build(deps): bump the dependencies group with 15 updates#7
Open
dependabot[bot] wants to merge 1 commit intofeature/construct-x-assetsfrom
Open
Conversation
Bumps the dependencies group with 15 updates: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `4.2.2` | `5.0.0` | | [azure/docker-login](https://github.com/azure/docker-login) | `1` | `2` | | [docker/metadata-action](https://github.com/docker/metadata-action) | `5.7.0` | `5.8.0` | | [docker/build-push-action](https://github.com/docker/build-push-action) | `6.15.0` | `6.18.0` | | [github/codeql-action](https://github.com/github/codeql-action) | `3.28.11` | `3.30.5` | | [actions/setup-java](https://github.com/actions/setup-java) | `4.7.0` | `5.0.0` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4.6.1` | `4.6.2` | | [checkmarx/kics-github-action](https://github.com/checkmarx/kics-github-action) | `2.1.5` | `2.1.14` | | [amannn/action-semantic-pull-request](https://github.com/amannn/action-semantic-pull-request) | `5.5.3` | `6.1.1` | | [marocchino/sticky-pull-request-comment](https://github.com/marocchino/sticky-pull-request-comment) | `2.9.1` | `2.9.4` | | [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `3.10.0` | `3.11.1` | | [docker/login-action](https://github.com/docker/login-action) | `3.3.0` | `3.6.0` | | [peter-evans/dockerhub-description](https://github.com/peter-evans/dockerhub-description) | `4.0.0` | `4.0.2` | | [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) | `0.29.0` | `0.33.1` | | [trufflesecurity/trufflehog](https://github.com/trufflesecurity/trufflehog) | `3.88.16` | `3.90.8` | Updates `actions/checkout` from 4.2.2 to 5.0.0 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@11bd719...08c6903) Updates `azure/docker-login` from 1 to 2 - [Release notes](https://github.com/azure/docker-login/releases) - [Commits](Azure/docker-login@v1...v2) Updates `docker/metadata-action` from 5.7.0 to 5.8.0 - [Release notes](https://github.com/docker/metadata-action/releases) - [Commits](docker/metadata-action@902fa8e...c1e5197) Updates `docker/build-push-action` from 6.15.0 to 6.18.0 - [Release notes](https://github.com/docker/build-push-action/releases) - [Commits](docker/build-push-action@471d1dc...2634353) Updates `github/codeql-action` from 3.28.11 to 3.30.5 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@6bb031a...3599b3b) Updates `actions/setup-java` from 4.7.0 to 5.0.0 - [Release notes](https://github.com/actions/setup-java/releases) - [Commits](actions/setup-java@3a4f6e1...dded088) Updates `actions/upload-artifact` from 4.6.1 to 4.6.2 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@4cec3d8...ea165f8) Updates `checkmarx/kics-github-action` from 2.1.5 to 2.1.14 - [Release notes](https://github.com/checkmarx/kics-github-action/releases) - [Commits](Checkmarx/kics-github-action@3246fb4...c11ca46) Updates `amannn/action-semantic-pull-request` from 5.5.3 to 6.1.1 - [Release notes](https://github.com/amannn/action-semantic-pull-request/releases) - [Changelog](https://github.com/amannn/action-semantic-pull-request/blob/main/CHANGELOG.md) - [Commits](amannn/action-semantic-pull-request@0723387...48f2562) Updates `marocchino/sticky-pull-request-comment` from 2.9.1 to 2.9.4 - [Release notes](https://github.com/marocchino/sticky-pull-request-comment/releases) - [Commits](marocchino/sticky-pull-request-comment@52423e0...7737449) Updates `docker/setup-buildx-action` from 3.10.0 to 3.11.1 - [Release notes](https://github.com/docker/setup-buildx-action/releases) - [Commits](docker/setup-buildx-action@b5ca514...e468171) Updates `docker/login-action` from 3.3.0 to 3.6.0 - [Release notes](https://github.com/docker/login-action/releases) - [Commits](docker/login-action@9780b0c...5e57cd1) Updates `peter-evans/dockerhub-description` from 4.0.0 to 4.0.2 - [Release notes](https://github.com/peter-evans/dockerhub-description/releases) - [Commits](peter-evans/dockerhub-description@e98e4d1...432a30c) Updates `aquasecurity/trivy-action` from 0.29.0 to 0.33.1 - [Release notes](https://github.com/aquasecurity/trivy-action/releases) - [Commits](aquasecurity/trivy-action@18f2510...b6643a2) Updates `trufflesecurity/trufflehog` from 3.88.16 to 3.90.8 - [Release notes](https://github.com/trufflesecurity/trufflehog/releases) - [Changelog](https://github.com/trufflesecurity/trufflehog/blob/main/.goreleaser.yml) - [Commits](trufflesecurity/trufflehog@c1f2e91...466da5b) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 5.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: azure/docker-login dependency-version: '2' dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: docker/metadata-action dependency-version: 5.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: docker/build-push-action dependency-version: 6.18.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: github/codeql-action dependency-version: 3.30.5 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: actions/setup-java dependency-version: 5.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: actions/upload-artifact dependency-version: 4.6.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: checkmarx/kics-github-action dependency-version: 2.1.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: amannn/action-semantic-pull-request dependency-version: 6.1.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: marocchino/sticky-pull-request-comment dependency-version: 2.9.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: docker/setup-buildx-action dependency-version: 3.11.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: docker/login-action dependency-version: 3.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: peter-evans/dockerhub-description dependency-version: 4.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: aquasecurity/trivy-action dependency-version: 0.33.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: trufflesecurity/trufflehog dependency-version: 3.90.8 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies ... Signed-off-by: dependabot[bot] <support@github.com>
Author
LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the dependencies group with 15 updates:
4.2.25.0.0125.7.05.8.06.15.06.18.03.28.113.30.54.7.05.0.04.6.14.6.22.1.52.1.145.5.36.1.12.9.12.9.43.10.03.11.13.3.03.6.04.0.04.0.20.29.00.33.13.88.163.90.8Updates
actions/checkoutfrom 4.2.2 to 5.0.0Release notes
Sourced from actions/checkout's releases.
Changelog
Sourced from actions/checkout's changelog.
... (truncated)
Commits
08c6903Prepare v5.0.0 release (#2238)9f26565Update actions checkout to use node 24 (#2226)08eba0bPrepare release v4.3.0 (#2237)631c7dcUpdate package dependencies (#2236)8edcb1bUpdate CODEOWNERS for actions (#2224)09d2acaUpdate README.md (#2194)85e6279Adjust positioning of user email note and permissions heading (#2044)009b9aeDocumentation update - add recommended permissions to Readme (#2043)cbb7224Update README.md (#1977)3b9b8c8docs: update README.md (#1971)Updates
azure/docker-loginfrom 1 to 2Release notes
Sourced from azure/docker-login's releases.
Commits
15c4aadMerge pull request #69 from lgmorand/master8fa230aadd node_modulescf67284action/core => last version7aabc0arebuild lockaf42a18fix some npm packages after upgrade to node203fe855cUpdate README.md to use v2f3bf641Merge pull request #64 from eikooc/masterb35be4dUpdate to nodejs v2051016b5Merge pull request #61 from Azure/stephenmichaelf/remove-integration-tests6a8199fRemove Integration tests.Updates
docker/metadata-actionfrom 5.7.0 to 5.8.0Release notes
Sourced from docker/metadata-action's releases.
Commits
c1e5197Merge pull request #537 from crazy-max/pep440-match89dd65achore: update generated content699ee45allow to match part of the git tag or value for pep440 typee0542a6Merge pull request #536 from crazy-max/semver-matchb7facdfchore: update generated content81c60dfallow to match part of the git tag or value for semver typede11195Merge pull request #535 from crazy-max/not_def_branch2f9c64bMerge pull request #533 from docker/dependabot/npm_and_yarn/form-data-2.5.5510f746chore: update generated content2bc3f4eis_not_default_branch global expressionUpdates
docker/build-push-actionfrom 6.15.0 to 6.18.0Release notes
Sourced from docker/build-push-action's releases.
Commits
2634353Merge pull request #1381 from docker/dependabot/npm_and_yarn/docker/actions-t...c0432d2chore: update generated content0bb1f27set builder driver and endpoint attributes for dbc summary support5f9dbf9chore(deps): Bump@docker/actions-toolkitfrom 0.61.0 to 0.62.10788c44Merge pull request #1375 from crazy-max/remove-gcraa179cae2e: remove GCR1dc7386Merge pull request #1364 from crazy-max/history-export-cmd9c9803fchore: update generated contentdb1f6c4DOCKER_BUILD_EXPORT_LEGACY env var to opt-in for legacy export721e8c7Bump@docker/actions-toolkitfrom 0.59.0 to 0.61.0Updates
github/codeql-actionfrom 3.28.11 to 3.30.5Release notes
Sourced from github/codeql-action's releases.
... (truncated)
Changelog
Sourced from github/codeql-action's changelog.
... (truncated)
Commits
3599b3bMerge pull request #3161 from github/update-v3.30.5-0a67bd46a2ca0085Update changelog for v3.30.50a67bd4Merge pull request #3160 from github/mbg/fix/upload-sarif8e34f2fAdd changelog0b7fc56Fixupload-sarifnot uploading non-.sariffiles94a9b7aMerge pull request #3155 from github/mbg/node/no-install-in-actionsa0ae9baLog what the script is doingb27a8efExit if running in an Actions workflow6592567Merge pull request #3139 from github/henrymercer/fix-log-messagefa64a7dMerge pull request #3154 from github/mbg/node/check-up-to-date-depsUpdates
actions/setup-javafrom 4.7.0 to 5.0.0Release notes
Sourced from actions/setup-java's releases.
Commits
dded088Bump actions/checkout from 4 to 5 (#896)0913e9aUpgrade to node 24 (#888)e9343dbBumps form-data (#887)ae2b61dBump undici from 5.28.5 to 5.29.0 (#833)c190c18Bump eslint-plugin-jest from 27.9.0 to 29.0.1 (#730)67aec00Fix: prevent default installation of JetBrains pre-releases (#859)ebb356cImprove Error Handling for Setup-Java Action to Help Debug Intermittent Failu...f4f1212Update publish-immutable-actions.yml (#798)c5195efactions/cache upgrade to 4.0.3 (#773)dd38875Bump ts-jest from 29.1.2 to 29.2.5 (#743)Updates
actions/upload-artifactfrom 4.6.1 to 4.6.2Release notes
Sourced from actions/upload-artifact's releases.
Commits
ea165f8Merge pull request #685 from salmanmkc/salmanmkc/3-new-upload-artifacts-release0839620Prepare for new release of actions/upload-artifact with new toolkit cache ver...Updates
checkmarx/kics-github-actionfrom 2.1.5 to 2.1.14Release notes
Sourced from checkmarx/kics-github-action's releases.
... (truncated)
Commits
c11ca46Update kics to version 2.1.14 (#141)7145454bump kics version to 2-1-13 (#139)cd1f377bumps kics version to 2.1.12 (#136)3545b74bump kics version to 2.1.11 (#133)c06a133Update kics to version 2.1.10 (#132)1141bdaUpdateKicsVersionTo219 (#131)c456d04Merge pull request #129 from Checkmarx/UpdateKICSVersionTo218d83c04eupdate kics version to 2185373b38Merge pull request #127 from Checkmarx/updateKicsVersionTo217061d0d8update kics dockerfile versionUpdates
amannn/action-semantic-pull-requestfrom 5.5.3 to 6.1.1Release notes
Sourced from amannn/action-semantic-pull-request's releases.
Changelog
Sourced from amannn/action-semantic-pull-request's changelog.
... (truncated)
Commits
48f2562chore: Release 6.1.1 [skip ci]800da4cfix: ParseheaderPatternCorrespondenceproperly (#295)677b895test: Fix broken test24e6f01ci: Fix permissions for tagger7f33ba7chore: Release 6.1.0 [skip ci]afa4edbfix: Remove trailing whitespace from "unknown release type" error message (#291)a30288bfeat: Support providing regexps for types (#292)a46a7c8build: Move Vitest todevDependencies(#290)fdd4d3dchore: Release 6.0.1 [skip ci]58e4ab4fix: Actually execute action (#289)Updates
marocchino/sticky-pull-request-commentfrom 2.9.1 to 2.9.4Release notes
Sourced from marocchino/sticky-pull-request-comment's releases.