Update all dependencies #153

renovate · 2024-04-01T00:35:54Z

This PR contains the following updates:

Package	Type	Update	Change
actions/cache	action	patch	`v4.0.1` -> `v4.0.2`
actions/checkout	action	patch	`v4.1.1` -> `v4.1.7`
actions/upload-artifact	action	patch	`v4.3.1` -> `v4.3.3`
erlef/setup-beam	action	patch	`v1.17.5` -> `v1.17.6`
ex_doc		minor	`~> 0.31` -> `~> 0.34`
github/codeql-action	action	minor	`v3.24.6` -> `v3.25.10`
ossf/scorecard-action	action	patch	`v2.3.1` -> `v2.3.3`
step-security/harden-runner	action	minor	`v2.7.0` -> `v2.8.1`

Release Notes

actions/cache (actions/cache)

`v4.0.2`

Compare Source

actions/checkout (actions/checkout)

`v4.1.7`

Compare Source

Bump the minor-npm-dependencies group across 1 directory with 4 updates by @dependabot in https://github.com/actions/checkout/pull/1739
Bump actions/checkout from 3 to 4 by @dependabot in https://github.com/actions/checkout/pull/1697
Check out other refs/* by commit by @orhantoy in https://github.com/actions/checkout/pull/1774
Pin actions/checkout's own workflows to a known, good, stable version. by @jww3 in https://github.com/actions/checkout/pull/1776

`v4.1.6`

Compare Source

Check platform to set archive extension appropriately by @cory-miller in https://github.com/actions/checkout/pull/1732

What's Changed

Update actions/checkout version in update-main-version.yml by @jww3 in https://github.com/actions/checkout/pull/1650
Check git version before attempting to disable sparse-checkout by @jww3 in https://github.com/actions/checkout/pull/1656
Add SSH user parameter by @cory-miller in https://github.com/actions/checkout/pull/1685

Full Changelog: actions/checkout@v4.1.2...v4.1.3

`v4.1.2`

Compare Source

Fix: Disable sparse checkout whenever sparse-checkout option is not present @dscho in https://github.com/actions/checkout/pull/1598

actions/upload-artifact (actions/upload-artifact)

`v4.3.3`

Compare Source

What's Changed

updating @actions/artifact dependency to v2.1.6 by @eggyhead in https://github.com/actions/upload-artifact/pull/565

Full Changelog: actions/upload-artifact@v4.3.2...v4.3.3

`v4.3.2`

Compare Source

What's Changed

Update release-new-action-version.yml by @konradpabjan in https://github.com/actions/upload-artifact/pull/516
Minor fix to the migration readme by @andrewakim in https://github.com/actions/upload-artifact/pull/523
Update readme with v3/v2/v1 deprecation notice by @robherley in https://github.com/actions/upload-artifact/pull/561
updating @actions/artifact dependency to v2.1.5 and @actions/core to v1.0.1 by @eggyhead in https://github.com/actions/upload-artifact/pull/562

New Contributors

@andrewakim made their first contribution in https://github.com/actions/upload-artifact/pull/523

Full Changelog: actions/upload-artifact@v4.3.1...v4.3.2

erlef/setup-beam (erlef/setup-beam)

`v1.17.6`

Compare Source

What's Changed

Update 3rd party licenses (automation) by @github-actions in https://github.com/erlef/setup-beam/pull/265, https://github.com/erlef/setup-beam/pull/268, and https://github.com/erlef/setup-beam/pull/273
Add GITHUB_TOKEN information to contributing guide by @sax in https://github.com/erlef/setup-beam/pull/272
Add support for Ubuntu 24 by @sax in https://github.com/erlef/setup-beam/pull/271
Test over OTP 27 and rebar3 3.23 by @paulo-ferraz-oliveira in https://github.com/erlef/setup-beam/pull/274

New Contributors

@sax made their first contribution in https://github.com/erlef/setup-beam/pull/272

Full Changelog: erlef/setup-beam@v1.17...v1.17.6

github/codeql-action (github/codeql-action)

`v3.25.10`

Compare Source

`v3.25.9`

Compare Source

`v3.25.8`

Compare Source

`v3.25.7`

Compare Source

`v3.25.6`

Compare Source

`v3.25.5`

Compare Source

`v3.25.4`

Compare Source

`v3.25.3`

Compare Source

`v3.25.2`

Compare Source

`v3.25.1`

Compare Source

`v3.25.0`

Compare Source

`v3.24.11`

Compare Source

`v3.24.10`

Compare Source

`v3.24.9`

Compare Source

`v3.24.8`

Compare Source

`v3.24.7`

Compare Source

ossf/scorecard-action (ossf/scorecard-action)

`v2.3.3`

Compare Source

[!NOTE]
There is no v2.3.2 release as a step was skipped in the release process. This was fixed and re-released under the v2.3.3 tag

What's Changed

🌱 Bump github.com/ossf/scorecard/v4 (v4.13.1) to github.com/ossf/scorecard/v5 (v5.0.0-rc1) by @spencerschrock in https://github.com/ossf/scorecard-action/pull/1366
🌱 Bump github.com/ossf/scorecard/v5 from v5.0.0-rc1 to v5.0.0-rc2 by @spencerschrock in https://github.com/ossf/scorecard-action/pull/1374
🌱 Bump github.com/ossf/scorecard/v5 from v5.0.0-rc2 to v5.0.0-rc2.0.20240509182734-7ce860946928 by @spencerschrock in https://github.com/ossf/scorecard-action/pull/1377

For a full changelist of what these include, see the v5.0.0-rc1 and v5.0.0-rc2 release notes.

Documentation

📖 Move token discussion out of main README. by @spencerschrock in https://github.com/ossf/scorecard-action/pull/1279
📖 link to ossf/scorecard workflow instead of maintaining an example by @spencerschrock in https://github.com/ossf/scorecard-action/pull/1352
📖 update api links to new scorecard.dev site by @spencerschrock in https://github.com/ossf/scorecard-action/pull/1376

Full Changelog: ossf/scorecard-action@v2.3.1...v2.3.3

`v2.3.2`

Compare Source

step-security/harden-runner (step-security/harden-runner)

`v2.8.1`

Compare Source

What's Changed

Bug fix: Update isGitHubHosted implementation by @varunsh-coder in https://github.com/step-security/harden-runner/pull/425
The previous implementation incorrectly identified large GitHub-hosted runners as self-hosted runners. As a result, harden-runner was not executing on these large GitHub-hosted runners.

Full Changelog: step-security/harden-runner@v2...v2.8.1

`v2.8.0`

Compare Source

What's Changed

Release v2.8.0 by @h0x0er and @varunsh-coder in https://github.com/step-security/harden-runner/pull/416
This release includes:

File Monitoring Enhancements: Adds the capability to view the name and path of every file written during the build process.
Process Tracking Enhancements: Adds the capability to view process names and arguments of processes run during the build process.

These enhancements are based on insights from the XZ Utils incident, aimed at improving observability and detections during the build process.

Full Changelog: step-security/harden-runner@v2...v2.8.0

`v2.7.1`

Compare Source

What's Changed

Release v2.7.1 by @varunsh-coder, @h0x0er, @ashishkurmi in https://github.com/step-security/harden-runner/pull/397
This release:

Improves the capability to inspect outbound HTTPS traffic on GitHub-hosted and self-hosted VM runners
Updates README to add link to case study video on how Harden-Runner detected a supply chain attack on a Google open-source project
Addresses minor bugs

Full Changelog: step-security/harden-runner@v2.7.0...v2.7.1

Configuration

📅 Schedule: Branch creation - "before 4am on the first day of the month" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

renovate · 2024-06-12T16:50:36Z

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: mix.lock

Command failed: install-tool elixir v1.17.0

renovate bot force-pushed the renovate/all branch 2 times, most recently from d14d7bc to a403d95 Compare April 10, 2024 13:17

renovate bot force-pushed the renovate/all branch 3 times, most recently from 1d2e66b to e9c9b3d Compare April 18, 2024 17:32

renovate bot force-pushed the renovate/all branch 4 times, most recently from 3198b34 to 02d37df Compare April 26, 2024 02:20

renovate bot force-pushed the renovate/all branch from 02d37df to 67a03d4 Compare April 30, 2024 02:01

renovate bot force-pushed the renovate/all branch 4 times, most recently from 91d4d6c to b47b5de Compare May 13, 2024 13:25

renovate bot force-pushed the renovate/all branch 4 times, most recently from 0a89819 to c98f91c Compare May 22, 2024 01:36

renovate bot force-pushed the renovate/all branch 4 times, most recently from f2760c5 to 4aa6cf7 Compare June 4, 2024 21:50

renovate bot force-pushed the renovate/all branch 2 times, most recently from 1ffd3de to 0222257 Compare June 12, 2024 16:50

renovate bot force-pushed the renovate/all branch from 0222257 to c1c77ae Compare June 12, 2024 21:24

Update all dependencies

6971ba6

renovate bot force-pushed the renovate/all branch from c1c77ae to 6971ba6 Compare June 13, 2024 17:09

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Update all dependencies #153

Update all dependencies #153

renovate bot commented Apr 1, 2024 •

edited

renovate bot commented Jun 12, 2024

Update all dependencies #153

Are you sure you want to change the base?

Update all dependencies #153

Conversation

renovate bot commented Apr 1, 2024 • edited

Release Notes

What's Changed

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

Documentation

What's Changed

What's Changed

What's Changed

Configuration

renovate bot commented Jun 12, 2024

⚠️ Artifact update problem

File name: mix.lock

renovate bot commented Apr 1, 2024 •

edited