Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update all dependencies #257

Merged
merged 4 commits into from
May 2, 2023
Merged

Update all dependencies #257

merged 4 commits into from
May 2, 2023

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented May 1, 2023

Mend Renovate

This PR contains the following updates:

Package Type Update Change
actions/checkout action patch v3.5.0 -> v3.5.2
erlef/setup-elixir action patch v1.15.2 -> v1.15.4
github/codeql-action action minor v2.2.9 -> v2.3.2
ossf/scorecard-action action patch v2.1.2 -> v2.1.3
step-security/harden-runner action minor v2.2.1 -> v2.3.1

Release Notes

actions/checkout

v3.5.2

Compare Source

v3.5.1

Compare Source

erlef/setup-elixir

v1.15.4

Compare Source

What's Changed

Full Changelog: erlef/setup-beam@v1.15...v1.15.4

v1.15.3

Compare Source

What's Changed

Full Changelog: erlef/setup-beam@v1.15.2...v1.15.3

github/codeql-action

v2.3.2

Compare Source

v2.3.1

Compare Source

v2.3.0

Compare Source

v2.2.12

Compare Source

v2.2.11

Compare Source

v2.2.10

Compare Source

ossf/scorecard-action

v2.1.3

Compare Source

What's Changed

Bug Fixes
  • Invalid SARIF files from a bug in scorecard
  • Vulnerabilities check crashes if a vulnerable dependency is found via OSVScanner
  • Scorecard action not reporting binary artifacts in the repo

Full Scorecard Changelog: ossf/scorecard@v4.10.2...v4.10.5

Full Changelog: ossf/scorecard-action@v2.1.2...v2.1.3

step-security/harden-runner

v2.3.1

Compare Source

What's Changed

Full Changelog: step-security/harden-runner@v2...v2.3.1

v2.3.0

Compare Source

What's Changed

Full Changelog: step-security/harden-runner@v2...v2.3.0


Configuration

📅 Schedule: Branch creation - "before 3am on the first day of the month" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

@miguelnietoa miguelnietoa changed the base branch from main to v0.10 May 2, 2023 16:36
@renovate
Copy link
Contributor Author

renovate bot commented May 2, 2023

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

Warning: custom changes will be lost.

@miguelnietoa miguelnietoa merged commit 8dba5bb into v0.10 May 2, 2023
5 checks passed
@miguelnietoa miguelnietoa deleted the renovate/all branch May 2, 2023 16:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants