chore(deps): update github actions minor and patch updates #197

renovate · 2025-02-13T15:01:52Z

This PR contains the following updates:

Package	Type	Update	Change
actions/setup-go	action	minor	`v5.3.0` -> `v5.4.0`
docker/login-action	action	minor	`v3.3.0` -> `v3.4.0`
golangci/golangci-lint-action	action	minor	`v6.3.2` -> `v6.5.2`
goreleaser/goreleaser-action	action	minor	`v6.2.1` -> `v6.3.0`
sigstore/cosign-installer	action	patch	`v3.8.0` -> `v3.8.1`
slsa-framework/slsa-github-generator	action	minor	`v2.0.0` -> `v2.1.0`
step-security/harden-runner	action	minor	`v2.10.4` -> `v2.11.1`

Release Notes

actions/setup-go (actions/setup-go)

`v5.4.0`

Compare Source

What's Changed

Dependency updates :

Upgrade semver from 7.6.0 to 7.6.3 by @dependabot in https://github.com/actions/setup-go/pull/535
Upgrade eslint-config-prettier from 8.10.0 to 10.0.1 by @dependabot in https://github.com/actions/setup-go/pull/536
Upgrade @action/cache from 4.0.0 to 4.0.2 by @aparnajyothi-y in https://github.com/actions/setup-go/pull/568
Upgrade undici from 5.28.4 to 5.28.5 by @dependabot in https://github.com/actions/setup-go/pull/541

New Contributors

@aparnajyothi-y made their first contribution in https://github.com/actions/setup-go/pull/568

Full Changelog: actions/setup-go@v5...v5.4.0

docker/login-action (docker/login-action)

`v3.4.0`

Compare Source

Bump @actions/core from 1.10.1 to 1.11.1 in https://github.com/docker/login-action/pull/791
Bump @aws-sdk/client-ecr to 3.766.0 in https://github.com/docker/login-action/pull/789 https://github.com/docker/login-action/pull/856
Bump @aws-sdk/client-ecr-public to 3.758.0 in https://github.com/docker/login-action/pull/789 https://github.com/docker/login-action/pull/856
Bump @docker/actions-toolkit from 0.35.0 to 0.57.0 in https://github.com/docker/login-action/pull/801 https://github.com/docker/login-action/pull/806 https://github.com/docker/login-action/pull/858
Bump cross-spawn from 7.0.3 to 7.0.6 in https://github.com/docker/login-action/pull/814
Bump https-proxy-agent from 7.0.5 to 7.0.6 in https://github.com/docker/login-action/pull/823
Bump path-to-regexp from 6.2.2 to 6.3.0 in https://github.com/docker/login-action/pull/777

Full Changelog: docker/login-action@v3.3.0...v3.4.0

golangci/golangci-lint-action (golangci/golangci-lint-action)

`v6.5.2`

Compare Source

What's Changed

Changes

fix: update max version by @ldez in https://github.com/golangci/golangci-lint-action/pull/1201

Dependencies

build(deps-dev): bump the dev-dependencies group with 2 updates by @dependabot in https://github.com/golangci/golangci-lint-action/pull/1199

Full Changelog: golangci/golangci-lint-action@v6.5.1...v6.5.2

`v6.5.1`

Compare Source

What's Changed

What's Changed

Changes

feat: verify with the JSONSchema by default by @ldez in https://github.com/golangci/golangci-lint-action/pull/1171

Dependencies

build(deps): bump @octokit/request-error from 5.1.0 to 5.1.1 by @dependabot in https://github.com/golangci/golangci-lint-action/pull/1169
build(deps): bump @octokit/endpoint from 9.0.5 to 9.0.6 by @dependabot in https://github.com/golangci/golangci-lint-action/pull/1170

Full Changelog: golangci/golangci-lint-action@v6.4.1...v6.5.0

`v6.4.1`

Compare Source

What's Changed

Changes

fix: use config arg for verify by @ldez in https://github.com/golangci/golangci-lint-action/pull/1168

Full Changelog: golangci/golangci-lint-action@v6.4.0...v6.4.1

`v6.4.0`

Compare Source

What's Changed

Changes

chore: extract patch related code by @ldez in https://github.com/golangci/golangci-lint-action/pull/1166
feat: add an option to verify with the JSONSchema by @ldez in https://github.com/golangci/golangci-lint-action/pull/1167

Full Changelog: golangci/golangci-lint-action@v6.3.3...v6.4.0

`v6.3.3`

Compare Source

What's Changed

Changes

fix: go.mod parsing by @ldez in https://github.com/golangci/golangci-lint-action/pull/1165

Full Changelog: golangci/golangci-lint-action@v6.3.2...v6.3.3

goreleaser/goreleaser-action (goreleaser/goreleaser-action)

`v6.3.0`

Compare Source

Bump undici from 5.28.3 to 5.28.5 in https://github.com/goreleaser/goreleaser-action/pull/488

Full Changelog: goreleaser/goreleaser-action@v6.2.1...v6.3.0

sigstore/cosign-installer (sigstore/cosign-installer)

`v3.8.1`

Compare Source

What's Changed

use cosign 2.4.3 and other updates by @cpanato in https://github.com/sigstore/cosign-installer/pull/182

Full Changelog: sigstore/cosign-installer@v3...v3.8.1

slsa-framework/slsa-github-generator (slsa-framework/slsa-github-generator)

`v2.1.0`

Compare Source

v2.1.0: Sigstore Bundles for Generic Generator and Go Builder

The workflows generator_generic_slsa3.yml and builder_go_slsa3.yml
have been updated to produce signed Sigstore Bundles, just like all the other builders
that use the BYOB framework.

The workflow logs will now print a LogIndex, rather than a LogUUID. Both are equally searchanble on
https://search.sigstore.dev/.

v2.1.0: Vars context recorded in provenance

Updated: GitHub vars context is now recorded in provenance for the generic and
container generators. The vars context cannot affect the build in the Go
builder so it is not recorded.

step-security/harden-runner (step-security/harden-runner)

`v2.11.1`

Compare Source

What's Changed

cache: add support for GitHub Actions cache v2 by @h0x0er in https://github.com/step-security/harden-runner/pull/529

Full Changelog: step-security/harden-runner@v2...v2.11.1

`v2.11.0`

Compare Source

What's Changed

Release v2.11.0 in #498
Harden-Runner Enterprise tier now supports the use of eBPF for DNS resolution and network call monitoring

Full Changelog: step-security/harden-runner@v2...v2.11.0

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

renovate bot requested a review from janderssonse as a code owner February 13, 2025 15:01

renovate bot added the actions label Feb 13, 2025

renovate bot force-pushed the renovate/github-actions-minor-and-patch-updates branch from 2e3a300 to e0f61c4 Compare February 13, 2025 22:39

renovate bot changed the title ~~chore(deps): update golangci/golangci-lint-action action to v6.3.3~~ chore(deps): update golangci/golangci-lint-action action to v6.4.0 Feb 13, 2025

renovate bot changed the title ~~chore(deps): update golangci/golangci-lint-action action to v6.4.0~~ chore(deps): update golangci/golangci-lint-action action to v6.4.1 Feb 14, 2025

renovate bot force-pushed the renovate/github-actions-minor-and-patch-updates branch from e0f61c4 to f0cddc4 Compare February 14, 2025 15:51

renovate bot changed the title ~~chore(deps): update golangci/golangci-lint-action action to v6.4.1~~ chore(deps): update golangci/golangci-lint-action action to v6.5.0 Feb 15, 2025

renovate bot force-pushed the renovate/github-actions-minor-and-patch-updates branch from f0cddc4 to 809aafb Compare February 15, 2025 15:04

renovate bot changed the title ~~chore(deps): update golangci/golangci-lint-action action to v6.5.0~~ chore(deps): update github actions minor and patch updates Feb 17, 2025

renovate bot force-pushed the renovate/github-actions-minor-and-patch-updates branch 2 times, most recently from 662b24f to b400400 Compare February 20, 2025 19:13

renovate bot force-pushed the renovate/github-actions-minor-and-patch-updates branch from b400400 to 9e39afd Compare February 27, 2025 23:33

renovate bot force-pushed the renovate/github-actions-minor-and-patch-updates branch 4 times, most recently from f51f6ec to 6c4880d Compare March 19, 2025 06:13

renovate bot force-pushed the renovate/github-actions-minor-and-patch-updates branch 2 times, most recently from f20d8d5 to 656dba5 Compare April 1, 2025 23:18

chore(deps): update github actions minor and patch updates

95d0115

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

renovate bot force-pushed the renovate/github-actions-minor-and-patch-updates branch from 656dba5 to 95d0115 Compare April 8, 2025 05:29

janderssonse approved these changes Apr 8, 2025

View reviewed changes

janderssonse merged commit 8405c43 into main Apr 8, 2025
10 checks passed

janderssonse deleted the renovate/github-actions-minor-and-patch-updates branch April 8, 2025 05:38

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): update github actions minor and patch updates #197

chore(deps): update github actions minor and patch updates #197

Uh oh!

renovate bot commented Feb 13, 2025 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

chore(deps): update github actions minor and patch updates #197

chore(deps): update github actions minor and patch updates #197

Uh oh!

Conversation

renovate bot commented Feb 13, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

Dependency updates :

New Contributors

What's Changed

Changes

Dependencies

What's Changed

Changes

Documentation

Dependencies

New Contributors

What's Changed

Changes

Dependencies

What's Changed

Changes

What's Changed

Changes

What's Changed

Changes

What's Changed

v2.1.0: Sigstore Bundles for Generic Generator and Go Builder

v2.1.0: Vars context recorded in provenance

What's Changed

What's Changed

Configuration

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

renovate bot commented Feb 13, 2025 •

edited

Loading