Skip to content

Conversation

@renovate-bot
Copy link
Contributor

@renovate-bot renovate-bot commented May 1, 2024

Mend Renovate

This PR contains the following updates:

Package Type Update Change Age Adoption Passing Confidence
actions/checkout action patch v4.1.4 -> v4.1.7 age adoption passing confidence
actions/dependency-review-action action minor v4.2.5 -> v4.3.3 age adoption passing confidence
actions/setup-node action patch v4.0.2 -> v4.0.3 age adoption passing confidence
github/codeql-action action patch v3.25.3 -> v3.25.11 age adoption passing confidence
gts devDependencies patch 5.3.0 -> 5.3.1 age adoption passing confidence
ossf/scorecard-action action patch v2.3.1 -> v2.3.3 age adoption passing confidence
step-security/harden-runner action minor v2.7.0 -> v2.8.1 age adoption passing confidence

Release Notes

actions/checkout (actions/checkout)

v4.1.7

Compare Source

v4.1.6

Compare Source

v4.1.5

Compare Source

What's Changed

Full Changelog: actions/checkout@v4.1.4...v4.1.5

actions/dependency-review-action (actions/dependency-review-action)

v4.3.3: Notes for v4.3.3

Compare Source

What's Changed

New Contributors

Full Changelog: actions/dependency-review-action@v4.3.2...v4.3.3

v4.3.2

Compare Source

What's Changed

Full Changelog: actions/dependency-review-action@v4.3.1...v4.3.2

v4.3.1

Compare Source

What's Changed

This release fixes some bugs related to package-url parsing that were introduced in 4.3.0. See https://github.com/actions/dependency-review-action/pull/753.

Full Changelog: actions/dependency-review-action@V4.3.0...v4.3.1

v4.3.0

Compare Source

New Features

  • The deny-packages option can now be used without a version number to exclude all versions of a package.

What's Changed

New Contributors

Full Changelog: actions/dependency-review-action@v4.2.5...V4.3.0

actions/setup-node (actions/setup-node)

v4.0.3

Compare Source

github/codeql-action (github/codeql-action)

v3.25.11

Compare Source

v3.25.10

Compare Source

v3.25.9

Compare Source

v3.25.8

Compare Source

v3.25.7

Compare Source

v3.25.6

Compare Source

v3.25.5

Compare Source

v3.25.4

Compare Source

google/gts (gts)

v5.3.1

Compare Source

Bug Fixes
  • deps: replace dependency eslint-plugin-node with eslint-plugin-n (#​865) (efbe3a8)
  • deps: update dependency eslint to v8.57.0 (#​833) (0c0a45c)
  • deps: update dependency prettier to v3.2.5 (#​846) (7e60e38)
Performance Improvements
  • Supercharge Performance & Efficiency: Leveraging Promise.all for Resource-Friendly Tasks 🚤 (#​838) (7424fe1)
ossf/scorecard-action (ossf/scorecard-action)

v2.3.3

Compare Source

[!NOTE]
There is no v2.3.2 release as a step was skipped in the release process. This was fixed and re-released under the v2.3.3 tag

What's Changed

For a full changelist of what these include, see the v5.0.0-rc1 and v5.0.0-rc2 release notes.

Documentation

Full Changelog: ossf/scorecard-action@v2.3.1...v2.3.3

v2.3.2

Compare Source

step-security/harden-runner (step-security/harden-runner)

v2.8.1

Compare Source

What's Changed

Full Changelog: step-security/harden-runner@v2...v2.8.1

v2.8.0

Compare Source

What's Changed

Release v2.8.0 by @​h0x0er and @​varunsh-coder in https://github.com/step-security/harden-runner/pull/416
This release includes:

  • File Monitoring Enhancements: Adds the capability to view the name and path of every file written during the build process.
  • Process Tracking Enhancements: Adds the capability to view process names and arguments of processes run during the build process.

These enhancements are based on insights from the XZ Utils incident, aimed at improving observability and detections during the build process.

Full Changelog: step-security/harden-runner@v2...v2.8.0

v2.7.1

Compare Source

What's Changed

Release v2.7.1 by @​varunsh-coder, @​h0x0er, @​ashishkurmi in https://github.com/step-security/harden-runner/pull/397
This release:

  • Improves the capability to inspect outbound HTTPS traffic on GitHub-hosted and self-hosted VM runners
  • Updates README to add link to case study video on how Harden-Runner detected a supply chain attack on a Google open-source project
  • Addresses minor bugs

Full Changelog: step-security/harden-runner@v2.7.0...v2.7.1


Configuration

📅 Schedule: Branch creation - "before 4am on the first day of the month" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

@renovate-bot renovate-bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from ad48252 to 7bf3410 Compare May 13, 2024 13:08
@renovate-bot renovate-bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from c8df16b to 5f2ef98 Compare May 22, 2024 11:19
@renovate-bot renovate-bot force-pushed the renovate/all-minor-patch branch from 5f2ef98 to 15a97c7 Compare May 31, 2024 10:56
@HKWinterhalter HKWinterhalter removed their assignment Jun 3, 2024
@renovate-bot renovate-bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from 9f02e41 to 8f4d30e Compare June 7, 2024 15:44
@renovate-bot renovate-bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from a3dfc71 to 5eb3a82 Compare June 13, 2024 15:24
@renovate-bot renovate-bot force-pushed the renovate/all-minor-patch branch from 5eb3a82 to 4635c18 Compare June 28, 2024 15:17
@renovate-bot renovate-bot force-pushed the renovate/all-minor-patch branch from 4635c18 to 4cc0d93 Compare July 9, 2024 15:22
@forking-renovate
Copy link

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

@matthewrobertson matthewrobertson merged commit 6e43823 into GoogleCloudPlatform:main Dec 12, 2024
56 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants