Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): update github-actions #181

Merged
merged 1 commit into from
Mar 2, 2025
Merged

chore(deps): update github-actions #181

merged 1 commit into from
Mar 2, 2025

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Mar 1, 2025

This PR contains the following updates:

Package Type Update Change
actions/download-artifact action patch v4.1.8 -> v4.1.9
actions/setup-dotnet action minor v4.2.0 -> v4.3.0
actions/upload-artifact action patch v4.6.0 -> v4.6.1
docker/build-push-action action digest ca877d9 -> 471d1dc
docker/metadata-action action digest 369eb59 -> 902fa8e
docker/setup-buildx-action action digest 6524bf6 -> b5ca514
docker/setup-qemu-action action digest 53851d1 -> 2910929
github/codeql-action action patch v3.28.5 -> v3.28.10
googleapis/release-please-action action patch v4.1.3 -> v4.1.4
miracum/.github action patch v1.13.1 -> v1.13.2
ossf/scorecard-action action patch v2.4.0 -> v2.4.1

Release Notes

actions/download-artifact (actions/download-artifact)

v4.1.9

Compare Source

What's Changed
New Contributors

Full Changelog: actions/download-artifact@v4...v4.1.9

actions/setup-dotnet (actions/setup-dotnet)

v4.3.0

Compare Source

What's Changed

New Contributors

Full Changelog: actions/setup-dotnet@v4...v4.3.0

actions/upload-artifact (actions/upload-artifact)

v4.6.1

Compare Source

What's Changed

Full Changelog: actions/upload-artifact@v4...v4.6.1

github/codeql-action (github/codeql-action)

v3.28.10

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.10 - 21 Feb 2025
  • Update default CodeQL bundle version to 2.20.5. #​2772
  • Address an issue where the CodeQL Bundle would occasionally fail to decompress on macOS. #​2768

See the full CHANGELOG.md for more information.

v3.28.9

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.9 - 07 Feb 2025
  • Update default CodeQL bundle version to 2.20.4. #​2753

See the full CHANGELOG.md for more information.

v3.28.8

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.8 - 29 Jan 2025

  • Enable support for Kotlin 2.1.10 when running with CodeQL CLI v2.20.3. #​2744

See the full CHANGELOG.md for more information.

v3.28.7

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.7 - 29 Jan 2025

No user facing changes.

See the full CHANGELOG.md for more information.

v3.28.6

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.6 - 27 Jan 2025
  • Re-enable debug artifact upload for CLI versions 2.20.3 or greater. #​2726

See the full CHANGELOG.md for more information.

googleapis/release-please-action (googleapis/release-please-action)

v4.1.4

Compare Source

Bug Fixes
miracum/.github (miracum/.github)

v1.13.2

Compare Source

Miscellaneous Chores
ossf/scorecard-action (ossf/scorecard-action)

v2.4.1

Compare Source

What's Changed

Docs

New Contributors


Configuration

📅 Schedule: Branch creation - "* 0-3 1 * *" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

Copy link

github-actions bot commented Mar 1, 2025

🦙 MegaLinter status: ❌ ERROR

Descriptor Linter Files Fixed Errors Elapsed time
✅ ACTION actionlint 9 0 0.09s
✅ CSHARP csharpier 45 0 4.56s
⚠️ CSHARP roslynator 5 2 58.52s
✅ DOCKERFILE hadolint 1 0 0.12s
✅ EDITORCONFIG editorconfig-checker 107 0 1.18s
✅ JSON jsonlint 11 0 0.32s
✅ JSON prettier 11 0 0.56s
✅ MARKDOWN markdownlint 3 0 0.59s
⚠️ MARKDOWN markdown-table-formatter 3 1 0.25s
✅ PROTOBUF protolint 5 0 3.37s
✅ REPOSITORY checkov yes no 22.32s
✅ REPOSITORY dustilock yes no 0.01s
✅ REPOSITORY gitleaks yes no 1.0s
✅ REPOSITORY git_diff yes no 0.04s
✅ REPOSITORY grype yes no 19.02s
✅ REPOSITORY kics yes no 18.22s
✅ REPOSITORY secretlint yes no 1.14s
✅ REPOSITORY syft yes no 1.86s
❌ REPOSITORY trivy yes 1 9.55s
✅ REPOSITORY trivy-sbom yes no 0.3s
✅ REPOSITORY trufflehog yes no 4.56s
✅ XML xmllint 1 0 0.11s
✅ YAML prettier 24 0 0.79s
✅ YAML yamllint 24 0 1.27s

See detailed report in MegaLinter reports

You could have same capabilities but better runtime performances if you request a new MegaLinter flavor.

MegaLinter is graciously provided by OX Security

Copy link

github-actions bot commented Mar 1, 2025

Trivy image scan report

ghcr.io/miracum/vfps:pr-181 (ubuntu 24.04)

5 known vulnerabilities found (CRITICAL: 0 HIGH: 0 MEDIUM: 1 LOW: 4)

Show detailed table of vulnerabilities
Package ID Severity Installed Version Fixed Version
libc6 CVE-2025-0395 MEDIUM 2.39-0ubuntu8.3 2.39-0ubuntu8.4
libssl3t64 CVE-2024-13176 LOW 3.0.13-0ubuntu3.4 3.0.13-0ubuntu3.5
libssl3t64 CVE-2024-9143 LOW 3.0.13-0ubuntu3.4 3.0.13-0ubuntu3.5
openssl CVE-2024-13176 LOW 3.0.13-0ubuntu3.4 3.0.13-0ubuntu3.5
openssl CVE-2024-9143 LOW 3.0.13-0ubuntu3.4 3.0.13-0ubuntu3.5

No Misconfigurations found

opt/vfps/Vfps.deps.json

No Vulnerabilities found

No Misconfigurations found

usr/share/dotnet/shared/Microsoft.AspNetCore.App/9.0.1/Microsoft.AspNetCore.App.deps.json

No Vulnerabilities found

No Misconfigurations found

usr/share/dotnet/shared/Microsoft.NETCore.App/9.0.1/Microsoft.NETCore.App.deps.json

No Vulnerabilities found

No Misconfigurations found

Copy link

github-actions bot commented Mar 1, 2025

Code Coverage

Package Line Rate Branch Rate Health
Vfps.Tests 99% 100%
Vfps 94% 60%
Summary 95% (431 / 452) 66% (33 / 50)

Minimum allowed line rate is 50%


ghz run statistics

Summary:
  Count:	5000
  Total:	9.10 s
  Slowest:	556.05 ms
  Fastest:	8.29 ms
  Average:	87.90 ms
  Requests/sec:	549.52

Response time histogram:
  8.287   [1]    |
  63.063  [636]  |∎∎∎∎∎∎
  117.840 [3989] |∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎∎
  172.616 [298]  |∎∎∎
  227.393 [26]   |
  282.169 [0]    |
  336.946 [0]    |
  391.722 [0]    |
  446.499 [0]    |
  501.275 [8]    |
  556.052 [42]   |

Latency distribution:
  10 % in 59.56 ms 
  25 % in 71.85 ms 
  50 % in 81.09 ms 
  75 % in 95.15 ms 
  90 % in 109.13 ms 
  95 % in 127.07 ms 
  99 % in 192.48 ms 

Status code distribution:
  [OK]   5000 responses   

iter8 report

Experiment summary:
*******************

  Experiment completed: true
  No task failures: true
  Total number of tasks: 6
  Number of completed tasks: 6
  Number of completed loops: 1

Whether or not service level objectives (SLOs) are satisfied:
*************************************************************

  SLO Conditions                  | Satisfied
  --------------                  | ---------
  grpc/error-rate <= 0            | true
  grpc/latency/mean (msec) <= 200 | true
  grpc/latency/p99 (msec) <= 500  | true
  

Latest observed values for metrics:
***********************************

  Metric                   | value
  -------                  | -----
  grpc/error-count         | 0.00
  grpc/error-rate          | 0.00
  grpc/latency/mean (msec) | 136.00
  grpc/latency/p99 (msec)  | 397.00
  grpc/request-count       | 50000.00
  

@chgl chgl merged commit afb44d3 into master Mar 2, 2025
18 of 19 checks passed
@renovate renovate bot deleted the renovate/github-actions branch March 2, 2025 18:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant