chore(deps): update maru support dependencies by renovate[bot] · Pull Request #222 · defenseunicorns/maru-runner

renovate · 2025-08-07T18:45:11Z

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	minor	`v4.2.2` -> `v4.3.0`
actions/create-github-app-token	action	minor	`v2.0.6` -> `v2.1.1`
actions/dependency-review-action	action	patch	`v4.7.1` -> `v4.7.2`
anchore/sbom-action	action	patch	`v0.20.4` -> `v0.20.5`
github/codeql-action	action	patch	`v3.29.5` -> `v3.29.10`
go	uses-with	minor	`1.24.x` -> `1.25.x`
goreleaser/goreleaser-action	action	minor	`v6.3.0` -> `v6.4.0`
pre-commit/action	action	digest	`576ff52` -> `1b06ec1`
zarf-dev/zarf		minor	`v0.59.0` -> `v0.60.0`

Release Notes

actions/checkout (actions/checkout)

actions/create-github-app-token (actions/create-github-app-token)

`v2.1.1`

Compare Source

Bug Fixes

revert "use node24 as runner" (#278) (5204204), closes actions/create-github-app-token#267

`v2.1.0`

Compare Source

Features

use node24 as runner (#267) (a1cbe0f)

actions/dependency-review-action (actions/dependency-review-action)

`v4.7.2`

Compare Source

anchore/sbom-action (anchore/sbom-action)

`v0.20.5`

Compare Source

Changes in v0.20.5

Update Syft to v1.31.0 (#531)

github/codeql-action (github/codeql-action)

`v3.29.10`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.29.10 - 18 Aug 2025

No user facing changes.

See the full CHANGELOG.md for more information.

`v3.29.9`

Compare Source

`v3.29.8`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.29.8 - 08 Aug 2025

Fix an issue where the Action would autodetect unsupported languages such as HTML. #3015

See the full CHANGELOG.md for more information.

`v3.29.7`

Compare Source

This is a re-release of v3.29.5 to mitigate an issue that was discovered with v3.29.6.

`v3.29.6`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.29.6 - 07 Aug 2025

The cleanup-level input to the analyze Action is now deprecated. The CodeQL Action has written a limited amount of intermediate results to the database since version 2.2.5, and now automatically manages cleanup. #2999
Update default CodeQL bundle version to 2.22.3. #3000

See the full CHANGELOG.md for more information.

actions/go-versions (go)

`v1.25.0`: 1.25.0

Compare Source

Go 1.25.0

goreleaser/goreleaser-action (goreleaser/goreleaser-action)

`v6.4.0`

Compare Source

What's Changed

ci: set contents read as default workflow permissions by @crazy-max in https://github.com/goreleaser/goreleaser-action/pull/494
fix: support .config directory for goreleaser config files by @haya14busa in https://github.com/goreleaser/goreleaser-action/pull/500
chore(deps): bump semver from 7.7.1 to 7.7.2 by @dependabot[bot] inhttps://github.com/goreleaser/goreleaser-action/pull/4955
chore(deps): bump brace-expansion from 1.1.11 to 1.1.12 by @dependabot[bot] inhttps://github.com/goreleaser/goreleaser-action/pull/4988
fix: do not get releases.json if version is specific by @caarlos0 in https://github.com/goreleaser/goreleaser-action/pull/502
chore(deps): bump undici from 5.28.5 to 5.29.0 by @dependabot[bot] inhttps://github.com/goreleaser/goreleaser-action/pull/4966
feat: retry downloading releases json by @caarlos0 in https://github.com/goreleaser/goreleaser-action/pull/503

New Contributors

@haya14busa made their first contribution in https://github.com/goreleaser/goreleaser-action/pull/500

Full Changelog: goreleaser/goreleaser-action@v6.3.0...v6.4.0

zarf-dev/zarf (zarf-dev/zarf)

`v0.60.0`

Compare Source

What's Changed

🚀 Updates

feat: allow the creation of skeleton flavored packages by @a1994sc in https://github.com/zarf-dev/zarf/pull/3986
fix(tools): update-creds handle registry subpaths by @brandtkeller in https://github.com/zarf-dev/zarf/pull/4026
chore(docs): update tutorial with images example by @brandtkeller in https://github.com/zarf-dev/zarf/pull/4038
fix: allow absolute paths in zarf.yaml by @AustinAbro321 in https://github.com/zarf-dev/zarf/pull/4042
chore: remove flakey unit test by @AustinAbro321 in https://github.com/zarf-dev/zarf/pull/4050
chore: update case for find images by @a1994sc in https://github.com/zarf-dev/zarf/pull/4023
feat(feature): Implement Feature API by @mkcp in https://github.com/zarf-dev/zarf/pull/4039

📦 Dependencies

chore(deps): bump github.com/mikefarah/yq/v4 from 4.46.1 to 4.47.1 by @dependabot[bot] inhttps://github.com/zarf-dev/zarf/pull/40188
chore(deps): bump github.com/pterm/pterm from 0.12.79 to 0.12.81 by @dependabot[bot] inhttps://github.com/zarf-dev/zarf/pull/39322
chore(deps): bump sigs.k8s.io/yaml from 1.5.0 to 1.6.0 by @dependabot[bot] inhttps://github.com/zarf-dev/zarf/pull/40211
chore(deps): bump github.com/sigstore/cosign/v2 from 2.5.2 to 2.5.3 by @dependabot[bot] inhttps://github.com/zarf-dev/zarf/pull/40100
chore(deps): bump github.com/docker/docker from 28.3.2+incompatible to 28.3.3+incompatible by @dependabot[bot] inhttps://github.com/zarf-dev/zarf/pull/40255
chore(deps): bump github/codeql-action from 3.29.4 to 3.29.5 by @dependabot[bot] inhttps://github.com/zarf-dev/zarf/pull/40277
chore(deps): bump github.com/docker/cli from 28.3.2+incompatible to 28.3.3+incompatible in the docker group across 1 directory by @dependabot[bot] inhttps://github.com/zarf-dev/zarf/pull/40300
chore(deps): bump github.com/anchore/stereoscope from 0.1.7-0.20250716200927-94c6f92877d4 to 0.1.7 by @dependabot[bot] inhttps://github.com/zarf-dev/zarf/pull/40299
chore(deps): bump github.com/anchore/syft from 1.29.0 to 1.29.1 by @dependabot[bot] inhttps://github.com/zarf-dev/zarf/pull/40322
chore(deps): bump github.com/prometheus/client_golang from 1.22.0 to 1.23.0 by @dependabot[bot] inhttps://github.com/zarf-dev/zarf/pull/40366
chore(deps): bump github.com/fairwindsops/pluto/v5 from 5.22.1 to 5.22.2 by @dependabot[bot] inhttps://github.com/zarf-dev/zarf/pull/40411
chore(deps): bump docker/login-action from 3.4.0 to 3.5.0 by @dependabot[bot] inhttps://github.com/zarf-dev/zarf/pull/40433
chore(deps): bump aws-actions/configure-aws-credentials from 4.2.1 to 4.3.1 by @dependabot[bot] inhttps://github.com/zarf-dev/zarf/pull/40444
chore(deps): bump actions/download-artifact from 4.3.0 to 5.0.0 by @dependabot[bot] inhttps://github.com/zarf-dev/zarf/pull/40499

Full Changelog: zarf-dev/zarf@v0.59.0...v0.60.0

Configuration

📅 Schedule: Branch creation - "after 12pm every weekday,before 11am every weekday" in timezone America/New_York, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

| datasource | package | from | to | | --------------- | -------------------------------- | ------- | -------- | | github-tags | actions/checkout | v4.2.2 | v4.3.0 | | github-tags | actions/create-github-app-token | v2.0.6 | v2.1.1 | | github-tags | actions/dependency-review-action | v4.7.1 | v4.7.2 | | github-tags | anchore/sbom-action | v0.20.4 | v0.20.5 | | github-tags | github/codeql-action | v3.29.5 | v3.29.10 | | github-releases | actions/go-versions | 1.24.6 | 1.25.0 | | github-tags | goreleaser/goreleaser-action | v6.3.0 | v6.4.0 | | github-tags | zarf-dev/zarf | v0.59.0 | v0.60.0 |

renovate Bot added the support-deps label Aug 7, 2025

renovate Bot requested a review from a team as a code owner August 7, 2025 18:45

renovate Bot changed the title ~~chore(deps): update support-deps to v3.29.6~~ chore(deps): update maru support dependencies Aug 7, 2025

renovate Bot force-pushed the renovate/maru-support-dependencies branch 10 times, most recently from 572041f to aa1e81a Compare August 14, 2025 19:02

renovate Bot force-pushed the renovate/maru-support-dependencies branch from aa1e81a to 16a4ed8 Compare August 18, 2025 16:25

renovate Bot force-pushed the renovate/maru-support-dependencies branch from 16a4ed8 to 311e0c6 Compare August 18, 2025 23:30

Noxsios approved these changes Aug 19, 2025

View reviewed changes

Noxsios merged commit 908a9fd into main Aug 19, 2025
9 checks passed

Noxsios deleted the renovate/maru-support-dependencies branch August 19, 2025 00:08

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): update maru support dependencies#222

chore(deps): update maru support dependencies#222
Noxsios merged 1 commit intomainfrom
renovate/maru-support-dependencies

renovate Bot commented Aug 7, 2025 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

renovate Bot commented Aug 7, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

New Contributors

Bug Fixes

Features

Changes in v0.20.5

CodeQL Action Changelog

3.29.10 - 18 Aug 2025

CodeQL Action Changelog

3.29.8 - 08 Aug 2025

CodeQL Action Changelog

3.29.6 - 07 Aug 2025

v1.25.0: 1.25.0

What's Changed

New Contributors

What's Changed

🚀 Updates

📦 Dependencies

Configuration

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

renovate Bot commented Aug 7, 2025 •

edited

Loading

`v1.25.0`: 1.25.0