed-off-by: Ian Lewis <ianlewis@google.com>
Co-authored-by: Ian Lewis <ianlewis@google.com>
2023-04-11 13:41:24 +09:00
84c3bbdd84 chore(deps): update npm dev (#534)
Signed-off-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: Ian Lewis <ianlewis@google.com>
2023-04-11 10:57:38 +09:00
3c5abb613f chore(deps): update dependency typescript to v5 (#545)
Signed-off-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: Ian Lewis <ianlewis@google.com>
2023-04-11 00:08:54 +00:00
asraaandGitHub e8ce5c0204 chore: update docs for release v2.1.0 (#530)
* chore: update docs for release v2.1.0

Signed-off-by: Asra Ali <asraa@google.com>

---------

Signed-off-by: Asra Ali <asraa@google.com>
2023-03-17 15:07:25 +00:00
Mend RenovateandGitHub 1ed3847709 chore(deps): update npm dev (#517)
Signed-off-by: Renovate Bot <bot@renovateapp.com>
2023-03-14 11:58:36 +09:00
laurentsimonandGitHub 20b06426ff docs: update installation to cover the Action and to receive updates (#523)
docs: update installation to cover the Action and to receive updates (#523)

Signed-off-by: laurentsimon <laurentsimon@google.com>
2023-03-10 15:46:04 -06:00
Mend RenovateandGitHub 66931c71be chore(deps): update npm dev (#501)
Signed-off-by: Renovate Bot <bot@renovateapp.com>
2023-02-27 17:46:32 +09:00
Mend RenovateandGitHub f2b8ee8fff chore(deps): update npm dev (#497)
Signed-off-by: Renovate Bot <bot@renovateapp.com>
2023-02-22 10:52:04 +09:00
Mend RenovateandGitHub 878947f5e8 chore(deps): update npm dev (#482)
Signed-off-by: Renovate Bot <bot@renovateapp.com>
2023-02-13 09:46:28 +00:00
53ca117e3c chore(deps): update npm dev (#466)
Signed-off-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: asraa <asraa@google.com>
2023-02-06 15:01:12 +00:00
Mend RenovateandGitHub 3c012d278e chore(deps): update npm dev (#459)
Signed-off-by: Renovate Bot <bot@renovateapp.com>
2023-01-30 05:23:26 -08:00
Mend RenovateandGitHub fb8ab2af45 chore(deps): update npm dev (#445)
Signed-off-by: Renovate Bot <bot@renovateapp.com>
2023-01-16 05:51:13 +00:00
Mend RenovateandGitHub 257c370894 chore(deps): update dependency prettier to v2.8.2 (#437)
Signed-off-by: Renovate Bot <bot@renovateapp.com>

Signed-off-by: Renovate Bot <bot@renovateapp.com>
2023-01-09 09:19:17 -06:00
Mend RenovateandGitHub 71a4b4d2bb chore(deps): update npm dev (#428)
Signed-off-by: Renovate Bot <bot@renovateapp.com>
2023-01-05 02:25:41 +00:00
Mend RenovateandGitHub 82cb42fb20 chore(deps): update dependency @types/node to v18.11.17 (#416) 2022-12-18 09:56:35 +09:00
Mend RenovateandGitHub a88e26b866 chore(deps): update npm dev (#415) 2022-12-17 16:04:09 +09:00
b1aad15c35 chore(deps): update npm dev (#383)
Co-authored-by: Ian Lewis <ianlewis@google.com>
2022-12-16 00:41:58 +00:00
Ian LewisandGitHub 8510abc10f Add codeowners (#401)
Signed-off-by: Ian Lewis <ianlewis@google.com>
2022-12-14 03:05:04 +00:00
53b3aebdb9 feat: scheduled tests for installer Action (#398)
* update

Signed-off-by: laurentsimon <laurentsimon@google.com>

* update

Signed-off-by: laurentsimon <laurentsimon@google.com>

* update

Signed-off-by: laurentsimon <laurentsimon@google.com>

* update

Signed-off-by: laurentsimon <laurentsimon@google.com>

* update

Signed-off-by: laurentsimon <laurentsimon@google.com>

* Update .github/workflows/schedule.installer.yml

Co-authored-by: Ian Lewis <ianlewis@google.com>
Signed-off-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com>

* Update .github/workflows/schedule.installer.yml

Co-authored-by: Ian Lewis <ianlewis@google.com>
Signed-off-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com>

* Update .github/workflows/schedule.installer.yml

Co-authored-by: Ian Lewis <ianlewis@google.com>
Signed-off-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com>

* Update .github/workflows/schedule.installer.yml

Co-authored-by: Ian Lewis <ianlewis@google.com>
Signed-off-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com>

* update

Signed-off-by: laurentsimon <laurentsimon@google.com>

* Update .github/workflows/schedule.installer.yml

Co-authored-by: Ian Lewis <ianlewis@google.com>
Signed-off-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com>

* Update .github/workflows/schedule.installer.yml

Co-authored-by: Ian Lewis <ianlewis@google.com>
Signed-off-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com>

* update

Signed-off-by: laurentsimon <laurentsimon@google.com>

* update

Signed-off-by: laurentsimon <laurentsimon@google.com>

* Update .github/workflows/schedule.installer.yml

Co-authored-by: Ian Lewis <ianlewis@google.com>
Signed-off-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com>

* update

Signed-off-by: laurentsimon <laurentsimon@google.com>

Signed-off-by: laurentsimon <laurentsimon@google.com>
Signed-off-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com>
Co-authored-by: Ian Lewis <ianlewis@google.com>
2022-12-14 01:37:23 +00:00
laurentsimonandGitHub a43888265e fix: command in installer Action (#396)
* update

Signed-off-by: laurentsimon <laurentsimon@google.com>
2022-12-08 22:32:57 +00:00
laurentsimonandGitHub 901c5f7901 update (#394)
Signed-off-by: laurentsimon <laurentsimon@google.com>
2022-12-06 15:16:10 -06:00
laurentsimonandGitHub 4cba39a15a feat: Add env variable to facilitate CI tests of Action installer (#393)
* update

Signed-off-by: laurentsimon <laurentsimon@google.com>

* update

Signed-off-by: laurentsimon <laurentsimon@google.com>

* update

Signed-off-by: laurentsimon <laurentsimon@google.com>

Signed-off-by: laurentsimon <laurentsimon@google.com>
2022-12-06 20:25:47 +00:00
laurentsimonandGitHub 477ac0d88e fix: show version in version command (#392)
* update

Signed-off-by: laurentsimon <laurentsimon@google.com>
2022-12-06 20:13:35 +00:00
12d81454a0 chore(deps): update dependency @types/node to v18.11.8 (#341)
Co-authored-by: asraa <asraa@google.com>
2022-10-31 16:38:18 +00:00
WhiteSource RenovateandGitHub f0d1b30dca chore(deps): update dependency jasmine to v4.5.0 (#345) 2022-10-31 09:24:08 -05:00
585539ab5f chore(deps): update dependency typescript to v4.8.4 (#270)
Co-authored-by: Ian Lewis <ianlewis@google.com>
2022-10-28 04:58:23 +00:00
429634c0e6 chore(deps): update dependency eslint to v8.26.0 (#323)
Co-authored-by: asraa <asraa@google.com>
2022-10-25 14:55:53 +00:00
laurentsimonandGitHub e9e3ab2e33 Make GitHub token optional (#324)
Signed-off-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com>

Signed-off-by: laurentsimon <64505099+laurentsimon@users.noreply.github.com>
2022-10-25 11:04:34 +00:00
kpk47andGitHub 37cf8fd48d Fix installer: Add arguments to actions/checkout so that it checks ou… (#319)
* Fix installer: Add arguments to actions/checkout so that it checks out slsa-framework/slsa-verifier instead of the repo using the Action.

Signed-off-by: kpk47 <kkris@google.com>

* Switch to JS action

* rebuild TS

Signed-off-by: kpk47 <kkris@google.com>
2022-10-25 10:42:00 +00:00
WhiteSource RenovateandGitHub 4ec69efd87 chore(deps): update dependency eslint to v8.25.0 (#273) 2022-10-17 13:25:37 -05:00