Skip to content

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Sep 15, 2025

This PR contains the following updates:

Package Type Update Change Pending
actions/checkout action minor v4.2.1 -> v4.3.0
actions/create-github-app-token action patch v2.1.1 -> v2.1.4
actions/upload-artifact action minor v4.4.3 -> v4.6.2
anchore/scan-action action minor v6.2.0 -> v6.5.1
codecov/codecov-action action minor v5.1.2 -> v5.5.1
docker/build-push-action action minor v6.9.0 -> v6.18.0
docker/login-action action minor v3.5.0 -> v3.6.0
github/codeql-action action patch v4.30.7 -> v4.30.8 v4.30.9
ncipollo/release-action action minor v1.14.0 -> v1.20.0
sigstore/cosign-installer action minor v3.8.1 -> v3.10.0 v3.10.1
sigstore/cosign-installer action minor v3.7.0 -> v3.10.0 v3.10.1

Release Notes

actions/checkout (actions/checkout)

v4.3.0

Compare Source

What's Changed
New Contributors

Full Changelog: actions/checkout@v4...v4.3.0

v4.2.2

Compare Source

actions/create-github-app-token (actions/create-github-app-token)

v2.1.4

Compare Source

Bug Fixes

v2.1.3

Compare Source

Bug Fixes
  • deps: bump undici from 7.8.0 to 7.10.0 in the production-dependencies group (#​254) (f3d5ec2)

v2.1.2

Compare Source

Bug Fixes
actions/upload-artifact (actions/upload-artifact)

v4.6.2

Compare Source

What's Changed
  • Update to use artifact 2.3.2 package & prepare for new upload-artifact release by @​salmanmkc in #​685
New Contributors

Full Changelog: actions/upload-artifact@v4...v4.6.2

v4.6.1

Compare Source

What's Changed

Full Changelog: actions/upload-artifact@v4...v4.6.1

v4.6.0

Compare Source

What's Changed

Full Changelog: actions/upload-artifact@v4...v4.6.0

v4.5.0

Compare Source

What's Changed

New Contributors

Full Changelog: actions/upload-artifact@v4.4.3...v4.5.0

anchore/scan-action (anchore/scan-action)

v6.5.1

Compare Source

New in scan-action v6.5.1
  • Update Grype to v0.97.1 (#​495)

v6.5.0

Compare Source

New in scan-action v6.5.0

v6.4.0

Compare Source

New in scan-action v6.4.0
  • Update Grype to v0.95.0 (#​486)
  • chore(deps-dev): bump eslint from 9.30.0 to 9.30.1 (#​485)
  • chore(deps-dev): bump lint-staged from 16.1.0 to 16.1.2 (#​476)
  • chore(deps-dev): bump jest from 30.0.0 to 30.0.3 (#​481)
  • chore(deps-dev): bump prettier from 3.5.3 to 3.6.2 (#​483)
  • chore(deps-dev): bump eslint from 9.28.0 to 9.30.0 (#​484)

v6.3.0

Compare Source

New in scan-action v6.3.0
  • Update Grype to v0.94.0 (#​470)
codecov/codecov-action (codecov/codecov-action)

v5.5.1

Compare Source

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.5.0..v5.5.1

v5.5.0

Compare Source

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.3..v5.5.0

v5.4.3

Compare Source

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.2..v5.4.3

v5.4.2

Compare Source

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.1..v5.4.2

v5.4.1

Compare Source

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.0..v5.4.1

v5.4.0

Compare Source

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.3.1..v5.4.0

v5.3.1

Compare Source

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.3.0..v5.3.1

v5.3.0

Compare Source

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.2.0..v5.3.0

v5.2.0

Compare Source

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.1.2..v5.2.0

docker/build-push-action (docker/build-push-action)

v6.18.0

Compare Source

[!NOTE]
Build summary is now supported with Docker Build Cloud.

Full Changelog: docker/build-push-action@v6.17.0...v6.18.0

v6.17.0

Compare Source

[!NOTE]
Build record is now exported using the buildx history export command instead of the legacy export-build tool.

Full Changelog: docker/build-push-action@v6.16.0...v6.17.0

v6.16.0

Compare Source

Full Changelog: docker/build-push-action@v6.15.0...v6.16.0

v6.15.0

Compare Source

Full Changelog: docker/build-push-action@v6.14.0...v6.15.0

v6.14.0

Compare Source

Full Changelog: docker/build-push-action@v6.13.0...v6.14.0

v6.13.0

Compare Source

Full Changelog: docker/build-push-action@v6.12.0...v6.13.0

v6.12.0

Compare Source

Full Changelog: docker/build-push-action@v6.11.0...v6.12.0

v6.11.0

Compare Source

Full Changelog: docker/build-push-action@v6.10.0...v6.11.0

v6.10.0

Compare Source

Full Changelog: docker/build-push-action@v6.9.0...v6.10.0

docker/login-action (docker/login-action)

v3.6.0

Compare Source

Full Changelog: docker/login-action@v3.5.0...v3.6.0

github/codeql-action (github/codeql-action)

v4.30.8

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.30.8 - 10 Oct 2025

No user facing changes.

See the full CHANGELOG.md for more information.

ncipollo/release-action (ncipollo/release-action)

v1.20.0

Compare Source

What's Changed

Full Changelog: ncipollo/release-action@v1...v1.20.0

v1.19.2

Compare Source

What's Changed

New Contributors

Full Changelog: ncipollo/release-action@v1...v1.19.2

v1.19.1

Compare Source

Defaults immutableCreate to false if it is omitted.

Full Changelog: ncipollo/release-action@v1.19.0...v1.19.1

v1.19.0

Compare Source

What's Changed

Full Changelog: ncipollo/release-action@v1...v1.19.0

v1.18.0

Compare Source

  • Fixes #​529 Collect asset URLs into output

Full Changelog: ncipollo/release-action@v1...v1.18.0

v1.17.0

Compare Source

What's Changed

Full Changelog: ncipollo/release-action@v1...v1.17.0

v1.16.0

Compare Source

What's Changed

New Contributors

Full Changelog: ncipollo/release-action@v1...v1.16.0

v1.15.0

Compare Source

What's Changed

Add more explicit error when release list API call fails.

TLDR below - many dependency updates.

New Contributors

Full Changelog: ncipollo/release-action@v1.13.0...v1.15.0

sigstore/cosign-installer (sigstore/cosign-installer)

v3.10.0

Compare Source

What's Changed
  • Bump default Cosign to v2.6.0 in #​200

Full Changelog: sigstore/cosign-installer@v3.9.2...v3.10.0

v3.9.2

Compare Source

What's Changed
  • not fail fast and setup permissions in #​195
  • drop old unsupported versions <v2.0.0 in #​192
  • Update default to v2.5.3 in #​196

Full Changelog: sigstore/cosign-installer@v3.9.1...v3.9.2

v3.9.1

Compare Source

What's Changed

Full Changelog: sigstore/cosign-installer@v3.9.0...v3.9.1

v3.9.0

Compare Source

What's Changed

Full Changelog: sigstore/cosign-installer@v3...v3.9.0

v3.8.2

Compare Source

What's Changed
  • install cosign v2 from main in #​186

Full Changelog: sigstore/cosign-installer@v3...v3.8.2


Configuration

📅 Schedule: Branch creation - "every 2nd week starting on the 2 week of the year before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot requested review from a team as code owners September 15, 2025 02:43
Copy link

codecov bot commented Sep 15, 2025

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 7.04%. Comparing base (7cd9101) to head (6161b31).

Additional details and impacted files
@@          Coverage Diff          @@
##            main    #224   +/-   ##
=====================================
  Coverage   7.04%   7.04%           
=====================================
  Files         49      49           
  Lines       1818    1818           
  Branches      99      99           
=====================================
  Hits         128     128           
  Misses      1685    1685           
  Partials       5       5           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

mimartin12
mimartin12 previously approved these changes Sep 15, 2025
Copy link
Contributor

Logo
Checkmarx One – Scan Summary & Detailscdfc8224-b0c4-40b1-aa92-c2a96d933e55

Great job! No new security vulnerabilities introduced in this pull request

Copy link

@renovate renovate bot force-pushed the renovate/gh-minor branch 6 times, most recently from 66a5d1d to 6c980a6 Compare September 20, 2025 02:04
@renovate renovate bot force-pushed the renovate/gh-minor branch 5 times, most recently from 913547c to 5fa1a1e Compare October 8, 2025 19:31
@renovate renovate bot force-pushed the renovate/gh-minor branch from 5fa1a1e to 6161b31 Compare October 18, 2025 02:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant