chore(deps): bump the actions group across 1 directory with 28 updates #1101
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Bumps the actions group with 28 updates in the / directory: | Package | From | To | | --- | --- | --- | | [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `3.8.0` | `3.10.0` | | [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) | `3.3.0` | `3.6.0` | | [google-github-actions/auth](https://github.com/google-github-actions/auth) | `2.1.7` | `2.1.9` | | [docker/login-action](https://github.com/docker/login-action) | `3.3.0` | `3.4.0` | | [docker/metadata-action](https://github.com/docker/metadata-action) | `5.6.1` | `5.7.0` | | [docker/build-push-action](https://github.com/docker/build-push-action) | `6.13.0` | `6.16.0` | | [actions/cache](https://github.com/actions/cache) | `4.2.0` | `4.2.3` | | [docker/scout-action](https://github.com/docker/scout-action) | `1.16.1` | `1.17.1` | | [actions/setup-go](https://github.com/actions/setup-go) | `5.3.0` | `5.4.0` | | [codecov/codecov-action](https://github.com/codecov/codecov-action) | `5.3.0` | `5.4.2` | | [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) | `6.1.0` | `6.3.0` | | [github/codeql-action](https://github.com/github/codeql-action) | `3.28.4` | `3.28.16` | | [dependabot/fetch-metadata](https://github.com/dependabot/fetch-metadata) | `2.2.0` | `2.3.0` | | [stefanzweifel/git-auto-commit-action](https://github.com/stefanzweifel/git-auto-commit-action) | `5.1.0` | `5.2.0` | | [actions/dependency-review-action](https://github.com/actions/dependency-review-action) | `4.5.0` | `4.6.0` | | [peter-evans/dockerhub-description](https://github.com/peter-evans/dockerhub-description) | `4.0.0` | `4.0.2` | | [fossas/fossa-action](https://github.com/fossas/fossa-action) | `1.5.0` | `1.6.0` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4.6.0` | `4.6.2` | | [lucacome/draft-release](https://github.com/lucacome/draft-release) | `1.1.1` | `1.2.2` | | [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) | `6.2.0` | `7.0.0` | | [reviewdog/action-actionlint](https://github.com/reviewdog/action-actionlint) | `1.64.1` | `1.65.2` | | [8398a7/action-slack](https://github.com/8398a7/action-slack) | `3.16.2` | `3.18.0` | | [aws-actions/configure-aws-credentials](https://github.com/aws-actions/configure-aws-credentials) | `4.0.2` | `4.1.0` | | [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) | `7.0.6` | `7.0.8` | | [anchore/sbom-action](https://github.com/anchore/sbom-action) | `0.18.0` | `0.19.0` | | [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) | `3.7.0` | `3.8.2` | | [azure/login](https://github.com/azure/login) | `2.2.0` | `2.3.0` | | [ossf/scorecard-action](https://github.com/ossf/scorecard-action) | `2.4.0` | `2.4.1` | Updates `docker/setup-buildx-action` from 3.8.0 to 3.10.0 - [Release notes](https://github.com/docker/setup-buildx-action/releases) - [Commits](docker/setup-buildx-action@6524bf6...b5ca514) Updates `docker/setup-qemu-action` from 3.3.0 to 3.6.0 - [Release notes](https://github.com/docker/setup-qemu-action/releases) - [Commits](docker/setup-qemu-action@53851d1...2910929) Updates `google-github-actions/auth` from 2.1.7 to 2.1.9 - [Release notes](https://github.com/google-github-actions/auth/releases) - [Changelog](https://github.com/google-github-actions/auth/blob/main/CHANGELOG.md) - [Commits](google-github-actions/auth@6fc4af4...7b53cdc) Updates `docker/login-action` from 3.3.0 to 3.4.0 - [Release notes](https://github.com/docker/login-action/releases) - [Commits](docker/login-action@9780b0c...74a5d14) Updates `docker/metadata-action` from 5.6.1 to 5.7.0 - [Release notes](https://github.com/docker/metadata-action/releases) - [Commits](docker/metadata-action@369eb59...902fa8e) Updates `docker/build-push-action` from 6.13.0 to 6.16.0 - [Release notes](https://github.com/docker/build-push-action/releases) - [Commits](docker/build-push-action@ca877d9...14487ce) Updates `actions/cache` from 4.2.0 to 4.2.3 - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](actions/cache@1bd1e32...5a3ec84) Updates `docker/scout-action` from 1.16.1 to 1.17.1 - [Release notes](https://github.com/docker/scout-action/releases) - [Commits](docker/scout-action@b23590d...381b657) Updates `actions/setup-go` from 5.3.0 to 5.4.0 - [Release notes](https://github.com/actions/setup-go/releases) - [Commits](actions/setup-go@f111f33...0aaccfd) Updates `codecov/codecov-action` from 5.3.0 to 5.4.2 - [Release notes](https://github.com/codecov/codecov-action/releases) - [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md) - [Commits](codecov/codecov-action@0da7aa6...ad3126e) Updates `goreleaser/goreleaser-action` from 6.1.0 to 6.3.0 - [Release notes](https://github.com/goreleaser/goreleaser-action/releases) - [Commits](goreleaser/goreleaser-action@9ed2f89...9c156ee) Updates `github/codeql-action` from 3.28.4 to 3.28.16 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@ee117c9...28deaed) Updates `dependabot/fetch-metadata` from 2.2.0 to 2.3.0 - [Release notes](https://github.com/dependabot/fetch-metadata/releases) - [Commits](dependabot/fetch-metadata@dbb049a...d7267f6) Updates `stefanzweifel/git-auto-commit-action` from 5.1.0 to 5.2.0 - [Release notes](https://github.com/stefanzweifel/git-auto-commit-action/releases) - [Changelog](https://github.com/stefanzweifel/git-auto-commit-action/blob/master/CHANGELOG.md) - [Commits](stefanzweifel/git-auto-commit-action@e348103...b863ae1) Updates `actions/dependency-review-action` from 4.5.0 to 4.6.0 - [Release notes](https://github.com/actions/dependency-review-action/releases) - [Commits](actions/dependency-review-action@3b139cf...ce3cf95) Updates `peter-evans/dockerhub-description` from 4.0.0 to 4.0.2 - [Release notes](https://github.com/peter-evans/dockerhub-description/releases) - [Commits](peter-evans/dockerhub-description@e98e4d1...432a30c) Updates `fossas/fossa-action` from 1.5.0 to 1.6.0 - [Release notes](https://github.com/fossas/fossa-action/releases) - [Commits](fossas/fossa-action@93a52ec...c0a7d01) Updates `actions/upload-artifact` from 4.6.0 to 4.6.2 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@65c4c4a...ea165f8) Updates `lucacome/draft-release` from 1.1.1 to 1.2.2 - [Release notes](https://github.com/lucacome/draft-release/releases) - [Commits](lucacome/draft-release@5d29432...f15262d) Updates `golangci/golangci-lint-action` from 6.2.0 to 7.0.0 - [Release notes](https://github.com/golangci/golangci-lint-action/releases) - [Commits](golangci/golangci-lint-action@ec5d184...1481404) Updates `reviewdog/action-actionlint` from 1.64.1 to 1.65.2 - [Release notes](https://github.com/reviewdog/action-actionlint/releases) - [Commits](reviewdog/action-actionlint@abd5374...a5524e1) Updates `8398a7/action-slack` from 3.16.2 to 3.18.0 - [Release notes](https://github.com/8398a7/action-slack/releases) - [Commits](8398a7/action-slack@28ba43a...1750b50) Updates `aws-actions/configure-aws-credentials` from 4.0.2 to 4.1.0 - [Release notes](https://github.com/aws-actions/configure-aws-credentials/releases) - [Changelog](https://github.com/aws-actions/configure-aws-credentials/blob/main/CHANGELOG.md) - [Commits](aws-actions/configure-aws-credentials@e3dd6a4...ececac1) Updates `peter-evans/create-pull-request` from 7.0.6 to 7.0.8 - [Release notes](https://github.com/peter-evans/create-pull-request/releases) - [Commits](peter-evans/create-pull-request@67ccf78...271a8d0) Updates `anchore/sbom-action` from 0.18.0 to 0.19.0 - [Release notes](https://github.com/anchore/sbom-action/releases) - [Changelog](https://github.com/anchore/sbom-action/blob/main/RELEASE.md) - [Commits](anchore/sbom-action@f325610...9f73021) Updates `sigstore/cosign-installer` from 3.7.0 to 3.8.2 - [Release notes](https://github.com/sigstore/cosign-installer/releases) - [Commits](sigstore/cosign-installer@dc72c7d...3454372) Updates `azure/login` from 2.2.0 to 2.3.0 - [Release notes](https://github.com/azure/login/releases) - [Commits](Azure/login@a65d910...a457da9) Updates `ossf/scorecard-action` from 2.4.0 to 2.4.1 - [Release notes](https://github.com/ossf/scorecard-action/releases) - [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md) - [Commits](ossf/scorecard-action@62b2cac...f49aabe) --- updated-dependencies: - dependency-name: docker/setup-buildx-action dependency-version: 3.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: docker/setup-qemu-action dependency-version: 3.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: google-github-actions/auth dependency-version: 2.1.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: docker/login-action dependency-version: 3.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: docker/metadata-action dependency-version: 5.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: docker/build-push-action dependency-version: 6.16.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: actions/cache dependency-version: 4.2.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: docker/scout-action dependency-version: 1.17.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: actions/setup-go dependency-version: 5.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: codecov/codecov-action dependency-version: 5.4.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: goreleaser/goreleaser-action dependency-version: 6.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: github/codeql-action dependency-version: 3.28.16 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: dependabot/fetch-metadata dependency-version: 2.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: stefanzweifel/git-auto-commit-action dependency-version: 5.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: actions/dependency-review-action dependency-version: 4.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: peter-evans/dockerhub-description dependency-version: 4.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: fossas/fossa-action dependency-version: 1.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: actions/upload-artifact dependency-version: 4.6.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: lucacome/draft-release dependency-version: 1.2.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: golangci/golangci-lint-action dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: reviewdog/action-actionlint dependency-version: 1.65.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: 8398a7/action-slack dependency-version: 3.18.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: aws-actions/configure-aws-credentials dependency-version: 4.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: peter-evans/create-pull-request dependency-version: 7.0.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: anchore/sbom-action dependency-version: 0.19.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: sigstore/cosign-installer dependency-version: 3.8.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: azure/login dependency-version: 2.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: ossf/scorecard-action dependency-version: 2.4.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
added
dependencies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the actions group with 28 updates in the / directory:
3.8.03.10.03.3.03.6.02.1.72.1.93.3.03.4.05.6.15.7.06.13.06.16.04.2.04.2.31.16.11.17.15.3.05.4.05.3.05.4.26.1.06.3.03.28.43.28.162.2.02.3.05.1.05.2.04.5.04.6.04.0.04.0.21.5.01.6.04.6.04.6.21.1.11.2.26.2.07.0.01.64.11.65.23.16.23.18.04.0.24.1.07.0.67.0.80.18.00.19.03.7.03.8.22.2.02.3.02.4.02.4.1Updates
docker/setup-buildx-actionfrom 3.8.0 to 3.10.0Release notes
Sourced from docker/setup-buildx-action's releases.
Commits
b5ca514Merge pull request #408 from docker/dependabot/npm_and_yarn/docker/actions-to...1418a4echore: update generated content93acf83build(deps): bump@docker/actions-toolkitfrom 0.54.0 to 0.56.0f7ce87cMerge pull request #404 from docker/dependabot/npm_and_yarn/docker/actions-to...aa1e2a0chore: update generated content673e008build(deps): bump@docker/actions-toolkitfrom 0.53.0 to 0.54.0ba31df4Merge pull request #402 from docker/dependabot/npm_and_yarn/docker/actions-to...5475af1chore: update generated contentacacad9build(deps): bump@docker/actions-toolkitfrom 0.48.0 to 0.53.06a25f98Merge pull request #396 from crazy-max/bake-v6Updates
docker/setup-qemu-actionfrom 3.3.0 to 3.6.0Release notes
Sourced from docker/setup-qemu-action's releases.
Commits
2910929Merge pull request #202 from crazy-max/binfmt-version7ffe24achore: update generated content17bc18bdisplay binfmt version5964de0Merge pull request #205 from docker/dependabot/npm_and_yarn/docker/actions-to...862b663chore: update generated content138de3bbuild(deps): bump@docker/actions-toolkitfrom 0.54.0 to 0.56.04574d27Merge pull request #195 from radarhere/patch-17a38281Merge pull request #197 from docker/dependabot/npm_and_yarn/docker/actions-to...7a1c63fbuild(deps): bump@docker/actions-toolkitfrom 0.53.0 to 0.54.02825a12Fixed typoUpdates
google-github-actions/authfrom 2.1.7 to 2.1.9Release notes
Sourced from google-github-actions/auth's releases.
Commits
7b53cdcRelease: v2.1.9 (#480)a9cfddfUpdate deps (#479)b011f39Use our custom boolean parsing (#478)71f9864Release: v2.1.8 (#467)0cd8f2eUpdate deps (#466)332e0basecurity: bump undici from 5.28.4 to 5.28.5 in the npm_and_yarn group (#463)28d44bafix: add runs-on to README.md example (#460)83354caUpdate TROUBLESHOOTING.md (#457)Updates
docker/login-actionfrom 3.3.0 to 3.4.0Release notes
Sourced from docker/login-action's releases.
Commits
74a5d14Merge pull request #856 from docker/dependabot/npm_and_yarn/aws-sdk-dependenc...2f4f00echore: update generated content67c1845build(deps): bump the aws-sdk-dependencies group across 1 directory with 2 up...3d4cc89Merge pull request #844 from graysonpike/master6cc823aMerge pull request #823 from docker/dependabot/npm_and_yarn/proxy-agent-depen...d94e792chore: update generated content033db0dMerge pull request #812 from docker/dependabot/github_actions/codecov/codecov...09c2ae9build(deps): bump https-proxy-agentba56f00ci: update deprecated input for codecov-action75bf9a7Merge pull request #858 from docker/dependabot/npm_and_yarn/docker/actions-to...Updates
docker/metadata-actionfrom 5.6.1 to 5.7.0Release notes
Sourced from docker/metadata-action's releases.
Commits
902fa8eMerge pull request #504 from docker/dependabot/npm_and_yarn/semver-7.7.1c30b9c2chore: update generated content0698804chore(deps): Bump semver from 7.6.3 to 7.7.1bb3eecaMerge pull request #501 from docker/dependabot/npm_and_yarn/moment-timezone-0...94a839cchore: update generated contentecd51a0Merge pull request #509 from docker/dependabot/npm_and_yarn/docker/actions-to...a85b1dbchore(deps): Bump@docker/actions-toolkitfrom 0.55.0 to 0.56.05a76a0echore(deps): Bump moment-timezone from 0.5.46 to 0.5.471cc4a98Merge pull request #482 from docker/dependabot/npm_and_yarn/csv-parse-5.6.0d84de1echore: update generated contentUpdates
docker/build-push-actionfrom 6.13.0 to 6.16.0Release notes
Sourced from docker/build-push-action's releases.
Commits
14487ceMerge pull request #1343 from crazy-max/fix-no-default-attest0ec9126Merge pull request #1366 from crazy-max/pr-assign-authorb749522pr-assign-author workflowc566248Merge pull request #1363 from crazy-max/fix-codecov13275ddci: fix missing source for codecov67dc78bMerge pull request #1361 from mschoettle/patch-10760504docs: add validating build configuration example1c198f4chore: update generated content288d9e2handle no default attestations env var88844b9Merge pull request #1353 from crazy-max/summary-secret-keysUpdates
actions/cachefrom 4.2.0 to 4.2.3Release notes
Sourced from actions/cache's releases.
Changelog
Sourced from actions/cache's changelog.
... (truncated)
Commits
5a3ec84Merge pull request #1577 from salmanmkc/salmanmkc/4-test7de2102Update releases.md76d40ddUpdate to use the latest version of the cache package to obfuscate the SAS76dd5ebupdate cache with main8c80c27new package45cfd0eupdatesedd449bupdated cache with latest changes0576707latest test before pr3105dc9update9450d42maskUpdates
docker/scout-actionfrom 1.16.1 to 1.17.1Commits
381b657Merge e07bccd7af32a785595305309423904814ac3536 into d341d36d6eebbe05c0b25760c...e07bccd[BOT] Publish v1.17.1 released341d36Merge b8e0e28db53a29161c11fabcd6d8ad434b53878e into 0133ff88fe16d4a412dc4827a...b8e0e28[BOT] Publish v1.17.0 release0133ff8Merge 2448c740cbd6ac04901cc46ead978f2f4b6d5305 into a55ca454857962fda303ab26b...2448c74[BOT] Publish v1.16.3 releasea55ca45Merge c9725977d80d42f014b943671ca30c322423bb81 into b23590dc1e4d09febc00cfcbc...c972597[BOT] Publish v1.16.2 releaseUpdates
actions/setup-gofrom 5.3.0 to 5.4.0Release notes
Sourced from actions/setup-go's releases.
Commits
0aaccfdBump undici from 5.28.4 to 5.28.5 (#541)c4c1141upgrade actions/cache to 4.0.2 (#568)5a083d0Bump eslint-config-prettier from 8.10.0 to 10.0.1 (#536)1d82324Bump semver from 7.6.0 to 7.6.3 (#535)Updates
codecov/codecov-actionfrom 5.3.0 to 5.4.2Release notes
Sourced from codecov/codecov-action's releases.
... (truncated)
Changelog
Sourced from codecov/codecov-action's changelog.
... (truncated)
Commits
ad3126efix: hotfix oidc (#1813)cf3f51achore(release): 5.4.1 (#1810)e4cdabafix: use the github core methods (#1807)f95a404build(deps): bump github/codeql-action from 3.28.12 to 3.28.13 (#1803)ea99328build(deps): bump github/codeql-action from 3.28.11 to 3.28.12 (#1797)13d0469build(deps): bump actions/upload-artifact from 4.6.1 to 4.6.2 (#1798)3440e5echore(release): wrapper -0.2.1 (#1788)cd4e7cfbuild(deps): bump github/codeql-action from 3.28.10 to 3.28.11 (#1786)0565863chore(release): 5.4.0 (#1781)c545d7bupdate wrapper submodule to 0.2.0, add recurse_submodules arg (#1780)Updates
goreleaser/goreleaser-actionfrom 6.1.0 to 6.3.0Release notes
Sourced from goreleaser/goreleaser-action's releases.
Commits
9c156eeci: update bake-action to v6 (#493)73c477bchore(deps): bump undici from 5.28.3 to 5.28.5 (#488)19c00a9chore(deps): bump codecov/codecov-action from 4 to 5 (#481)90a3faachore(deps): bake vendor0262998test: fixes450d3a4test: fix configs25b92abchore(deps): update semver and tool-cachebc0ac76chore(deps): update actions842e7ccfeat: update for goreleaser v2.7d28c982chore(deps): bump cross-spawn from 7.0.3 to 7.0.6 (#482)Updates
github/codeql-actionfrom 3.28.4 to 3.28.16Release notes
Sourced from github/codeql-action's releases.
... (truncated)
Changelog
Sourced from github/codeql-action's changelog.