New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

chore(deps): update all non-major dependencies #219

Open

renovate-bot wants to merge 1 commit into GoogleCloudPlatform:main from renovate-bot:renovate/all-minor-patch

Contributor

renovate-bot commented Apr 1, 2025 •

edited

Loading

This PR contains the following updates:

Package	Type	Update	Change
actions/dependency-review-action	action	minor	`v4.5.0` -> `v4.6.0`
actions/setup-go	action	minor	`v5.3.0` -> `v5.4.0`
github/codeql-action	action	patch	`v3.28.11` -> `v3.28.15`
ruby/setup-ruby	action	minor	`v1.225.0` -> `v1.229.0`
step-security/harden-runner	action	patch	`v2.11.0` -> `v2.11.1`

Release Notes

actions/dependency-review-action (actions/dependency-review-action)

`v4.6.0`

What's Changed

Updating multiple dependency versions by @Ahmed3lmallah in https://github.com/actions/dependency-review-action/pull/870
Grouping minor and patch dependabot updates to lessen the number of PRs by @Ahmed3lmallah in https://github.com/actions/dependency-review-action/pull/876
Bump actions/stale from 9.0.0 to 9.1.0 by @dependabot in https://github.com/actions/dependency-review-action/pull/878
Bump undici from 5.28.4 to 5.28.5 by @dependabot in https://github.com/actions/dependency-review-action/pull/877
DR Action should link to the proxima stamp when appropriate in error messages by @AshelyTC in https://github.com/actions/dependency-review-action/pull/891
Allow deny package removal by @ellenfieldn in https://github.com/actions/dependency-review-action/pull/888
Fix typos by @omahs in https://github.com/actions/dependency-review-action/pull/893
Bump esbuild from 0.19.5 to 0.25.0 by @dependabot in https://github.com/actions/dependency-review-action/pull/900
Bump octokit and related dependencies by @RomanIakovlev in https://github.com/actions/dependency-review-action/pull/904
Bump @babel/helpers from 7.23.2 to 7.26.10 by @dependabot in https://github.com/actions/dependency-review-action/pull/905
Bump @octokit/plugin-paginate-rest from 9.1.5 to 9.2.2 by @dependabot in https://github.com/actions/dependency-review-action/pull/899
Update transitive dependency spdx-license-ids by @ailox in https://github.com/actions/dependency-review-action/pull/855
To not print OpenSSF Scorecard section if no dependencies scanned by @fabasoad in https://github.com/actions/dependency-review-action/pull/884
Improve usage of this action in dependency-review.yml by @fabasoad in https://github.com/actions/dependency-review-action/pull/883
Clarify comment-summary-in-pr behaviour by @Pantelis-Santorinios in https://github.com/actions/dependency-review-action/pull/902
Prepare 4.6.0 Release candidate by @brrygrdn in https://github.com/actions/dependency-review-action/pull/910

New Contributors

@AshelyTC made their first contribution in https://github.com/actions/dependency-review-action/pull/891
@ellenfieldn made their first contribution in https://github.com/actions/dependency-review-action/pull/888
@omahs made their first contribution in https://github.com/actions/dependency-review-action/pull/893
@RomanIakovlev made their first contribution in https://github.com/actions/dependency-review-action/pull/904
@ailox made their first contribution in https://github.com/actions/dependency-review-action/pull/855
@fabasoad made their first contribution in https://github.com/actions/dependency-review-action/pull/884
@Pantelis-Santorinios made their first contribution in https://github.com/actions/dependency-review-action/pull/902
@brrygrdn made their first contribution in https://github.com/actions/dependency-review-action/pull/910

Full Changelog: actions/dependency-review-action@v4.5.0...v4.6.0

actions/setup-go (actions/setup-go)

`v5.4.0`

What's Changed

Dependency updates :

Upgrade semver from 7.6.0 to 7.6.3 by @dependabot in https://github.com/actions/setup-go/pull/535
Upgrade eslint-config-prettier from 8.10.0 to 10.0.1 by @dependabot in https://github.com/actions/setup-go/pull/536
Upgrade @action/cache from 4.0.0 to 4.0.2 by @aparnajyothi-y in https://github.com/actions/setup-go/pull/568
Upgrade undici from 5.28.4 to 5.28.5 by @dependabot in https://github.com/actions/setup-go/pull/541

New Contributors

@aparnajyothi-y made their first contribution in https://github.com/actions/setup-go/pull/568

Full Changelog: actions/setup-go@v5...v5.4.0

github/codeql-action (github/codeql-action)

`v3.28.15`

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.15 - 07 Apr 2025

Fix bug where the action would fail if it tried to produce a debug artifact with more than 65535 files. #2842

See the full CHANGELOG.md for more information.

`v3.28.14`

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.14 - 07 Apr 2025

Update default CodeQL bundle version to 2.21.0. #2838

See the full CHANGELOG.md for more information.

`v3.28.13`

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.13 - 24 Mar 2025

No user facing changes.

See the full CHANGELOG.md for more information.

`v3.28.12`

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.12 - 19 Mar 2025

Dependency caching should now cache more dependencies for Java build-mode: none extractions. This should speed up workflows and avoid inconsistent alerts in some cases.
Update default CodeQL bundle version to 2.20.7. #2810

See the full CHANGELOG.md for more information.

ruby/setup-ruby (ruby/setup-ruby)

`v1.229.0`

What's Changed

Update CRuby releases on Windows by @ruby-builder-bot in https://github.com/ruby/setup-ruby/pull/727

Full Changelog: ruby/setup-ruby@v1.228.0...v1.229.0

`v1.228.0`

What's Changed

Add ruby-3.1.7,ruby-3.2.8 by @ruby-builder-bot in https://github.com/ruby/setup-ruby/pull/726

Full Changelog: ruby/setup-ruby@v1.227.0...v1.228.0

`v1.227.0`

What's Changed

Add truffleruby-24.2.0,truffleruby+graalvm-24.2.0 by @ruby-builder-bot in https://github.com/ruby/setup-ruby/pull/724

Full Changelog: ruby/setup-ruby@v1.226.0...v1.227.0

`v1.226.0`

What's Changed

Use $JAVA_HOME/bin/java for the check by @eregon in https://github.com/ruby/setup-ruby/pull/723

Full Changelog: ruby/setup-ruby@v1.225.0...v1.226.0

step-security/harden-runner (step-security/harden-runner)

`v2.11.1`

What's Changed

cache: add support for GitHub Actions cache v2 by @h0x0er in https://github.com/step-security/harden-runner/pull/529

Full Changelog: step-security/harden-runner@v2...v2.11.1

Configuration

📅 Schedule: Branch creation - "* 0-3 1 * *" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate-bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from fcd6a86 to 45029df Compare

April 7, 2025 13:49


          chore(deps): update all non-major dependencies

6da35a4

renovate-bot force-pushed the renovate/all-minor-patch branch from 45029df to 6da35a4 Compare

April 8, 2025 00:43

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet