Commit Graph
39 Commits
Author SHA1 Message Date
6657aada08 chore(deps): bump undici from 5.28.4 to 5.28.5 in /actions/installer in the npm_and_yarn group across 1 directory (#827)
Bumps the npm_and_yarn group with 1 update in the /actions/installer
directory: [undici](https://github.com/nodejs/undici).

Updates `undici` from 5.28.4 to 5.28.5
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/nodejs/undici/releases">undici's
releases</a>.</em></p>
<blockquote>
<h2>v5.28.5</h2>
<h1>⚠️ Security Release ⚠️</h1>
<p>Fixes CVE CVE-2025-22150 <a
href="https://github.com/nodejs/undici/security/advisories/GHSA-c76h-2ccp-4975">https://github.com/nodejs/undici/security/advisories/GHSA-c76h-2ccp-4975</a>
(embargoed until 22-01-2025).</p>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/nodejs/undici/compare/v5.28.4...v5.28.5">https://github.com/nodejs/undici/compare/v5.28.4...v5.28.5</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/nodejs/undici/commit/6139ed2e0c787853243de58ef7c4301b26ca66f2"><code>6139ed2</code></a>
Bumped v5.28.5</li>
<li><a
href="https://github.com/nodejs/undici/commit/711e20772764c29f6622ddc937c63b6eefdf07d0"><code>711e207</code></a>
Backport of c2d78cd</li>
<li>See full diff in <a
href="https://github.com/nodejs/undici/compare/v5.28.4...v5.28.5">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=undici&package-manager=npm_and_yarn&previous-version=5.28.4&new-version=5.28.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/slsa-framework/slsa-verifier/network/alerts).

</details>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: github-actions <github-actions@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: github-actions <github-actions@github.com>
2025-01-28 19:21:01 +00:00
84e5c03318 fix(deps): update dependency @actions/core to v1.11.1 (#819)
This PR contains the following updates:

| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
|
[@actions/core](https://redirect.github.com/actions/toolkit/tree/main/packages/core)
([source](https://redirect.github.com/actions/toolkit/tree/HEAD/packages/core))
| [`1.10.1` ->
`1.11.1`](https://renovatebot.com/diffs/npm/@actions%2fcore/1.10.1/1.11.1)
|
[![age](https://developer.mend.io/api/mc/badges/age/npm/@actions%2fcore/1.11.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/@actions%2fcore/1.11.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/@actions%2fcore/1.10.1/1.11.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@actions%2fcore/1.10.1/1.11.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|

---

### Release Notes

<details>
<summary>actions/toolkit (@&#8203;actions/core)</summary>

###
[`v1.11.1`](https://redirect.github.com/actions/toolkit/blob/HEAD/packages/core/RELEASES.md#1111)

- Fix uses of `crypto.randomUUID` on Node 18 and earlier
[#&#8203;1842](https://redirect.github.com/actions/toolkit/pull/1842)

###
[`v1.11.0`](https://redirect.github.com/actions/toolkit/blob/HEAD/packages/core/RELEASES.md#1110)

- Add platform info utilities
[#&#8203;1551](https://redirect.github.com/actions/toolkit/pull/1551)
- Remove dependency on `uuid` package
[#&#8203;1824](https://redirect.github.com/actions/toolkit/pull/1824)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "* 0-3 1 * *" (UTC), Automerge - At
any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/slsa-framework/slsa-verifier).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xOS4wIiwidXBkYXRlZEluVmVyIjoiMzkuNDIuNCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

---------

Signed-off-by: github-actions <github-actions@github.com>
Co-authored-by: github-actions <github-actions@github.com>
Co-authored-by: Ramon Petgrave <32398091+ramonpetgrave64@users.noreply.github.com>
2024-12-05 12:27:39 -05:00
Mend RenovateandRamon Petgrave 4bab78a528 chore(deps): update npm dev (#650)
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Change | Age | Adoption | Passing | Confidence | Type |
Update |
|---|---|---|---|---|---|---|---|
|
[@types/node](https://togithub.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node)
([source](https://togithub.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node))
| [`18.19.28` ->
`18.19.33`](https://renovatebot.com/diffs/npm/@types%2fnode/18.19.28/18.19.33)
|
[![age](https://developer.mend.io/api/mc/badges/age/npm/@types%2fnode/18.19.33?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/@types%2fnode/18.19.33?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/@types%2fnode/18.19.28/18.19.33?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@types%2fnode/18.19.28/18.19.33?slim=true)](https://docs.renovatebot.com/merge-confidence/)
| devDependencies | patch |
| [eslint](https://eslint.org)
([source](https://togithub.com/eslint/eslint)) | [`^8.57.0` ->
`8.57.0`](https://renovatebot.com/diffs/npm/eslint/8.57.0/8.57.0) |
[![age](https://developer.mend.io/api/mc/badges/age/npm/eslint/8.57.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/eslint/8.57.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/eslint/8.57.0/8.57.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/eslint/8.57.0/8.57.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
| devDependencies | pin |
|
[eslint-plugin-prettier](https://togithub.com/prettier/eslint-plugin-prettier)
| [`^5.1.3` ->
`5.1.3`](https://renovatebot.com/diffs/npm/eslint-plugin-prettier/5.1.3/5.1.3)
|
[![age](https://developer.mend.io/api/mc/badges/age/npm/eslint-plugin-prettier/5.1.3?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/eslint-plugin-prettier/5.1.3?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/eslint-plugin-prettier/5.1.3/5.1.3?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/eslint-plugin-prettier/5.1.3/5.1.3?slim=true)](https://docs.renovatebot.com/merge-confidence/)
| devDependencies | pin |
| [markdown-toc](https://togithub.com/jonschlinkert/markdown-toc) |
[`^1.2.0` ->
`1.2.0`](https://renovatebot.com/diffs/npm/markdown-toc/1.2.0/1.2.0) |
[![age](https://developer.mend.io/api/mc/badges/age/npm/markdown-toc/1.2.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/markdown-toc/1.2.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/markdown-toc/1.2.0/1.2.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/markdown-toc/1.2.0/1.2.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
| devDependencies | pin |
| [renovate](https://renovatebot.com)
([source](https://togithub.com/renovatebot/renovate)) | [`37.363.4` ->
`37.374.1`](https://renovatebot.com/diffs/npm/renovate/37.363.4/37.374.1)
|
[![age](https://developer.mend.io/api/mc/badges/age/npm/renovate/37.374.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/renovate/37.374.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/renovate/37.363.4/37.374.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/renovate/37.363.4/37.374.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
| devDependencies | minor |
| [typescript](https://www.typescriptlang.org/)
([source](https://togithub.com/Microsoft/TypeScript)) | [`^5.4.3` ->
`5.4.3`](https://renovatebot.com/diffs/npm/typescript/5.4.3/5.4.3) |
[![age](https://developer.mend.io/api/mc/badges/age/npm/typescript/5.4.3?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/typescript/5.4.3?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/typescript/5.4.3/5.4.3?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/typescript/5.4.3/5.4.3?slim=true)](https://docs.renovatebot.com/merge-confidence/)
| devDependencies | pin |
|
[typescript-eslint](https://typescript-eslint.io/packages/typescript-eslint)
([source](https://togithub.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint))
| [`^7.5.0` ->
`7.5.0`](https://renovatebot.com/diffs/npm/typescript-eslint/7.5.0/7.5.0)
|
[![age](https://developer.mend.io/api/mc/badges/age/npm/typescript-eslint/7.5.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/typescript-eslint/7.5.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/typescript-eslint/7.5.0/7.5.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/typescript-eslint/7.5.0/7.5.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
| devDependencies | pin |

---

### Release Notes

<details>
<summary>renovatebot/renovate (renovate)</summary>

###
[`v37.374.1`](https://togithub.com/renovatebot/renovate/releases/tag/37.374.1)

[Compare
Source](https://togithub.com/renovatebot/renovate/compare/37.374.0...37.374.1)

##### Bug Fixes

- **deps:** update ghcr.io/renovatebot/base-image docker tag to v2.12.6
([#&#8203;29212](https://togithub.com/renovatebot/renovate/issues/29212))
([f4eeaaa](https://togithub.com/renovatebot/renovate/commit/f4eeaaaff6bcdf3c8a6b76bc784c5d43f6ce38ce))

###
[`v37.374.0`](https://togithub.com/renovatebot/renovate/compare/37.373.0...fe62e80aebe988dd9dcbe47d3e5eee225ec3904d)

[Compare
Source](https://togithub.com/renovatebot/renovate/compare/37.373.0...37.374.0)

###
[`v37.373.0`](https://togithub.com/renovatebot/renovate/compare/37.372.1...25255596d63a03a312885aba1b25fdfd7b76c7a4)

[Compare
Source](https://togithub.com/renovatebot/renovate/compare/37.372.1...37.373.0)

###
[`v37.372.1`](https://togithub.com/renovatebot/renovate/releases/tag/37.372.1)

[Compare
Source](https://togithub.com/renovatebot/renovate/compare/37.372.0...37.372.1)

##### Bug Fixes

- **packageRules:** prPriority should only be in packageRules
([#&#8203;29201](https://togithub.com/renovatebot/renovate/issues/29201))
([70f1f93](https://togithub.com/renovatebot/renovate/commit/70f1f93823478a369bf7308964c14815cc544048))

###
[`v37.372.0`](https://togithub.com/renovatebot/renovate/releases/tag/37.372.0)

[Compare
Source](https://togithub.com/renovatebot/renovate/compare/37.371.1...37.372.0)

##### Features

- **util/package-rules:** allow glob pattens in match{Current,New}Value
([#&#8203;29168](https://togithub.com/renovatebot/renovate/issues/29168))
([56856d4](https://togithub.com/renovatebot/renovate/commit/56856d4a46ab007ca118fcd831a76611ea1e9fdd))

##### Bug Fixes

- **deps:** update ghcr.io/containerbase/sidecar docker tag to v10.6.14
([#&#8203;29199](https://togithub.com/renovatebot/renovate/issues/29199))
([4edd63a](https://togithub.com/renovatebot/renovate/commit/4edd63a297d1108bbd9f81f2a617c092a40a5ca6))
- **deps:** update ghcr.io/renovatebot/base-image docker tag to v2.12.5
([#&#8203;29200](https://togithub.com/renovatebot/renovate/issues/29200))
([757574b](https://togithub.com/renovatebot/renovate/commit/757574b931b9828b3283511b7c4bc65d4506fbcc))

##### Miscellaneous Chores

- **deps:** update ghcr.io/containerbase/devcontainer docker tag to
v10.6.14
([#&#8203;29198](https://togithub.com/renovatebot/renovate/issues/29198))
([a8855d8](https://togithub.com/renovatebot/renovate/commit/a8855d811c3885d485b798b0332a0ca58f7d8039))

###
[`v37.371.1`](https://togithub.com/renovatebot/renovate/releases/tag/37.371.1)

[Compare
Source](https://togithub.com/renovatebot/renovate/compare/37.371.0...37.371.1)

##### Bug Fixes

- **pdm:** change pdm update strategy to eager
([#&#8203;29183](https://togithub.com/renovatebot/renovate/issues/29183))
([2f335b6](https://togithub.com/renovatebot/renovate/commit/2f335b61f46c6aed7a1fb0c5c05a6844371ca85d))

##### Miscellaneous Chores

- **deps:** update dependency
[@&#8203;swc/core](https://togithub.com/swc/core) to v1.5.7
([#&#8203;29192](https://togithub.com/renovatebot/renovate/issues/29192))
([436fa71](https://togithub.com/renovatebot/renovate/commit/436fa71ce4da455d9cf4d374442bea7318c20b9d))
- **deps:** update linters to v7.10.0
([#&#8203;29196](https://togithub.com/renovatebot/renovate/issues/29196))
([ab36239](https://togithub.com/renovatebot/renovate/commit/ab362394213afff57b308186a28701683053b43c))
- log when \_PROXY values detected
([#&#8203;29191](https://togithub.com/renovatebot/renovate/issues/29191))
([e281931](https://togithub.com/renovatebot/renovate/commit/e28193134a2e488749b644b9bb87fa97c2788bec))

###
[`v37.371.0`](https://togithub.com/renovatebot/renovate/releases/tag/37.371.0)

[Compare
Source](https://togithub.com/renovatebot/renovate/compare/37.370.0...37.371.0)

##### Features

- **asdf:** Add rebar3 to asdf manager
([#&#8203;29188](https://togithub.com/renovatebot/renovate/issues/29188))
([2e6c563](https://togithub.com/renovatebot/renovate/commit/2e6c5636eabf6cf6e2b4e0942c4f3ee3263e6a53))

##### Miscellaneous Chores

- **deps:** update linters
([#&#8203;29193](https://togithub.com/renovatebot/renovate/issues/29193))
([f59c7f3](https://togithub.com/renovatebot/renovate/commit/f59c7f31622b4efda09c010ca99173ffe115fe5f))

###
[`v37.370.0`](https://togithub.com/renovatebot/renovate/releases/tag/37.370.0)

[Compare
Source](https://togithub.com/renovatebot/renovate/compare/37.369.1...37.370.0)

##### Features

- **self-hosted:** `mergeConfidenceEndpoint` and
`mergeConfidenceDatasources`
([#&#8203;28880](https://togithub.com/renovatebot/renovate/issues/28880))
([044dc0f](https://togithub.com/renovatebot/renovate/commit/044dc0fa2807c303a7043c326cec0d8f5fc9c4d1))

###
[`v37.369.1`](https://togithub.com/renovatebot/renovate/compare/37.369.0...ae15a51554828bb3891268c16f180124a90ade55)

[Compare
Source](https://togithub.com/renovatebot/renovate/compare/37.369.0...37.369.1)

###
[`v37.369.0`](https://togithub.com/renovatebot/renovate/releases/tag/37.369.0)

[Compare
Source](https://togithub.com/renovatebot/renovate/compare/37.368.10...37.369.0)

##### Features

- **datasource:** `sourceUrl` & `releaseTimestamp` support
([#&#8203;29122](https://togithub.com/renovatebot/renovate/issues/29122))
([d0b77e5](https://togithub.com/renovatebot/renovate/commit/d0b77e584a8dde76ef98ee402354f63978218f54))

###
[`v37.368.10`](https://togithub.com/renovatebot/renovate/compare/37.368.9...3c75e4bfb3e6786508f57ead837af102d468f4ab)

[Compare
Source](https://togithub.com/renovatebot/renovate/compare/37.368.9...37.368.10)

###
[`v37.368.9`](https://togithub.com/renovatebot/renovate/releases/tag/37.368.9)

[Compare
Source](https://togithub.com/renovatebot/renovate/compare/37.368.8...37.368.9)

##### Bug Fixes

- **homebrew:** handle new github archive url format
([#&#8203;29138](https://togithub.com/renovatebot/renovate/issues/29138))
([e035f05](https://togithub.com/renovatebot/renovate/commit/e035f0562d9ab4772c05116c3b753c820785a41c))

###
[`v37.368.8`](https://togithub.com/renovatebot/renovate/compare/37.368.7...5b88dd6a31c24880da2b2dc5915916a8f3e4f6e8)

[Compare
Source](https://togithub.com/renovatebot/renovate/compare/37.368.7...37.368.8)

###
[`v37.368.7`](https://togithub.com/renovatebot/renovate/releases/tag/37.368.7)

[Compare
Source](https://togithub.com/renovatebot/renovate/compare/37.368.6...37.368.7)

##### Bug Fixes

- **deps:** update ghcr.io/containerbase/sidecar docker tag to v10.6.12
([#&#8203;29157](https://togithub.com/renovatebot/renovate/issues/29157))
([4a1e758](https://togithub.com/renovatebot/renovate/commit/4a1e75889ffc9180570606adcdd67449e85d295f))

##### Documentation

- **readme:** better alt text, add toggleable list of companies/projects
that use Renovate
([#&#8203;29022](https://togithub.com/renovatebot/renovate/issues/29022))
([f8f5184](https://togithub.com/renovatebot/renovate/commit/f8f518493dad03c26facac4f110b4e553b09b99e))

##### Miscellaneous Chores

- **deps:** update containerbase/internal-tools action to v3.0.88
([#&#8203;29149](https://togithub.com/renovatebot/renovate/issues/29149))
([92686aa](https://togithub.com/renovatebot/renovate/commit/92686aa201dc076acd280e11c3db6319957832d9))

###
[`v37.368.6`](https://togithub.com/renovatebot/renovate/releases/tag/37.368.6)

[Compare
Source](https://togithub.com/renovatebot/renovate/compare/37.368.5...37.368.6)

##### Bug Fixes

- **deps:** update ghcr.io/renovatebot/base-image docker tag to v2.12.3
([#&#8203;29143](https://togithub.com/renovatebot/renovate/issues/29143))
([7f6964c](https://togithub.com/renovatebot/renovate/commit/7f6964cea9a10be6e07c1b5d3980ab4747f29671))

###
[`v37.368.5`](https://togithub.com/renovatebot/renovate/releases/tag/37.368.5)

[Compare
Source](https://togithub.com/renovatebot/renovate/compare/37.368.4...37.368.5)

##### Bug Fixes

- **deps:** update ghcr.io/renovatebot/base-image docker tag to v2.12.2
([#&#8203;29142](https://togithub.com/renovatebot/renovate/issues/29142))
([c23c70f](https://togithub.com/renovatebot/renovate/commit/c23c70fc8bc4dd591c1ef28ae934521962ea0921))

##### Miscellaneous Chores

- **deps:** update dependency rimraf to v5.0.7
([#&#8203;29141](https://togithub.com/renovatebot/renovate/issues/29141))
([483bfc2](https://togithub.com/renovatebot/renovate/commit/483bfc28f522c09aa8a16423c645bc2aba2ff81c))

###
[`v37.368.4`](https://togithub.com/renovatebot/renovate/releases/tag/37.368.4)

[Compare
Source](https://togithub.com/renovatebot/renovate/compare/37.368.3...37.368.4)

##### Bug Fixes

- **deps:** update ghcr.io/renovatebot/base-image docker tag to v2.12.1
([#&#8203;29140](https://togithub.com/renovatebot/renovate/issues/29140))
([947bf17](https://togithub.com/renovatebot/renovate/commit/947bf17aea6ff3185d4ac8f5babc95a70b3a23a9))

##### Miscellaneous Chores

- **deps:** update dependency rimraf to v5.0.6
([#&#8203;29139](https://togithub.com/renovatebot/renovate/issues/29139))
([a2ba884](https://togithub.com/renovatebot/renovate/commit/a2ba88412c3b9b2d349b79a2d4cdddd740a9d034))

###
[`v37.368.3`](https://togithub.com/renovatebot/renovate/releases/tag/37.368.3)

[Compare
Source](https://togithub.com/renovatebot/renovate/compare/37.368.2...37.368.3)

##### Bug Fixes

- **deps:** update ghcr.io/containerbase/sidecar docker tag to v10.6.11
([#&#8203;29134](https://togithub.com/renovatebot/renovate/issues/29134))
([8216f20](https://togithub.com/renovatebot/renovate/commit/8216f205dca1728003dd8ca21e9d96504fbd2949))

##### Documentation

- **config:** warn about spaces in `schedule`
([#&#8203;29121](https://togithub.com/renovatebot/renovate/issues/29121))
([ebfb48d](https://togithub.com/renovatebot/renovate/commit/ebfb48d416d5a83850627c40a4e2ace1fd3e6928))

##### Miscellaneous Chores

- **deps:** update ghcr.io/containerbase/devcontainer docker tag to
v10.6.11
([#&#8203;29133](https://togithub.com/renovatebot/renovate/issues/29133))
([463226b](https://togithub.com/renovatebot/renovate/commit/463226b1ed605b49c470a35a96c9b130b6363b50))

###
[`v37.368.2`](https://togithub.com/renovatebot/renovate/releases/tag/37.368.2)

[Compare
Source](https://togithub.com/renovatebot/renovate/compare/37.368.1...37.368.2)

##### Bug Fixes

- **gomod:** treat v0 pseudo version updates as digest updates
([#&#8203;29042](https://togithub.com/renovatebot/renovate/issues/29042))
([6f8cde4](https://togithub.com/renovatebot/renovate/commit/6f8cde4e679bea23fea64fefd65200e87578e0b5))

###
[`v37.368.1`](https://togithub.com/renovatebot/renovate/releases/tag/37.368.1)

[Compare
Source](https://togithub.com/renovatebot/renovate/compare/37.368.0...37.368.1)

##### Miscellaneous Chores

- **deps:** update actions/checkout action to v4.1.6
([#&#8203;29126](https://togithub.com/renovatebot/renovate/issues/29126))
([f951139](https://togithub.com/renovatebot/renovate/commit/f9511394096516ef21f01ebd50f6f57d1dd875fe))

##### Build System

- **deps:** update dependency glob to v10.3.15
([#&#8203;29125](https://togithub.com/renovatebot/renovate/issues/29125))
([dc7d73f](https://togithub.com/renovatebot/renovate/commit/dc7d73f98fcc5644790243c1642de29b4b2f44d2))

###
[`v37.368.0`](https://togithub.com/renovatebot/renovate/releases/tag/37.368.0)

[Compare
Source](https://togithub.com/renovatebot/renovate/compare/37.367.0...37.368.0)

##### Features

- **deps:** update ghcr.io/renovatebot/base-image docker tag to v2.12.0
([#&#8203;29124](https://togithub.com/renovatebot/renovate/issues/29124))
([676e1ef](https://togithub.com/renovatebot/renovate/commit/676e1ef47f81432d57301d49a60f283185d2eee0))

##### Build System

- **deps:** update dependency glob to v10.3.14
([#&#8203;29123](https://togithub.com/renovatebot/renovate/issues/29123))
([40a6b4d](https://togithub.com/renovatebot/renovate/commit/40a6b4d2901c9a5cf84d11ce5a58b9bffa4a8e78))

###
[`v37.367.0`](https://togithub.com/renovatebot/renovate/releases/tag/37.367.0)

[Compare
Source](https://togithub.com/renovatebot/renovate/compare/37.366.1...37.367.0)

##### Features

- **presets:** add replacements for ZAP org moves
([#&#8203;29117](https://togithub.com/renovatebot/renovate/issues/29117))
([7df1dc7](https://togithub.com/renovatebot/renovate/commit/7df1dc77ae6b5b55b37a565e29f62cd594ca2541))

###
[`v37.366.1`](https://togithub.com/renovatebot/renovate/releases/tag/37.366.1)

[Compare
Source](https://togithub.com/renovatebot/renovate/compare/37.366.0...37.366.1)

##### Build System

- **deps:** update dependency jsonata to v2.0.5
([#&#8203;29116](https://togithub.com/renovatebot/renovate/issues/29116))
([8bbde23](https://togithub.com/renovatebot/renovate/commit/8bbde23579b4bf86a121ed6951681ef9d258a701))

###
[`v37.366.0`](https://togithub.com/renovatebot/renovate/releases/tag/37.366.0)

[Compare
Source](https://togithub.com/renovatebot/renovate/compare/37.365.0...37.366.0)

##### Features

- **datasource:** Add python-version datasource
([#&#8203;27583](https://togithub.com/renovatebot/renovate/issues/27583))
([c8aacc4](https://togithub.com/renovatebot/renovate/commit/c8aacc4c055071e642eb0a56ff9caece084b7c7c))
- Support custom artifact notice
([#&#8203;28957](https://togithub.com/renovatebot/renovate/issues/28957))
([1c8eb34](https://togithub.com/renovatebot/renovate/commit/1c8eb34876e99d15a3b84e2422aceb34b24a9fe2))

###
[`v37.365.0`](https://togithub.com/renovatebot/renovate/releases/tag/37.365.0)

[Compare
Source](https://togithub.com/renovatebot/renovate/compare/37.364.0...37.365.0)

##### Features

- **presets/workarounds:** add bitnami docker versioning
([#&#8203;29112](https://togithub.com/renovatebot/renovate/issues/29112))
([66de046](https://togithub.com/renovatebot/renovate/commit/66de0465e944f55669d5822cea6a2d459a6e5ed6))

###
[`v37.364.0`](https://togithub.com/renovatebot/renovate/releases/tag/37.364.0)

[Compare
Source](https://togithub.com/renovatebot/renovate/compare/37.363.9...37.364.0)

##### Features

- **presets:** add strum to monorepos
([#&#8203;29109](https://togithub.com/renovatebot/renovate/issues/29109))
([20716b0](https://togithub.com/renovatebot/renovate/commit/20716b060942d90466fd65388712b1558de4b554))

##### Miscellaneous Chores

- **deps:** update containerbase/internal-tools action to v3.0.87
([#&#8203;29108](https://togithub.com/renovatebot/renovate/issues/29108))
([e03a5cf](https://togithub.com/renovatebot/renovate/commit/e03a5cf0cbd1d566f2b19901882243ecd6dd6cfb))

##### Tests

- **osgi:** Use "codeBlock" for tests
([#&#8203;29110](https://togithub.com/renovatebot/renovate/issues/29110))
([2429a07](https://togithub.com/renovatebot/renovate/commit/2429a07eefbecb83408a9135bad600bee1af2544))

###
[`v37.363.9`](https://togithub.com/renovatebot/renovate/releases/tag/37.363.9)

[Compare
Source](https://togithub.com/renovatebot/renovate/compare/37.363.8...37.363.9)

##### Bug Fixes

- **deps:** update ghcr.io/renovatebot/base-image docker tag to v2.11.2
([#&#8203;29099](https://togithub.com/renovatebot/renovate/issues/29099))
([99ba857](https://togithub.com/renovatebot/renovate/commit/99ba857374c455b929790a538623638f17957898))

##### Documentation

- **config:** add note about GnuPG v2.4 usage
([#&#8203;29067](https://togithub.com/renovatebot/renovate/issues/29067))
([88fd212](https://togithub.com/renovatebot/renovate/commit/88fd2124ff0a410d3cbca1780954e499d1f94f7f))

###
[`v37.363.8`](https://togithub.com/renovatebot/renovate/releases/tag/37.363.8)

[Compare
Source](https://togithub.com/renovatebot/renovate/compare/37.363.7...37.363.8)

##### Bug Fixes

- **deps:** update ghcr.io/containerbase/sidecar docker tag to v10.6.10
([#&#8203;29096](https://togithub.com/renovatebot/renovate/issues/29096))
([1254f6a](https://togithub.com/renovatebot/renovate/commit/1254f6a66254c9202eb6724489f80d183f3f5586))

##### Documentation

- **bot comparison:** dependabot-core switched to MIT license
([#&#8203;29095](https://togithub.com/renovatebot/renovate/issues/29095))
([d9cd961](https://togithub.com/renovatebot/renovate/commit/d9cd9612eca0e5d262a4bb4c0d08d1c1871d299c))
- Update Swissquote article with information on the scheduler and
dashboards
([#&#8203;29030](https://togithub.com/renovatebot/renovate/issues/29030))
([01f9861](https://togithub.com/renovatebot/renovate/commit/01f9861069ccecbee921da41cabc7f6b8ddc5f14))

###
[`v37.363.7`](https://togithub.com/renovatebot/renovate/releases/tag/37.363.7)

[Compare
Source](https://togithub.com/renovatebot/renovate/compare/37.363.6...37.363.7)

##### Miscellaneous Chores

- **deps:** update ghcr.io/containerbase/devcontainer docker tag to
v10.6.10
([#&#8203;29091](https://togithub.com/renovatebot/renovate/issues/29091))
([dba9ad3](https://togithub.com/renovatebot/renovate/commit/dba9ad3353409461e1d7261662d4115461d80f75))

##### Build System

- **deps:** update dependency zod to v3.23.8
([#&#8203;29090](https://togithub.com/renovatebot/renovate/issues/29090))
([caedb6f](https://togithub.com/renovatebot/renovate/commit/caedb6f4528d87fc0f46f8d5a7a4c5c6443f098f))

###
[`v37.363.6`](https://togithub.com/renovatebot/renovate/releases/tag/37.363.6)

[Compare
Source](https://togithub.com/renovatebot/renovate/compare/37.363.5...37.363.6)

##### Bug Fixes

- **datasource/github-runners:** add Ubuntu 24.04 Noble Numbat as
unstable
([#&#8203;29088](https://togithub.com/renovatebot/renovate/issues/29088))
([e291ef0](https://togithub.com/renovatebot/renovate/commit/e291ef0dbdf515399d4cc97ff5aeb954ff2d5e8a))

###
[`v37.363.5`](https://togithub.com/renovatebot/renovate/releases/tag/37.363.5)

[Compare
Source](https://togithub.com/renovatebot/renovate/compare/37.363.4...37.363.5)

##### Bug Fixes

- **deps:** update ghcr.io/renovatebot/base-image docker tag to v2.11.1
([#&#8203;29079](https://togithub.com/renovatebot/renovate/issues/29079))
([945c4cf](https://togithub.com/renovatebot/renovate/commit/945c4cf8bae32b8309628ae51d95ed86b833852d))

##### Miscellaneous Chores

- **deps:** update codecov/codecov-action action to v4.4.0
([#&#8203;29080](https://togithub.com/renovatebot/renovate/issues/29080))
([78edb5b](https://togithub.com/renovatebot/renovate/commit/78edb5b0f857d9a3b6c4c62e30a63fe595219ee2))

##### Build System

- **deps:** update dependency zod to v3.23.7
([#&#8203;29077](https://togithub.com/renovatebot/renovate/issues/29077))
([ead5d55](https://togithub.com/renovatebot/renovate/commit/ead5d55a4986856d731ea13c9bec81987db38e8c))

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "before 4am on the first day of the
month" (UTC), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config help](https://togithub.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/slsa-framework/slsa-verifier).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNS4xNDQuMiIsInVwZGF0ZWRJblZlciI6IjM3LjM2OC4xMCIsInRhcmdldEJyYW5jaCI6Im1haW4ifQ==-->

Co-authored-by: Ramon Petgrave <32398091+ramonpetgrave64@users.noreply.github.com>
2024-06-27 18:54:52 +00:00
dependabot[bot]andlnx01 9fb6f246f8 chore(deps-dev): bump braces from 3.0.2 to 3.0.3 in /actions/installer (#780)
Bumps [braces](https://github.com/micromatch/braces) from 3.0.2 to
3.0.3.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/micromatch/braces/commit/74b2db2938fad48a2ea54a9c8bf27a37a62c350d"><code>74b2db2</code></a>
3.0.3</li>
<li><a
href="https://github.com/micromatch/braces/commit/88f1429a0f47e1dd3813de35211fc97ffda27f9e"><code>88f1429</code></a>
update eslint. lint, fix unit tests.</li>
<li><a
href="https://github.com/micromatch/braces/commit/415d660c3002d1ab7e63dbf490c9851da80596ff"><code>415d660</code></a>
Snyk js braces 6838727 (<a
href="https://redirect.github.com/micromatch/braces/issues/40">#40</a>)</li>
<li><a
href="https://github.com/micromatch/braces/commit/190510f79db1adf21d92798b0bb6fccc1f72c9d6"><code>190510f</code></a>
fix tests, skip 1 test in test/braces.expand</li>
<li><a
href="https://github.com/micromatch/braces/commit/716eb9f12d820b145a831ad678618731927e8856"><code>716eb9f</code></a>
readme bump</li>
<li><a
href="https://github.com/micromatch/braces/commit/a5851e57f45c3431a94d83fc565754bc10f5bbc3"><code>a5851e5</code></a>
Merge pull request <a
href="https://redirect.github.com/micromatch/braces/issues/37">#37</a>
from coderaiser/fix/vulnerability</li>
<li><a
href="https://github.com/micromatch/braces/commit/2092bd1fb108d2c59bd62e243b70ad98db961538"><code>2092bd1</code></a>
feature: braces: add maxSymbols (<a
href="https://github.com/micromatch/braces/issues/">https://github.com/micromatch/braces/issues/</a>...</li>
<li><a
href="https://github.com/micromatch/braces/commit/9f5b4cf47329351bcb64287223ffb6ecc9a5e6d3"><code>9f5b4cf</code></a>
fix: vulnerability (<a
href="https://security.snyk.io/vuln/SNYK-JS-BRACES-6838727">https://security.snyk.io/vuln/SNYK-JS-BRACES-6838727</a>)</li>
<li><a
href="https://github.com/micromatch/braces/commit/98414f9f1fabe021736e26836d8306d5de747e0d"><code>98414f9</code></a>
remove funding file</li>
<li><a
href="https://github.com/micromatch/braces/commit/665ab5d561c017a38ba7aafd92cc6655b91d8c14"><code>665ab5d</code></a>
update keepEscaping doc (<a
href="https://redirect.github.com/micromatch/braces/issues/27">#27</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/micromatch/braces/compare/3.0.2...3.0.3">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=braces&package-manager=npm_and_yarn&previous-version=3.0.2&new-version=3.0.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/slsa-framework/slsa-verifier/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-06-27 15:37:36 +00:00
96619e48c2 chore(deps): bump undici from 5.28.3 to 5.28.4 in /actions/installer (#779)
Bumps [undici](https://github.com/nodejs/undici) from 5.28.3 to 5.28.4.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/nodejs/undici/releases">undici's
releases</a>.</em></p>
<blockquote>
<h2>v5.28.4</h2>
<h2>⚠️ Security Release ⚠️</h2>
<ul>
<li>Fixes <a
href="https://github.com/nodejs/undici/security/advisories/GHSA-m4v8-wqvr-p9f7">https://github.com/nodejs/undici/security/advisories/GHSA-m4v8-wqvr-p9f7</a>
CVE-2024-30260</li>
<li>Fixes <a
href="https://github.com/nodejs/undici/security/advisories/GHSA-9qxr-qj54-h672">https://github.com/nodejs/undici/security/advisories/GHSA-9qxr-qj54-h672</a>
CVE-2024-30261</li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/nodejs/undici/compare/v5.28.3...v5.28.4">https://github.com/nodejs/undici/compare/v5.28.3...v5.28.4</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/nodejs/undici/commit/fb983069071f52e0a7ea0e71078459c765aae172"><code>fb98306</code></a>
Bumped v5.28.4</li>
<li><a
href="https://github.com/nodejs/undici/commit/2b39440bd9ded841c93dd72138f3b1763ae26055"><code>2b39440</code></a>
Merge pull request from GHSA-9qxr-qj54-h672</li>
<li><a
href="https://github.com/nodejs/undici/commit/64e3402da4e032e68de46acb52800c9a06aaea3f"><code>64e3402</code></a>
Merge pull request from GHSA-m4v8-wqvr-p9f7</li>
<li><a
href="https://github.com/nodejs/undici/commit/723c4e728051aefd5eb5ae7193dfb18046009f83"><code>723c4e7</code></a>
Revert &quot;build(deps-dev): bump formdata-node from 4.4.1 to 6.0.3 (<a
href="https://redirect.github.com/nodejs/undici/issues/2389">#2389</a>)&quot;</li>
<li><a
href="https://github.com/nodejs/undici/commit/0e9d54b2c2a5ec0b58937114c857a9ed9fe22d5b"><code>0e9d54b</code></a>
skip failing test due to Node.js changes</li>
<li>See full diff in <a
href="https://github.com/nodejs/undici/compare/v5.28.3...v5.28.4">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=undici&package-manager=npm_and_yarn&previous-version=5.28.3&new-version=5.28.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/slsa-framework/slsa-verifier/network/alerts).

</details>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: github-actions <github-actions@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: github-actions <github-actions@github.com>
Co-authored-by: Ramon Petgrave <32398091+ramonpetgrave64@users.noreply.github.com>
2024-06-27 14:28:25 +00:00
Mend Renovateandgithub-actions e7a8f74b9c fix(deps): update dependency @actions/core to v1.10.1 (#717)
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
|
[@actions/core](https://togithub.com/actions/toolkit/tree/main/packages/core)
([source](https://togithub.com/actions/toolkit/tree/HEAD/packages/core))
| [`1.10.0` ->
`1.10.1`](https://renovatebot.com/diffs/npm/@actions%2fcore/1.10.0/1.10.1)
|
[![age](https://developer.mend.io/api/mc/badges/age/npm/@actions%2fcore/1.10.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/@actions%2fcore/1.10.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/@actions%2fcore/1.10.0/1.10.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@actions%2fcore/1.10.0/1.10.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>actions/toolkit (@&#8203;actions/core)</summary>

###
[`v1.10.1`](https://togithub.com/actions/toolkit/blob/HEAD/packages/core/RELEASES.md#1101)

- Fix error message reference in oidc utils
[#&#8203;1511](https://togithub.com/actions/toolkit/pull/1511)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "before 4am on the first day of the
month" (UTC), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/slsa-framework/slsa-verifier).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy44LjEiLCJ1cGRhdGVkSW5WZXIiOiIzNy4zNDAuMTAiLCJ0YXJnZXRCcmFuY2giOiJtYWluIn0=-->

---------

Signed-off-by: Mend Renovate <bot@renovateapp.com>
Signed-off-by: github-actions <github-actions@github.com>
Co-authored-by: github-actions <github-actions@github.com>
2024-05-07 14:09:48 -04:00
Ramon PetgraveandMend Renovate bcc39bf21a chore(deps): update npm dev (major) (#753)
Redo of https://github.com/slsa-framework/slsa-verifier/pull/654

- Fix dev-dependencies related to es-lint that the renovate-bot couldn't
auto-fix

- a few commas automatically added by the new linter

- use node20 for tests to avoid caompatibility warnings

```
npm WARN EBADENGINE Unsupported engine {
npm WARN EBADENGINE   package: '@typescript-eslint/parser@7.5.0',
npm WARN EBADENGINE   required: { node: '^18.18.0 || >=20.0.0' },
npm WARN EBADENGINE   current: { node: 'v16.20.2', npm: '8.19.4' }
npm WARN EBADENGINE }
```

---------

Signed-off-by: Mend Renovate <bot@renovateapp.com>
Signed-off-by: Ramon Petgrave <32398091+ramonpetgrave64@users.noreply.github.com>
Co-authored-by: Mend Renovate <bot@renovateapp.com>
2024-04-02 17:44:08 -07:00
laurentsimon b1f986788d chore: Update @actions/github v6 (#749)
Need to re-compile
https://github.com/slsa-framework/slsa-verifier/pull/720/files

Signed-off-by: laurentsimon <laurentsimon@google.com>
2024-03-26 22:03:42 +00:00
laurentsimon 2184d9d604 chore: bump versions (#715)
Signed-off-by: laurentsimon <laurentsimon@google.com>
2023-10-10 00:27:33 +00:00
Mend Renovate 658d91aa82 chore(deps): update npm dev (#608)
Signed-off-by: Renovate Bot <bot@renovateapp.com>
2023-06-12 13:47:38 +09:00
Mend Renovate a86957c6a5 chore(deps): update dependency jasmine to v5 (#598)
Signed-off-by: Renovate Bot <bot@renovateapp.com>
2023-05-15 04:14:31 +00:00
Mend Renovate ab4b6b4cc7 chore(deps): update dependency @types/node to v18.16.9 (#596)
Signed-off-by: Renovate Bot <bot@renovateapp.com>
2023-05-15 03:55:18 +00:00
Mend RenovateandIan Lewis c9abffe4d2 chore(deps): update npm dev (#586)
Signed-off-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: Ian Lewis <ianlewis@google.com>
2023-05-10 00:48:36 +00:00
Mend Renovate 5c0baa4f3e chore(deps): update npm dev (#568)
Signed-off-by: Renovate Bot <bot@renovateapp.com>
2023-05-01 11:03:55 +09:00
Mend RenovateandIan Lewis 623cf20a23 fix(deps): update npm (#535)
* fix(deps): update npm

---------

Signed-off-by: Renovate Bot <bot@renovateapp.com>
Signed-off-by: Ian Lewis <ianlewis@google.com>
Co-authored-by: Ian Lewis <ianlewis@google.com>
2023-04-11 13:41:24 +09:00
Mend RenovateandIan Lewis 84c3bbdd84 chore(deps): update npm dev (#534)
Signed-off-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: Ian Lewis <ianlewis@google.com>
2023-04-11 10:57:38 +09:00
Mend RenovateandIan Lewis 3c5abb613f chore(deps): update dependency typescript to v5 (#545)
Signed-off-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: Ian Lewis <ianlewis@google.com>
2023-04-11 00:08:54 +00:00
Mend Renovate 1ed3847709 chore(deps): update npm dev (#517)
Signed-off-by: Renovate Bot <bot@renovateapp.com>
2023-03-14 11:58:36 +09:00
Mend Renovate 66931c71be chore(deps): update npm dev (#501)
Signed-off-by: Renovate Bot <bot@renovateapp.com>
2023-02-27 17:46:32 +09:00
Mend Renovate f2b8ee8fff chore(deps): update npm dev (#497)
Signed-off-by: Renovate Bot <bot@renovateapp.com>
2023-02-22 10:52:04 +09:00
Mend Renovate 878947f5e8 chore(deps): update npm dev (#482)
Signed-off-by: Renovate Bot <bot@renovateapp.com>
2023-02-13 09:46:28 +00:00
Mend Renovateandasraa 53ca117e3c chore(deps): update npm dev (#466)
Signed-off-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: asraa <asraa@google.com>
2023-02-06 15:01:12 +00:00
Mend Renovate 3c012d278e chore(deps): update npm dev (#459)
Signed-off-by: Renovate Bot <bot@renovateapp.com>
2023-01-30 05:23:26 -08:00
Mend Renovate fb8ab2af45 chore(deps): update npm dev (#445)
Signed-off-by: Renovate Bot <bot@renovateapp.com>
2023-01-16 05:51:13 +00:00
Mend Renovate 257c370894 chore(deps): update dependency prettier to v2.8.2 (#437)
Signed-off-by: Renovate Bot <bot@renovateapp.com>

Signed-off-by: Renovate Bot <bot@renovateapp.com>
2023-01-09 09:19:17 -06:00
Mend Renovate 71a4b4d2bb chore(deps): update npm dev (#428)
Signed-off-by: Renovate Bot <bot@renovateapp.com>
2023-01-05 02:25:41 +00:00
Mend Renovate 82cb42fb20 chore(deps): update dependency @types/node to v18.11.17 (#416) 2022-12-18 09:56:35 +09:00
Mend Renovate a88e26b866 chore(deps): update npm dev (#415) 2022-12-17 16:04:09 +09:00
Mend RenovateandIan Lewis b1aad15c35 chore(deps): update npm dev (#383)
Co-authored-by: Ian Lewis <ianlewis@google.com>
2022-12-16 00:41:58 +00:00
WhiteSource Renovateandasraa 12d81454a0 chore(deps): update dependency @types/node to v18.11.8 (#341)
Co-authored-by: asraa <asraa@google.com>
2022-10-31 16:38:18 +00:00
WhiteSource Renovate f0d1b30dca chore(deps): update dependency jasmine to v4.5.0 (#345) 2022-10-31 09:24:08 -05:00
WhiteSource RenovateandIan Lewis 585539ab5f chore(deps): update dependency typescript to v4.8.4 (#270)
Co-authored-by: Ian Lewis <ianlewis@google.com>
2022-10-28 04:58:23 +00:00
WhiteSource Renovateandasraa 429634c0e6 chore(deps): update dependency eslint to v8.26.0 (#323)
Co-authored-by: asraa <asraa@google.com>
2022-10-25 14:55:53 +00:00
kpk47 37cf8fd48d Fix installer: Add arguments to actions/checkout so that it checks ou… (#319)
* Fix installer: Add arguments to actions/checkout so that it checks out slsa-framework/slsa-verifier instead of the repo using the Action.

Signed-off-by: kpk47 <kkris@google.com>

* Switch to JS action

* rebuild TS

Signed-off-by: kpk47 <kkris@google.com>
2022-10-25 10:42:00 +00:00
WhiteSource Renovate 4ec69efd87 chore(deps): update dependency eslint to v8.25.0 (#273) 2022-10-17 13:25:37 -05:00
WhiteSource Renovateandasraa 94b6087e2b chore(deps): update dependency eslint-plugin-github to v4.4.0 (#305)
Co-authored-by: asraa <asraa@google.com>
2022-10-17 11:26:05 -05:00
WhiteSource Renovate 300cb9003d chore(deps): update dependency jasmine to v4.4.0 (#283) 2022-10-05 15:44:34 -05:00
WhiteSource RenovateandIan Lewis fc50b662fc chore(deps): pin dependencies (#269)
Co-authored-by: Ian Lewis <ianlewis@google.com>
2022-10-04 01:00:02 +00:00
kpk47 b9c3c9d87e Add a GitHub Action for installing slsa-verifier. (#246) 2022-09-22 18:58:40 +00:00