chore(deps): update github actions monthly minor/patch by renovate[bot] · Pull Request #114 · uselagoon/lagoon-service-images

renovate · 2025-03-01T02:00:59Z

This PR contains the following updates:

Package	Type	Update	Change
actions/attest-build-provenance	action	patch	`v2.2.0` -> `v2.2.3`
docker/build-push-action	action	minor	`v6.13.0` -> `v6.15.0`
docker/login-action	action	minor	`v3.3.0` -> `v3.4.0`
docker/metadata-action	action	minor	`v5.6.1` -> `v5.7.0`
docker/setup-buildx-action	action	minor	`v3.8.0` -> `v3.10.0`
docker/setup-qemu-action	action	minor	`v3.3.0` -> `v3.6.0`
github/codeql-action	action	patch	`v3.28.8` -> `v3.28.13`
ossf/scorecard-action	action	patch	`v2.4.0` -> `v2.4.1`

Release Notes

actions/attest-build-provenance (actions/attest-build-provenance)

What's Changed

Bump predicate action from 1.1.4 to 1.1.5 by @bdehamer in https://github.com/actions/attest-build-provenance/pull/485
- Bump @actions/attest from 1.5.0 to 1.6.0 by @bdehamer in https://github.com/actions/attest-build-provenance/pull/484
  - Update buildSLSAProvenancePredicate to populate workflow.ref field from the ref claim in the OIDC token (https://github.com/actions/toolkit/pull/1969)

Full Changelog: actions/attest-build-provenance@v2.2.1...v2.2.2

`v2.2.1`

Compare Source

What's Changed

Bump undici from 5.28.4 to 5.28.5 by @dependabot in https://github.com/actions/attest-build-provenance/pull/457
Bump @octokit/request-error from 5.0.1 to 5.1.1 by @dependabot in https://github.com/actions/attest-build-provenance/pull/469
Bump @octokit/request from 8.2.0 to 8.4.1 by @dependabot in https://github.com/actions/attest-build-provenance/pull/478
Bump actions/attest from 2.2.0 to 2.2.1 by @bdehamer in https://github.com/actions/attest-build-provenance/pull/481
- Includes @actions/attest v1.6.0

Full Changelog: actions/attest-build-provenance@v2.2.0...v2.2.1

docker/build-push-action (docker/build-push-action)

`v6.15.0`

Compare Source

Bump @docker/actions-toolkit from 0.55.0 to 0.56.0 in https://github.com/docker/build-push-action/pull/1330

Full Changelog: docker/build-push-action@v6.14.0...v6.15.0

`v6.14.0`

Compare Source

Bump @docker/actions-toolkit from 0.53.0 to 0.55.0 in https://github.com/docker/build-push-action/pull/1324

Full Changelog: docker/build-push-action@v6.13.0...v6.14.0

docker/login-action (docker/login-action)

`v3.4.0`

Compare Source

Bump @actions/core from 1.10.1 to 1.11.1 in https://github.com/docker/login-action/pull/791
Bump @aws-sdk/client-ecr to 3.766.0 in https://github.com/docker/login-action/pull/789 https://github.com/docker/login-action/pull/856
Bump @aws-sdk/client-ecr-public to 3.758.0 in https://github.com/docker/login-action/pull/789 https://github.com/docker/login-action/pull/856
Bump @docker/actions-toolkit from 0.35.0 to 0.57.0 in https://github.com/docker/login-action/pull/801 https://github.com/docker/login-action/pull/806 https://github.com/docker/login-action/pull/858
Bump cross-spawn from 7.0.3 to 7.0.6 in https://github.com/docker/login-action/pull/814
Bump https-proxy-agent from 7.0.5 to 7.0.6 in https://github.com/docker/login-action/pull/823
Bump path-to-regexp from 6.2.2 to 6.3.0 in https://github.com/docker/login-action/pull/777

Full Changelog: docker/login-action@v3.3.0...v3.4.0

docker/metadata-action (docker/metadata-action)

`v5.7.0`

Compare Source

Global expressions support for labels and annotations by @crazy-max in https://github.com/docker/metadata-action/pull/489
Support disabling outputs as environment variables by @omus in https://github.com/docker/metadata-action/pull/497
Bump @docker/actions-toolkit from 0.44.0 to 0.56.0 in https://github.com/docker/metadata-action/pull/507 https://github.com/docker/metadata-action/pull/509
Bump csv-parse from 5.5.6 to 5.6.0 in https://github.com/docker/metadata-action/pull/482
Bump moment-timezone from 0.5.46 to 0.5.47 in https://github.com/docker/metadata-action/pull/501
Bump semver from 7.6.3 to 7.7.1 in https://github.com/docker/metadata-action/pull/504

Full Changelog: docker/metadata-action@v5.6.1...v5.7.0

docker/setup-buildx-action (docker/setup-buildx-action)

`v3.10.0`

Compare Source

Bump @docker/actions-toolkit from 0.54.0 to 0.56.0 in https://github.com/docker/setup-buildx-action/pull/408

Full Changelog: docker/setup-buildx-action@v3.9.0...v3.10.0

`v3.9.0`

Compare Source

Bump @docker/actions-toolkit from 0.48.0 to 0.54.0 in https://github.com/docker/setup-buildx-action/pull/402 https://github.com/docker/setup-buildx-action/pull/404

Full Changelog: docker/setup-buildx-action@v3.8.0...v3.9.0

docker/setup-qemu-action (docker/setup-qemu-action)

`v3.6.0`

Compare Source

Display binfmt version by @crazy-max in https://github.com/docker/setup-qemu-action/pull/202

Full Changelog: docker/setup-qemu-action@v3.5.0...v3.6.0

`v3.5.0`

Compare Source

Bump @docker/actions-toolkit from 0.54.0 to 0.56.0 in https://github.com/docker/setup-qemu-action/pull/205

Full Changelog: docker/setup-qemu-action@v3.4.0...v3.5.0

`v3.4.0`

Compare Source

Bump @docker/actions-toolkit from 0.49.0 to 0.54.0 in https://github.com/docker/setup-qemu-action/pull/193 https://github.com/docker/setup-qemu-action/pull/197

Full Changelog: docker/setup-qemu-action@v3.3.0...v3.4.0

github/codeql-action (github/codeql-action)

`v3.28.13`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.13 - 24 Mar 2025

No user facing changes.

See the full CHANGELOG.md for more information.

`v3.28.12`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.12 - 19 Mar 2025

Dependency caching should now cache more dependencies for Java build-mode: none extractions. This should speed up workflows and avoid inconsistent alerts in some cases.
Update default CodeQL bundle version to 2.20.7. #2810

See the full CHANGELOG.md for more information.

`v3.28.11`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.11 - 07 Mar 2025

Update default CodeQL bundle version to 2.20.6. #2793

See the full CHANGELOG.md for more information.

`v3.28.10`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.10 - 21 Feb 2025

Update default CodeQL bundle version to 2.20.5. #2772
Address an issue where the CodeQL Bundle would occasionally fail to decompress on macOS. #2768

See the full CHANGELOG.md for more information.

`v3.28.9`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.9 - 07 Feb 2025

Update default CodeQL bundle version to 2.20.4. #2753

See the full CHANGELOG.md for more information.

ossf/scorecard-action (ossf/scorecard-action)

`v2.4.1`

Compare Source

What's Changed

This update bumps the Scorecard version to the v5.1.1 release. For a complete list of changes, please refer to the v5.1.0 and v5.1.1 release notes.
Publishing results now uses half the API quota as before. The exact savings depends on the repository in question.
- use Scorecard library entrypoint instead of Cobra hooking by @spencerschrock in https://github.com/ossf/scorecard-action/pull/1423
Some errors were made into annotations to make them more visible
- Make default branch error more prominent by @jsoref in https://github.com/ossf/scorecard-action/pull/1459
There is now an optional file_mode input which controls how repository files are fetched from GitHub. The default is archive, but git produces the most accurate results for repositories with .gitattributes files at the cost of analysis speed.
- add input for specifying --file-mode by @spencerschrock in https://github.com/ossf/scorecard-action/pull/1509
The underlying container for the action is now hosted on GitHub Container Registry. There should be no functional changes.
- 🌱 publish docker images to GitHub Container Registry by @spencerschrock in https://github.com/ossf/scorecard-action/pull/1453

Docs

Installation docs update by @JeremiahAHoward in https://github.com/ossf/scorecard-action/pull/1416

New Contributors

@JeremiahAHoward made their first contribution in https://github.com/ossf/scorecard-action/pull/1416
@jsoref made their first contribution in https://github.com/ossf/scorecard-action/pull/1459
Full Changelog: ossf/scorecard-action@v2.4.0...v2.4.1

Configuration

📅 Schedule: Branch creation - "on the first day of the month" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

github-actions · 2025-03-01T02:01:18Z

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

renovate bot added the dependencies Pull requests that update a dependency file label Mar 1, 2025

renovate bot force-pushed the renovate/github-actions-monthly-minorpatch branch 2 times, most recently from e995ffe to 17d483d Compare March 7, 2025 18:18

renovate bot force-pushed the renovate/github-actions-monthly-minorpatch branch 2 times, most recently from 514cb36 to 36e670a Compare March 19, 2025 15:46

renovate bot force-pushed the renovate/github-actions-monthly-minorpatch branch 4 times, most recently from b3a1cd6 to 412b2a5 Compare March 31, 2025 05:01

chore(deps): update github actions monthly minor/patch

f636e99

renovate bot force-pushed the renovate/github-actions-monthly-minorpatch branch from 412b2a5 to f636e99 Compare March 31, 2025 05:18

renovate bot merged commit 493db59 into main Mar 31, 2025
11 checks passed

renovate bot deleted the renovate/github-actions-monthly-minorpatch branch March 31, 2025 05:21

smlx mentioned this pull request Jun 6, 2025

disable dockerhub attest smlx/lagoon-service-images#8

Closed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): update github actions monthly minor/patch#114

chore(deps): update github actions monthly minor/patch#114
renovate[bot] merged 1 commit intomainfrom
renovate/github-actions-monthly-minorpatch

renovate bot commented Mar 1, 2025 •

edited

Loading

Uh oh!

github-actions bot commented Mar 1, 2025 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate bot commented Mar 1, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

What's Changed

What's Changed

CodeQL Action Changelog

3.28.13 - 24 Mar 2025

CodeQL Action Changelog

3.28.12 - 19 Mar 2025

CodeQL Action Changelog

3.28.11 - 07 Mar 2025

CodeQL Action Changelog

3.28.10 - 21 Feb 2025

CodeQL Action Changelog

3.28.9 - 07 Feb 2025

What's Changed

Docs

New Contributors

Configuration

Uh oh!

github-actions bot commented Mar 1, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Dependency Review

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate bot commented Mar 1, 2025 •

edited

Loading

github-actions bot commented Mar 1, 2025 •

edited

Loading