New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

chore(deps): update all non-major dependencies #223

Open

renovate-bot wants to merge 1 commit into GoogleCloudPlatform:main from renovate-bot:renovate/all-minor-patch

+9 −9

Contributor

renovate-bot commented Apr 1, 2025 •

edited

Loading

This PR contains the following updates:

Package	Type	Update	Change
actions/dependency-review-action	action	minor	`v4.5.0` -> `v4.6.0`
actions/setup-go	action	minor	`v5.3.0` -> `v5.4.0`
github/codeql-action	action	patch	`v3.28.10` -> `v3.28.13`
go	uses-with	minor	`1.20` -> `1.24`
step-security/harden-runner	action	patch	`v2.11.0` -> `v2.11.1`

Release Notes

actions/dependency-review-action (actions/dependency-review-action)

`v4.6.0`

What's Changed

Updating multiple dependency versions by @Ahmed3lmallah in https://github.com/actions/dependency-review-action/pull/870
Grouping minor and patch dependabot updates to lessen the number of PRs by @Ahmed3lmallah in https://github.com/actions/dependency-review-action/pull/876
Bump actions/stale from 9.0.0 to 9.1.0 by @dependabot in https://github.com/actions/dependency-review-action/pull/878
Bump undici from 5.28.4 to 5.28.5 by @dependabot in https://github.com/actions/dependency-review-action/pull/877
DR Action should link to the proxima stamp when appropriate in error messages by @AshelyTC in https://github.com/actions/dependency-review-action/pull/891
Allow deny package removal by @ellenfieldn in https://github.com/actions/dependency-review-action/pull/888
Fix typos by @omahs in https://github.com/actions/dependency-review-action/pull/893
Bump esbuild from 0.19.5 to 0.25.0 by @dependabot in https://github.com/actions/dependency-review-action/pull/900
Bump octokit and related dependencies by @RomanIakovlev in https://github.com/actions/dependency-review-action/pull/904
Bump @babel/helpers from 7.23.2 to 7.26.10 by @dependabot in https://github.com/actions/dependency-review-action/pull/905
Bump @octokit/plugin-paginate-rest from 9.1.5 to 9.2.2 by @dependabot in https://github.com/actions/dependency-review-action/pull/899
Update transitive dependency spdx-license-ids by @ailox in https://github.com/actions/dependency-review-action/pull/855
To not print OpenSSF Scorecard section if no dependencies scanned by @fabasoad in https://github.com/actions/dependency-review-action/pull/884
Improve usage of this action in dependency-review.yml by @fabasoad in https://github.com/actions/dependency-review-action/pull/883
Clarify comment-summary-in-pr behaviour by @Pantelis-Santorinios in https://github.com/actions/dependency-review-action/pull/902
Prepare 4.6.0 Release candidate by @brrygrdn in https://github.com/actions/dependency-review-action/pull/910

New Contributors

@AshelyTC made their first contribution in https://github.com/actions/dependency-review-action/pull/891
@ellenfieldn made their first contribution in https://github.com/actions/dependency-review-action/pull/888
@omahs made their first contribution in https://github.com/actions/dependency-review-action/pull/893
@RomanIakovlev made their first contribution in https://github.com/actions/dependency-review-action/pull/904
@ailox made their first contribution in https://github.com/actions/dependency-review-action/pull/855
@fabasoad made their first contribution in https://github.com/actions/dependency-review-action/pull/884
@Pantelis-Santorinios made their first contribution in https://github.com/actions/dependency-review-action/pull/902
@brrygrdn made their first contribution in https://github.com/actions/dependency-review-action/pull/910

Full Changelog: actions/dependency-review-action@v4.5.0...v4.6.0

actions/setup-go (actions/setup-go)

`v5.4.0`

What's Changed

Dependency updates :

Upgrade semver from 7.6.0 to 7.6.3 by @dependabot in https://github.com/actions/setup-go/pull/535
Upgrade eslint-config-prettier from 8.10.0 to 10.0.1 by @dependabot in https://github.com/actions/setup-go/pull/536
Upgrade @action/cache from 4.0.0 to 4.0.2 by @aparnajyothi-y in https://github.com/actions/setup-go/pull/568
Upgrade undici from 5.28.4 to 5.28.5 by @dependabot in https://github.com/actions/setup-go/pull/541

New Contributors

@aparnajyothi-y made their first contribution in https://github.com/actions/setup-go/pull/568

Full Changelog: actions/setup-go@v5...v5.4.0

github/codeql-action (github/codeql-action)

`v3.28.13`

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.13 - 24 Mar 2025

No user facing changes.

See the full CHANGELOG.md for more information.

`v3.28.12`

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.12 - 19 Mar 2025

Dependency caching should now cache more dependencies for Java build-mode: none extractions. This should speed up workflows and avoid inconsistent alerts in some cases.
Update default CodeQL bundle version to 2.20.7. #2810

See the full CHANGELOG.md for more information.

`v3.28.11`

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.11 - 07 Mar 2025

Update default CodeQL bundle version to 2.20.6. #2793

See the full CHANGELOG.md for more information.

actions/go-versions (go)

`v1.24.2`: 1.24.2

Go 1.24.2

`v1.24.1`: 1.24.1

Go 1.24.1

`v1.24.0`: 1.24.0

Go 1.24.0

`v1.23.8`: 1.23.8

Go 1.23.8

`v1.23.7`: 1.23.7

Go 1.23.7

`v1.23.6`: 1.23.6

Go 1.23.6

`v1.23.5`: 1.23.5

Go 1.23.5

`v1.23.4`: 1.23.4

Go 1.23.4

`v1.23.3`: 1.23.3

Go 1.23.3

`v1.23.2`: 1.23.2

Go 1.23.2

`v1.23.1`: 1.23.1

Go 1.23.1

`v1.23.0`: 1.23.0

Go 1.23.0

`v1.22.12`: 1.22.12

Go 1.22.12

`v1.22.11`: 1.22.11

Go 1.22.11

`v1.22.10`: 1.22.10

Go 1.22.10

`v1.22.9`: 1.22.9

Go 1.22.9

`v1.22.8`: 1.22.8

Go 1.22.8

`v1.22.7`: 1.22.7

Go 1.22.7

`v1.22.6`: 1.22.6

Go 1.22.6

`v1.22.5`: 1.22.5

Go 1.22.5

`v1.22.4`: 1.22.4

Go 1.22.4

`v1.22.3`: 1.22.3

Go 1.22.3

`v1.22.2`: 1.22.2

Go 1.22.2

`v1.22.1`: 1.22.1

Go 1.22.1

`v1.22.0`: 1.22.0

Go 1.22.0

`v1.21.13`: 1.21.13

Go 1.21.13

`v1.21.12`: 1.21.12

Go 1.21.12

`v1.21.11`: 1.21.11

Go 1.21.11

`v1.21.10`: 1.21.10

Go 1.21.10

`v1.21.9`: 1.21.9

Go 1.21.9

`v1.21.8`: 1.21.8

Go 1.21.8

`v1.21.7`: 1.21.7

Go 1.21.7

`v1.21.6`: 1.21.6

Go 1.21.6

`v1.21.5`: 1.21.5

Go 1.21.5

`v1.21.4`: 1.21.4

Go 1.21.4

`v1.21.3`: 1.21.3

Go 1.21.3

`v1.21.2`: 1.21.2

Go 1.21.2

`v1.21.1`: 1.21.1

Go 1.21.1

`v1.21.0`: 1.21.0

Go 1.21.0

step-security/harden-runner (step-security/harden-runner)

`v2.11.1`

What's Changed

cache: add support for GitHub Actions cache v2 by @h0x0er in https://github.com/step-security/harden-runner/pull/529

Full Changelog: step-security/harden-runner@v2...v2.11.1

Configuration

📅 Schedule: Branch creation - "* 0-3 1 * *" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate-bot force-pushed the renovate/all-minor-patch branch from 3d2890c to a5f15da Compare

April 1, 2025 14:59


          chore(deps): update all non-major dependencies

5d3d2b7

renovate-bot force-pushed the renovate/all-minor-patch branch from a5f15da to 5d3d2b7 Compare

April 1, 2025 20:56

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet